<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3087</id>
    <title>Important: mysql:8.0 security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-22 09:17:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql:8.0 security, bug fix, and enhancement update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)

Security Fix(es):

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3087" id="RHSA-2023:3087" type="rhsa" title="RHSA-2023:3087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21594" id="CVE-2022-21594" type="cve" title="CVE-2022-21594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21599" id="CVE-2022-21599" type="cve" title="CVE-2022-21599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21604" id="CVE-2022-21604" type="cve" title="CVE-2022-21604"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21608" id="CVE-2022-21608" type="cve" title="CVE-2022-21608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21611" id="CVE-2022-21611" type="cve" title="CVE-2022-21611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21617" id="CVE-2022-21617" type="cve" title="CVE-2022-21617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21625" id="CVE-2022-21625" type="cve" title="CVE-2022-21625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21632" id="CVE-2022-21632" type="cve" title="CVE-2022-21632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21633" id="CVE-2022-21633" type="cve" title="CVE-2022-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21637" id="CVE-2022-21637" type="cve" title="CVE-2022-21637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21640" id="CVE-2022-21640" type="cve" title="CVE-2022-21640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39400" id="CVE-2022-39400" type="cve" title="CVE-2022-39400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39408" id="CVE-2022-39408" type="cve" title="CVE-2022-39408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39410" id="CVE-2022-39410" type="cve" title="CVE-2022-39410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21836" id="CVE-2023-21836" type="cve" title="CVE-2023-21836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21863" id="CVE-2023-21863" type="cve" title="CVE-2023-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21864" id="CVE-2023-21864" type="cve" title="CVE-2023-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21865" id="CVE-2023-21865" type="cve" title="CVE-2023-21865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21867" id="CVE-2023-21867" type="cve" title="CVE-2023-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21868" id="CVE-2023-21868" type="cve" title="CVE-2023-21868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21869" id="CVE-2023-21869" type="cve" title="CVE-2023-21869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21870" id="CVE-2023-21870" type="cve" title="CVE-2023-21870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21871" id="CVE-2023-21871" type="cve" title="CVE-2023-21871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21873" id="CVE-2023-21873" type="cve" title="CVE-2023-21873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21874" id="CVE-2023-21874" type="cve" title="CVE-2023-21874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21875" id="CVE-2023-21875" type="cve" title="CVE-2023-21875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21876" id="CVE-2023-21876" type="cve" title="CVE-2023-21876"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21877" id="CVE-2023-21877" type="cve" title="CVE-2023-21877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21878" id="CVE-2023-21878" type="cve" title="CVE-2023-21878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21879" id="CVE-2023-21879" type="cve" title="CVE-2023-21879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21880" id="CVE-2023-21880" type="cve" title="CVE-2023-21880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21881" id="CVE-2023-21881" type="cve" title="CVE-2023-21881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21882" id="CVE-2023-21882" type="cve" title="CVE-2023-21882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21883" id="CVE-2023-21883" type="cve" title="CVE-2023-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21887" id="CVE-2023-21887" type="cve" title="CVE-2023-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21912" id="CVE-2023-21912" type="cve" title="CVE-2023-21912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21917" id="CVE-2023-21917" type="cve" title="CVE-2023-21917"/>
      <reference href="https://bugzilla.redhat.com/2142861" id="2142861" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142863" id="2142863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142865" id="2142865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142868" id="2142868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142869" id="2142869" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142870" id="2142870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142871" id="2142871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142872" id="2142872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142873" id="2142873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142875" id="2142875" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142877" id="2142877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142879" id="2142879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142880" id="2142880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142881" id="2142881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162268" id="2162268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162270" id="2162270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162271" id="2162271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162272" id="2162272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162274" id="2162274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162275" id="2162275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162276" id="2162276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162277" id="2162277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162278" id="2162278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162280" id="2162280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162281" id="2162281" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162282" id="2162282" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162283" id="2162283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162284" id="2162284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162285" id="2162285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162286" id="2162286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162287" id="2162287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162288" id="2162288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162289" id="2162289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162290" id="2162290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162291" id="2162291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188110" id="2188110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188112" id="2188112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3087.html" id="ALSA-2023:3087" type="self" title="ALSA-2023:3087"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_8_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_8_default</name>
        <module name="mysql" stream="8.0" version="8060020221025181128" context="9edba152" arch="s390x"/>
        <package name="mecab-devel" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">95fbafd6a495d411511dcfabd6b0f0746e44e7a7bcc70330024e0022229ee5d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6933</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 09:49:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Empty entry in Java class path (CVE-2022-38745)
* libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950)
* libreoffice: Arbitrary file write (CVE-2023-1183)
* libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6933" id="RHSA-2023:6933" type="rhsa" title="RHSA-2023:6933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38745" id="CVE-2022-38745" type="cve" title="CVE-2022-38745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0950" id="CVE-2023-0950" type="cve" title="CVE-2023-0950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1183" id="CVE-2023-1183" type="cve" title="CVE-2023-1183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2255" id="CVE-2023-2255" type="cve" title="CVE-2023-2255"/>
      <reference href="https://bugzilla.redhat.com/2182044" id="2182044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2208506" id="2208506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210185" id="2210185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210186" id="2210186" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6933.html" id="ALSA-2023:6933" type="self" title="ALSA-2023:6933"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_9_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_9_default</name>
        <package name="autocorr-fa" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-fa-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">05c485654a9e6d8c693a65dab2989c957a611f1361fbf17e6639fa143ed4ec8f</sum>
        </package>
        <package name="autocorr-vi" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-vi-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">076af5a9bbf6064ee7312be5ee950d47c77a1905bb85bb849181998052fce1c8</sum>
        </package>
        <package name="autocorr-da" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-da-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">0adf59db893ce7b72e90abcc581824b3582a40157b0b5c11d02192ba9eabe31b</sum>
        </package>
        <package name="autocorr-ru" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-ru-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">1275ba47144db64a7e7332dc7e894b2726811868bbc0913f7d9170536bb77385</sum>
        </package>
        <package name="autocorr-bg" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-bg-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">144cf03a3aef2d67489581707a82098a3c6f1775a2b444b2afac11208aeb35b5</sum>
        </package>
        <package name="autocorr-sl" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-sl-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">1775041fb319349324feebbb79dd8336a85e0c9d754e90cb4a29838fb8faf8a3</sum>
        </package>
        <package name="autocorr-tr" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-tr-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">1a2b41a223dca97680acd5fc078fbfcca55c9038603a8bbeaa9341fa559b093b</sum>
        </package>
        <package name="autocorr-nl" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-nl-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">1bc1b616c65a2a062536bc75a94971e399326aa6274a19521b3ba29c5118da5c</sum>
        </package>
        <package name="autocorr-zh" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-zh-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">346f3bcf817ea5d5a481114561a06660b797a62f9367f5332705edda93e57e00</sum>
        </package>
        <package name="autocorr-de" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-de-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">4d1622dcd4ad1a4ed0a8a234182f4a5b9bbd30436f5d754bd51edb2e2140dd00</sum>
        </package>
        <package name="autocorr-pt" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-pt-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">51a16404c173d1e98e4f0d059dd747368c94a5a5eb482d3f69bc2f0d8699aa1f</sum>
        </package>
        <package name="autocorr-ro" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-ro-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">53665faace477ae56bb2d0126d1fc94e3968bd8517c6c48b4502798c4c1fd3b7</sum>
        </package>
        <package name="autocorr-sr" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-sr-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">54bf74535e662b640e3e61f86884cd456089cb69cb87efe9a65075319e872f7d</sum>
        </package>
        <package name="autocorr-sk" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-sk-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">5f3734364590ef0c9410daf9efb92706f1f919ffcb183a5de0558b7b22efebec</sum>
        </package>
        <package name="autocorr-es" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-es-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">6634973546248c23236deb56abd650a35b927c3b0dc8a63d21071e48abeed556</sum>
        </package>
        <package name="autocorr-ko" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-ko-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">66efe34b10f28a99a3691e891bf2f065a6208fff9be422a74d58db700a9c865b</sum>
        </package>
        <package name="autocorr-lt" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-lt-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">7fc1704cff662fa1033bde79bfeaefe56bc97e5dc9c98998fe7c978d90339650</sum>
        </package>
        <package name="autocorr-pl" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-pl-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">8eef7b6596ae389d795eee94da2327a850fe2c5873b8f393c973b7f7ed97ddce</sum>
        </package>
        <package name="autocorr-hu" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-hu-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">a88a28cff495a3189acc3e8a50134bca74fe15ae3f6f79176b67fa2eae61413d</sum>
        </package>
        <package name="autocorr-lb" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-lb-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">b026cb8a830eb6ea12a2d9ff845ee169e4d6e4d3511e012d3ed367ef52ae3faf</sum>
        </package>
        <package name="autocorr-it" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-it-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">b088dde35f30aad9eeb05653ca021cd75388572ba5e501b987592e2a8f754ff1</sum>
        </package>
        <package name="autocorr-ga" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-ga-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">b0965ea54887ddcec9bb8f2375e954626ad0a0c9a629946fb514d52094740dd1</sum>
        </package>
        <package name="autocorr-ca" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-ca-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">c7c58489bc9d01a1c1e7077814d842079eefe94061ba808287a848b633a3dee0</sum>
        </package>
        <package name="autocorr-is" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-is-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">cd8a972dfb6807858340f938f261bff2fa8e0a5b7c12da795f264dad1268ca8f</sum>
        </package>
        <package name="autocorr-mn" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-mn-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">ce1933a0612f7ee60921f68ce9903e846f443b17d36f8357c6eddfaf2dca56be</sum>
        </package>
        <package name="autocorr-hr" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-hr-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">ceaaa49abc6d7c4f03db8d45c38430d9b19d900a4ce44085a51aac9e9415149f</sum>
        </package>
        <package name="autocorr-cs" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-cs-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">deb7f3e5eaf1c78bbca7a1e1b7532b52776c8c66e97bbdb9e290c99501ea51b2</sum>
        </package>
        <package name="autocorr-sv" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-sv-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">e2f818f472d654b83cb82b0895f0e60cd049b2380afc1de1f5c9ce42e7ed1f34</sum>
        </package>
        <package name="autocorr-ja" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-ja-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">e4fb18d0ff6defc65468a25b78be87f90b1f245dda72739c8b56d474e3bca2f1</sum>
        </package>
        <package name="autocorr-fi" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-fi-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">e8e203c377c73640f4fc15d794a5b888892e83b677bcc1e18dceb7d683dc04ca</sum>
        </package>
        <package name="autocorr-fr" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-fr-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">f116a713532b1938651504ae5731005d84018acddb154f53326579664a1a04fa</sum>
        </package>
        <package name="autocorr-af" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-af-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">fe0147632856d65dca53495bb3af85d6cf3d95b1a6ba20829094925b24323104</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0133</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-16 16:29:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)
* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0133" id="RHSA-2024:0133" type="rhsa" title="RHSA-2024:0133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37920" id="CVE-2023-37920" type="cve" title="CVE-2023-37920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://bugzilla.redhat.com/2226586" id="2226586" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0133.html" id="ALSA-2024:0133" type="self" title="ALSA-2024:0133"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_9_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_9_default</name>
        <package name="fence-agents-zvm" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-zvm-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">18353da3e67927a86700fe33e87ca2f57528b87a59adec0061228d0ca4bf49d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0827</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-02-15 00:00:00"/>
    <updated date="2024-02-16 10:14:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0827" id="RHSA-2024:0827" type="rhsa" title="RHSA-2024:0827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0827.html" id="ALSA-2024:0827" type="self" title="ALSA-2024:0827"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_9_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_9_default</name>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.102" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.102-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">2f7b7c11f9054e969d3fc516db4e8cf876e8071af1dc11d4accf191b927d9fa9</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">aac580bfb7ed9926d671c4f336218c7e1c2b58316d218c75c41960f96e919646</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">b215f74602787e979fe1a84299c90a28c615ef7d8016d213e7fe4b8589947c8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1311</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 09:41:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1311" id="RHSA-2024:1311" type="rhsa" title="RHSA-2024:1311"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1311.html" id="ALSA-2024:1311" type="self" title="ALSA-2024:1311"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_9_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_9_default</name>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.103" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.103-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">7cfeccd74994a69593ddc49adbcd305890cbc8b0b95abe96c99b5006e027e14e</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">f3fbee76c619ac92614a6aa7492d8bcca61abf17c56dda012d458b9cf7921dc6</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">fe4d3de51a3c4630658069028c43329fa6ca7bed9c313ec62c820ce2f4fbf41e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2968</id>
    <title>Moderate: fence-agents security and bug fix update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:45:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security and bug fix update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)
* pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323)
* jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2968" id="RHSA-2024:2968" type="rhsa" title="RHSA-2024:2968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45803" id="CVE-2023-45803" type="cve" title="CVE-2023-45803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52323" id="CVE-2023-52323" type="cve" title="CVE-2023-52323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22195" id="CVE-2024-22195" type="cve" title="CVE-2024-22195"/>
      <reference href="https://bugzilla.redhat.com/2246840" id="2246840" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257028" id="2257028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257854" id="2257854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2968.html" id="ALSA-2024:2968" type="self" title="ALSA-2024:2968"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_9_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_9_default</name>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">136828317eba081b48657d31f951b44b0280d3ea3bfdd737a0e811ea398732ab</sum>
        </package>
        <package name="fence-agents-aws" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-aws-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">4c6736c06d44a17575fd6f648aca2e1c2a2e820891c1654702a2f4a191dfa30e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3345</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:41:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3345" id="RHSA-2024:3345" type="rhsa" title="RHSA-2024:3345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3345.html" id="ALSA-2024:3345" type="self" title="ALSA-2024:3345"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_9_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_9_default</name>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b28c26a9936b52bfde07d3abd76435da17d2edf22ac1459f377b714cadb59fc3</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.105" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.105-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f8ff08e1e3da8bb214524fd4290d74b8a7f6c70ce023194c5c092494bbc41c53</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fa61d9483313c83481652d9ad93115366e740a7ec6f0026c9e010d1d163d2a13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4451</id>
    <title>Important: dotnet8.0 security update</title>
    <issued date="2024-07-10 00:00:00"/>
    <updated date="2024-07-11 08:43:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  8.0.107 and Runtime 8.0.7.

Security Fix(es):

* dotnet: DoS in System.Text.Json (CVE-2024-30105)
* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)
* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4451" id="RHSA-2024:4451" type="rhsa" title="RHSA-2024:4451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30105" id="CVE-2024-30105" type="cve" title="CVE-2024-30105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35264" id="CVE-2024-35264" type="cve" title="CVE-2024-35264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295320" id="2295320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295321" id="2295321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4451.html" id="ALSA-2024:4451" type="self" title="ALSA-2024:4451"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">03232a9eedd09e36529ee936df8383ff186e038d79df700d92f59dcb25121a59</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d64a09fdb271d385eec56ce38910afb056e48b479e6412b5709f6ec3a53d268c</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">dc636cadc0e9a4c0d7ba59ba85f64534416a65b9af1a77c6af583bf0b5189a88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5337</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:19:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8.

Security Fix(es):

* dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5337" id="RHSA-2024:5337" type="rhsa" title="RHSA-2024:5337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38167" id="CVE-2024-38167" type="cve" title="CVE-2024-38167"/>
      <reference href="https://bugzilla.redhat.com/2302428" id="2302428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5337.html" id="ALSA-2024:5337" type="self" title="ALSA-2024:5337"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">904ad6c6ff2b6a48022c3ad281aa532deb2e3c533c700c25d1f7f5a411405cb6</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9105ca2ae980bbb8c6e6a76f759b3c680cbe652ebb99d4ddd06497473df89cfa</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">dabd6e222260ecc48a07b0cc266ced7553eb7288957832269f5172d5ac496fa7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6309</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2024-09-04 00:00:00"/>
    <updated date="2024-09-05 06:36:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)
* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6309" id="RHSA-2024:6309" type="rhsa" title="RHSA-2024:6309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37891" id="CVE-2024-37891" type="cve" title="CVE-2024-37891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2292788" id="2292788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6309.html" id="ALSA-2024:6309" type="self" title="ALSA-2024:6309"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">205135ff58c1d58c0b02beba0ac3663756dbc2b5d826f0bbf04919c400432431</sum>
        </package>
        <package name="fence-agents-aws" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-aws-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">56c91a605a010fe43299ecf2596888ed7d641c849997fd647ca3942cc420407d</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">d17e0ee4261933fbac3765cb871589142a177e2c1805f0d717366387945f6002</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7868</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-10 11:20:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10.

Security Fix(es):

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7868" id="RHSA-2024:7868" type="rhsa" title="RHSA-2024:7868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38229" id="CVE-2024-38229" type="cve" title="CVE-2024-38229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2316161" id="2316161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7868.html" id="ALSA-2024:7868" type="self" title="ALSA-2024:7868"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">403abf12b218454f40494d017afdbc0aef657bc9557df13a756006a1c78e4f36</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b0fbcffb0390aad67fdf8b5fdc13be48ea8666a30229056f12b158493693d0a2</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e4a660987e30f3898d2d79260e70944239faabdd3b9ebec3edb05f3469251ce1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0381</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:10:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.112 and .NET Runtime 8.0.1.12.  

Security Fix(es):  

  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0381" id="RHSA-2025:0381" type="rhsa" title="RHSA-2025:0381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21172" id="CVE-2025-21172" type="cve" title="CVE-2025-21172"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21173" id="CVE-2025-21173" type="cve" title="CVE-2025-21173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21176" id="CVE-2025-21176" type="cve" title="CVE-2025-21176"/>
      <reference href="https://bugzilla.redhat.com/2337893" id="2337893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337926" id="2337926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337927" id="2337927" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0381.html" id="ALSA-2025:0381" type="self" title="ALSA-2025:0381"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0f65ce2bf2ad4a950e464a494b3eb3b7a136797961b9b32dca56c2a14c46e206</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.112" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.112-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">86123e0553e9959abc19fb17a971d764e40f1b978a87f4ff80c00c2c7367fb0b</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e3af14403912f94c3556e51871b2c12dbaa5e603590a1d121be86bc00901dce3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1301</id>
    <title>Moderate: gcc security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-17 07:23:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc security update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1301" id="RHSA-2025:1301" type="rhsa" title="RHSA-2025:1301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1301.html" id="ALSA-2025:1301" type="self" title="ALSA-2025:1301"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="libgfortran-static" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>libgfortran-static-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">48634ecb12e4feddd83b23f98de6d56bb6e0e9dd0abe7479d9b34cf9304c73eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1338</id>
    <title>Moderate: gcc-toolset-14-gcc security update</title>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-18 12:49:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-14-gcc security update</summary>
    <description>The gcc-toolset-14-gcc package contains the GNU Compiler Collection version 14.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1338" id="RHSA-2025:1338" type="rhsa" title="RHSA-2025:1338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1338.html" id="ALSA-2025:1338" type="self" title="ALSA-2025:1338"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="liblsan" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>liblsan-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">976ef54db29f9066f092cfedd88d18da0dff70fd2e0e5ed423b04acbc26f0f3e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14750</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2025-08-27 00:00:00"/>
    <updated date="2025-08-28 07:13:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14750" id="RHSA-2025:14750" type="rhsa" title="RHSA-2025:14750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47081" id="CVE-2024-47081" type="cve" title="CVE-2024-47081"/>
      <reference href="https://bugzilla.redhat.com/2371272" id="2371272" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14750.html" id="ALSA-2025:14750" type="self" title="ALSA-2025:14750"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">9ba2ff782b9909e2497195536939e9c669364b9f0f1cb40d4000d41fdf546c44</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">fc56eb26c22649ed78abc0d49041c719fdcfdadc165696bf094d1b100e107123</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1611</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-02-17 00:00:00"/>
    <updated date="2025-02-18 12:07:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
  * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
  * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1611" id="RHSA-2025:1611" type="rhsa" title="RHSA-2025:1611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22150" id="CVE-2025-22150" type="cve" title="CVE-2025-22150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23083" id="CVE-2025-23083" type="cve" title="CVE-2025-23083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23085" id="CVE-2025-23085" type="cve" title="CVE-2025-23085"/>
      <reference href="https://bugzilla.redhat.com/2339176" id="2339176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339392" id="2339392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342618" id="2342618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1611.html" id="ALSA-2025:1611" type="self" title="ALSA-2025:1611"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020250218064500" context="9c84b808" arch="s390x"/>
        <package name="nodejs-libs" version="22.13.1" release="1.module_el8.10.0+3961+6a788e57" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-libs-22.13.1-1.module_el8.10.0+3961+6a788e57.s390x.rpm</filename>
          <sum type="sha256">03e2ef2c2b37dbdf108f2eba6b2ceee0e531cf16ab5f57037c4d6827f9e1e4a7</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.13.1.1.module_el8.10.0+3961+6a788e57" epoch="3" arch="s390x" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.13.1.1.module_el8.10.0+3961+6a788e57.s390x.rpm</filename>
          <sum type="sha256">18da70306ebe2d4c3124decb7dec6879b3912d8fbb99f7d6b47c52c263d1f14b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17129</id>
    <title>Important: idm:DL1 security update</title>
    <issued date="2025-10-01 00:00:00"/>
    <updated date="2025-10-03 08:43:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>idm:DL1 security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.   

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17129" id="RHSA-2025:17129" type="rhsa" title="RHSA-2025:17129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17129.html" id="ALSA-2025:17129" type="self" title="ALSA-2025:17129"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="idm" stream="DL1" version="8100020250826100220" context="93c20af6" arch="s390x"/>
        <package name="ipa-server-dns" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-dns-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">0f57023cd77d9cd95f79e3121536dc6a64df775ade5ca0ed77f9c43b599c416e</sum>
        </package>
        <package name="ipa-server-common" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">210fef6fec21a273b8d6a11892f44fbeced6920170464f2cb9d0bec91af4f941</sum>
        </package>
        <package name="ipa-healthcheck" version="0.12" release="6.module_el8.10.0+4036+84b152d9" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.src.rpm">
          <filename>ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm</filename>
          <sum type="sha256">59f7474a67cbc965bd0c360b4385395b89d1a12cf7015fcd6b16abe44ce85b0b</sum>
        </package>
        <package name="ipa-server" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">648eef591b00d1647d4f545dbbe87e800bae3760f8d27f09f7e015e33f6a86b3</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-trust-ad-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">84ea2eeb388adea2deeec54b26882362c2e1714842a48888faeb571ab8bf4591</sum>
        </package>
        <package name="python3-ipaserver" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipaserver-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">9ab0a89ea1497eb8d96dc65bee67dab6c3998e1cd5ab6f639fc3a30b12952f51</sum>
        </package>
        <package name="python3-ipatests" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipatests-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">e2f5abd08f35fc62e83bab9d1b3eac088705001c32a0106e31ab98a09c12205b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21140</id>
    <title>Important: idm:DL1 security update</title>
    <issued date="2025-11-12 00:00:00"/>
    <updated date="2025-11-20 09:12:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>idm:DL1 security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.   

Security Fix(es):  

  * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088)
  * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21140" id="RHSA-2025:21140" type="rhsa" title="RHSA-2025:21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59088" id="CVE-2025-59088" type="cve" title="CVE-2025-59088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59089" id="CVE-2025-59089" type="cve" title="CVE-2025-59089"/>
      <reference href="https://bugzilla.redhat.com/2393955" id="2393955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393958" id="2393958" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21140.html" id="ALSA-2025:21140" type="self" title="ALSA-2025:21140"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="idm" stream="DL1" version="8100020250826100220" context="93c20af6" arch="s390x"/>
        <package name="ipa-server-dns" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-dns-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">0f57023cd77d9cd95f79e3121536dc6a64df775ade5ca0ed77f9c43b599c416e</sum>
        </package>
        <package name="ipa-server-common" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">210fef6fec21a273b8d6a11892f44fbeced6920170464f2cb9d0bec91af4f941</sum>
        </package>
        <package name="ipa-healthcheck" version="0.12" release="6.module_el8.10.0+4036+84b152d9" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.src.rpm">
          <filename>ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm</filename>
          <sum type="sha256">59f7474a67cbc965bd0c360b4385395b89d1a12cf7015fcd6b16abe44ce85b0b</sum>
        </package>
        <package name="ipa-server" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">648eef591b00d1647d4f545dbbe87e800bae3760f8d27f09f7e015e33f6a86b3</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-trust-ad-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">84ea2eeb388adea2deeec54b26882362c2e1714842a48888faeb571ab8bf4591</sum>
        </package>
        <package name="python3-ipaserver" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipaserver-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">9ab0a89ea1497eb8d96dc65bee67dab6c3998e1cd5ab6f639fc3a30b12952f51</sum>
        </package>
        <package name="python3-ipatests" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipatests-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">e2f5abd08f35fc62e83bab9d1b3eac088705001c32a0106e31ab98a09c12205b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22668</id>
    <title>Moderate: go-toolset:rhel8 security update</title>
    <issued date="2025-12-03 00:00:00"/>
    <updated date="2025-12-05 08:01:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906)
  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22668" id="RHSA-2025:22668" type="rhsa" title="RHSA-2025:22668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47906" id="CVE-2025-47906" type="cve" title="CVE-2025-47906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2396546" id="2396546" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22668.html" id="ALSA-2025:22668" type="self" title="ALSA-2025:22668"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020251204103636" context="9edba152" arch="s390x"/>
        <package name="golang-race" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="s390x" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>golang-race-1.25.3-2.module_el8.10.0+4074+24330916.s390x.rpm</filename>
          <sum type="sha256">df0416011ac19669fb64b2f994416fffe7aaf827f05181924955febf0f1d44f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23137</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:24:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23137" id="RHSA-2025:23137" type="rhsa" title="RHSA-2025:23137"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23137.html" id="ALSA-2025:23137" type="self" title="ALSA-2025:23137"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="mysql" stream="8.4" version="8100020251212053046" context="9edba152" arch="s390x"/>
        <package name="mysql-test-data" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-test-data-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm</filename>
          <sum type="sha256">32c0e3b4c114fae4abfa71886d6b9d4728a673d813b70886a9595c7538ccfad4</sum>
        </package>
        <package name="mysql-errmsg" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-errmsg-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm</filename>
          <sum type="sha256">70d2ed08985d4667389fdab4c8cf39416aa2d5bc47900fdc45073cfc1b647df3</sum>
        </package>
        <package name="mysql-common" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-common-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm</filename>
          <sum type="sha256">7bac4aecb12b46f80ea60f49a07d9a45780295c28c05d53339e66db22296a4fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2670</id>
    <title>Important: .NET 8.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:29:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2670" id="RHSA-2025:2670" type="rhsa" title="RHSA-2025:2670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2670.html" id="ALSA-2025:2670" type="self" title="ALSA-2025:2670"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">08e3e0cc33d04fa742cd7f86d95c5f5cd0c173b4289251a56d8428653f425bde</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.114" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.114-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">83b7fbf2a5edf15fb886a5c3e2b1f171311a5ec0eaa2fa7c00338bb082a3e16c</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9ea184224811338ea7a52e097c30c94ae48679f3a716c319421f08dc924e4b35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4459</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-05-05 00:00:00"/>
    <updated date="2025-05-06 14:38:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498)
  * SQLite: integer overflow in SQLite (CVE-2025-3277)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4459" id="RHSA-2025:4459" type="rhsa" title="RHSA-2025:4459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31498" id="CVE-2025-31498" type="cve" title="CVE-2025-31498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3277" id="CVE-2025-3277" type="cve" title="CVE-2025-3277"/>
      <reference href="https://bugzilla.redhat.com/2358271" id="2358271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359553" id="2359553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4459.html" id="ALSA-2025:4459" type="self" title="ALSA-2025:4459"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020250505131822" context="9c84b808" arch="s390x"/>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.15.0.1.module_el8.10.0+3986+a908e756" epoch="3" arch="s390x" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.15.0.1.module_el8.10.0+3986+a908e756.s390x.rpm</filename>
          <sum type="sha256">179f264166084b2b4bd28e4aa721179dca758cddc0d30265495d6907e7743db2</sum>
        </package>
        <package name="nodejs-libs" version="22.15.0" release="1.module_el8.10.0+3986+a908e756" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>nodejs-libs-22.15.0-1.module_el8.10.0+3986+a908e756.s390x.rpm</filename>
          <sum type="sha256">3a8533d2cf06f32896935c79398728076b5d97fd9474e930ec51d1f51e4bed16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8506</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-06-04 00:00:00"/>
    <updated date="2025-06-05 14:07:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8506" id="RHSA-2025:8506" type="rhsa" title="RHSA-2025:8506"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23166" id="CVE-2025-23166" type="cve" title="CVE-2025-23166"/>
      <reference href="https://bugzilla.redhat.com/2367163" id="2367163" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8506.html" id="ALSA-2025:8506" type="self" title="ALSA-2025:8506"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020250604143121" context="9c84b808" arch="s390x"/>
        <package name="nodejs-libs" version="22.16.0" release="1.module_el8.10.0+4006+3c416519" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-libs-22.16.0-1.module_el8.10.0+4006+3c416519.s390x.rpm</filename>
          <sum type="sha256">1af3a006b2525a1ec8cc25e8079bfca46167408199f585b96b3f1cc3083364ab</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.16.0.1.module_el8.10.0+4006+3c416519" epoch="3" arch="s390x" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.16.0.1.module_el8.10.0+4006+3c416519.s390x.rpm</filename>
          <sum type="sha256">57274b64b55faea7a953851fc87f8c8834510e1267de41cff50fc7b5a3e83283</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9188</id>
    <title>Important: idm:DL1 security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-30 13:30:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>idm:DL1 security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.   

Security Fix(es):  

  * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9188" id="RHSA-2025:9188" type="rhsa" title="RHSA-2025:9188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4404" id="CVE-2025-4404" type="cve" title="CVE-2025-4404"/>
      <reference href="https://bugzilla.redhat.com/2364606" id="2364606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9188.html" id="ALSA-2025:9188" type="self" title="ALSA-2025:9188"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="idm" stream="DL1" version="8100020250422084317" context="93c20af6" arch="s390x"/>
        <package name="ipa-server-trust-ad" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="s390x" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-server-trust-ad-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm</filename>
          <sum type="sha256">28b0b9481dbc0fde6a45a4bfbc07a1e63138dce9f237535ed7b515a266d43fe1</sum>
        </package>
        <package name="python3-ipatests" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>python3-ipatests-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">303ddbf7b9150cfac4510632323b565f2759baa8cf86576d93a050e8e18f86a1</sum>
        </package>
        <package name="ipa-server-common" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-server-common-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">3ba505bc9d78830978408b7025512d8fdb2834042c2cba7ff735db1d22f04d5d</sum>
        </package>
        <package name="ipa-healthcheck" version="0.12" release="5.module_el8.10.0+3980+d78e8e90" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-5.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>ipa-healthcheck-0.12-5.module_el8.10.0+3980+d78e8e90.noarch.rpm</filename>
          <sum type="sha256">56b8766fd06a41900a4bc86ecc305d35eed3657241b7fe9e1760aa64c0eaa21c</sum>
        </package>
        <package name="ipa-server" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="s390x" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-server-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm</filename>
          <sum type="sha256">a588040cbbd902cbff713ef4c287e6afba031c999ee61e40cd8321d77c281c6e</sum>
        </package>
        <package name="ipa-server-dns" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-server-dns-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">accd6092b597737762e6936c1eab6467a2752e5dde51ba8f9a23aa2461be804e</sum>
        </package>
        <package name="python3-ipaserver" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>python3-ipaserver-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">be5881ad817c676c938ae1976012411bf3ff0606f4cb4ecd4a8da85854f143a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:A004</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-20 00:00:00"/>
    <updated date="2025-06-20 14:58:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API).

Security Fix(es):

* libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-A004.html" id="ALSA-2025:A004" type="self" title="ALSA-2025:A004"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="libblockdev-mpath-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-mpath-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">36665fa76cbebe5dd3a8965bdc3f966c95120ddd225047c8f89ac60f33a1fc0b</sum>
        </package>
        <package name="libblockdev-lvm-dbus-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-lvm-dbus-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">421733d49a74239d72b941526458ba71e73fc5490404573272f8345e8b1e3261</sum>
        </package>
        <package name="libblockdev-tools" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-tools-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">4a654b166fef1ed867f8f7c3ba23616bb68b9b022aeb4eee4569810bca0c99b8</sum>
        </package>
        <package name="libblockdev-kbd-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-kbd-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">5c6a2a1d7178d3d05dff14ca4220bb4e18d1cd7d0bccebb816c10ec19ea63158</sum>
        </package>
        <package name="libblockdev-dm-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-dm-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">65da072e8376cbf3ee70d82da1c969354ab7ca59d326be0bf806c6344600757f</sum>
        </package>
        <package name="libblockdev-nvdimm-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-nvdimm-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">ae84b44f7c9868a9fd5e35f947e62c71985fede9d516e9807ca197fef86c5f26</sum>
        </package>
        <package name="libblockdev-s390-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-s390-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">fb377c659d74f3d208292cb6a2229bd494eee17e5842399bd30399717f29f77a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0921</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-26 10:06:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0921" id="RHSA-2026:0921" type="rhsa" title="RHSA-2026:0921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0921.html" id="ALSA-2026:0921" type="self" title="ALSA-2026:0921"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260126084650" context="9edba152" arch="s390x"/>
        <package name="golang-race" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="s390x" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>golang-race-1.25.5-1.module_el8.10.0+4107+b32a33ce.s390x.rpm</filename>
          <sum type="sha256">19de4b661ec6c12be5ff2661499676894b5a96950c557b5c70f74a5dcc922bc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10704</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-07-22 10:03:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
  * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
  * golang: cmd/compile: no-op interface conversion bypasses overlap checking (CVE-2026-27144)
  * cmd/go: golang: Go (golang) and cmd/go: Arbitrary Code Execution via malicious SWIG file names (CVE-2026-27140)
  * golang: cmd/compile: possible memory corruption after bound check elimination (CVE-2026-27143)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10704" id="RHSA-2026:10704" type="rhsa" title="RHSA-2026:10704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27140" id="CVE-2026-27140" type="cve" title="CVE-2026-27140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27143" id="CVE-2026-27143" type="cve" title="CVE-2026-27143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27144" id="CVE-2026-27144" type="cve" title="CVE-2026-27144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32280" id="CVE-2026-32280" type="cve" title="CVE-2026-32280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32282" id="CVE-2026-32282" type="cve" title="CVE-2026-32282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32283" id="CVE-2026-32283" type="cve" title="CVE-2026-32283"/>
      <reference href="https://bugzilla.redhat.com/2456336" id="2456336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456339" id="2456339" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456340" id="2456340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456341" id="2456341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456342" id="2456342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10704.html" id="ALSA-2026:10704" type="self" title="ALSA-2026:10704"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260428074114" context="9edba152" arch="s390x"/>
        <package name="golang-race" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="s390x" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>golang-race-1.25.9-1.module_el8.10.0+4167+2e2e20dd.s390x.rpm</filename>
          <sum type="sha256">acbaea1d23c064788ad9934154a80f42b1547ea344bbc71e73bf277e12a9cd75</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:12176</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-04-30 11:53:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007)
  * pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
  * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:12176" id="RHSA-2026:12176" type="rhsa" title="RHSA-2026:12176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26007" id="CVE-2026-26007" type="cve" title="CVE-2026-26007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-30922" id="CVE-2026-30922" type="cve" title="CVE-2026-30922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32597" id="CVE-2026-32597" type="cve" title="CVE-2026-32597"/>
      <reference href="https://bugzilla.redhat.com/2438762" id="2438762" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447194" id="2447194" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448553" id="2448553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-12176.html" id="ALSA-2026:12176" type="self" title="ALSA-2026:12176"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="fence-agents-nutanix-ahv" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">043ee47c51e110683c02887fbb85e38d13f9ab68610d50c69ace366a2a4012ec</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">1a2bae3e7c04fcbe60385d24203eace95b01fde631e2cd0d739713771ab94a96</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">96fa29ed84454cf8893ad5e8cac410b06dcfa7da3c90090bed35699c2a3697dd</sum>
        </package>
        <package name="fence-agents-aws" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-aws-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">ea01f2ced268ea06be9ca086b465349a0c8952357f15a7e14829670da9e209a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1240</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-04-15 07:00:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1240" id="RHSA-2026:1240" type="rhsa" title="RHSA-2026:1240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1240.html" id="ALSA-2026:1240" type="self" title="ALSA-2026:1240"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="fence-agents-nutanix-ahv" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">4963fac734a5c0638add92fc638f6efa5a209abbdd46d3db0a69b08bb0a9e5a5</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">5712d7d502090923f6f8fd42a790eb186d64015fdffbb19d69ec088925f80421</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">89d1df470e9bd0d8617a347d07a73ef9373b0e6e14f55b978d1d591f03575667</sum>
        </package>
        <package name="fence-agents-aws" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-aws-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">a3f7ffa8d683f949e2a77ed2843efb02fcc9fc1a8c9a3360efb3ac033d0a044b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1906</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 08:07:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1906" id="RHSA-2026:1906" type="rhsa" title="RHSA-2026:1906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23490" id="CVE-2026-23490" type="cve" title="CVE-2026-23490"/>
      <reference href="https://bugzilla.redhat.com/2430472" id="2430472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1906.html" id="ALSA-2026:1906" type="self" title="ALSA-2026:1906"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="fence-agents-aws" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-aws-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">22167e15c2afc4e2d256b3658aeba654f2bbd1af090838c5e1472234168090f7</sum>
        </package>
        <package name="fence-agents-nutanix-ahv" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">2b3faef686285d0e6e50807c1e25a509f0539351acb46c2ecdec140b9636860c</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">82ff0a54f86548a9ed0130b782db7d26b3d7e2c2bde8196135cfab174ad7791e</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">aa33e42af193ded809e5aef77034d1f1e84bd6c08a6b972a67754b742f1b8957</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21295</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-29 09:45:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime 10.0.8.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21295" id="RHSA-2026:21295" type="rhsa" title="RHSA-2026:21295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21295.html" id="ALSA-2026:21295" type="self" title="ALSA-2026:21295"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="dotnet-hostfxr-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0421cdfc1df383dd0b414a0428578bf972c0c9352a4b63c743833d78ee049270</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1533570dece26204bc4daf6c8f6cc6c314fce00cf65721c4b43e8290202e8536</sum>
        </package>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">191f18998a01f4e80a5a072122d4299bdc6a22a54d918697dafb569a28f4e0e7</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1e5166e59f2e19672932e7abfaad3c5b430c120f84581ff85a0c09b10cd36b59</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f5ab3c3addd5b3e75c1a17efba22bd7b9b62710e5133dad02393ad3454a7c31</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4915f3f9c91761ed78bdc9e02ab71e2f26a23da1a769de92f8a9d2ee7190b735</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7aad884456d433728d3f96ba8d68271aa465e79770509f50283260ef97d8025c</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">804ea1c4a4b9e0cbb2ab423fe541e82c2e8792f9f764729289f7b036322af8f0</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8aebb10fd04ff06e8244e286f66a751eef26612080c4ff94df1ae69e191b03c7</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d7a15c76cfb5ec46bb7a69b4284fea6aa63adf43748b7f38811f8ea419ac4136</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fde210efe5820e5d6cf2c2ea36326e5eb26fa8bc9fe9567e7a8e610eb10931f1</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ff7e3ad86bf2c0152c9fcf377fa718c130500e68ce0e1c0212ccc3eb594e0d27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2420</id>
    <title>Important: nodejs:24 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-12 10:19:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)
  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * nodejs: Nodejs denial of service (CVE-2025-59466)
  * nodejs: Nodejs denial of service (CVE-2025-59465)
  * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)
  * nodejs: Nodejs file permissions bypass (CVE-2025-55130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2420" id="RHSA-2026:2420" type="rhsa" title="RHSA-2026:2420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55130" id="CVE-2025-55130" type="cve" title="CVE-2025-55130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55131" id="CVE-2025-55131" type="cve" title="CVE-2025-55131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55132" id="CVE-2025-55132" type="cve" title="CVE-2025-55132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59465" id="CVE-2025-59465" type="cve" title="CVE-2025-59465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59466" id="CVE-2025-59466" type="cve" title="CVE-2025-59466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://bugzilla.redhat.com/2431338" id="2431338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431343" id="2431343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431349" id="2431349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431350" id="2431350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431352" id="2431352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2420.html" id="ALSA-2026:2420" type="self" title="ALSA-2026:2420"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="nodejs" stream="24" version="8100020260211100935" context="9c84b808" arch="s390x"/>
        <package name="npm" version="11.6.2" release="1.24.13.0.0.module_el8.10.0+4113+bc863bc2" epoch="1" arch="noarch" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>npm-11.6.2-1.24.13.0.0.module_el8.10.0+4113+bc863bc2.noarch.rpm</filename>
          <sum type="sha256">9919ff306026467e4310bd20ef03654cc7483478f47f4ce9bc95b9c25217bcdd</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.13.0.0.module_el8.10.0+4113+bc863bc2" epoch="3" arch="s390x" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.13.0.0.module_el8.10.0+4113+bc863bc2.s390x.rpm</filename>
          <sum type="sha256">dfaa47b2b05446403e239521145762950fbc86db7189d6ba4069c89742e3edad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25114</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:45:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25114" id="RHSA-2026:25114" type="rhsa" title="RHSA-2026:25114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25114.html" id="ALSA-2026:25114" type="self" title="ALSA-2026:25114"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="aspnetcore-runtime-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2ebceda4043c8a95e5a0bdbf5d428058eb957ede74f73784b288f3026ee06627</sum>
        </package>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3436252cdccc2abd0aec49bd6012bb587286518a159c878bb3aafc8feb6395c3</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7836809e1b5a64f9395b5dcb2b8f6d9a608aff119c90531214fcb148c2a1bf19</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8022a1ad601afa6db6adf7bff9c7cf91a72fb632990b7792af3d6c4d190d1825</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">88922fa23d1babc411f93b9c522cde49e1bf6b450f33fd1ca37696562aff9137</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">92558009b50fa9e7ff08aff94a4d49c8f9a27bdc661036fd88c3ab138d04b7fe</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9361218d3c5405285595aa5f74322a8843c4059f1b2c492c07359fbbfb303d22</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a196aea9cf92d77efa0ddd8adc5db9c11739acdc30a1e128b888d223566182c9</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a53302137e778d5cc47e941d0f0f16b16a2c2b8b944f74a1829158a585a54d88</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e3507ecae1574d3fe0da6bb84a7b3314beabbf38cea699908a0a847e91400647</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">efb8bb308f37710fe0362fe55f5197feb2eb5d4c5a75edd582cb3170d9e3e15a</sum>
        </package>
        <package name="dotnet-hostfxr-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f71c6f2292d3f3185b92f478fa130d4e78e9d3e1c36a00c537d16ac83052bdf6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26180</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-16 11:41:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.  

Security Fix(es):  

  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
  * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
  * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26180" id="RHSA-2026:26180" type="rhsa" title="RHSA-2026:26180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21998" id="CVE-2026-21998" type="cve" title="CVE-2026-21998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22001" id="CVE-2026-22001" type="cve" title="CVE-2026-22001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22002" id="CVE-2026-22002" type="cve" title="CVE-2026-22002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22004" id="CVE-2026-22004" type="cve" title="CVE-2026-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22005" id="CVE-2026-22005" type="cve" title="CVE-2026-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22009" id="CVE-2026-22009" type="cve" title="CVE-2026-22009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22015" id="CVE-2026-22015" type="cve" title="CVE-2026-22015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22017" id="CVE-2026-22017" type="cve" title="CVE-2026-22017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34270" id="CVE-2026-34270" type="cve" title="CVE-2026-34270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34271" id="CVE-2026-34271" type="cve" title="CVE-2026-34271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34276" id="CVE-2026-34276" type="cve" title="CVE-2026-34276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34303" id="CVE-2026-34303" type="cve" title="CVE-2026-34303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34304" id="CVE-2026-34304" type="cve" title="CVE-2026-34304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34308" id="CVE-2026-34308" type="cve" title="CVE-2026-34308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35236" id="CVE-2026-35236" type="cve" title="CVE-2026-35236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35237" id="CVE-2026-35237" type="cve" title="CVE-2026-35237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35238" id="CVE-2026-35238" type="cve" title="CVE-2026-35238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35239" id="CVE-2026-35239" type="cve" title="CVE-2026-35239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35240" id="CVE-2026-35240" type="cve" title="CVE-2026-35240"/>
      <reference href="https://bugzilla.redhat.com/2460274" id="2460274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460275" id="2460275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460276" id="2460276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460279" id="2460279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460295" id="2460295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460312" id="2460312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460315" id="2460315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460316" id="2460316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460323" id="2460323" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460324" id="2460324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460325" id="2460325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460326" id="2460326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460329" id="2460329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460335" id="2460335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460342" id="2460342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460344" id="2460344" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460348" id="2460348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460356" id="2460356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460358" id="2460358" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26180.html" id="ALSA-2026:26180" type="self" title="ALSA-2026:26180"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="mysql" stream="8.4" version="8100020260616075229" context="9edba152" arch="s390x"/>
        <package name="mysql-errmsg" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="noarch" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-errmsg-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm</filename>
          <sum type="sha256">4eaf86685c7be5aa67008e904d67f2cb5247b2498134e2e9bbfa0c52b265ad63</sum>
        </package>
        <package name="mysql-common" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="noarch" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-common-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm</filename>
          <sum type="sha256">b808f9278368ddaa3426e68bdab0ceba601957a14fcbc404b09c4d6dfafabc3e</sum>
        </package>
        <package name="mysql-test-data" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="noarch" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-test-data-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm</filename>
          <sum type="sha256">f059737d89a485a2c6f6be94a49ecdafd4ff1e310913085daeb5b36919474f79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2708</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-16 14:22:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * cmd/cgo: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2708" id="RHSA-2026:2708" type="rhsa" title="RHSA-2026:2708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61732" id="CVE-2025-61732" type="cve" title="CVE-2025-61732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437016" id="2437016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2708.html" id="ALSA-2026:2708" type="self" title="ALSA-2026:2708"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260216132104" context="9edba152" arch="s390x"/>
        <package name="golang-race" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="s390x" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>golang-race-1.25.7-1.module_el8.10.0+4117+b694c6c9.s390x.rpm</filename>
          <sum type="sha256">ee84a5686b48891f4320d770bbbe07dc47e3f658db494083999438ae85a87475</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38995</id>
    <title>Important: go-toolset:rhel8 security, bug fix, and enhancement update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-14 09:10:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security, bug fix, and enhancement update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
  * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
  * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)


Bug Fix(es) and Enhancement(s):  

  * Update Go to version 1.26.5+1 [almalinux-8.10.z] (JIRA:AlmaLinux-193478)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38995" id="RHSA-2026:38995" type="rhsa" title="RHSA-2026:38995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27145" id="CVE-2026-27145" type="cve" title="CVE-2026-27145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39821" id="CVE-2026-39821" type="cve" title="CVE-2026-39821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39822" id="CVE-2026-39822" type="cve" title="CVE-2026-39822"/>
      <reference href="https://bugzilla.redhat.com/2480756" id="2480756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484207" id="2484207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2498152" id="2498152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38995.html" id="ALSA-2026:38995" type="self" title="ALSA-2026:38995"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260714081830" context="9edba152" arch="s390x"/>
        <package name="golang-race" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="s390x" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>golang-race-1.26.5-1.module_el8.10.0+4223+bd807c2e.s390x.rpm</filename>
          <sum type="sha256">e6ec6927eb7a3c3ef8be5fb83186c9e0f2f666b224888ba2053fc3afb868ccef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39868</id>
    <title>Important: nodejs:24 security, bug fix, and enhancement update</title>
    <issued date="2026-07-15 00:00:00"/>
    <updated date="2026-07-16 10:27:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (CVE-2026-42338)
  * undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)
  * undici: Undici: Information disclosure due to improper cache-control header parsing (CVE-2026-9678)
  * undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733)
  * undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (CVE-2026-11525)
  * undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)
  * undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)
  * nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames (CVE-2026-48619)
  * nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling (CVE-2026-48930)
  * nodejs: Node.js: Unauthorized file metadata modification (CVE-2026-48935)
  * nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() (CVE-2026-48933)
  * nodejs: Node.js: Certification validation bypass in TLS host verification (CVE-2026-48934)
  * Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency (CVE-2026-48928)
  * nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling (CVE-2026-48615)
  * nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch (CVE-2026-48618)


Bug Fix(es) and Enhancement(s):  

  * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-8] (JIRA:AlmaLinux-168744)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39868" id="RHSA-2026:39868" type="rhsa" title="RHSA-2026:39868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11525" id="CVE-2026-11525" type="cve" title="CVE-2026-11525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12151" id="CVE-2026-12151" type="cve" title="CVE-2026-12151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42338" id="CVE-2026-42338" type="cve" title="CVE-2026-42338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48615" id="CVE-2026-48615" type="cve" title="CVE-2026-48615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48618" id="CVE-2026-48618" type="cve" title="CVE-2026-48618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48619" id="CVE-2026-48619" type="cve" title="CVE-2026-48619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48928" id="CVE-2026-48928" type="cve" title="CVE-2026-48928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48930" id="CVE-2026-48930" type="cve" title="CVE-2026-48930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48933" id="CVE-2026-48933" type="cve" title="CVE-2026-48933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48934" id="CVE-2026-48934" type="cve" title="CVE-2026-48934"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48935" id="CVE-2026-48935" type="cve" title="CVE-2026-48935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6733" id="CVE-2026-6733" type="cve" title="CVE-2026-6733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6734" id="CVE-2026-6734" type="cve" title="CVE-2026-6734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9678" id="CVE-2026-9678" type="cve" title="CVE-2026-9678"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9697" id="CVE-2026-9697" type="cve" title="CVE-2026-9697"/>
      <reference href="https://bugzilla.redhat.com/2476810" id="2476810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489980" id="2489980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490000" id="2490000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490006" id="2490006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490008" id="2490008" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490018" id="2490018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490024" id="2490024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493325" id="2493325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493326" id="2493326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493329" id="2493329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493331" id="2493331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493332" id="2493332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493333" id="2493333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493335" id="2493335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493337" id="2493337" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-39868.html" id="ALSA-2026:39868" type="self" title="ALSA-2026:39868"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="nodejs" stream="24" version="8100020260716073211" context="9c84b808" arch="s390x"/>
        <package name="npm" version="11.16.0" release="1.24.18.0.1.module_el8.10.0+4228+2938bc94" epoch="1" arch="noarch" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>npm-11.16.0-1.24.18.0.1.module_el8.10.0+4228+2938bc94.noarch.rpm</filename>
          <sum type="sha256">8622fde48003921573a31d0b6e33f98c4d6584ca5bbdc8fd71c17f8426a535e7</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.18.0.1.module_el8.10.0+4228+2938bc94" epoch="3" arch="s390x" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.18.0.1.module_el8.10.0+4228+2938bc94.s390x.rpm</filename>
          <sum type="sha256">def3a802aa5d6c0f95aaa5141af9db4c125dc8e2f67fb68bd5a9ee1ea6ac2209</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:41900</id>
    <title>Important: .NET 10.0 security, bug fix, and enhancement update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-31 12:30:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10.  

Security Fix(es):  

  * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651)
  * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108)
  * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170)
  * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300)
  * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304)
  * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302)
  * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650)
  * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528)
  * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649)
  * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526)
  * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646)
  * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525)
  * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527)
  * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648)
  * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659)
  * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524)


Bug Fix(es) and Enhancement(s):  

  * Update .NET 10.0 to SDK 10.0.110 and Runtime 10.0.10 (JIRA:AlmaLinux-192459)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:41900" id="RHSA-2026:41900" type="rhsa" title="RHSA-2026:41900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47300" id="CVE-2026-47300" type="cve" title="CVE-2026-47300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47302" id="CVE-2026-47302" type="cve" title="CVE-2026-47302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47303" id="CVE-2026-47303" type="cve" title="CVE-2026-47303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47304" id="CVE-2026-47304" type="cve" title="CVE-2026-47304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50524" id="CVE-2026-50524" type="cve" title="CVE-2026-50524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50525" id="CVE-2026-50525" type="cve" title="CVE-2026-50525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50526" id="CVE-2026-50526" type="cve" title="CVE-2026-50526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50527" id="CVE-2026-50527" type="cve" title="CVE-2026-50527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50528" id="CVE-2026-50528" type="cve" title="CVE-2026-50528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50646" id="CVE-2026-50646" type="cve" title="CVE-2026-50646"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50648" id="CVE-2026-50648" type="cve" title="CVE-2026-50648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50649" id="CVE-2026-50649" type="cve" title="CVE-2026-50649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50650" id="CVE-2026-50650" type="cve" title="CVE-2026-50650"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50651" id="CVE-2026-50651" type="cve" title="CVE-2026-50651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50659" id="CVE-2026-50659" type="cve" title="CVE-2026-50659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-56170" id="CVE-2026-56170" type="cve" title="CVE-2026-56170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-57108" id="CVE-2026-57108" type="cve" title="CVE-2026-57108"/>
      <reference href="https://bugzilla.redhat.com/2499217" id="2499217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500109" id="2500109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500189" id="2500189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500492" id="2500492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500502" id="2500502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500509" id="2500509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500515" id="2500515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500556" id="2500556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500562" id="2500562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500563" id="2500563" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500565" id="2500565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500577" id="2500577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500580" id="2500580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500581" id="2500581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500587" id="2500587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500593" id="2500593" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-41900.html" id="ALSA-2026:41900" type="self" title="ALSA-2026:41900"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="dotnet-sdk-10.0" version="10.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">099da8deb3097a2083b8372edc6045b6d62d584840f06359245e42439b54b035</sum>
        </package>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3f9a3ba315796e646e2e4a6b343e00e01654fcea4dd0416a1bbfc8ce4f2708aa</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4e8cbe3f90405abc58990b73cbda15adc067b21f6a107b474e4d1abe7e0f0432</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">566d4eed869f7a34256cb33480c808b3dc9562cb46d5a2fc74596c060d2c6799</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">580270fb4c526231b7b51c09fdb8421c86e2a95f6a71812d345de159fe1db664</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5c4885981857e4963aaf25c0595c81fde8f1f3212eaa3e51a375d69424ea2c80</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">737ba659de934d50274fefe06cf089de81cfce4c2c89f1dbda0fd8e572e9a42a</sum>
        </package>
        <package name="dotnet-hostfxr-10.0" version="10.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">979f60d82c7e4991a8bef2fabe873e7a41974842d6ec303523dae46b8de5716d</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ab5502057782c46362d8e8d72e0ce49d389af8d977d1553b690cfb70c67f7ba3</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ae3cbdbc8757f40434d25d9884f9cf2dc8d7e5058aee01c5cb118f62f2d587d5</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c15fb1915792013f9d258cbb371ce6bf01be08ed99e6be75d3efa3d8466ec828</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f38a08629b76b8b732d81d4c742f45973dd1a921212c552b1e2d48dd16352892</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4458</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:14:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4458" id="RHSA-2026:4458" type="rhsa" title="RHSA-2026:4458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4458.html" id="ALSA-2026:4458" type="self" title="ALSA-2026:4458"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="dotnet-hostfxr-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0a8322e33be13125570c0eeac1eaa5642a23c89c6cbed14e36fda3df28d8adf4</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">12ea74cc6258dd6d375b2a4ff9e5c6b7adbb43774e17b95b282a4d24a3d1a4e2</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">58e1015de1c5795bbae67688f66946c37309d8c02bf108bcd4d592b344ca1939</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5b003ae265c7d72c1f8de794cc1ee88de7a015253e796f06fb0ede1fff861344</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8991b115394f2906fc85cb955b637beac1ad0242b595ec3a66322bdf15ac9b26</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">91ad940bfaba3b2efd4a7c3b21fe2b44038650388dcb2a46836d9bb1ec3c0ba1</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a599f2204af6946ef278f7f6b0999e03ebf3de8a90ed63a762ecc43b7b4d1376</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b46a307d53b453999f38a0c6ffe27b2658b0832f5261db0b5a9b565c1440417e</sum>
        </package>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c139774d4b66ab0f9cc3b5bbd5c9b7889a2f9439a5c92c00938381b909b922ff</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c817853aa6c3077f7323010224d03689b87fc914e8c17c0059288d3ff8a4473f</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ce44f95dbe3bfa9ecc58fe9d7435c11d984b393a2c79dfe69e763e3a0c1c81ab</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">eabd434e387a8294714be9528e9e2ea39efb81fab5c9aa3a0a7afaee791b0030</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:47060</id>
    <title>Important: nodejs:24 security update</title>
    <issued date="2026-07-28 00:00:00"/>
    <updated date="2026-07-29 13:07:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
  * tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874)
  * tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:47060" id="RHSA-2026:47060" type="rhsa" title="RHSA-2026:47060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-13149" id="CVE-2026-13149" type="cve" title="CVE-2026-13149"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59873" id="CVE-2026-59873" type="cve" title="CVE-2026-59873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59874" id="CVE-2026-59874" type="cve" title="CVE-2026-59874"/>
      <reference href="https://bugzilla.redhat.com/2494813" id="2494813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2498116" id="2498116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2498120" id="2498120" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-47060.html" id="ALSA-2026:47060" type="self" title="ALSA-2026:47060"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="nodejs" stream="24" version="8100020260728172357" context="9c84b808" arch="s390x"/>
        <package name="npm" version="11.16.0" release="1.24.18.0.2.module_el8.10.0+4237+cde4efc3" epoch="1" arch="noarch" src="nodejs-24.18.0-2.module_el8.10.0+4237+cde4efc3.src.rpm">
          <filename>npm-11.16.0-1.24.18.0.2.module_el8.10.0+4237+cde4efc3.noarch.rpm</filename>
          <sum type="sha256">361d4a0fa19754d400849ec9f2599c5fbc8b47bf2f2fd22725a4a281f3e0bd3a</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.18.0.2.module_el8.10.0+4237+cde4efc3" epoch="3" arch="s390x" src="nodejs-24.18.0-2.module_el8.10.0+4237+cde4efc3.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.18.0.2.module_el8.10.0+4237+cde4efc3.s390x.rpm</filename>
          <sum type="sha256">b18e83a2b09bd776d60559e587ea8645023c87ce0fdf3548c7f6b548aae0c485</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:47736</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-07-29 00:00:00"/>
    <updated date="2026-07-31 12:35:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies (CVE-2026-59939)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:47736" id="RHSA-2026:47736" type="rhsa" title="RHSA-2026:47736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59939" id="CVE-2026-59939" type="cve" title="CVE-2026-59939"/>
      <reference href="https://bugzilla.redhat.com/2498212" id="2498212" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-47736.html" id="ALSA-2026:47736" type="self" title="ALSA-2026:47736"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="fence-agents-aws" version="4.2.1" release="129.el8_10.27" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.27.src.rpm">
          <filename>fence-agents-aws-4.2.1-129.el8_10.27.noarch.rpm</filename>
          <sum type="sha256">01a3e896b3a9ca6a07fff581ae09cd7c0314493ea080d70877e7299dfd463700</sum>
        </package>
        <package name="fence-agents-nutanix-ahv" version="4.2.1" release="129.el8_10.27" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.27.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.2.1-129.el8_10.27.noarch.rpm</filename>
          <sum type="sha256">320febe4288455dc389a9dbdf594627502fef50ff2077bba2ca73acea39e3a7b</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.27" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.27.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.27.noarch.rpm</filename>
          <sum type="sha256">ad99ee32df4f8201f467ca2c2abf4a16060335f2122820d1997a28b9eac69dc1</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.27" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.27.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.27.noarch.rpm</filename>
          <sum type="sha256">cd0182acdc9b7fe25ae451a26e3b895859d10f2e147299a7b18c951fc4c56fe4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:49927</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2026-08-04 00:00:00"/>
    <updated date="2026-08-04 16:48:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:49927" id="RHSA-2026:49927" type="rhsa" title="RHSA-2026:49927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44431" id="CVE-2026-44431" type="cve" title="CVE-2026-44431"/>
      <reference href="https://bugzilla.redhat.com/2477167" id="2477167" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-49927.html" id="ALSA-2026:49927" type="self" title="ALSA-2026:49927"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.28" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.28.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.28.noarch.rpm</filename>
          <sum type="sha256">a7507df9731d2661f6a41d6774e709ddf16a54df925fc23540cf99b8a359dab9</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.28" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.28.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.28.noarch.rpm</filename>
          <sum type="sha256">c07027e36d527be89b30521f1cfbe1c8e37f462882979fa74ad548aae545e90a</sum>
        </package>
        <package name="fence-agents-aws" version="4.2.1" release="129.el8_10.28" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.28.src.rpm">
          <filename>fence-agents-aws-4.2.1-129.el8_10.28.noarch.rpm</filename>
          <sum type="sha256">c893d64c04c0d735e6abf31556291094d5de3e0ef1e74e9847ba7b8c93b7288b</sum>
        </package>
        <package name="fence-agents-nutanix-ahv" version="4.2.1" release="129.el8_10.28" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.28.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.2.1-129.el8_10.28.noarch.rpm</filename>
          <sum type="sha256">e70c65f25517d1b74f2ed0461a4279ad4306a6d75772b54b624210e4a5603f79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:53363</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-08-11 00:00:00"/>
    <updated date="2026-08-12 09:17:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:53363" id="RHSA-2026:53363" type="rhsa" title="RHSA-2026:53363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59886" id="CVE-2026-59886" type="cve" title="CVE-2026-59886"/>
      <reference href="https://bugzilla.redhat.com/2500041" id="2500041" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-53363.html" id="ALSA-2026:53363" type="self" title="ALSA-2026:53363"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="fence-agents-nutanix-ahv" version="4.2.1" release="129.el8_10.29" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.29.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.2.1-129.el8_10.29.noarch.rpm</filename>
          <sum type="sha256">437ea1a46de9b47db36a6d3cf0e57577f7975c2222b803fc369a7c18daf10bc4</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.29" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.29.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.29.noarch.rpm</filename>
          <sum type="sha256">4e405dc6d454fe3738c738e78091e9208bdb78d272a5a009b090dcbf3eb99f19</sum>
        </package>
        <package name="fence-agents-aws" version="4.2.1" release="129.el8_10.29" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.29.src.rpm">
          <filename>fence-agents-aws-4.2.1-129.el8_10.29.noarch.rpm</filename>
          <sum type="sha256">c9b599faeb88253b8a007a81d1ebf5538ef53e5b044d7c1b6ff8a98d86671437</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.29" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.29.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.29.noarch.rpm</filename>
          <sum type="sha256">e9818b2e176efbfd44d15538c9000055f1c8195806f77b8c503d44702b158e01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54246</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-08-12 00:00:00"/>
    <updated date="2026-08-12 11:57:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54246" id="RHSA-2026:54246" type="rhsa" title="RHSA-2026:54246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45991" id="CVE-2026-45991" type="cve" title="CVE-2026-45991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53009" id="CVE-2026-53009" type="cve" title="CVE-2026-53009"/>
      <reference href="https://bugzilla.redhat.com/2482113" id="2482113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492390" id="2492390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-54246.html" id="ALSA-2026:54246" type="self" title="ALSA-2026:54246"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="kernel-zfcpdump" version="4.18.0" release="553.155.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.155.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-4.18.0-553.155.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">312effa547210d67b5eead80bc8290735dfa533b28a68a90ea3c2328f6308cb7</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="4.18.0" release="553.155.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.155.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-4.18.0-553.155.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">82af45d878fd5e852524f9131bba47b4bc1bc7e4f6a6a563320d4d49eb7c3d24</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="4.18.0" release="553.155.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.155.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-core-4.18.0-553.155.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">84aa93e5624c240056179901ed256a9e9c82bb0b03f4cef800b6a6d8fde769c4</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="4.18.0" release="553.155.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.155.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-devel-4.18.0-553.155.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">864774e113f536419f3415cb69051181db642069d070b12f220d722627c14196</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="4.18.0" release="553.155.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.155.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-4.18.0-553.155.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">db52f958e06325cc81bb0039d4548b7cda7e4c9673f274ce74be509230fc3fb8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54542</id>
    <title>Important: .NET 10.0 security, bug fix, and enhancement update</title>
    <issued date="2026-08-13 00:00:00"/>
    <updated date="2026-08-14 08:56:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  

SDK version: 10.0.111  
Runtime version: 10.0.11  

Security Fix(es):  

  * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899)
  * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900)
  * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901)
  * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909)


Bug Fix(es) and Enhancement(s):  

  * Update .NET 10.0 to SDK 10.0.111 and Runtime 10.0.11 (JIRA:AlmaLinux-235478)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54542" id="RHSA-2026:54542" type="rhsa" title="RHSA-2026:54542"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62899" id="CVE-2026-62899" type="cve" title="CVE-2026-62899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62900" id="CVE-2026-62900" type="cve" title="CVE-2026-62900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62901" id="CVE-2026-62901" type="cve" title="CVE-2026-62901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62909" id="CVE-2026-62909" type="cve" title="CVE-2026-62909"/>
      <reference href="https://bugzilla.redhat.com/2512175" id="2512175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512179" id="2512179" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512180" id="2512180" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512185" id="2512185" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-54542.html" id="ALSA-2026:54542" type="self" title="ALSA-2026:54542"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="dotnet-templates-10.0" version="10.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0228fa721e4b9ade1b9118f6858f28f207b80fe9f046eb636e25aad34b7c1239</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.11" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0cc1d4dc1c6b9be23aa863dde9895fad099419c0d3dd8029fdc41b626e3ad85e</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.11" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">152da62d86e511d88771f83cc9f6e9fd700327b586ed1bc7ac65aec099c78e94</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.11" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7dd5186cfcb57260fd2e9cd1e10a665c506fbdf6b02db4b5a5e0ee79cea08c4c</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.11" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">869325dd51d44d3e323c6121c80be56ffd28a1e1bc0fe91cd900f87d8f07eb2c</sum>
        </package>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">98df85d840a19a7a96b5fcd4303508d05390621684008b33a64257b4f2154e65</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cf707ad5bc390adf090652d85317fa9e098e5a2765b00d41c4530c51e548f3e2</sum>
        </package>
        <package name="dotnet-hostfxr-10.0" version="10.0.11" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d00405c6f5294578746952c0141270ed28fc1e2ae40a35b55c8a093003c29a7f</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.11" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e11b6e35d2c4c9383330a9ba618c579db3f1d8d5cd36fc9766cf6b19712e80fa</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.11" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e159a8aa7ca6339d0a1111177be7daf89653c77598c3222fcd83603c91c22912</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.11" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e1985af8ae1d5d98e3acedf017ae5d60ae07ce9c8408c021fa7600332e350691</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">eb3cf6953025e0cc1e06a2f4fbf1ac548fbe93c00610dffb3f26513d4d356a91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55764</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:47:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (CVE-2025-39902)
  * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
  * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  * kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges (CVE-2026-17523)


Bug Fix(es) and Enhancement(s):  

  * Backport "sched/deadline: Fix bandwidth reclaim equation in GRUB" to AlmaLinux 8.10 (JIRA:AlmaLinux-189997)
  * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-8.10.z] (JIRA:AlmaLinux-224556)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55764" id="RHSA-2026:55764" type="rhsa" title="RHSA-2026:55764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39902" id="CVE-2025-39902" type="cve" title="CVE-2025-39902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-17523" id="CVE-2026-17523" type="cve" title="CVE-2026-17523"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43206" id="CVE-2026-43206" type="cve" title="CVE-2026-43206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53016" id="CVE-2026-53016" type="cve" title="CVE-2026-53016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53136" id="CVE-2026-53136" type="cve" title="CVE-2026-53136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53329" id="CVE-2026-53329" type="cve" title="CVE-2026-53329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53374" id="CVE-2026-53374" type="cve" title="CVE-2026-53374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63879" id="CVE-2026-63879" type="cve" title="CVE-2026-63879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63884" id="CVE-2026-63884" type="cve" title="CVE-2026-63884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64219" id="CVE-2026-64219" type="cve" title="CVE-2026-64219"/>
      <reference href="https://bugzilla.redhat.com/2400594" id="2400594" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467156" id="2467156" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492269" id="2492269" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492768" id="2492768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2495941" id="2495941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502188" id="2502188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502321" id="2502321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502463" id="2502463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2506790" id="2506790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507407" id="2507407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-55764.html" id="ALSA-2026:55764" type="self" title="ALSA-2026:55764"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="kernel-zfcpdump-core" version="4.18.0" release="553.156.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.156.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-core-4.18.0-553.156.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">20d3091fa37fc0ddb1831c2a0c69c6727d9dea92684a2e27c17b9a91c5fd194f</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="4.18.0" release="553.156.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.156.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-4.18.0-553.156.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">59612edac31eb6b4d9fb803c3035c65c1bc98b01aacb6c39938a0c3460de0714</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="4.18.0" release="553.156.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.156.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-devel-4.18.0-553.156.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5a34c1a035cc81d8ce10152e0fcbff85c64ed8cc9d728ae6aa640e0bb7910b2c</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="4.18.0" release="553.156.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.156.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-4.18.0-553.156.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6e758f0ba3a060d998fda02032433646a833a06e2b67d76af22f95fbbaa9449e</sum>
        </package>
        <package name="kernel-zfcpdump" version="4.18.0" release="553.156.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.156.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-4.18.0-553.156.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f7e5b7ebd5653ca776cf50540fd10b19a3126b157d25b2f9e6783ab7f5593912</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:56936</id>
    <title>Important: mysql:8.4 security, bug fix, and enhancement update</title>
    <issued date="2026-08-19 00:00:00"/>
    <updated date="2026-08-20 10:11:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql:8.4 security, bug fix, and enhancement update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)
  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)
  * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)
  * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)
  * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185)
  * mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094)
  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178)
  * mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023)
  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183)
  * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585)
  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182)


Bug Fix(es) and Enhancement(s):  

  * [tracker] Rebase MySQL to 8.4.11 (JIRA:AlmaLinux-188046)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:56936" id="RHSA-2026:56936" type="rhsa" title="RHSA-2026:56936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46936" id="CVE-2026-46936" type="cve" title="CVE-2026-46936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47012" id="CVE-2026-47012" type="cve" title="CVE-2026-47012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47023" id="CVE-2026-47023" type="cve" title="CVE-2026-47023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47052" id="CVE-2026-47052" type="cve" title="CVE-2026-47052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47064" id="CVE-2026-47064" type="cve" title="CVE-2026-47064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60145" id="CVE-2026-60145" type="cve" title="CVE-2026-60145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60163" id="CVE-2026-60163" type="cve" title="CVE-2026-60163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60177" id="CVE-2026-60177" type="cve" title="CVE-2026-60177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60178" id="CVE-2026-60178" type="cve" title="CVE-2026-60178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60182" id="CVE-2026-60182" type="cve" title="CVE-2026-60182"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60183" id="CVE-2026-60183" type="cve" title="CVE-2026-60183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60184" id="CVE-2026-60184" type="cve" title="CVE-2026-60184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60185" id="CVE-2026-60185" type="cve" title="CVE-2026-60185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60186" id="CVE-2026-60186" type="cve" title="CVE-2026-60186"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60187" id="CVE-2026-60187" type="cve" title="CVE-2026-60187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60188" id="CVE-2026-60188" type="cve" title="CVE-2026-60188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60189" id="CVE-2026-60189" type="cve" title="CVE-2026-60189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60190" id="CVE-2026-60190" type="cve" title="CVE-2026-60190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60191" id="CVE-2026-60191" type="cve" title="CVE-2026-60191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60315" id="CVE-2026-60315" type="cve" title="CVE-2026-60315"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60316" id="CVE-2026-60316" type="cve" title="CVE-2026-60316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60331" id="CVE-2026-60331" type="cve" title="CVE-2026-60331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60332" id="CVE-2026-60332" type="cve" title="CVE-2026-60332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60585" id="CVE-2026-60585" type="cve" title="CVE-2026-60585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60747" id="CVE-2026-60747" type="cve" title="CVE-2026-60747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-61081" id="CVE-2026-61081" type="cve" title="CVE-2026-61081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-61094" id="CVE-2026-61094" type="cve" title="CVE-2026-61094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-61096" id="CVE-2026-61096" type="cve" title="CVE-2026-61096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-61109" id="CVE-2026-61109" type="cve" title="CVE-2026-61109"/>
      <reference href="https://bugzilla.redhat.com/2504779" id="2504779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504823" id="2504823" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504848" id="2504848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504855" id="2504855" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504877" id="2504877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504925" id="2504925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504940" id="2504940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505001" id="2505001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505002" id="2505002" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505027" id="2505027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505182" id="2505182" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505200" id="2505200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505215" id="2505215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505259" id="2505259" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505262" id="2505262" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505300" id="2505300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505310" id="2505310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505319" id="2505319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505509" id="2505509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505594" id="2505594" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505643" id="2505643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505699" id="2505699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505711" id="2505711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505722" id="2505722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505844" id="2505844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505868" id="2505868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505891" id="2505891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505923" id="2505923" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2505927" id="2505927" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-56936.html" id="ALSA-2026:56936" type="self" title="ALSA-2026:56936"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="mysql" stream="8.4" version="8100020260819123005" context="9edba152" arch="s390x"/>
        <package name="mysql-errmsg" version="8.4.11" release="1.module_el8.10.0+4255+e01a855c" epoch="0" arch="noarch" src="mysql-8.4.11-1.module_el8.10.0+4255+e01a855c.src.rpm">
          <filename>mysql-errmsg-8.4.11-1.module_el8.10.0+4255+e01a855c.noarch.rpm</filename>
          <sum type="sha256">25d6b276f637eb80d111e1b53f7d81fac1366d68a81d2c55ff658020d052e492</sum>
        </package>
        <package name="mysql-common" version="8.4.11" release="1.module_el8.10.0+4255+e01a855c" epoch="0" arch="noarch" src="mysql-8.4.11-1.module_el8.10.0+4255+e01a855c.src.rpm">
          <filename>mysql-common-8.4.11-1.module_el8.10.0+4255+e01a855c.noarch.rpm</filename>
          <sum type="sha256">8565517a279c84a4e53ef300d9fb050968f93523ada46c2c2ce2dd2e4ab34380</sum>
        </package>
        <package name="mysql-test-data" version="8.4.11" release="1.module_el8.10.0+4255+e01a855c" epoch="0" arch="noarch" src="mysql-8.4.11-1.module_el8.10.0+4255+e01a855c.src.rpm">
          <filename>mysql-test-data-8.4.11-1.module_el8.10.0+4255+e01a855c.noarch.rpm</filename>
          <sum type="sha256">92f736713491b312df60a739cd99a0929fb4939fb38976552ba7d1c9928de928</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:57253</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-20 00:00:00"/>
    <updated date="2026-08-21 09:28:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)
  * kernel: ip6_gre: Use cached t-&gt;net in ip6erspan_changelink() (CVE-2026-46120)
  * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
  * kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)


Bug Fix(es) and Enhancement(s):  

  * sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after AlmaLinux 8.10 kernel update (JIRA:AlmaLinux-219767)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:57253" id="RHSA-2026:57253" type="rhsa" title="RHSA-2026:57253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56602" id="CVE-2024-56602" type="cve" title="CVE-2024-56602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46120" id="CVE-2026-46120" type="cve" title="CVE-2026-46120"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52991" id="CVE-2026-52991" type="cve" title="CVE-2026-52991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53189" id="CVE-2026-53189" type="cve" title="CVE-2026-53189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63887" id="CVE-2026-63887" type="cve" title="CVE-2026-63887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63888" id="CVE-2026-63888" type="cve" title="CVE-2026-63888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64048" id="CVE-2026-64048" type="cve" title="CVE-2026-64048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64379" id="CVE-2026-64379" type="cve" title="CVE-2026-64379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-68388" id="CVE-2026-68388" type="cve" title="CVE-2026-68388"/>
      <reference href="https://bugzilla.redhat.com/2334501" id="2334501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482614" id="2482614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492403" id="2492403" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492788" id="2492788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502443" id="2502443" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502447" id="2502447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502589" id="2502589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507135" id="2507135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2513470" id="2513470" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-57253.html" id="ALSA-2026:57253" type="self" title="ALSA-2026:57253"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="kernel-zfcpdump-core" version="4.18.0" release="553.157.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.157.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-core-4.18.0-553.157.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">03c93df21ebfae9f52c0f1cd5abea6661a17a352276eda819bbd8001bbfb02f3</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="4.18.0" release="553.157.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.157.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-4.18.0-553.157.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0aaa2e17fea6e4be6115520b4d85de29575e32195c0ea1564f7ad07828b80d27</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="4.18.0" release="553.157.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.157.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-devel-4.18.0-553.157.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">94554f4418ca76b423ef04e832aafa4516e5cc11ea0b6c7e3ac2c96ba5ab2e3f</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="4.18.0" release="553.157.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.157.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-4.18.0-553.157.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e297e2ca0e3f5c719dc9b73c7fcc92113d7fae7b6f7b13cb06b3b79175c8e59e</sum>
        </package>
        <package name="kernel-zfcpdump" version="4.18.0" release="553.157.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.157.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-4.18.0-553.157.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ea934a30474ee11666621a78ad9e326ff8eef040a2db14199aa68db3fc80c4f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:59821</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-26 00:00:00"/>
    <updated date="2026-08-26 09:46:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
  * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
  * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)
  * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)
  * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)
  * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
  * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)
  * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)


Bug Fix(es) and Enhancement(s):  

  * ss core dumped when there is an SCTP session [almalinux-8.10.z] (JIRA:AlmaLinux-212400)
  * SELinux TCP/MPTCP connect check bypass via TCP Fast Open [almalinux-8.10.z] (JIRA:AlmaLinux-222800)
  * [AlmaLinux-RT] usb_hub_wq items may run on isolated+nohz_full cores (JIRA:AlmaLinux-178088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:59821" id="RHSA-2026:59821" type="rhsa" title="RHSA-2026:59821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52924" id="CVE-2026-52924" type="cve" title="CVE-2026-52924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63886" id="CVE-2026-63886" type="cve" title="CVE-2026-63886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-63913" id="CVE-2026-63913" type="cve" title="CVE-2026-63913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64189" id="CVE-2026-64189" type="cve" title="CVE-2026-64189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64191" id="CVE-2026-64191" type="cve" title="CVE-2026-64191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64276" id="CVE-2026-64276" type="cve" title="CVE-2026-64276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64277" id="CVE-2026-64277" type="cve" title="CVE-2026-64277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64320" id="CVE-2026-64320" type="cve" title="CVE-2026-64320"/>
      <reference href="https://bugzilla.redhat.com/2492095" id="2492095" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502329" id="2502329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502438" id="2502438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502872" id="2502872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502889" id="2502889" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507061" id="2507061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507290" id="2507290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507301" id="2507301" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-59821.html" id="ALSA-2026:59821" type="self" title="ALSA-2026:59821"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="kernel-zfcpdump-modules" version="4.18.0" release="553.158.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.158.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-4.18.0-553.158.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0a70f5390ef1e53310b30b970a32456d49de15def1020d1ee7010d719964cfc2</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="4.18.0" release="553.158.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.158.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-devel-4.18.0-553.158.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">43c77adc043f2cf173ae11f29ba4f27a70c83f8cf0643da259d22803746400eb</sum>
        </package>
        <package name="kernel-zfcpdump" version="4.18.0" release="553.158.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.158.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-4.18.0-553.158.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">584fc16bffe21ea551f7f86138ab8a31406a2bec53f35786ab4a2ddc7b7745d9</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="4.18.0" release="553.158.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.158.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-core-4.18.0-553.158.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f8e54ebe52dcb3b1655f8bf6cb350f230d597612bfd543cf08b598de1802215</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="4.18.0" release="553.158.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.158.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-4.18.0-553.158.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ac00a66271d3ee0acab177677ece7a6cb28d6c0f5be5d0bc9bd187739e0b7364</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6391</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2026-04-01 00:00:00"/>
    <updated date="2026-04-09 09:58:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
  * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6391" id="RHSA-2026:6391" type="rhsa" title="RHSA-2026:6391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21936" id="CVE-2026-21936" type="cve" title="CVE-2026-21936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21937" id="CVE-2026-21937" type="cve" title="CVE-2026-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21941" id="CVE-2026-21941" type="cve" title="CVE-2026-21941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21948" id="CVE-2026-21948" type="cve" title="CVE-2026-21948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21964" id="CVE-2026-21964" type="cve" title="CVE-2026-21964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21968" id="CVE-2026-21968" type="cve" title="CVE-2026-21968"/>
      <reference href="https://bugzilla.redhat.com/2431384" id="2431384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431385" id="2431385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431402" id="2431402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431409" id="2431409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431413" id="2431413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431431" id="2431431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6391.html" id="ALSA-2026:6391" type="self" title="ALSA-2026:6391"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="mysql" stream="8.4" version="8100020260406112035" context="9edba152" arch="s390x"/>
        <package name="mysql-test-data" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-test-data-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm</filename>
          <sum type="sha256">132e239d2e381d6d84c5ff6879a5f733dc36643413bc8cb6f17518f85f7303dd</sum>
        </package>
        <package name="mysql-errmsg" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-errmsg-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm</filename>
          <sum type="sha256">9a3e60b49d558d7e50333d04cc2e23d3fc3dd796da2994c0db236d453cbb176d</sum>
        </package>
        <package name="mysql-common" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-common-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm</filename>
          <sum type="sha256">aed379944a57d0b9a041d49e5844d2a6b9cac49d21f67dd731061dda00f50bab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6949</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2026-04-08 00:00:00"/>
    <updated date="2026-04-09 12:09:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731)
  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6949" id="RHSA-2026:6949" type="rhsa" title="RHSA-2026:6949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61731" id="CVE-2025-61731" type="cve" title="CVE-2025-61731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2434433" id="2434433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6949.html" id="ALSA-2026:6949" type="self" title="ALSA-2026:6949"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260408072059" context="9edba152" arch="s390x"/>
        <package name="golang-race" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="s390x" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>golang-race-1.25.8-1.module_el8.10.0+4156+92f0ae2f.s390x.rpm</filename>
          <sum type="sha256">fd76f20cb9b4e1b5149614569e1ab33d6765e1e6e499e9a4a5422935a1e691f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7670</id>
    <title>Important: nodejs:24 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 07:49:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)
  * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581)
  * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527)
  * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526)
  * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229)
  * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525)
  * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)
  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)
  * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing (CVE-2026-21712)
  * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)
  * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions (CVE-2026-21715)
  * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. (CVE-2026-21716)
  * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks (CVE-2026-21711)
  * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713)
  * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames (CVE-2026-21714)
  * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions (CVE-2026-21717)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7670" id="RHSA-2026:7670" type="rhsa" title="RHSA-2026:7670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1525" id="CVE-2026-1525" type="cve" title="CVE-2026-1525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1526" id="CVE-2026-1526" type="cve" title="CVE-2026-1526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1527" id="CVE-2026-1527" type="cve" title="CVE-2026-1527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1528" id="CVE-2026-1528" type="cve" title="CVE-2026-1528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21710" id="CVE-2026-21710" type="cve" title="CVE-2026-21710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21711" id="CVE-2026-21711" type="cve" title="CVE-2026-21711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21712" id="CVE-2026-21712" type="cve" title="CVE-2026-21712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21713" id="CVE-2026-21713" type="cve" title="CVE-2026-21713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21714" id="CVE-2026-21714" type="cve" title="CVE-2026-21714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21715" id="CVE-2026-21715" type="cve" title="CVE-2026-21715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21716" id="CVE-2026-21716" type="cve" title="CVE-2026-21716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21717" id="CVE-2026-21717" type="cve" title="CVE-2026-21717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2229" id="CVE-2026-2229" type="cve" title="CVE-2026-2229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2581" id="CVE-2026-2581" type="cve" title="CVE-2026-2581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26996" id="CVE-2026-26996" type="cve" title="CVE-2026-26996"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2441268" id="2441268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447140" id="2447140" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447141" id="2447141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447142" id="2447142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447143" id="2447143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447144" id="2447144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447145" id="2447145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453037" id="2453037" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453151" id="2453151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453152" id="2453152" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453157" id="2453157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453158" id="2453158" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453160" id="2453160" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453161" id="2453161" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453162" id="2453162" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7670.html" id="ALSA-2026:7670" type="self" title="ALSA-2026:7670"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <module name="nodejs" stream="24" version="8100020260413035318" context="9c84b808" arch="s390x"/>
        <package name="npm" version="11.11.0" release="1.24.14.1.2.module_el8.10.0+4160+4819ac42" epoch="1" arch="noarch" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>npm-11.11.0-1.24.14.1.2.module_el8.10.0+4160+4819ac42.noarch.rpm</filename>
          <sum type="sha256">149b7e5f38874abbc9d1a1f050adfb1b83230912911b200f8251cae7894a2d5d</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.14.1.2.module_el8.10.0+4160+4819ac42" epoch="3" arch="s390x" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.14.1.2.module_el8.10.0+4160+4819ac42.s390x.rpm</filename>
          <sum type="sha256">2876a7e157c907a54b11c117b41148d73c122d6edad30ee9bff40932de97fe46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8473</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:43:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8473" id="RHSA-2026:8473" type="rhsa" title="RHSA-2026:8473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8473.html" id="ALSA-2026:8473" type="self" title="ALSA-2026:8473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">343bf14f4e4d6f6cb9eadf8391d0c3ea34a12de08909cea295100affbf958f8d</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">37e7d2f98c56c53db37cbe5433262fcd77da7953c709172bfabe2d69f7167b6e</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4cbf3b9131612a46be17b1dcf67062137735d58da7c719a80baa8d211e10bf92</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">574932acbfb57ec3529175f0f41f5c270157a9af3d2112534f7774704aa27a6e</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6feb5a22d9b5b289aec20cecda4ff0d2b751cf776b8863884179566a3b2ffbaf</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">747971fff0d55742d85a725d7e64c1374c8d93ee37072d8162eb054df6792439</sum>
        </package>
        <package name="dotnet-hostfxr-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">76b20f26bfda261b2cb18db8a746019b0254886178fcdefeb69e785f8bdc4bb6</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8e67515aff0723c09318fa7a156087982a0dd1a08f3002828c92cbe37db08e2d</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">99f1efa292eeed565839798d426d2f0b1449e3185df9fdddc94f8bdb7d2d26bc</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f39652b06ebfc342f7ec833a0005c2b80f810ae3f949a98a341d40a616013a3</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a1a31244c126e1d98520e225a11ed7bc6b0d4b727a21c62694faf6ae2aa853ac</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">deb5c00d7024219843a2d20ef29050a7d740501f16fe805a394e767dfebdcd83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A001</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 18:59:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-A001.html" id="ALSA-2026:A001" type="self" title="ALSA-2026:A001"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="kernel-modules-internal" version="4.18.0" release="553.121.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.121.1.el8_10.src.rpm">
          <filename>kernel-modules-internal-4.18.0-553.121.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6ea28ca3a2a3f9040f168d7b08626a1d2dd4e13ba0a9302a42d6f7915772f41b</sum>
        </package>
        <package name="kernel-selftests-internal" version="4.18.0" release="553.121.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.121.1.el8_10.src.rpm">
          <filename>kernel-selftests-internal-4.18.0-553.121.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">88cd40a4aca4c27307cf5f27e9066b2cb04057229f3f01e884749f6f20251e48</sum>
        </package>
        <package name="kernel-debug-modules-internal" version="4.18.0" release="553.121.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.121.1.el8_10.src.rpm">
          <filename>kernel-debug-modules-internal-4.18.0-553.121.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b53fadc1633b92e8d91d8474086d830a1911f700954536525e47598d7bdb6528</sum>
        </package>
        <package name="kernel-zfcpdump-modules-internal" version="4.18.0" release="553.121.1.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.121.1.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-internal-4.18.0-553.121.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ecf5b423c6317267ef5442e211d653700423bdd15baf102d105a974b3a51498d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A004</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-08 00:00:00"/>
    <updated date="2026-05-08 15:50:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="cve-2026-43284" type="cve" title="cve-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2467771" id="show_bug.cgi?id=2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-A004.html" id="ALSA-2026:A004" type="self" title="ALSA-2026:A004"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="kernel-zfcpdump-modules-internal" version="4.18.0" release="553.123.2.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.123.2.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-internal-4.18.0-553.123.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">3299abd031fba847bf9102b92c903b55ee8fea8bd66d68ee187081882da2d4ab</sum>
        </package>
        <package name="kernel-selftests-internal" version="4.18.0" release="553.123.2.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.123.2.el8_10.src.rpm">
          <filename>kernel-selftests-internal-4.18.0-553.123.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">911a9ae547cb8a14617f55973587702d5415f3c24c9a907b0a399c0605abfbde</sum>
        </package>
        <package name="kernel-debug-modules-internal" version="4.18.0" release="553.123.2.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.123.2.el8_10.src.rpm">
          <filename>kernel-debug-modules-internal-4.18.0-553.123.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">99a516f8da52e522376f29f0625ac2bb7db3e790308e63ca65c427c63406d6a6</sum>
        </package>
        <package name="kernel-modules-internal" version="4.18.0" release="553.123.2.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.123.2.el8_10.src.rpm">
          <filename>kernel-modules-internal-4.18.0-553.123.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">a40c4b070b530b3b0cedac0200da65219fe66a6fe5b908cc8a6709db381b30ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A008</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-16 00:00:00"/>
    <updated date="2026-05-16 13:00:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):
  * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300)
  * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477015" id="show_bug.cgi?id=2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477802" id="show_bug.cgi?id=2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-A008.html" id="ALSA-2026:A008" type="self" title="ALSA-2026:A008"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-devel-rpms__8_10_default">
        <name>almalinux-8-for-s390x-devel-rpms__8_10_default</name>
        <package name="kernel-modules-internal" version="4.18.0" release="553.124.4.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.124.4.el8_10.src.rpm">
          <filename>kernel-modules-internal-4.18.0-553.124.4.el8_10.s390x.rpm</filename>
          <sum type="sha256">518dd1275350525ef960e7ddb41dcd5093e2c00db510474f0ddefd1eb20627a0</sum>
        </package>
        <package name="kernel-debug-modules-internal" version="4.18.0" release="553.124.4.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.124.4.el8_10.src.rpm">
          <filename>kernel-debug-modules-internal-4.18.0-553.124.4.el8_10.s390x.rpm</filename>
          <sum type="sha256">6b9040079b94c25b6cad6c0561bd7ec59cd189f1d4468535c61770f5dd4e1ca6</sum>
        </package>
        <package name="kernel-selftests-internal" version="4.18.0" release="553.124.4.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.124.4.el8_10.src.rpm">
          <filename>kernel-selftests-internal-4.18.0-553.124.4.el8_10.s390x.rpm</filename>
          <sum type="sha256">857db580a31973bf8e6174caa8a237ca4b98bb98994cc6b174192f7e50885ff3</sum>
        </package>
        <package name="kernel-zfcpdump-modules-internal" version="4.18.0" release="553.124.4.el8_10" epoch="0" arch="s390x" src="kernel-4.18.0-553.124.4.el8_10.src.rpm">
          <filename>kernel-zfcpdump-modules-internal-4.18.0-553.124.4.el8_10.s390x.rpm</filename>
          <sum type="sha256">cda4c188b98049520a119b9acb3243c3aea0c62efff4d7f7b722788fe8d644de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>