<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2519</id>
    <title>Low: samba security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 13:40:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2131993)

Security Fix(es):

* samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2519" id="RHSA-2023:2519" type="rhsa" title="RHSA-2023:2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1615" id="CVE-2022-1615" type="cve" title="CVE-2022-1615"/>
      <reference href="https://bugzilla.redhat.com/2122649" id="2122649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2519.html" id="ALSA-2023:2519" type="self" title="ALSA-2023:2519"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_2_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_2_default</name>
        <package name="python3-samba-devel" version="4.17.5" release="102.el9" epoch="0" arch="ppc64le" src="samba-4.17.5-102.el9.src.rpm">
          <filename>python3-samba-devel-4.17.5-102.el9.ppc64le.rpm</filename>
          <sum type="sha256">1733f8827fa71ce0d01769cbd60fe0dd8949e8a7ca24c9876c3eacd4e56fae52</sum>
        </package>
        <package name="python3-samba-test" version="4.17.5" release="102.el9" epoch="0" arch="ppc64le" src="samba-4.17.5-102.el9.src.rpm">
          <filename>python3-samba-test-4.17.5-102.el9.ppc64le.rpm</filename>
          <sum type="sha256">1c488733804e66f38a235edd5311c9a1bf1de692be90984db220308ef977c0ba</sum>
        </package>
        <package name="samba-tools" version="4.17.5" release="102.el9" epoch="0" arch="ppc64le" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-tools-4.17.5-102.el9.ppc64le.rpm</filename>
          <sum type="sha256">1c5fd8d90daa166ec945f936dbf91ad9ab69fd3971443c72e5ee13b396082d30</sum>
        </package>
        <package name="samba-usershares" version="4.17.5" release="102.el9" epoch="0" arch="ppc64le" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-usershares-4.17.5-102.el9.ppc64le.rpm</filename>
          <sum type="sha256">5ec5111f908dae5b9d3f73357402b8aa0836207b2289517fe7ce81ecf0883f74</sum>
        </package>
        <package name="python3-samba-dc" version="4.17.5" release="102.el9" epoch="0" arch="ppc64le" src="samba-4.17.5-102.el9.src.rpm">
          <filename>python3-samba-dc-4.17.5-102.el9.ppc64le.rpm</filename>
          <sum type="sha256">7f33d7d5f30df532224028fd2f2d5a1a430d5a476cac39f21fe0aa2f2b936689</sum>
        </package>
        <package name="libnetapi-devel" version="4.17.5" release="102.el9" epoch="0" arch="ppc64le" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libnetapi-devel-4.17.5-102.el9.ppc64le.rpm</filename>
          <sum type="sha256">aebad8b880464e094b0b01072d2d24fefb3bd2f9958e59eb2a6b01310a8b8dac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0848</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-02-15 00:00:00"/>
    <updated date="2024-02-16 11:50:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0848" id="RHSA-2024:0848" type="rhsa" title="RHSA-2024:0848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0848.html" id="ALSA-2024:0848" type="self" title="ALSA-2024:0848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_3_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_3_default</name>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.2" release="2.el9_3" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.2-2.el9_3.ppc64le.rpm</filename>
          <sum type="sha256">1502f51c703524fe2e282f5a81f846dccd1d9637b3204b4e1548372fd452cc86</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.2" release="2.el9_3" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.2-2.el9_3.ppc64le.rpm</filename>
          <sum type="sha256">32523ab82e2096727834b13c39f3dd81b42821a2cc6d2b5e62351b9f883d6bc7</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.102" release="2.el9_3" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.102-2.el9_3.ppc64le.rpm</filename>
          <sum type="sha256">3f6cee6fb1ff30936257df5c20452ccf7cde25967b8b12ddf2bbf8b7cfc28f42</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10384</id>
    <title>Important: tuned security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-02 10:36:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tuned security update</summary>
    <description>The tuned packages provide a service that tunes system settings according to a selected profile.  

Security Fix(es):  

  * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336)
  * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10384" id="RHSA-2024:10384" type="rhsa" title="RHSA-2024:10384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52336" id="CVE-2024-52336" type="cve" title="CVE-2024-52336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52337" id="CVE-2024-52337" type="cve" title="CVE-2024-52337"/>
      <reference href="https://bugzilla.redhat.com/2324540" id="2324540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324541" id="2324541" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10384.html" id="ALSA-2024:10384" type="self" title="ALSA-2024:10384"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_5_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_5_default</name>
        <package name="tuned-profiles-realtime" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-profiles-realtime-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">3da522cd5b375c06df9a4fa8297226b17d3f192806176a2ee4382e169d4c473f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10791</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-12-04 00:00:00"/>
    <updated date="2024-12-05 14:23:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10791" id="RHSA-2024:10791" type="rhsa" title="RHSA-2024:10791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10791.html" id="ALSA-2024:10791" type="self" title="ALSA-2024:10791"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_5_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_5_default</name>
        <package name="postgresql-test-rpm-macros" version="13.18" release="1.el9_5" epoch="0" arch="noarch" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-test-rpm-macros-13.18-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">8e7546673e90d6d2cf20b6956f17bd1e184001032394a5fb82dfcd5ef8e622ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1310</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 12:45:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1310" id="RHSA-2024:1310" type="rhsa" title="RHSA-2024:1310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1310.html" id="ALSA-2024:1310" type="self" title="ALSA-2024:1310"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_3_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_3_default</name>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.3-2.el9_3.ppc64le.rpm</filename>
          <sum type="sha256">1aadd86fc8d595c20df8f4d624aa8159e6cf2e98918a74369ac8f051e97daa66</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.103" release="2.el9_3" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.103-2.el9_3.ppc64le.rpm</filename>
          <sum type="sha256">2a5097805157ae57db2538185e9b25ee34ef140e4b93292fb6d3782140bd329f</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.3-2.el9_3.ppc64le.rpm</filename>
          <sum type="sha256">7b12d627d956749c915ef297dff726a11889e6a2c3296b0b123e055332d2fc20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2456</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

* grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)
* grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)
* grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2456" id="RHSA-2024:2456" type="rhsa" title="RHSA-2024:2456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4692" id="CVE-2023-4692" type="cve" title="CVE-2023-4692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4693" id="CVE-2023-4693" type="cve" title="CVE-2023-4693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1048" id="CVE-2024-1048" type="cve" title="CVE-2024-1048"/>
      <reference href="https://bugzilla.redhat.com/2236613" id="2236613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238343" id="2238343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256827" id="2256827" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2456.html" id="ALSA-2024:2456" type="self" title="ALSA-2024:2456"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_4_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_4_default</name>
        <package name="grub2-pc-modules" version="2.06" release="77.el9.alma.1" epoch="1" arch="noarch" src="grub2-2.06-77.el9.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-77.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">1b0e6216aa285ff2b09fde2a5789e456445a8e73d0ed0a93df0949d84fc9139c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2525</id>
    <title>Moderate: mingw-pixman security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:06:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mingw-pixman security update</summary>
    <description>Pixman is a pixel manipulation library for the X Window System and Cairo.

Security Fix(es):

* pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2525" id="RHSA-2024:2525" type="rhsa" title="RHSA-2024:2525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44638" id="CVE-2022-44638" type="cve" title="CVE-2022-44638"/>
      <reference href="https://bugzilla.redhat.com/2139988" id="2139988" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2525.html" id="ALSA-2024:2525" type="self" title="ALSA-2024:2525"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_4_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_4_default</name>
        <package name="mingw32-pixman" version="0.42.2" release="3.el9" epoch="0" arch="noarch" src="mingw-pixman-0.42.2-3.el9.src.rpm">
          <filename>mingw32-pixman-0.42.2-3.el9.noarch.rpm</filename>
          <sum type="sha256">07603021a28859b36aeb48c4aa15c5b96743dca186a9a556f8c044dac95fcd40</sum>
        </package>
        <package name="mingw64-pixman" version="0.42.2" release="3.el9" epoch="0" arch="noarch" src="mingw-pixman-0.42.2-3.el9.src.rpm">
          <filename>mingw64-pixman-0.42.2-3.el9.noarch.rpm</filename>
          <sum type="sha256">c2fbf33dbc77425cba74765e158b8483b31db258b2cb1a90921a590dcad78825</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2528</id>
    <title>Low: mingw-glib2 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:08:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>mingw-glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499)
* glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611)
* glib: Timeout in fuzz_variant_text (CVE-2023-32636)
* glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2528" id="RHSA-2024:2528" type="rhsa" title="RHSA-2024:2528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29499" id="CVE-2023-29499" type="cve" title="CVE-2023-29499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32611" id="CVE-2023-32611" type="cve" title="CVE-2023-32611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32636" id="CVE-2023-32636" type="cve" title="CVE-2023-32636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32665" id="CVE-2023-32665" type="cve" title="CVE-2023-32665"/>
      <reference href="https://bugzilla.redhat.com/2211827" id="2211827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211828" id="2211828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211829" id="2211829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211833" id="2211833" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2528.html" id="ALSA-2024:2528" type="self" title="ALSA-2024:2528"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_4_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_4_default</name>
        <package name="mingw64-glib2-static" version="2.78.0" release="1.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.0-1.el9.src.rpm">
          <filename>mingw64-glib2-static-2.78.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">206020896cc3cf20421ed70865dbd9343ffff98194f87c6476e42df03c6eee2d</sum>
        </package>
        <package name="mingw64-glib2" version="2.78.0" release="1.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.0-1.el9.src.rpm">
          <filename>mingw64-glib2-2.78.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">839339f8fd55dc4c85f77df9117e90bd5bd6fbff613ab09d91ce207d269b3d10</sum>
        </package>
        <package name="mingw32-glib2" version="2.78.0" release="1.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.0-1.el9.src.rpm">
          <filename>mingw32-glib2-2.78.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">cff64d89762143bbf988c66a8e8ac3d7ed2220331371a1261ea6f7fd78d3aa8f</sum>
        </package>
        <package name="mingw32-glib2-static" version="2.78.0" release="1.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.0-1.el9.src.rpm">
          <filename>mingw32-glib2-static-2.78.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">e2fd3c66e44f228a14f348af913e612cef7c65e18358d7dcc0e1f4f74eef3e4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2842</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-05-14 00:00:00"/>
    <updated date="2024-05-16 07:52:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2842" id="RHSA-2024:2842" type="rhsa" title="RHSA-2024:2842"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2842.html" id="ALSA-2024:2842" type="self" title="ALSA-2024:2842"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_4_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_4_default</name>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.5-1.el9_4.ppc64le.rpm</filename>
          <sum type="sha256">33bb6d4d82c3d19a3c102ae1d8957a038f72cec03a629581dd7d550b928bb5fd</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.5-1.el9_4.ppc64le.rpm</filename>
          <sum type="sha256">6a39b11c76b7a33c56c73c28498775717c35a9cae2733e4e88f93f653487d6eb</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.105" release="1.el9_4" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.105-1.el9_4.ppc64le.rpm</filename>
          <sum type="sha256">d483aa78febb3aa657e4a6ec1803e8b31b44b0d3a50902e6f1e6a7785710e445</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5583</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 13:02:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: bility to trust not validated macro signatures removed in high security mode (CVE-2024-6472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5583" id="RHSA-2024:5583" type="rhsa" title="RHSA-2024:5583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6472" id="CVE-2024-6472" type="cve" title="CVE-2024-6472"/>
      <reference href="https://bugzilla.redhat.com/2302866" id="2302866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5583.html" id="ALSA-2024:5583" type="self" title="ALSA-2024:5583"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_4_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_4_default</name>
        <package name="libreoffice-x11" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-x11-7.1.8.1-14.el9_4.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">577fcca7c90e65fafa7ae1d978d9205fff1d651ce656f8c2f46710594d72b5e2</sum>
        </package>
        <package name="libreoffice-base" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-base-7.1.8.1-14.el9_4.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">6bafe7b1b2283bcaefc1bf17d315f4553cd1ed4ca8c83f3db00526ef46de07a2</sum>
        </package>
        <package name="libreoffice" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-7.1.8.1-14.el9_4.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">795d875ce722c029e82755adb927f3e0cb80a0debe3071d2700f2d37002ba848</sum>
        </package>
        <package name="libreoffice-sdk-doc" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-sdk-doc-7.1.8.1-14.el9_4.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">7a24af4ec3e1d6f3d89e29e0bf15b6d73effa864a6124d597108da0ecdbeab3a</sum>
        </package>
        <package name="libreoffice-math" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-math-7.1.8.1-14.el9_4.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">9e17e8823119bd50a302d0d8d2276e65197c831d609b7500f51ffa84ce421107</sum>
        </package>
        <package name="libreoffice-emailmerge" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-emailmerge-7.1.8.1-14.el9_4.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">9ecc2fc707e8a0d4ba17d6401efe768a10a9fc71daffc46a7c47ede3c0940634</sum>
        </package>
        <package name="libreoffice-draw" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-draw-7.1.8.1-14.el9_4.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">b452531d4105f2abf47e2de5765cccfdeedd65db27f1acec68e9c58b7de39689</sum>
        </package>
        <package name="libreoffice-sdk" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-sdk-7.1.8.1-14.el9_4.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">dbe2c5ee8ae03babb78524f85d732d1cf39dc71126bb7b6e403f744ef5927b34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9401</id>
    <title>Moderate: microcode_ctl security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>microcode_ctl security update</summary>
    <description>The microcode_ctl packages provide microcode updates for Intel and AMD processors.  

Security Fix(es):  

  * kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655)
  * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
  * kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575)
  * kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368)
  * kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490)
  * intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733)
  * intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9401" id="RHSA-2024:9401" type="rhsa" title="RHSA-2024:9401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22655" id="CVE-2023-22655" type="cve" title="CVE-2023-22655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28746" id="CVE-2023-28746" type="cve" title="CVE-2023-28746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38575" id="CVE-2023-38575" type="cve" title="CVE-2023-38575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39368" id="CVE-2023-39368" type="cve" title="CVE-2023-39368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43490" id="CVE-2023-43490" type="cve" title="CVE-2023-43490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45733" id="CVE-2023-45733" type="cve" title="CVE-2023-45733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46103" id="CVE-2023-46103" type="cve" title="CVE-2023-46103"/>
      <reference href="https://bugzilla.redhat.com/2270698" id="2270698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270700" id="2270700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270701" id="2270701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270703" id="2270703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270704" id="2270704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292296" id="2292296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292300" id="2292300" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9401.html" id="ALSA-2024:9401" type="self" title="ALSA-2024:9401"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_4_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_4_default</name>
        <package name="microcode_ctl" version="20240910" release="1.el9_5" epoch="4" arch="noarch" src="microcode_ctl-20240910-1.el9_5.src.rpm">
          <filename>microcode_ctl-20240910-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">8c62be3b9b3b71c9b4cfda517ca9f93f184cb644316a144729859fd6193216a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11463</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2025-07-21 00:00:00"/>
    <updated date="2025-07-22 13:33:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11463" id="RHSA-2025:11463" type="rhsa" title="RHSA-2025:11463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11463.html" id="ALSA-2025:11463" type="self" title="ALSA-2025:11463"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_6_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_6_default</name>
        <package name="fence-agents-lpar" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-lpar-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">18628cafc5ba3d22490a6740d1955aba878c3ddd5ea221d99cf99a815b0aebcb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1742</id>
    <title>Important: postgresql security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:11:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1742" id="RHSA-2025:1742" type="rhsa" title="RHSA-2025:1742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1742.html" id="ALSA-2025:1742" type="self" title="ALSA-2025:1742"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_5_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_5_default</name>
        <package name="postgresql-test-rpm-macros" version="13.20" release="1.el9_5" epoch="0" arch="noarch" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-test-rpm-macros-13.20-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">167bf6673ce0e88f70019e49d0937948c321511b6c62d9f015003e4796450bab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20532</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:18:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write. (CVE-2024-45777)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20532" id="RHSA-2025:20532" type="rhsa" title="RHSA-2025:20532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45777" id="CVE-2024-45777" type="cve" title="CVE-2024-45777"/>
      <reference href="https://bugzilla.redhat.com/2346343" id="2346343" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20532.html" id="ALSA-2025:20532" type="self" title="ALSA-2025:20532"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_7_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_7_default</name>
        <package name="grub2-pc-modules" version="2.06" release="114.el9_7.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-114.el9_7.alma.1.noarch.rpm</filename>
          <sum type="sha256">bbb561d57e7a44ab17215b52a0aefbfcc28b895d1f31c680c0249ba5d4058521</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2867</id>
    <title>Important: grub2 security update</title>
    <issued date="2025-03-17 00:00:00"/>
    <updated date="2025-03-21 12:17:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: net: Out-of-bounds write in grub_net_search_config_file() (CVE-2025-0624)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2867" id="RHSA-2025:2867" type="rhsa" title="RHSA-2025:2867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0624" id="CVE-2025-0624" type="cve" title="CVE-2025-0624"/>
      <reference href="https://bugzilla.redhat.com/2346112" id="2346112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2867.html" id="ALSA-2025:2867" type="self" title="ALSA-2025:2867"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_5_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_5_default</name>
        <package name="grub2-pc-modules" version="2.06" release="94.el9_5.alma.1" epoch="1" arch="noarch" src="grub2-2.06-94.el9_5.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-94.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">0f74115758e957bee223401d6917e78a8ead8c693314e0887d7a8198446b4dd4</sum>
        </package>
        <package name="grub2-ppc64le-modules" version="2.06" release="94.el9_5.alma.1" epoch="1" arch="noarch" src="grub2-2.06-94.el9_5.alma.1.src.rpm">
          <filename>grub2-ppc64le-modules-2.06-94.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">1a9a4a1379668ed0d7f554b4e2a8cbd2b954a08b4041aa5602f8aa7cd13d7fd7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:6990</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:49:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: reader/jpeg: Heap OOB Write during JPEG parsing (CVE-2024-45774)
  * grub2: commands/extcmd: Missing check for failed allocation (CVE-2024-45775)
  * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776)
  * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781)
  * grub2: fs/hfs+: refcount can be decremented twice (CVE-2024-45783)
  * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622)
  * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks (CVE-2025-0677)
  * grub2: read: Integer overflow may lead to out-of-bounds write (CVE-2025-0690)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:6990" id="RHSA-2025:6990" type="rhsa" title="RHSA-2025:6990"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45774" id="CVE-2024-45774" type="cve" title="CVE-2024-45774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45775" id="CVE-2024-45775" type="cve" title="CVE-2024-45775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45776" id="CVE-2024-45776" type="cve" title="CVE-2024-45776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45781" id="CVE-2024-45781" type="cve" title="CVE-2024-45781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45783" id="CVE-2024-45783" type="cve" title="CVE-2024-45783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0622" id="CVE-2025-0622" type="cve" title="CVE-2025-0622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0677" id="CVE-2025-0677" type="cve" title="CVE-2025-0677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0690" id="CVE-2025-0690" type="cve" title="CVE-2025-0690"/>
      <reference href="https://bugzilla.redhat.com/2337461" id="2337461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337481" id="2337481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339182" id="2339182" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345857" id="2345857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345863" id="2345863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345865" id="2345865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346116" id="2346116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346123" id="2346123" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-6990.html" id="ALSA-2025:6990" type="self" title="ALSA-2025:6990"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_6_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_6_default</name>
        <package name="grub2-pc-modules" version="2.06" release="104.el9_6.alma.1" epoch="1" arch="noarch" src="grub2-2.06-104.el9_6.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-104.el9_6.alma.1.noarch.rpm</filename>
          <sum type="sha256">ef2c38771e51097d02737e395037f0b09108048252a159a94d4fb2eaa64c5b08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7043</id>
    <title>Moderate: microcode_ctl security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:47:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>microcode_ctl security update</summary>
    <description>The microcode_ctl packages provide microcode updates for Intel and AMD processors.  

Security Fix(es):  

  * microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047)
  * microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279)
  * microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7043" id="RHSA-2025:7043" type="rhsa" title="RHSA-2025:7043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28047" id="CVE-2024-28047" type="cve" title="CVE-2024-28047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31157" id="CVE-2024-31157" type="cve" title="CVE-2024-31157"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39279" id="CVE-2024-39279" type="cve" title="CVE-2024-39279"/>
      <reference href="https://bugzilla.redhat.com/2345363" id="2345363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345381" id="2345381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345421" id="2345421" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7043.html" id="ALSA-2025:7043" type="self" title="ALSA-2025:7043"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_6_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_6_default</name>
        <package name="microcode_ctl" version="20250211" release="1.el9_6" epoch="4" arch="noarch" src="microcode_ctl-20250211-1.el9_6.src.rpm">
          <filename>microcode_ctl-20250211-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">e9ee981e2cb12b3e11104458751afab3d3ee42d4d6fa5188724375669751d321</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:A005</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-20 00:00:00"/>
    <updated date="2025-06-20 15:05:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API).

Security Fix(es):

* libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-A005.html" id="ALSA-2025:A005" type="self" title="ALSA-2025:A005"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_6_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_6_default</name>
        <package name="libblockdev-mpath-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-mpath-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">0d3f04cbba904bae68ec69fded9ce9506539564da87087e0bf1a8e09223aa5c9</sum>
        </package>
        <package name="libblockdev-crypto-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-crypto-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">101da6caa2959887f1be5eeac7dedc6635bfefa8176b713dd1472dfe818a4a77</sum>
        </package>
        <package name="libblockdev-mdraid-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-mdraid-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">2e32b0da5f8ca77fa62daa73483d9248846e17f1e913271f0dc88f8d10808855</sum>
        </package>
        <package name="libblockdev-swap-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-swap-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">5a0073ca8b2280248585fcd01465816bb32f58edcebfdef5bf9fd811fe4c548a</sum>
        </package>
        <package name="libblockdev-lvm-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-lvm-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">7aa2a5837dac21483fc4fc03d54ae3778eed2a09fbd3373f1818e203f6f2a349</sum>
        </package>
        <package name="libblockdev-nvdimm-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-nvdimm-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">7dfec39b8909a2256b780a458583dd57b1a12dbcbc3a7af8e61bd6b540863bd6</sum>
        </package>
        <package name="libblockdev-fs-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-fs-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">8032e9282fd1aa6074d0b0f45813da70b0e719ec78220e8a66c2bac438f198c6</sum>
        </package>
        <package name="libblockdev-loop-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-loop-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">819dcb82061cf8d353899a80cbe661bf05874e3cd7fa0b4d4e4a776325810f6b</sum>
        </package>
        <package name="libblockdev-part-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-part-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">8dafaf86ae2cb4ab6829ad539e2287a32090a9482ace0113b797af83fcb038a6</sum>
        </package>
        <package name="libblockdev-lvm-dbus-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-lvm-dbus-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">94d9464db083afc309e16ece45eca16114dca89edcb2d46a492f1662d27fba84</sum>
        </package>
        <package name="libblockdev-nvme-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-nvme-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">aa407e5f923ae5d9fb84f6bedd398e67b2d3c00e15b954a28ccc26e995fac7f1</sum>
        </package>
        <package name="libblockdev-dm-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-dm-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">ac22a5fe657bad640150e1ff508f4e151bdd00ea3a80fdf4b57890b9f99089b2</sum>
        </package>
        <package name="libblockdev-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">ceefd600ee37d938f1734d6211c1b1942c5a3e68c504b1a8259691039cd33c5e</sum>
        </package>
        <package name="libblockdev-kbd-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-kbd-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">d7a3b23e8c4f05a5d5dc635ef2c57db8995f78e5534d1902094243c51e8405ef</sum>
        </package>
        <package name="libblockdev-utils-devel" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="ppc64le" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-utils-devel-2.28-13.el9_6.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">d9ac8f6dbb0194d20622df5d721dce75b1068fd1caf89db0f80f308f4bc44891</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0933</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-28 14:34:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0933" id="RHSA-2026:0933" type="rhsa" title="RHSA-2026:0933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0933.html" id="ALSA-2026:0933" type="self" title="ALSA-2026:0933"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_7_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_7_default</name>
        <package name="java-25-openjdk-crypto-adapter-fastdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-fastdebug-25.0.2.0.10-1.el9.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">15f2059304717e5b8bffe5832fd973f2bb33fa6b33f2896f4abf9addeb69b069</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-slowdebug-25.0.2.0.10-1.el9.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">a82ab89c57a86cdd97dc28d2ff5f16cbd1b32ebf531a7c2b9a80725361e51443</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-25.0.2.0.10-1.el9.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">ec162673fed0e206851279f15055e2f0f2888251c6330a528ac177c65f253751</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11360</id>
    <title>Important: LibRaw security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 08:47:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>LibRaw security update</summary>
    <description>LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).  

Security Fix(es):  

  * LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450)
  * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11360" id="RHSA-2026:11360" type="rhsa" title="RHSA-2026:11360"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21413" id="CVE-2026-21413" type="cve" title="CVE-2026-21413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24450" id="CVE-2026-24450" type="cve" title="CVE-2026-24450"/>
      <reference href="https://bugzilla.redhat.com/2455925" id="2455925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455929" id="2455929" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11360.html" id="ALSA-2026:11360" type="self" title="ALSA-2026:11360"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_7_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_7_default</name>
        <package name="LibRaw-devel" version="0.21.1" release="2.el9_7" epoch="0" arch="ppc64le" src="LibRaw-0.21.1-2.el9_7.src.rpm">
          <filename>LibRaw-devel-0.21.1-2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">049e3951cc743506bbfef5b9099d5f686033d1e6472b77bb887ce5751d0461bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18705</id>
    <title>Moderate: mingw-glib2 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:29:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mingw-glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18705" id="RHSA-2026:18705" type="rhsa" title="RHSA-2026:18705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18705.html" id="ALSA-2026:18705" type="self" title="ALSA-2026:18705"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_8_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_8_default</name>
        <package name="mingw32-glib2-static" version="2.78.6" release="3.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.6-3.el9.src.rpm">
          <filename>mingw32-glib2-static-2.78.6-3.el9.noarch.rpm</filename>
          <sum type="sha256">427345ab6bb853ed43bbeaeee61e3fe8ac7f3b3e5043ed079af88d2c7d6951ca</sum>
        </package>
        <package name="mingw32-glib2" version="2.78.6" release="3.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.6-3.el9.src.rpm">
          <filename>mingw32-glib2-2.78.6-3.el9.noarch.rpm</filename>
          <sum type="sha256">8be95294a8c5b9b9bdcce963edc08c58882242f8a0fb25d3960d1e90ec8f98c0</sum>
        </package>
        <package name="mingw64-glib2-static" version="2.78.6" release="3.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.6-3.el9.src.rpm">
          <filename>mingw64-glib2-static-2.78.6-3.el9.noarch.rpm</filename>
          <sum type="sha256">9b06851a94f4f4658c2bc2d356be455a7ddd0fb44da48a832592b39c84ae4fba</sum>
        </package>
        <package name="mingw64-glib2" version="2.78.6" release="3.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.6-3.el9.src.rpm">
          <filename>mingw64-glib2-2.78.6-3.el9.noarch.rpm</filename>
          <sum type="sha256">a6b316346aa4440804f86f107147dcdd1a26e9a03c2525509d47114de9ada502</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19357</id>
    <title>Important: krb5 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356)
  * krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19357" id="RHSA-2026:19357" type="rhsa" title="RHSA-2026:19357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40355" id="CVE-2026-40355" type="cve" title="CVE-2026-40355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40356" id="CVE-2026-40356" type="cve" title="CVE-2026-40356"/>
      <reference href="https://bugzilla.redhat.com/2463368" id="2463368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463370" id="2463370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19357.html" id="ALSA-2026:19357" type="self" title="ALSA-2026:19357"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_8_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_8_default</name>
        <package name="krb5-xrealmauthz" version="1.21.1" release="10.el9_8" epoch="0" arch="ppc64le" src="krb5-1.21.1-10.el9_8.src.rpm">
          <filename>krb5-xrealmauthz-1.21.1-10.el9_8.ppc64le.rpm</filename>
          <sum type="sha256">c3e5832cc3492707f66e0e55f91d5a6f56e0782fb2ee3621ab9285761068e777</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28290</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-07-13 09:53:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.  

Security Fix(es):  

  * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28290" id="RHSA-2026:28290" type="rhsa" title="RHSA-2026:28290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4430" id="CVE-2026-4430" type="cve" title="CVE-2026-4430"/>
      <reference href="https://bugzilla.redhat.com/2467657" id="2467657" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28290.html" id="ALSA-2026:28290" type="self" title="ALSA-2026:28290"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_8_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_8_default</name>
        <package name="libreoffice-base" version="7.1.8.1" release="15.el9_8.1.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.1.alma.1.src.rpm">
          <filename>libreoffice-base-7.1.8.1-15.el9_8.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">1ceb329baa5891550f8af52d2b63b23234fdf0645faaed5a4ca9ae99a1b0d049</sum>
        </package>
        <package name="libreoffice" version="7.1.8.1" release="15.el9_8.1.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.1.alma.1.src.rpm">
          <filename>libreoffice-7.1.8.1-15.el9_8.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">484051135867e8cbbc26eaae77a02628d69ce54791b8b281587de73d20eb8be1</sum>
        </package>
        <package name="libreoffice-math" version="7.1.8.1" release="15.el9_8.1.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.1.alma.1.src.rpm">
          <filename>libreoffice-math-7.1.8.1-15.el9_8.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">a5c2cce1a0fda0ea03597fb620855c784dcc9bef803dd3afef047428afebfa95</sum>
        </package>
        <package name="libreoffice-emailmerge" version="7.1.8.1" release="15.el9_8.1.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.1.alma.1.src.rpm">
          <filename>libreoffice-emailmerge-7.1.8.1-15.el9_8.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">a8536ecd8e454691d013b4f56d445f8fd0eb92d39621e7db436447e8f978b763</sum>
        </package>
        <package name="libreoffice-sdk-doc" version="7.1.8.1" release="15.el9_8.1.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.1.alma.1.src.rpm">
          <filename>libreoffice-sdk-doc-7.1.8.1-15.el9_8.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">e82846c7b562a26a20b0b13da0685f1091bb863e899cd8c0f0328c9a77f68533</sum>
        </package>
        <package name="libreoffice-sdk" version="7.1.8.1" release="15.el9_8.1.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.1.alma.1.src.rpm">
          <filename>libreoffice-sdk-7.1.8.1-15.el9_8.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">ed8844b1f7117eb0fed1a77d9c3ccce8bc5ed0114600f42c7197876426452c46</sum>
        </package>
        <package name="libreoffice-draw" version="7.1.8.1" release="15.el9_8.1.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.1.alma.1.src.rpm">
          <filename>libreoffice-draw-7.1.8.1-15.el9_8.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">f59a7a3b85bde263a61fd531ef652543bd26998ca495bb62d59e00f1fd21a50b</sum>
        </package>
        <package name="libreoffice-x11" version="7.1.8.1" release="15.el9_8.1.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.1.alma.1.src.rpm">
          <filename>libreoffice-x11-7.1.8.1-15.el9_8.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">fc75f8e9359e98780683e81895124f6ae9600f60fb0017c873fb0feee23d34f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36832</id>
    <title>Important: libreoffice security update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-16 09:21:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.  

Security Fix(es):  

  * libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation (CVE-2026-8357)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36832" id="RHSA-2026:36832" type="rhsa" title="RHSA-2026:36832"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8357" id="CVE-2026-8357" type="cve" title="CVE-2026-8357"/>
      <reference href="https://bugzilla.redhat.com/2488964" id="2488964" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36832.html" id="ALSA-2026:36832" type="self" title="ALSA-2026:36832"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_8_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_8_default</name>
        <package name="libreoffice-base" version="7.1.8.1" release="15.el9_8.2.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.2.alma.1.src.rpm">
          <filename>libreoffice-base-7.1.8.1-15.el9_8.2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">070ed123bfe377f16932438396e086db9c5a9b5af31600c3643488a85b3f03d7</sum>
        </package>
        <package name="libreoffice-sdk-doc" version="7.1.8.1" release="15.el9_8.2.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.2.alma.1.src.rpm">
          <filename>libreoffice-sdk-doc-7.1.8.1-15.el9_8.2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">22dd1a8f60cf956e37744d6336cd28c13e136679ca4776ba2e3c524449f98b88</sum>
        </package>
        <package name="libreoffice-sdk" version="7.1.8.1" release="15.el9_8.2.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.2.alma.1.src.rpm">
          <filename>libreoffice-sdk-7.1.8.1-15.el9_8.2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">3ab3a71f6e3bbf9e74b551ed3630fc03bb8a775e1fb3d659bd112e79520cdf88</sum>
        </package>
        <package name="libreoffice-math" version="7.1.8.1" release="15.el9_8.2.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.2.alma.1.src.rpm">
          <filename>libreoffice-math-7.1.8.1-15.el9_8.2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">49323f9396a96679bfe2cc1672e0cb9106df4e2b02612f50439f9f2e61f146d5</sum>
        </package>
        <package name="libreoffice" version="7.1.8.1" release="15.el9_8.2.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.2.alma.1.src.rpm">
          <filename>libreoffice-7.1.8.1-15.el9_8.2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">5cb01dd1549edba252bbfb8ad1e8506aef42d6b92b6b2f931fde3eef9b605791</sum>
        </package>
        <package name="libreoffice-x11" version="7.1.8.1" release="15.el9_8.2.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.2.alma.1.src.rpm">
          <filename>libreoffice-x11-7.1.8.1-15.el9_8.2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">99438abfa245605a0db83db25833ac419226bca7a62a2a93b2c4fe197b1e3d46</sum>
        </package>
        <package name="libreoffice-draw" version="7.1.8.1" release="15.el9_8.2.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.2.alma.1.src.rpm">
          <filename>libreoffice-draw-7.1.8.1-15.el9_8.2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">c3e327f944beec59028880aebb9c875c34991357d95e25f0ecb5a04cf23dfdb3</sum>
        </package>
        <package name="libreoffice-emailmerge" version="7.1.8.1" release="15.el9_8.2.alma.1" epoch="1" arch="ppc64le" src="libreoffice-7.1.8.1-15.el9_8.2.alma.1.src.rpm">
          <filename>libreoffice-emailmerge-7.1.8.1-15.el9_8.2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">fbecefec303a67fb21fc926e46a366ee3a73ea8699b3ace09961a5fe34c88093</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38497</id>
    <title>Important: gegl04 security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-08-12 12:02:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gegl04 security update</summary>
    <description>GEGL (Generic Graphics Library) is a graph-based image processing framework.  

Security Fix(es):  

  * gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing (CVE-2026-2050)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38497" id="RHSA-2026:38497" type="rhsa" title="RHSA-2026:38497"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2050" id="CVE-2026-2050" type="cve" title="CVE-2026-2050"/>
      <reference href="https://bugzilla.redhat.com/2492593" id="2492593" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-38497.html" id="ALSA-2026:38497" type="self" title="ALSA-2026:38497"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_8_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_8_default</name>
        <package name="gegl04-devel" version="0.4.62" release="1.el9_8.1" epoch="0" arch="ppc64le" src="gegl04-0.4.62-1.el9_8.1.src.rpm">
          <filename>gegl04-devel-0.4.62-1.el9_8.1.ppc64le.rpm</filename>
          <sum type="sha256">4e8e1a2f2ba38a15706f0c37ead4f446b5ead9633eef8b4cfdc6936828d40351</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4760</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-19 14:40:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: Missing unregister call for gettext command may lead to use-after-free (CVE-2025-61662)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4760" id="RHSA-2026:4760" type="rhsa" title="RHSA-2026:4760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61662" id="CVE-2025-61662" type="cve" title="CVE-2025-61662"/>
      <reference href="https://bugzilla.redhat.com/2414683" id="2414683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4760.html" id="ALSA-2026:4760" type="self" title="ALSA-2026:4760"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_7_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_7_default</name>
        <package name="grub2-pc-modules" version="2.06" release="114.el9_7.1.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.1.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.06-114.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">07f3c4d11cfb3c9c18de75619310901be03ba88b91860f6af22eee5435cd9eb2</sum>
        </package>
        <package name="grub2-ppc64le-modules" version="2.06" release="114.el9_7.1.alma.1" epoch="1" arch="noarch" src="grub2-2.06-114.el9_7.1.alma.1.src.rpm">
          <filename>grub2-ppc64le-modules-2.06-114.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">f13ce2aa16994df090d24fe542a11bf1c5539259be2a796e549043bab49b5613</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:51105</id>
    <title>Important: LibRaw security update</title>
    <issued date="2026-08-06 00:00:00"/>
    <updated date="2026-08-07 15:25:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>LibRaw security update</summary>
    <description>LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).  

Security Fix(es):  

  * LibRaw: LibRaw: Buffer Overflow vulnerability in image processing (CVE-2026-51235)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:51105" id="RHSA-2026:51105" type="rhsa" title="RHSA-2026:51105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-51235" id="CVE-2026-51235" type="cve" title="CVE-2026-51235"/>
      <reference href="https://bugzilla.redhat.com/2507594" id="2507594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-51105.html" id="ALSA-2026:51105" type="self" title="ALSA-2026:51105"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_8_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_8_default</name>
        <package name="LibRaw-devel" version="0.21.1" release="2.el9_8.1" epoch="0" arch="ppc64le" src="LibRaw-0.21.1-2.el9_8.1.src.rpm">
          <filename>LibRaw-devel-0.21.1-2.el9_8.1.ppc64le.rpm</filename>
          <sum type="sha256">65d54cc9ea24dcdf3bfb587bfb9afac85a12c9b43469ac1199c14bb96a94ef76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:62170</id>
    <title>Important: gegl04 security update</title>
    <issued date="2026-09-01 00:00:00"/>
    <updated date="2026-09-04 06:39:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gegl04 security update</summary>
    <description>GEGL (Generic Graphics Library) is a graph-based image processing framework.  

Security Fix(es):  

  * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:62170" id="RHSA-2026:62170" type="rhsa" title="RHSA-2026:62170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-18300" id="CVE-2026-18300" type="cve" title="CVE-2026-18300"/>
      <reference href="https://bugzilla.redhat.com/2520587" id="2520587" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-62170.html" id="ALSA-2026:62170" type="self" title="ALSA-2026:62170"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_8_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_8_default</name>
        <package name="gegl04-devel" version="0.4.62" release="1.el9_8.2" epoch="0" arch="ppc64le" src="gegl04-0.4.62-1.el9_8.2.src.rpm">
          <filename>gegl04-devel-0.4.62-1.el9_8.2.ppc64le.rpm</filename>
          <sum type="sha256">8b7f69e7bd9a43078a545ea2e52a85f881d2b527e886eec0819296f11e444fd6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9693</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-04-22 00:00:00"/>
    <updated date="2026-04-24 09:58:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improved Arena allocations (CVE-2026-22008)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


This release also updates a number of third-party libraries included in the JDK. The libraries themselves are affected by the following CVEs, but this is not a statement that the JDK itself is affected:  

  * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
  * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
  * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)


Bug Fix(es):  

  * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169939, AlmaLinux-169937)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9693" id="RHSA-2026:9693" type="rhsa" title="RHSA-2026:9693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22008" id="CVE-2026-22008" type="cve" title="CVE-2026-22008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26740" id="CVE-2026-26740" type="cve" title="CVE-2026-26740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9693.html" id="ALSA-2026:9693" type="self" title="ALSA-2026:9693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_7_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_7_default</name>
        <package name="java-25-openjdk-crypto-adapter-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">1015ff3d3889c952d5bacd3163a4056b784cbfaede00dff5d23ad900b320cf25</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">105f44b9e151cf179b5250d6103c41954386f1c236e3c8be26f956b15699f8c2</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-fastdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-fastdebug-25.0.3.0.9-1.el9.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">f5536375e255c8838dbc3065e45cd1391e78f565123ac8b2a3da456ab13226a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A002</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:09:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A002.html" id="ALSA-2026:A002" type="self" title="ALSA-2026:A002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_7_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_7_default</name>
        <package name="kernel-debug-modules-internal" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-debug-modules-internal-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">01dde6363522bf80413a0d76da41e2b9f7e105c3b6e40b4d91fa56a5deaddd4c</sum>
        </package>
        <package name="kernel-modules-partner" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-modules-partner-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">1154f8f77fc2f307cf9ab06fda2d2c3a4de5288c8127e7a435dcf0c7783bfd9b</sum>
        </package>
        <package name="kernel-kvm-modules-internal" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-modules-internal-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">15aca2a18a0a2cd7201e8e5f266ed720992b8af72bfc536b21f53b3f9c0658dd</sum>
        </package>
        <package name="kernel-selftests-internal" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-selftests-internal-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">1d2b42154c646c8cf7a435f47eb7da847fc8138309e099f78763151e6870bb30</sum>
        </package>
        <package name="kernel-kvm-debug-devel" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-devel-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">36bd53f279692e6aa21dab2114d4fff84989df31acbedde980710444b07fccb8</sum>
        </package>
        <package name="kernel-kvm-debug-modules" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">4ff7d8a7a3af1a8412db226549048f8a9c41d14979da35d8b9f2ac80641458ba</sum>
        </package>
        <package name="kernel-kvm-debug-modules-core" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-core-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">69f4e50ff3834295cfc7b1d67046d4ea17b2bc2bba4a8785df0195ac39e597b4</sum>
        </package>
        <package name="kernel-kvm-debug-modules-internal" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-internal-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">6b3cd374d683b59d530b51471830349c6c5836bdc7709150edc7757b848d1dd8</sum>
        </package>
        <package name="kernel-kvm-debug" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">6e5af7206df9abf97390f9c47a6ad77119a76894a71907f78b8d535d1e8668ea</sum>
        </package>
        <package name="kernel-kvm-debug-devel-matched" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-devel-matched-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">71ca6c3ba603207700c1d1a9807d5737a6f54e7f2ff826b4e2b06bc76e32fe19</sum>
        </package>
        <package name="kernel-modules-internal" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-modules-internal-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">810f23385bca17fc46b832c8596cc3a39bb2ef214ab94d07e057cca4be0f9086</sum>
        </package>
        <package name="kernel-debug-modules-partner" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-debug-modules-partner-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">acba6d2cbda6c48110caf032a8af3eaf78fe9ebcbc221286480b5800d320a67d</sum>
        </package>
        <package name="kernel-kvm-debug-modules-extra" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-extra-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">b4ec0d009ff17bccd9d79ac8e61b3e55d05c33a21899f0c8501233fe4c026f01</sum>
        </package>
        <package name="kernel-kvm-modules-partner" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-modules-partner-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">d3ae32ae602a31bb78e893e252e9cecd4211461016b5be653960d8644b210218</sum>
        </package>
        <package name="kernel-kvm-debug-modules-partner" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-partner-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">d528bf65d390201dffb840062008edd8f9f683a5c988f43fdd3c4ccd0ab1e9d4</sum>
        </package>
        <package name="libperf-devel" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>libperf-devel-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">e06a2492dc83654129b68a5800881c2a68b1e0a761323d0e50541bf70c1af1a6</sum>
        </package>
        <package name="kernel-kvm-debug-core" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-kvm-debug-core-5.14.0-611.49.2.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">e751347391cfa6d33f40ea0a62f547a5b67a7e8da2a2e8f11ba7b67fdc7ac101</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A005</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-08 00:00:00"/>
    <updated date="2026-05-08 14:26:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2467771" id="show_bug.cgi?id=2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A005.html" id="ALSA-2026:A005" type="self" title="ALSA-2026:A005"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_7_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_7_default</name>
        <package name="kernel-kvm-modules-partner" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-modules-partner-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">0203fde433c2384606be63b67cbb47132789fbfcd210c44029b021f27f66e4be</sum>
        </package>
        <package name="kernel-modules-internal" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-modules-internal-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">0bfdebf3944124f574cf7f0268971f3e5e233f557f3b6c7752a3f0e46888eaab</sum>
        </package>
        <package name="kernel-kvm-debug" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">0d3d767cc32322392707c20af00c0556d635f75a4e88476899d39e6077966de3</sum>
        </package>
        <package name="kernel-kvm-modules-internal" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-modules-internal-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">1582c332f9b27affbc13c1e6c44cb2298a87c07af216a31a94dba80610b21d2b</sum>
        </package>
        <package name="libperf-devel" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>libperf-devel-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">5009ed29427e55041a4ba3b0e326567edc9884ac2bc248768e90189f732aa0ed</sum>
        </package>
        <package name="kernel-kvm-debug-modules-partner" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-partner-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">6ffddbc3a34d06208a2c99eb0bd5625f7a6cc3847066cdf0a4ecb7203eb3ac03</sum>
        </package>
        <package name="kernel-modules-partner" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-modules-partner-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">a875cbbdaf84c42b469c1d6ab45d4a79493c49c28433fc6df4ccaf15bdf22a24</sum>
        </package>
        <package name="kernel-kvm-debug-devel" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-devel-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">b0a83f89b9f034d74f86fb7c59d7b05ce3531ad89d2b8fd8ab816c27fad234e7</sum>
        </package>
        <package name="kernel-kvm-debug-devel-matched" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-devel-matched-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">b1edb9ad7eb440798167881b062620414680a891a9b14067e1f946ff87d46750</sum>
        </package>
        <package name="kernel-debug-modules-partner" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-debug-modules-partner-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">c3acd69f24fed4a80f1343e475999859288a7b4f91c606fcf6bf8d9e33583ebf</sum>
        </package>
        <package name="kernel-kvm-debug-modules-internal" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-internal-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">c8b4107bd0a699ac4637c662b5214a24ebc88950417d81d40aa4082edf6bcd1a</sum>
        </package>
        <package name="kernel-debug-modules-internal" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-debug-modules-internal-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">c9d4661bca9f69487ef24c999619e391fa763bc405f30c24414e22e9ae2a6536</sum>
        </package>
        <package name="kernel-kvm-debug-core" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-core-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">d2d0572045ab3a71003a7b914aaabc9581c48abfd012c54902680fad7b34c901</sum>
        </package>
        <package name="kernel-kvm-debug-modules" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">d616efc0650c1bf7e4788ac53f3406ea0a2edba68b8dcabc1f7d86a8dcdfde86</sum>
        </package>
        <package name="kernel-selftests-internal" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-selftests-internal-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">e088e3b37853866252e831f0e5db5456c0d8f6f9f8b3175d4ddf106d2e500d9f</sum>
        </package>
        <package name="kernel-kvm-debug-modules-core" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-core-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">eaf378c5e2ca503f8e0fd195cbf40fa007d2476071615b309a9220eeaac332e8</sum>
        </package>
        <package name="kernel-kvm-debug-modules-extra" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-extra-5.14.0-611.54.3.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">fcdec967b28b0a503fc5ee7c9c7f052dc76a4a4d2b6c4530fac6600945b55fae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A009</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-16 00:00:00"/>
    <updated date="2026-05-16 13:09:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):
  * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300)
  * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477015" id="show_bug.cgi?id=2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477802" id="show_bug.cgi?id=2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A009.html" id="ALSA-2026:A009" type="self" title="ALSA-2026:A009"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-ppc64le-devel-rpms__9_7_default">
        <name>almalinux-9-for-ppc64le-devel-rpms__9_7_default</name>
        <package name="kernel-kvm-debug-modules" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">0c46c734e5a71594bb7b586a61474001560a1d14765c855678179993ee909338</sum>
        </package>
        <package name="kernel-kvm-debug-devel" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-devel-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">18da6574d4dc857aee68e128d7d26b99c9052b2967578b6f9ca009f082fed4b7</sum>
        </package>
        <package name="kernel-kvm-debug-modules-internal" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-internal-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">1e039473d24b4565051d86c21d0d5ac32773e49fa7468701db3f28edee7f28b5</sum>
        </package>
        <package name="kernel-debug-modules-internal" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-debug-modules-internal-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">52465b34f4ce6d1227f66daed5f93e2a5c496ba60a6f3580795d8d9b6e22961f</sum>
        </package>
        <package name="kernel-kvm-debug-devel-matched" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-devel-matched-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">54fdfadfcee510e2ac0171f57a53db1edd3396a6ab26e2dcd038102fce073459</sum>
        </package>
        <package name="kernel-kvm-debug-core" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-core-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">6cf768f898ffffbfb8aec6632352641a29bbd80bacd9fd0030e74023c233bc96</sum>
        </package>
        <package name="kernel-modules-partner" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-modules-partner-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">833600e444525109e9712dd0f90dccf81b70c74ea192c75ffbd25f73a08e12a5</sum>
        </package>
        <package name="libperf-devel" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>libperf-devel-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">844a305962432443922fec4638576f4ae80980dc9d00d83724b9e5f95788e35c</sum>
        </package>
        <package name="kernel-debug-modules-partner" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-debug-modules-partner-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">93d50c95a3867598476b4fe9a603a025bb014789c4293b9aaa122e7cc7985abd</sum>
        </package>
        <package name="kernel-kvm-modules-partner" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-modules-partner-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">987c30f07fe75e678de805018bbb506e5ad123e67905f3546a39c9e371a8a232</sum>
        </package>
        <package name="kernel-kvm-debug-modules-partner" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-partner-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">a48dcd96807882af4e04968cdc9eb6c810d786960bb1e6a1a032e41fd26962f8</sum>
        </package>
        <package name="kernel-kvm-debug-modules-extra" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-extra-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">a54b7aede78a828bff848851c6198b516b2a124f3b9ae666f1ef79f21cb01a36</sum>
        </package>
        <package name="kernel-kvm-debug" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">d1b5bc6b170d915c16e22933800f47dcb3c13b9d9802eda5837f5827cea973c5</sum>
        </package>
        <package name="kernel-kvm-debug-modules-core" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-debug-modules-core-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">edb9ca26efe9a4a0a6b258fa396e4732c6f07df45b467f483fdbd0d133055bd2</sum>
        </package>
        <package name="kernel-modules-internal" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-modules-internal-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">ef1def8d8626e1184b275ef1a8b212e4e51c878422ca73e4c42669448aa8ca0f</sum>
        </package>
        <package name="kernel-selftests-internal" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-selftests-internal-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">f877b6d84cd1e0cbabbf41f90442bbe52217b2630678cf4ee9a66d5d5db2b16c</sum>
        </package>
        <package name="kernel-kvm-modules-internal" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="ppc64le" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-kvm-modules-internal-5.14.0-611.54.6.el9_7.ppc64le.rpm</filename>
          <sum type="sha256">fb0107f61e2e033c664613310a7f3c99dfeadfacac052e873b898cffaa3a3500</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>