ALBA-2026:39332 Copyright 2026 AlmaLinux OS 0 1 None

kernel bug fix and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Bug Fix(es) and Enhancement(s): * XFS data corruption using reflink [almalinux-9.8.z] (JIRA:AlmaLinux-193937) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-devel-matched-5.14.0-687.26.1.el9_8.s390x.rpm 20fc48620ea040ce6c4a77af2d1b94f9f968e8e09cc7afb840def8e9879e2a96 kernel-zfcpdump-devel-5.14.0-687.26.1.el9_8.s390x.rpm 5e62705affcf9fa0de768710aecdd38ec029576d28d259418f2f47558c36603d rv-5.14.0-687.26.1.el9_8.s390x.rpm 61e43b8534d2a90e904130468e55d0c3809ba66f31196582aa8f0e07c15408af kernel-debug-devel-matched-5.14.0-687.26.1.el9_8.s390x.rpm 9301014aaf440fc668ea89343211e49bd83004738ddb772b55e82c7b7280b7cb perf-5.14.0-687.26.1.el9_8.s390x.rpm 95755639a32cc3ac28e46851c63efe1f0787884e583b2e671fd0e8465fab3b82 kernel-devel-5.14.0-687.26.1.el9_8.s390x.rpm a3e66e60c1c0b57f093cba3e88c720e15447c886a964f893caa1d858863a3bd7 kernel-headers-5.14.0-687.26.1.el9_8.s390x.rpm b1b679f8d9a4133579182b5fea8b4d56b88cbdc32704b0e05455bd58fde5a2ea kernel-doc-5.14.0-687.26.1.el9_8.noarch.rpm b5dc97de23576d0a49b9fffae82d81cdbe1dba8a478cf595b768c867f0041c87 kernel-debug-devel-5.14.0-687.26.1.el9_8.s390x.rpm c7ee32d28b5052041592472876326662eef9d3df35f0145700b1cd8ed9bf3d83 kernel-zfcpdump-devel-matched-5.14.0-687.26.1.el9_8.s390x.rpm d7cad66d8c2f9df808063575d594aefadfdd6b5eaf4bfb2e3e5e5187cbbae564 python3-perf-5.14.0-687.26.1.el9_8.s390x.rpm da01093d317b9b3d4d31f6f86f2a3caf60c8a9892cc9648213c684591a4bad7f rtla-5.14.0-687.26.1.el9_8.s390x.rpm e6f77a4939c8874eb54722c6b9c26ef43a64faf6cc2f63fe4d90556f58c27e25 ALSA-2022:4940 Copyright 2022 AlmaLinux OS 0 1 Important

xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * gzip: arbitrary-file-write vulnerability (CVE-2022-1271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default xz-devel-5.2.5-8.el9_0.s390x.rpm 20d9ed7a0f7f5c5fa655156a6adb9f540da85b9701f12107494530440e50052b xz-lzma-compat-5.2.5-8.el9_0.s390x.rpm 503225a8e5a5144b9d277f2b3f6d460ed3844387cc8aa91e91be3ffb47eb361f ALSA-2022:5242 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for vim-X11 is now available for AlmaLinux 9.

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554) * vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943) * vim: Out-of-range Pointer Offset (CVE-2022-1420) * vim: heap buffer overflow (CVE-2022-1621) * vim: buffer over-read (CVE-2022-1629) * vim: use after free in utf_ptr2char (CVE-2022-1154) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default vim-X11-8.2.2637-16.el9_0.2.s390x.rpm 03a4d73180ead90ea0fa2a5d7fe1112705afad91379cfc23e953ef493725f90d vim-common-8.2.2637-16.el9_0.2.s390x.rpm 36f0a983449cd63197792eadaf10591f5e0bb5de015db5c7f7eda39feed4cb69 vim-enhanced-8.2.2637-16.el9_0.2.s390x.rpm 3e2150058b2a17e9079cb1247748574c19d2f7f95f5945889674ff0f29810e33 vim-minimal-8.2.2637-16.el9_0.2.s390x.rpm 92f727fa397ae203b330421c16a69dcb31aba65bf8b404cac33809e68aca5862 vim-filesystem-8.2.2637-16.el9_0.2.noarch.rpm c913d7a2e965f86e79605147e53d90808d00155ca9c626a98ae01fd32cced94b ALSA-2022:5244 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for expat-devel is now available for AlmaLinux 9.

Expat is a C library for parsing XML documents. Security Fix(es): * expat: stack exhaustion in doctype parsing (CVE-2022-25313) * expat: integer overflow in copyString() (CVE-2022-25314) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default expat-2.2.10-12.el9_0.2.s390x.rpm 4ace1782eef776177825151bd82580cd2ceb4861364078c3f52bd4ad3dbe012e expat-devel-2.2.10-12.el9_0.2.s390x.rpm 97d12027bc9d361dad2d06d6ec8cd7609711d85cf3f32b87dfc448f5c028cb56 ALSA-2022:5249 Copyright 2022 AlmaLinux OS 0 1 Important

An update for kernel-debug-devel is now available for AlmaLinux 9.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012) * kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729) * kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966) * kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * make SHA512_arch algos and CRYPTO_USER built-ins (BZ#2072643) * SR-IOV performance > 50% degradation (BZ#2074830) * fix data corruption caused by dm-integrity (BZ#2082187) * SCTP client-side peeloff issues [almalinux-9] (BZ#2084044) * TCP connection fails in a asymmetric routing situation (BZ#2085480) * Fails to boot Multiple RT VMs each with multiple vCPUs (BZ#2086963) * spec: Fix separate tools build (BZ#2090852) * call traces related to eeh_pseries observed and vmcore is not captured, when kdump is triggered (BZ#2092255) * Mark ThunderX NIC driver as unmaintained (BZ#2092638) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default kernel-headers-5.14.0-70.17.1.el9_0.s390x.rpm 1c8f71752eec52043fa93d04aaff6076261ca9fd2679c3d94714c0c834a464cc kernel-debug-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm 1ec4ede320d001664c8588badd6afd423a2acd329cc6e64f07af99cd7ec48090 kernel-debug-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm 21bf850a94070a9756bf1f981871a72c6b68f3d86bd38134cb022dd5120a2796 bpftool-5.14.0-70.17.1.el9_0.s390x.rpm 244ac2d837d13480740573f17f2eaaf456869d3a0840552e6e6920901734bf68 kernel-5.14.0-70.17.1.el9_0.s390x.rpm 314d778b6be5d713ae41d4f58cb4a64ad0c7cc2854670ec8e68cacd91e49b181 kernel-zfcpdump-modules-5.14.0-70.17.1.el9_0.s390x.rpm 3ca98aa034f59f852971c2702560ed1388efdbdf398a6670db7c20da7e92e9b8 kernel-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm 558dde9fc36d95194d371d5c27fc794583d3de90dce8a2cf4d2304a6f7506149 kernel-zfcpdump-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm 5d5f0c5bff8b736157a4a24572b0162cee9707477c21852b9d9df03b3879e22c kernel-devel-5.14.0-70.17.1.el9_0.s390x.rpm 6334b0646f96c354c423698f8329fab0079df4edbd6a5aa3467964d8d1567002 kernel-zfcpdump-devel-5.14.0-70.17.1.el9_0.s390x.rpm 658549321f30ace030c5c72fe90e6cbdd5bf2551a2b55daed5bff216f0c7c159 kernel-zfcpdump-core-5.14.0-70.17.1.el9_0.s390x.rpm 65d553578602c4e9fc437fa6a4e3b1c4076a0ced949f789caa74ebe4c17d3e6d kernel-abi-stablelists-5.14.0-70.17.1.el9_0.noarch.rpm 6c1459fb8b333303c7d981e116ccc0720c4f02c49ad9b933a93cdd2a4dc0f103 kernel-zfcpdump-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm 7c54210e0be71079246cd34b46627014d9522645b6bb2a4486a0d02f1fe865ae kernel-doc-5.14.0-70.17.1.el9_0.noarch.rpm 809a6a2193762c20c65675927231f196c18a5b97e6832f1fe1714467a5b785ca kernel-debug-5.14.0-70.17.1.el9_0.s390x.rpm 8aa147e5ec9235aee462c8b5bcb6e2c6454a160c2d57114be4cd021bbdecf9c7 kernel-modules-5.14.0-70.17.1.el9_0.s390x.rpm 8b954b3ab01b4bf0f424b3ed01b81a0fd64a015a0dec0a1bb5ab863d2d3de4c0 kernel-core-5.14.0-70.17.1.el9_0.s390x.rpm 93315084094f716e88d54b94209d535d4eeee881a1ce1384a37f90b1d16a1c0a kernel-debug-modules-5.14.0-70.17.1.el9_0.s390x.rpm aaf3bfd0e4346e57416fa6f724b1b8d619b8b08b08c13b14e9d2039a3f0a9b2a python3-perf-5.14.0-70.17.1.el9_0.s390x.rpm ab0fa74098a5514fb46ca338eb7bc274fddd7e10ce2361c96092ef330e126913 kernel-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm cefa7a0c97b2176f753be90c54c736e34c6f7a5c5671f8f1b5b817c08decadbd kernel-cross-headers-5.14.0-70.17.1.el9_0.s390x.rpm e51de7eefdd482ee1828547e50c2c017b4b6433291162bd6a169cb0914ca6faa perf-5.14.0-70.17.1.el9_0.s390x.rpm eec19c4e3c60b5a285cd1fee662fe86685c711c0c79be9f9d9508595a1cc5b81 kernel-debug-core-5.14.0-70.17.1.el9_0.s390x.rpm f05d2a35aa7b3e12978a03fde79baf265bce773440705f5f3eba09e71ee878a1 kernel-debug-devel-5.14.0-70.17.1.el9_0.s390x.rpm f11f05b73093541bda0044829365bae37a37b3114bacc6daa1fd58b90f74dddb kernel-tools-5.14.0-70.17.1.el9_0.s390x.rpm fd39899f2b2afa6d0ac39d08490ef8d3df92182231efb62d02e367640a6fea0e kernel-zfcpdump-5.14.0-70.17.1.el9_0.s390x.rpm fe84a39abf81c37637e91cecbec7dfe33ab9868d1cb12434f0bc2844731427f7 ALSA-2022:5252 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for bsdtar is now available for AlmaLinux 9.

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: an out-of-bounds read via the component zipx_lzma_alone_init (CVE-2022-26280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default libarchive-3.5.3-2.el9_0.s390x.rpm 9d9a21f53de7ffbe1585ec4f93c5fe2b29e32232fa87d0919796e4ff9b28b6a7 bsdtar-3.5.3-2.el9_0.s390x.rpm a91013540de7ae254a64677c1040c97435f3aa4858a049101e762cb4944777bf libarchive-devel-3.5.3-2.el9_0.s390x.rpm cf08e05da34f5fe074325ed87c077de2deb35197eb5ac2a158788053b1a07afe ALSA-2022:5257 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for libinput is now available for AlmaLinux 9.

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fix(es): * libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default libinput-utils-1.19.3-2.el9_0.s390x.rpm 4560a3a6f9ca2e4d69c3ce9561c995289d9a49b22750997c81015a85befbf27d libinput-devel-1.19.3-2.el9_0.s390x.rpm 6f100677750e4ecd29d96fe5b9170fb472dd8fd1ee77b08026a6755a2a631ea5 libinput-1.19.3-2.el9_0.s390x.rpm a28458e552b4ce640eb13c9d505b54de8f347cdec5b781427db7c08603425539 ALSA-2022:5263 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for qemu-guest-agent is now available for AlmaLinux 9.

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * QEMU: virtio-net: map leaking on error during receive (CVE-2022-26353) * QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux 9.0 guest with vsock device migration failed from AlmaLinux 9.0 > AlmaLinux 8.6 (BZ#2071102) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default qemu-kvm-device-display-virtio-gpu-6.2.0-11.el9_0.3.s390x.rpm 147391f3bfe04251b171a59d1bc0e47b6f87ea62037217943765901fcb78f5d0 qemu-kvm-common-6.2.0-11.el9_0.3.s390x.rpm 184c7cbd98a3ffd7d9e43543f60f214b266f76ff427ba755b4f61c5fb030257d qemu-kvm-device-display-virtio-gpu-ccw-6.2.0-11.el9_0.3.s390x.rpm 2a18b6ae03485f7108f4b09709be2bbf39700e880fd19e4eba7129c8aac5c985 qemu-kvm-tools-6.2.0-11.el9_0.3.s390x.rpm 2d39c882d5cddfbbabdb483daa456b621c40f98a0d11440e720dc38eb902692a qemu-kvm-6.2.0-11.el9_0.3.s390x.rpm 38ebd93db5916a8c681c4b3e11cf2271fd17f33fd4e35da37585ef67e2a861e7 qemu-kvm-device-display-virtio-gpu-gl-6.2.0-11.el9_0.3.s390x.rpm 477b11b32a456b3401bdf0b9cb5284110c30f27b25a4321e01c97efed1d10fed qemu-kvm-docs-6.2.0-11.el9_0.3.s390x.rpm 4bd0a2df1ab6d3fe3ce0d3596461a0e25e891fcfce4606530652422161b77711 qemu-kvm-device-usb-host-6.2.0-11.el9_0.3.s390x.rpm 73b66c30d47a428274c1c77a32662085e18609aa3b1c7d3176394a760cac262e qemu-kvm-audio-pa-6.2.0-11.el9_0.3.s390x.rpm 7ac1cc10803d52694b70f934306be1912b24797b292c84b83c97aed29f492e2c qemu-kvm-block-rbd-6.2.0-11.el9_0.3.s390x.rpm 8538d4126f3317c203d3820c680a8fb2709c48e86f254ba387fdfe77d5eb214d qemu-guest-agent-6.2.0-11.el9_0.3.s390x.rpm 98439535d452e8ed4843e6e268638c759943010f57ffc5613ee438ce97a15ee3 qemu-kvm-core-6.2.0-11.el9_0.3.s390x.rpm 9a7aaf8cdf26300d5b3e0febf367ada039b9e485e7538c1a3d7042f447a5e3ae qemu-kvm-block-curl-6.2.0-11.el9_0.3.s390x.rpm c32ff02aa439bf5616c9150d0f892c09b02d79b32d05e87ca4e012443c12dcb6 qemu-pr-helper-6.2.0-11.el9_0.3.s390x.rpm deb951466415bb314da21710c395caea58bed03acdf5042bd7a00c8a6d1a8aaa qemu-img-6.2.0-11.el9_0.3.s390x.rpm f715b74f3dcf4831f9a96623d1d48bb8d9aebf75f020b54c582fb852c20d71e9 ALSA-2022:5482 Copyright 2022 AlmaLinux OS 0 1 Important

An update for thunderbird is now available for AlmaLinux 9.

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.11. Security Fix(es): * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-2022-34468) * Mozilla: Use-after-free in nsSHistory (CVE-2022-34470) * Mozilla: A popup window could be resized in a way to overlay the address bar with web content (CVE-2022-34479) * Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (CVE-2022-34484) * Mozilla: Undesired attributes could be set as part of prototype pollution (CVE-2022-2200) * Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid (CVE-2022-2226) * Mozilla: CSP bypass enabling stylesheet injection (CVE-2022-31744) * Mozilla: Unavailable PAC file resulted in OCSP requests being blocked (CVE-2022-34472) * Mozilla: Potential integer overflow in ReplaceElementsAt (CVE-2022-34481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default thunderbird-91.11.0-2.el9_0.alma.s390x.rpm 9b274df61c6ef47c60a49a937fffdd363dc3dcb647ed3fd8e34cd2834e22749e ALSA-2022:5527 Copyright 2022 AlmaLinux OS 0 1 Important

An update for squid is now available for AlmaLinux 9.

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: DoS when processing gopher server responses (CVE-2021-46784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default squid-5.2-1.el9_0.1.s390x.rpm 7df384b54cb6fd1394e05d220d400324b307abe46cf75b19119b576f4ab68400 ALSA-2022:5695 Copyright 2022 AlmaLinux OS 0 1 Important

An update for java-11-openjdk is now available for AlmaLinux 9.

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-11-openjdk (11.0.16.0.8). (BZ#2084777) Security Fix(es): * OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-11] (BZ#2099915) * SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-11] (BZ#2107866) * Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-11] (BZ#2107868) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default java-11-openjdk-11.0.16.0.8-1.el9_0.s390x.rpm 2100fb0b0c65db8d9d84b03d4f2c7989a9ca18c126be06a1b11a83cfa7e36488 java-11-openjdk-javadoc-zip-11.0.16.0.8-1.el9_0.s390x.rpm 2e0b0fb62c9287f3876a393afb7fae722daedf1d06535eb8fb1129512b2fb123 java-11-openjdk-static-libs-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm 30d6e0be63968c22f1340152fa60d4f9e25a9bb8b63df9c11a9051ee20bfade3 java-11-openjdk-javadoc-11.0.16.0.8-1.el9_0.s390x.rpm 384c8917d813c69fb0c2b90f57c3f20ee2e74842ba08fa3dc086156b367cf03c java-11-openjdk-headless-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm 448b9c34d7fb4bef0d11cdb013c2c7031887a1ff947979ec0aac227bd3140d5b java-11-openjdk-jmods-11.0.16.0.8-1.el9_0.s390x.rpm 5488e365ed8e636eb0d266825dbc2e4a113349d3e15052b55594005c59ecf13f java-11-openjdk-jmods-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm 5c484910d3c26532111dfbf37da5572ddde1ce20de1c89dc619bbf4f5eb588b9 java-11-openjdk-demo-11.0.16.0.8-1.el9_0.s390x.rpm 624d7dd68d3358bbf16362575941d8a0c29ece83e27e8e7cdf19d4a93bdcec6c java-11-openjdk-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm 823f3c1319841869e735533ae5330c54d2f700d017bdb880a4c639211b586558 java-11-openjdk-src-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm 87a06c2355a91726b0a58519132e2643291885c2dd07884b467c1107c8f75155 java-11-openjdk-devel-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm 93822026212ec5999f27829e7c8aa1fe52a50b935c717b649930f1a23f83f3c7 java-11-openjdk-static-libs-11.0.16.0.8-1.el9_0.s390x.rpm ab768747d3ef855a62cd12c77420b86c5960baec93e5e2b7aa2ae9bee6f6bea6 java-11-openjdk-demo-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm cd6273eeffd83d107e86f6a6108a731b85d21021136b038a032b82c0c0812eab java-11-openjdk-headless-11.0.16.0.8-1.el9_0.s390x.rpm cdb6b8354d443f46f625f7a9fb3695272aa5539d2efe1621ac4df1c6f0af8aa9 java-11-openjdk-devel-11.0.16.0.8-1.el9_0.s390x.rpm df5c4e62cb0f9e96d5303e0a779d687b46bdbecf84317c83af3a2537da02bc2a java-11-openjdk-src-11.0.16.0.8-1.el9_0.s390x.rpm f0808c76eb4d6cc7f231b0354cd8a4c16deefd627aaea81a57a4d5dd207fa146 ALSA-2022:5709 Copyright 2022 AlmaLinux OS 0 1 Important

An update for java-1.8.0-openjdk is now available for AlmaLinux 9.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-1.8.0-openjdk (1.8.0.342.b07). (BZ#2084776) Security Fix(es): * OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-8] (BZ#2099916) * SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-8] (BZ#2107956) * Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-8] (BZ#2107958) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default java-1.8.0-openjdk-javadoc-1.8.0.342.b07-1.el9_0.noarch.rpm 016c0c76cdcb9e6561492bf3c35a2cedde2695d2d3573cb0ca2a4fa753bf5a75 java-1.8.0-openjdk-src-1.8.0.342.b07-1.el9_0.s390x.rpm 29c7366dcbd590099906bfc35189e7a3021f445ff493e2c61f7b48eb2b9a07a9 java-1.8.0-openjdk-devel-1.8.0.342.b07-1.el9_0.s390x.rpm 42e346332d01180b339ed65516228075b44c257531f81eca17c5457cdef5ec63 java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.s390x.rpm ccb707fb101b9f45b3b3a97b34c57923a65ae21b788b2bacdc97f0876eb13d4b java-1.8.0-openjdk-headless-1.8.0.342.b07-1.el9_0.s390x.rpm d849852e7b3d1781ce869688385a0c0756d723067019f804829e762f78418e29 java-1.8.0-openjdk-javadoc-zip-1.8.0.342.b07-1.el9_0.noarch.rpm eef6d2e8806b1e7e959d8ea2224f3ff6f2aa5e4802e5b61ddcebf3adad114d9b java-1.8.0-openjdk-demo-1.8.0.342.b07-1.el9_0.s390x.rpm f0539609f45106e9d1570ed9248e2ffa51790b35a7d1d0459b8d37c4fe390ab2 ALSA-2022:5716 Copyright 2022 AlmaLinux OS 0 1 Important

An update for grafana is now available for AlmaLinux 9.

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: OAuth account takeover (CVE-2022-31107) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default grafana-7.5.11-5.el9_0.s390x.rpm 2db72859aaf9127b8405f4bf0ed1088f083637bcc425998920079d262ff24613 ALSA-2022:5736 Copyright 2022 AlmaLinux OS 0 1 Important

java-17-openjdk security, bug fix, and enhancement update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-17-openjdk (17.0.4.0.8). (BZ#2084779) Security Fix(es): * OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541) * OpenJDK: random exponentials issue (Libraries, 8283875) (CVE-2022-21549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Previous AlmaLinux builds of OpenJDK 17 altered the arguments passed to sun.security.pkcs11.wrapper.PKCS11.getInstance() in order to facilitate FIPS support. This build adds an additional form of the method, retaining the original arguments, so that applications which depend on this internal method continue to function with AlmaLinux builds of OpenJDK. (BZ#2099919) * With previous AlmaLinux builds of OpenJDK 17, Mac key generation and import would fail due to the lack of the CKA_SIGN attribute on the key. This attribute is now added as part of the NSS FIPS configuration. (BZ#2105395) * With the release of AlmaLinux, a change was made so that disabling OpenJDK FIPS mode required the use of both the -Djava.security.disableSystemPropertiesFile=true and -Dcom.AlmaLinux.fips=false options, with the intention that FIPS mode could be controlled independently of system security properties. This change has now been reverted and only -Djava.security.disableSystemPropertiesFile=true is required to disable FIPS mode, as in AlmaLinux. (BZ#2107941) * Previous AlmaLinux builds of OpenJDK 17 running in FIPS mode with a SecurityManager would fail due to a lack of module access permissions. This has now been corrected. (BZ#2107943) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default java-17-openjdk-static-libs-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm 24db0f88c67f9550e87167dfda19daf9ca29474b397247762f9a47e7d5b011b8 java-17-openjdk-headless-17.0.4.0.8-2.el9_0.s390x.rpm 2b93f408a31923006f19c413154b7eec765ee7b53628c113ad5364b9a1b0ce16 java-17-openjdk-static-libs-17.0.4.0.8-2.el9_0.s390x.rpm 34fe937d82ab93004edf7be54669f70a19ec72240689bfe288323298b1d07436 java-17-openjdk-src-17.0.4.0.8-2.el9_0.s390x.rpm 387aea975f89f436cd1b2a9ee32b7d614381027f7badc81a0a61c0ffb4d95119 java-17-openjdk-demo-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm 3f7846224b077c69826909ae8f82ecec039ca52da03c91ce04cca1d745dfd8a8 java-17-openjdk-jmods-17.0.4.0.8-2.el9_0.s390x.rpm 62ddfe081f89a21c2668bdd1ffad3fdee7c6117df6eab86f412b32f1d274540a java-17-openjdk-devel-17.0.4.0.8-2.el9_0.s390x.rpm 6771617bef156727698c7aab9cc6abb1a483e90634629d0bf2685a356c588749 java-17-openjdk-17.0.4.0.8-2.el9_0.s390x.rpm 722c850f0f06a8b092de99623e3d24892372182ff1056586645524796b6fd809 java-17-openjdk-headless-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm 7ce758d7226ecc78bfb76bfe73ca6f2abc1a796c15b27764224bedd3db45c54e java-17-openjdk-jmods-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm 95f144cf0823b9fd736bc02a3c6e6940bcd8b978bac3a9dfdd386f9176efa9b2 java-17-openjdk-javadoc-zip-17.0.4.0.8-2.el9_0.s390x.rpm 9e20e557167a421e5b322eb2fd2e383122f757b0c57921e207b41737d2859471 java-17-openjdk-demo-17.0.4.0.8-2.el9_0.s390x.rpm b193b74ef98fc43242a4acfc7f1448286ea6e029bed92591b0cffc389c1102c1 java-17-openjdk-devel-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm de6a8848752ec754063a4913f108c5c704445767d7717fbe4859714fb9c74bfa java-17-openjdk-javadoc-17.0.4.0.8-2.el9_0.s390x.rpm e7ce0ff503f361e9749c61e9c4f180764366a579a068e10e7b2b427b1aacd148 java-17-openjdk-src-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm f3ff12b9089a06177e25f59635deecae412dd7d21c1d6aec51bcb28d522e40ce java-17-openjdk-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm f6b3c11d4d12c836ec3ff792d549394f66add574e64d7e612a66560978f73fb6 ALSA-2022:5799 Copyright 2022 AlmaLinux OS 0 1 Important

go-toolset and golang security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962) * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Clean up dist-git patches (BZ#2109174) * Update Go to version 1.17.12 (BZ#2109183) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default golang-src-1.17.12-1.el9_0.noarch.rpm 0b7982ba93764e9d97bdd2937f55dbc99d9e1b594393d05ca6186d4023556dac golang-tests-1.17.12-1.el9_0.noarch.rpm 72104a38591636eb5347c52dc7fc99796145050bce5c947969d9ddfc3faa4dbb golang-misc-1.17.12-1.el9_0.noarch.rpm 752b856860d0d280cc130b91e5b23392fa0011704db90256af79fa7b6dcf10e2 golang-1.17.12-1.el9_0.s390x.rpm 8c3dc7b1b40ecd48a29e8dedbcd40da581f99567b9fc13bd69559c70eb096294 golang-docs-1.17.12-1.el9_0.noarch.rpm c8197d076419d8de01726a8e6e5818593a8c2358bc4afb2843a93e69a9a69daf golang-bin-1.17.12-1.el9_0.s390x.rpm e849bfad0f4fbaa1148803a9e13181ccf4eb48f476e49cebb7282fa36cc45b06 ALSA-2022:5904 Copyright 2022 AlmaLinux OS 0 1 Important

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: password of excessive length triggers buffer overflow leading to RCE (CVE-2022-31626) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default php-enchant-8.0.13-2.el9_0.s390x.rpm 01d7a91a61725f06a19b2ed4f82f64d41611f1c176dcff906e889238230fe784 php-common-8.0.13-2.el9_0.s390x.rpm 0285b51a315e95e522c7ad9bd24e1458f24030ac29bcb66b1eda8a18b4f91e1d php-fpm-8.0.13-2.el9_0.s390x.rpm 22b016a4a70d6f883fc750b0f2aa45843f848e3693139a58f3aa0e4d2896b73e php-soap-8.0.13-2.el9_0.s390x.rpm 26eb832673c1772919a81131aaa4a8293419de1e1e00176be730bad0c1c75bdb php-bcmath-8.0.13-2.el9_0.s390x.rpm 3d99693bbf0ce7e68dc7df8c66ca4456c782e2cb9d6a623c841dea9648c7f626 php-odbc-8.0.13-2.el9_0.s390x.rpm 3fba1ac53ba5c693eb84469307bf3450720544af147285537a052b13b074a990 php-devel-8.0.13-2.el9_0.s390x.rpm 56008684226ea1ea4d130ae055bb4fdef393c9bd4a4aadf6abfed0b5e467b805 php-mysqlnd-8.0.13-2.el9_0.s390x.rpm 6bd5a76a53df3880b18b1954e4605f8faa39956837903ac0bdc6403a82210cec php-ldap-8.0.13-2.el9_0.s390x.rpm 6e6ecf1e96475f5f4d1db9b5c51c0b76179b67b35e773b62639d417bfd1acbc5 php-embedded-8.0.13-2.el9_0.s390x.rpm 7cef904e28b70a33a02e0bd78a4d898c5b5779762f9ada47059447f2e864d82a php-ffi-8.0.13-2.el9_0.s390x.rpm 84b4568dd750f6a5ee4384556df20ff09d3442e4d8085228f7a3fc9cf3889a53 php-dba-8.0.13-2.el9_0.s390x.rpm 8a9132b3bd89ff1efe8170c60d0cb8f361a8a64e2b7c3cd7cb159fd6b9cd0cbc php-gmp-8.0.13-2.el9_0.s390x.rpm 9f50e9c0924f85b6446b889fd403e774a6e2c87da8e90defdf7f14142f260d06 php-8.0.13-2.el9_0.s390x.rpm b5214ce1dea8ce9dbcca7813d2ddd9a8b4685cb32566e2e7d1be393de1ed817b php-process-8.0.13-2.el9_0.s390x.rpm b5fb20434b27b9560a98340205ad76c4d86c892466d69ef9ca310071fffe817c php-opcache-8.0.13-2.el9_0.s390x.rpm b825b80d9fbe750edbb999e2df9ebf75c40aa04ddc14952981671fc8c3c2b7ff php-snmp-8.0.13-2.el9_0.s390x.rpm c6ba959e954243073a80e057354d8216d3737b385ab895cd04c87717699cec5d php-pgsql-8.0.13-2.el9_0.s390x.rpm c7bdb07c89feaf9ff0aac3f5f7630827f63ee6e81b73d5df281c21d927a20347 php-intl-8.0.13-2.el9_0.s390x.rpm c807b5f45cd82ac25c865a04328344068badcec5865efa5ee9ab4f54187c53af php-mbstring-8.0.13-2.el9_0.s390x.rpm df34884ecb3a2a1ceeb47316e1858396ebb81a99b27660194ad91877d70f23bf php-xml-8.0.13-2.el9_0.s390x.rpm eb3757cde6bcdd6fa1fbc1c265e0c2c94d01fd1e0db3e37a154d846e0fbe92e6 php-gd-8.0.13-2.el9_0.s390x.rpm ed775187df856b553f7dfbd877420a5607aa03183bf0fa142363f56311acafb7 php-cli-8.0.13-2.el9_0.s390x.rpm ef1714fd3ac9a0760172438a588ed8aa72946f853449069da293b0a1fabb7e8c php-pdo-8.0.13-2.el9_0.s390x.rpm efd0fc1052bd1bcdfb1298384947ed5dfd1f8b6838149a64ba89769697ca96ee php-dbg-8.0.13-2.el9_0.s390x.rpm f797cf333ab10e14ff0e32779210da9899607fee35086bbed47e13549d04d845 ALSA-2022:5942 Copyright 2022 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Out-of-bounds Write (CVE-2022-1785) * vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897) * vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default vim-enhanced-8.2.2637-16.el9_0.3.s390x.rpm 6361babcc548c897029de08f018eb55e858f26a68c7a94218f771cc7fa9052b0 vim-filesystem-8.2.2637-16.el9_0.3.noarch.rpm 85377e40c2d0d6abc50777ec8eb90ec6a20cc2cc106fcb471585ad16ed4f920f vim-minimal-8.2.2637-16.el9_0.3.s390x.rpm af63cc7bc1dc8a4616bfc2b8a2820972901ad04f084c5d768de792d2136b3d9a vim-common-8.2.2637-16.el9_0.3.s390x.rpm e59a743b18e4a8f310497504b01ffd7a06d7e996c4473cdec3cbe9c3dde1f11a vim-X11-8.2.2637-16.el9_0.3.s390x.rpm f17a910d139e0cce5c73a92b5fab9e34da10ac7e834ee01bb36b99bda7bf9a92 ALSA-2022:5948 Copyright 2022 AlmaLinux OS 0 1 Moderate

galera, mariadb, and mysql-selinux security, bug fix, and enhancement update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5). Security Fix(es): * mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669) * mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048) * mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050) * mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051) * mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052) * mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376) * mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377) * mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378) * mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379) * mariadb: server crash at my_decimal::operator= (CVE-2022-27380) * mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381) * mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382) * mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383) * mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384) * mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386) * mariadb: assertion failures in decimal_bin_size (CVE-2022-27387) * mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444) * mariadb: assertion failure in compare_order_elements (CVE-2022-27445) * mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447) * mariadb: crash in multi-update and implicit grouping (CVE-2022-27448) * mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449) * mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451) * mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452) * mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455) * mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456) * mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623) * mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659) * mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661) * mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663) * mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664) * mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665) * mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default mariadb-backup-10.5.16-2.el9_0.s390x.rpm 2b79935a79b9b38dacbb156955865e3c015186a6a1363d467278078f65d8b073 mariadb-server-utils-10.5.16-2.el9_0.s390x.rpm 46eeb4cf8bdfd728a093181b7f0b22e9b18aad5f873b91b38e6ab620525e3ed4 mariadb-oqgraph-engine-10.5.16-2.el9_0.s390x.rpm 4998e4b26b0370c2b7b888e954e0d26fa62e667d96eae0069205f278a1ae4551 mariadb-server-10.5.16-2.el9_0.s390x.rpm 65adc8d50f18a4bffd1f335ec7138feb7b6a6e60cd7653265fd65f6d52b5e698 mariadb-10.5.16-2.el9_0.s390x.rpm 732dab00be1c7d2e6210d5fc0c8c550200c36a01fe46a1711415b7ec02e4814a mariadb-pam-10.5.16-2.el9_0.s390x.rpm 975261dfe362348bff47e4058e7610a0d257083310b33ae579a88c299163ebc4 mariadb-common-10.5.16-2.el9_0.s390x.rpm b04fd9035206c6e2ae9b2dcf76f0ee1da63604f23a45c67c04a5ce13b45897ff mariadb-test-10.5.16-2.el9_0.s390x.rpm b2dcbba4ed23cf529d96b736292034086c6914479b6a39e6d91039427219975a mariadb-gssapi-server-10.5.16-2.el9_0.s390x.rpm b6aa9f15ceab06fc61a8e8abe4c990da3659a20f42c17909222aef3324ceb8bb mariadb-devel-10.5.16-2.el9_0.s390x.rpm bd2f1ed7cfb768fe1ec4ede49366f7d3f90fac87363d3dd97ee7ce64ed42d38c mariadb-embedded-10.5.16-2.el9_0.s390x.rpm f2e6037e84dbd95103119d290e7972b72c4052717964e9d18590eb8688a62396 mariadb-embedded-devel-10.5.16-2.el9_0.s390x.rpm fa1e775a824f64274a62358ac5e0df3fd48a356ef74cab87073ee864ead2522a mariadb-errmsg-10.5.16-2.el9_0.s390x.rpm fa3e41f38a47a6f4660060e152b669f8b29552903d0ab0a0c1af820b9b0066ca mariadb-server-galera-10.5.16-2.el9_0.s390x.rpm fefd371740d55e6748ad87e7a5dc218a8825baae9316e4069a6e279df3053103 ALSA-2022:6003 Copyright 2022 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * information leak in scsi_ioctl() (CVE-2022-0494) * use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248) * Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253) * FIPS module identification via name and version (BZ#2093384) * gfs2: File corruption with large writes when memory is tight (BZ#2097306) * i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251) * AlmaLinux 9.1 doesn't support 3rd SATA (BZ#2099740) * Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903) * Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854) * Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858) * lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085) * OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974) Enhancement(s): * iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default kernel-core-5.14.0-70.22.1.el9_0.s390x.rpm 0644481c45fb6b0969b5597e1b07ab567a10b60d9416941abb275682fe21462b bpftool-5.14.0-70.22.1.el9_0.s390x.rpm 156982325685f1eecbd0586c2a75a76b568875cd1f1d2e8ecc3df0cdc9c371e5 kernel-doc-5.14.0-70.22.1.el9_0.noarch.rpm 232d05e4af484d9fb62fcffcdb7b23f898a654e8107f29507eaa1d61344427aa kernel-debug-core-5.14.0-70.22.1.el9_0.s390x.rpm 24d188c95afb3f367976170f99f22b96a5373e6e808da9e27aaf4ec37ba642b9 kernel-headers-5.14.0-70.22.1.el9_0.s390x.rpm 258f0be2224fa3f2295c4c07c2494e53114bd6dd0a6e95847d6cea89c77fd8d8 kernel-zfcpdump-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm 26df0e894bfe2bddbbf1c79fdbc08b7c626adb1f7ca32a8a2c2e46be04dfd53c kernel-debug-modules-5.14.0-70.22.1.el9_0.s390x.rpm 2a1469c0c44b7290cd72246a98c87332841058be3fb29dae8cbdc4375bfb27f5 perf-5.14.0-70.22.1.el9_0.s390x.rpm 3c5b628aa62ecf6e50abe12ba5076b3d2922ec60d43bc2ace91a57b76033fd5c kernel-zfcpdump-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm 41c5293fe8405da40a0e509c6e778d27374b3c743e1a5e07d7d57e5ef31e034f kernel-modules-5.14.0-70.22.1.el9_0.s390x.rpm 4226cc3e39177830aac6b00cd92c65b2da64e64c9ab2ea086fcd110aa7d67a73 kernel-cross-headers-5.14.0-70.22.1.el9_0.s390x.rpm 4a945f9f27e425cd30e4f513d94161b86252ccb9ce8d737cd77faafeef9dd289 kernel-tools-5.14.0-70.22.1.el9_0.s390x.rpm 5dfb3530c7f5f0abc4a2f1d4ae60f37ee22bf3cdab97e58f06657c3d9adfe176 kernel-zfcpdump-core-5.14.0-70.22.1.el9_0.s390x.rpm 713c3f2f80f07f73f086ef1d4b7cba5e041d684d93663ec8c37e6a1f7b121e45 kernel-zfcpdump-devel-5.14.0-70.22.1.el9_0.s390x.rpm 77a4d8749a4cc28f425cf8a2c74fb5b75c5744afb56ecc0739e9bb2e8c4fd4bb kernel-5.14.0-70.22.1.el9_0.s390x.rpm 83bab7059170940d38429006e1294a608d064489eeedf4d786f0f9c30fa3f57c kernel-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm 89873b6dd6b279acb752ef1c24f54b7c1749032f2ccf14ae08467a4f91aa4046 kernel-debug-devel-5.14.0-70.22.1.el9_0.s390x.rpm 9a3d61a0cc86655206e4df2bc373e8aab4b4f6b53e478d4f653e5c4495356a3e kernel-debug-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm 9ec86f69e12e4625e1fa0525b5668f9e7e4534561521cccdc5fc1686198ec1d2 kernel-abi-stablelists-5.14.0-70.22.1.el9_0.noarch.rpm a7507bb31645b36cd5120e3dee6c9f7928ea50fa4707527e8af610752ebdea2e kernel-debug-5.14.0-70.22.1.el9_0.s390x.rpm ab2767e4b22e4d31ec41d37ac33c5bdde0a779b2a85909cc352c1b189533619b python3-perf-5.14.0-70.22.1.el9_0.s390x.rpm cc4bd21bec173e015820b8a211bb005ef5def3b6559b63243761204f536dca66 kernel-debug-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm ce291f2dd2ed2a92acd5401273330e0ca02b5ee228617329e20db3e25d8c1776 kernel-zfcpdump-modules-5.14.0-70.22.1.el9_0.s390x.rpm ceae4af4aedc55ebd2f29b9aa774b5488b19a650bfb95c216e8a09216fbce136 kernel-zfcpdump-5.14.0-70.22.1.el9_0.s390x.rpm dba4d7ecb3300f6c675fed35c43013b84820865a93201413783dc558e78850bd kernel-devel-5.14.0-70.22.1.el9_0.s390x.rpm fc0e3030e061696ef149861997da4b337cbd741a3863139b1cbb96ad6cf52edb kernel-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm ffffa93f2ee3672af348482d6849fc0a57469603ea3b1447326f00df1e50fdb7 ALSA-2022:6043 Copyright 2022 AlmaLinux OS 0 1 Moderate

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8. Security Fix(es): * dotnet: External Entity Injection during XML signature verification (CVE-2022-34716) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default dotnet-templates-6.0-6.0.108-1.el9_0.s390x.rpm 321f0ca55f249ee7eb74eb5cd0fe991c6f3572e421eeea33fa293b119c38617a dotnet-hostfxr-6.0-6.0.8-1.el9_0.s390x.rpm 3ddbd4f95120658648ef691e54a75d682925daa5482c499f4be45ced0bcd4bc5 aspnetcore-runtime-6.0-6.0.8-1.el9_0.s390x.rpm 5a22120709fd668f7855a33834a980b330020e831e32f182d4d3fb6b47edd41c dotnet-apphost-pack-6.0-6.0.8-1.el9_0.s390x.rpm 652e1d0307b8bdd541ed78fea9c33c6d31827cfe81f84974a6e2a3f9a53a9354 dotnet-runtime-6.0-6.0.8-1.el9_0.s390x.rpm 9e90661c3da2338e62f07d71cbf9e187be9e0bccb5072212fc29074a8bfe81aa dotnet-targeting-pack-6.0-6.0.8-1.el9_0.s390x.rpm a7ee85d67d78b29da9ccaf30af208af3821558a4924869fe4535ede265e0047b dotnet-sdk-6.0-source-built-artifacts-6.0.108-1.el9_0.s390x.rpm aa3fd3db6e6e482093b1aef9ae9a4e1571fafc4af58d44f36524eac202e524b9 aspnetcore-targeting-pack-6.0-6.0.8-1.el9_0.s390x.rpm b8c5125f7b2697d75647a903cd7f3b79af7af5a77769bae874c5a8b28e310c08 dotnet-sdk-6.0-6.0.108-1.el9_0.s390x.rpm bcea0bf0024dfc1219d27cc66d7a3a96a49b72eeac42cfe3079898cbca19cc70 dotnet-host-6.0.8-1.el9_0.s390x.rpm c6573742163d39e9df9c6e7c1cbb39682172b59cc469850e80da74effba77e54 netstandard-targeting-pack-2.1-6.0.108-1.el9_0.s390x.rpm e3f12fa5e07917de2917cf3e1033738dd854b055c072356d7535ccbc631c1ea2 ALSA-2022:6157 Copyright 2022 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP compression denial of service (CVE-2022-32206) * curl: Unpreserved file permissions (CVE-2022-32207) * curl: FTP-KRB bad message verification (CVE-2022-32208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default curl-minimal-7.76.1-14.el9_0.5.s390x.rpm 4932a3edafa05bb711a1d10122b0ca63b7cde5f83cd6eb040c7c300b9a685b8f libcurl-minimal-7.76.1-14.el9_0.5.s390x.rpm 6c2ca659861bae86bb98a954ab7768c718971cfa51468f11d0ea50dbe9ef9671 libcurl-devel-7.76.1-14.el9_0.5.s390x.rpm 7d1bad3dd6f1856757371d6eb026ddf00f4761fd7a32457e6c496d4228cb6864 libcurl-7.76.1-14.el9_0.5.s390x.rpm 8de310a61ed9bc03273bc051d2d004d9482c288156212e440ee16397fa569547 curl-7.76.1-14.el9_0.5.s390x.rpm d99d0828c7bd4e888b4e12d99c8e7ced9bbfe7bf1c787d97d092765600768c16 ALSA-2022:6165 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.13.0. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478) * Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default thunderbird-91.13.0-1.el9_0.alma.s390x.rpm 80faa00eca76c2730a89404bd9007e41910132c0c968c9c0a4ce84277b882708 ALSA-2022:6174 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.13.0 ESR. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478) * Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default firefox-91.13.0-1.el9_0.alma.s390x.rpm a3d801de3fac26c3494fb27df0839e252c0e91c755f59592046140224e919a28 ALSA-2022:6224 Copyright 2022 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: c_rehash script allows command injection (CVE-2022-1292) * openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS (CVE-2022-1343) * openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473) * openssl: the c_rehash script allows command injection (CVE-2022-2068) * openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323) * openssl req defaults to 3DES (BZ#2085499) * OpenSSL accepts custom elliptic curve parameters when p is large [almalinux-9] (BZ#2085508) * OpenSSL mustn't work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521) * openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554) * Converting FIPS power-on self test to KAT (BZ#2086866) * Small RSA keys work for some operations in FIPS mode (BZ#2091938) * FIPS provider doesn't block RSA encryption for key transport (BZ#2091977) * OpenSSL testsuite certificates expired (BZ#2095696) * [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044) * [FIPS lab review] self-test (BZ#2112978) * [FIPS lab review] DH tuning (BZ#2115856) * [FIPS lab review] EC tuning (BZ#2115857) * [FIPS lab review] RSA tuning (BZ#2115858) * [FIPS lab review] RAND tuning (BZ#2115859) * [FIPS lab review] zeroization (BZ#2115861) * [FIPS lab review] HKDF limitations (BZ#2118388) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default openssl-perl-3.0.1-41.el9_0.s390x.rpm 19e09234a2d390dd7396772f4fd685832e0e698483e2b571743dcb6e79606ce7 openssl-libs-3.0.1-41.el9_0.s390x.rpm 2f4db1d05c5967b1613af2556ba65e837803a8269de5c9da87238cc480a04f07 openssl-3.0.1-41.el9_0.s390x.rpm 4c614245f6803d73e3c186c960ced85f97141fdb9c88ba86e45fd50b44818288 openssl-devel-3.0.1-41.el9_0.s390x.rpm 803117f0b8d91424b2b980d07f14469674728f72d4e1313301e620350a578dd1 ALSA-2022:6521 Copyright 2022 AlmaLinux OS 0 1 Moderate

.NET 6.0 security and bugfix update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.109 and Runtime 6.0.9. Security Fix(es): * dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default aspnetcore-targeting-pack-6.0-6.0.9-1.el9_0.s390x.rpm 073390a815ef77f079d78eca182305f2451c5300961963124387978f805e558b dotnet-hostfxr-6.0-6.0.9-1.el9_0.s390x.rpm 25d2c052099487f1fece05b3fb696d19ff9a3e031ad3ed13b66f0ef5003a722d dotnet-templates-6.0-6.0.109-1.el9_0.s390x.rpm 3d820e8f52954c0f769e5d98a26b184ff00f6a1b09af7393b13e4762e25db0fd dotnet-host-6.0.9-1.el9_0.s390x.rpm 75a77a25cdd24f38e29b9e8975a6532ebfe68104e09a8db64a248cbeb73fea36 dotnet-sdk-6.0-6.0.109-1.el9_0.s390x.rpm 76518c4e2921d69f0d4074fdec3d9381beb703098cf47ae3e95edc4c23a7292c aspnetcore-runtime-6.0-6.0.9-1.el9_0.s390x.rpm 7f30a02e5677415f6250cbb45479f44c9e3a6ebd2b77c63d5fbcde1ecf6b33bd netstandard-targeting-pack-2.1-6.0.109-1.el9_0.s390x.rpm 8f5e3a3a445bf6e2b75c08aa5944f52c4da46b9911ecf9eea0eed53b0fd6c51d dotnet-apphost-pack-6.0-6.0.9-1.el9_0.s390x.rpm 9671252f864339ae1c338113cf0b7c645373013e053facb63ba5345f6a394957 dotnet-targeting-pack-6.0-6.0.9-1.el9_0.s390x.rpm bdbe6d245facf641cbffa6bf347a794e0d4fa1c27a1fe064e1c2fd86e5cf5a33 dotnet-runtime-6.0-6.0.9-1.el9_0.s390x.rpm d824487c1d032bcd0ac53cbb66b02de6d3be7dd4b3815d38d95a1cd7fa68f643 ALSA-2022:6585 Copyright 2022 AlmaLinux OS 0 1 Moderate

ruby security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109428) Security Fix(es): * Ruby: Double free in Regexp compilation (CVE-2022-28738) * Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default rubygem-typeprof-0.15.2-160.el9_0.noarch.rpm 0e4ebca19523f0dd89c46c21b776d45379ff1f7965dd423b1bcd5edd4c25760e rubygem-bigdecimal-3.0.0-160.el9_0.s390x.rpm 0e830553ff3a8120c2fe781a14e9764fb316b96ff32679b85327e91ae08463e3 ruby-devel-3.0.4-160.el9_0.s390x.rpm 199e39c49fa0e84c747d3b2f5b3b1928d8c31e5af866b206f48045808369e856 ruby-libs-3.0.4-160.el9_0.s390x.rpm 2904c108c6751e752e0f7f7d293fbee731c2a5dd512217277a29cd2415d0c496 rubygems-devel-3.2.33-160.el9_0.noarch.rpm 47177d171a1e9ac58dbdbd0cfa2c2d7bfa1fbce55ee3ec6b92594bab516989d0 rubygem-io-console-0.5.7-160.el9_0.s390x.rpm 4bdd33435032c2989bd03c2ab93b51444a3a0a90c49c37d0c172ee5d3f104964 rubygem-rexml-3.2.5-160.el9_0.noarch.rpm 4f4959a3c7e6da46ba9d96fbdb71606c64279adf58d3a6a0911f9bfe09d6b645 rubygem-psych-3.3.2-160.el9_0.s390x.rpm 5779e832a7343fb377cbfca8fc45d891e1c67dc62602f7a3b2bc286623bb308c rubygem-rss-0.2.9-160.el9_0.noarch.rpm 61a9cc11ee03f87dd24cf9437cd68a44069d279d19aec452a3cccc458dbdd4e5 rubygem-test-unit-3.3.7-160.el9_0.noarch.rpm 7024ae2f1fa78bc46be4bfe7431a70487ddc3cd7b2e14fd87b6cf84f73509b07 rubygem-json-2.5.1-160.el9_0.s390x.rpm 8e2f3ec7c2baef29aa9c6901ad7f290e7d3aec1df570286124e7276cc9ae1057 rubygem-power_assert-1.2.0-160.el9_0.noarch.rpm 8ff3ddf87d8dd8b83b9103045a0708901a7e8092d200ca2a16df15876cadf340 rubygems-3.2.33-160.el9_0.noarch.rpm aafc90f5db348d735b316df9f67be318a979cbc3f5a86526803ec1434a9211dd rubygem-rbs-1.4.0-160.el9_0.noarch.rpm ad33ce0a8b6973ad3bbfba439352d266df2e1ad21de24ab67d133d3daa53c0c6 rubygem-irb-1.3.5-160.el9_0.noarch.rpm ba2d4b5d69df5102d425754d33d39d9a3cad8fbdb4a0ea77bb8764b8abb6469d rubygem-bundler-2.2.33-160.el9_0.noarch.rpm d08e0feb932a0abca51a465f64dc33e1846d40c17238985766802619c2f5c9c5 ruby-default-gems-3.0.4-160.el9_0.noarch.rpm d6ff792d62fb767eafc17c3adb6ab2508483465114145d720cd973c80b4678a3 rubygem-rake-13.0.3-160.el9_0.noarch.rpm dcf530d4f64670dd945be39f1740fe8b044ca91ad2b944e7da92ddf5ce441517 rubygem-minitest-5.14.2-160.el9_0.noarch.rpm ddfbf5092d973b37876796cd4edaa28501cbc73352b513e5960bbe2823892814 rubygem-rdoc-6.3.3-160.el9_0.noarch.rpm e091290bdfbdfde6d68e691c18dea88f4b765de5989f0abaa101678981fdd20b ruby-3.0.4-160.el9_0.s390x.rpm f1700bb8db49aab00553f3e737bc2b5bc06f57b07cefc5c9211caefb2f20ae0b ALSA-2022:6590 Copyright 2022 AlmaLinux OS 0 1 Moderate

mysql security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql (8.0.30). (BZ#2122589) Security Fix(es): * mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479) * mysql: Server: DML unspecified vulnerability (CPU Apr 2022) (CVE-2022-21413) * mysql: Server: Replication unspecified vulnerability (CPU Apr 2022) (CVE-2022-21415) * mysql: InnoDB multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21423) * mysql: Server: DDL multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21425, CVE-2022-21444) * mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427) * mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21454) * mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Jul 2022) (CVE-2022-21455) * mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21457) * mysql: Server: Logging unspecified vulnerability (CPU Apr 2022) (CVE-2022-21460) * mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21556, CVE-2022-21569) * mysql: Server: Options unspecified vulnerability (CPU Jul 2022) (CVE-2022-21515) * mysql: InnoDB multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21517, CVE-2022-21537, CVE-2022-21539) * mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21522, CVE-2022-21534) * mysql: Server: Federated unspecified vulnerability (CPU Jul 2022) (CVE-2022-21547) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022) (CVE-2022-21538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Default logrotate set to wrong log file (BZ#2122592) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default mysql-8.0.30-3.el9_0.s390x.rpm 04f4ce53bf3aa72a10250fcf29c9036c18b9963b84f776b832a9ca4563d73581 mysql-common-8.0.30-3.el9_0.s390x.rpm 50cc292a9d25ef3b326dab7a80cc242f75f49cc2aa276199a18f350f7fb02add mysql-server-8.0.30-3.el9_0.s390x.rpm 621cf51365f2f23b7899f85f25b0b760e843f4384523506e1d4b4514b0177d56 mysql-errmsg-8.0.30-3.el9_0.s390x.rpm 846759e868df968044c5a3225f7fd83683987fe2937a6670baf9428930c5172c ALSA-2022:6595 Copyright 2022 AlmaLinux OS 0 1 Moderate

nodejs and nodejs-nodemon security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.16.0), nodejs-nodemon (2.0.19). (BZ#2124230, BZ#2124233) Security Fix(es): * nodejs-ini: Prototype pollution via malicious INI file (CVE-2020-7788) * nodejs-glob-parent: Regular expression denial of service (CVE-2020-28469) * nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes (CVE-2021-3807) * normalize-url: ReDoS for data URLs (CVE-2021-33502) * nodejs: npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace (CVE-2022-29244) * nodejs: DNS rebinding in --inspect via invalid IP addresses (CVE-2022-32212) * nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding (CVE-2022-32213) * nodejs: HTTP request smuggling due to improper delimiting of header fields (CVE-2022-32214) * nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding (CVE-2022-32215) * got: missing verification of requested URLs allows redirects to UNIX sockets (CVE-2022-33987) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * nodejs:16/nodejs: Rebase to the latest Nodejs 16 release [almalinux-9] (BZ#2121019) * nodejs: Specify --with-default-icu-data-dir when using bootstrap build (BZ#2124299) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default npm-8.11.0-1.16.16.0.1.el9_0.s390x.rpm 5012acac30b3193d44851431eea176d5d85c999da0d0714d0d0d9018e57b9215 nodejs-16.16.0-1.el9_0.s390x.rpm 8367b283998785ca6393aa56dd7d2ca22332c6ebccdf1de3d596155df6124729 nodejs-full-i18n-16.16.0-1.el9_0.s390x.rpm a9310950f78eabffa319b6c7450c943c0c667708870d8cebb0f0710166fc611f nodejs-libs-16.16.0-1.el9_0.s390x.rpm f4c469487099585e5a513787bcd38534b267d1ae350f9cd62031333b59393bda ALSA-2022:6602 Copyright 2022 AlmaLinux OS 0 1 Moderate

gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fix(es): * gpg: Signature spoofing via status line injection (CVE-2022-34903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default gnupg2-smime-2.3.3-2.el9_0.s390x.rpm c886bcbb7b3cc74c795cf87817a34750002734d2055c5c345489040eceb5996a ALSA-2022:6610 Copyright 2022 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918) * kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * RDMA/mlx5: Fix number of allocated XLT entries (BZ#2092270) * mlx5, Setup hanged when run test-route-nexthop-object.sh (BZ#2092535) * many call traces from unchecked MSR access error: WRMSR to 0x199 in amazon i4.32xlarge instance (BZ#2099417) * X86/platform/UV: Kernel Support Fixes for UV5 platform (BZ#2107732) * block layer: fixes for md sync slow and softlockup at blk_mq_sched_dispatch_requests [9.0.0.z] (BZ#2111395) * Fixes for NVMe/TCP dereferences an invalid, non-canonical pointer, kernel panic (BZ#2117755) * Adding missing nvme fix to AlmaLinux-9.1 (BZ#2117756) * nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue) (BZ#2118698) * Important ice bug fixes (BZ#2119290) * Power 9/ppc64le Incorrect Socket(s) & "Core(s) per socket" reported by lscpu command. (BZ#2121719) Enhancement(s): * lscpu does not show all of the support AMX flags (amx_int8, amx_bf16) (BZ#2108203) * ice: Driver Update (BZ#2108204) * iavf: Driver Update (BZ#2119477) * i40e: Driver Update (BZ#2119479) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default kernel-zfcpdump-devel-5.14.0-70.26.1.el9_0.s390x.rpm 05455baf86287d1ce41b8179b708ef5eab21dc01025a90de0691ffb5e9109c09 kernel-debug-devel-matched-5.14.0-70.26.1.el9_0.s390x.rpm 17cbf370d53cb071c4a8da724fe021ae54b9b45fb326635f7cfeb8e3066d8f2c kernel-debug-devel-5.14.0-70.26.1.el9_0.s390x.rpm 54f138fc08ded88b6bb516e2ed6f2c91731766b458851b13312df8476c8bc5e5 perf-5.14.0-70.26.1.el9_0.s390x.rpm 94714d3de86ae9a6103cb53a5842b968ca431606efe7adf345316a5b2f400bd7 kernel-devel-5.14.0-70.26.1.el9_0.s390x.rpm a5fa64bad946eaaa5daab4db087d1858eef2e47033d8a0c235ae2ef5668fc314 kernel-devel-matched-5.14.0-70.26.1.el9_0.s390x.rpm b3c642f33efb3b75b96e1fc2b220a839fc37d9d6a25af6aef46f07af4328239f kernel-zfcpdump-devel-matched-5.14.0-70.26.1.el9_0.s390x.rpm e41680b5d8d54e95b9bd951dbdb6ee302dde40e56226fb771f4fd9bead653b2d ALSA-2022:6634 Copyright 2022 AlmaLinux OS 0 1 Moderate

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.36.7). Security Fix(es): * webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution (CVE-2022-32893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default webkit2gtk3-2.36.7-1.el9_0.s390x.rpm 11aaa78101539beac5638c01bd73b050b28f6f29985e1faa1ce69b24be8a961a webkit2gtk3-jsc-devel-2.36.7-1.el9_0.s390x.rpm 4408f52fa1a5c02cfb3318828f7e355fdef441f7fda1e474d1893cfb85aa38bd webkit2gtk3-jsc-2.36.7-1.el9_0.s390x.rpm 4d9b0b281bfe8fbabce8f8dabab0ceaccd772a4be7d9af4b6fac989bf4e96cc6 webkit2gtk3-devel-2.36.7-1.el9_0.s390x.rpm f3a22eca5bf0e92d5193cb07f51df7e6fc5aaa60f9b6e47b6c17ff01e8cdb030 ALSA-2022:6700 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.3.0 ESR. Security Fix(es): * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959) * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960) * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962) * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958) * Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956) * Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default firefox-102.3.0-6.el9_0.alma.s390x.rpm db6877f2df2d218d5f5c7c8910a93a31587175526ea30651501c1c6a017d5ca6 ALSA-2022:6717 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.3.0. Security Fix(es): * Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag (CVE-2022-3033) * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959) * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960) * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962) * Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked (CVE-2022-3032) * Mozilla: An iframe element in an HTML email could trigger a network request (CVE-2022-3034) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2022-36059) * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958) * Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956) * Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default thunderbird-102.3.0-3.el9_0.alma.s390x.rpm 7b87f39cb16e5c7bd63e9d9866cc3ceee9bbd0333bf726a58d6c8dffb072fedb ALSA-2022:6763 Copyright 2022 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080) * bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177) * bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default bind-libs-9.16.23-1.el9_0.1.s390x.rpm 3285b8b4aacf9d59c671a6b7df3b6165e99b4c1d1f0d5363c0b7742c1d137e88 bind-dnssec-doc-9.16.23-1.el9_0.1.noarch.rpm 4088d5438d88486bafd546b5fb2ce066ca0050519d9080299ef4cdd16fb3b279 bind-dnssec-utils-9.16.23-1.el9_0.1.s390x.rpm 64265e8fd90a25e7efd9c1aa1ba8da91ca6d1a88438b59f54262788c5f93e233 bind-chroot-9.16.23-1.el9_0.1.s390x.rpm a10c4c4b446ae5406c96497db5552c5f5e9f8229455cf8f20f07bf1bdd128b9b python3-bind-9.16.23-1.el9_0.1.noarch.rpm b4ab83c8dc85311851f565c3d71ab2af15778c57f1b1216c43ca4c896fcf2d0a bind-utils-9.16.23-1.el9_0.1.s390x.rpm c11e187fde1f20cd234729b6ef065a6c3b6c42e2ea3cf472e7511d249e605784 bind-license-9.16.23-1.el9_0.1.noarch.rpm e745141e636123b205e4d059aa3b57e080a29f58d014d6f6e5ca704d05093e33 bind-9.16.23-1.el9_0.1.s390x.rpm f3270d758e96dbb1ed374fa45c8388174c60bce65ac0b7517be38a1a5c42cc76 ALSA-2022:6838 Copyright 2022 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default expat-devel-2.2.10-12.el9_0.3.s390x.rpm e48d6c1fb21f77490f701c66e38b9fd093e8dbb5a1bc0b60d40950e8da09d585 ALSA-2022:6839 Copyright 2022 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default squid-5.2-1.el9_0.2.s390x.rpm 410e69fd923c3e6af28a08e5052fc2cfe0b2a260c1f29dd05403e81d8454cdb3 ALSA-2022:6854 Copyright 2022 AlmaLinux OS 0 1 Moderate

gnutls and nettle security, bug fix, and enhancement update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space. The following packages have been upgraded to a later upstream version: gnutls (3.7.6), nettle (3.8). Security Fix(es): * gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [IBM 9.1] [P10] POWER10 performance enhancements for cryptography: nettle - incremental work (BZ#2102589) * Allow enabling KTLS in AlmaLinux 9.1 (BZ#2108532) * DES-CBC bag is decryptable under FIPS (BZ#2115314) * allow signature verification using RSA keys <2k in FIPS mode (BZ#2119770) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default gnutls-dane-3.7.6-12.el9_0.s390x.rpm 60f0563103d4078c319e4c1a45678c4659627dd592fb111e3bdbabcde040ee3b gnutls-utils-3.7.6-12.el9_0.s390x.rpm b17a7c6308415346376848dc3ee19f8f29310fd06128d311ece88f6de78acd26 gnutls-devel-3.7.6-12.el9_0.s390x.rpm d78f394ef54194d9f988a69f85e9f2d9b289d651fdedc3fd4d5217c6681f8271 gnutls-c++-3.7.6-12.el9_0.s390x.rpm fd2cd5f4675be1c34f75c47e8fa9d8f5055ce66658aee53a3483ccd4cb81d584 ALSA-2022:6913 Copyright 2022 AlmaLinux OS 0 1 Moderate

.NET 6.0 security and bugfix update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.110 and .NET Runtime 6.0.10. Security Fix(es): * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default dotnet-hostfxr-6.0-6.0.10-1.el9_0.s390x.rpm 023ea4f843b582a34b5a26c8a7eead1cd42669c5b3beb3a79f7609422c30c75d dotnet-runtime-6.0-6.0.10-1.el9_0.s390x.rpm 312bc9acbf4198825da48f4a13a6434350cb336018e9ea5fbced11e41890fb68 dotnet-templates-6.0-6.0.110-1.el9_0.s390x.rpm 3b6e0fa8c03fd437729519b89e663a9ab5e256a896447e1e27d1dbc9bf9961d9 aspnetcore-runtime-6.0-6.0.10-1.el9_0.s390x.rpm 4057ae7ea551e1833881cf91593d94521e7400f19f9cbb4c42be210758f69746 netstandard-targeting-pack-2.1-6.0.110-1.el9_0.s390x.rpm 8b7b1949fb3794c10f10516dfe00db6ddaf00337b38d7959869317e068860615 dotnet-apphost-pack-6.0-6.0.10-1.el9_0.s390x.rpm 8fe38e7896232a782c9cd5985b61809d2348def647dd832bc1ca598bf946591e dotnet-targeting-pack-6.0-6.0.10-1.el9_0.s390x.rpm ac9cd07adae0822d77a053570290de47f4e57b3a43b177122908731e04bf8856 dotnet-sdk-6.0-6.0.110-1.el9_0.s390x.rpm c373039779fb08d99d872753834e62ceb9a8f4928fe31e67d6cd3a5c4506be9c aspnetcore-targeting-pack-6.0-6.0.10-1.el9_0.s390x.rpm e521cbdcab62cad236eeacd75fdfdd7316a970373feb11fa2dd65035f0834e6d dotnet-host-6.0.10-1.el9_0.s390x.rpm f3454e299c7ac62b8a60948e30e086a3a138955489dee71f83f98393b096a6bd ALSA-2022:6963 Copyright 2022 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.17.1). Security Fix(es): * nodejs: weak randomness in WebCrypto keygen (CVE-2022-35255) * nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default npm-8.15.0-1.16.17.1.1.el9_0.s390x.rpm 010ce55fd7f4b99fc64cd309abf08101e8a97a9b75bff513faeb833d0b725d9f nodejs-docs-16.17.1-1.el9_0.noarch.rpm 025d8cf2ef9c89f70a4254dae5644efaa1dfaa4f88db77dec807afd44515bd8c nodejs-16.17.1-1.el9_0.s390x.rpm 590bec1e3025a4e9ce6f99ec31334ab8fa075a3ba3043c1302fa9c48a0aaadde nodejs-libs-16.17.1-1.el9_0.s390x.rpm 807232891ec884518f3e57b6fbc5262225e8b43b74db337ecf91496354026791 nodejs-full-i18n-16.17.1-1.el9_0.s390x.rpm dd0d43ef0ebe4f59f4f4235c3735ab8b0fe77f10e5c22d5ff9b706ba0de4ca07 ALSA-2022:6999 Copyright 2022 AlmaLinux OS 0 1 Moderate

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618) * OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) * OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619) * OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624) * OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [almalinux-9] (BZ#2132934) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default java-17-openjdk-static-libs-17.0.5.0.8-2.el9_0.s390x.rpm 03564565d526a82e9f0f03b124689736a6ac663759f492de92a18fe67a55b3ac java-17-openjdk-headless-17.0.5.0.8-2.el9_0.s390x.rpm 0d491e520e83eb0e734662a18a1683456d76bcbeecb070b8c31822e5865801a3 java-17-openjdk-devel-17.0.5.0.8-2.el9_0.s390x.rpm 28667fb8f7ed71a53e4100aa15ed28c9347bb47eb0333df2b62b3ba5ce924974 java-17-openjdk-javadoc-17.0.5.0.8-2.el9_0.s390x.rpm 37010655edb41c33fda9544b4fef0fd04d4bfca7ddae164e3d509c90ef43f061 java-17-openjdk-jmods-17.0.5.0.8-2.el9_0.s390x.rpm 5327071f32ab4fe4e75d64fc1b436b013729731e47fa158ab2da6a0e7945873c java-17-openjdk-demo-17.0.5.0.8-2.el9_0.s390x.rpm 7a7aaa17745bcbd2036cdceca9bdfea37316e04ff7d04ac1baad6a117e63bc48 java-17-openjdk-javadoc-zip-17.0.5.0.8-2.el9_0.s390x.rpm 92dcc578a8897262eb5121982118f22839ff1c93d082d6cc662b1918c8b6af5a java-17-openjdk-src-17.0.5.0.8-2.el9_0.s390x.rpm c70881f441bdf27e6a2fa6907981169985c5c95aeb227e65b263f9f5dad4ca28 java-17-openjdk-17.0.5.0.8-2.el9_0.s390x.rpm e14a344f2faa556defc15577d33d1b63ddddcfa37b17e53db9a19512912627ed ALSA-2022:7007 Copyright 2022 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) * OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619) * OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.s390x.rpm 06d68f066651b947f82ec684fb455a3946458e8bb8892a30dd2fb4e33905e132 java-1.8.0-openjdk-javadoc-zip-1.8.0.352.b08-2.el9_0.noarch.rpm 0714bda4f7c43d4248299ccb0595b9d9ccd9eccc742c38214fb935d4e8af98e8 java-1.8.0-openjdk-src-1.8.0.352.b08-2.el9_0.s390x.rpm 3998c7d2ee5f105e2079d3f849f32f8e3535ba6eb70469ee1b21194fe4cd60ce java-1.8.0-openjdk-demo-1.8.0.352.b08-2.el9_0.s390x.rpm 8316fac006d41db046d47a86858c220e4a2624dc11891eed2b3743ed1a05bd7a java-1.8.0-openjdk-headless-1.8.0.352.b08-2.el9_0.s390x.rpm aa52902ff8184f064e3fd305cd429cdb77ea68a29294d99117aba50472d44c34 java-1.8.0-openjdk-devel-1.8.0.352.b08-2.el9_0.s390x.rpm fba0ba7d902ba2bf1d319f44428f584a4aa07e89c25c256ba3e8108401f22a80 java-1.8.0-openjdk-javadoc-1.8.0.352.b08-2.el9_0.noarch.rpm fbc0ac4bca06e1bc8994469e44bd70533e25c849c92964be80bf998d8e4359a2 ALSA-2022:7013 Copyright 2022 AlmaLinux OS 0 1 Moderate

java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618) * OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) * OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619) * OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624) * OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [almalinux-9] (BZ#2131865) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default java-11-openjdk-headless-11.0.17.0.8-2.el9_0.s390x.rpm 184533e5107898c19af4799f72b6a8d390413212cf60971176aee41a0d18e986 java-11-openjdk-demo-11.0.17.0.8-2.el9_0.s390x.rpm 2b8d7a8a05fa6deb41bbe833a2b4f6ef12debffd0aa49a337aba813647086805 java-11-openjdk-devel-11.0.17.0.8-2.el9_0.s390x.rpm 2d6dfcac9805a2634efb10185694e6c177568f11a8e138615f0dbaa8860272c7 java-11-openjdk-javadoc-zip-11.0.17.0.8-2.el9_0.s390x.rpm 443c46997ad8959d0697c88836f2a7dc65d16ef1dea1dd55b2726fd9a2932566 java-11-openjdk-static-libs-11.0.17.0.8-2.el9_0.s390x.rpm 51a422d2b993088b3baac7d07eaa011a0e823bc5d272b680b94d0bc7cee864df java-11-openjdk-11.0.17.0.8-2.el9_0.s390x.rpm 81ecedbb68b18659389274c63fa3484048d6f1826804886edb47afd740721096 java-11-openjdk-jmods-11.0.17.0.8-2.el9_0.s390x.rpm a871c3c34828517dd7036fa1d9653826a74401a7396c367f0c43d9c2a1930826 java-11-openjdk-src-11.0.17.0.8-2.el9_0.s390x.rpm fcf7d67d87a6a9871b0a92385823504f01ef9ddd8a6139ecfd1dc46d8e73b1d5 java-11-openjdk-javadoc-11.0.17.0.8-2.el9_0.s390x.rpm fd636c6b53f8007722323347c08a43a1a2de71f0a61f47e0e572f4cf5267edb9 ALSA-2022:7020 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.3.0 ESR. Security Fix(es): * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default firefox-102.3.0-7.el9_0.alma.s390x.rpm 74bd0fe9a65c88c4e8a4dd17979b98619056ce696c225b62348b8ce319f6debf ALSA-2022:7071 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.4.0 ESR. Security Fix(es): * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Memory Corruption in JS Engine (CVE-2022-42928) * Mozilla: Denial of Service via window.print (CVE-2022-42929) * Mozilla: Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4 (CVE-2022-42932) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default firefox-102.4.0-1.el9_0.alma.s390x.rpm c5350f5a9243afcbc09593c3d4e12f17967d3ab259d5aca0aaa735c73a74c336 ALSA-2022:7178 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.4.0. Security Fix(es): * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators (CVE-2022-39249) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack (CVE-2022-39250) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack (CVE-2022-39251) * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Memory Corruption in JS Engine (CVE-2022-42928) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue (CVE-2022-39236) * Mozilla: Denial of Service via window.print (CVE-2022-42929) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4 (CVE-2022-42932) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default thunderbird-102.4.0-1.el9_0.alma.s390x.rpm 3c403c39757473cef161471688eb770324cb292320a1bda31b4ddc39c00b2103 ALSA-2022:7288 Copyright 2022 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full strength general purpose cryptography library. Security Fix(es): * OpenSSL: X.509 Email Address Buffer Overflow (CVE-2022-3602) * OpenSSL: X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default openssl-devel-3.0.1-43.el9_0.s390x.rpm 2c76733a57f43cc39144cc197112915e7930461adcc8439faa78a5e8c72f3656 openssl-perl-3.0.1-43.el9_0.s390x.rpm 6653bb74b8f05ffe5c87d8d66cfa4c985b03f26f029fa684ea279621c92cc119 ALSA-2022:7314 Copyright 2022 AlmaLinux OS 0 1 Moderate

zlib security update

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default zlib-devel-1.2.11-32.el9_0.s390x.rpm d66b3e3c74e1a0de970e452f2ecf2a25473bd39ec4511cecee4953dbc87f7073 ALSA-2022:7318 Copyright 2022 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585) * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095653) * execve exit tracepoint not called (BZ#2106661) * Matrox black screen on VGA output on some systems. (BZ#2112017) * The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2121129) * watchdog BUG: soft lockup - CPU#30 stuck for 34s! [swapper/30:0] (BZ#2127857) * Update cifs to 5.16 (BZ#2127858) * Bad page state in process qemu-kvm pfn:68a74600 (BZ#2127859) * vfio zero page mappings fail after 2M instances (BZ#2128791) * The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (part 2) (BZ#2128970) Enhancement(s): * Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129453) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default kernel-zfcpdump-devel-matched-5.14.0-70.30.1.el9_0.s390x.rpm 061aa4ea2e1e24d67b0870d5ff6e38783b16ead9d087591e5077bf6a8970e570 kernel-doc-5.14.0-70.30.1.el9_0.noarch.rpm 0bb3d9bfc7a0fc3862ef5f8dc61a994adef7e0c034d6efe9843032ece643b8b7 kernel-headers-5.14.0-70.30.1.el9_0.s390x.rpm 13f7ea1fa448064f7b5d925a78c94d307efb6bb45f5e5cc814e6ee6bdda5e779 kernel-debug-devel-5.14.0-70.30.1.el9_0.s390x.rpm 22f83cc7a67213bdd80805fe0a4c93600ed8f51efd9ba09663b138c95171044d kernel-devel-matched-5.14.0-70.30.1.el9_0.s390x.rpm 239d935c3e80a4417073fc184509d2899c667a1b542f029b7710ec7700d60c07 kernel-debug-devel-matched-5.14.0-70.30.1.el9_0.s390x.rpm 34e6820c0862117f8184ab57f2d7391fcd74fc614637480cdb8d47fb8562db4e kernel-zfcpdump-devel-5.14.0-70.30.1.el9_0.s390x.rpm 3d5aa414635206c1329222cc3764e8a791482716b598e369c1366584fc96709f perf-5.14.0-70.30.1.el9_0.s390x.rpm c216272e52202f636894717a66b0c55d3bc1a04c8ec3be9f23fd1791835b4c29 kernel-devel-5.14.0-70.30.1.el9_0.s390x.rpm cd5adb6e324750ac08ff6971735695e2ecbca9a34841136aed94be658b14fe87 ALSA-2022:7323 Copyright 2022 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default python3-tkinter-3.9.10-3.el9_0.s390x.rpm 4d14890655284b30bc192e2a1c0447b96565dbdc8b588d94e1ff35806d312aca python3-devel-3.9.10-3.el9_0.s390x.rpm 70f3ac4f0e5e30f6eec3413255337bd96d3734d25e86b194d04632be65ceed58 python-unversioned-command-3.9.10-3.el9_0.noarch.rpm 78e87a3c80853180d4daadc3503e72fc628b08d5282685446fec795339bd949e ALSA-2022:7326 Copyright 2022 AlmaLinux OS 0 1 Important

pki-core security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default python3-pki-11.0.6-2.el9_0.noarch.rpm 33588e2de71f461b5623c09ff8adfb2b3501e1389cb53e40417c594ee5e76649 pki-kra-11.0.6-2.el9_0.noarch.rpm 3663ecde2b327e6e9f2824d4b2e3ca103e06304c8fd027f61cc26959937ec8d0 pki-base-java-11.0.6-2.el9_0.noarch.rpm 37d249b5772c7b4be85aa3bd4f758feb90df6fbbb2f2ad42c5884784d98e9829 pki-tools-11.0.6-2.el9_0.s390x.rpm 5a2c3ad030b0c1fd1c0f31d352ea80a57b6b7ab7b52057dd97a98200ceb0e4c3 pki-symkey-11.0.6-2.el9_0.s390x.rpm 62c8796b84c14d26be775baf4b94139569f47466833b3bb916fb5fc78e431462 pki-acme-11.0.6-2.el9_0.noarch.rpm 7b1d3aedda9b7ea346d9730a6d7066fa2e1b406b4d9b0a55cb8ccce598d9900c pki-server-11.0.6-2.el9_0.noarch.rpm 81de71c2f5baa1a1a9dfd5835efeb21ec435c73b06c57646f86cd4791c1d620e pki-base-11.0.6-2.el9_0.noarch.rpm b5255a17f14305055a701fa99beabc0fa64becfd31413319cb6f77b7f57d8a7c pki-ca-11.0.6-2.el9_0.noarch.rpm e656727cd48c57a2caa56693717055ad5cc708a1a8bcb2dc3dd86d4fa5897305 ALSA-2022:7329 Copyright 2022 AlmaLinux OS 0 1 Moderate

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling (CVE-2022-33099) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_default lua-5.4.2-4.el9_0.3.s390x.rpm 241e6776d500dbe56d58c34edaade9ae02e479cb1f218aaf5e2cbe008110a4e5 ALSA-2022:7950 Copyright 2022 AlmaLinux OS 0 1 Low

Image Builder security, bug fix, and enhancement update

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security Fix(es): * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default weldr-client-35.5-4.el9.s390x.rpm 8ddc566887b0c2bae85d85f10d3baec7045bc9002feec2a801d2349221b9f98a ALSA-2022:7954 Copyright 2022 AlmaLinux OS 0 1 Moderate

podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension (CVE-2020-28851) * golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852) * podman: podman machine spawns gvproxy with port bound to all IPs (CVE-2021-4024) * podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199) * containers/storage: DoS via malicious image (CVE-2021-20291) * golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197) * golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558) * golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default podman-4.2.0-3.el9.s390x.rpm 0d7fac306f08937559dc2858e052832bc79c723a6ca68d3f98b14a1ff87d2f11 podman-remote-4.2.0-3.el9.s390x.rpm 4c9f4b49244a0b9908409cc68a0b9033629744c7d3c874cc3b3f3ef50bb83aff podman-plugins-4.2.0-3.el9.s390x.rpm 4f1dc8c53da46de2b84bcd98457e6deed15b4b430763b46cc5c23ce1aed7ac60 podman-docker-4.2.0-3.el9.noarch.rpm 73f67ab96051535408d365b625b0fe93169751c1b97cae0c9604aa9d9e299591 podman-gvproxy-4.2.0-3.el9.s390x.rpm ce1086d0ed376330348f6a57412174cdf66e3ca775af05d4529ac129d9dd92c4 podman-tests-4.2.0-3.el9.s390x.rpm db036ec746500fdcdb8bd7e048dda17d0a12ece13be5d070ec8285b77d5facae ALSA-2022:7955 Copyright 2022 AlmaLinux OS 0 1 Moderate

skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * containers/storage: DoS via malicious image (CVE-2021-20291) * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default skopeo-tests-1.9.2-1.el9.s390x.rpm 2962082e0775fce2ef0ec859a171e128455b396014863fce9cf307513f964a72 skopeo-1.9.2-1.el9.s390x.rpm 742d56708d94df4ee029e87c9f643e3faa52baf1cce37ff137f030ce0b158a8b ALSA-2022:7958 Copyright 2022 AlmaLinux OS 0 1 Low

libguestfs security, bug fix, and enhancement update

The libguestfs packages contain a library used for accessing and modifying virtual machine disk images. Security Fix(es): * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default perl-Sys-Guestfs-1.48.4-2.el9.alma.s390x.rpm 0118717f0cb79199bdb786242658eddc8616053925db121132a13a22607017e7 libguestfs-appliance-1.48.4-2.el9.alma.s390x.rpm 077fcc48ead35ba4b6e4eee604a4e4d05a9bc0f63693a1dc8f6ad92aa1c0fcdc libguestfs-1.48.4-2.el9.alma.s390x.rpm 18479d85b1883ea0ee7417a1f53fb9b86504ae22e6d0ebd503c825cdf5c0ae0a libguestfs-xfs-1.48.4-2.el9.alma.s390x.rpm 250156b5e1c352672b50fd14e8999ef4a58740603eb961f8da3bc9167ae8d8e0 python3-libguestfs-1.48.4-2.el9.alma.s390x.rpm b3884573dacab941f910a94922a5ba7e3383e22125f8f7531395b1df7dca09be libguestfs-rsync-1.48.4-2.el9.alma.s390x.rpm bc47ff0113036b3a6b50eb4f7c182ed2bd6744f46638d49658acdf9e121bd382 libguestfs-rescue-1.48.4-2.el9.alma.s390x.rpm d43ffb8649f6454e607c49c7819131137e23856cc553fb0ae807675b722c96f3 libguestfs-inspect-icons-1.48.4-2.el9.alma.noarch.rpm f38562adf153fb78b7c76f54007cf32c4ce191b9b6435f581ee90ad94527fca8 libguestfs-bash-completion-1.48.4-2.el9.alma.noarch.rpm faccb71d666a91ce603f7b7350d7044cb98fbf437ea0599dc6d1ef67dee07c3d ALSA-2022:7959 Copyright 2022 AlmaLinux OS 0 1 Low

guestfs-tools security, bug fix, and enhancement update

guestfs-tools is a set of tools that can be used to make batch configuration changes to guests, get disk used/free statistics, perform backups and guest clones, change registry/UUID/hostname info, build guests from scratch, and much more. Security Fix(es): * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default guestfs-tools-1.48.2-5.el9.s390x.rpm 671307e20bc6afdbca490ae70ae2c1af88e46611a627b7a15ecfe97da9fc4daa virt-win-reg-1.48.2-5.el9.noarch.rpm cc2169b08c202855da33ed07c538af06a1102c453878b9def543e2ac7071e0b7 ALSA-2022:7967 Copyright 2022 AlmaLinux OS 0 1 Moderate

qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a later upstream version: qemu-kvm (7.0.0). (BZ#2064757) Security Fix(es): * QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free (CVE-2021-3750) * QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507) * QEMU: intel-hda: segmentation fault due to stack overflow (CVE-2021-3611) * QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default qemu-kvm-audio-pa-7.0.0-13.el9.s390x.rpm 01978350b41b64443d2d59395322f0bbb8656154dbc25afe3738920ee0509f9f qemu-kvm-device-display-virtio-gpu-ccw-7.0.0-13.el9.s390x.rpm 1aa7033a406b41886d7830a8d3985288487d2b9fc0a34a439d979ecf48f9b943 qemu-kvm-common-7.0.0-13.el9.s390x.rpm 26184fb20ad36ed0cf9b66a712c8fd842f295e2e32bff66316fd452c7fbf04db qemu-kvm-device-display-virtio-gpu-7.0.0-13.el9.s390x.rpm 39eef99a7a7e4002723484120d313c8f68d983bbd334c63f30ae4fb7b47aeee7 qemu-guest-agent-7.0.0-13.el9.s390x.rpm 43ce90c54a2d4b0d42f7d379e809ba9035573b9fdd12eea56d0726223b5efe51 qemu-kvm-tools-7.0.0-13.el9.s390x.rpm 55ce02b6f5f872398b828d9e0a16cbc7f26df8a81152b1d7f133e62f1327662d qemu-img-7.0.0-13.el9.s390x.rpm 61d52a4cb129054d2822343a84594e3f2a22d26d020664bbe58d0d7c2a5ade5d qemu-kvm-block-curl-7.0.0-13.el9.s390x.rpm 806c308ab8a010fdbef0072dcd256e7fcc0abe1b4d7712097e744804f0dcde20 qemu-kvm-block-rbd-7.0.0-13.el9.s390x.rpm 898f9f53e52b54765c9b48ec730f27f25e886b92646f50dafceae9df4f94ecaa qemu-kvm-docs-7.0.0-13.el9.s390x.rpm ab444489a2a7da9d8d0b43d4046ac1c638d2a4fcf449f7089e46c44f0a91489f qemu-kvm-device-display-virtio-gpu-gl-7.0.0-13.el9.s390x.rpm acb4077d3908a1648fb0e43948ff9598e904bf0cc616d7314499530ce6a6603d qemu-pr-helper-7.0.0-13.el9.s390x.rpm b55c70b1599c4afea6e674cde9ffc9d440ebef791a142089ebe6aa5d991b0420 qemu-kvm-7.0.0-13.el9.s390x.rpm c012f755c12e9f2ef74101ae5a4a8f5f60d52ad08223ceaacf5523f8631e6d09 qemu-kvm-device-usb-host-7.0.0-13.el9.s390x.rpm cf4d71f1f7cbe95a940d2dfcda719598c80ab76b5673e00c316c81dda80cfba1 qemu-kvm-core-7.0.0-13.el9.s390x.rpm f2dce77348a7ae9188b04bd5d2890099e3e7ebe92ac50e956370d9c578987baf ALSA-2022:7970 Copyright 2022 AlmaLinux OS 0 1 Moderate

protobuf security update

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data. Security Fix(es): * protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default protobuf-3.14.0-13.el9.s390x.rpm 38f9248700e0b80246ec9a206a0b0a07246fb622879568f1cc86cde316ab2b2b protobuf-lite-3.14.0-13.el9.s390x.rpm 70baac52b4b6a54fc8889eff07e3de02691f8f36100f5bd6fa8a81dc36421a98 python3-protobuf-3.14.0-13.el9.noarch.rpm 9a5664787d9851b1758b25d0fb5d278f659b56141b23cce23349fe8c58e7de78 ALSA-2022:7978 Copyright 2022 AlmaLinux OS 0 1 Moderate

gimp security and enhancement update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: buffer overflow through a crafted XCF file (CVE-2022-30067) * gimp: unhandled exception via a crafted XCF file may lead to DoS (CVE-2022-32990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default gimp-2.99.8-3.el9.s390x.rpm 0402338b885bcac316b5a45a34e2c0b40ac19cd9ce1ffcd3358c5aa3abb84a2a gimp-libs-2.99.8-3.el9.s390x.rpm a5b4b4dcd6f4db985cccc3fc666b62c2a41e5972e4780b3c9550cc978bc0babd ALSA-2022:7979 Copyright 2022 AlmaLinux OS 0 1 Low

speex security update

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fix(es): * speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default speex-1.2.0-11.el9.s390x.rpm 4af15d8583198ab945de2ce69aec1bb02547d2248a202da73f64541e50dd737d ALSA-2022:8003 Copyright 2022 AlmaLinux OS 0 1 Low

libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. The following packages have been upgraded to a later upstream version: libvirt (8.5.0). (BZ#2060313) Security Fix(es): * libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libvirt-daemon-driver-storage-mpath-8.5.0-7.el9_1.s390x.rpm 122585507e1b232a6694bc80dae780c3a0d2fe03bbc4a59919c45d1298e624e8 libvirt-libs-8.5.0-7.el9_1.s390x.rpm 26c90e1fd15a8f40a6ecbdadb90c6996559fcdad65d7f501e2d1805ebdeae9f0 libvirt-daemon-kvm-8.5.0-7.el9_1.s390x.rpm 2ba9790b1ae67f23e5563b933084cc26537eff0eea92e199fadfd246b929c0c4 libvirt-client-8.5.0-7.el9_1.s390x.rpm 2f47e8ca56f3122c5423955d95ca09ae03820b0da6ff342d51101da1b0946e05 libvirt-daemon-config-nwfilter-8.5.0-7.el9_1.s390x.rpm 306769a8fbf3cbb7a522ccaca57d634ae488d5638742e4a9b21dcbab8d425d31 libvirt-daemon-8.5.0-7.el9_1.s390x.rpm 34c19b78ad027ada279b4d354dc8cdc6955d5d586514c199a6d996bc0f1bab62 libvirt-daemon-driver-storage-logical-8.5.0-7.el9_1.s390x.rpm 4105350ffa77c8b29665c9374c6c2f402ab56146cdcee94fdc71056d66b92c0e libvirt-daemon-driver-storage-disk-8.5.0-7.el9_1.s390x.rpm 6ab359b84f0c48d80b28cedf1f753e7b937c9cb43d2ad394179c88f4a9aa8379 libvirt-daemon-driver-qemu-8.5.0-7.el9_1.s390x.rpm 6dc1527355fa86dcfeb305f4a15ba0446efd3ea58d81d380b32ed44d6a3fe537 libvirt-daemon-driver-storage-rbd-8.5.0-7.el9_1.s390x.rpm 7088f91d5006ef94cce6271c8a803fd2acde239d6910a684bed32e7f6a989c5b libvirt-daemon-driver-storage-core-8.5.0-7.el9_1.s390x.rpm 88b1edb366a49ed229f5becdce7abf1506760d4f40fc04d8df9c234d72e4d4ab libvirt-8.5.0-7.el9_1.s390x.rpm 8a3fdfc2407a770362dcf972fe98b4faf0aeb874e6ceef46c73905c7f8ea38a0 libvirt-daemon-driver-storage-scsi-8.5.0-7.el9_1.s390x.rpm 8e2e27a7085c342050930a47443bfb3fcf4f11ba1d0b07a4d4aed96c1793276a libvirt-nss-8.5.0-7.el9_1.s390x.rpm 952d45a4543cb7d5feacbb2fdf69bcee00b415b7d334f562f0d22ba664b794e1 libvirt-daemon-driver-storage-8.5.0-7.el9_1.s390x.rpm 99a396719afecc9a0665184e2fb9560cfdc028c2e14c7ca7dd7d923cb3facb60 libvirt-daemon-driver-network-8.5.0-7.el9_1.s390x.rpm 9f76d9929a271edff4e12013b93795c785dab618de525fb5a0c9ffe2527bc444 libvirt-daemon-driver-storage-iscsi-8.5.0-7.el9_1.s390x.rpm a37205d7e78304c8bd554cb291526ac9702a1f7648a52b91095b653facd03793 libvirt-daemon-driver-nwfilter-8.5.0-7.el9_1.s390x.rpm a6cd6c45f1443f8c677b580d75bb3eb90342b62cdb0dc6d1b45c59a8e1481989 libvirt-daemon-driver-interface-8.5.0-7.el9_1.s390x.rpm b379c604c2e54d26db79039661653076aa14c79ad0c81cca227883ad9fc2caf8 libvirt-daemon-driver-secret-8.5.0-7.el9_1.s390x.rpm d8941e8ee575817e93faa83f54e7e94102801225858f0ad237d5e6ebade6f19a libvirt-daemon-driver-nodedev-8.5.0-7.el9_1.s390x.rpm e0fd70a6c68fc77a81748cc705fb4664fa4ed06cc20510d1e20bc2cf4d02d3b3 libvirt-daemon-config-network-8.5.0-7.el9_1.s390x.rpm eced87fd09cd745cbe42468ef4d1875b085e33098f638d87120014c9a9afb749 ALSA-2022:8008 Copyright 2022 AlmaLinux OS 0 1 Moderate

buildah security and bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * containers/storage: DoS via malicious image (CVE-2021-20291) * golang: net: lookup functions may return invalid host names (CVE-2021-33195) * golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197) * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198) * golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191) * podman: possible information disclosure and modification (CVE-2022-2989) * buildah: possible information disclosure and modification (CVE-2022-2990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default buildah-tests-1.27.0-2.el9.s390x.rpm 2c320e7c35aa858736a053c95ba5f2d97fed9a2bb3ffa515e4c70c24cc7bb360 buildah-1.27.0-2.el9.s390x.rpm d4c90a7835ceca3cfd126ce56dcb825e0a28d31969df9adca9a3574abab36e88 ALSA-2022:8011 Copyright 2022 AlmaLinux OS 0 1 Moderate

fribidi security update

FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order. Security Fix(es): * fribidi: Stack based buffer overflow (CVE-2022-25308) * fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309) * fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default fribidi-devel-1.0.10-6.el9.2.s390x.rpm 660912a3044253e97aca9d9f7219f4343ba3fe0d0e632de881c70539ab34e2cd fribidi-1.0.10-6.el9.2.s390x.rpm 7013b1a3add62222f2fabebf5c1e99780979f8b2c6ee5c53971815066dae49af ALSA-2022:8022 Copyright 2022 AlmaLinux OS 0 1 Moderate

qt5 security and bug fix update

The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework. Security Fix(es): * qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default qt5-5.15.3-1.el9.noarch.rpm 157264758e66fa294f4e8fc848664c03237961fe8272d6bbcddd4c87ecbced95 qt5-srpm-macros-5.15.3-1.el9.noarch.rpm 268bac6491abd68d7e65589de21a8e350d1b1bcbb01a9dde4b0bc6660431a11f qt5-rpm-macros-5.15.3-1.el9.noarch.rpm 406cf593d00751d08056abf83db867e73108cbce98d2dd78713ac925b39a9fe4 ALSA-2022:8054 Copyright 2022 AlmaLinux OS 0 1 Moderate

webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22628) * webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629) * webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26709) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26710) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26716) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26717) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26719) * webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution (CVE-2022-30293) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default webkit2gtk3-2.36.7-1.el9.s390x.rpm 0ceb985d97ccce1541d74573406d6a53b6ec88212d7d30c0e5d02f41597af006 webkit2gtk3-jsc-devel-2.36.7-1.el9.s390x.rpm 43bee5b981d46acb279044a44076126e4d604d86ce0623db83e71c88d8898a8f webkit2gtk3-jsc-2.36.7-1.el9.s390x.rpm 6e52744ede860bc272d0a8459b507cb344f4a77a8a1ab80d3bc4d77f29ddca6b webkit2gtk3-devel-2.36.7-1.el9.s390x.rpm 9a9be167370aa235a3e99f3016c93aa85a2e96e83b8b542e0d43bb2f5522a479 ALSA-2022:8057 Copyright 2022 AlmaLinux OS 0 1 Important

grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have been upgraded to a later upstream version: grafana (7.5.15). (BZ#2055349) Security Fix(es): * sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648) * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962) * grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673) * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698) * grafana: XSS vulnerability in data source handling (CVE-2022-21702) * grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703) * grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713) * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default grafana-7.5.15-3.el9.s390x.rpm 8f30eb16a0e648407596dae0613236c2a772fe1d4d601d3a27b919b0db2c4c8a ALSA-2022:8062 Copyright 2022 AlmaLinux OS 0 1 Moderate

unbound security, bug fix, and enhancement update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. The following packages have been upgraded to a later upstream version: unbound (1.16.2). (BZ#2087120) Security Fix(es): * unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30698) * unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30699) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default unbound-libs-1.16.2-2.el9.s390x.rpm 3378f320e1bd655154e791c66195875b4e233cf60a86d5c2a1e457a84fc131fd python3-unbound-1.16.2-2.el9.s390x.rpm 91a5fe94ded1e270b42efa67bcbfb3e28b87ac8a8cea6bddc9275b41d429f489 unbound-1.16.2-2.el9.s390x.rpm f11ec3ec722346cb8101a6f79748c2088e9cfccaa3b6b7bc18f75c3aeaff74aa ALSA-2022:8067 Copyright 2022 AlmaLinux OS 0 1 Moderate

httpd security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following packages have been upgraded to a later upstream version: httpd (2.4.53). (BZ#2079939) Security Fix(es): * httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943) * httpd: mod_lua: Use of uninitialized value of in r:parsebody (CVE-2022-22719) * httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (CVE-2022-22721) * httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-26377) * httpd: mod_lua: DoS in r:parsebody (CVE-2022-29404) * httpd: mod_sed: DoS vulnerability (CVE-2022-30522) * httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism (CVE-2022-31813) * httpd: Out-of-bounds read via ap_rwrite() (CVE-2022-28614) * httpd: Out-of-bounds read in ap_strcmp_match() (CVE-2022-28615) * httpd: mod_lua: Information disclosure with websockets (CVE-2022-30556) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default httpd-manual-2.4.53-7.el9.noarch.rpm 16046de23e78b6ad29d370f55f942cde4a132a036d4ddf55c0e9f1c975292dab httpd-tools-2.4.53-7.el9.s390x.rpm 1873c68a0551ba831c633ccfaa68c34046179c3c3558be8ddb0bfd07ad8259e3 httpd-core-2.4.53-7.el9.s390x.rpm 26c80698e3cab8f510d3c92703250fa943b1549fda27fb42f0ae55cfc4815def httpd-filesystem-2.4.53-7.el9.noarch.rpm 61226547b629d1bfe902193c7322ef89e09039ac4017036efa0b678183f622e5 mod_ldap-2.4.53-7.el9.s390x.rpm b467167b6297ef8dde672502aa82f945f4bdc6ed90ccf64d5e73a8a30e57c3bc mod_ssl-2.4.53-7.el9.s390x.rpm b8893c75d551d99d484d1f257ff7a8875eb9ece7d1ae863939c0f2faba2cf481 httpd-2.4.53-7.el9.s390x.rpm beb9906ee671b161245bb92e2da407059d251208508f3892e4685472a461e0d5 mod_lua-2.4.53-7.el9.s390x.rpm c43ee3837334a6f022ef20c2a5efb278f834a55e418521aba0c1077a048d8737 mod_proxy_html-2.4.53-7.el9.s390x.rpm db84727bd44a2b1633a1fee96eb0f1f633c53a8e2ce77bb8f2c05974552e560f mod_session-2.4.53-7.el9.s390x.rpm f4ea8af478f90f584274138771719722c6c45bfc86355718631759d0576306f5 httpd-devel-2.4.53-7.el9.s390x.rpm f8c44f00ad285a505c40b9e5cf53c459ff69848725ab203989b22b3537c5d696 ALSA-2022:8068 Copyright 2022 AlmaLinux OS 0 1 Moderate

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220) * bind: DoS from specifically crafted TCP packets (CVE-2022-0396) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default bind-utils-9.16.23-5.el9_1.s390x.rpm 1c13173cb64e1645ad7b52892a12afc0419f1bf4218d98440e621a71c1048fae bind-chroot-9.16.23-5.el9_1.s390x.rpm 2f23ea3416bebb09f9fe812a95ef0d34792c2d461032c48a00fd755ddb0c3819 bind-license-9.16.23-5.el9_1.noarch.rpm 35a7b5250c384e91ad0454725bd35261a045894999abdd382156a2af6e129c85 bind-9.16.23-5.el9_1.s390x.rpm 443c3df3adbb199d3bc80545469675b825c325d5eab121e7b673d87aa06cad10 python3-bind-9.16.23-5.el9_1.noarch.rpm 7249a979c703ad386459d7ef0d5d8095939477f9ac9d35d94b81bd6ff668b8af bind-libs-9.16.23-5.el9_1.s390x.rpm aeb4d39be56e78fc3489eeecc0d0fccd305d4968ed92b29230200a499b6da43d bind-dnssec-utils-9.16.23-5.el9_1.s390x.rpm b5f255f6db7d2355bad36d2f7d14e31579989562c21459c3e4ad3b962220f7d3 bind-dnssec-doc-9.16.23-5.el9_1.noarch.rpm f0f9ba6fa4d79ec478f9fa0262896af005081cad8190cad5e4c975a8431f20b7 ALSA-2022:8070 Copyright 2022 AlmaLinux OS 0 1 Moderate

dnsmasq security and bug fix update

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default dnsmasq-2.85-5.el9.s390x.rpm befc0ce49ef070be44450c87b5fda262618218da15cee9c438b5e5ffe0eea5c7 dnsmasq-utils-2.85-5.el9.s390x.rpm d1db7e1e9e9b0e2afbe32723d76c0dbd3228709ef4ef8b59994f1d567b7a4f9d ALSA-2022:8078 Copyright 2022 AlmaLinux OS 0 1 Moderate

flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files. Security Fix(es): * flac: out of bound write in append_to_verify_fifo_interleaved_ of stream_encoder.c (CVE-2021-0561) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default flac-libs-1.3.3-10.el9.s390x.rpm 3c2e26363b7c011c5594d3aa0e5e17daafa58fd2dee5f8141075024d42e3ac5c ALSA-2022:8090 Copyright 2022 AlmaLinux OS 0 1 Low

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * runc: incorrect handling of inheritable capabilities (CVE-2022-29162) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default runc-1.1.4-1.el9.s390x.rpm d23711365b1809a99ffac3601c903d0b9dbc56b3a0d3d0c8c6ce69cf2b2cce3f ALSA-2022:8096 Copyright 2022 AlmaLinux OS 0 1 Low

redis security and bug fix update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Code injection via Lua script execution environment (CVE-2022-24735) * redis: Malformed Lua script can crash Redis (CVE-2022-24736) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default redis-doc-6.2.7-1.el9.noarch.rpm 142f8f9a73b8b4e8f94dd2bd4a7cde5f54880fe6e5dd1a54ec5c41a6bd33ac58 redis-devel-6.2.7-1.el9.s390x.rpm 17036c47134ffcbed862a422ef7d397ef1f07c8549e843c6eb2790ace8935bb8 redis-6.2.7-1.el9.s390x.rpm c8fdc219bf77d509dfbc0c17c2a93e2e8be945384c9c281cc8fb22dc6bd2ba56 ALSA-2022:8098 Copyright 2022 AlmaLinux OS 0 1 Moderate

toolbox security and bug fix update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default toolbox-0.0.99.3-5.el9.s390x.rpm 2edbcdb27866b5758291c55206e31ede8a0d7b097dcace6acd0b81f304de2965 toolbox-tests-0.0.99.3-5.el9.s390x.rpm 7ec4fafe667dbcc6ca2e8b2c7a412e8a7ba4c2773a99a79d185b69e9ec505e6a ALSA-2022:8100 Copyright 2022 AlmaLinux OS 0 1 Low

swtpm security and bug fix update

SWTPM is a TPM emulator built on libtpms providing TPM functionality for QEMU VMs. Security Fix(es): * swtpm: Unchecked header size indicator against expected size (CVE-2022-23645) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default swtpm-libs-0.7.0-3.20211109gitb79fd91.el9.s390x.rpm 32257a10660815b102bc5dc1863fcd277fbd6fab8dfc3a2ad8b93e23e11a9865 swtpm-tools-0.7.0-3.20211109gitb79fd91.el9.s390x.rpm 5a73f8d55f45d1870725a9efec46985262fc6dc2b8f01041d44ce4b57d72383a swtpm-0.7.0-3.20211109gitb79fd91.el9.s390x.rpm db23bed2d889e434d9ab4a9419ae6e0a4254559f7b645301a6dff88f5d21880e ALSA-2022:8112 Copyright 2022 AlmaLinux OS 0 1 Moderate

frr security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. The following packages have been upgraded to a later upstream version: frr (8.2.2). (BZ#2069563) Security Fix(es): * frrouting: overflow bugs in unpack_tlv_router_cap (CVE-2022-26125) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default frr-8.2.2-4.el9.s390x.rpm cf77f6b767fba00c7ae7b2b7611ca302ab908497f2320d823966e7cc4e3a5904 ALSA-2022:8126 Copyright 2022 AlmaLinux OS 0 1 Moderate

ignition security, bug fix, and enhancement update

Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration. The following packages have been upgraded to a later upstream version: ignition (2.14.0). (BZ#2090647) Security Fix(es): * ignition: configs are accessible from unprivileged containers in VMs running on VMware products (CVE-2022-1706) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default ignition-2.14.0-1.el9.s390x.rpm 7a66ee1796c74b36dc6db1842cabc66e34222441f8bc54a4e6a8f78047d91a07 ALSA-2022:8139 Copyright 2022 AlmaLinux OS 0 1 Low

wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fix(es): * wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default wavpack-5.4.0-5.el9.s390x.rpm 42c0892cc8d512cd8bc519bccb6f83e6755c93847e154f71e22d57c4a1f50c74 ALSA-2022:8151 Copyright 2022 AlmaLinux OS 0 1 Moderate

poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default poppler-cpp-21.01.0-13.el9.s390x.rpm 1a13bc3af3bb379bda470f24dc05c04ca3cef79c915cfe89a49ed59fd7d2b25e poppler-utils-21.01.0-13.el9.s390x.rpm 36dd78ef9e9437558d8e5600db196689df53d92305c655dcece13cca26c12a57 poppler-21.01.0-13.el9.s390x.rpm b3bc5b9b8d519fede582050ceba0b25c06a9a99e2afddeeba4af33496c1e7e6f poppler-glib-21.01.0-13.el9.s390x.rpm b419af4bfdafd20774a49b4952a6e926d165ce357d085b105d412a193d901c0c poppler-qt5-21.01.0-13.el9.s390x.rpm d57bad88f4a9a2a2f46098cb39f2ec15591950a41ccbd9f28ac9f4c0566651e4 ALSA-2022:8162 Copyright 2022 AlmaLinux OS 0 1 Moderate

389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801) Security Fix(es): * 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918) * 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850) * 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default 389-ds-base-2.1.3-4.el9_1.s390x.rpm 23819698eefaa613b27fbc75dfa7a4e449f45ccc2b96bb9153e509c86919405f python3-lib389-2.1.3-4.el9_1.noarch.rpm cfe6a2e6540b9a9d7046536d24a4a25cad66d232402fdb5e9951d205ecf04c6f 389-ds-base-libs-2.1.3-4.el9_1.s390x.rpm edbfc4726d34137fbcdfb97b8e73be5c755a06aaf4c1b24012ade4f8a3ca0011 ALSA-2022:8194 Copyright 2022 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561) * libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562) * libtiff: reachable assertion (CVE-2022-0865) * libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924) * libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355) * libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844) * libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891) * tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908) * tiff: Divide By Zero error in tiffcrop (CVE-2022-0909) * libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c (CVE-2022-1354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libtiff-devel-4.4.0-2.el9.s390x.rpm 6627af8ca3ef07089fa351246a3d244befc50cf1d028a311f012a44df5835020 libtiff-4.4.0-2.el9.s390x.rpm 7ffb35ce1cd24fe37f5d34f752d7b5791291a0277b659e88f634bbcda623e579 ALSA-2022:8197 Copyright 2022 AlmaLinux OS 0 1 Moderate

php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.0.20). (BZ#2095752) Security Fix(es): * php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708) * php: Uninitialized array in pg_query_params() leading to RCE (CVE-2022-31625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default php-fpm-8.0.20-3.el9.s390x.rpm 0c672b0e505f976e952fc7bbef579b79cdbbc0842757ee1870e183890e11095b php-odbc-8.0.20-3.el9.s390x.rpm 0dee03c8d44d3224e056aaf6fbc5fc2430d52dbe0cc48bc1289c07b14c537308 php-gd-8.0.20-3.el9.s390x.rpm 0fb45854a39bee46e998197f3bd62e6cbc9caab463e21c70c49fba563433f939 php-bcmath-8.0.20-3.el9.s390x.rpm 109fb27110e0f069f9d145feed5ccc4d4b215b7153807e60ebb8df7f20e6358c php-mysqlnd-8.0.20-3.el9.s390x.rpm 130c9d818f5ee502fcdd285e8f8e20094f2e8b477f731268e01a807fcf0480c2 php-gmp-8.0.20-3.el9.s390x.rpm 188fc897989461cda6f6dc3cb5672c9b9a98dd3dbeb0ba271eb00cdacd3d6999 php-8.0.20-3.el9.s390x.rpm 49dcc7555f3862ffd617edde4e3a3bb7c855937fd5934f07d2f5adad917c4797 php-dbg-8.0.20-3.el9.s390x.rpm 53d9405d4633569642e0fd7e4d35f2ad8178972aea089bac460169db49d79e20 php-pgsql-8.0.20-3.el9.s390x.rpm 561df4632f870990bb20683200832a6c1a597190c12b80803ec9b3b9dcb6bd64 php-snmp-8.0.20-3.el9.s390x.rpm 5aa7e711e42e709aba999748f214470c823b1dfe71a6e77d7ab907d2c94a01c6 php-intl-8.0.20-3.el9.s390x.rpm 61f89d8ce1c60d3070cfc4bce37f443814746c8bd5330d23ac0c501886bde717 php-dba-8.0.20-3.el9.s390x.rpm 623afca629758acdd4b7e60fd65161bd4ba4645d7d938d76b3e3f7708d6fd3cc php-devel-8.0.20-3.el9.s390x.rpm 700d7e0236d8f0a95dc4dea2490f99c808858f65adcd2544dca97fb0dadc447d php-process-8.0.20-3.el9.s390x.rpm 7141a292c4ec4a2625716b18cab157e0877a8a25f0a2cbff15bdc32565db054c php-ldap-8.0.20-3.el9.s390x.rpm 749388f118d697fb35a773f9b2e40ff8dd302bab4b206cab9d3361c4f0a9a0e4 php-soap-8.0.20-3.el9.s390x.rpm 7e57e16f6635113c9b88f74940864b4aab4aa14db1ab320df97a21b1c9b24683 php-opcache-8.0.20-3.el9.s390x.rpm 83cd7988cb0b04c67af6616137d7221705e453074b9a7e1e98732b5c451646dd php-pdo-8.0.20-3.el9.s390x.rpm 957094a5d0ff7d836dc0513ff4ecafdcaf4b5e83c0554435d40edcc4b7567595 php-common-8.0.20-3.el9.s390x.rpm 97a38095ef91794536f09a71d7780d39ecf45c547a27e1e4ff263c85b012d78b php-embedded-8.0.20-3.el9.s390x.rpm d3f2a49bb4523aa99c08c97d624c4f6bc77c5ad7f61350a9a3b32198b2e77934 php-cli-8.0.20-3.el9.s390x.rpm d6bca0775d8f3b02ff731d8ee59c6e3ee26f01d582f87723ee1269b3a186bd49 php-xml-8.0.20-3.el9.s390x.rpm dc9653e93629adc4bc10181cd1e9ea9d44770699b40d6a8742b6c8ddc51c737f php-ffi-8.0.20-3.el9.s390x.rpm e431dad50451e66d55dc405619c6b4bda58db06d1227998c5cbe2f7cb69e8d38 php-mbstring-8.0.20-3.el9.s390x.rpm f2fb301c0a9a486ffa41dd463e56bd7fa014ab77c2df33fc6fc1682c827bee12 php-enchant-8.0.20-3.el9.s390x.rpm fa0d953e65f46e28a493c41db7b7c7ca489ea86c397ef48534d1e19793649a6e ALSA-2022:8207 Copyright 2022 AlmaLinux OS 0 1 Low

openjpeg2 security update

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. Security Fix(es): * openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default openjpeg2-2.4.0-7.el9.s390x.rpm 25e799c95429d74d87477d4962bd06f953b79100f4d15fb40e62a2b090ce21da ALSA-2022:8208 Copyright 2022 AlmaLinux OS 0 1 Moderate

dovecot security and enhancement update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default dovecot-2.3.16-7.el9.s390x.rpm 073bc0340d97bb2d69fdf90a95ce5ba680382a144beaed29119f8634a6f8d747 dovecot-mysql-2.3.16-7.el9.s390x.rpm 3d45bc1feef35a0061968bd039aed36f12e32a56345f65de31b13de6a9fbe07c dovecot-pgsql-2.3.16-7.el9.s390x.rpm b0e55847317cbd27bdb30ff32da773d6830da983c584e0165120eb8213b7120f dovecot-pigeonhole-2.3.16-7.el9.s390x.rpm f0f1adc1febf23050daa5d5f68f4473e62e38be86a1400c68a49217b7dc97c55 ALSA-2022:8219 Copyright 2022 AlmaLinux OS 0 1 Moderate

mutt security update

Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP. Security Fix(es): * mutt: buffer overflow in uudecoder function (CVE-2022-1328) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default mutt-2.2.6-1.el9.s390x.rpm 4edfaec9da328edcbcd4c773bae6e0ab5b6f69814eb4d05f0861baa9346c4617 ALSA-2022:8221 Copyright 2022 AlmaLinux OS 0 1 Moderate

xorg-x11-server security and bug fix update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319) * xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default xorg-x11-server-Xvfb-1.20.11-11.el9.s390x.rpm 05f476fe296737a456c80c1635ae24587a809a8d0b77720e14d14f7810c34fa1 xorg-x11-server-Xephyr-1.20.11-11.el9.s390x.rpm 0c4830355d246ce0d17cf306fb47e1427ec6ee2ee15e11df79ae6ad2c119802d xorg-x11-server-Xnest-1.20.11-11.el9.s390x.rpm 1894363a846c2d582d6140000cb7044390bd67464f0dd3c0900c6896e8112e6a xorg-x11-server-common-1.20.11-11.el9.s390x.rpm 3ac3e8c7b9c1a6a083153e1752af4d6881be85a295c74b6a761946f09d0baf50 xorg-x11-server-Xorg-1.20.11-11.el9.s390x.rpm bc1b355d2022b12d2594d4be8b028fc4cc399ad4fec3afe04e8842183ad8d9c8 xorg-x11-server-Xdmx-1.20.11-11.el9.s390x.rpm f5df40858688b4ff028ce196c4316495dd469615b8b1f3b37d60868134968bac ALSA-2022:8222 Copyright 2022 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319) * xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default xorg-x11-server-Xwayland-21.1.3-3.el9.s390x.rpm f0e6835a8c7beabcf6eb0b57843fe31fcf5585c0488d8aa55b01a795d6232a21 ALSA-2022:8226 Copyright 2022 AlmaLinux OS 0 1 Moderate

python-lxml security update

lxml is an XML processing library providing access to libxml2 and libxslt libraries using the Python ElementTree API. Security Fix(es): * lxml: NULL Pointer Dereference in lxml (CVE-2022-2309) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default python3-lxml-4.6.5-3.el9.s390x.rpm 4be38e54a35ae769b182e7280d56329ccf3e493aeed55c871e6edb511646d089 ALSA-2022:8250 Copyright 2022 AlmaLinux OS 0 1 Moderate

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default grafana-pcp-3.2.0-3.el9.s390x.rpm 2923a16af2b40a408f83362bd9652420b172807e92f0a05f3905490d04032f3a ALSA-2022:8252 Copyright 2022 AlmaLinux OS 0 1 Moderate

yajl security update

Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator. Security Fix(es): * yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default yajl-2.1.0-21.el9.s390x.rpm abb1f940d171238b3d165c8818b677c36cff267d3e154fbc10080e41badd6a6a ALSA-2022:8267 Copyright 2022 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516) * use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640) * smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168) * NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617) * swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854) * uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016) * race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048) * use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184) * concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280) * kernel info leak issue in pfkey_register (CVE-2022-1353) * use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679) * NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852) * fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998) * nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586) * integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639) * slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368) * incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123) * incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125) * incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166) * possible to use the debugger to write zero into a location of choice (CVE-2022-21499) * AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900) * AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825) * Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373) * double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390) * use after free in SUNRPC subsystem (CVE-2022-28893) * use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581) * Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901) * DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946) * nf_tables disallow binding to already bound chain (CVE-2022-39190) * nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default kernel-zfcpdump-devel-matched-5.14.0-162.6.1.el9_1.s390x.rpm 14c18a3b35a918af84e8c87a743dd14440e027c1e0c15514f5d2359acf6c71c0 kernel-doc-5.14.0-162.6.1.el9_1.noarch.rpm 242aafffb0039e10a1b81169569833632199da11ac1f0616c3db4abf7b37d200 kernel-debug-devel-5.14.0-162.6.1.el9_1.s390x.rpm 61aadd379c7a8259b8e152d1bf1fc734d5e93b2884f3000c57ef34a3983797eb kernel-headers-5.14.0-162.6.1.el9_1.s390x.rpm 90cd142ee103cd61e8c74d925d96ef4aa1ebdd01c08cbc9a9d79b39a3ceb3e00 perf-5.14.0-162.6.1.el9_1.s390x.rpm a432645bf7a661b605f23cd74a161afc9ba14b95df6909eeb1dd98dfabe49594 kernel-debug-devel-matched-5.14.0-162.6.1.el9_1.s390x.rpm ac08b591bcd9cc195f810e758df05f7457f6cb36c7f4c816aa263bac0954bfcf kernel-zfcpdump-devel-5.14.0-162.6.1.el9_1.s390x.rpm b46b50df002e8556daad9920533be46ae1d613b008bf5b175a9f9bde9476cb76 kernel-devel-5.14.0-162.6.1.el9_1.s390x.rpm c11373b2a7a0fbd73ae37f9741180f84e09c4ef17fc67b94db040de14fa59e68 kernel-devel-matched-5.14.0-162.6.1.el9_1.s390x.rpm fd04f32d9341a29e961523f295e5abd5b4b335cfd1bc14750350af57fc7f4209 ALSA-2022:8291 Copyright 2022 AlmaLinux OS 0 1 Moderate

rsync security and bug fix update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default rsync-daemon-3.2.3-18.el9.noarch.rpm 1b7b8d0f1db62a381e9185eebd1de7e50598cff114744e8b9f5608fc7689b231 ALSA-2022:8299 Copyright 2022 AlmaLinux OS 0 1 Low

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: bad local IPv6 connection reuse (CVE-2022-27775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libcurl-devel-7.76.1-19.el9.s390x.rpm f816f70826fb8198f6be25ad38bcc548688bb10532492d135738e31c6ffbe27c ALSA-2022:8317 Copyright 2022 AlmaLinux OS 0 1 Moderate

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.16.4). (BZ#2077487) Security Fix(es): * samba: server memory information leak via SMB1 (CVE-2022-32742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default samba-client-4.16.4-101.el9.s390x.rpm 1af7c3d00f0f4b21b0ad45e2af514226b60d0efc6f8657b3ff5c5fe2a466044e samba-vfs-iouring-4.16.4-101.el9.s390x.rpm 67e0db2cf49921a2e85566b7f78f56ac7e79cb4f7fc68d0a5c879191e1c28227 samba-krb5-printing-4.16.4-101.el9.s390x.rpm 89123a7c932f25fd77a03b82aea27c5e81c23303251f9f089d64aee5bf3383b4 samba-winbind-clients-4.16.4-101.el9.s390x.rpm 971910235302aa0c962c34743838fbbf7de861b0cd623289448b8653392ba12d samba-winbind-krb5-locator-4.16.4-101.el9.s390x.rpm cac69fbaa265360d55316086cf7aa2153ecfbe46112a487a9e01e88568e00eb2 ALSA-2022:8340 Copyright 2022 AlmaLinux OS 0 1 Moderate

freetype security update

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently. Security Fix(es): * FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404) * FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405) * Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default freetype-2.10.4-9.el9.s390x.rpm 8c92079f9acec2400045a40e5a463d2d733f54ac20f4b7a8827a7e062e248f2a freetype-devel-2.10.4-9.el9.s390x.rpm fc6a414c8ebe3b7708f118e3b9c27edc361ab5c4d6b8a87bff4eaf36bf608778 ALSA-2022:8353 Copyright 2022 AlmaLinux OS 0 1 Moderate

python3.9 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python3.9 (3.9.14). (BZ#2128249) Security Fix(es): * python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107) * python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default python3-tkinter-3.9.14-1.el9.s390x.rpm 6ffa9781115ac4c526d61af94191d117372273c03b532f1effcd8506e21f3682 python-unversioned-command-3.9.14-1.el9.noarch.rpm b860a69493c595223a36e245c9abdb7f1848f6f464a97e8f4f621d885b0f2204 python3-devel-3.9.14-1.el9.s390x.rpm c8f4365ad00344fcf7b83c3b8892d2af188ad5f3eed55da87e81dbf0796da6aa ALSA-2022:8361 Copyright 2022 AlmaLinux OS 0 1 Moderate

e2fsprogs security update

The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems. Security Fix(es): * e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default e2fsprogs-devel-1.46.5-3.el9.s390x.rpm 738d8f25bc04bc9ab4f703b4b754ece58e8f647ffee0995379411264bc934ed7 libcom_err-devel-1.46.5-3.el9.s390x.rpm d4fb0496783ff377e0ee0d44530ebc99b7f5e936701ef78fcf9aa81e25e2f0eb ALSA-2022:8384 Copyright 2022 AlmaLinux OS 0 1 Moderate

harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine. Security Fix(es): * harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default harfbuzz-2.7.4-8.el9.s390x.rpm a79342a572613ec7f5dce25c9121904b264320feca111ad7104e9d00eba4a6d8 harfbuzz-devel-2.7.4-8.el9.s390x.rpm d4d66b6f4a4582afc9270553eeeb04504b22092c89535e3fae2a21e587c2216b harfbuzz-icu-2.7.4-8.el9.s390x.rpm d8b50bb042d82fdeb8f3d3ed8e8409297445c5bc3d3d0698630322e4312b3631 ALSA-2022:8431 Copyright 2022 AlmaLinux OS 0 1 Low

podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: possible information disclosure and modification (CVE-2022-2989) * buildah: possible information disclosure and modification (CVE-2022-2990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * (podman image trust) does not support the new trust type "sigstoreSigned " (BZ#2120436) * dnf-update broken for podman/catatonit (BZ#2123319) * podman creates lock file in /etc/cni/net.d/cni.lock instead of /run/lock/ (BZ#2123905) * podman kill may deadlock [AlmaLinux 9.1] (BZ#2124716) * containers config.json gets empty after sudden power loss (BZ#2136278) * PANIC podman API service endpoint handler panic (BZ#2136287) Enhancement(s): * Podman volume plugin timeout should be configurable [almalinux-9.1.0 Z] (BZ#2124676) * [RFE]Podman support to perform custom actions on unhealthy containers (BZ#2136281) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default podman-4.2.0-7.el9_1.s390x.rpm 11f2864ac7505d04264dfc80ed08aceed0da89129c7136316a135ea36f587f14 podman-gvproxy-4.2.0-7.el9_1.s390x.rpm 467ee3e45f2238a3cd35d6c28c394c47f522f5e88d624157322da3200753a442 podman-catatonit-4.2.0-7.el9_1.s390x.rpm 4b3d311870e78872989cdffab0df2159fedf75b54781f26f1457caa567e3dd27 podman-docker-4.2.0-7.el9_1.noarch.rpm 5fc18b2301ea8e5a166d1c090e387bb6aa6ca2f6037faaa08e39a50baedc42ee podman-remote-4.2.0-7.el9_1.s390x.rpm 8ad49c2cefc6b64c04b1b9715e80b0192ecd5ae131e02cb0958a3eb08d5728cd podman-tests-4.2.0-7.el9_1.s390x.rpm 8ba2d0984fcb2a0bd07f99b5e1079f6022aef24b421290cafbd5381597b13db7 podman-plugins-4.2.0-7.el9_1.s390x.rpm c98af756ad4e7bcdfb23367327b0c21bcb45e377a207b65d89cd49d75994a1c6 ALSA-2022:8434 Copyright 2022 AlmaLinux OS 0 1 Moderate

dotnet7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2. The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134641) Security Fix(es): * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default aspnetcore-runtime-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm 1f01ace8085cac6e65c0c9a3025d8c2d9205b5dc955c6566fc04763224280bdb dotnet-targeting-pack-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm 212357e1865a93ca87774a48a58a7d6a114e6e95e4f3e7bd740c975f7592424a netstandard-targeting-pack-2.1-7.0.100-0.5.rc2.el9_1.s390x.rpm 5c483165cc81766aa4362f1d695a25642976a68fe4ca01c921ce7970a8a0201c dotnet-apphost-pack-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm 6084af1d4d04cb54d91c546a0c4bd61aaf7c50bc97683279ec9c44bf2882daf8 dotnet-sdk-7.0-7.0.100-0.5.rc2.el9_1.s390x.rpm 60efe79e853aa623d0a27fcd3e022f7aeafeb674b6a3861f3feb819023157405 dotnet-runtime-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm 8ed938b4cb8220bdc33ca01e90e63893c67e275b11ef603b2acf13d70e0be7df aspnetcore-targeting-pack-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm aaef80033e2db68b78584b359e874f0abe53c262966988d9ba11eca57c0a8fdb dotnet-templates-7.0-7.0.100-0.5.rc2.el9_1.s390x.rpm cc1e22ee653bed52ca04f6176bc9261097c8e8bd01565488afb6b1b7267e096f dotnet-hostfxr-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm ceff6d4e8b3045d7c0e8a66f624490c28930b4bb23823da5164769321a2e2e01 dotnet-host-7.0.0-0.5.rc2.el9_1.s390x.rpm df3c960b65080f80455aa84af5c36a8cb2807e0b18ce7aa83f3b2d1318fed45c ALSA-2022:8444 Copyright 2022 AlmaLinux OS 0 1 Moderate

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: exception handling and impedance match in tornado_requests (CVE-2022-3500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default keylime-verifier-6.5.1-1.el9_1.s390x.rpm 03513a1d371a37c5197f47ad021e9c203626800960d895c893aba222ee298b67 keylime-tenant-6.5.1-1.el9_1.s390x.rpm 0fd5319634c58d8d783bab102ee1a34ad120e6715b747a84d6a018afb7513dfe keylime-base-6.5.1-1.el9_1.s390x.rpm 21cf71f007846e9943b2a4ff167044d893279512be059d513c5510c29046faa5 keylime-selinux-6.5.1-1.el9_1.noarch.rpm 31db20cc7837e7a9bb5695c2d5e9462020086d85ae634a8e96214e04a01d9366 python3-keylime-6.5.1-1.el9_1.s390x.rpm 4fd6c4ae35d2eb1dc5dd83079c9033ce6b4d532a4bdcb9ec525b83892b55a18f keylime-6.5.1-1.el9_1.s390x.rpm 6196fa08ea14c77e6c0eea748552c2b7e61ae6e41ce9177370c432659bf47a74 keylime-registrar-6.5.1-1.el9_1.s390x.rpm cf2838d0dc79614e115bddaf6f45322846c94563b226f1f865fa33ac637cf77b ALSA-2022:8493 Copyright 2022 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default python3-devel-3.9.14-1.el9_1.1.s390x.rpm 1afe12d5b99388ca65862a4e488c327c085b3be835552812341d7c64efecc176 python-unversioned-command-3.9.14-1.el9_1.1.noarch.rpm 3d2670507359984b3c6478d157fb65c2564225e0ffc774f3681647addfdf5e60 python3-tkinter-3.9.14-1.el9_1.1.s390x.rpm ba9fc1c1121d9fd3ef908d807e033c7da318ba2153141527d0d2179ad342539e ALSA-2022:8561 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.5.0. Security Fix(es): * Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403) * Mozilla: Fullscreen notification bypass (CVE-2022-45404) * Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405) * Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406) * Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408) * Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409) * Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421) * Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410) * Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411) * Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412) * Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416) * Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418) * Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default thunderbird-102.5.0-2.el9_1.alma.s390x.rpm c1f452ee57708d0693ed167f4d3c7d1722aafe858815b4cd4a7d65c84f8f6d29 ALSA-2022:8580 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.5.0 ESR. Security Fix(es): * Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403) * Mozilla: Fullscreen notification bypass (CVE-2022-45404) * Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405) * Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406) * Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408) * Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409) * Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421) * Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410) * Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411) * Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412) * Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416) * Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418) * Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default firefox-102.5.0-1.el9_1.alma.s390x.rpm 8d4f855507485ea53f1d24d21c0a07c02a8a3021915801a1dcb4662711dfeef4 ALSA-2022:8637 Copyright 2022 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: integer overflow vulnerabilities in PAC parsing (CVE-2022-42898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default krb5-devel-1.19.1-24.el9_1.s390x.rpm 7431d3f866a4891f39de75474314d3bde187a185790afd6b507160bd851e0895 ALSA-2022:8643 Copyright 2022 AlmaLinux OS 0 1 Important

varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: Request Forgery Vulnerability (CVE-2022-45060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default varnish-docs-6.6.2-2.el9_1.1.s390x.rpm 043e3af7d20339521542921d2d0d7c529284385f7addb47c57f8944512524676 varnish-6.6.2-2.el9_1.1.s390x.rpm a05c07efbc82bd577cf62badea7ef87e6ba01d1b9b673bb25b7b9e351f175423 ALSA-2022:8832 Copyright 2022 AlmaLinux OS 0 1 Moderate

nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (18.12.1). (BZ#2142809, BZ#2142830, BZ#2142834, BZ#2142856) Security Fix(es): * nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517) * nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default nodejs-18.12.1-1.module_el9.1.0+16+91bc168f.s390x.rpm 2735183018960fe14822e17d2ef00447489715c709238489fdc2595fad4bdeb7 nodejs-docs-18.12.1-1.module_el9.1.0+16+91bc168f.noarch.rpm 3f130838fecb45d434956e044b5336680c97eb73104c0e478ca0e9b23353467c nodejs-nodemon-2.0.20-1.module_el9.1.0+16+91bc168f.noarch.rpm 4a7e1a042a9efbd31db5f5b4a6af0bc0b6d207a37fa374cf54dae97b4b0f09be npm-8.19.2-1.18.12.1.1.module_el9.1.0+16+91bc168f.s390x.rpm 67f46e815e87cb89182a0c8e25b8bbb87e54ab47b17c97fb4905d0f94e8aa33e nodejs-devel-18.12.1-1.module_el9.1.0+16+91bc168f.s390x.rpm 7a765e6553a73589c788cc5ac3a8633e7c2a8d39af327f208bb1f675cbac98e2 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-full-i18n-18.12.1-1.module_el9.1.0+16+91bc168f.s390x.rpm c0260b2416cc6d95dfc555455e6a5334122bdf036dd02c17e30d4f1d2c41a668 ALSA-2022:9065 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.6.0 ESR. Security Fix(es): * Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878) * Mozilla: Use-after-free in WebGL (CVE-2022-46880) * Mozilla: Memory corruption in WebGL (CVE-2022-46881) * Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874) * Mozilla: Use-after-free in WebGL (CVE-2022-46882) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default firefox-102.6.0-1.el9_1.alma.s390x.rpm 3f8b7a8addf5978c95e9eae0f005cf4556496b564e49f1924c89a7d5d40e08b8 ALSA-2022:9080 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.6.0. Security Fix(es): * Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878) * Mozilla: Use-after-free in WebGL (CVE-2022-46880) * Mozilla: Memory corruption in WebGL (CVE-2022-46881) * Mozilla: Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration to block remote content (CVE-2022-45414) * Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874) * Mozilla: Use-after-free in WebGL (CVE-2022-46882) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default thunderbird-102.6.0-2.el9_1.alma.s390x.rpm f53de5883171be36b35a54f41c604a6e95d6e019f7260070dadc720a023f169a ALSA-2023:0005 Copyright 2023 AlmaLinux OS 0 1 Important

bcel security update

The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class). Security Fix(es): * Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default bcel-6.4.1-9.el9_1.noarch.rpm a39a659c1e56d24d1b8070a45638ed96873ac5e2eae6c7652ba72237212611b9 ALSA-2023:0021 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution (CVE-2022-42856) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default webkit2gtk3-2.36.7-1.el9_1.1.s390x.rpm 6c9390f2c8763aa0b3174bf8bebc3fe2ce36d15e94739ca67199b932750a175a webkit2gtk3-jsc-devel-2.36.7-1.el9_1.1.s390x.rpm a81c73120de1e64a5373178378767931ce221c780a923f902a74a8008e25d39f webkit2gtk3-devel-2.36.7-1.el9_1.1.s390x.rpm cecf37e2ad4a0de2b70665354ed64f8299650366791955fd9dfc10477898326e webkit2gtk3-jsc-2.36.7-1.el9_1.1.s390x.rpm e4ec27dfb8603ac2ad4a7340b86115381014daec14999ae1efaaec6e769601eb ALSA-2023:0077 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13. The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154459) Security Fix(es): * dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default dotnet-runtime-6.0-6.0.13-1.el9_1.s390x.rpm 0b18e10471be45bc10730e334d624c2c463f0f620e992a7c280aad6381b8e828 dotnet-sdk-6.0-6.0.113-1.el9_1.s390x.rpm 1263551d531aa44ad86054f14f2718770f556c601bf0512c33f86b95275b303d aspnetcore-targeting-pack-6.0-6.0.13-1.el9_1.s390x.rpm 4327a41a3b7829c3d58eb772f63094a3b60da8a948df3a58c402a94b861bfc88 dotnet-templates-6.0-6.0.113-1.el9_1.s390x.rpm 57298585f45512aa53d9e7e9132101a04f82415c161af67cc8a38c8ea8fa0918 dotnet-hostfxr-6.0-6.0.13-1.el9_1.s390x.rpm 597c8c55a4b3ab640adfb040c8ced90bbbf98f9c17c6bf027c597f367578419a dotnet-targeting-pack-6.0-6.0.13-1.el9_1.s390x.rpm 794f4b0b8185c84f6ecd6c13ae9ca320d481cb0a95a02508a9961b5481ba1cbb aspnetcore-runtime-6.0-6.0.13-1.el9_1.s390x.rpm b1b486d2821debec64561aa48977893a2d6c7c543e64d00769ef8cd38a80a3fa dotnet-apphost-pack-6.0-6.0.13-1.el9_1.s390x.rpm f4fc35d18bfe8dfcae6a19a79073296d3cfedf64b87d9ecd558f37c7e88c0df6 ALSA-2023:0194 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835) * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database. This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476) * Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-9] (BZ#2153097) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default java-17-openjdk-javadoc-17.0.6.0.10-3.el9_1.s390x.rpm 158e7543120145de8de79342244b5fd41679eef4407f18d59cb45eabd4e793b8 java-17-openjdk-devel-17.0.6.0.10-3.el9_1.s390x.rpm 23a246d02abd3ee406fcba141b9abddf1ff459ca1a8ea45e6e25e60ec0d01ba9 java-17-openjdk-javadoc-zip-17.0.6.0.10-3.el9_1.s390x.rpm 38d3effc39bdcf52cf05af3873b083f6add5140dcedfc00618280b8ab7fbebec java-17-openjdk-headless-17.0.6.0.10-3.el9_1.s390x.rpm 846abda7b24413031936bb41bbed3688550f330285dbec6dfe52129b2c403c3e java-17-openjdk-17.0.6.0.10-3.el9_1.s390x.rpm c87d6d7c41746a81346eaf9ec11f2c5f66972407121ad5670aefa1ed5d719c06 java-17-openjdk-jmods-17.0.6.0.10-3.el9_1.s390x.rpm c913e73de0b0bddf7e0d03f0f540a91b012fdae22044cd98ffb4334693e4dff1 java-17-openjdk-static-libs-17.0.6.0.10-3.el9_1.s390x.rpm ca00dc1d72b86f2a7f5a6f16c8b3baef3ebb8d6dfeab793842d4f572602925d8 java-17-openjdk-demo-17.0.6.0.10-3.el9_1.s390x.rpm d8ab5a501e631a0d5a66721ba3e3bda8edb71415e52e55e68cddae9a6fbac279 java-17-openjdk-src-17.0.6.0.10-3.el9_1.s390x.rpm eebb0fb884bde5a9b9772fcf19507c705d335f4d61cb36909499cf28e3d3b23a ALSA-2023:0202 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835) * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-9] (BZ#2157798) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default java-11-openjdk-javadoc-zip-11.0.18.0.10-2.el9_1.s390x.rpm 030737bdfd183522d8112ed24f994ea8fc0b05f4f6a1f2e969cfbe6915d83b4c java-11-openjdk-javadoc-11.0.18.0.10-2.el9_1.s390x.rpm 18b23ef28dc64704dcec634138866a45982dab1918d29d0717addfe90f5dd152 java-11-openjdk-devel-11.0.18.0.10-2.el9_1.s390x.rpm 4f65ac3f6277e82edb81ec421ad3e018367869e44319681dd7b293d618520c24 java-11-openjdk-jmods-11.0.18.0.10-2.el9_1.s390x.rpm 5f02dab50af52cb8b444051cc2a19b5a2805c6b07696c498d04536c0fd9d5f55 java-11-openjdk-src-11.0.18.0.10-2.el9_1.s390x.rpm 8dd2d37185740350ba696c5fcb1c67105476ba9d2a924f3fee96b268a090aaa3 java-11-openjdk-11.0.18.0.10-2.el9_1.s390x.rpm a3eaadbec15b5995ac80aa37ace6a446a24812bd2427c55a2a5acc746761a06f java-11-openjdk-demo-11.0.18.0.10-2.el9_1.s390x.rpm af8776785587e2d9f0e3875a18c65cd5e86a824b4884ab3ea489aaec8fe7968f java-11-openjdk-static-libs-11.0.18.0.10-2.el9_1.s390x.rpm e5cf29c5540dca2d8d5df561c1f6251f36a608e7a8c6c9ca8d881736035e246d java-11-openjdk-headless-11.0.18.0.10-2.el9_1.s390x.rpm f1dfb3c5b4e17830911fea974de56be60601b2252ee770afee8cd172a5e2bc17 ALSA-2023:0210 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830) * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-01, 8u362) [almalinux-9] (BZ#2159912) * solr broken due to access denied ("java.io.FilePermission" "/etc/pki/java/cacerts" "read") [almalinux-9, openjdk-8] (BZ#2163594) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default java-1.8.0-openjdk-demo-1.8.0.362.b09-2.el9_1.s390x.rpm 021420b21b466e9771ec12911df0d2fb72ad0ed39db5555f8bb9fc41498c9444 java-1.8.0-openjdk-devel-1.8.0.362.b09-2.el9_1.s390x.rpm 5701847e4f8ba122c0448cf9ce57ac98155ffe6d5cd71e6e3e8d3f0e0b102dfb java-1.8.0-openjdk-headless-1.8.0.362.b09-2.el9_1.s390x.rpm 7a7989ca37f342dc16d66b8a6e4d0d8369a8c6e6c10799b9cf5943d70040eb73 java-1.8.0-openjdk-javadoc-1.8.0.362.b09-2.el9_1.noarch.rpm 8ded73fb8d6537fcb052492f868f8869e4431cc372af44f2acae3ead0a616607 java-1.8.0-openjdk-javadoc-zip-1.8.0.362.b09-2.el9_1.noarch.rpm 96a3da828b7bdb46d7b5013293328c4257b8d1907eaee35ca6041b4f014afd58 java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.s390x.rpm 9a869f207c7696bc3c4b1a59984731e4464c3da56daa6083649e9632ae0a5958 java-1.8.0-openjdk-src-1.8.0.362.b09-2.el9_1.s390x.rpm eb99c2f16827987a751d96b073091d944089fc3f9c0cf846bb4dfe1817838033 ALSA-2023:0282 Copyright 2023 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default sudo-python-plugin-1.9.5p2-7.el9_1.1.s390x.rpm 0793688b10af2e04bc77e9778829e66fc8b778eaad5c73cb5ca89f72209b0333 ALSA-2023:0285 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.7.0 ESR. Security Fix(es): * Mozilla: libusrsctp library out of date (CVE-2022-46871) * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598) * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605) * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599) * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601) * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers (CVE-2023-23602) * Mozilla: Fullscreen notification bypass (CVE-2022-46877) * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive (CVE-2023-23603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default firefox-102.7.0-1.el9_1.alma.s390x.rpm 882908d92f54846b7aa5825186bb018a9d69386eb48c41fc59fa6f94b5a8f471 ALSA-2023:0302 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058) * libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519) * libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953) * libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520) * libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libtiff-4.4.0-5.el9_1.s390x.rpm c39e07d5bd978b073b5e0b814f4b1a5f1d11f542fb4947421581aff96df50b4c libtiff-devel-4.4.0-5.el9_1.s390x.rpm e4ee1fffb695774e39ffbbed996c36e274c2be3e1df6d0ea0468163ad119c916 ALSA-2023:0303 Copyright 2023 AlmaLinux OS 0 1 Moderate

usbguard security update

The USBGuard software framework provides system protection against intrusive USB devices by implementing basic whitelisting and blacklisting capabilities based on device attributes. To enforce a user-defined policy, USBGuard uses the Linux kernel USB device authorization feature. Security Fix(es): * usbguard: Fix unauthorized access via D-Bus (CVE-2019-25058) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default usbguard-tools-1.0.0-10.el9_1.2.s390x.rpm 317aa2e90d0668141a7d919bf293c10b9c6f308b87d2de0723cbfb4554848d77 usbguard-dbus-1.0.0-10.el9_1.2.s390x.rpm 721918331ca35a1ebecd39aec43732f6769c5c8ade53f66ba002d58bef59cdc0 usbguard-selinux-1.0.0-10.el9_1.2.noarch.rpm a415e5e1be55a36e9aad68b80ba34dc387313a81751ebc47ddf45a3ddcee81be usbguard-notifier-1.0.0-10.el9_1.2.s390x.rpm cabe7240258b36c776a9af816dfd049ca371a3c7c9463f39794c23e44829187e usbguard-1.0.0-10.el9_1.2.s390x.rpm d44085f367322ea4cab470164a894ba878bdff5600f467d23eac7f85d06c79c3 ALSA-2023:0304 Copyright 2023 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: Macro URL arbitrary script execution (CVE-2022-3140) * libreoffice: Execution of Untrusted Macros Due to Improper Certificate Validation (CVE-2022-26305) * libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password (CVE-2022-26306) * libreoffice: Weak Master Keys (CVE-2022-26307) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default autocorr-lb-7.1.8.1-8.el9_1.alma.noarch.rpm 04b3acd7c4d2f57c2aca505634d631f0d1a30c08462771bc4a80ad00d1e3e79d autocorr-cs-7.1.8.1-8.el9_1.alma.noarch.rpm 08d82f12623b3185007f267c76f601f1cdfb5cbddfb4a37d87656e91cc111217 autocorr-pt-7.1.8.1-8.el9_1.alma.noarch.rpm 0f798d1e4f0eba57af2599e2afbdba3afdf06cda2039de87d3bda2ced3962f45 autocorr-is-7.1.8.1-8.el9_1.alma.noarch.rpm 108c5aedee8b91ca8d1b8d06813a8901d28a408f7bea7d1c8313dba8aca17d64 autocorr-bg-7.1.8.1-8.el9_1.alma.noarch.rpm 137f8a1ebcbbf4407188d44faaeb2c31fd1fcde1bf5e0d465c026b708a2a8575 libreoffice-help-en-7.1.8.1-8.el9_1.alma.s390x.rpm 15ef60bba3d98d867cd56035f97a8c1206447a4a95d66d569854f90265cca6f2 autocorr-sr-7.1.8.1-8.el9_1.alma.noarch.rpm 17218493c99575c9a48b4134875176fbf60d189786bcc2ec5eb6d9f68efe6de7 autocorr-ro-7.1.8.1-8.el9_1.alma.noarch.rpm 1b7ec41c4d013e55f28fb75b49e8719f2a58ea1f0ed8f42ac6dee4b0c971400e autocorr-tr-7.1.8.1-8.el9_1.alma.noarch.rpm 1f16cba0243a479ba3dab7c705bbb4abba500edfaf9d42f8217f46756b9cf325 autocorr-sk-7.1.8.1-8.el9_1.alma.noarch.rpm 2081afc6cb2d470f7031224549090b272d1e0fe18bba3666b19d2291e6a71982 autocorr-sl-7.1.8.1-8.el9_1.alma.noarch.rpm 2a61f65178e3d64964706b981d7209a13a4ac76a36a44b9cda01767b1c93ff33 libreoffice-ure-7.1.8.1-8.el9_1.alma.s390x.rpm 2c5f8f227cbcf5ea47ebcda9c1ad6cec8495df6aaf8e2a1771fa9173e3aa447c libreoffice-ure-common-7.1.8.1-8.el9_1.alma.noarch.rpm 2e6109f0858d12f88a00913aa2ea08803e56afefdaceeb7b39b7e0043ff1f017 autocorr-vi-7.1.8.1-8.el9_1.alma.noarch.rpm 3c3e668316ccc51c30f019c641e455f10c5072db5e1969120be2d9fc2c9e5cd4 autocorr-sv-7.1.8.1-8.el9_1.alma.noarch.rpm 44ee24a4d70f78195b69aac9fb5d6ffbd4de6b042c4fd029b0eaada5d69aca2c autocorr-ga-7.1.8.1-8.el9_1.alma.noarch.rpm 4a55499692a6ccf81b77165c98b4c82a5497f6dd53bd6a10ea2428d8a5906b94 autocorr-pl-7.1.8.1-8.el9_1.alma.noarch.rpm 5e456d42c6c2cc8caa900a62dd4138d8ae5c493afab41b1443a18a6475387efa libreoffice-core-7.1.8.1-8.el9_1.alma.s390x.rpm 60525a3040b71bf0768a54f966de5878a8012b86abcc9576b3377011605f4dd8 autocorr-ca-7.1.8.1-8.el9_1.alma.noarch.rpm 67adb4ab5787b6655cec917858534a8cdc8febcbbb835ca2eaf1be52123cb72f libreoffice-impress-7.1.8.1-8.el9_1.alma.s390x.rpm 6aee28f99a4136732d74834ae637bb845df3ce0eb8f14d68963789d5bb6a9dc8 autocorr-fa-7.1.8.1-8.el9_1.alma.noarch.rpm 6c81b66919480cf8cd63edfdaf98ad1e23445242fc46e02edf04ca75c14c1341 autocorr-dsb-7.1.8.1-8.el9_1.alma.noarch.rpm 6cd9e17e2b3cf4fd8b5c0fcc2f15d1137ed73fc37d2110a65d00fd1c57fda981 libreoffice-graphicfilter-7.1.8.1-8.el9_1.alma.s390x.rpm 7738beb4878cf1b796ea31f2488467ef879794651c757c787ff4565c7246794e autocorr-da-7.1.8.1-8.el9_1.alma.noarch.rpm 782d27068da493b5d20eab479d5cbbd5ab8e0fc30f89e0e75507596a4374b866 autocorr-ko-7.1.8.1-8.el9_1.alma.noarch.rpm 7c0ff6f32cb72de0e48d1bdb4b3a16deffb51fd800fa90c396f335f956e8973c autocorr-vro-7.1.8.1-8.el9_1.alma.noarch.rpm 7d1dbb2b41a8107c4958db7fd4becd417a7944e19ebef27bfca98339c93ee7d4 autocorr-af-7.1.8.1-8.el9_1.alma.noarch.rpm 7e4b810345114ede7b9a309a9383c144c34f6e114acd0a9c1815a7db3371b618 autocorr-nl-7.1.8.1-8.el9_1.alma.noarch.rpm 88f0bb230503627426b2b5d667587bed48b6342640bece019c1facce59a01e7c autocorr-en-7.1.8.1-8.el9_1.alma.noarch.rpm 8dac52cf4a0195fae6d521c17b6a190b5a304d7aedae9ba199ee900d2f5d9bf4 autocorr-de-7.1.8.1-8.el9_1.alma.noarch.rpm 9042d8599396e7117a1b428c61fc527cb0c10d8a9cabde997c2ca28f3853c0f9 libreoffice-pdfimport-7.1.8.1-8.el9_1.alma.s390x.rpm 919658873fb0b292377bcdc7efdf897760aa60cc1e22a65d132968db6d60b25f autocorr-hsb-7.1.8.1-8.el9_1.alma.noarch.rpm 935eafe3250756edfba87f3fc170d07bda7305b76f4ec3bbd258787d1b7c3eb9 libreoffice-pyuno-7.1.8.1-8.el9_1.alma.s390x.rpm 9a3a06721aba7968d25098c7b1a37cfb123e94ef42ff0cadef4ecb36338cc689 libreoffice-calc-7.1.8.1-8.el9_1.alma.s390x.rpm 9e9977be124497b39d923280586246d5726555ac2627edf025cb08da259eece5 autocorr-lt-7.1.8.1-8.el9_1.alma.noarch.rpm 9f4130565d2ea3d19f92ba969ca9517fea40d15f2ce72d12699f88827c4e01c2 autocorr-fi-7.1.8.1-8.el9_1.alma.noarch.rpm a67b616ff1cb7bf60a559a202f891e6da2913dc825f66f01dd28d0f03f9307d2 autocorr-es-7.1.8.1-8.el9_1.alma.noarch.rpm b07b4669d8b047db9118726afaa676050183519e6cc6a7b2b34dba25b31f0dcd autocorr-fr-7.1.8.1-8.el9_1.alma.noarch.rpm b52344015aa39080f4e92ec6ce1f81f971bb11d9efa6aefef9d183a169ecf2bb autocorr-ru-7.1.8.1-8.el9_1.alma.noarch.rpm b6f77412865d66a179b412a6c3084fccded14c8f8a8f7a988d8744b821ecd1c8 libreoffice-data-7.1.8.1-8.el9_1.alma.noarch.rpm b787bec445391f6bc4b82b56953644b186e5582a3b309a531825453eaa9bca1b libreoffice-writer-7.1.8.1-8.el9_1.alma.s390x.rpm c034bf314972275b80e70ba69167ee43a3ac69b8a3e5626f9f067d04cdafb8ca autocorr-it-7.1.8.1-8.el9_1.alma.noarch.rpm c8f56e7360b7e4af1265a2574592af8c2b3facaba813e996a7316fa0b1357af4 autocorr-mn-7.1.8.1-8.el9_1.alma.noarch.rpm cc8686ce73c4edc93dfe123528a7324f9b0b6f3f790d12571f5805141a63cc84 autocorr-hu-7.1.8.1-8.el9_1.alma.noarch.rpm cf72968a3c1498d0e1146a91620c2f2c956b1dcb92ade3589d814d73df7dd7ff autocorr-zh-7.1.8.1-8.el9_1.alma.noarch.rpm e02d336ee3abb904c676597afe677c3ea019da36d74fc8eb0a5d22791b11f1de libreoffice-opensymbol-fonts-7.1.8.1-8.el9_1.alma.noarch.rpm e3829098af6e4585194f6dae23105fd20bb76ba66e8ef14b82a0c5645233d5b0 autocorr-hr-7.1.8.1-8.el9_1.alma.noarch.rpm e57b366791763ce019e2408d0be6941313098060ab683cf8da7eb0d428ee805f libreoffice-langpack-en-7.1.8.1-8.el9_1.alma.s390x.rpm e845d43868a94a267a19953bd1e002c9b63fcdba2d3132285c7f9eca883d496d autocorr-ja-7.1.8.1-8.el9_1.alma.noarch.rpm f00f423978fb8681748fb7fcaa6c8b2c73445be5166ab5c4fe22d79da87f4b8e autocorr-el-7.1.8.1-8.el9_1.alma.noarch.rpm f474b27d6bf4d0a7605f64f929bf49549120ea7f7d42630bd222b2acffd25fb1 libreoffice-ogltrans-7.1.8.1-8.el9_1.alma.s390x.rpm fabab790d4a501e759f64a0d2f71ae1adff9295a6b9c93bccc4420d43845fb9e ALSA-2023:0318 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql-jdbc security update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): * postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names (CVE-2022-31197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default postgresql-jdbc-42.2.18-6.el9_1.noarch.rpm e1f3513307b00a0bb322d145d84d83a6a537d9878b59f078f89b7536ebc3745e ALSA-2023:0321 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs and nodejs-nodemon security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.18.1), nodejs-nodemon (2.0.20). Security Fix(es): * minimist: prototype pollution (CVE-2021-44906) * nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517) * nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256) * nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * nodejs: Packaged version of undici does not fit with declared version. [almalinux-9] (BZ#2151627) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default nodejs-docs-16.18.1-3.el9_1.noarch.rpm 124046435a99e559841aa8ddd18093569656cdcf6cd39c08f237736a508bfb4a nodejs-16.18.1-3.el9_1.s390x.rpm 4266703577ec0edaf3269bef6e17539e61edf2e442a31b1ea66d7ab1a6441656 nodejs-nodemon-2.0.20-2.el9_1.noarch.rpm 609eaededba0f488032abeb94fa0bf2acb4a4b47d33f3361c396f72cdcc71abc nodejs-libs-16.18.1-3.el9_1.s390x.rpm 89b5f37aff12e7b9dc41de581822b035777bcf126ff562c54b2aca6aef181fd8 nodejs-full-i18n-16.18.1-3.el9_1.s390x.rpm cd5c852295853e6406bfc1cd3b9114acd41630e52f8f624cbe74e2caa1149609 npm-8.19.2-1.16.18.1.3.el9_1.s390x.rpm d9b44f00b21e12d17e4c57d6a4ea1d784c53c10fd8ee8e10f2fdceb357f5bf8c ALSA-2023:0328 Copyright 2023 AlmaLinux OS 0 1 Moderate

go-toolset and golang security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Internal linking fails on ppc64le (BZ#2144547) * crypto testcases fail on golang on s390x [almalinux-9] (BZ#2149311) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default golang-tests-1.18.9-1.el9_1.noarch.rpm 36b4b46538c05b8c5b649b551364130d4d6c637b844a82e37ba54f2b20d533da go-toolset-1.18.9-1.el9_1.s390x.rpm 67af6e1ccb6976f20ddcbed00be4db658384b09e7cf8f2bbaf2bd700acafea20 golang-1.18.9-1.el9_1.s390x.rpm 779f57e0a14fb90a86c2c22813d4c8971bc625c104238e5475dbe164e2cb06c2 golang-docs-1.18.9-1.el9_1.noarch.rpm 90e4104f56f278b9961ee177c36d70ff4f57aceff7d580ace8033bf56d2575d3 golang-bin-1.18.9-1.el9_1.s390x.rpm 9d8697b60dee4441132f365cf7d7dcb44d38d45ed434d8250d60df1e8b83cb01 golang-misc-1.18.9-1.el9_1.noarch.rpm b3591a2484054919826337e2b1dcc6bd766634c2117726cb9125c2445db4b217 golang-src-1.18.9-1.el9_1.noarch.rpm d67d295694d8a9a8e72089c151956c9000a6dbea9c3f0f81025cca90cc171652 ALSA-2023:0333 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: POST following PUT confusion (CVE-2022-32221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libcurl-devel-7.76.1-19.el9_1.1.s390x.rpm f55baf50a543b53bb5409e025e4a31c60e69e85d38fab9d705abeedebd4d3338 ALSA-2023:0334 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959) * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964) * kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139) * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945) * kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077) * kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Intel 9.2: Important iavf bug fixes (BZ#2127884) * vfio zero page mappings fail after 2M instances (BZ#2128514) * nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359) * ice: Driver Update to 5.19 (BZ#2132070) * WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588) * drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619) * updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914) * DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213) * No signal showed in the VGA monitor when installing AlmaLinux9 in the legacy bios mode (BZ#2140153) * Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142168) * ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976) * fatal error: error in backend: Branch target out of insn range (BZ#2144902) * AMdCLIENT: The kernel command line parameter "nomodeset" not working properly (BZ#2145217) * Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910) * Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2151605) * DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress (BZ#2154407) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default kernel-devel-matched-5.14.0-162.12.1.el9_1.s390x.rpm 1ff1923c62c1e162fa0778d0d947c18ff8f78d59e5bec85525c94f3cac08f8cd kernel-devel-5.14.0-162.12.1.el9_1.s390x.rpm 2028daf69152752667dad63af8bb6ae3cf09b4d2e0a7485c6d5d7345337e0881 kernel-doc-5.14.0-162.12.1.el9_1.noarch.rpm 3b99cc439dc2e719deb6fede6a076bacfb11ecfc0c5585bfd6bc2ae308d9bb86 kernel-debug-devel-matched-5.14.0-162.12.1.el9_1.s390x.rpm 67db0cfafdd1c156fb8ebf566b0a66cd4edf026f1daaecc633ba534b0988d363 perf-5.14.0-162.12.1.el9_1.s390x.rpm a7619c183429d7b7206eb522be8d3c4c699d813e2ff75da2e908800b82d45e6b kernel-debug-devel-5.14.0-162.12.1.el9_1.s390x.rpm ae78bbeb037929b52af3ef7be5567f84d77c1cc5aeaf65bcad443a09294122d4 kernel-zfcpdump-devel-matched-5.14.0-162.12.1.el9_1.s390x.rpm b82fcbd82f3f89db7abbf099e20181f58d2b6440e48a67f9cd74dd42e06c0de7 kernel-zfcpdump-devel-5.14.0-162.12.1.el9_1.s390x.rpm cf4a87b75ea8616f054710cbde5defaa66837fb106de148f67923fd813a30b34 ALSA-2023:0335 Copyright 2023 AlmaLinux OS 0 1 Moderate

dbus security update

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fix(es): * dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010) * dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011) * dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default dbus-x11-1.12.20-7.el9_1.s390x.rpm 7aef005697192435e2bb5d924f5d25633ed41c9be1104557828dca025ffc3a6e dbus-devel-1.12.20-7.el9_1.s390x.rpm 7dd2507adbf7fbd7a3a9fd6fddf3dceb712c08123a6eb779da963ed6ec3c54d4 dbus-daemon-1.12.20-7.el9_1.s390x.rpm d64655c85529f988adeaca33daef71d797397e07ca20d9394e13ecafb10fe101 ALSA-2023:0336 Copyright 2023 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: buffer overrun in format_timespan() function (CVE-2022-3821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default systemd-journal-remote-250-12.el9_1.1.s390x.rpm 5d54503f29abad8064af7a50bb7734e3d03baacd6e3edd2e9fbb9f1011213564 systemd-devel-250-12.el9_1.1.s390x.rpm dcf37dd3e237a9f9b07d3826b3a30741638495b766ae4b595a47b2cf19b33a35 ALSA-2023:0337 Copyright 2023 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (CVE-2022-43680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default expat-devel-2.4.9-1.el9_1.1.s390x.rpm daa158e01dc824d00bc73d485a90c89d282d3d5ec457f0dc63ac0ea0e027f811 ALSA-2023:0338 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303) * libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libxml2-devel-2.9.13-3.el9_1.s390x.rpm c2f3d5c6ea2f2723067ad9f3a276d577d9ef764e355e678e85b039bbde30a823 ALSA-2023:0339 Copyright 2023 AlmaLinux OS 0 1 Moderate

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API (CVE-2022-35737) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default sqlite-devel-3.34.1-6.el9_1.s390x.rpm ba77d5d49439ca30e977c0fa53ab553e567aa79ea4d5dfa8b186976750d33f86 sqlite-3.34.1-6.el9_1.s390x.rpm e9275e6710b0173d25ebec08a5be547650856d5a287376f7e73e4d1c2e966d6c ALSA-2023:0343 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libtasn1-devel-4.16.0-8.el9_1.s390x.rpm 2712fdf45135160d0e45c5975f2cc11d6d8a63809b28213648ef0b8dedd4f082 libtasn1-tools-4.16.0-8.el9_1.s390x.rpm f7e17fbdbc8178a6f7f1897859a189cb55bda1e9419f50e6bf2a4dcc8e76b759 ALSA-2023:0383 Copyright 2023 AlmaLinux OS 0 1 Important

libXpm security update

X.Org X11 libXpm runtime library. Security Fix(es): * libXpm: compression commands depend on $PATH (CVE-2022-4883) * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617) * libXpm: Infinite loop on unclosed comments (CVE-2022-46285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libXpm-devel-3.5.13-8.el9_1.s390x.rpm 0cca6f2f73e7ec44b03f451dd95fab137fad7a494aaecb57b19a423fcb28f797 libXpm-3.5.13-8.el9_1.s390x.rpm 16796c5d0b7d3e6586db4730349bd9c3f34ba872cfeebe0450628a1f08517a51 ALSA-2023:0476 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fix(es): * Mozilla: libusrsctp library out of date (CVE-2022-46871) * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598) * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605) * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599) * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601) * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers (CVE-2023-23602) * Mozilla: Fullscreen notification bypass (CVE-2022-46877) * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive (CVE-2023-23603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default thunderbird-102.7.1-1.el9_1.alma.s390x.rpm 9d0aa4b10532bf388300dd5518fb01b4d9003d9d5b48e97ce1449be4a29a5d83 ALSA-2023:0608 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fix(es): * Mozilla: Revocation status of S/Mime signature certificates was not checked (CVE-2023-0430) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default thunderbird-102.7.1-2.el9_1.alma.s390x.rpm 6d2a7656032584c683a96370e522ee41439a2bb1dda6abf65623bbfc48b9489b ALSA-2023:0611 Copyright 2023 AlmaLinux OS 0 1 Important

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: gitattributes parsing integer overflow (CVE-2022-23521) * git: Heap overflow in `git archive`, `git log --format` leading to RCE (CVE-2022-41903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default gitweb-2.31.1-3.el9_1.noarch.rpm 0144c7a0031331fc2005e2dcba435f383ede2326425ca610305d67af21c3fdae perl-Git-2.31.1-3.el9_1.noarch.rpm 02f67f177a8b7b68253f1a14b5ff83e1aeda91810ce2854e6fe9296bb90d4f2a git-email-2.31.1-3.el9_1.noarch.rpm 15342999f25d473595061ccbaac115c900412edd5d487f2942ea848eafe7453e git-core-2.31.1-3.el9_1.s390x.rpm 1b5767e73c33b9c7db4c26c6601ff129b959a7aa13e51a6b08571a6afa83c542 git-all-2.31.1-3.el9_1.noarch.rpm 1d8420694c41b43364dda7c452660014fd9c569e41c36336b6771c41dd586477 git-2.31.1-3.el9_1.s390x.rpm 24236337fd49b0a17631600a97150d1e25811644732db11efcb63a287aa0b0ef git-subtree-2.31.1-3.el9_1.s390x.rpm 2831514a132cf1eadef90efa8d2410404e7c5899f9628a1c4e7c4cbdeec4dede git-core-doc-2.31.1-3.el9_1.noarch.rpm 596a127aedfcb5246b203f64577f643ae5bfdf71a6ca0cf17e08aef5ba567dcb git-gui-2.31.1-3.el9_1.noarch.rpm 7df98a9ba52a92c739e22cf618703d0d02d9ed5fbf5bf71eef68ba7e6a8ac213 gitk-2.31.1-3.el9_1.noarch.rpm 9766f7949e4c866a285c863ad738c39ae4c27c1564a37e99d40faf2de042de90 git-instaweb-2.31.1-3.el9_1.noarch.rpm 98e5682d625dcd29a2c589ea6c3baf17f04fc64946acaa6ce5f9acb6b38a5250 git-daemon-2.31.1-3.el9_1.s390x.rpm c968e456e6ed95a0433195ea57154f2502db72fc7156617e59fe0d885b06633a git-credential-libsecret-2.31.1-3.el9_1.s390x.rpm d98cf1ecd294c805b2aaa0687521e3d52c41d52709e1defecacb4d30ac15d972 perl-Git-SVN-2.31.1-3.el9_1.noarch.rpm dcc7789f454ba62248fa75a95eb332badc751de25c031b89226d7092d7304870 git-svn-2.31.1-3.el9_1.noarch.rpm f1d0778ffb02312fb2ed05cce0146953c6027d67f3627a8a5bda53dfbb7f23e1 ALSA-2023:0622 Copyright 2023 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default tigervnc-icons-1.12.0-5.el9_1.1.noarch.rpm 0933d7e5d07776398f71248b5bf23351f5f549d69014a9fecf739d2cddd977b0 tigervnc-1.12.0-5.el9_1.1.s390x.rpm 38d2e8fc18d7dde8ad6b8457a33cb339eff9241c13e076c45b70104228eadd0a tigervnc-server-module-1.12.0-5.el9_1.1.s390x.rpm 574ba02066ba08646bff11e2541dea5155f8239149291deebe0870ce0387c426 tigervnc-server-minimal-1.12.0-5.el9_1.1.s390x.rpm 65fe12a4be1fd5706f8955710bc5813b8ca54bcbd0426a6d8ec825389f29b32a tigervnc-selinux-1.12.0-5.el9_1.1.noarch.rpm 728a52e2fc345721666a6ac2c8c7c5f6826077f7cfd550b017f78c16389b07f3 tigervnc-license-1.12.0-5.el9_1.1.noarch.rpm 9ff23dea5996323a873dd14efd719829917875164325fd50d396325dc29ed839 tigervnc-server-1.12.0-5.el9_1.1.s390x.rpm ae0f9bf715099a596e4c2c3783010cdbdde2dee2aeb50336efb54218f286a404 ALSA-2023:0810 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.8.0 ESR. Security Fix(es): * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default firefox-102.8.0-2.el9_1.alma.s390x.rpm 0f650f6200d87c19090dff70d100be510c58dc8de3a4cc509cf353ab77ce0777 firefox-x11-102.8.0-2.el9_1.alma.s390x.rpm 1061182b0b8d2bf182c9818f66778907af0355f3e8fad28c0b4986f1b394066a ALSA-2023:0824 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.8.0. Security Fix(es): * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default thunderbird-102.8.0-2.el9_1.alma.s390x.rpm 3e49afef8c2487222e2103fffd36d18f76bd78be2ebd12015150d1f6c8ddb16f ALSA-2023:0903 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: processing maliciously crafted web content may be exploited for arbitrary code execution (CVE-2023-23529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default webkit2gtk3-jsc-2.36.7-1.el9_1.2.s390x.rpm 118ca98b7f7fa4d00490e538907e9a74e99797d34269847059a2db772ab31879 webkit2gtk3-2.36.7-1.el9_1.2.s390x.rpm 67049b3f00c75e00a6dd1ac371e3c86c282628030d5ebbbb94f26f70283b69af webkit2gtk3-devel-2.36.7-1.el9_1.2.s390x.rpm 9080c3f79796e654260c5e708a9a8ba15a20610d228eb189ba16aea4ffba4df7 webkit2gtk3-jsc-devel-2.36.7-1.el9_1.2.s390x.rpm f18bb03144f41e8b4147c458a931ca4d1f3c5f918d3725e2adba39e90a79f21d ALSA-2023:0946 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: read buffer overflow in X.509 certificate verification (CVE-2022-4203) * openssl: timing attack in RSA Decryption implementation (CVE-2022-4304) * openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450) * openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215) * openssl: invalid pointer dereference in d2i_PKCS7 functions (CVE-2023-0216) * openssl: NULL dereference validating DSA public key (CVE-2023-0217) * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) * openssl: NULL dereference during PKCS7 data verification (CVE-2023-0401) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * HMAC generation should reject key lengths < 112 bits or provide an indicator in FIPS mode (BZ#2144000) * In FIPS mode, openssl should set a minimum length for passwords in PBKDF2 (BZ#2144003) * stunnel consumes high amount of memory when pestered with TCP connections without a TLS handshake (BZ#2144008) * In FIPS mode, openssl should reject SHAKE as digest for RSA-OAEP or provide an indicator (BZ#2144010) * In FIPS mode, openssl should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144012) * In FIPS mode, openssl should reject RSA signatures with X9.31 padding, or provide an indicator (BZ#2144015) * In FIPS mode, openssl should reject SHA-224, SHA-384, SHA-512-224, and SHA-512-256 as hashes for hash-based DRBGs, or provide an indicator after 2023-05-16 (BZ#2144017) * In FIPS mode, openssl should reject KDF input and output key lengths < 112 bits or provide an indicator (BZ#2144019) * In FIPS mode, openssl should reject RSA keys < 2048 bits when using EVP_PKEY_decapsulate, or provide an indicator (BZ#2145170) * AlmaLinux9.1 Nightly[0912] - error:03000093:digital envelope routines::command not supported when git clone is run with configured ibmca engine backed by libica.so.4 (OpenSSL 3.0) (BZ#2149010) * OpenSSL FIPS checksum code needs update (BZ#2158412) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default openssl-devel-3.0.1-47.el9_1.s390x.rpm 9de5a112b55e6433299fc7baf005ad0ff243cc1922e1874a0b9f5e3ed7259411 openssl-perl-3.0.1-47.el9_1.s390x.rpm dfa573e8755ce24c3ad6b68fafb81be1ae2af9ffb31d0352d47455a236afab00 ALSA-2023:0951 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564) * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378) * kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379) * kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179) * kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux 9.0: LTP Test failure and crash at fork14 on Sapphire Rapids Platinum 8280+ (BZ#2133083) * AlmaLinux 9.1 Extending NMI watchdog's timer during LPM (BZ#2140085) * AMDSERVER 9.1: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151274) * qla2xxx NVMe-FC: WARNING: CPU: 0 PID: 124072 at drivers/scsi/qla2xxx/qla_init.c:70 qla2xxx_rel_done_warning+0x25/0x30 [qla2xxx] (BZ#2152178) * Regression: Kernel panic on Lenovo T480 with AH40 USB-C docking station (BZ#2153277) * Scheduler Update (almalinux9.2) (BZ#2153792) * AlmaLinux9.1, Nx_Gzip: nr_total_credits is not decremented when processing units are reduced by dlpar in shared mode. (FW1030 / DLPAR) (BZ#2154305) * MSFT, MANA, NET Patch AlmaLinux-9: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155145) * Azure vPCI AlmaLinux-9 add the support of multi-MSI (BZ#2155459) * Azure AlmaLinux-9: VM Deployment Failures Patch Request (BZ#2155930) * The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158815) * AlmaLinux-9.2: Update NVMe driver to sync with upstream v6.0 (BZ#2161344) * CEE cephfs: AlmaLinux9 cephfs client crashing with RIP: 0010:netfs_rreq_unlock+0xef/0x380 [netfs] (BZ#2161418) * block layer: update with upstream v6.0 (BZ#2162535) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default kernel-doc-5.14.0-162.18.1.el9_1.noarch.rpm 132054043f8a786ac13369528713e8bc90a32b11706eae46f55cd94066c7cf67 kernel-zfcpdump-devel-5.14.0-162.18.1.el9_1.s390x.rpm 31675c98fe9525d8b95952d4407421f182fd41361efed8563fdd710f351d691b perf-5.14.0-162.18.1.el9_1.s390x.rpm 94da75e181e7936475ca88dd2a631e570c52263141a78ae605673b3f4dae772e kernel-zfcpdump-devel-matched-5.14.0-162.18.1.el9_1.s390x.rpm 9f8f066c68985dd1f70628e3965d78ab58f0b38508e4379e0289f52f7651a21a kernel-devel-matched-5.14.0-162.18.1.el9_1.s390x.rpm 9fadcce255aa3f4e5c9ac8a049397617535d7d1ea434be807f8dff4b13e7336d kernel-debug-devel-matched-5.14.0-162.18.1.el9_1.s390x.rpm a7b9ceb9b8347bf81a8a5dd1aac795a6b3bb60a019d256f511844fcae77d74f9 kernel-devel-5.14.0-162.18.1.el9_1.s390x.rpm c601d488fb9519ae71e4e709d34d258ae8eb6079873724f9ad7c9006a429311f kernel-debug-devel-5.14.0-162.18.1.el9_1.s390x.rpm c96764b944c8a857c4afb8c2842c7d57208b8a4a264779bc244576aca7cb2e91 ALSA-2023:0953 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default python-unversioned-command-3.9.14-1.el9_1.2.noarch.rpm 4c196d0362e2bfad00a4627155c295f8b60bbca8eef7be0a51c7e85c57ed1579 python3-devel-3.9.14-1.el9_1.2.s390x.rpm 829affab387307fa56b9093bb7e549724120ca8661ab1a86c6e716bceeef0af2 python3-tkinter-3.9.14-1.el9_1.2.s390x.rpm d660435239641f17df19ae77e8911fb0fa9fa14f2a428010be5311ce1461df88 ALSA-2023:0954 Copyright 2023 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting (CVE-2022-4415) * systemd: deadlock in systemd-coredump via a crash with a long backtrace (CVE-2022-45873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default systemd-devel-250-12.el9_1.3.s390x.rpm 565ead04a8c357a1b09f0bacfd3be0ddc7794b0d399cb2e577c8dfa34377fcb3 systemd-journal-remote-250-12.el9_1.3.s390x.rpm e5c830f846bce859819a2a160d46df0df399c8dd0975555e3c07d33bbf53857b ALSA-2023:0957 Copyright 2023 AlmaLinux OS 0 1 Moderate

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: use after free allows Sandbox Escape (CVE-2021-44964) * lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default lua-5.4.4-2.el9_1.s390x.rpm 75873bc393179499368c6903dd5cb348033e6164ed593c4296bbf4d09f982272 ALSA-2023:0958 Copyright 2023 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: no check if the return value of XChangeGC() is NULL (CVE-2022-47024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default vim-X11-8.2.2637-20.el9_1.s390x.rpm 6f86bd3bc7d364dd5c3df968d13de7d811151fe26f4090676784744b7908968c vim-enhanced-8.2.2637-20.el9_1.s390x.rpm 89ba90b54610a169fa948c0876eaf66481e2caaa39df73528e241089ad39634c vim-common-8.2.2637-20.el9_1.s390x.rpm c1dc30bed31050f62161d51030da52d4eb8a0c18f0e227c972511a559d4be460 ALSA-2023:0965 Copyright 2023 AlmaLinux OS 0 1 Moderate

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.0.27). (BZ#2161667) Security Fix(es): * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454) * php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications (CVE-2022-31629) * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630) * php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631) * php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default php-xml-8.0.27-1.el9_1.s390x.rpm 0191c42872f59374d94841fc54ded08cd294469e5fd7af45231370aa3632e797 php-pdo-8.0.27-1.el9_1.s390x.rpm 04c1847fd85054b8ff106e5812cf3c77240489f9f50c114149b3edfc4d11655f php-gd-8.0.27-1.el9_1.s390x.rpm 062db49d581a01e990636c834a4b262c2c0b1fe41469bb4203c1b89c46ea4b70 php-gmp-8.0.27-1.el9_1.s390x.rpm 07dbdb39886777b23a8f450598d5e4e964bd07e5b970110c4e758d330a6b37cb php-opcache-8.0.27-1.el9_1.s390x.rpm 1c900a2ef0eba924407066f0217cbcfda3328582789a7f0c962ee34be4e6336b php-ffi-8.0.27-1.el9_1.s390x.rpm 25e691d62e441a13e64b0d43cfe4eed258fba93d6e53d43b02c5256051b644c3 php-common-8.0.27-1.el9_1.s390x.rpm 282c169a8864df0c54aa1ab027678e35475fd48c4378b48ab0a3965873376fb9 php-ldap-8.0.27-1.el9_1.s390x.rpm 2e2f81c2aa2303c79e3f698465306563a84d8b5450cb83308a8e7fd53b20ae33 php-odbc-8.0.27-1.el9_1.s390x.rpm 3bc95347a7abb9f6e2ed7b3a25f2693789571ab06325d9845c5ac4b0ad8d9c41 php-dbg-8.0.27-1.el9_1.s390x.rpm 4c8a63682099b88988e81d34fbc2e5967275a24ca2d0639cb2cdb88bbcf55327 php-snmp-8.0.27-1.el9_1.s390x.rpm 6b3e59a8ada9aa361d09ea5292b24f10fcc7d043bc5fe48861e676fa4c893f72 php-soap-8.0.27-1.el9_1.s390x.rpm 6d2ec05e6171f9ce67b14ade23524792e2a9983d85831864eeed0f262406ae60 php-cli-8.0.27-1.el9_1.s390x.rpm 6d77c6f316f381bb1f26ae18993fce5b59e70e9b5a31bae6fa01822daf268fd4 php-mysqlnd-8.0.27-1.el9_1.s390x.rpm 7fd8628e406582b7c5733408dcc8b2201d423eeeb63d1938ad449097ff6fa19c php-enchant-8.0.27-1.el9_1.s390x.rpm 8ccd4427efbf8512830515fa85aca20b358508f78e0a2ce6f874a3f5e3557921 php-intl-8.0.27-1.el9_1.s390x.rpm 8e0898d586a6448e7ebbc290ef50a49df99259792b9905629030bcbdf9e2e35f php-bcmath-8.0.27-1.el9_1.s390x.rpm 8f80213221ba9df6d78698342cd6b26ba37a1bd17d72c9aae2988f01c75e7ad4 php-pgsql-8.0.27-1.el9_1.s390x.rpm 9cb88c106cdb2d168b7bb741a918f0473e6df4cd23b9228864ca53ce02b6c243 php-process-8.0.27-1.el9_1.s390x.rpm a1559a0f3908815ff31b58d309dba43f67139946e2b474124d6638588c9e6846 php-embedded-8.0.27-1.el9_1.s390x.rpm a2a2e39143a7d7343a6b5b9671ed9d8d233454524745161c225115b319f9cb35 php-8.0.27-1.el9_1.s390x.rpm a7892041eab777e02a163d684104da4bd8304baf0c0fd90bc6ee506693d4d59d php-mbstring-8.0.27-1.el9_1.s390x.rpm ad30c189b3d2d562f4c5fd619a042548dd38af777a9fac45af1b6d6c48a8e93f php-fpm-8.0.27-1.el9_1.s390x.rpm b7c92f50db2d5a4f0d0e95c415e2b09b4becb016c42529fa1d11de2792961248 php-devel-8.0.27-1.el9_1.s390x.rpm f01c6ed1d320817a2d6d4680b66448b8b90240b55d4ccfa1c68ca60c42a22a01 php-dba-8.0.27-1.el9_1.s390x.rpm f030916e464c664524c31d39eed780ab466a76b94f2ff21249ca5c4d012baedf ALSA-2023:0970 Copyright 2023 AlmaLinux OS 0 1 Moderate

httpd security and bug fix update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001) * httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760) * httpd: mod_proxy: HTTP response splitting (CVE-2022-37436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * httpd-init fails to create localhost.crt, localhost.key due to "sscg" default now creates a /dhparams.pem and is not idempotent if the file /dhparams.pem already exists. (BZ#2165975) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default mod_session-2.4.53-7.el9_1.1.s390x.rpm 21526c482f82ecacb246cd1cd00f89dbe74be7d5d0d342af7f21936cafe5d0bd mod_lua-2.4.53-7.el9_1.1.s390x.rpm 23cfc2b13779347a6b977fdd0b80d5ae451d499c4a7ee5e5ae3c463d4f5f1634 httpd-filesystem-2.4.53-7.el9_1.1.noarch.rpm 3352de6afe7653c880424816ba8d8d8cf5ec226f325f6f2548eb0a54e55eaf6f httpd-devel-2.4.53-7.el9_1.1.s390x.rpm 6f15b710780729d5c5cc53b637c9d72386941778a863b2d38e41ddaefbe76a68 httpd-2.4.53-7.el9_1.1.s390x.rpm 8d2ecea64b7e5521ca2009a2be1712831c9bfdb00be93753db57290949526b2b httpd-manual-2.4.53-7.el9_1.1.noarch.rpm a7a5ffeedf4e3b3a6908d659b4d9982d805f81d111ed27cef9f254c7f6896830 mod_ssl-2.4.53-7.el9_1.1.s390x.rpm acb75efc590ee42717d52908e3c12b0a8072edfa1f23aa03649ccc536dd44ab9 mod_proxy_html-2.4.53-7.el9_1.1.s390x.rpm b8ed59fab4f01a314a96ca553151d01c7724743ac8818159c6d05754c9702f1f httpd-core-2.4.53-7.el9_1.1.s390x.rpm c542bdea990edd3abc64a0fb1554bde617e6ac45570668bb93d3095bf2dfca77 mod_ldap-2.4.53-7.el9_1.1.s390x.rpm cb5e30cd95e8a2b9670de172db6fc7769ed096bbd047430b31ead9eda8d3cdc4 httpd-tools-2.4.53-7.el9_1.1.s390x.rpm fa2ec05f9345ad0187e89f311efa3dbb7e8c61de3b2677043c184f96b0e738d4 ALSA-2023:1068 Copyright 2023 AlmaLinux OS 0 1 Moderate

libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fix(es): * libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libjpeg-turbo-devel-2.0.90-6.el9_1.s390x.rpm 8f9105fd79a7c611311bb255ab9f6783312277c9c909c185bdd97585c0b5d176 libjpeg-turbo-2.0.90-6.el9_1.s390x.rpm a77511769044ab403b8215ac5f449ea2dd996f08fd66396db141f1c4eaf3de55 libjpeg-turbo-utils-2.0.90-6.el9_1.s390x.rpm bc7136224231c28213fe96faea87a64ca1bf5b81d2c5be971e73846e170958ec ALSA-2023:1141 Copyright 2023 AlmaLinux OS 0 1 Moderate

gnutls security and bug fix update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * CCM tag length should be limited to known values (BZ#2144535) * In FIPS mode, gnutls should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144537) * dracut-cmdline[554]: Error in GnuTLS initialization: Error while performing self checks i FIPS mode (BZ#2149640) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default gnutls-utils-3.7.6-18.el9_1.s390x.rpm 0738f5452b9b406299d36a100709de7613f9ad9492dfc452b876080fc56a8aeb gnutls-devel-3.7.6-18.el9_1.s390x.rpm 1bd96df9b0118904172d24f040c55c0d7f9de9725ac4c7397e0aee596e586a03 gnutls-c++-3.7.6-18.el9_1.s390x.rpm 2b2613e2c8ef48fc2546b9291e98179d25ddbeeae6d501ea9f3c2873b7b7d50f gnutls-dane-3.7.6-18.el9_1.s390x.rpm 4cc31a5be5166d3d7bbe0442c8feaab2c2aaeb8eae0e4eb97fbbdf5a546d9e15 ALSA-2023:1337 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.9.0 ESR. Security Fix(es): * Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) * Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176) * Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752) * Mozilla: Invalid downcast in Worklets (CVE-2023-28162) * Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default firefox-102.9.0-3.el9_1.alma.s390x.rpm 896582eca97da5b5a79cd91143d0b5e83f519b37aae61d0e2a867865dae3f219 firefox-x11-102.9.0-3.el9_1.alma.s390x.rpm fabff2ce14654d377d67f2d5dfba03714dfacc512ca81b745bfac7258391a08c ALSA-2023:1368 Copyright 2023 AlmaLinux OS 0 1 Important

nss security and bug fix update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): * nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767) Bug Fix(es): * In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator. (BZ#2177434) * Need to update FIPS review comments into NSS AlmaLinux-9. (BZ#2177875) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default nss-softokn-3.79.0-17.el9_1.s390x.rpm 0796d3166e340374679ce3462174aa4a46c0ae759719da80da764af8eeade677 nss-tools-3.79.0-17.el9_1.s390x.rpm 0d5a585b43713871f401441c7ee8ccc7f03a2619513c3b2fa6af5016fccaf835 nspr-devel-4.34.0-17.el9_1.s390x.rpm 3604637223fe2e56d2e631561b98141afd85835987e5d80f327e6f12eb4fc695 nss-devel-3.79.0-17.el9_1.s390x.rpm 6fba075a25e91f5f58ffb00d28c533b7da4a877569034d9718a6a5a5ef545c3d nss-util-devel-3.79.0-17.el9_1.s390x.rpm 7bb6081a97b29dc34ccc25463845c93848c3026be02ca9ecccbbc339ad13f073 nss-softokn-devel-3.79.0-17.el9_1.s390x.rpm b9f09e9fcbcb97108ff49aa2ab8e299d17c9d96e0dd8536f16477dd7e1a9f9d0 nss-softokn-freebl-3.79.0-17.el9_1.s390x.rpm bb6e963376f70350554f1a0a70d300e376ab2be5aa5b41fe05cf3934416a460b nspr-4.34.0-17.el9_1.s390x.rpm be7337b988b961acf774873376f77af90485ffcd4f396bff56ba69f64be68481 nss-3.79.0-17.el9_1.s390x.rpm bff5ef98bc9ea4b2a81c68103ef8f37fff55434692ff58e0e1b70ba96a7e4eb1 nss-sysinit-3.79.0-17.el9_1.s390x.rpm e4f4a1d2bb6810f0eef4fbae35149a304579973744682cdc554b6799fbfac5ec nss-softokn-freebl-devel-3.79.0-17.el9_1.s390x.rpm edd863be9cfabd519a73a72c33cda418b964bedbe44460330d47376f867dffc1 nss-util-3.79.0-17.el9_1.s390x.rpm ef30548b73fad044a7e37dae3523f1c0fddc8f8751072c12f849cf1558188328 ALSA-2023:1407 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.9.0. Security Fix(es): * Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) * Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176) * Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752) * Mozilla: Invalid downcast in Worklets (CVE-2023-28162) * Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default thunderbird-102.9.0-1.el9_1.alma.s390x.rpm 466527c63581bc5360ab6c4b0520d6d2298ff45b68e05448d0b9dce8e2a208ec ALSA-2023:1470 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux9.0 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127880) * Cgroups_v2, when creating new cgroup/container, resets the cpu affinity masks for all usr processes on the system. (BZ#2143766) * AlmaLinux9.0 - boot: Add secure boot trailer (BZ#2151528) * kernel-rt-debug: WARNING: possible circular locking dependency detected (&n->list_lock->&p->pi_lock->&lock->wait_lock) (BZ#2160614) * Support cpuset.sched_load_balance by changing default CPUset directory structure (BZ#2161105) * AlmaLinux9.0 - s390/kexec: fix ipl report address for kdump (BZ#2166903) * libgpiod doesn't seem to work with Interphase gpiochip (BZ#2166956) * Azure AlmaLinux9 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170227) Enhancement(s): * IBM 9.2 FEAT: Upgrade the QETH driver to latest from upstream, e.g. kernel 6.0 (BZ#2166304) * Intel 9.2 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168382) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default perf-5.14.0-162.22.2.el9_1.s390x.rpm 176299cb34f53a58aae1825887201701c0db815eeb642c1bb89dbf649f5d2c44 kernel-devel-5.14.0-162.22.2.el9_1.s390x.rpm 54fc050781e49fef5a287655202d12a7ada790540f615ed052f03c66b8c1a638 kernel-zfcpdump-devel-matched-5.14.0-162.22.2.el9_1.s390x.rpm 5e5c02696ed82491089088e3d191a7d4b28126d11b0b3527cc66b1dde4ed1dc9 kernel-doc-5.14.0-162.22.2.el9_1.noarch.rpm 987ec41dd3e0fe1f213134794e49a14672763055ce2574b91005ced4ab2f7f10 kernel-devel-matched-5.14.0-162.22.2.el9_1.s390x.rpm b38a11e7994849687b0418365f19f25170dfc913c2b7c368e2c9e2d5e2f4c84e kernel-debug-devel-matched-5.14.0-162.22.2.el9_1.s390x.rpm b627684cf619724acc7b31673c2e56f70bd4bb3f3a5e9b248e415ccb9ed3f070 kernel-zfcpdump-devel-5.14.0-162.22.2.el9_1.s390x.rpm cd8977bb1fd4eec63037ecd12a6ecb124fe6ef55c31114b0f90d26f1131e107d kernel-debug-devel-5.14.0-162.22.2.el9_1.s390x.rpm e53317090ecbb350d91da88d18264cd658213a0d30b272992d73bf2d0db5743b ALSA-2023:1592 Copyright 2023 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default tigervnc-1.12.0-5.el9_1.2.s390x.rpm 1f284c30cefc0e8473eeeafd49c699069a85c031bb9a420f1a7e5c520a0d1939 tigervnc-icons-1.12.0-5.el9_1.2.noarch.rpm 2ad4b6a6488ca31b057eb3cb4f6d73353faac50f363cae37fafc4d736c87114c tigervnc-server-module-1.12.0-5.el9_1.2.s390x.rpm 48ac903d2915a13aa7d47c230c9ce76e1cfad9db5ccec829d99a7d20d2276ff4 tigervnc-license-1.12.0-5.el9_1.2.noarch.rpm 75e3b6a43db5608e112099a7647d48eefe274349a7446b3a6af3bc47f50af9fc tigervnc-server-minimal-1.12.0-5.el9_1.2.s390x.rpm c201b12cfb50585f6d5652f56fd62839456c7285503e7557a72cb54bacfb350a tigervnc-selinux-1.12.0-5.el9_1.2.noarch.rpm c564a1884269c72b7ce100d33882bce39543628cc033e33f5983d64258cdc14b tigervnc-server-1.12.0-5.el9_1.2.s390x.rpm d0909531c9e21c60766800f0cb5b69bd0dfd93f1839d777df998a76a5165b38f ALSA-2023:1670 Copyright 2023 AlmaLinux OS 0 1 Important

httpd and mod_http2 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: HTTP request splitting with mod_rewrite and mod_proxy (CVE-2023-25690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default mod_ssl-2.4.53-7.el9_1.5.s390x.rpm 02b939a75b7d21967af50fd4bc36adf0a2b5517354c1a649a04f8f355cd94e5f httpd-filesystem-2.4.53-7.el9_1.5.noarch.rpm 0e18fe73ce1d645cee0c29947658d8d7cf764cd0d5dff4a9d29e549dea3ccd98 mod_session-2.4.53-7.el9_1.5.s390x.rpm 220332d4c4fa6c62c175263b76a2aa975c2e8ddb40d9c14ba3c84881f45a8e50 mod_lua-2.4.53-7.el9_1.5.s390x.rpm 2779e10c1bdc38b48db688ff6f7d8600b4f8c2ae1aec00424e7d30ef4366995f httpd-manual-2.4.53-7.el9_1.5.noarch.rpm 2f9fcaf5d345420c53a8c3125d3f20a94e594d2c4fc208c8f71a194624f859bc httpd-devel-2.4.53-7.el9_1.5.s390x.rpm 3c5851d233a48c72aa44bfb4f6506c20ed06e6924aa3a403a48ad745a80002a7 mod_ldap-2.4.53-7.el9_1.5.s390x.rpm 5637f79dfc0b43e37752361732a1ee3496617985054c0ae37240e591510a2ed2 httpd-tools-2.4.53-7.el9_1.5.s390x.rpm 5e683b2fd9e6b0fa8b3d1bc7ba71a2407c3d9745252bb03504cd7472f49bcb1a httpd-core-2.4.53-7.el9_1.5.s390x.rpm 982b635a21c26a49073c4adef37373eda502e7681cb86c52c4936b0e556631a9 mod_http2-1.15.19-3.el9_1.5.s390x.rpm a861746b9543a14aad72f8bdfa046c7dfcc5ec341d1367190afb748bd430e756 mod_proxy_html-2.4.53-7.el9_1.5.s390x.rpm b1c26d45dae78827e22be5211a678382cc4886ca76ec1111b8125f7039f4f2a7 httpd-2.4.53-7.el9_1.5.s390x.rpm f13f2dac237d4af313dbcbf65e8dd893e9eca56adc9ae89ba923befb0953d5a8 ALSA-2023:1693 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625) * postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default postgresql-private-libs-13.10-1.el9_1.s390x.rpm 15e4b239905a64d2546ee8652ccbd204cff3889b6122a73b0557ad0cf0331b03 postgresql-upgrade-13.10-1.el9_1.s390x.rpm 1e48d23b3e6c2b4627b9d49e85da8dea31eb21c5f25dac494c10df7422da1670 postgresql-13.10-1.el9_1.s390x.rpm 4157a58c45ca9fa4cc6656107421d0c5f79cc39ca59a9b307189069158125390 postgresql-server-13.10-1.el9_1.s390x.rpm 94dc9adef730c20607611306958f0d5f6176b26c6a086ab23448c9be61d44256 postgresql-contrib-13.10-1.el9_1.s390x.rpm a17dc753dc949f146ad3c1709bd0772addb6ded280c2d06df91bf1c43ed45a20 postgresql-plperl-13.10-1.el9_1.s390x.rpm a7dfe8e692f01936b4bbd1a0f41770d3dab90bf3b16238f63f99447818991679 postgresql-plpython3-13.10-1.el9_1.s390x.rpm bee7f6ad960c03cbf2d939bbbbb83492c78977a3f314320f7eef81a173164770 postgresql-pltcl-13.10-1.el9_1.s390x.rpm d377a6baadf4efcc99df3d6fedbd734a43c0171766e094c2093465270ce46225 ALSA-2023:1696 Copyright 2023 AlmaLinux OS 0 1 Moderate

haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: segfault DoS (CVE-2023-0056) * haproxy: request smuggling attack in HTTP/1 header parsing (CVE-2023-25725) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default haproxy-2.4.17-3.el9_1.2.s390x.rpm 9db25d4d75528f1104434f9c8407f603a6b760dc32eb34b8f8de86dbd85e479d ALSA-2023:1701 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP multi-header compression denial of service (CVE-2023-23916) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libcurl-devel-7.76.1-19.el9_1.2.s390x.rpm ac6c9f72c1f5bcc01d81b294c6e8b919dd8e1e4711fe4bd977f5b907c89e0291 ALSA-2023:1703 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Update intel_idle for Eaglestream/Sapphire Rapids support (BZ#2168361) * AlmaLinux9: An application stopped on robust futex used via pthread_mutex_lock() (BZ#2168836) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default kernel-doc-5.14.0-162.23.1.el9_1.noarch.rpm 094def3a0784f6ca8cebd409b973dc0087cc3a39c13f7f32792e7038448f5538 kernel-debug-devel-matched-5.14.0-162.23.1.el9_1.s390x.rpm 3a3d9baaf0affe4f67bb6265d2811b9b5561bbc1d280ecf83e8132af721e5e23 kernel-devel-5.14.0-162.23.1.el9_1.s390x.rpm 53eb26119d05f924dbecf1c4513bb4ef9d8419172bef313dbc8282fde0e39673 kernel-debug-devel-5.14.0-162.23.1.el9_1.s390x.rpm 71e936484aed0a5eb02f7f3993dd3a29c273535296252c0823273acbb6b88e4d kernel-zfcpdump-devel-matched-5.14.0-162.23.1.el9_1.s390x.rpm 80b76cb657688c483cac7cbe90b3c7c65f490eca7221e479bf966d7b67588db2 perf-5.14.0-162.23.1.el9_1.s390x.rpm 8d973fdd3c9b8ba1da0273a63ec92332052f0d1de8c9f43769b246e9e74765f8 kernel-devel-matched-5.14.0-162.23.1.el9_1.s390x.rpm 93b7713874f4be5bfba85283bbf52991d8f1d445e980f8e8aa7583de26267e88 kernel-zfcpdump-devel-5.14.0-162.23.1.el9_1.s390x.rpm b30cf5c2b8845e04556bf9fdee0a43831bb5e4df3d1cb5ebe360d9c71fc17afd ALSA-2023:1786 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.10.0 ESR. Security Fix(es): * MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102) * Mozilla: Fullscreen notification obscured (CVE-2023-29533) * Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535) * Mozilla: Invalid free from JavaScript code (CVE-2023-29536) * Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550) * Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945) * Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539) * Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541) * Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default firefox-x11-102.10.0-1.el9_1.alma.s390x.rpm 0b9b27465612b2226c8690b1d573dc6f6cc1410a0dbc48dde290211deb8a7756 firefox-102.10.0-1.el9_1.alma.s390x.rpm bbe61a936af73e4ddddcf6ed45283de4b8e4df072e9df5dc74502eebdd42c0ed ALSA-2023:1809 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.10.0. Security Fix(es): * Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427) * Mozilla: Fullscreen notification obscured (CVE-2023-29533) * Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535) * Mozilla: Invalid free from JavaScript code (CVE-2023-29536) * Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550) * Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945) * Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479) * Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539) * Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541) * Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548) * MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default thunderbird-102.10.0-2.el9_1.alma.s390x.rpm e552f0c1d531aed452d02c5412d6cf2d78ca179bf4121b0ae1646dbab76195fa ALSA-2023:1879 Copyright 2023 AlmaLinux OS 0 1 Important

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) * OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939) * OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954) * OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967) * OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937) * OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938) * OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186804) * Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186811) * The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186807) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default java-17-openjdk-17.0.7.0.7-1.el9_1.s390x.rpm 0241f009047f48e125b0ac9664c41b20e56f6b7849d75e17c3c1f7fa3eb6f974 java-17-openjdk-src-17.0.7.0.7-1.el9_1.s390x.rpm 31484af3750b36c23cc344b36ae247488d9b41a7561c860656fe1e8de8a2bb44 java-17-openjdk-jmods-17.0.7.0.7-1.el9_1.s390x.rpm 414741df01ca5bf6bd5f0fc10c18a2736905de341abcb14075671a5f63bf18ff java-17-openjdk-devel-17.0.7.0.7-1.el9_1.s390x.rpm 42f9e99ea83d26a03023433dc993fd5e9f1dbb52cf22a2863b327a4e9334e3ff java-17-openjdk-static-libs-17.0.7.0.7-1.el9_1.s390x.rpm 431b4131e01adf988d77d65df0ffa22121189a255c3d5b6d9edbbc39770bca42 java-17-openjdk-demo-17.0.7.0.7-1.el9_1.s390x.rpm 8c176c92cbdb4fa3366ce6aa5b535df12693ad67d68f12659de9d9af07bf21b8 java-17-openjdk-headless-17.0.7.0.7-1.el9_1.s390x.rpm be0a7336a4a959d626370683b56d5edc97e03b791fc5fafa56cd01d5d3773071 java-17-openjdk-javadoc-17.0.7.0.7-1.el9_1.s390x.rpm c54f6ff9f82acbd3c1243ceaaf34eab4de8c51f80f3452b2c7a61c30a72bb85d java-17-openjdk-javadoc-zip-17.0.7.0.7-1.el9_1.s390x.rpm fed251282fe5fad9cd7794f39cb3d6a2db321ca1e9ca638fa0143592ecdd08db ALSA-2023:1880 Copyright 2023 AlmaLinux OS 0 1 Important

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) * OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939) * OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954) * OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967) * OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937) * OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938) * OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default java-11-openjdk-headless-11.0.19.0.7-1.el9_1.s390x.rpm 4560d38e2271aba5706ac217bb9458451b9bb14f0cc06ab323f2e6823be98ce3 java-11-openjdk-11.0.19.0.7-1.el9_1.s390x.rpm 68a6ef115d22f3ed968ca9df85afdcb62bf96b9a9ac3f4864df71d1e82a53acf java-11-openjdk-javadoc-11.0.19.0.7-1.el9_1.s390x.rpm 7db9f7b04e946d51ff061dbc09c1cb213e28057d2cfb835c9fca9ba7b991e34c java-11-openjdk-javadoc-zip-11.0.19.0.7-1.el9_1.s390x.rpm b0e66caa775088a4b11ad0fef3ce98450df9dceb32ac8c7ff4665d2107cc3f7a java-11-openjdk-demo-11.0.19.0.7-1.el9_1.s390x.rpm d6934706ea5756019bfd68dbacfaf86033250ca1ee0ca7b1ff7a0db1d3a77241 java-11-openjdk-devel-11.0.19.0.7-1.el9_1.s390x.rpm e08b80cbb14be81bb0541dd7d5e10024976635f1791999d7d0f9e860bc15ed30 java-11-openjdk-static-libs-11.0.19.0.7-1.el9_1.s390x.rpm f2ed7d4aaa42858c7833e75e2a2846358f5a66048bb908b7679fe3bb7dfb1c9b java-11-openjdk-jmods-11.0.19.0.7-1.el9_1.s390x.rpm f533971169169cb0a115d5b9b5089448c63122ce2dfdbe2786d6c31f7d1dbc25 java-11-openjdk-src-11.0.19.0.7-1.el9_1.s390x.rpm fd042a52d52bf4e45365db2511d42f710f38cb23105f55c35a2a2f1ea8e0024e ALSA-2023:1909 Copyright 2023 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) * OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939) * OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954) * OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967) * OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937) * OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938) * OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * The RSAPSSSignature implementation works with RSA keys via the SunRSASign provider. However, it did not fully check that the RSA key could be used by the provider before attempting to do so, leading to the possibility of errors being returned with custom security providers. The implementation now validates RSA keys and will allow other providers to handle such keys where it cannot. (RHBZ#2188024) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default java-1.8.0-openjdk-src-1.8.0.372.b07-1.el9_1.s390x.rpm 1dbee311dccd53ca2d4b9ab63a55db2e59e3a66a6d3b76e6ebf70c1669c1c3e2 java-1.8.0-openjdk-javadoc-1.8.0.372.b07-1.el9_1.noarch.rpm 2711ce201b3b912fdbaa892c8b55c5f91f140bc424f492a5f7bb4ff282d29d84 java-1.8.0-openjdk-headless-1.8.0.372.b07-1.el9_1.s390x.rpm 39c1eb013d0418310aa80d650231c3a078430e9142176fb0972bc385707a93e6 java-1.8.0-openjdk-javadoc-zip-1.8.0.372.b07-1.el9_1.noarch.rpm b21ea0f06466b6f20204c59af52b08a0a5675e760f790e4c907e6d0269e6f2ea java-1.8.0-openjdk-devel-1.8.0.372.b07-1.el9_1.s390x.rpm b7467409c07e0483d5e814cad0ed0c8f78d3396aea9fcba32e234d5f75d990d7 java-1.8.0-openjdk-demo-1.8.0.372.b07-1.el9_1.s390x.rpm be627087df55ee49c83967b25bd0091273ea1bfd1ddd897d55e2316a38b7294e java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.s390x.rpm e24656d80c7c641d502ccf0ec6244cbed13de63cc6dcad652aa9193e8e4b6402 ALSA-2023:1918 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * WebKitGTK: use-after-free leads to arbitrary code execution (CVE-2023-28205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default webkit2gtk3-jsc-2.36.7-1.el9_1.3.s390x.rpm 4f51470c38db8a5a477db1488f890d6cda7163257cacb0f2093590a20c0ef6f5 webkit2gtk3-devel-2.36.7-1.el9_1.3.s390x.rpm 9596d3518ae76e10f3941062eed3fcc8d1e7083d5ddddd005a662b6cebfbe3ef webkit2gtk3-2.36.7-1.el9_1.3.s390x.rpm 9c634f3f734d472d1c273ca603e6e6e3404e16d168a4cb060c021b142d81d741 webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.s390x.rpm bab8a4ea44056d9b5a7519c543dc6990aa493e5910717f76f0769ee5b448879f ALSA-2023:2074 Copyright 2023 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: command injection vulnerability in org-mode (CVE-2023-28617) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default emacs-27.2-6.el9_1.1.s390x.rpm 1b0046f98c521633023653aa97c550af94db145d31835818b77ff8c1f640ef08 emacs-lucid-27.2-6.el9_1.1.s390x.rpm 1b9f0448c003e8a0d3d52d1f2f80c6e1a44fd79bd341d3104f1bcf279ed61f0b emacs-common-27.2-6.el9_1.1.s390x.rpm 1c06cefa94b784bd8079763d5e128bae041313c54d734de6b4fb7d72a1156f0b emacs-nox-27.2-6.el9_1.1.s390x.rpm 6a01f6b17c99a5926f4c02b847a5c7b72692c5f7fe070e3a86365eeeb5ce8dc8 emacs-filesystem-27.2-6.el9_1.1.noarch.rpm d6466e576a0bf2d374c78b962fa9bfc089a4041c027b49abefb0292b86d89e49 ALSA-2023:2078 Copyright 2023 AlmaLinux OS 0 1 Important

libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently. Security Fix(es): * Mozilla: libwebp: Double-free in libwebp (CVE-2023-1999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default libwebp-1.2.0-6.el9_1.s390x.rpm bbd3325877c0b1aa5eeb874644cd460a33aed09c5532b656c37ff5d23540f384 libwebp-devel-1.2.0-6.el9_1.s390x.rpm d1b813e0ed40aa7b7c705ca5663129290a91f56350664645e5b238eba4682725 ALSA-2023:2127 Copyright 2023 AlmaLinux OS 0 1 Important

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_1_default samba-krb5-printing-4.16.4-103.el9_1.s390x.rpm 34721bd4494b047b1d571dcb2696eb5fdd93424cf23d61bdb99e99fdf78637ac samba-winbind-krb5-locator-4.16.4-103.el9_1.s390x.rpm 3c16b02f0110264a1ab92b27d9fc9a88b839f1c321d9e53f6eba2052a9464db9 samba-vfs-iouring-4.16.4-103.el9_1.s390x.rpm 3fd98061ccd36ac4dc2dfe7da6c60b278ca868645423c30d3ef93791bf3659b1 samba-client-4.16.4-103.el9_1.s390x.rpm 4f7f072484997a6b5bd8b257b912457bc8683c8c2de456e73b3c30125ac48de6 samba-winbind-clients-4.16.4-103.el9_1.s390x.rpm 53d714a44f3d3588d93ed822e0461789ff6d55f468b15f55e2e1f3738f5b86d6 ALSA-2023:2161 Copyright 2023 AlmaLinux OS 0 1 Moderate

fence-agents security and bug fix update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-oauthlib: DoS when attacker provides malicious IPV6 URI (CVE-2022-36087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default fence-agents-ibm-powervs-4.10.0-43.el9.noarch.rpm 003ba1cd769dfb6f5b67097c7fe03923f6277475d9c23316be410989698a50e7 fence-agents-common-4.10.0-43.el9.noarch.rpm 84b299610a1c9a40dbebb1b47d93a2857b183cfe8c3a337d96e095f26b569271 fence-agents-virsh-4.10.0-43.el9.noarch.rpm a20ed002a18cb9e7f36e202b90abad255cbbce18324b2bf1e38e22d5a1c37b1c fence-agents-kubevirt-4.10.0-43.el9.s390x.rpm eae1582175ef8f4afbd1b8381cb0d3dad2f5958df5f32d8483633747950aa7fd fence-agents-ibm-vpc-4.10.0-43.el9.noarch.rpm fb84d450a5beaa0f0427ac9735b6cb926017afbbcf407a7a389da3cdfa6141e0 ALSA-2023:2162 Copyright 2023 AlmaLinux OS 0 1 Moderate

qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a later upstream version: qemu-kvm (7.2.0). (BZ#2111769, BZ#2135806) Security Fix(es): * QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165) * QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record (CVE-2022-4172) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default qemu-kvm-audio-pa-7.2.0-14.el9_2.s390x.rpm 0df656eef9715fa73ffd9bf4dc21e4d38ef4820f24909026c3919975f1d6240e qemu-pr-helper-7.2.0-14.el9_2.s390x.rpm 0e6cfb2775290406a40c5a2c943ee20b3199709b32f08883c7e6e25ed168234d qemu-kvm-docs-7.2.0-14.el9_2.s390x.rpm 1a35e502d4e2c21df48baaf545f8c599c20724c9c74d2db0178f449c691afd2d qemu-kvm-block-rbd-7.2.0-14.el9_2.s390x.rpm 2de285fb8fa22581db13ec9c2015f63a6af3c9a05023f0b6a20a6dfd4bfe73cd qemu-kvm-tools-7.2.0-14.el9_2.s390x.rpm 32346af0d8911f644bd271dbb0ef27dc59532520a2e330531a7caf18dc021a67 qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9_2.s390x.rpm 498512a150f92f3fa34749515db40840a624eae9880a9ddfd7847ce5e9b47727 qemu-kvm-device-usb-host-7.2.0-14.el9_2.s390x.rpm 5ba3c809701a24d5df99fab7770618969f528ddede747bf6189a812cf7bb77d8 qemu-guest-agent-7.2.0-14.el9_2.s390x.rpm 715ae3725a22df4d036c16b11feba3507e403b65011af1fdfd5401dd1b104000 qemu-img-7.2.0-14.el9_2.s390x.rpm a8cf540ef6a0b71af07094da5b592c7813caaa0efa0b907aeb1fc8f526ddf0e9 qemu-kvm-core-7.2.0-14.el9_2.s390x.rpm ac313902cf3622194198dc76e9463231cdfbb762a8b8dcdf84bea245253b0708 qemu-kvm-7.2.0-14.el9_2.s390x.rpm b0ba02187df75c14180006c7b7d3067a926697100d5c1b82bb102de6df614c21 qemu-kvm-block-curl-7.2.0-14.el9_2.s390x.rpm b3a3f8762a25c92882429306a7cef2b2f9e62e272fb612b6c022443376243c7e qemu-kvm-device-display-virtio-gpu-ccw-7.2.0-14.el9_2.s390x.rpm c02d4daa990e9a6d321351c7cd3a7a9a0b832cc894abbeabd3b3417b85740e13 qemu-kvm-common-7.2.0-14.el9_2.s390x.rpm f35ae42f999a666613cb26ed07c7151eef9d4c820f18d60d63ae93b210387253 ALSA-2023:2166 Copyright 2023 AlmaLinux OS 0 1 Moderate

freeradius security and bug fix update

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es): * freeradius: Information leakage in EAP-PWD (CVE-2022-41859) * freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860) * freeradius: Crash on invalid abinary data (CVE-2022-41861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default freeradius-krb5-3.0.21-37.el9.s390x.rpm 52478132427bf722ef535350ccaafade02a5b49181a8f712f784421537231500 freeradius-doc-3.0.21-37.el9.s390x.rpm 7320ec4f6db7d45b1213db1de0c1a4103128c439ecae44ae03ed38dcd713dfeb freeradius-ldap-3.0.21-37.el9.s390x.rpm 738560c6cfdeab6b071de6fb374355e1e4ce6b3fa51f5c80bb994683c0a28819 freeradius-utils-3.0.21-37.el9.s390x.rpm 79c2729c08d30b41e2a3d1219a547a90929594a67b5ad878db2a26a2bb7214a4 freeradius-3.0.21-37.el9.s390x.rpm c954b52e5b6300e1829bf7543b01e9fc8bceb07ee42b4b8948700d3e435105b8 freeradius-devel-3.0.21-37.el9.s390x.rpm cd6c6fd85966f10e9ae6e61cd49f74b8c549f6febdc94ad4b87f90a66ea6b112 python3-freeradius-3.0.21-37.el9.s390x.rpm cfb2d49838ed3adc523cbd99265cadb52e76e5fb5d5b4254416f81433348685a ALSA-2023:2167 Copyright 2023 AlmaLinux OS 0 1 Moderate

grafana security and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * grafana: Escalation from admin to server admin when auth proxy is used (CVE-2022-35957) * grafana: using email as a username can block other users from signing in (CVE-2022-39229) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default grafana-9.0.9-2.el9.s390x.rpm 0696a8d7068e4231925094e4e703a35cf2a88ca99d3476bbf7329d667a8f5c31 ALSA-2023:2177 Copyright 2023 AlmaLinux OS 0 1 Moderate

grafana-pcp security and enhancement update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default grafana-pcp-5.1.1-1.el9.s390x.rpm ff79cd2582d6f79be1916532fb57ef4b1a18f3f555cae0b692bd16cc7234d92a ALSA-2023:2179 Copyright 2023 AlmaLinux OS 0 1 Moderate

libguestfs-winsupport security update

The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images. Security Fix(es): * ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790) * ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate (CVE-2022-30786) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (CVE-2022-30788) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array (CVE-2022-30789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libguestfs-winsupport-9.2-1.el9.s390x.rpm 78f47919ebf8581920dc6abadfaa3300cc42dfdf528f5628897e84b8b32b364a ALSA-2023:2193 Copyright 2023 AlmaLinux OS 0 1 Moderate

butane security, bug fix, and enhancement update

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. The following packages have been upgraded to a later upstream version: butane (0.16.0). (BZ#2135475) Security Fix(es): * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default butane-0.16.0-1.el9.s390x.rpm 21b1fcc1b474851d30ede795515fa0a793f8a83378626c6b8c247e7fc167b6c9 ALSA-2023:2202 Copyright 2023 AlmaLinux OS 0 1 Moderate

frr security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. The following packages have been upgraded to a later upstream version: frr (8.3.1). (BZ#2129731) Security Fix(es): * frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service (CVE-2022-37032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default frr-selinux-8.3.1-5.el9.noarch.rpm 48dd31748b80d33523d32a8bf40f0b9b0890940de43306fca30e429d7f8b5832 frr-8.3.1-5.el9.s390x.rpm eadd4dcb234ea7d276c4c6a37417dcf2124be5ff07156d50fa9dff2cc5439e37 ALSA-2023:2204 Copyright 2023 AlmaLinux OS 0 1 Moderate

Image Builder security, bug fix, and enhancement update

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security Fix(es): * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default osbuild-composer-76-2.el9_2.alma.s390x.rpm 0ec27bf7233cc110fdbe3d0b4423cd903714258eb2db06c91672fdf71df59d25 weldr-client-35.9-1.el9.s390x.rpm 1363987722103df7684ce456cb5ef2033d89cffe9b1c86db83e752ea1c040579 osbuild-composer-core-76-2.el9_2.alma.s390x.rpm 3c8e3df36178b4082144c07476d3db46a883b5c5a347908e8ec361f6820046f9 osbuild-composer-dnf-json-76-2.el9_2.alma.s390x.rpm f55857e8fda2e6b39a8ee94d196d6d16902bee5ad2094d3ecd9124d4f71a32c0 osbuild-composer-worker-76-2.el9_2.alma.s390x.rpm f911f4607d0478d9836aa2e1b358222b4660f8f8b2630bd3ed2fef00c76f3f80 ALSA-2023:2216 Copyright 2023 AlmaLinux OS 0 1 Moderate

gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data (CVE-2021-44648) * gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files (CVE-2021-46829) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default gdk-pixbuf2-devel-2.42.6-3.el9.s390x.rpm 57ded8fdf0da2e42930df2eea2c6db621d846a8f1ad7cfd46222f05bd9d8cdf8 gdk-pixbuf2-2.42.6-3.el9.s390x.rpm 73e1d7519795df27edbfd200c8176dd9362808792d259c3590a645f2f7de783b gdk-pixbuf2-modules-2.42.6-3.el9.s390x.rpm d6c933abf94176c6d8e26dfd45c16b318e244411de37c6b7e830f1550b678ec7 ALSA-2023:2222 Copyright 2023 AlmaLinux OS 0 1 Moderate

conmon security and bug fix update

Conmon is an OCI container runtime monitor. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default conmon-2.1.7-1.el9_2.s390x.rpm 42cd4fc6ad7bff8a9c4280be9ad49f82a4655ec8fc725ffb4a0806490b25078b ALSA-2023:2234 Copyright 2023 AlmaLinux OS 0 1 Moderate

sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fix(es): * sysstat: arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default sysstat-12.5.4-5.el9.s390x.rpm 3518add89885755c858def536a420c343ae8c30a30fe9f0327f56bc85c5e1471 ALSA-2023:2236 Copyright 2023 AlmaLinux OS 0 1 Moderate

toolbox security and bug fix update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default toolbox-0.0.99.3-9.el9.s390x.rpm 51229c7bc20a726d8ba45acea35555c4f9f08955a822eaebd6a9b7d2b90b5d12 toolbox-tests-0.0.99.3-9.el9.s390x.rpm b7d39e7c2e24d14757e0341f5215c0bf5e039927447c5da27becb4970e96a8d2 ALSA-2023:2248 Copyright 2023 AlmaLinux OS 0 1 Moderate

xorg-x11-server security and bug fix update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550) * xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340) * xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341) * xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342) * xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343) * xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344) * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494) * xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default xorg-x11-server-Xdmx-1.20.11-17.el9.s390x.rpm 68035ce408f99b2802854a43cc34f127a2fc97c553f6eb507c9b7d8e8b9e0769 xorg-x11-server-Xorg-1.20.11-17.el9.s390x.rpm 7fcd07e10da5c454d31dcc38176826b0e9cd357fdb91b28db850a9437d613775 xorg-x11-server-Xvfb-1.20.11-17.el9.s390x.rpm 93ef713723e6dc1089d5e1a0937ef5ef3695c8347ceb6da90806913d4b7ab049 xorg-x11-server-common-1.20.11-17.el9.s390x.rpm a86f59b6efb9af87dfededd8278cc1a0a269bd3a8d20bcb3f3eacd157f07d7d8 xorg-x11-server-Xnest-1.20.11-17.el9.s390x.rpm d7c2124349d39c831f17aacfd57429f06c7c9e853aa3149f0695fc71e6157129 xorg-x11-server-Xephyr-1.20.11-17.el9.s390x.rpm dc925c2f4926b95787fc4cd6bbd1ee6e42d881d6fbd9fe200c391304caa7d9e3 ALSA-2023:2249 Copyright 2023 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550) * xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340) * xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341) * xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342) * xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343) * xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344) * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494) * xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default xorg-x11-server-Xwayland-21.1.3-7.el9.s390x.rpm 0de9fadda6bc1d4c64e49f3d9b8b6cc813867779cc4d69f1034a2bb191a7f334 ALSA-2023:2253 Copyright 2023 AlmaLinux OS 0 1 Moderate

buildah security and bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default buildah-1.29.1-1.el9.s390x.rpm 5996606f57a5e8357c89d8f5f274a2d28d1c50e3a6ac393ef3791c24b2e50d9f buildah-tests-1.29.1-1.el9.s390x.rpm 803a91a19198392e39eb4d11adbd216c241c6aa614e0f8809c6a2f8d4b6fb22d ALSA-2023:2256 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518) * webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886) * webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888) * webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923) * webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799) * webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823) * webkitgtk: sensitive information disclosure issue (CVE-2022-42824) * webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863) * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691) * webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692) * webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default webkit2gtk3-jsc-2.38.5-1.el9.s390x.rpm 3bded3ff59ddcdc5da21913a9f28563559b631d2cc2d08cc136a0fdb268fdf99 webkit2gtk3-devel-2.38.5-1.el9.s390x.rpm b3bcd8abe8d0f61bd1a2b8ced2a20565ea853bf4b8cd13b9a7fea74e47a1c425 webkit2gtk3-jsc-devel-2.38.5-1.el9.s390x.rpm df7cbc5551053afe01c48ba8f2eb99ac0603f41413b702fa5ed617ecb4065e68 webkit2gtk3-2.38.5-1.el9.s390x.rpm f5d21a68dcd606a335fb8ad2ce7237ba22e6fbb5c01fcb30f28c89546559bf21 ALSA-2023:2257 Copyright 2023 AlmaLinux OS 0 1 Moderate

tigervnc security and bug fix update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340) * xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341) * xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342) * xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343) * xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default tigervnc-server-minimal-1.12.0-13.el9_2.s390x.rpm 45c8bc62ee8e6b219b0dc3ba6090af12ba9e1ca4211e538effe39210199c1f01 tigervnc-server-module-1.12.0-13.el9_2.s390x.rpm 47522241b61c15f89606bb7567cf69287a3687cc2a17ea76bd2950adeabb18b2 tigervnc-1.12.0-13.el9_2.s390x.rpm 6cb58c4d2d3be066630ba7639065ad2f129b5a98707687991c2328f61ea733f9 tigervnc-icons-1.12.0-13.el9_2.noarch.rpm 7639bb9bfa5a418dbb416785f31cf16899a54d4618e0c83b66bfd984761ed1a4 tigervnc-license-1.12.0-13.el9_2.noarch.rpm 831eff733daac545f21e1414cc9479dfc1b50a1e9dcab5e45b24d024e7bfca3c tigervnc-server-1.12.0-13.el9_2.s390x.rpm a9990f4401a3ff0d6a27fb2bd36938327882b01baf8b7533a8b886c8cb1f81b1 tigervnc-selinux-1.12.0-13.el9_2.noarch.rpm e9b0a7560481052f404e85eabcea26f8ddb5bf6c776c00da92545c70f2dfd578 ALSA-2023:2258 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-mako security update

Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance. Security Fix(es): * python-mako: REDoS in Lexer class (CVE-2022-40023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3-mako-1.1.4-6.el9.noarch.rpm 87df3d16e78b6d737409258c82f6cdb53c0949dfb9adeb3cd2d9d280ce255fd3 ALSA-2023:2259 Copyright 2023 AlmaLinux OS 0 1 Moderate

poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default poppler-21.01.0-14.el9.s390x.rpm 219fab78fdf3efa4645401b1b435a8af417c67cff1bbd1053e41215287bfd6ad poppler-cpp-21.01.0-14.el9.s390x.rpm 60ba60b8e6c18c4a693ffee0ac90128991587c219d3a0a10b684b1f88e0a42d4 poppler-glib-21.01.0-14.el9.s390x.rpm 9200e7ab3253c3c00f6370312e2755921c87f837f0cd3896069957ef45a150c9 poppler-utils-21.01.0-14.el9.s390x.rpm 945523f06249314908f21058a4b12d51497bef7f2198a15900b6e87a692e0fa9 poppler-qt5-21.01.0-14.el9.s390x.rpm e3b7908957e9ac6fb3f5d5f556141bc56b2ffb69766a747cfaba2a1ceaba6d61 ALSA-2023:2260 Copyright 2023 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920) * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925) * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default gstreamer1-plugins-good-gtk-1.18.4-6.el9.s390x.rpm 7e003330072f1b390a597ea7dba37121dcb57c6c285d223e934da036c493d363 gstreamer1-plugins-good-1.18.4-6.el9.s390x.rpm d959fb3d2b3c7df6cfb10855d02200b8bd358b6d4c1bddba11caa4fba4a0ef81 ALSA-2023:2261 Copyright 2023 AlmaLinux OS 0 1 Moderate

bind security and bug fix update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795) * bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default bind-license-9.16.23-11.el9.noarch.rpm 081ed63b5d5a469a4aa4c6c6ce5becfc91d96265c13d206acaf8d4f8fcb978a3 python3-bind-9.16.23-11.el9.noarch.rpm 1015d08bfc1d080cbe3bd6df98e2fb3e44bae0abd58dc1cc47e2232a649d637e bind-dnssec-doc-9.16.23-11.el9.noarch.rpm 35bcaf2195ea1447d653c44080d8c2e57bb8124046c022066cd6796b4d377442 bind-utils-9.16.23-11.el9.s390x.rpm 9ee2a93cd4b54ef72fc0a8cfdf47713868acb048dacf106ef726806606a64a6d bind-chroot-9.16.23-11.el9.s390x.rpm b33fd37735e4828782d8c368cd03eb6a77b142255fe29af858bfd4744d00b68c bind-9.16.23-11.el9.s390x.rpm bd614d2aec8ca564924eb0c06ca918cb0980bc7fcb9eee37e0b5136ada15b91b bind-libs-9.16.23-11.el9.s390x.rpm dc8cbbe85dc08f0c86259981dc7fb7d3f623783c8811f5c9b4012653b208d149 bind-dnssec-utils-9.16.23-11.el9.s390x.rpm eceab7c29d18e2dd6030b641612c5c094b9c9391a36b426b1b201ea54e3efae7 ALSA-2023:2282 Copyright 2023 AlmaLinux OS 0 1 Moderate

podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default podman-remote-4.4.1-3.el9.s390x.rpm 27e3062ad967d456e91c104554406df3547965b187e92edfc1c75ea345face21 podman-plugins-4.4.1-3.el9.s390x.rpm 9790c7f55263164890931e50418bb3424b2f08d881a088c23ce2dfe95f1b78de podman-gvproxy-4.4.1-3.el9.s390x.rpm 9d9db1f4f9ba960259e730f1f2bd1ae1e38f1ea3e3185afc3c3780388bd3c087 podman-tests-4.4.1-3.el9.s390x.rpm bef6bbcf28e29a23e38149acb4c192ab7ca6518424265950c9f0e393733c4d70 podman-docker-4.4.1-3.el9.noarch.rpm e448deef45fcc9ba8e0d73412d3db5a6ac11b8efc3cecdd29f8f8f2f56e7552f podman-4.4.1-3.el9.s390x.rpm f89c400a65e51fda33e7ae6035c9d8dae101db6264792fcdbbd4a208c3b2bd4a ALSA-2023:2283 Copyright 2023 AlmaLinux OS 0 1 Moderate

skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default skopeo-1.11.2-0.1.el9.s390x.rpm 91bb9b7bc7a6f9a0200a7a0dd9fd833f11c955584db6d26ec9a30048a7045dba skopeo-tests-1.11.2-0.1.el9.s390x.rpm e38efdc7abc3a47e40102d42c0fb7cac86008fcf7b7eae215f68664d68b8ba22 ALSA-2023:2293 Copyright 2023 AlmaLinux OS 0 1 Moderate

pki-core security, bug fix, and enhancement update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default idm-pki-ca-11.3.0-1.el9.noarch.rpm 1aa86b42762e59396be9dfd98f1573408a841a80efcbfaaba5bd29098f8d44ee idm-pki-tools-11.3.0-1.el9.s390x.rpm 2eda3f2e8979a6b723d7664d784b696847775edbc46327848f80ebfc6244c982 idm-pki-base-11.3.0-1.el9.noarch.rpm 4335559cc9154417a4c913ea4408d4b9b20fd7fbb8b02d20261f445ce17ad820 idm-pki-server-11.3.0-1.el9.noarch.rpm 699890ee224b32fee8cd5bd661087f0f81ada5e51ad88d5bfb4e22f07e334ad3 idm-pki-kra-11.3.0-1.el9.noarch.rpm 7b3ffae57c4f39d6ac35c295ff763e0de9c2c9397cc172314341b4bf78b6604b python3-idm-pki-11.3.0-1.el9.noarch.rpm 91a057affd429536485172e1256b7e7eeb490d61a090fa840f356e5bba054fa6 idm-pki-est-11.3.0-1.el9.noarch.rpm a6cd83adb3db223611ad1de515ece9ebb4ad9030520c3824a9af77f00c39d624 idm-pki-java-11.3.0-1.el9.noarch.rpm afb1c2e1f62ffc34c2afb30809ce9c0cb38245db47dd12fca4d4bff4a54bf1fe idm-pki-acme-11.3.0-1.el9.noarch.rpm b6962a25e271cd56c33a8ee8e7da33e01c55a2a41d0de1d2358be1fddc7a5dc6 ALSA-2023:2312 Copyright 2023 AlmaLinux OS 0 1 Moderate

jackson security update

Jackson is a suite of data-processing tools for Java, including the flagship streaming JSON parser / generator library, matching data-binding library, and additional modules to process data encoded in various other data formats. Security Fix(es): * jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default pki-jackson-databind-2.14.1-2.el9.noarch.rpm da28784a41fd010e96065fdf2a2dc83360004f68ea9615c72e57e671cfba7fbd ALSA-2023:2319 Copyright 2023 AlmaLinux OS 0 1 Moderate

git security and bug fix update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree (CVE-2022-24765) * git: Bypass of safe.directory protections (CVE-2022-29187) * git: exposure of sensitive information to a malicious actor (CVE-2022-39253) * git: git shell function that splits command arguments can lead to arbitrary heap writes. (CVE-2022-39260) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default git-email-2.39.1-1.el9.noarch.rpm 06c5197bbb46f5f456332cf8ec8e64c088e7d9c7bd7fbd3f5be6febe4c10e3d3 git-all-2.39.1-1.el9.noarch.rpm 0ceda64a7e43f550ddd1e929e2be7bf62c433494b764bff188f0cc82621b6d40 git-core-doc-2.39.1-1.el9.noarch.rpm 18987b26a87ea025b06738f7228b549aae2c7a10d66faff4920937e1f1662fda git-daemon-2.39.1-1.el9.s390x.rpm 27dd6585389f4cbfb2ae20dc7bc94eb6824c0be9de7b584d951df7f605f4d038 git-core-2.39.1-1.el9.s390x.rpm 31b0a37f347cd27e051972ed7b2c4ae74033efadde428c2191dbe79be690a2c9 git-svn-2.39.1-1.el9.noarch.rpm 49ca591b4eb101559af0ad38343e245c13e7c5d76535ee67ad95ba62c86a94c7 gitweb-2.39.1-1.el9.noarch.rpm 4a3b1fcdd8bc561e13182eafa34e996725d960ecdf82ca4f67dedab9ca86f0ed git-gui-2.39.1-1.el9.noarch.rpm 61a3868b23dde63f4bf4e29a1e50ffe5913b89a1090b7240e908e62a71622a74 git-instaweb-2.39.1-1.el9.noarch.rpm 64cf2a3ea318e2e438b6ed0dfc2bce43b86c4ed2e9a76660adfdc3f50efed40a perl-Git-SVN-2.39.1-1.el9.noarch.rpm 83f3a7c296f27edd51f53ee53cbe2c9a2eda0f60668f8b9d5457c2ca6431be7f git-2.39.1-1.el9.s390x.rpm 98c532dc9ae127fa57eca3295c5e4d82db57b7285644ce9d16553412375b2784 perl-Git-2.39.1-1.el9.noarch.rpm aae2f2a7bc2a33e01ac61a8f0ecab7b9cd1000e72c40f882c69e84df1803b144 git-subtree-2.39.1-1.el9.s390x.rpm b5b47fae3427679176274d9d9711b4d7f506a4acef715f041b611c04be4dc95e gitk-2.39.1-1.el9.noarch.rpm cb1e0cb42193227d09ed0a15c9124493df822c8ed8aad5ee6c09965bc71287a6 git-credential-libsecret-2.39.1-1.el9.s390x.rpm f7ff1a64abea940a8bc80ae46a1caecf95b38f060735957f4d3a82ebbb6940de ALSA-2023:2326 Copyright 2023 AlmaLinux OS 0 1 Moderate

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282) * freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283) * freerdp: out of bounds read in zgfx decoder (CVE-2022-39316) * freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317) * freerdp: division by zero in urbdrc channel (CVE-2022-39318) * freerdp: missing length validation in urbdrc channel (CVE-2022-39319) * freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320) * freerdp: missing path sanitation with `drive` channel (CVE-2022-39347) * freerdp: missing input length validation in `drive` channel (CVE-2022-41877) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default freerdp-2.4.1-5.el9.s390x.rpm 0b657653005d2abedd2d9ec8a4d35824a72623c4d790deea7b5aa67f8ee89a2f libwinpr-2.4.1-5.el9.s390x.rpm 817dc21383f015ec08f461bf12785698f2cd48532282ddb9b3342929f786bf2d freerdp-libs-2.4.1-5.el9.s390x.rpm c8ce550f3b7fc5be65667123e727290e91f26d446b268113a0c6c7eb27a466cc ALSA-2023:2340 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: heap Buffer overflows in tiffcrop.c (CVE-2022-3570) * libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix (CVE-2022-3597) * libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c (CVE-2022-3598) * libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c (CVE-2022-3599) * libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (CVE-2022-3626) * libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627) * libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970) * libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645) * libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2023-30774) * libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c (CVE-2023-30775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libtiff-4.4.0-7.el9.s390x.rpm 19a9588547a812a42d91731b9073e6904369d44ad47a99ae236de73a8caf09ec libtiff-devel-4.4.0-7.el9.s390x.rpm e7974857a21e3399a29aa3678f4322edd951c2353d162234b764f19375c48317 ALSA-2023:2357 Copyright 2023 AlmaLinux OS 0 1 Moderate

git-lfs security and bug fix update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default git-lfs-3.2.0-1.el9.s390x.rpm ec6eb30dfbf59001df5542c184a72b2f474cc289cd3041e6e5f4df108ac01a35 ALSA-2023:2366 Copyright 2023 AlmaLinux OS 0 1 Moderate

emacs security and bug fix update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: ctags local command execution vulnerability (CVE-2022-45939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default emacs-27.2-8.el9.s390x.rpm 25b62ec99701a81d412d9b0e81ba50c41e3dd8db31828f80bd4883e67c3daf56 emacs-common-27.2-8.el9.s390x.rpm 3722a0ae0f88cc747d9efea21d349970162358865ba1f6fbe7c3dff8868cf8d7 emacs-filesystem-27.2-8.el9.noarch.rpm 893b4d4e28600b5cc8312f686562525d4c14326e49988ca6d551d4b02b5abd9e emacs-nox-27.2-8.el9.s390x.rpm b4f12fc80320af6cc5a5bacf754748de1737748a94a0595f0d259a76c10ab7df emacs-lucid-27.2-8.el9.s390x.rpm f54635e0aa4fe4210ac4869f9d281007839ef436f79152dabb36862d4f4fdd74 ALSA-2023:2367 Copyright 2023 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security and bug fix update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default containernetworking-plugins-1.2.0-1.el9.s390x.rpm 371920f2903d6d063d5a338ae7432138d375febf19e658210707d257225f4ea6 ALSA-2023:2370 Copyright 2023 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack) (CVE-2022-3204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default unbound-1.16.2-3.el9.s390x.rpm a4afa7bdc842a411ba3ffec6f965e516f41f9d1648c77f76d4fe629843785fa5 unbound-libs-1.16.2-3.el9.s390x.rpm a5a73a02675f10767dea9380497c97f2d83860485e7ffe9083c418d64b734dc6 python3-unbound-1.16.2-3.el9.s390x.rpm cfb667ec8457d401bef3fc5e4c63d59bbb0eeb7fb843fd593f5fab5c7778a71c ALSA-2023:2373 Copyright 2023 AlmaLinux OS 0 1 Moderate

wireshark security and bug fix update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: f5ethtrailer Infinite loop in legacy style dissector (CVE-2022-3190) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default wireshark-cli-3.4.10-4.el9.s390x.rpm 6f3b9c440a9b824ac8711db58cf0a555023aa1735f6e73f98075355b8140b32e wireshark-3.4.10-4.el9.s390x.rpm 982519e9147624c34790f4a9e3fdd5392382b535ace2ea8cf3056ae9a46fa16a ALSA-2023:2378 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql-jdbc security update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): * postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions (CVE-2022-41946) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default postgresql-jdbc-42.2.27-1.el9.noarch.rpm 2913b9e4de7328484fbecee27fcabdfcb6a2632f4ba90270862c4a09fbd9fadf ALSA-2023:2417 Copyright 2023 AlmaLinux OS 0 1 Moderate

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.1.14). Security Fix(es): * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454) * php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications (CVE-2022-31629) * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630) * php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631) * php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default php-dba-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 0d6dfee06518a43731cf4a2c53f2c28a86a38e92a0f6df7148d61635c2fcc801 php-xml-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 10005ae86ef546615b68cb41db3cceb3cf2fe404ec84565d7b7704bad9a7b247 php-gd-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 11ec7c4eafb9578abcb0662bd8393cc0647ff10a335ec3c962dd0d725f71a2e5 php-odbc-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 1bdd7c10d6306f6a9b971c11abd23f2f1581859ed5578de8d6e7781e0fab9498 php-fpm-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 23c98b1d2bbbf019892b2f4283b4542f645401f4880f70f92a769b8f3e7280b3 php-process-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 242c6ceaf8caeeab6455ed44cb070980167c29f659b8bff1d963f9b7ee92c939 php-opcache-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 2c18950ab62e0fad10d5ef2414f44bb3754e76d59c8341311ce34bfad02b49de php-ffi-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 3797cc40f4a2faa6fd5429899edb1bfeded4ec5070c9808b89ff2feb215ed2c5 php-common-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 38db02ea65544f5a5d731f7e9fd20825d8f2b15cf4a3ddf8477395c962dac542 php-enchant-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 5433a25f74c9d1ed022075e73d59a6c04fadc0e6e0ec8f221734a79a467f1646 php-cli-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 5acef4325faab0854c2c957653998388229ce1b1a95daff519e3ab1180dcece4 php-bcmath-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 656c704d34bce3b6fbd368e08f22777c138cde91e6c2c49fd05c1ab6ab30327f php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.s390x.rpm 6c89933d8e8153ed39764877e9c07501f556ba5057a9695bfefcfc75649f5734 php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm 74c41c08148fce005bb18c75bcfafc1e739cc84b6cac297b5ef955172eff0b69 php-intl-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 7d197274367baf39115aa107eaffc5e34cbff30cfbec55b1778515007d035e28 php-gmp-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 81fb6faea2aa124040171a1f084752240f83a9405ac91541d818bc9e4e87b9f9 php-embedded-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm 8d4180d6617f9c23121880f0de7ade3f290fb3e44f1fa404867ceb1c47d5cf8c php-mysqlnd-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm a51a86edc6e163529ef68417baaf609a0b92c61321368e420468bda1a9eaea78 php-ldap-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm af636e807053ec053c6647b7532f3fc19b0a06ac0c2e40b53d509701857095e8 php-devel-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm b0435c59ac5ed8846cc216b3f626b6716fa08707fac589d180d80b3ec2d5fc20 php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm bd0093fac304470cea776e43f28256fbfa317c192bb6bd8762cc1ec00db6f9e1 php-pdo-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm be55e13bf49b23432cbe06b3d089fd8e99b36ce1ca15dd395005de03c36dca24 php-soap-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm bee7b513b4c88b99ce2e2092495c4042fbdeb0c39752f5b27f801b23fc25e570 php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm c2c200996b726f74991aa4dc175b4c70f69b8b4ddd7fde644740f5590300e95a php-dbg-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm ca894bb565bc5ad38a056f7c92341b941d39ba98c41ecb21a156755f0dde887c php-pgsql-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm d062aac978cb812888b0b8380d1faa05cd86aa72b9cd3508d96412b2d2f84e5e php-mbstring-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm d79dad5b2d622f2c79e56378022da0cdb9a5e380795cb3ad0cc76e6d42737249 apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.s390x.rpm e97fdc0e54c4a5d2084a375f0ff31f551c9dc8c1f4c2012f2e453b1a031a1328 php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.s390x.rpm fa41ac765cb61c3ac39608e29ace6064489a59257504df4cac926a261c7d392b php-snmp-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm fc95fa6c8b29e432db90d80ef9f0e6e3863d939c5f58286cc15ef895621076dc ALSA-2023:2444 Copyright 2023 AlmaLinux OS 0 1 Moderate

net-snmp security and bug fix update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. Security Fix(es): * net-snmp: NULL Pointer Exception when handling ipDefaultTTL (CVE-2022-44792) * net-snmp: NULL Pointer Exception when handling pv6IpForwarding (CVE-2022-44793) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default net-snmp-devel-5.9.1-9.el9.s390x.rpm 07ad9697f6f9734496c3175b49ea9f84c846e187c4faa9aa6ad9a1fcb7d7775a net-snmp-5.9.1-9.el9.s390x.rpm 14ab540b9bd22f01913acfb35fb4b555db79b69718943f711cabcc5e0013e29a net-snmp-libs-5.9.1-9.el9.s390x.rpm 4be72f246a0d7164d0d8b3b43c4c5c080bb34cc60632af18a5e242f4b13532ec net-snmp-perl-5.9.1-9.el9.s390x.rpm 4e4f83a7e298b0d58478c8718f52562e2ada8170bbc48921d37984982801f5c0 python3-net-snmp-5.9.1-9.el9.s390x.rpm 880a5b11dfc8b89b0b7bde30d276cfbcbfef9136b5e20ea953073eeff6c4724f net-snmp-agent-libs-5.9.1-9.el9.s390x.rpm abc2f6d5ff687ae3a565bade078179a98dce27ba1e7709490f52dafa5c83c769 net-snmp-utils-5.9.1-9.el9.s390x.rpm fb695e7669e21d6eeb7d0f7d84f2a4f1042eec955868d4ab3e387dfd038916f1 ALSA-2023:2453 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtpms security update

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines. Security Fix(es): * tpm: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1017) * tpm2: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libtpms-0.9.1-3.20211126git1ff6fe1f43.el9_2.s390x.rpm 00a9952a31efe56483c28606b8048d838e7dd6e46cf7beeb3c5fb9b7622358d8 ALSA-2023:2458 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896) * net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461) * cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341) * malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655) * possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462) * KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789) * use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882) * KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196) * netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663) * race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028) * out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435) * race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522) * memory leak in ipv6_renew_options() (CVE-2022-3524) * data races around icsk->icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566) * data races around sk->sk_prot (CVE-2022-3567) * memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619) * denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623) * use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625) * USB-accessible buffer overflow in brcmfmac (CVE-2022-3628) * use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640) * Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707) * mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128) * l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129) * igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141) * lockdown bypass using IMA (CVE-2022-21505) * double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388) * network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743) * unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188) * TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189) * u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674) * use-after-free related to leaf anon_vma double reuse (CVE-2022-42703) * use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720) * BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721) * Denial of service in beacon protection for P2P-device (CVE-2022-42722) * memory corruption in usbmon driver (CVE-2022-43750) * NULL pointer dereference in traffic control subsystem (CVE-2022-47929) * NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394) * use-after-free due to race condition in qdisc_graft() (CVE-2023-0590) * use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195) * denial of service in tipc_conn_close (CVE-2023-1382) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default kernel-devel-5.14.0-284.11.1.el9_2.s390x.rpm 0d453b0059c909c5105242e13a3dc1ef32f3a684db821fba0f2ff2eb94feaee6 perf-5.14.0-284.11.1.el9_2.s390x.rpm 258d0d0025740f9225bcfec8fc073925980a7cd6f5fbd9c4b68459678959cd20 kernel-devel-matched-5.14.0-284.11.1.el9_2.s390x.rpm 51d4850674e5c632e03a000aaa41f76debcd1178a5b743da84b64bc4d08ec8ca kernel-doc-5.14.0-284.11.1.el9_2.noarch.rpm 6d66749bc7a2add74a128f8d67e457498ff1eb5e5d6c0a36a3f8138444c5e354 kernel-debug-devel-matched-5.14.0-284.11.1.el9_2.s390x.rpm 7cfe8ebe8cd76d4d1d730c3d807ae0dc6b36edf8d00e67621e9a2590c852f782 kernel-debug-devel-5.14.0-284.11.1.el9_2.s390x.rpm 846d41e5d899bd10f1d1fd82f079a81e96880409b354113f84318b1650c2ab37 kernel-zfcpdump-devel-matched-5.14.0-284.11.1.el9_2.s390x.rpm a50d2c38bca47eeb7fd5b0696493e95a03ddec50459b229be7c097f18deb8aa5 rtla-5.14.0-284.11.1.el9_2.s390x.rpm c4f20d4a193445ca440171837e21fe4cc0109db37fa3bb7e70c2b8746f7336d1 kernel-zfcpdump-devel-5.14.0-284.11.1.el9_2.s390x.rpm ea001166f081e4494da4d390c3b9ffaa372488595cf4f137de1fa165a2a4d58f ALSA-2023:2478 Copyright 2023 AlmaLinux OS 0 1 Low

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: Incorrect handling of control code characters in cookies (CVE-2022-35252) * curl: Use-after-free triggered by an HTTP proxy deny response (CVE-2022-43552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libcurl-devel-7.76.1-23.el9.s390x.rpm 6e6ff640f1c717655050fdd3d2e25a22fd5c9e3e8b83705dea58a4b4c3275b86 ALSA-2023:2519 Copyright 2023 AlmaLinux OS 0 1 Low

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2131993) Security Fix(es): * samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default samba-krb5-printing-4.17.5-102.el9.s390x.rpm 0053731aac2a9a0ddb00d42a18e3971c95bd6bc3d95ca5bb2b616996be764f92 samba-client-4.17.5-102.el9.s390x.rpm 58da512872cd66c5a10c85bdd063172de2d29ba4cd37c2b134da3b073b56c141 samba-vfs-iouring-4.17.5-102.el9.s390x.rpm 6f2eb3e7750db9fb3842dfe7923bb6463e2586fe4c6c0861ffa72fb6b0c6d6c6 samba-winbind-clients-4.17.5-102.el9.s390x.rpm 898efd9f777ccbb4ebdc5a4c0776968a6d6bd997bc752a368c531be21ecd5224 samba-winbind-krb5-locator-4.17.5-102.el9.s390x.rpm f04ad60e10c1e064a67cd1058fb0ac3aa1278ff30631c6d7bdd1263b73e6e7e8 ALSA-2023:2523 Copyright 2023 AlmaLinux OS 0 1 Low

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption (CVE-2022-3358) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default openssl-devel-3.0.7-6.el9_2.s390x.rpm 020451d3c93f9f38d1d4bc2e9377735ccaf1aa595cdf52d59cdd0f2087135849 openssl-perl-3.0.7-6.el9_2.s390x.rpm 6a5c3f1bac862e449c785df99fbeb3284d2b96d8da848fad3694518b646fbc5e ALSA-2023:2532 Copyright 2023 AlmaLinux OS 0 1 Low

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default bsdtar-3.5.3-4.el9.s390x.rpm 6ed7da2e3bbac80e5dbc40abbff9a65f3adf1170236d820112ee933fde975d4e ALSA-2023:2570 Copyright 2023 AlmaLinux OS 0 1 Moderate

krb5 security, bug fix, and enhancement update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). The following packages have been upgraded to a later upstream version: krb5 (1.20.1). (BZ#2016312) Security Fix(es): * Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default krb5-devel-1.20.1-8.el9.s390x.rpm 074acb93a69fee1144b61e71432c54710cde44a4c1fdf025dec23d6043e6e386 ALSA-2023:2582 Copyright 2023 AlmaLinux OS 0 1 Low

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: heap buffer overread (CVE-2022-28805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default lua-5.4.4-3.el9.s390x.rpm 4386e203b3d90489d5f41278a3176494d5d2a8bc3fea80373d9b153e2de8c4e5 ALSA-2023:2621 Copyright 2023 AlmaLinux OS 0 1 Important

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177731, BZ#2177732) Security Fix(es): * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594) * mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611) * mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632) * mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410) * mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883) * mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887) * mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917) * mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default mysql-server-8.0.32-1.el9_2.s390x.rpm 24e0ef7336867d9923f7652b61658991f7d52ec6ee8e54a82640136c25239db3 mysql-errmsg-8.0.32-1.el9_2.s390x.rpm 56455736741baf7acec535b328a6a8ad6071217716a6888a367054766765d9ca mysql-8.0.32-1.el9_2.s390x.rpm e970646980978d5d1fd7f5b3e965288477bfe4440400d38b84048c28e716eb6b mysql-common-8.0.32-1.el9_2.s390x.rpm f8ae9c156bd94b8853e91ab370cbf25503148afe3ce1bf749397956e7034fc52 ALSA-2023:2626 Copyright 2023 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Regression of CVE-2023-28617 fixes in the AlmaLinux (CVE-2023-2491) * emacs: command execution via shell metacharacters (CVE-2022-48337) * emacs: local command injection in ruby-mode.el (CVE-2022-48338) * emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default emacs-common-27.2-8.el9_2.1.s390x.rpm 212d0071afb609893e40f079a6a3b7d128c11dc60cf0bba6a20c9d13e6526e97 emacs-27.2-8.el9_2.1.s390x.rpm 364c005d2a58bb63e5a80ee0e49974faedac7744a79487b4acb6e22170be766b emacs-lucid-27.2-8.el9_2.1.s390x.rpm 773dd3b121bfd50e8b3709deff93f461eaf8a1bda7a97154a08970329f5474aa emacs-nox-27.2-8.el9_2.1.s390x.rpm 80aaac85431d37f1dd8db60de2d97ad0817a3b67eaf3da35f14a018eb468766e emacs-filesystem-27.2-8.el9_2.1.noarch.rpm 8132dbe410df05ce2933a36657fa82d2e5165d3d9e32b343d6ab41a08a1025bb ALSA-2023:2633 Copyright 2023 AlmaLinux OS 0 1 Moderate

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: remote DoS via crafted TS payload with an incorrect selector length (CVE-2023-23009) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libreswan-4.9-2.el9_2.s390x.rpm 79ada99f92482bd6ad7a9ef5325af2361d92a4be65b8373e82165dd1dffc63f9 ALSA-2023:2645 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: the functions order_hostkeyalgs() and list_hostkey_types() leads to double-free vulnerability (CVE-2023-25136) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default pam_ssh_agent_auth-0.10.4-5.29.el9_2.s390x.rpm 4004e98e49aa53a83f884bb9b8711cb371e808289bb752c92929b945d513a984 openssh-askpass-8.7p1-29.el9_2.s390x.rpm 9cae5e29760b400424102654aa8957ea047b2f7ad45bc7c28dd4f164abe1724c ALSA-2023:2650 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: FTP too eager connection reuse (CVE-2023-27535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libcurl-devel-7.76.1-23.el9_2.1.s390x.rpm 59d0beaac7fa2edc4a3a380742b170e5e92b1c2bbcd3c2def4c76cf5b8bd19c6 ALSA-2023:2653 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * WebKitGTK: Regression of CVE-2023-28205 fixes in the AlmaLinux (CVE-2023-2203) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default webkit2gtk3-devel-2.38.5-1.el9_2.1.s390x.rpm 2176ff19fb553bcad96556856e08378f8b8327720d0f1e185d287c45d615ef84 webkit2gtk3-jsc-devel-2.38.5-1.el9_2.1.s390x.rpm 68b824662e528cf750538b76965ba5ccf62b71d92f99445de7097766a56fde24 webkit2gtk3-jsc-2.38.5-1.el9_2.1.s390x.rpm 6f8f03289c7393c697d7d79bc683ef56957d592606c229643c587b661334aeaa webkit2gtk3-2.38.5-1.el9_2.1.s390x.rpm b3261ec4ba5add9f71a6f28e219c93dfe7ce31e4a6c5a17a7d0beb3cb5195fd5 ALSA-2023:2654 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (18.14.2). Security Fix(es): * glob-parent: Regular Expression Denial of Service (CVE-2021-35065) * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904) * http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881) * Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918) * Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919) * Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936) * Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920) * Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nodejs-devel-18.14.2-2.module_el9.2.0+29+de583a0b.s390x.rpm 03b2d93513e39ff56fc6845eb19a953235dbcf9fd659ad13f41d39ed07673b4d npm-9.5.0-1.18.14.2.2.module_el9.2.0+29+de583a0b.s390x.rpm 11f86254f5ecd9731dabd6d024c21741a8840ce9e6253e1f696f64cdb6ef42a9 nodejs-docs-18.14.2-2.module_el9.2.0+29+de583a0b.noarch.rpm 2b9c75be404b8541ff176ec0b10e2290663b50aeadcd3991b4826604a03689e6 nodejs-full-i18n-18.14.2-2.module_el9.2.0+29+de583a0b.s390x.rpm 6357078b22b34d83ec9da0517c708ffb71a56be3ce6728ad829dc929bc641f42 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-18.14.2-2.module_el9.2.0+29+de583a0b.s390x.rpm e83e7a665e956ace7739f7af29583c00b6cee8067c23b02968b679c509943ff6 nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d ALSA-2023:2655 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs and nodejs-nodemon security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.19.1), nodejs-nodemon (2.0.20). Security Fix(es): * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904) * http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881) * Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918) * Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936) * Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920) * Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nodejs-16.19.1-1.el9_2.s390x.rpm 1f7b5f8af84ff09c90527d7e00a0b98263d0faee186a9e5eb55db70975145055 npm-8.19.3-1.16.19.1.1.el9_2.s390x.rpm 2bf77f9131b6c2c4679c84f3e6251579ebe37b89a0dc844a6fa6fda6d9eb77d9 nodejs-full-i18n-16.19.1-1.el9_2.s390x.rpm 6fdfab75ad45a2a894052d4c4b96c02d1a987cec99bf6c17df71bbcd19c70252 nodejs-libs-16.19.1-1.el9_2.s390x.rpm 8667e92de9ab4bd457a72cf80ec7e205928992ee0a352213b423b455976700a0 nodejs-docs-16.19.1-1.el9_2.noarch.rpm f11bb41fc5bd941d6b4ceaabcbd5a55df759beac7e34945b8cd3a3f52838fe29 ALSA-2023:3143 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.11.0 ESR. Security Fix(es): * Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205) * Mozilla: Crash in RLBox Expat driver (CVE-2023-32206) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207) * Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215) * Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211) * Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212) * Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default firefox-102.11.0-2.el9_2.alma.s390x.rpm 10aa3a96657333c7f960b10bbb61223cb1fae3ecc331288f30a48750e8260345 firefox-x11-102.11.0-2.el9_2.alma.s390x.rpm 5080a2801b2ba3f4f93fd0d8342549c7041d128800da6423c8ce41bd6a566547 ALSA-2023:3147 Copyright 2023 AlmaLinux OS 0 1 Important

apr-util security update

The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. apr-util is a library which provides additional utility interfaces for APR; including support for XML parsing, LDAP, database interfaces, URI parsing, and more. Security Fix(es): * apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default apr-util-1.6.1-20.el9_2.1.s390x.rpm 3bf90d3689515f927f308e513b5a1a865874f3d47621f72983b561c2652c15c5 apr-util-bdb-1.6.1-20.el9_2.1.s390x.rpm 61e593a414429c4829c63889ba997090962418cc8846e1c95d0bdbbd6674418f apr-util-mysql-1.6.1-20.el9_2.1.s390x.rpm 6ae686a6013fa07d9d1db6f184942cc5ba74f08ce670010699d7cf2d214ab273 apr-util-devel-1.6.1-20.el9_2.1.s390x.rpm 8f8db25b6ac2e84ae5d20aead8dde221972ef8b3a5c547381b107110a613e785 apr-util-ldap-1.6.1-20.el9_2.1.s390x.rpm ad11a92e99b25098ae36172d96b8f0e7b298f0e18dfcc53ae603198442d6ecad apr-util-sqlite-1.6.1-20.el9_2.1.s390x.rpm d66b69636f6fa6b626e25df7dbc6eac07029b82c5eff72ea8c271a144f8778ad apr-util-pgsql-1.6.1-20.el9_2.1.s390x.rpm e6e389bff5fa5a67a24b0e99415bb6740d339172298eabb31f4ff774e0a8a272 apr-util-odbc-1.6.1-20.el9_2.1.s390x.rpm efab2338dfa817abbc927cf08fdd4d73db580e3510e70e27bf9c42d8e8361ddf apr-util-openssl-1.6.1-20.el9_2.1.s390x.rpm f907e97215ad30ec7f3783d4f40ed94e601b2c364b0774d341e858ea5ffb27e8 ALSA-2023:3148 Copyright 2023 AlmaLinux OS 0 1 Important

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Regression of CVE-2023-30570 fixes in the AlmaLinux (CVE-2023-2295) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libreswan-4.9-4.el9_2.s390x.rpm 9a8ffca77532c19993941385c8dfe1a2bd544d99953c8115b6a0234ccbb1de4f ALSA-2023:3150 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.11.0. Security Fix(es): * Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205) * Mozilla: Crash in RLBox Expat driver (CVE-2023-32206) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207) * Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215) * Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211) * Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212) * Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default thunderbird-102.11.0-1.el9_2.alma.s390x.rpm be316b6d5d07d7d44e118584113ffba6ae0fcaa0676b3895623d045fa2d02ce8 ALSA-2023:3245 Copyright 2023 AlmaLinux OS 0 1 Important

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652) * git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007) * git: data exfiltration with maliciously crafted repository (CVE-2023-22490) * git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946) * git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default gitk-2.39.3-1.el9_2.noarch.rpm 04a2388d3e9ffb30522f40ace6f0a951d5a7c576dc9eb97225a20e1aa4e04bba git-svn-2.39.3-1.el9_2.noarch.rpm 0636562f42e814d92392db782ba76cfe9c1390d452d16d989a351a09a0d63b33 git-credential-libsecret-2.39.3-1.el9_2.s390x.rpm 0d3c4ab16742c0d8f04e6f37a1fbe14678c3c7231406d67fb4ba1b314799dc05 git-core-doc-2.39.3-1.el9_2.noarch.rpm 163f5c8d6e84b4be3f209c33183e0a11de041adfc4b3b14a5d57bcbe0a4999b4 git-all-2.39.3-1.el9_2.noarch.rpm 3e1dbc5f1874088b71b915fae08f416a113b12439c096cdeb0725da8e8bb5bf3 git-core-2.39.3-1.el9_2.s390x.rpm 58ceed640a77626df7cf0286077913ae04f5243cf7f3a7bccb258f0647126ac1 git-daemon-2.39.3-1.el9_2.s390x.rpm 865af6eadd8668af99e4fd5fcb4246873f2f63d2f94d4d646de83b4069ed9e85 git-instaweb-2.39.3-1.el9_2.noarch.rpm 905ff58172d1fd914ae9bfa839b21d0fa622ace54e5d9318e007f48605bdfc0f gitweb-2.39.3-1.el9_2.noarch.rpm a4131b18978fa1c3ae539342fb16889a1189fd4f66e1210dafec949a3808fbb8 git-email-2.39.3-1.el9_2.noarch.rpm b2adac3046b74cb33b1ff0fd2dde28421f58088c9d0d35d861ea0785a61dacd5 perl-Git-2.39.3-1.el9_2.noarch.rpm bfebb49bf3fb5a4fd336c3447944475c29edc7a16f24ff3b781909cb83d0d952 git-2.39.3-1.el9_2.s390x.rpm c3b35de509ec790d07740b07a8bc6888e4f8e571a829dff7b590aee7f1d38cfb perl-Git-SVN-2.39.3-1.el9_2.noarch.rpm c72e222bbb014814f18e10de524d317e82589fa7e6680080cd21ae03036ee5d4 git-gui-2.39.3-1.el9_2.noarch.rpm d329b8f22f182b3b06ee32639fb3345bef1d82435f89e58c5c35a90a2a239a1c git-subtree-2.39.3-1.el9_2.s390x.rpm e6ee5c94e6688aa112af70dac761668befd1c081027e0da406c6bf323894f9d2 ALSA-2023:3318 Copyright 2023 AlmaLinux OS 0 1 Important

go-toolset and golang security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default golang-tests-1.19.9-2.el9_2.noarch.rpm 3e7a3d789c3a201595d49dd61196170be4b9b2bec6598550984e221e517f6b13 golang-src-1.19.9-2.el9_2.noarch.rpm 7a755e7bf01e8d100983fd3a21695878f2ade5268c1bce6fcfcbaf25265be3a7 golang-docs-1.19.9-2.el9_2.noarch.rpm 928cd427edc001871d6a1c7be4e1ea058d43c44d4ae45de88ce0c6179ab590cb golang-1.19.9-2.el9_2.s390x.rpm a4872804ed646d0df3af4065ddd1043ab919c49c2476f4f1313316053ac82104 go-toolset-1.19.9-1.el9_2.s390x.rpm ac322266933eea7379ca1582c1b288803736599905577644e5da27d8489d5566 golang-misc-1.19.9-2.el9_2.noarch.rpm b2a1acbb405b126bb4db37df44985d8056d79aedbc92cdc592dfbb6bfa2f9664 golang-bin-1.19.9-2.el9_2.s390x.rpm c3f26a63516952309eef3ffb63460133e7be14b861d2cbff43133843609f98ec ALSA-2023:3423 Copyright 2023 AlmaLinux OS 0 1 Important

cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. Security Fix(es): * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default cups-filters-1.28.7-11.el9_2.1.s390x.rpm 5d7c931be494bfaceb9b6b9f051a5a1f6ecc9f9dadf258db9f5b1853e9e7d724 cups-filters-libs-1.28.7-11.el9_2.1.s390x.rpm 976406c6a918a25b89f5040b368d2f68b03e7f05df39b6e675bd69afea7f12ba ALSA-2023:3432 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: a use-after-free when processing maliciously crafted web content (CVE-2023-32373) * webkitgtk: an out-of-bounds read when processing malicious content (CVE-2023-28204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default webkit2gtk3-jsc-devel-2.38.5-1.el9_2.2.s390x.rpm 999c5ef212f384adf2abc805f54beb2fb28341dddeb9bbd7d2a010b17d653f68 webkit2gtk3-jsc-2.38.5-1.el9_2.2.s390x.rpm 9dd369a16f495e6efae1fc67eedc6d86b49149e5acda02afba9b75066170d5c7 webkit2gtk3-2.38.5-1.el9_2.2.s390x.rpm 9ff131957ac593c780ce591f1bbe8588df4ae3a2fb62d064abea6c99beae7254 webkit2gtk3-devel-2.38.5-1.el9_2.2.s390x.rpm d055fdcf5dff012e26da8632a0ca302646fe369d124fbd5b02eabe68ce6bad05 ALSA-2023:3559 Copyright 2023 AlmaLinux OS 0 1 Important

c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default c-ares-devel-1.17.1-5.el9_2.1.s390x.rpm db6b83824bfdab391ce7b7a790a6e9451bc19c5c7ddd83d1fc74d1d4cfedb28d ALSA-2023:3577 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130) * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147) * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nodejs-docs-18.14.2-3.module_el9.2.0+30+e3312493.noarch.rpm 2ad3268cdabd44f1fe5271f5aa2641b5e7eac4649848a4529d5aeaf5cf9a98fa nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-devel-18.14.2-3.module_el9.2.0+30+e3312493.s390x.rpm 86d3bacce28dd86426bdbeff03e3e25f002c2fe6602434485b59d672bb21e584 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 npm-9.5.0-1.18.14.2.3.module_el9.2.0+30+e3312493.s390x.rpm d77452600e17c684c7c68636b98b28003de2bfab034cd9645b655a0cbccc0b1d nodejs-full-i18n-18.14.2-3.module_el9.2.0+30+e3312493.s390x.rpm e62d7f4b3d1d13fb4cab6de469b63d63a7a4fbaf333f049acabcac2e47320401 nodejs-18.14.2-3.module_el9.2.0+30+e3312493.s390x.rpm ea9f0070c3d8ead4392669802409a1e02f5ec26341c4715f6714338330ab8b91 nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d ALSA-2023:3581 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.118 and .NET Runtime 6.0.18. The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212379) Security Fix(es): * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331) * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337) * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128) * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default aspnetcore-runtime-6.0-6.0.18-1.el9_2.s390x.rpm 27f54bb6411d5c3d6f3f33c6ebfc1b9ac66170b60610a228012092bb03184a71 aspnetcore-targeting-pack-6.0-6.0.18-1.el9_2.s390x.rpm 31c3fa0fa319d0e712730a0c65b385a7a7d567ce8cddab93795460954e9a2574 dotnet-targeting-pack-6.0-6.0.18-1.el9_2.s390x.rpm 48f47fbc560b2a74aacffc59feb5f392d9711d0cb5982d5a5c5b9f49481eb5ac dotnet-sdk-6.0-6.0.118-1.el9_2.s390x.rpm 55998a594a017588f7f5bb7a62ddb7ee024fdde7e6cfc4450569bf043533cde3 dotnet-runtime-6.0-6.0.18-1.el9_2.s390x.rpm 72705b904fa2629e38f5481f64e6b9a2a399f290776e17b88616788fad748150 dotnet-apphost-pack-6.0-6.0.18-1.el9_2.s390x.rpm d42e84aeced5f0a139f75731ce38758779545a0e5a6bb4df1b4b64bbd710a10a dotnet-hostfxr-6.0-6.0.18-1.el9_2.s390x.rpm d69660dadaa31e657469419f024b88c5b3ab710492e8ecc1c7bf2523f29e2806 dotnet-templates-6.0-6.0.118-1.el9_2.s390x.rpm fe54577e9c4266ebdd49140a718f3f84e62228d67c8819c6a0fa31f30ca60f57 ALSA-2023:3585 Copyright 2023 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. Security Fix(es): * python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3.11-3.11.2-2.el9_2.1.s390x.rpm 29e1bb94d3aed5937e6815412008182bb2b9bba9327933a7298b705427f2e4b0 python3.11-devel-3.11.2-2.el9_2.1.s390x.rpm 2d6341ca71949ef9369090077cf31487ec315fc232203521278811df0f867e48 python3.11-libs-3.11.2-2.el9_2.1.s390x.rpm 624767a87969ab754fa72c866c36e943e3f58c05a7f6fdd65a93d35eab489c7c python3.11-tkinter-3.11.2-2.el9_2.1.s390x.rpm 91f67ea2df1b1e7f6339203c00596809c8fd44dfffae8e95732fb5d96cb04700 ALSA-2023:3586 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130) * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147) * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nodejs-full-i18n-16.19.1-2.el9_2.s390x.rpm 2b178ec4de209bd9ebf53331ff8845cf8aa715b8be66419ef894ab3fdd92b9a6 nodejs-16.19.1-2.el9_2.s390x.rpm 56bc51d14fa00767c90db67ec8c0e35912794eb88e1af537c2e1419c04a86eab npm-8.19.3-1.16.19.1.2.el9_2.s390x.rpm d16899bb2806c6a49977c8c657fd299e0950f05775a1cc462405773d94152c1f nodejs-docs-16.19.1-2.el9_2.noarch.rpm d1f77d444195b730f9ffb538a9426aba8ee41a9d5fb373cc4db872046e2cf19b nodejs-libs-16.19.1-2.el9_2.s390x.rpm d9fb010815c92ba9104095c5092c28a6bc28bd3bcb2a4316642d10305ed07ce5 ALSA-2023:3587 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.12.0. Security Fix(es): * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414) * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default thunderbird-102.12.0-1.el9_2.alma.s390x.rpm f6355d6eaf70448b6476f8db90a478621c91dcfbddca5bc74d804d18e302cf48 ALSA-2023:3589 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.12.0 ESR. Security Fix(es): * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414) * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default firefox-x11-102.12.0-1.el9_2.alma.s390x.rpm 0cc2eac161da7a83d5f2cb57874d5937a8bb009f13235323471d604a3079172a firefox-102.12.0-1.el9_2.alma.s390x.rpm 3f3db3e7ce21040c5900fd7ba2a6d58c46e82e73d07366f1559d2d1a11db7990 ALSA-2023:3592 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.107 and .NET Runtime 7.0.7. The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211877) Security Fix(es): * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331) * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337) * dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument (CVE-2023-32032) * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128) * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default netstandard-targeting-pack-2.1-7.0.107-1.el9_2.s390x.rpm 0d00bb7a2525aaa8aaf17fd477dd4be72a3ed537e15d4bbc4c4f1a5d53f187af dotnet-targeting-pack-7.0-7.0.7-1.el9_2.s390x.rpm 1c037a5de139efb59aa95de7558f083202076984115cb5ee31a8214f96f53e64 aspnetcore-runtime-7.0-7.0.7-1.el9_2.s390x.rpm 29dc47f9b1294daa347c442ff6248c5229d960ac1e51baeaf4d5bf57bbf858a9 dotnet-templates-7.0-7.0.107-1.el9_2.s390x.rpm 47e3e7cae8b071ce4af511520d1aca7e39e0d3514dd05e4df7dcb8802a3c6366 dotnet-host-7.0.7-1.el9_2.s390x.rpm 7063f78a7bbe5414edfa298252f53dec1f104e06a332472ace43571f52df238a dotnet-apphost-pack-7.0-7.0.7-1.el9_2.s390x.rpm 82e92cab1b1ac56ca2426ac6785f9575e9557cf665fa8ef3d506415b3588a7b7 dotnet-runtime-7.0-7.0.7-1.el9_2.s390x.rpm 9252c141c705682436eca6d42dd0fc28bfab2ed7c33a19a9b785e66a3cdb146b dotnet-hostfxr-7.0-7.0.7-1.el9_2.s390x.rpm a923285af64caf246587a420143130bb32bcd5daade38412bfa66e3a3938fb05 dotnet-sdk-7.0-7.0.107-1.el9_2.s390x.rpm be8354514ed8843d7964bfc2efa273d91a1e5921fe92d5113b9d7ba5e5d42840 aspnetcore-targeting-pack-7.0-7.0.7-1.el9_2.s390x.rpm c9f30c6a73e99e11bffe63023b2bf0bd85c3dbde04809722ebc344d24c83a1f9 ALSA-2023:3595 Copyright 2023 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3-devel-3.9.16-1.el9_2.1.s390x.rpm 73133830fec152cdf7e02bee79f0b65ee889b6ea6f5e06fba402805ebfaa44bc python-unversioned-command-3.9.16-1.el9_2.1.noarch.rpm b345ad21c1a737673f51b09aaa1c7d2dd0b1cd3e180136b26e7caa6af3ec09bd python3-tkinter-3.9.16-1.el9_2.1.s390x.rpm edb5b585d685620a4c52a0363c4765f3c41164cb537ed60aff2890c41a7d81b9 ALSA-2023:3661 Copyright 2023 AlmaLinux OS 0 1 Important

texlive security update

The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems. Security Fix(es): * texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default texlive-cm-lgc-20200406-26.el9_2.noarch.rpm 008921f02911ae9af1e3e15b1e71f820a8804fd5283e3e88c3d43614fff8ce14 texlive-tex-ini-files-20200406-26.el9_2.noarch.rpm 00fc988886f10012b6c4f8fcd423299bee6a435b26a6b70c160b945cb10a6471 texlive-texlive.infra-20200406-26.el9_2.noarch.rpm 01a73233df2c026e50e5426fd296698f3982876002579101a57024022d1ff696 texlive-soul-20200406-26.el9_2.noarch.rpm 03a3edf75b3636a312ade056ecb65ad93016c8a35c5e6444c74d934fe25e6bae texlive-colortbl-20200406-26.el9_2.noarch.rpm 03d5faf7a25adcdf1ea22cc42e813df4538f8eeb2fc8a052027163de93ad38d4 texlive-textpos-20200406-26.el9_2.noarch.rpm 046a2d05382b3024f3df344ac50434c702ed545c184a31b191b61eba9553e993 texlive-marvosym-20200406-26.el9_2.noarch.rpm 0492773bbb18fa758233e291b6d98862457b86df8e381e50ad226e8a16bfa967 texlive-tex-gyre-math-20200406-26.el9_2.noarch.rpm 0567fb9dee7f89aaf638e8365af6d1e5faa421fb2b79fac09cb855381047b29f texlive-jadetex-20200406-26.el9_2.noarch.rpm 060f0b98b563da426bd438ac2c416ef7bb364249473b16b8272b7d83eea60369 texlive-fancyhdr-20200406-26.el9_2.noarch.rpm 0612e316410c4d8b8232198f8c12b54873c0c8482594c1181d7bbf9821bd2f95 texlive-mathspec-20200406-26.el9_2.noarch.rpm 0634d60991669f85ede8af34330a550b5a59511bcaa51f244ddf698e7cc3fc7e texlive-koma-script-20200406-26.el9_2.noarch.rpm 06624788aea8c593d0987affdef8e30437dcd88ce1272049527e55195b7f82d2 texlive-ulem-20200406-26.el9_2.noarch.rpm 067e68b0c210c22dd2cff18ad0791ed435ad2a04613dfffdd452aedf8bb97d5f texlive-sectsty-20200406-26.el9_2.noarch.rpm 094a9f82895ecb203a6bafedc54fe0fe51891bcc4f696bae19dfd4de9226aa19 texlive-mptopdf-20200406-26.el9_2.noarch.rpm 0a1c738bea991a6de4cf7dfa08fe8ff5f19c057c0fcd0f73ce9419d8d1747ce5 texlive-infwarerr-20200406-26.el9_2.noarch.rpm 0b0d16b3370ac2df00563cb4ddce9044f80e57e2c2fffeca5e7799e93c3cdaa8 texlive-helvetic-20200406-26.el9_2.noarch.rpm 0b81e1accbf64549b458c4b0af086553f81b902b9a79ada1e10ebfa1cdd195e1 texlive-svn-prov-20200406-26.el9_2.noarch.rpm 0c8d424cf06a55e8f94a96a708c356713104efef028d278cebe419d4832e0caf texlive-pst-coil-20200406-26.el9_2.noarch.rpm 0ca71d388d4881090a9bd537830cefb44cb31e2d1533b5ad32caa7399fc84020 texlive-threeparttable-20200406-26.el9_2.noarch.rpm 0d863bdad37c6fa4bfef7eaf7265dc917eb60e47fda5ea48ffc7a7898a404f45 texlive-tabulary-20200406-26.el9_2.noarch.rpm 0ea34ea8845dc4ca8515e41c6ba85db816ef885db66a1c61221230343ffa8141 texlive-fixlatvian-20200406-26.el9_2.noarch.rpm 10879ecf7470319206be3ca1ed4d9beb400ad706147665dae95d5831b0363af5 texlive-footmisc-20200406-26.el9_2.noarch.rpm 109db5afd8e3f00cc4ecbb916a24c94793775aba9a9733af381c372c2f37d778 texlive-import-20200406-26.el9_2.noarch.rpm 110f10f96f4d13cb81c69688fb9a3d5d01d0d31bc1420be895a121bcb2315e3e texlive-titling-20200406-26.el9_2.noarch.rpm 113720ce4e40ab881fb9e9bf6b017988cb22e583a93150a7e3dfb9174a7a7f2e texlive-hologo-20200406-26.el9_2.noarch.rpm 11c9645d8aa4a754af8312d929367df722013ead3c2f889f4be09cfe7cbc146a texlive-needspace-20200406-26.el9_2.noarch.rpm 11fbe12bd907aba101d2bd9ba46d03c6b525b50cbf6fab9739637468e8fe007f texlive-mflogo-font-20200406-26.el9_2.noarch.rpm 123b7917b2bda6ddf2cddb18a293973ecbb559554bbeb8d05ab09ffa1544388b texlive-hyph-utf8-20200406-26.el9_2.noarch.rpm 14c3fbbd66ad91ff2fe14595edda7d48733de591190d09c7e671699da2b42d73 texlive-knuth-local-20200406-26.el9_2.noarch.rpm 1646b3dddacaecb9311361ebac9bfefa79c04d2b9184487cece2ae5b4151b8e3 texlive-bibtex-20200406-26.el9_2.s390x.rpm 17215093321851ae1635578a6faaa26b00364172f4a5d2939c735e7832686219 texlive-txfonts-20200406-26.el9_2.noarch.rpm 17d873f3457788674c3c4ae3cb039d72c7c435641c3a8f2dc8dfc57f77ae47d5 texlive-ragged2e-20200406-26.el9_2.noarch.rpm 17de9bc1afa0ce3b5b3b6cdf68a6a9e1728025d892dbd2bcb35e1c0facbcd9f9 texlive-hobsub-20200406-26.el9_2.noarch.rpm 18036b80304f61f165e4817017e4b223f1316033d1e9389e355d5ec2b24decc5 texlive-showexpl-20200406-26.el9_2.noarch.rpm 18ec49ccb66c07d97ed14331a337017565ebc26bf76effd1af35bc5cff7916fc texlive-xifthen-20200406-26.el9_2.noarch.rpm 19493a2fa91bf9e5b95b4407b155a691f59d7b141c5043186abc97288443d58c texlive-latex-20200406-26.el9_2.noarch.rpm 196f9af392b84b70f4461877495d1208ac4894d484f64e0f1f288ecc830f9c9a texlive-linegoal-20200406-26.el9_2.noarch.rpm 197fb4010fb2aacfe7f554a341991292173aca07ad8b5582d8eee1eea0e4e6a9 texlive-context-20200406-26.el9_2.noarch.rpm 19ca382d209bc5200b479ea44c820cfc0b3d79a0d228f8715f24432cd57f61cf texlive-appendix-20200406-26.el9_2.noarch.rpm 1be77cfba81b5e6b446f6bda4ff6c01861e557c8939734b7f9ebaa8445d98194 texlive-eqparbox-20200406-26.el9_2.noarch.rpm 1c5e152323d4318172765efcadbdac6f1de62d9c819be6e62c45f8cb20526b97 texlive-realscripts-20200406-26.el9_2.noarch.rpm 1c93892d7f44a8471bea3f29f14ae565a67028a9119e41ad3ccb329eee32f1e9 texlive-tocloft-20200406-26.el9_2.noarch.rpm 1d4656936cccb45349aaf140cc1a83b5ce6c724c4369744d162faa127ea709d4 texlive-collection-latexrecommended-20200406-26.el9_2.noarch.rpm 1e7107b24cf5b765859dd8882a3c7a6d30e68af24bd24b291b394e076fcfff50 texlive-l3backend-20200406-26.el9_2.noarch.rpm 1e8a72df7774e93029ce20d8a2a1e04769e17bed47871f841b1416e172c3bf0f texlive-amsfonts-20200406-26.el9_2.noarch.rpm 1f1cac2f6c6082dfbd86cab59c9cc3a436803ae1a7093eac3a945fc8c63cfb5e texlive-pst-slpe-20200406-26.el9_2.noarch.rpm 1fea8e8408d26580d97402b2bded9b3c469e99cc73506077586d707c1b9a9e5d texlive-modes-20200406-26.el9_2.noarch.rpm 202049a49b9a5adfc102587d2f06557a2fe202335179370440f189222980d969 texlive-philokalia-20200406-26.el9_2.noarch.rpm 20470a3ad072629e868f7ba008a7186f6178ee586ad63d18a25e3d5e98de4fae texlive-ms-20200406-26.el9_2.noarch.rpm 2080ab2eaff13b1a85e633ed4861eb1b1921dffca830e63177ce2c977731d948 texlive-notoccite-20200406-26.el9_2.noarch.rpm 21c20102cad39c458aef1820eb47f649cf1d036b4558266b8dc2991b44137753 texlive-texlive-docindex-20200406-26.el9_2.noarch.rpm 223c3e99fc171bd681cb4898347aee3f66d6cb19000fa3c7293017ed49a6b967 texlive-dvipdfmx-20200406-26.el9_2.s390x.rpm 25e9b81a73c759dce19728f33ddfd5a0d4987350dada6e4369a807dfd934a2a4 texlive-mathtools-20200406-26.el9_2.noarch.rpm 2764db8e807c79d5ec522d042e2e1522cb2bc9e6313260545d3d8480b34cce48 texlive-anysize-20200406-26.el9_2.noarch.rpm 28e15ddb2d6b107890cc55837fe1e51d778f70a73536fae69e6cd53acb78f4fc texlive-classpack-20200406-26.el9_2.noarch.rpm 2a6b9a64fad829f027a2b184ee4d45dba5790b7e5c6ea9cb78a5ba96353d6726 texlive-hanging-20200406-26.el9_2.noarch.rpm 2bd4dc1fac394e2368590cece7fa2f72d2928d6a617d32dc0de8f8fe472e0f71 texlive-xmltexconfig-20200406-26.el9_2.noarch.rpm 2beba6a7d20f6e9eb2927f241f57e254c9ffc4c9c58f286bf294fdb70b7da2de texlive-mflogo-20200406-26.el9_2.noarch.rpm 2fb476082c8bcc4d204be2ff40120135ee5fdb561ec8af06dc28e3947146ca51 texlive-upquote-20200406-26.el9_2.noarch.rpm 308f6cc918fdd672be8425f1eeb04329256421349796bac2223f72c89b5be821 texlive-kastrup-20200406-26.el9_2.noarch.rpm 322627e28ebcb579afaba7114197f739990511b3e1b0e40e8e1bfc6e40191438 texlive-hyphenex-20200406-26.el9_2.noarch.rpm 3229fda674fb7c28b1fff40d9d83eaf82ea46e64a202e66352e6c4239fd4079e texlive-extsizes-20200406-26.el9_2.noarch.rpm 32af1364245ddc53379a8557a535255b24a7d53cb101647327bb40a2efdc7dff texlive-kvdefinekeys-20200406-26.el9_2.noarch.rpm 32ba8b042adc2c5aae8db7895ea73e40e32ce6b36ec8622ef8defb981f271e06 texlive-booktabs-20200406-26.el9_2.noarch.rpm 333724d19fb37357bcdbc2d4c2303bcee56701feda7621ef1080df3f2ca1ec41 texlive-amsmath-20200406-26.el9_2.noarch.rpm 33c29ea6140c64140c25d0f4a7a64949d6e8cc9961b6c58dcf5bb57d54b8d231 texlive-fontware-20200406-26.el9_2.s390x.rpm 33ead4efc32689359186a7012a174f2e37cc459223f065eaaa04ec20553cb05a texlive-xetexfontinfo-20200406-26.el9_2.noarch.rpm 33ee2fff66793f20005154903f976cee8136da5028db0aff2e1170cbf568da51 texlive-times-20200406-26.el9_2.noarch.rpm 345c6df0ef4bbe06ceddb85f45a8ad9ea214888253093456d1a4f88139a5df55 texlive-texlive-en-20200406-26.el9_2.noarch.rpm 3461aa9d3f587e18d0ef51ecd8e54ed7f791845c557971f8de9ab46dbaef67e4 texlive-datetime-20200406-26.el9_2.noarch.rpm 3487709006d59de93155775f9e76c5c7c4684514d1c80bf7e8b0d2a753e8f2b9 texlive-atveryend-20200406-26.el9_2.noarch.rpm 3742f2da7231306a33c1bc88bb28494cc4bf00e0c0fbd509a223d35472ab1b71 texlive-bigfoot-20200406-26.el9_2.noarch.rpm 38343aef3e24d8ca3c914a32387b99f50d322bc682ac64b86d69336e9ebbb9b3 texlive-parallel-20200406-26.el9_2.noarch.rpm 3892188e08f2d8d6c52ec661e9f4199c23a1772383d87b84d7ed23e0af707084 texlive-powerdot-20200406-26.el9_2.noarch.rpm 39ad6a25e381c314e82bb9b8e247df8d148d7f5906b93407d54366e5bf38982c texlive-euler-20200406-26.el9_2.noarch.rpm 3a2d69c650be8d742536a180be6040a3605ea7f4bf6d1b906b051514a86f2868 texlive-pst-arrow-20200406-26.el9_2.noarch.rpm 3a632816b03c0f41b7ac81cd96a0f1bf0be2b2fba5b58d0d45333a4a13201851 texlive-fontawesome-20200406-26.el9_2.noarch.rpm 3a7334e01d3ffd8daff9692de4e2bdedfffd083d025922e49bf303fe16b94b0f texlive-gettitlestring-20200406-26.el9_2.noarch.rpm 3afecdb04dd50162478c3ae50e157c9f1795675ef4b5ad70f3f294e77ff2e97a texlive-pxfonts-20200406-26.el9_2.noarch.rpm 3c0241bc76ad75d6cd7777fec8ce9ab8490fc598c0e407183f6af9133920f441 texlive-fp-20200406-26.el9_2.noarch.rpm 3c61538c8deb28baa38b64a9f5d4d438b0d92431ec371c28f2ec6641bc3622ed texlive-etex-pkg-20200406-26.el9_2.noarch.rpm 3ccb993408be681662a5bf34073f5ba2b7395a258109418b0d98320510715108 texlive-metalogo-20200406-26.el9_2.noarch.rpm 3cf9bada2f5fa3bc9c26d267528fabf2de20c6eca82a0cff3dde49db37a8470b texlive-passivetex-20200406-26.el9_2.noarch.rpm 3d4cfef8ac600efcd7e611d6f3db9c36adea2bb7eb8d388050c7876b2cd49a25 texlive-texlive-scripts-20200406-26.el9_2.noarch.rpm 3e73627f0afc2b248d6f41d280e59505f0bb44f5f3f64efc1aa92c17e7d1b273 texlive-latexbug-20200406-26.el9_2.noarch.rpm 3f24bb761fd759608e95427b9758062cded75a144f98c3cadea9ab4a84404f8f texlive-thumbpdf-20200406-26.el9_2.noarch.rpm 3fcd84ae018de793ac8a7cd7532e6214b106d073a76ebfea89c52bddfb4d5061 texlive-fancyvrb-20200406-26.el9_2.noarch.rpm 4013749eab8fe6ca518f04ce1366a899ffd219b0ac3b564b09a30f462d907e49 texlive-xesearch-20200406-26.el9_2.noarch.rpm 409228515606416ac35b940b8a472d9375c729cc5f5102cd7389a5029679c73f texlive-multirow-20200406-26.el9_2.noarch.rpm 426ea9ab52b220f8b862bdb8ffeb2cd116bea0ee226714869cbb07e2cb6742e9 texlive-luatex-20200406-26.el9_2.s390x.rpm 4288f948517ac0df3fc539dc5ad23a38d6295bfc4375c9004c65fe1b15f12f4a texlive-xetex-itrans-20200406-26.el9_2.noarch.rpm 42c014b8a51e28c4734a9c0e79e6a510b4912ccfd2d99f3f9f792bff0586a30c texlive-mathpazo-20200406-26.el9_2.noarch.rpm 437a9d7674ada1f0e38a6f2319a32412eca74969dd1c1a25812d68045d609e72 texlive-manfnt-font-20200406-26.el9_2.noarch.rpm 43979684d22ad31c66044aecf815acab4b92dc855dc55a340e5bda809f3de164 texlive-ifplatform-20200406-26.el9_2.noarch.rpm 44c463dd227818c330265d3722154b069e98e2670bcaebd56db9ba619b156cb8 texlive-collection-htmlxml-20200406-26.el9_2.noarch.rpm 450a7b6d8b84be559a161bb425bf974fd1c4a5849324ce79692fac30fd5e138a texlive-pdfcolmk-20200406-26.el9_2.noarch.rpm 45ebb20c5ee28836e9696c39b78e59c1e8fd654b15032c487c89fdb723222f24 texlive-babel-english-20200406-26.el9_2.noarch.rpm 46c1f631860d6e31e5781bd53faa9e965c4c690c1d66a45b9884aca634490486 texlive-filehook-20200406-26.el9_2.noarch.rpm 478c938c6ee80bd4bb22121f5c3107cf795da81dac49e44c2cedbf47c1340d51 texlive-tex-20200406-26.el9_2.s390x.rpm 47e4d84090a3992e67e5a6a2b69267e9505f5954db4832bdeeae735ea193aa8e texlive-sansmathaccent-20200406-26.el9_2.noarch.rpm 4922852eee4206323d9e1677e053922c6e957631ad1c6aea78bed78a2b45f77a texlive-dvips-20200406-26.el9_2.s390x.rpm 49772dc9b24ab569d372a101cd69bc2568193abf823725feb57436f88ef65250 texlive-pdfescape-20200406-26.el9_2.noarch.rpm 49fdf71de0a25c06e2b2083d7d4dc9ea621a1afd908da548bd109c855400eb91 texlive-bookman-20200406-26.el9_2.noarch.rpm 4b2bcfaa3fc2a82a080c746b54318dd9cbebba4c046a52c125ee2bb4d6b907dc texlive-pst-eps-20200406-26.el9_2.noarch.rpm 4b433714fcb92bb0a0d52356fa5e2d4a962d93f4924f7a19ad15d28f03ab95ac texlive-alphalph-20200406-26.el9_2.noarch.rpm 4d2980a193d6303a58c37925f0f985f4e5f9f3cae2efb4dd45d5444e46dfdd32 texlive-metapost-20200406-26.el9_2.s390x.rpm 4d29efaf88c5b672993181fd6b2f3336378c4738b3fe56b4a216cc8b1b1e4387 texlive-cns-20200406-26.el9_2.noarch.rpm 4d8621c03a38e0d2bf3fea3a746df7f7ff0388f50faf2df0d94eb2d386cf9744 texlive-enctex-20200406-26.el9_2.noarch.rpm 4da17d9c3c479dc15401f330cc11691c20ae1ae8067b1b33167103e1d21e4cc9 texlive-pdftexcmds-20200406-26.el9_2.noarch.rpm 4e617977eeeb6de3846fa85b2b9f27718675dea3d86773ce10a317a415f12c2b texlive-xeindex-20200406-26.el9_2.noarch.rpm 4ecf3ea38c01f71ec9c4013bb7247be91b71307d71b45c4c48f17ba062cfbcc1 texlive-babel-20200406-26.el9_2.noarch.rpm 4ecfc0943c9f98b279bd8b85b2a9a86ac2210c09b7adbbceb5ca5dc950e10787 texlive-luaotfload-20200406-26.el9_2.noarch.rpm 4fec9f7771af59d7393aca167c5646d588d88f0f56bd69240919fad990aac9a4 texlive-xetex-pstricks-20200406-26.el9_2.noarch.rpm 513843974eedf0da4c9b0beaec914f5ccbb8e6e83c04c970c475b143dc4efb38 texlive-norasi-c90-20200406-26.el9_2.noarch.rpm 515e9172605fcd8501aa60c880cc0904531358c1615a60c4905eec2c4e7f174a texlive-currfile-20200406-26.el9_2.noarch.rpm 520021ada3555f6aecae8d205627758bf0d72bee817ca5a9f0bcd3f6571f9a47 texlive-graphics-20200406-26.el9_2.noarch.rpm 54f176e46b1941a8762bdcdbe6e857a9012478f283eeabe96689c457287a18d9 texlive-epstopdf-20200406-26.el9_2.noarch.rpm 5501f17087bd7ba8ee0941d02832b0d286613c4ae7fd103a973d1c1fbbfb62f5 texlive-fancybox-20200406-26.el9_2.noarch.rpm 55f4a84250f0aca1ea46c322e4c869f4af971aa9038aa78fdf6f01ee23bf7393 texlive-enumitem-20200406-26.el9_2.noarch.rpm 56fc23f41fad306c075914ad459bbdec1234db4143fa66a26e511d68385b98a9 texlive-l3kernel-20200406-26.el9_2.noarch.rpm 577006b173d9499f179ad705732e9800e4720d44bebb3a94cc9bada684007ec6 texlive-pgf-20200406-26.el9_2.noarch.rpm 5858cc5c0ceb9308e31366b824bfbb48e6ae07d40574fd3b9237d34e4a8f1c14 texlive-newfloat-20200406-26.el9_2.noarch.rpm 58cfe91d68ee63cc54f0697e461d8984df79d567d84303d1a0536c9c15a41782 texlive-pst-3d-20200406-26.el9_2.noarch.rpm 59eb1d0468f9d11103f11e591ac539f31eb57876bca1e98a68261b9dd83f5647 texlive-etoc-20200406-26.el9_2.noarch.rpm 5a29000f8e87a62dcf05279904669712b8714e7b45ee456e9e0096c09e885ea5 texlive-zref-20200406-26.el9_2.noarch.rpm 5b1b4a550ad2af721868445780ba070871943d31a75e388b9ce910e5db29404d texlive-utopia-20200406-26.el9_2.noarch.rpm 5c31c37f4006a82ec0f3a6a7d9c360edf1a45ad2490e3267d73b34d31352cfac texlive-l3packages-20200406-26.el9_2.noarch.rpm 5c7023c94eed5b8eb8ed000449b78000a8d4f3cb993227079b207325a663cc5c texlive-ncntrsbk-20200406-26.el9_2.noarch.rpm 5d452cb0d73af0f10df7163ea9e4e70216492de3a5df809b819d2312560cf387 texlive-pst-node-20200406-26.el9_2.noarch.rpm 5d53d99c7e1a90c6a54f6fe3dfba15135cf7bf12c21a88f1eb53dc225f4063aa texlive-atbegshi-20200406-26.el9_2.noarch.rpm 5dbc658240402850721abcb25584dd769849f6be884db760bf7f5deeb13d6e9a texlive-fontwrap-20200406-26.el9_2.noarch.rpm 5eb59e04d191b222d7147cbd644cd15714dad7fd882f623f18bbee39d01c7e3d texlive-charter-20200406-26.el9_2.noarch.rpm 5f217a569bc31f5bd4ce0edf2c2a632a303bd00e0701cd96d4479b1808635cea texlive-latex-fonts-20200406-26.el9_2.noarch.rpm 5f4c56da3b4eb721a464cc8e7b6352ebf73c924fb486c490606e6f59c1ab6fa7 texlive-hyphenat-20200406-26.el9_2.noarch.rpm 5fcb617c23652f08306ce0df82452bd1d6404d71384c356b4dcfc3df7150bf36 texlive-epsf-20200406-26.el9_2.noarch.rpm 603923b09683e92a11914342dfedfc4a6bb471cf08cfc5a43984380070606016 texlive-caption-20200406-26.el9_2.noarch.rpm 603f6e8c0dc6f764331beb164fe4cbc586720368d30e9e5a960bb1dcda521d29 texlive-mparhack-20200406-26.el9_2.noarch.rpm 613b83634ed62e25ac9765736e8849c6f22585d4c392d02db96df41754b3a8a7 texlive-xetexconfig-20200406-26.el9_2.noarch.rpm 6325bab9112091a826e469fd3133a153891666bb96b6d37140acedd08575d754 texlive-dvipng-20200406-26.el9_2.s390x.rpm 63663498cf9e2b78f9ed29be37d1594e2ee7c0a78c464666c36b7c163a80ecb6 texlive-euenc-20200406-26.el9_2.noarch.rpm 64b72904dc1684e65ad2d8ae4a2d8db3b574ee5b6aa59fb7fc44ecdfd06c7926 texlive-ec-20200406-26.el9_2.noarch.rpm 64f12a17b8d4fa54a127e8b443e433df5e365fde1ddaa8ef1c70f41ab2350d7b texlive-attachfile-20200406-26.el9_2.noarch.rpm 64f470ee8d527eb379079acf8ec84b64d83774fe39fb049eefa3d0bf1daf2612 texlive-cm-20200406-26.el9_2.noarch.rpm 65fcf2af1ff703ee5c26318ea5468860abece0dc6073d0c73cf62d8cbf25eb72 texlive-setspace-20200406-26.el9_2.noarch.rpm 6690b2013e92d4c1826efeac11726742db77bf48cb6d81664835d0820a91a742 texlive-20200406-26.el9_2.s390x.rpm 68a0091a872ecaa0f6c2ee0b9f7e0a18fba3eb17d4e0540c3358336731567cff texlive-pdfpages-20200406-26.el9_2.noarch.rpm 69441b376667d7dac36f67af174044e457abd66f9e9f8dd42110dae44229e842 texlive-footnotehyper-20200406-26.el9_2.noarch.rpm 69beee6de0d7b13b686597349f82ff09020bfecad207132b8d8649b7a1819c2b texlive-tex4ht-20200406-26.el9_2.s390x.rpm 6a04302cb689d0f62729b1623274ed4c64794ad9dca1c4fba6a5482ec2fb2ccd texlive-texlive-common-doc-20200406-26.el9_2.noarch.rpm 6adde86808163cdaf50b62344a9a559e80dd5743dea15e824aed367a552fa5fe texlive-mfware-20200406-26.el9_2.s390x.rpm 6cac616ef5ccd64e811000cb87f9ae05303387d5a66264da002a7da97fd6be7a texlive-psfrag-20200406-26.el9_2.noarch.rpm 6d9c59a17ee8b78ddf59f3e237786ebe6c1c58ea8f89cbe6dd975e26ce2c6566 texlive-eso-pic-20200406-26.el9_2.noarch.rpm 6df327b010cd8bed7710a8dfdef31ccc512bf4c16690b26478f5691322718b43 texlive-psnfss-20200406-26.el9_2.noarch.rpm 6e0d5f4552e1e9d6c379e893e27f54035f46638370dcfcce3f28c27816ad1dbe texlive-pst-blur-20200406-26.el9_2.noarch.rpm 6ee5eb1cedcddc5f86b916a6994015018459f86d19c5cd23070c8fedef527098 texlive-xmltex-20200406-26.el9_2.noarch.rpm 714c93de6d245b6b778467c6818cab5b0315b4ef4c4ed659e9f54ec92430f717 texlive-graphics-def-20200406-26.el9_2.noarch.rpm 71a9f77790ff8036bf832e8004642fa4a28a930f9cdfac4977058121d4e5fae9 texlive-fncychap-20200406-26.el9_2.noarch.rpm 72589c06f68701a17f8aa7f98d38fbffadf50d34ddeb10569f34207541814e31 texlive-babelbib-20200406-26.el9_2.noarch.rpm 731f511e5e0b53baba885f7ae4ee81a798cf2c78de16bfbaa4715bbb27dac0b7 texlive-colorprofiles-20200406-26.el9_2.noarch.rpm 741099917df3d791c835b8aa577cf790a284719236600bc481078973b7c4d3c9 texlive-hyperref-20200406-26.el9_2.noarch.rpm 7460b2f316be03aee9166db5246a321a19c28f54cc43fd6ed7f183dde3ef5373 texlive-amscls-20200406-26.el9_2.noarch.rpm 74656909703e4d20db2efd2796fd926b0cb1264051a62df2482fa20b13fe885f texlive-wasy-type1-20200406-26.el9_2.noarch.rpm 74779b416a2d48646157a76aab532a59a4b25a4b66b5ee3dcb76f75da9bd0cd5 texlive-cm-super-20200406-26.el9_2.noarch.rpm 750a9d9fd4fcb79da1ad556ccab0d59b5c1a5fc1e02726fc1b79ca2b53b5b9ed texlive-etex-20200406-26.el9_2.noarch.rpm 7642c5e37492fd77bef02443b6ad83e16db624ec41657d43987b54d071e42517 texlive-preprint-20200406-26.el9_2.noarch.rpm 771dd71ff3eee8ec7f990da4743a3be0192a2c9d5a191826d3266844487e8d74 texlive-cite-20200406-26.el9_2.noarch.rpm 7835ab02b453fedffa3bf249211a86cf39695cb0f04c4c86d8f2f4368cce99c7 texlive-collection-basic-20200406-26.el9_2.noarch.rpm 789a760c3e9c3e72da87be79bea330b43046ab7a6ac3176407257c952c323ca4 texlive-fpl-20200406-26.el9_2.noarch.rpm 78bf5d6294cb09ee1ffc9040fa12b41e16b1e0f41db6e830ec092b21e5893083 texlive-ucs-20200406-26.el9_2.noarch.rpm 79fdc28786365b1a0974d51cfcc71efba4813f985d71c181dd6a8d38a7d4fb2c texlive-wasy-20200406-26.el9_2.noarch.rpm 7a4b9c5e47bc8c4ae5bf0233e6d6366b9cc7cae81002b76721d0acffc590cf2f texlive-latex2man-20200406-26.el9_2.noarch.rpm 7b5eff7f2b46735af10e75399298987185622544af8dd09d4c0fbf4753739d9f texlive-catchfile-20200406-26.el9_2.noarch.rpm 7cfcc34741aa2518b791db150ef3c3bb01a3106025530917aa9b265c150998fb texlive-pdflscape-20200406-26.el9_2.noarch.rpm 7d62cc4443bb94f42358f277ad402abeb9617058ca5ed7ed2ba52ee675f3092e texlive-bookmark-20200406-26.el9_2.noarch.rpm 7d8706e69cac8f545a9e1dbb1672d1d56a98d0057dd1bed876bc305f05a48e8b texlive-lm-20200406-26.el9_2.noarch.rpm 7e0f5a90fd4e77b263314769d2e1e7b65f035f0ad40615ce58d742d88563d893 texlive-dvisvgm-20200406-26.el9_2.s390x.rpm 7efeb66e6111f5be7d0dd7879b879d90e134b07d92136eef7b74975be9d22bfd texlive-pst-grad-20200406-26.el9_2.noarch.rpm 7f0503dd551f7701ae4894f2d126df0e0b7491a06b489cc3bf25b0bdb0e9f887 texlive-kvoptions-20200406-26.el9_2.noarch.rpm 7f0f8a6f55629f99c0b708d1b95ce8ac44f4f72304fdd826877bdba3fd685e2d texlive-adjustbox-20200406-26.el9_2.noarch.rpm 7f1c527815e9eccadee6af0d4b08693269bc48b39b5d06c3de024c80295ca690 texlive-unicode-data-20200406-26.el9_2.noarch.rpm 7f534de52dd37f424545c340184ec70fe7ebc0ecdaa7587712af4f1fd2bb5769 texlive-luahbtex-20200406-26.el9_2.s390x.rpm 80538a06ebe09b88ccbaa2e850d0822869b05efd6d472e91aa9d6a93e423120b texlive-microtype-20200406-26.el9_2.noarch.rpm 80578853876270fea627b7a942dc2cfe99e7816f6f2dc2388587489b2d70efe6 texlive-pst-tree-20200406-26.el9_2.noarch.rpm 806e5cbc1393811dd4a6c54f513be3853e4115a2aaa85fa3fe920ec22dfe8283 texlive-awesomebox-20200406-26.el9_2.noarch.rpm 8131049d08bba3e87d06ba1ac19dcf96c273848521cb36b4de4ad428aa86f270 texlive-auxhook-20200406-26.el9_2.noarch.rpm 81f817b8af1bf9ea2cee69e7cb1c9d7c993b3716e9f90da6121f6c4d74498b36 texlive-paralist-20200406-26.el9_2.noarch.rpm 82b6f9e0f085c2568a46f7ec37a432f28fe573f93f9bde83805e4fec6fba9617 texlive-wadalab-20200406-26.el9_2.noarch.rpm 83a3f9b83564a20ce0bf371fca89e88829edbe1f0ef90edf844ee146bddc5fa6 texlive-gsftopk-20200406-26.el9_2.s390x.rpm 844601b0f34734be04c90ff2b52c9dd09698dd26cab893160084a25455da6eef texlive-pst-tools-20200406-26.el9_2.noarch.rpm 8484e07c278107e5d26be4627235579a14cc15b5c62254305d723e02c52bab33 texlive-rerunfilecheck-20200406-26.el9_2.noarch.rpm 851f10c5ad9929f5598d7450e39916b25c76a8f901c02440d3fdee8ce7e2040f texlive-ctablestack-20200406-26.el9_2.noarch.rpm 8554f4a1b503a079cd538946a4eedb667863bfdc2e395403212444f68889d0bb texlive-breqn-20200406-26.el9_2.noarch.rpm 8591debf7deec90e30f1ea87c553ffabfa992e2eb67afef86965dd6412b858f5 texlive-lib-20200406-26.el9_2.s390x.rpm 86910d4b341f891551760feb196f17a3acace18675f8b94a18ddc8fdd0063ab6 texlive-pst-text-20200406-26.el9_2.noarch.rpm 871edd2fd438fab8220cbe0edcee53a7b992d89fa7ebb16a2b755af9919572c1 texlive-kvsetkeys-20200406-26.el9_2.noarch.rpm 87f9f46129e95075f2cfbdab86ec038276c396d704f0530ce6f117dfe0e10725 texlive-stmaryrd-20200406-26.el9_2.noarch.rpm 887aa5d81bdca1c5678e9f644ab508f26322a2e2228b68ac500e49b34a105642 texlive-euro-20200406-26.el9_2.noarch.rpm 88bfb2ca880acc4110900162756c2c2a3437bb1c0ec98d8c427c4a370a95fd14 texlive-newunicodechar-20200406-26.el9_2.noarch.rpm 897a587b2b08cf1e8396515371382fce0102f8ff096a9cef6b244a9a7496ebcb texlive-csquotes-20200406-26.el9_2.noarch.rpm 89828125ebd5515a18e7e025d62e300c21770a14a44f852a68590302ec2da6c6 texlive-beamer-20200406-26.el9_2.noarch.rpm 8a197233efafe7e6f6552a6c437ec761cad658513626bf44d14d5baac7fd0323 texlive-sepnum-20200406-26.el9_2.noarch.rpm 8a99523bff266ed2ca76c1554ee6590b31c539242bd4177ec7f731caf8113d5b texlive-etoolbox-20200406-26.el9_2.noarch.rpm 8bbb1c68785314841cff04dcb7b2d9445b09572a58db24513303984017f3af4f texlive-section-20200406-26.el9_2.noarch.rpm 8d4185aa5ad2db94723fd6cc954757c06f848599c074ed3187d0672f250d6f56 texlive-rcs-20200406-26.el9_2.noarch.rpm 90a1dceea6ffe76041ab21c03e462e5787e2cd659c333d1785dea4eb35199c9b texlive-pspicture-20200406-26.el9_2.noarch.rpm 90efce61114f6fe2dc4a77a90fd4862979820607d222f415d2ab013a84d30218 texlive-iftex-20200406-26.el9_2.noarch.rpm 911ba8c3de0f185c04cce8e10f16072179b4fe3ca4277039d7963cb41813fb85 texlive-scheme-basic-20200406-26.el9_2.noarch.rpm 912dc2eae522ba2e001085eae361aa6f41b91bd2dbeb9068a3e6a8fcb5ae3f72 texlive-underscore-20200406-26.el9_2.noarch.rpm 92577886accd0bf0cab6ee14668b073e310ddd374f6e47fed7e38733f555fc8c texlive-letltxmacro-20200406-26.el9_2.noarch.rpm 95fe1d1b464a6f85a5e46476fe764af8f806b695f5fee33baebe8ecba35db58f texlive-seminar-20200406-26.el9_2.noarch.rpm 964b0082b32154a40f2b80b21c8f27ff2c66fd6ea209d4953b145eed0208cfa9 texlive-xdvi-20200406-26.el9_2.s390x.rpm 9686d46797d0bfe07b5990e394ab2ded9296bf5e06c71634449957fd2450f154 texlive-filecontents-20200406-26.el9_2.noarch.rpm 972d72190fb35e1df049bd726064d2bca64cd951064df0cf7c3b7fe213f818fa texlive-ctable-20200406-26.el9_2.noarch.rpm 983fb96ce687ed29586cbf3c1e62785a738eba8f5f1333bcba7609dfe73ae3e4 texlive-collection-fontsrecommended-20200406-26.el9_2.noarch.rpm 98ca4203709aa50c9f014b031ff880349338a767bf95720d7dcdb22b30a7ba5e texlive-varwidth-20200406-26.el9_2.noarch.rpm 98d66378c704ec5359913c043df6897194c9d3056734059531d986a4368fd4cc texlive-ucharclasses-20200406-26.el9_2.noarch.rpm 992da7d1a90d7e82f983d8d103454574949c392975a5028283153be2d7ec527d texlive-fix2col-20200406-26.el9_2.noarch.rpm 9a6fa951ff3af7c043fa81a0545cb559c29d101ea85926657df24337b7a2f99b texlive-cjk-20200406-26.el9_2.noarch.rpm 9ab30f817b26993cfebc73ff9825127909cdd9590480d64fe725800cd2c8c855 texlive-lua-alt-getopt-20200406-26.el9_2.noarch.rpm 9ba07e033f95d3b6f85a235672793f8f8541aa4ad52c1cb00bc3f50e39efd458 texlive-polyglossia-20200406-26.el9_2.noarch.rpm 9bb9f67bf304f837bb456633c8f99fc65f067f4c17b826b249cc2771caf79dd8 texlive-pst-math-20200406-26.el9_2.noarch.rpm 9c26e2c0ff332c803b3a23da122c442520a1a18c8cd5b4f932e530f6e62377e4 texlive-bibtopic-20200406-26.el9_2.noarch.rpm 9c59bb26eb3efe1d1b1041a8ecb11eef954b1688699cabd7873626cc70f336e4 texlive-makecmds-20200406-26.el9_2.noarch.rpm 9c7b9c8f1c800866124fc3813f9e4be1d7e870e7e164e3cd8850592b843b4c5a texlive-bigintcalc-20200406-26.el9_2.noarch.rpm 9e302d0bbaeb07d457fad543e62d2671be27e88edc3f392e4362e10a521a445c texlive-ucharcat-20200406-26.el9_2.noarch.rpm 9f711bca193acea38c68a4778d93afa91ad111b4d402dc62268e9738dfb9d7f6 texlive-pstricks-20200406-26.el9_2.noarch.rpm 9f73c2244fb93bed3644634fef708398270401530fdf3d77efaac325146821a2 texlive-luatex85-20200406-26.el9_2.noarch.rpm 9fc44057453c7fb58e24bfad43c77895e7ea9006b3c5c757f57e510a0d9fdc94 texlive-lwarp-20200406-26.el9_2.noarch.rpm a106523b2db8a0c042901e54bbf4a96dce59f95e7e21bdb197c86f8a2fde40ac texlive-arabxetex-20200406-26.el9_2.noarch.rpm a1ecc74e02ea7109e19865560ec4ca76502fca12117fbcd4884f987d23fecca8 texlive-minitoc-20200406-26.el9_2.noarch.rpm a1fa806c139115e902b1b44de9e355909568e4bc8d126162de1af0723a99f97f texlive-epstopdf-pkg-20200406-26.el9_2.noarch.rpm a24e57fae731378f93d64753b3c36866aa372476d87e779bb8652abc92ac8b78 texlive-changebar-20200406-26.el9_2.noarch.rpm a2cfb2ce553d4e2c6b2193f31a4c9235b4032bb4cf1058fb0f0b3b2694b63eac texlive-wasysym-20200406-26.el9_2.noarch.rpm a49f8ae49328b198e59bd5003af64546b389ff7f7cda22e25051ea4fe18375fb texlive-xecyr-20200406-26.el9_2.noarch.rpm a4e0f9ffaf19ecbc44c0929f1450fdf91f0bdb4ba3db2f97a39b64a6aa531f8e texlive-collectbox-20200406-26.el9_2.noarch.rpm a6bdf36c3ddd831f5342d32c05089945f8c6ab7770558fcf810c0da594161329 texlive-pst-fill-20200406-26.el9_2.noarch.rpm a6cf9bed29efd30d5d34d24958192ed816f50d0a14cea00ba3de1c4349c1ca98 texlive-cmextra-20200406-26.el9_2.noarch.rpm a6f4eab2b49c3e688330e9cb4eacfb8559c20126847e590f76b2dfaf06cb7bcf texlive-bidi-20200406-26.el9_2.noarch.rpm a788236424bedca41af1f79f50eacdeb720e018b6aba2784877cf8e919325844 texlive-zapfding-20200406-26.el9_2.noarch.rpm a7c609b1584b777b0f75613b450f3a7462f6985f5f20d9ec3314767975718ea4 texlive-environ-20200406-26.el9_2.noarch.rpm a7f62d2d894f775a5050d19468597190d5f765f66e34aaa229c63df4cdbc575a texlive-sauerj-20200406-26.el9_2.noarch.rpm a89166419f54dbcaab16a161de7050c7d89466e405c4ff9b7237817b8ecf4c53 texlive-xepersian-20200406-26.el9_2.noarch.rpm a8f946f399b5644db2e63328e87f82ce57aa6a58851be40b44b567b50d38e991 texlive-metafont-20200406-26.el9_2.s390x.rpm a95ccbc95d9063206380cbd03205a2796c1cbbba41395d0074b4ac53530a45b3 texlive-jknapltx-20200406-26.el9_2.noarch.rpm a994628d620c87da2b8bbee98906f899a7ce2c58cb1ec6032317f23d64eafd69 texlive-xstring-20200406-26.el9_2.noarch.rpm aa631a121627b7bf4ffea64fdbe7f224c861f47e30b49feb213e44659fba4cb2 texlive-beton-20200406-26.el9_2.noarch.rpm ab7096cc1bc378dd0537da1e8362647ffc555c368766bdcd7ea54fc6fe4c217f texlive-collection-xetex-20200406-26.el9_2.noarch.rpm ac840419a8ddbe63dae9b43dee8d3d293e8e1d6c93df24cf5e4abbcce35241bf texlive-rsfs-20200406-26.el9_2.noarch.rpm acb118774e19d9dea067b1115dbd9ce0a5ddcfb96e3fb62df76185761823f271 texlive-tools-20200406-26.el9_2.noarch.rpm ad2f73894fe407121a2fbd58ac630fb9c5a1cb52c22d640da0535d6b85e9d9a1 texlive-palatino-20200406-26.el9_2.noarch.rpm ad4de7669baf30cb0883f608c50d68c6f44b2fa3bbd1aae6445e06b2a370f79c texlive-tex-gyre-20200406-26.el9_2.noarch.rpm aeb82fc415c53d779ac0c463288c1a13188514d7df67f310235f75369a90f70d texlive-xecjk-20200406-26.el9_2.noarch.rpm afbb55388c2cd8020994439bbe5ebf6a110dd3914c520941758e30ce58a2c023 texlive-ptext-20200406-26.el9_2.noarch.rpm aff5b91bd6a9004e539625f282202b26d035ae11f5aec129243e445c35726f52 texlive-lineno-20200406-26.el9_2.noarch.rpm b09ef9f8d4219daf980a0b896ba90e1cf6695395a8d9daa96d9a16ce719bb245 texlive-courier-20200406-26.el9_2.noarch.rpm b0bb37c1e8c12a2dd4ed2d96a6242c65a4f394a18bd4423d5b916224f378499f texlive-symbol-20200406-26.el9_2.noarch.rpm b0e271c87a04d086336ea0a7e5cca2c8037368005b009b2fdf61a073f2f88335 texlive-listings-20200406-26.el9_2.noarch.rpm b2644ed566d50fec703530a362015f7d7869da15c512288ad7ea2a1544f80f23 texlive-fancyref-20200406-26.el9_2.noarch.rpm b26f6c98727089c7ca668a360e97bd413cf089bee8fd553ac25a443eff1ed0c3 texlive-garuda-c90-20200406-26.el9_2.noarch.rpm b3b86efea0c1174e5f7a18b16ca145b9ffd40e8fd96229372dfbf198f3aca71e texlive-subfigure-20200406-26.el9_2.noarch.rpm b40477d68e6050e924b0840d09a8bd9e2a8bbe3a1c394f3891e39a2d9763f448 texlive-graphics-cfg-20200406-26.el9_2.noarch.rpm b59e0486cc0ce66e731d3fd294e7b1e786c58c242e229cc43e36af43ca6bef97 texlive-xecolor-20200406-26.el9_2.noarch.rpm b5c27b35703c9291e996b5683dd2a4338eb99347b08d851885642aee3ec8a4ed texlive-avantgar-20200406-26.el9_2.noarch.rpm b62b3a35a8c10b1715fb2c3123b3cedf8592cfe3e519ead1dac55f30cd827bf7 texlive-tabu-20200406-26.el9_2.noarch.rpm b677d412315657fb247e375e20c69c57780725d7a35e93f9c51f745267da6210 texlive-ifmtarg-20200406-26.el9_2.noarch.rpm b694c187eda29017cae239a4e4d23a89db7ac6428e4c7b1b6f72f3c03ac4db14 texlive-sansmath-20200406-26.el9_2.noarch.rpm b8667fd2a14f5202781b73f2f4840a19deda45d4e1e8b2772467e1802b5847c8 texlive-qstest-20200406-26.el9_2.noarch.rpm b8884bc438df961d5e145865234fd98342842d7c99491352ff4bab5854dd38e2 texlive-lastpage-20200406-26.el9_2.noarch.rpm b97476a605c9bcd297213aba0c8ed3d02b11216ba7b67b108467c844ba0958f0 texlive-crop-20200406-26.el9_2.noarch.rpm b976c5a19fb610d5b4e4c49e92e9f1a75fc3be91c220e064847195ba6dff5e5f texlive-ncctools-20200406-26.el9_2.noarch.rpm bbd87a80a14c639fbf28bbf460df5f6273b7122169f408c54a729e283283d335 texlive-t2-20200406-26.el9_2.noarch.rpm bbefdc75c9f6abbcc85d9f5fa2bda8e3d2217c7de1b490b96b0e5814c1799db9 texlive-xetex-tibetan-20200406-26.el9_2.noarch.rpm bbfe844cd09eedcd69d59e3e7f5fb343b0b34f51e01dce076832525468afd6b7 texlive-url-20200406-26.el9_2.noarch.rpm bcc54c72132bb389bd4f135e4b0b23abfda2e8b149f8a820b8538bec930b6473 texlive-mnsymbol-20200406-26.el9_2.noarch.rpm bcfff293f7d4cad2a8fc13c308cb068cdf363bd20f5b192d4133c9028f7297f7 texlive-zapfchan-20200406-26.el9_2.noarch.rpm bd9bffd17699364f1e28e7cede697a0ab90a3a586c97c4cf392372d823f4c3a2 texlive-multido-20200406-26.el9_2.noarch.rpm bdf61fbc63647dcf6e6737d9adbc265d56548bbedd6204778428eb24a249e40c texlive-kpathsea-20200406-26.el9_2.s390x.rpm bef0a3622ea5c7190a6f6920b129004b9402f3b5546a7fe89fea2bcc50bbe375 texlive-fmtcount-20200406-26.el9_2.noarch.rpm bf7a1a348d8fa54b21b1cad20802091bb96368bf1bdc758e53a7423a489da8d0 texlive-refcount-20200406-26.el9_2.noarch.rpm bfaa7273a8823096c2d9d7c2d3f7154d17f71c16495fce30edb906bc61395b6d texlive-updmap-map-20200406-26.el9_2.noarch.rpm bfdadd84881312ba74714d45c055e33c4a53ac6ca222b8335160fb9d9cea8e76 texlive-listofitems-20200406-26.el9_2.noarch.rpm bfe7aa707d56fb24359309f115b3203b1e3bb838a8da1e29bcbe52db141fd296 texlive-attachfile2-20200406-26.el9_2.noarch.rpm c0268a1ad17513e8c3175067c0ee96da7799f5c86288a5b9505ffe1d2f5d83fc texlive-hyphen-base-20200406-26.el9_2.noarch.rpm c06d3bf95a1c09008b6486f489eeff6f5c73b97b830d5c5f66304410b1f7a2c2 texlive-grfext-20200406-26.el9_2.noarch.rpm c09829cb06ec24536c06d6cf7305e386aba104c863d6e12dce0c8a1dfe6267ae texlive-titlesec-20200406-26.el9_2.noarch.rpm c12aede70e68b6257c1b5cfab0081468b11dbcdef01e96d9f90ca19b16828827 texlive-obsolete-20200406-26.el9_2.noarch.rpm c27284da6e47df95bc66342c2f8f8bc94b420e16b5d57ea797897ca22080b461 texlive-stringenc-20200406-26.el9_2.noarch.rpm c2b631b43f25221f1cba632456ca9392024314c720b4bd332c18ac61ca9f3e1b texlive-wrapfig-20200406-26.el9_2.noarch.rpm c32bd089646dcaa7de384aac762340f1d64b78854ce62e1cd2c3d35a31223e62 texlive-mdwtools-20200406-26.el9_2.noarch.rpm c33f5cc1ac5070774b78e97dd0bd03de11c599bda637af11658800ebf8de7613 texlive-xunicode-20200406-26.el9_2.noarch.rpm c34b60b33a4991abd1a768f59e7cd855642b519ec4f26d6c746318508e0f239d texlive-fontbook-20200406-26.el9_2.noarch.rpm c35de19520c123444ea2479dcc45d850e4d8b9c202a6267f26f0422d23c7700f texlive-xltxtra-20200406-26.el9_2.noarch.rpm c42d0af0182c90d6d7ed4cb8a7fc2f6c1d8822d767f45c7aedaa10a30af26929 texlive-finstrut-20200406-26.el9_2.noarch.rpm c44450af6c8aed9fd53f4333d42c36928448728f4b0e6485d1fb1cb19a31158b texlive-overpic-20200406-26.el9_2.noarch.rpm c449004aa992502d0611f2423710df0d9e60b47307482975a62266b9481d6037 texlive-base-20200406-26.el9_2.noarch.rpm c542b40eb9a535d24c08fa882bbaf3ae8725d32e30d041de0db1f214e0bcd472 texlive-typehtml-20200406-26.el9_2.noarch.rpm c6301dd36d23b1f7469bbbc728ccd2e1aefad4ae716b94c3f4870ec15f60e620 texlive-lualibs-20200406-26.el9_2.noarch.rpm c6c19286a15dbfad4a0dc0d459e90268b2f891e5fc75c51c741cb8e31c923aae texlive-lm-math-20200406-26.el9_2.noarch.rpm c6c1d3f189713fc86a318a1fa1fed33004d6b3ddf1d9f99e135a320e0bbf707e texlive-intcalc-20200406-26.el9_2.noarch.rpm c6dc24e03fae6ccc0f22d4ca9077b41ca40f565c900ebac4dfa316225b1273fd texlive-chngcntr-20200406-26.el9_2.noarch.rpm c779dcd0f3c3bc08f3eeac43715a3703d08cfe48a64add27c65f39249481e20b texlive-texlive-msg-translations-20200406-26.el9_2.noarch.rpm c80b2730c3e3f5f4dc0487c0e9a156147ba83d800ac88b403735e4df8de552bf texlive-mfnfss-20200406-26.el9_2.noarch.rpm c97519e981c15d85249a4665e6a78b6a17e3dd1ae98147afdf1c9160c59a6a7c texlive-ltxmisc-20200406-26.el9_2.noarch.rpm cb3874aa5a69f6a9be02400c0cda7625fb2f36398da1885591ed4216ce904b09 texlive-trimspaces-20200406-26.el9_2.noarch.rpm cb5f02fabaed3db170dba517927aa2881abd922fcb62da2ba235a180175055be texlive-lettrine-20200406-26.el9_2.noarch.rpm cdfa4f74b9ef1ba60ed8f3f7e5bce6260344a67ec3b3d58a75fff5b8131d567c texlive-textcase-20200406-26.el9_2.noarch.rpm ce2419851b408bfbeb3bde1ebb1ccf1ceafa9dfcfd4ff0de28185eaee1eddf1f texlive-glyphlist-20200406-26.el9_2.noarch.rpm ce3f871d4baaf64376d7af0e86cb3586ed819e93704a3c6eab62511fd996c02b texlive-algorithms-20200406-26.el9_2.noarch.rpm cfdf19bca7b8957a07a5832d8b84c1274d31eb44ef566560218cc9caa1cd50cc texlive-fonts-tlwg-20200406-26.el9_2.noarch.rpm d0389ce08381a30e5965d19e1d874809f7ee6e2c1f1f65699f961016fea9c185 texlive-pstricks-add-20200406-26.el9_2.noarch.rpm d0922a514d40b821bb8232c6ede6ec165f666ebb77da7cdbfa1fc65057eb408f texlive-cmap-20200406-26.el9_2.noarch.rpm d0efb27781c39c88cd223c499166d348b20a9dfc94dec61d4f2eb2fe9e1d35e5 texlive-carlisle-20200406-26.el9_2.noarch.rpm d11a49e6879d84f0f57e4226a19a9ab7d47288cef4d26f7677f4e24789cd3ed7 texlive-translator-20200406-26.el9_2.noarch.rpm d1ea129391755cd0da6541c07177ad0adb2fb5d6507aa43e25df937f8598147f texlive-hycolor-20200406-26.el9_2.noarch.rpm d3d04210017bed54fa5d149033c57b725bc0301c163444c417568d2efdeca2bf texlive-marginnote-20200406-26.el9_2.noarch.rpm d45223237c87a5a123ca6aecbe6e1f35ea8909d8728a3996e0c977bcf9bcb593 texlive-ntgclass-20200406-26.el9_2.noarch.rpm d54f4be5e972dc28e9717dd1d0394bd80ef35c43ea5c3ae4eff61c5d743c948d texlive-framed-20200406-26.el9_2.noarch.rpm d65edc8ca1f5b08153aeb6b27ee487751c33068085fea5dacbba97da7ee27c92 texlive-memoir-20200406-26.el9_2.noarch.rpm d7102774e3345e24563551c8a6c7efec3dbe95c4a8ae2c46329cebf261aff1e5 texlive-arphic-20200406-26.el9_2.noarch.rpm d78ebfd5ee7c1a0d20fc38c53adefe71dcdb36eb38558d2e5423921ab6f0df4c texlive-geometry-20200406-26.el9_2.noarch.rpm d8f22570896f54b31e20a5ad3caba5b2ea7ffba140552cfd000ab79b6f64982c texlive-xtab-20200406-26.el9_2.noarch.rpm da3e07f92cee9ac0e8dbfb20ab635f3cded34f0826a3e8ff836aacf9507799cf texlive-uniquecounter-20200406-26.el9_2.noarch.rpm daf7293d6c22acd50f703dd777705899f6274c79602f10ed305998faf07bba0a texlive-knuth-lib-20200406-26.el9_2.noarch.rpm dbb0385b8055eb00eccf7cf2241759686b80b9d59319783429e2ee573600c2f4 texlive-l3experimental-20200406-26.el9_2.noarch.rpm dbf253a4904b0d83d897d1c3f1e73e07b886fafe052d338d91db9c2598ecc078 texlive-oberdiek-20200406-26.el9_2.noarch.rpm dcc87eab6f90275eefc0130366d1e29523652401e4f64afa6acf38a474e23f24 texlive-eurosym-20200406-26.el9_2.noarch.rpm dd710f4bb041473f6bbe9d0e59c9de761a2239439ace5f82858bc384496153a7 texlive-kerkis-20200406-26.el9_2.noarch.rpm df9ebecfd1b2c28317e5b3bc14af1c60cb8badf7684cb0f5d6a1f1122d2c5777 texlive-pst-plot-20200406-26.el9_2.noarch.rpm e0c764a4cec89b35e2530b79c27a6d109ee7fae022a9731f86f19c650c653a8a texlive-type1cm-20200406-26.el9_2.noarch.rpm e336445d5603c258bfb0894d5d0cdd6336eb8946839bec73859a928d9281e977 texlive-collection-latex-20200406-26.el9_2.noarch.rpm e36099f43145c4a046416a1e234a7728315fa1d1132b3b60b361b2e754c3955e texlive-ltxcmds-20200406-26.el9_2.noarch.rpm e4c4696c172b55275f30b7997dcbdbb41cc3ea47ba31a6626b39ee0a21a5e9d6 texlive-plain-20200406-26.el9_2.noarch.rpm e4ef0dacc1c16718f0e949716e38f34f1d63d6d0862fa2b30efb079a7197555e texlive-index-20200406-26.el9_2.noarch.rpm e5da1ebcb84ab8534dbe685584a475ad92fe5f2f86aa865655341ce5ab1a5a4d texlive-pdftex-20200406-26.el9_2.s390x.rpm e6a1418aeead1b2f89d5ed08566a1ce37fb871b3acf6a73576d3d9849e38c4a7 texlive-pslatex-20200406-26.el9_2.noarch.rpm e8fddce9dd4b3b9a6e72c0ec3adce6d7e37e65bb239d33316b90aabb4023306c texlive-luatexbase-20200406-26.el9_2.noarch.rpm e9074700b3e683591de487127743305509acb35cf79d30f3f6a2cc8cdbb64e5f texlive-xetex-20200406-26.el9_2.s390x.rpm e9336e0f0e644647a8b182aefc924ce25821b50d526515f20a8db5b3bc0e00cd texlive-stackengine-20200406-26.el9_2.noarch.rpm e949aed20e5d9c05d81fa47dbbc1eda8df3bc271d63bd80d846e3905d7a2ce36 texlive-ae-20200406-26.el9_2.noarch.rpm ea833163e167c4cea689aca559ac17064ea92c8167c9b7913bf5f089954bbe8f texlive-ltabptch-20200406-26.el9_2.noarch.rpm ebc583c59d29704135136260c02498dbaf0b83cc591c3af691618ec9c1393e16 texlive-float-20200406-26.el9_2.noarch.rpm ec65454cf4fc6b26ebade1cc1a94a9a9b1423b6dcfcfb59dc371ac4e9cec8ebc texlive-uhc-20200406-26.el9_2.noarch.rpm ec73292376909a7373fb1ac2c13d609c3b92e43dc7437c17602d5f72f82e191d texlive-bitset-20200406-26.el9_2.noarch.rpm ec8e569c4901a722da5ff5091326c9653159ea194b5c53064a39a0ad064940da texlive-natbib-20200406-26.el9_2.noarch.rpm ef9c0285c469a57abf4548a0a2017a0096a5e32031849a3e1cae96759600cc59 texlive-anyfontsize-20200406-26.el9_2.noarch.rpm f044450ae13b444e3f99daeb439cc05d65bf0e12ca13ee10fb5ab41af9693b90 texlive-texlive-scripts-extra-20200406-26.el9_2.noarch.rpm f195b14ed3269e1fdb0148709a1b0cd8c1fb46ca4e674cf251f26fe3a1267ed9 texlive-ifoddpage-20200406-26.el9_2.noarch.rpm f1de9c92edb72c2f88f497aa790afb7111c13dba3f9ff22826b410649add3014 texlive-etexcmds-20200406-26.el9_2.noarch.rpm f26062b88a450d9048f38f81e161b0423a9d13bbd13b9d1be72dda8f213fcf8e texlive-eepic-20200406-26.el9_2.noarch.rpm f3c012ae9c2ea8bb36f5fcf4face7f9cc80e8fe9b8b0097a9cc84c1f3c695c3f texlive-fontspec-20200406-26.el9_2.noarch.rpm f3c8e560ce0a31b0c7605316a9b197efab0c0b8236a3ba5649ea3196bdb0f2d0 texlive-unisugar-20200406-26.el9_2.noarch.rpm f42ea74dcae45f653912fc3126ce1c74b73708a3608d05cab0f6c519c6883011 texlive-xkeyval-20200406-26.el9_2.noarch.rpm f4acf2e8100cac4a0a492bece6ad5bc32236945778dbaa6a97668eba8fe2d9d9 texlive-makeindex-20200406-26.el9_2.s390x.rpm f56f7d858bd36b30663f8220105d6c0ea8669e2d81ffe10d410b7cdc8850f632 texlive-was-20200406-26.el9_2.noarch.rpm f66b5ecadcf835122bd6645dc46e0bed3f3092fc68e7d816b428c17cdf7512d5 texlive-dehyph-20200406-26.el9_2.noarch.rpm f7e6a9d6ea08fc3303ef724e38c5bc85952a3a62b70c5985b81d311b093e235d texlive-unicode-math-20200406-26.el9_2.noarch.rpm f8c4a798a071a20e0ec1ae444e38a759b05d63259ecad67a744bc6316c16abe7 texlive-lualatex-math-20200406-26.el9_2.noarch.rpm f8ee0b5fe1efb7db2d14e977873cbc80867a424f4f6c6599e97d140cdb766fb4 texlive-bera-20200406-26.el9_2.noarch.rpm f959c01b1f69379b26b65991df9b51cd003469169bd3b3d5df794cd2ddcb1ee9 texlive-breakurl-20200406-26.el9_2.noarch.rpm f9b33cc5bda81cee7df5ecdfd0d8aeaed1ae193bb9082d5b400d71824fc6dbea texlive-xcolor-20200406-26.el9_2.noarch.rpm f9e9bfdab36f0e31d5c9fffe7f4258b8d52226da55713c4f58b93e185d52a822 texlive-subfig-20200406-26.el9_2.noarch.rpm fade2d23c084ed47ac24275e60ec0ead00c5490b70a0a9a10005af44a4f06345 texlive-latexconfig-20200406-26.el9_2.noarch.rpm fadf87b47c9586c5f2c7202ca33a8174a74fd3970cb00018df65a97b80aea8f5 texlive-placeins-20200406-26.el9_2.noarch.rpm fb101b046207f755433af8976b7b2c6ea2d1723d0197a61853814552c3e93870 texlive-tipa-20200406-26.el9_2.noarch.rpm fb5314f416b0d1620f9be0ac9831b469f236850246d8b01c3a312b6938f4a224 texlive-grffile-20200406-26.el9_2.noarch.rpm fb7437751da0f1d9b18537fbf3b4964433173661ac6368f5b139dd9d88484234 texlive-capt-of-20200406-26.el9_2.noarch.rpm fd6779eac52f70e0620d6e78c74713d3030107fefcc1c26aa1c9eec1faf2408b texlive-changepage-20200406-26.el9_2.noarch.rpm fdd562d91c1cdd56193c886379dea47b650cb587c3b5b0b499fc7df317fa8d63 texlive-parskip-20200406-26.el9_2.noarch.rpm ff9649c004481c386f9d73f2a44d2176100414159752a25a0f92335b0622c38b ALSA-2023:3711 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281) * libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795) * libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796) * libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797) * libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798) * libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800) * libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801) * libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803) * libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libtiff-devel-4.4.0-8.el9_2.s390x.rpm a91120978a4281883bc7051850da777b94093ddeab7062aa54246c2095f62273 libtiff-4.4.0-8.el9_2.s390x.rpm eb0b491cb603deb7ccc0136c77d5b46e26c8c982a73be07d367e65d8b3bbe440 ALSA-2023:3714 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454) * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default postgresql-server-13.11-1.el9_2.s390x.rpm 194f5e25eb154a4e1da5ab118ea53dedfea88e287653ec2abe9f5bcf8efff89e postgresql-pltcl-13.11-1.el9_2.s390x.rpm 31ea051f455305375e43a30291800285e415083cbc6c6ee935f2ac52b67c71ef postgresql-upgrade-13.11-1.el9_2.s390x.rpm 69460d83199974f920e47bbafd94847de26ececcffd8544052cc9378add26909 postgresql-private-libs-13.11-1.el9_2.s390x.rpm 7325c8ca65ed71608b18dcde0132b0dac273ee435121884ddf1e700855500915 postgresql-13.11-1.el9_2.s390x.rpm 865a800c9b4ef7ed44ff0cbad0ed3499f0ef97cc133cc8cb8b9660fe6bc97056 postgresql-plperl-13.11-1.el9_2.s390x.rpm 9227a7d0e3cd68576999f829fd5abfbe58d1358eb0a4d95a71ecce62807e6808 postgresql-plpython3-13.11-1.el9_2.s390x.rpm b27f7138efda2e8386eb293986b47a74fad262ac2fbd6fb5f464d92f4c4d177e postgresql-contrib-13.11-1.el9_2.s390x.rpm f72dba528e45d4e41a45dbecf4e118bb4a8e1fe1d48444fcdbf284879f654ac3 ALSA-2023:3715 Copyright 2023 AlmaLinux OS 0 1 Moderate

libvirt security update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fix(es): * libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libvirt-daemon-driver-storage-core-9.0.0-10.2.el9_2.s390x.rpm 067b9b558fd0f95df5dd72a516589bc798c0cfe21809324f5be251d919e9c30f libvirt-daemon-driver-interface-9.0.0-10.2.el9_2.s390x.rpm 08ce3a34db5577462d60781e5c3f144f912da271a439d8d2eb630887437ddca7 libvirt-nss-9.0.0-10.2.el9_2.s390x.rpm 0c345f467e14bcab5bcc85a2514a00334ff43b4c1d1836bb6ec9984a97b85cec libvirt-daemon-driver-storage-iscsi-9.0.0-10.2.el9_2.s390x.rpm 1b64fcaa589e6e1e2f8e33019c64971086f326e8d0cfc7174a0d45f7ee29bbcf libvirt-daemon-driver-nodedev-9.0.0-10.2.el9_2.s390x.rpm 1daca10273f82622478754725165225f8d12a7482661f56af2c497e2c41cc72b libvirt-daemon-driver-nwfilter-9.0.0-10.2.el9_2.s390x.rpm 23902d4794c0b8bc81c0c3846896688e641c6d8c42ae454e72f81bfe194a89d1 libvirt-daemon-driver-storage-9.0.0-10.2.el9_2.s390x.rpm 34b18a8a21182dbba3783eae55f4cd1ee8f6e426ce5dd34c2d752ae66f64e14e libvirt-daemon-config-network-9.0.0-10.2.el9_2.s390x.rpm 3c70243e3e918d68cb91d57fb309d754036562e5f287f26fed272f947201e203 libvirt-9.0.0-10.2.el9_2.s390x.rpm 3f100f69c457d36b247a30bc76f7d296c717ca03f48f0b234d9cabd15055d6f5 libvirt-daemon-driver-storage-disk-9.0.0-10.2.el9_2.s390x.rpm 4644994e18a3bd4670a3f84ebc1f4bcbe6e40de576ed2859b4427cde178b23e2 libvirt-daemon-driver-storage-logical-9.0.0-10.2.el9_2.s390x.rpm 4c7e23efe72981f43a02baa7460d4c4463c25f6303c1fe5abf7f979d5a0217ea libvirt-daemon-driver-storage-rbd-9.0.0-10.2.el9_2.s390x.rpm 5f1cd6d5541dee496065c96b47c5cff755a275b85ddd7b4cc9a299ebe29f3494 libvirt-daemon-kvm-9.0.0-10.2.el9_2.s390x.rpm 66a6275a98b26e574609505a16187aaa02f9285837e78971a59a438f5ee8f45b libvirt-daemon-driver-storage-scsi-9.0.0-10.2.el9_2.s390x.rpm 88a4329e226a2cc0591e9a2962d5e6d955a50c0098a195ff982eb06c04717207 libvirt-daemon-driver-network-9.0.0-10.2.el9_2.s390x.rpm 8d7181e184d111a21a651cb9a17037e8b4f72c611794c568c69abfdeac5ea83c libvirt-daemon-driver-qemu-9.0.0-10.2.el9_2.s390x.rpm b6d816515e91831f3817e4a6bd40ebab8b708667f7568b5d4fa09ffbe2583be7 libvirt-libs-9.0.0-10.2.el9_2.s390x.rpm bd4245815a8ea0bb04eb666fd4f64da61b2e0aa36de339b79b972f23ca66d21e libvirt-client-9.0.0-10.2.el9_2.s390x.rpm c9493eed0628b230694ac35a2b62437fa1cf0a59b62cb4a70cee31b48370c179 libvirt-daemon-driver-secret-9.0.0-10.2.el9_2.s390x.rpm ca1a6ed478460ad2d2037a3d22d11df4717fcae78478e43500bb34f038d7def8 libvirt-daemon-config-nwfilter-9.0.0-10.2.el9_2.s390x.rpm d2045bb2c35cad9d55f2436b46c24e11ee55ebe293eb2a6a0f64526ab7bb4259 libvirt-daemon-driver-storage-mpath-9.0.0-10.2.el9_2.s390x.rpm d54c7013fe92d9e953cb8d9897b6ee0ed4e45ae5d60ccc1d3236e13a47d860cb libvirt-daemon-9.0.0-10.2.el9_2.s390x.rpm f247f0c17aae3939505aa4601e4eb7fdb21d77d5eca4edc7f93704e8a2ca4211 ALSA-2023:3722 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650) * openssl: Denial of service by excessive resource usage in verifying X509 policy constraints (CVE-2023-0464) * openssl: Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465) * openssl: Certificate policy check not enabled (CVE-2023-0466) * openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In FIPS mode, openssl KDFs should only allow selected hash algorithms (BZ#2175860) * In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator (BZ#2175864) * In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally (BZ#2175868) * openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c (BZ#2175873) * In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator (BZ#2178029) * In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator (BZ#2178030) * In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests (BZ#2178034) * In FIPS mode, openssl should enter error state when DH PCT fails (BZ#2178039) * In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1 (BZ#2178137) * Support requiring EMS in TLS 1.2, default to it when in FIPS mode (BZ#2188046) * OpenSSL rsa_verify_recover doesn't use the same key checks as rsa_verify in FIPS mode (BZ#2188052) * AlmaLinux9.0 - sshd dumps core when ibmca engine is configured with default_algorithms = CIPHERS or ALL (openssl) (BZ#2211396) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default openssl-perl-3.0.7-16.el9_2.s390x.rpm 1d2c647b0d5a65d437366038b0d4150064d2ef557e8277cff4bbf5036f6fd87d openssl-devel-3.0.7-16.el9_2.s390x.rpm 2af63f0cae9d2ae67e645eea02efe82a7efeb20d083f60b0754e3c29da668cd4 ALSA-2023:3723 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235) * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233) * Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002) * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124) * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194) * kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Intel QAT Update - (kernel changes) (BZ#2176846) * RPL-P IOTG/RPL-S IOTG: cpu frequency issues (BZ#2178857) * In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181727) * Kernel BUG in iwlmvm wifi driver when used Mesh systems (BZ#2186723) * Azure AlmaLinux 9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due to uninitialized current_vmcs] (BZ#2186822) * AlmaLinux 9 blktests nvme/047 lead kernel NULL pointer (BZ#2187536) * Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2187709) * kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188655) * fix page end in filemap_get_read_batch (BZ#2189349) * AlmaLinux 9.2 hwpoison: data loss when memory error occurs on hugetlb pagecache (BZ#2192348) * wdat_wdt watchdog timeout triggered unexpectedly (BZ#2192585) * ice: high CPU usage with GNSS or ptp4l (BZ#2203154) * AlmaLinux 9 "smpboot: Scheduler frequency invariance went wobbly, disabling!" on nohz_full CPUs after long run (BZ#2203178) * Dying percpu kworkers cause issues on isolated CPUs [almalinux-9] (BZ#2203229) * FJ9.2 Bug: [REG] NFS infinite loop of COMMIT call and NFS4ERR_DELAY reply. (BZ#2203335) * perf errors - "event syntax error: 'unc_p_delayed_c_state_abort_core5'" b'_ value too big for format, maximum is 255' (BZ#2207471) * AlmaLinux 9: Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208242) * cifs: backport small patches to bring us close to 9.1 - backport commit aea02fc40a7f cifs: fix wrong unlock before return from cifs_tree_connect (BZ#2209045) * AlmaLinux 9 x86_64, kdump 2nd kernel will randomly panic on "kvm-08-guest25.hv2" (BZ#2210614) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default perf-5.14.0-284.18.1.el9_2.s390x.rpm 0aff593e8aa2d1f7d6cce10a30633f89dc765843d18503516d0601046dde56a3 kernel-zfcpdump-devel-5.14.0-284.18.1.el9_2.s390x.rpm 26130ef4edf4471517dea7850da92209fe47951388189a8956445f46685fc759 kernel-debug-devel-5.14.0-284.18.1.el9_2.s390x.rpm 4593b6bb4a2d0aff49c8177a4fa6fa78092cb67d1d69e4275187d006785c6f86 kernel-debug-devel-matched-5.14.0-284.18.1.el9_2.s390x.rpm 773909698d36f8058b3c567c43a56866aa82ad3eb172d5a8579006e558ae4681 kernel-zfcpdump-devel-matched-5.14.0-284.18.1.el9_2.s390x.rpm 82cee5f53e30945da1150cee655751665845d0e1be312d1571870f5134f76bf4 kernel-devel-5.14.0-284.18.1.el9_2.s390x.rpm b37b1b0017a7284a98c32cc721ca63093d6057c8df3a522efe87ed63f0191498 kernel-devel-matched-5.14.0-284.18.1.el9_2.s390x.rpm b80539573b54a27a3822452f3d770228e3621531349413ba5b98764f0a75f3bc rtla-5.14.0-284.18.1.el9_2.s390x.rpm df1f40324a9ee035849aaee6ab5f5c41603967b223ac365266aa1f9254631e25 ALSA-2023:3923 Copyright 2023 AlmaLinux OS 0 1 Critical

go-toolset and golang security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402) * golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404) * golang: cmd/cgo: Arbitratry code execution triggered by linker flags (CVE-2023-29405) * golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default golang-tests-1.19.10-1.el9_2.noarch.rpm 30ab1bd4291b0272e257958461bb72023bef4257ecd6d4b5eb97a27bd8d6379e go-toolset-1.19.10-1.el9_2.s390x.rpm 35b4ce8315d395edd5b54aa98dd962285930c3c08def06cf39296d2c4ca952e9 golang-docs-1.19.10-1.el9_2.noarch.rpm 71dc9cc489e6edf78787a78b99884deaa694d1d3f821c446c375a4219a2b729c golang-bin-1.19.10-1.el9_2.s390x.rpm ca020de30c6e101886aa981d2400f20acbda9941a0486577f9e7cd2a3d33ff68 golang-misc-1.19.10-1.el9_2.noarch.rpm ce25db99e39e7ce0e75d9c795762a5246ef955db97b3030fdda7c25aeecd0561 golang-src-1.19.10-1.el9_2.noarch.rpm dddbe14e399987dedb35b95a495ec72088fba6d56b01d95ae75c7be4f4d899f8 golang-1.19.10-1.el9_2.s390x.rpm efc62ab99c92b9b5306b574574cd10bad0a74d5c0e6966ce5814e5d6e63638e5 ALSA-2023:4030 Copyright 2023 AlmaLinux OS 0 1 Critical

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default grafana-9.0.9-3.el9_2.alma.s390x.rpm bbd21492756d9835df22af3f096f8e62032c399573b109291e0e7373da2fe9ed ALSA-2023:4057 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219634) Security Fix(es): * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default aspnetcore-targeting-pack-7.0-7.0.9-1.el9_2.s390x.rpm 30e244c6061c2d0a68707d9f049761195f1e1625260f1f16920724a5f6eb4642 dotnet-sdk-7.0-7.0.109-1.el9_2.s390x.rpm 40d8ac2bbf083a7709b926a87b14d921281e66ebd53c5adb826bf96cdc81680d dotnet-targeting-pack-7.0-7.0.9-1.el9_2.s390x.rpm 457e5bd1cafad9be5aa9f7b3cd06f582e6fdeb1c8332a15d75697832d5a03864 dotnet-host-7.0.9-1.el9_2.s390x.rpm 525feb5fc13829d4628fd56359051a540f3a74be9cc39c8fbfa0a85b5045274f dotnet-runtime-7.0-7.0.9-1.el9_2.s390x.rpm 72375260341d5e96d2fcbdd2efda4fbd8a2df04b6f7b57f675dcf86a02ac3bb7 dotnet-hostfxr-7.0-7.0.9-1.el9_2.s390x.rpm a2caf36197640fa8adb1114fd26c4b3b1383dcd734a5a53c12ed923b804346e9 dotnet-templates-7.0-7.0.109-1.el9_2.s390x.rpm ed36d4c6f5473b7e0f6e0797810fab75d53188eb49d7bb094bdd81e46309eca9 netstandard-targeting-pack-2.1-7.0.109-1.el9_2.s390x.rpm f37fe6b82c8171d1da65c7e84d3b14f74e53aa6200d21f9cfffcbf575a9af31a aspnetcore-runtime-7.0-7.0.9-1.el9_2.s390x.rpm f8c3c04dd0f1c0df258df04f2e7ab50ccc827562a6154272a7a5dba6e98e95ce dotnet-apphost-pack-7.0-7.0.9-1.el9_2.s390x.rpm f91ab8d819da9134c90f42d33e3a0167722ac6021078e5b14c2227bf5d133e34 ALSA-2023:4060 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219640) Security Fix(es): * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dotnet-sdk-6.0-6.0.120-1.el9_2.s390x.rpm 282f382d3bbdb7f436fdebbce73136657189c248009f710b7d07196a51e31312 aspnetcore-runtime-6.0-6.0.20-1.el9_2.s390x.rpm 5e8c7d59f8f414518bbeb39182a1dfdb4f06dbd9c5127fc3fde9ceb119d28c11 dotnet-hostfxr-6.0-6.0.20-1.el9_2.s390x.rpm 60a510753fffe52ad21fd6acdb52af3894915578602dc205ae3590b516d68cd9 aspnetcore-targeting-pack-6.0-6.0.20-1.el9_2.s390x.rpm 6159d75b8c037fe6ccb7d0f8f393be26e21134bb2077e80febd3fce7bf968e5e dotnet-runtime-6.0-6.0.20-1.el9_2.s390x.rpm 6587a7450a0435b851decf9ad99fe58fbe00360ddc04ca5acd4efd189c7c659a dotnet-apphost-pack-6.0-6.0.20-1.el9_2.s390x.rpm 6d63ee7bfd273c18be1ff4446dc91d7cf5430c1613c40fd7193d01d01fa5b376 dotnet-targeting-pack-6.0-6.0.20-1.el9_2.s390x.rpm 8a339b8fe26c67bccf8e19c2599684ca842a6c28c5c575a4980d2e06cd27b34e dotnet-templates-6.0-6.0.120-1.el9_2.s390x.rpm f6cb136dac98cc678ffd53e7925c269ca9fca8f4b55091a0e466a0548411390d ALSA-2023:4064 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Security Fix(es): * Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202) * Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211) * Mozilla: Fullscreen notification obscured (CVE-2023-37207) * Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default thunderbird-102.13.0-2.el9_2.alma.s390x.rpm 313c2cbd149ac89b99e382da31f087366f89fc160980f5965e77f523092b3dd9 ALSA-2023:4071 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.13.0 ESR. Security Fix(es): * Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202) * Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211) * Mozilla: Fullscreen notification obscured (CVE-2023-37207) * Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default firefox-x11-102.13.0-2.el9_2.alma.s390x.rpm 3ca59fdf4dc4cf2505ba8990fa8d2796c7c60b22da8a2e20fc81a7d4a8f0619f firefox-102.13.0-2.el9_2.alma.s390x.rpm e9a863faaad3f99ff8325e9eedcfa4921bcc2ea4594b60fb7d793522f36020ec ALSA-2023:4099 Copyright 2023 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default bind-9.16.23-11.el9_2.1.s390x.rpm 1867b3c2d4bb588afd803f3e31a65cf3bdb9b59dbd1543642303aa1832373e91 python3-bind-9.16.23-11.el9_2.1.noarch.rpm 3c62bdb3bc6fac3e5332f94bff3875dd89419e9849d8b1de13eea0f4ed4f1bdc bind-utils-9.16.23-11.el9_2.1.s390x.rpm 410cada0ea4fae31df19a6e5e43e68795b42ef9784c4e91231eb8295a5199ea8 bind-dnssec-utils-9.16.23-11.el9_2.1.s390x.rpm 44c69fafb23cb274eeea1a525800490ee5ad28dda783bdee5878f443ad9f541d bind-license-9.16.23-11.el9_2.1.noarch.rpm 6cc24f3f2bd69377e9a6976c76a03a16df5d3afb4e73571daf17fb098ba7cf6a bind-dnssec-doc-9.16.23-11.el9_2.1.noarch.rpm 9e8ab6697ea398f41342da502c9130cc4d73503f0922c0d3ed0a6aa39285ae73 bind-libs-9.16.23-11.el9_2.1.s390x.rpm dd8f638bc5bea2897534b4634b30cc548f55f844981fb4933cdd47da8a615300 bind-chroot-9.16.23-11.el9_2.1.s390x.rpm fc11bae2841f08ac6ffdf2a2e92c8c783a7104e94c387124f81ab4360e29d0a0 ALSA-2023:4158 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-9] (BZ#2223100) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default java-11-openjdk-headless-11.0.20.0.8-2.el9.s390x.rpm 209a50e2b8ad4894460af0813aea4affa7202ad5c99e651d698f4506609cc32d java-11-openjdk-demo-11.0.20.0.8-2.el9.s390x.rpm 3e07e351d3d08ceaa222c02e8154b48266373cd483a9c85bf9c32b80a728132a java-11-openjdk-11.0.20.0.8-2.el9.s390x.rpm 6806b35ed5dc15432384f57b6ebb865a7e3a355a539bb29c09a902fe061433cb java-11-openjdk-src-11.0.20.0.8-2.el9.s390x.rpm 72f03c64ee4583fd28aed919124871bbfb21ccac86bf8cd06e5651e7350c9098 java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el9.s390x.rpm 76f945c8e02275e30bcf2de88441369586ab4bc2d73241527e6b8dac66c3c739 java-11-openjdk-static-libs-11.0.20.0.8-2.el9.s390x.rpm 7d4262568c30d422185b07eea5331ff3d0c2a029621ecbbde1e94931b2bb8d12 java-11-openjdk-devel-11.0.20.0.8-2.el9.s390x.rpm aea3851118a7c4b8ce5f8c5dd8174102f6dfcc4d04b28b599f2cd2144f2420a6 java-11-openjdk-jmods-11.0.20.0.8-2.el9.s390x.rpm bc0a17fec1502e95b89ce0a9d3abb2a3e884269d166b493afaa9a4ea88e8e5b8 java-11-openjdk-javadoc-11.0.20.0.8-2.el9.s390x.rpm f6e8d9644b085c928dfb912ac74d11d25d67f340e225e95488b2ad6991bcdb32 ALSA-2023:4177 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) * OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221653) * Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-9] (BZ#2222852) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default java-17-openjdk-javadoc-17.0.8.0.7-2.el9.s390x.rpm 05b51ef8ffec46b19bf6f030bca1f86d5cb5dc5e7a6e39ca93184ddab99eab7d java-17-openjdk-headless-17.0.8.0.7-2.el9.s390x.rpm 11142efd15ee89cf6aa113847d033cd2a486903001c915ada8253b6b66348a92 java-17-openjdk-17.0.8.0.7-2.el9.s390x.rpm 1ede67e22d29c46fdabb22b464a7b29bf51ca8bcba42d9f1386c71fef73e2475 java-17-openjdk-devel-17.0.8.0.7-2.el9.s390x.rpm 30dd29e83f715ba055df52f58b6e4d9277428da20ca4ffa7a565523fd0c3adb7 java-17-openjdk-demo-17.0.8.0.7-2.el9.s390x.rpm 7fa7db4a7231a0d6bc8eff37f89539547d6759c80096a291c92a8beeff7886ae java-17-openjdk-jmods-17.0.8.0.7-2.el9.s390x.rpm 83e5b0de704b43a637c13a4297b3703287a51adf81dbfc4da19c3de197fc5b7f java-17-openjdk-static-libs-17.0.8.0.7-2.el9.s390x.rpm afb9cfe8abfc703a22511b05b76c03c7c62e45afe8066593e3db321dab07f9a9 java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el9.s390x.rpm c68084001a2eaf611b11232410cfb6c277e22a94386007ab954ddba4ed5f4d24 java-17-openjdk-src-17.0.8.0.7-2.el9.s390x.rpm cf2d95dd19a71df8fceebd378f024329f2f4a499d73acdb7280ac211aaf29b20 ALSA-2023:4178 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [almalinux-9] (BZ#2220662) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default java-1.8.0-openjdk-1.8.0.382.b05-2.el9.s390x.rpm 08d92f3269851c36915fc6a1fa4f43f8d4440ced71d5cd782112de31f40fa0f4 java-1.8.0-openjdk-devel-1.8.0.382.b05-2.el9.s390x.rpm 12783203f8ae913c6da115cf6170cdace04d9172b7b85bedb8f4c8891c60f6c9 java-1.8.0-openjdk-javadoc-zip-1.8.0.382.b05-2.el9.noarch.rpm 629b4e0b7e9dcdd7422347c79f5b1761e2c5e855465ad44af7692d12bb836326 java-1.8.0-openjdk-demo-1.8.0.382.b05-2.el9.s390x.rpm 7aa0b84d96f3ba63760a7e58716018350fe47e90c2a65055727d6b6f6ab002c2 java-1.8.0-openjdk-headless-1.8.0.382.b05-2.el9.s390x.rpm d1f8eebeb2e950b10609f0b3bcc204a42a5429b0e961c189c5627b2099f34451 java-1.8.0-openjdk-javadoc-1.8.0.382.b05-2.el9.noarch.rpm da780a2487f6f8cecd6c76fc7272e62d9f49158df6f8e23dd5b1d1ef9fc2774a java-1.8.0-openjdk-src-1.8.0.382.b05-2.el9.s390x.rpm fff2d2cdbee20bcdf43bbb316d0bc9e88c60f1ceb5cd257093cbe20ebfeed846 ALSA-2023:4201 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-32435) * webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2023-32439) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default webkit2gtk3-jsc-2.38.5-1.el9_2.3.s390x.rpm 58f6390a0132c6b4c5915e2df00c551c0dddb0f907ac33168d1bcef4002652f6 webkit2gtk3-devel-2.38.5-1.el9_2.3.s390x.rpm 62a80b6217e8a242ca87134db06bc19cdd82322513b0f6248565693549b2b5f0 webkit2gtk3-jsc-devel-2.38.5-1.el9_2.3.s390x.rpm ede140df018e1a5952e07c623d26e0edc626af4edba8265012ece0b61345ad54 webkit2gtk3-2.38.5-1.el9_2.3.s390x.rpm f237a91bcdd90fea25b68ff437c6ca9785cf5ee25314b3716942bbe99f5fe8e7 ALSA-2023:4325 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security and bug fix update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * The trust relationship between this workstation and the primary domain failed (BZ#2223600) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default samba-client-4.17.5-103.el9_2.alma.s390x.rpm 991c75f56ac447639849ae61b4945da4ac9ab3b3f181226f8f9da5fe3e7d84d6 samba-vfs-iouring-4.17.5-103.el9_2.alma.s390x.rpm ac45ece527d38e61f7442c002b1d90da365fa5615aba8e54420f1212fb9a3e72 samba-krb5-printing-4.17.5-103.el9_2.alma.s390x.rpm ce41e8d277393be78a14d0f4b6e77eefb5ec38d413a386b42a9e0d66a9a680c6 samba-winbind-clients-4.17.5-103.el9_2.alma.s390x.rpm d5e05c538f4b99a41fa03f57c034893992da0b318a157b0be64d713db1e2f8cb samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.s390x.rpm dfd89f49b11c9ea1877b47f79878db79ed3bacfe98d171371b61741fd7c4c795 ALSA-2023:4327 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454) * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default postgresql-pltcl-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 04a3c5f81f1e807ca83e9c57116515783de93a31ab50b43e6510372cc6bd8ea7 postgresql-test-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 0a2b5dfcd2a801e35d732760da0d7ca24b742baa46f0b48e1d7cd05f9b7284a7 postgresql-static-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 24bda85a265036c1587cac8f84759bf74df293273a6c3f28d2dbe4835146780c postgresql-upgrade-devel-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 40373dabb70ce7b0a42291f5103923146e775646f3c3401acd085e3112b97f6a postgresql-docs-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 5fb2d3804a4eb9f790bfe81b056de9c39de1938dc59e48278e6b5d795a3e05bc postgresql-contrib-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 6429e121c2f8c06746650ba1fba9e0360d2c969c603f411be8811910aced97e6 postgresql-private-devel-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 7932984f3dfef0405e506de594b813ba52fd811446f5bd541f3648600d67bf56 pg_repack-1.4.8-1.module_el9.2.0+22+09653793.s390x.rpm 8aa663b5c2ff175148a949b30c8b031b034134291fa2b86fad010de3264ce975 postgresql-plpython3-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 8b3daae5d739aa2b82c8026a801aba1fa8cb84a0655aa7ca5f773c1f81848605 postgresql-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 9616ccb4df16fc5f5042057d98bfbbc46a59882e6f105162a7e2b19a02b2de82 postgresql-server-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 994f31322cfbd34bd4f37351b2a92c8e166ba29e90f2927535ca01c2cf37219f postgresql-server-devel-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm 9eb4d79923c449cefa1cc5a88ecfefa097951044abeb546d5cffe5b496cd0cc6 pgaudit-1.7.0-1.module_el9.2.0+22+09653793.s390x.rpm aae4db5a7b2a459bedc06107e043df328af5aba310f7377482a759ca6f274258 postgresql-upgrade-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm bbcefb3722a303d01cf3ceb97ea34557cb82800e73c86c92f823c1d8c65bfb40 postgresql-private-libs-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm bd9033a244b7e5608987bca59e5bfa1a246b2c693bf35f3a5ae85c07ecec3c61 postgresql-plperl-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm c4e64a13de71baa45b8f7f35c9f84c0795de7bab7da1a8976e24573944f1f45b postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.s390x.rpm ed411af5e135cda227ddf7b810e4e04e1e6d923ead9a5300a03d167542d996c9 postgresql-test-rpm-macros-15.3-1.module_el9.2.0+32+f3c125b5.noarch.rpm f48cc577d80b43cbc2f817ed08da4cdadb58b7d207b0158ec7be5f3ee3ee21b6 ALSA-2023:4330 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The package has been upgraded to a later upstream version: nodejs (18). (BZ#2223314, BZ#2223316, BZ#2223318, BZ#2223319, BZ#2223320, BZ#2223354) Security Fix(es): * nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581) * nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588) * nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589) * nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nodejs-full-i18n-18.16.1-1.module_el9.2.0+31+cbae0c8e.s390x.rpm 4a01168d419ea9a4e591d6edc6ae056aa40e63eb2e5d6c2b433bc275547ec322 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-docs-18.16.1-1.module_el9.2.0+31+cbae0c8e.noarch.rpm 8c3fa3cb42ef5df1bf9ca20ec5f9cc2c56e702231b236e37670681e241c5fa63 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 npm-9.5.1-1.18.16.1.1.module_el9.2.0+31+cbae0c8e.s390x.rpm a4c535a4c3185c88b10322976802ce7e612822365c5c3a5b58fdea8722167541 nodejs-18.16.1-1.module_el9.2.0+31+cbae0c8e.s390x.rpm a874b6031ba6c67adb0ef0c2d8f6d2d1910b26ef507493bb57b1a44225886cdd nodejs-devel-18.16.1-1.module_el9.2.0+31+cbae0c8e.s390x.rpm f16e2d023963348428566819d3d1b451c1a97f64a046bf36378f82e16631f031 nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d ALSA-2023:4331 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The package has been upgraded to a later upstream version: nodejs (16.20.1). (BZ#2223334, BZ#2223336, BZ#2223338, BZ#2223340, BZ#2223342, BZ#2223344) Security Fix(es): * nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581) * nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588) * nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589) * nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default npm-8.19.4-1.16.20.1.1.el9_2.s390x.rpm 861216e89b1f98f6cd920569310cd24a31f8115a2b9a12357b65dbd7c35d7f07 nodejs-libs-16.20.1-1.el9_2.s390x.rpm 909f71b193bc086f03b2bb43e1da9f84c57230faebecca84fb194afeaaaa275a nodejs-16.20.1-1.el9_2.s390x.rpm bb64757b7a7f0e9bb5f096c6d68843ecc94dce352ba5d146d8d2ef2468736396 nodejs-docs-16.20.1-1.el9_2.noarch.rpm e06d71fd417fd39b1765657dd8cc90ec19f42cbe1e479373f337e9e8c57df2df nodejs-full-i18n-16.20.1-1.el9_2.s390x.rpm e3172f15aa21711e39b09948882dc9bfd007809609533a20066db760416bd81e ALSA-2023:4349 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484) * libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libxml2-devel-2.9.13-3.el9_2.1.s390x.rpm 9269127b0ca52804269b8c8e46acfaf1d87c88470bc6de2a942bdf7c92b6d1a6 ALSA-2023:4350 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-requests security update

The python-requests package contains a library designed to make HTTP requests easy for developers. Security Fix(es): * python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3-requests+security-2.25.1-7.el9_2.noarch.rpm 3e24ebe477beb77a17f2aedb06e9312bef3771af9a0e11266b05774485bf9e76 python3-requests+socks-2.25.1-7.el9_2.noarch.rpm 8a27ca1c7eebbfd292640cf4d76adeeb9487862fd39ca3124cd03898c70da5e6 ALSA-2023:4354 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321) * curl: more POST-after-PUT confusion (CVE-2023-28322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libcurl-devel-7.76.1-23.el9_2.2.s390x.rpm e8cfbbf97a6cc95a64a419730e7cb7d4e66a6cdbcd6283e406e3c5c226d4c9d4 ALSA-2023:4377 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090) * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788) * kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869) * kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458) * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default kernel-debug-devel-matched-5.14.0-284.25.1.el9_2.s390x.rpm 316f77bc8eab3491aacba7d37693bda77eee46a6408783f51954d11052417d13 perf-5.14.0-284.25.1.el9_2.s390x.rpm 450fae403786506b21160356026b69f41d7732b5e18869180b5b1bbca5e66153 kernel-debug-devel-5.14.0-284.25.1.el9_2.s390x.rpm 4ab85216bca5e915589322b7d19656aa1fb51d4d60a8c3c39794270eb90de863 rtla-5.14.0-284.25.1.el9_2.s390x.rpm 5e28261fc3171839d3042e3a3201d4a24f34a175d0729b68d9175291b72e1284 kernel-devel-matched-5.14.0-284.25.1.el9_2.s390x.rpm 71436fe47f87c0ac6933c8002b3c1811041c7bb0e531af9646ae25dd5f5f380a kernel-devel-5.14.0-284.25.1.el9_2.s390x.rpm 879963917432c72897ea325b4e7fa05b8d3914fbbc435be3c4eee820b9378ee9 kernel-doc-5.14.0-284.25.1.el9_2.noarch.rpm 8eba8be1d7bcfa73611b13790706a35b22ba614e1fbfffd60e60f6451ea1255c kernel-zfcpdump-devel-5.14.0-284.25.1.el9_2.s390x.rpm a6f412e2e1c5fb8f38cdcb4fd7fd47fb13d2f02723099e3841886d1d65ef4427 kernel-zfcpdump-devel-matched-5.14.0-284.25.1.el9_2.s390x.rpm c6551b899463faa0b9c58423028798386e1050033c5a6ade2b678c6339939427 ALSA-2023:4411 Copyright 2023 AlmaLinux OS 0 1 Important

cjose security update

CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE (CVE-2023-37464) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default cjose-0.6.1-13.el9_2.alma.s390x.rpm 2c4b5ba1acd58f94e4d1d529c4e323138c97ae107b281a1fbede79cad62d33b0 ALSA-2023:4412 Copyright 2023 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default pam_ssh_agent_auth-0.10.4-5.30.el9_2.s390x.rpm 43051f96993fbc9680fba6144a724eafb3c144ebdde352ab2ebd66834adcf41a openssh-askpass-8.7p1-30.el9_2.s390x.rpm 8a66dba2f6f84368086a553ff7a3ab47425658d48e391f5500c8e739b06641c9 ALSA-2023:4462 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.14.0 ESR. Security Fix(es): * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045) * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047) * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048) * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049) * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050) * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056) * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057) * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default firefox-102.14.0-1.el9_2.alma.s390x.rpm 45e861c6a706802294e4a762890059b9e537e1eefb41a906e366775ec3f20a91 firefox-x11-102.14.0-1.el9_2.alma.s390x.rpm 776763558c8da966849330725ec838e1537dabc2506c2784fc8d4a8a3acbb283 ALSA-2023:4499 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.14.0. Security Fix(es): * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045) * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047) * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048) * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049) * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050) * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056) * Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057) * thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417) * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default thunderbird-102.14.0-1.el9_2.alma.s390x.rpm 51072918e69661c5e40bf661af9e382823c8fb2ec0ec6f438b8e24a19b8a13fd ALSA-2023:4569 Copyright 2023 AlmaLinux OS 0 1 Moderate

dbus security update

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fix(es): * dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered (CVE-2023-34969) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dbus-daemon-1.12.20-7.el9_2.1.s390x.rpm 5419f62d4e6c2073623710c778fa993db9e1280fcc6f666b68ed91cb58fbeb7d dbus-x11-1.12.20-7.el9_2.1.s390x.rpm 60b0151501857d6facc190ba34a28ee9bf934c7252804e051bd7301bbc2b2052 dbus-devel-1.12.20-7.el9_2.1.s390x.rpm 925e7250a05c75f5754e603b03e027d7df8fea8ae6e630cbe322dcdeb8c4ae69 ALSA-2023:4571 Copyright 2023 AlmaLinux OS 0 1 Important

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: memory allocation hazard and crash (CVE-2023-38403) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default iperf3-3.9-10.el9_2.alma.s390x.rpm 2a454df992975f1ed87d6ecae65f638f500e94066dcadf40bd4a6230da332b44 ALSA-2023:4634 Copyright 2023 AlmaLinux OS 0 1 Important

rust security update

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. Security Fix(es): * rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default rustfmt-1.66.1-2.el9_2.s390x.rpm 085d942818b2216e8023dc04b054892514a6ba22966e287e688b6637ed8817c4 rust-src-1.66.1-2.el9_2.noarch.rpm 1facb7484f74dbb22012883cfc6ee052b7e533e636fbde7d657d6534cc802b6d clippy-1.66.1-2.el9_2.s390x.rpm 22ff015cfc6a5afd2bda6eca1786757a1087258dcb5d6c4c9ae1f174f97fef43 rust-analysis-1.66.1-2.el9_2.s390x.rpm 3b0cd8b5182f7c2c6c11132f4b7f03d3ab542c73a89c70418b11f2d3b80ad76e rust-toolset-1.66.1-2.el9_2.s390x.rpm 45ef9fed21f42f33dd5b78aeca7c19ecbd8e02900fa66f3e3f4fc4f35df999c3 rust-std-static-wasm32-wasi-1.66.1-2.el9_2.noarch.rpm 60459374ae943f9914cbd8a14ee1b4e19b843661a50eeba370c0663d8df56a73 rust-lldb-1.66.1-2.el9_2.noarch.rpm 61a689c097cafd7e8275c8a5c27000e3fdacdabeac111935ece27faff7583904 rust-std-static-1.66.1-2.el9_2.s390x.rpm 6abd43903b7a55dd433cf0d54ceebbb621a4daaa83e76a5b02900f5df23ca223 rust-gdb-1.66.1-2.el9_2.noarch.rpm 6df55647414454c1ec1e8ea2510536e446da01d792d336812a0540265a97521b rust-analyzer-1.66.1-2.el9_2.s390x.rpm 7a10ab767b0a07855bdf07b1a61bec39d8f8bd89fb9cd7e0a6582c9d189bf669 rust-1.66.1-2.el9_2.s390x.rpm b68e5db10f908a7156ccfdda0af3cad7375b86142d1a7c24c6dcfdbc2e0f8f24 rust-debugger-common-1.66.1-2.el9_2.noarch.rpm c08735b6178beb86b9405fdbb11dac9b0a71a0271459b4073745461efeba5ecd cargo-1.66.1-2.el9_2.s390x.rpm c55e8755666e7e1ce2b93b508b5ab09990f0f93db55b1b4fdd29e8c8a6f79161 rust-std-static-wasm32-unknown-unknown-1.66.1-2.el9_2.noarch.rpm f1c83991316d5b6218e5af9e5d0f9e18b71196ddca8fc9abb06849c2ca8d6616 rust-doc-1.66.1-2.el9_2.s390x.rpm f4b90482b1cf49b481ae04e9102a6f16f8e7b7845d7146592df18435996da2b0 ALSA-2023:4642 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10. Security Fix(es): * dotnet: RCE under dotnet commands (CVE-2023-35390) * dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dotnet-targeting-pack-7.0-7.0.10-1.el9_2.s390x.rpm 2516c1e1ea6ec76881a75d6d84f1671ce226238d8d6fddfd128bcdc2b963924c dotnet-hostfxr-7.0-7.0.10-1.el9_2.s390x.rpm 266f473bcbb93a638606e1b684427e505a76df108e223607467c7323b2b8795b dotnet-templates-7.0-7.0.110-1.el9_2.s390x.rpm 54cfd686d0baf5c07fefd7e394768a09dd7fe49d7370f74a781222490f137577 dotnet-apphost-pack-7.0-7.0.10-1.el9_2.s390x.rpm 76b155a168e34bbc095a5dfce3902ad3a2f2aebaab2be07d4f4601b045f061af netstandard-targeting-pack-2.1-7.0.110-1.el9_2.s390x.rpm 7803fcd04268f8c88cf56a78baeae558a7dde7c009e2f5190097ae44177ba0e9 dotnet-host-7.0.10-1.el9_2.s390x.rpm 878263abd4cb479c8be363b67b646b67d31a1ce22753a2b20dc80aa075159b36 dotnet-runtime-7.0-7.0.10-1.el9_2.s390x.rpm a3461d6552354d5f1ab0a4b1591d7595183e3e13673add50bb7caad63967c0a1 aspnetcore-runtime-7.0-7.0.10-1.el9_2.s390x.rpm a761635823f56f74c144c4e80707b27375aad016a8eaa6f70bd64e3332b12bb3 dotnet-sdk-7.0-7.0.110-1.el9_2.s390x.rpm ac4b49a983d6bdee91f765de410dd31354db2ffb2d47e781927c6348bad6f403 aspnetcore-targeting-pack-7.0-7.0.10-1.el9_2.s390x.rpm edd812d0211687ee7ba785954139ebb5dbf0d20546ec1c42fb439ddf8bce1a84 ALSA-2023:4644 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21. Security Fix(es): * dotnet: RCE under dotnet commands (CVE-2023-35390) * dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dotnet-runtime-6.0-6.0.21-1.el9_2.s390x.rpm 19a6228aed82825e5ebaed390228a5d0dad2ddbfe7baec186f8ad88ac836b267 dotnet-hostfxr-6.0-6.0.21-1.el9_2.s390x.rpm 2f54c3a4347e4e45c5866ef3b76f3b3f2cbf441a2aaeabd6922555e525604d2f aspnetcore-runtime-6.0-6.0.21-1.el9_2.s390x.rpm 7f6242082a40427e4f8a2df0c413c25c32e74f9b3c8326f064f510be3cb7c78e dotnet-apphost-pack-6.0-6.0.21-1.el9_2.s390x.rpm c1564a58ba81408a5aff5f7c5704a46d4c2742e1bf58d828ef5accc0f27966e3 aspnetcore-targeting-pack-6.0-6.0.21-1.el9_2.s390x.rpm c5ccd53732b30c8204ffd391be5d755d6fd7b6c11d7997fc4f2781301002ba4c dotnet-sdk-6.0-6.0.121-1.el9_2.s390x.rpm cb53690296fa8a3575ecf27c3be95044c97dbce8196bbc2bc63590a26cfd2689 dotnet-templates-6.0-6.0.121-1.el9_2.s390x.rpm e31f2f3abc2e56cee761bc4b9a74439dc12e4778190b41151c45a016376996a9 dotnet-targeting-pack-6.0-6.0.21-1.el9_2.s390x.rpm e74db3ed894143ba9f23c1302c6a34b1916c6e1476b345a6f1afd9f300c1acde ALSA-2023:4838 Copyright 2023 AlmaLinux OS 0 1 Important

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Information leak through Cups-Get-Document operation (CVE-2023-32360) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default cups-lpd-2.3.3op2-16.el9_2.1.s390x.rpm 50fef411e2e5749e86fe20732aab36c7db8fb5f499d92a539db557a156e78a2b cups-filesystem-2.3.3op2-16.el9_2.1.noarch.rpm aa04bc93b6930f3be08d7fcef1b901e910e5638414afe1eeed997ed3360b6477 cups-client-2.3.3op2-16.el9_2.1.s390x.rpm ae0ea52d70da78b0cac5e0dd2a6bf4d74bfe8aacd97aced582157fbdd302c721 cups-ipptool-2.3.3op2-16.el9_2.1.s390x.rpm bf159a7f1fee251152d22538fb5209c02c7c52404341112313030e3d0a421e5d cups-devel-2.3.3op2-16.el9_2.1.s390x.rpm c6e017fd31dcfb36495aa29153ad8bf22f2f032963b8c0ad9658b92f842ad54e cups-printerapp-2.3.3op2-16.el9_2.1.s390x.rpm eeb0ec7b8791c80c3493f14c6543d8e9e6cb726366b9d6b696634606c45d93aa cups-2.3.3op2-16.el9_2.1.s390x.rpm fd3a2aa026490ae695189069bd6bf6afb23bf1b3d56dad422f1070e3580c4e9a ALSA-2023:4955 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.0. Security Fix(es): * Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573) * Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574) * Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575) * Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585) * Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051) * Mozilla: Full screen notification obscured by external program (CVE-2023-4053) * Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578) * Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580) * Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581) * Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default thunderbird-102.15.0-1.el9_2.alma.s390x.rpm 7079fe64c1163769b300ef855b4be9bd2bf1494ca36e086adb575649600099a0 ALSA-2023:4958 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.15.0 ESR. Security Fix(es): * Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573) * Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574) * Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575) * Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585) * Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051) * Mozilla: Full screen notification obscured by external program (CVE-2023-4053) * Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578) * Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580) * Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581) * Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default firefox-102.15.0-1.el9_2.alma.s390x.rpm 30184df5b5ca0545da3fe878fa0a7dfd0e02083f12b251a57fd6268f26eca72e firefox-x11-102.15.0-1.el9_2.alma.s390x.rpm ab29a757d91ed9d6b429bf9c6d0ceab5ffee3aaebd8d7137098a43a1eabf17bd ALSA-2023:5048 Copyright 2023 AlmaLinux OS 0 1 Important

flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files. Security Fix(es): * flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default flac-libs-1.3.3-10.el9_2.1.s390x.rpm e1a97f4cdf3f37f2fe30c92a495aaab1c57b68e79c81ce95f6da803ba3c181e2 ALSA-2023:5069 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel (5.14.0). Security Fix(es): * kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390) * kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610) * kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776) * kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004) * kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147) * kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248) * kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001) * kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637) * hw: amd: Cross-Process Information Leak (CVE-2023-20593) * kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [Intel 9.3 BUG] [SPR][EMR][FHF] ACPI: Fix system hang during S3 wakeup (BZ#2218026) * [Dell 9.2 BUG] Monitor lost after replug WD19TBS to SUT port wiith VGA/DVI to type-C dongle (BZ#2219463) * rtmutex: Incorrect waiter woken when requeueing in rt_mutex_adjust_prio_chain() (BZ#2222121) * AlmaLinux AWS ARM Instability During Microshift e2e tests (BZ#2223310) * AlmaLinux 9.x updates for SEV-SNP guest support (BZ#2224587) * Lock state corruption from nested rtmutex blocking in blk_flush_plug() (BZ#2225623) * bpf_jit_limit hit again - copy_seccomp() fix (BZ#2226945) * libceph: harden msgr2.1 frame segment length checks (BZ#2227070) * Temporary values used for the FIPS integrity test should be zeroized after use (BZ#2227768) * Important iavf bug fixes July 2023 (BZ#2228156) * [i40e/ice] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228158) * lvconvert --splitcache, --uncache operations getting hung (BZ#2228481) * perf: EMR core and uncore PMU support (BZ#2230175) * NVIDIA - Grace: Backport i2c: tegra: Set ACPI node as primary fwnode (BZ#2230483) * NVIDIA - Grace: Backport i2c: tegra: Fix PEC support for SMBUS block read (BZ#2230488) * [Hyper-V][AlmaLinux 9]incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230747) * Kernel config option CONFIG_CRYPTO_STATS should be disabled until it is enhanced (BZ#2231850) * [AlmaLinux 9][Hyper-V]Excessive hv_storvsc driver logging with srb_status SRB_STATUS_INTERNAL_ERROR (0x30) (BZ#2231990) * AlmaLinux-9: WARNING: bad unlock balance detected! (BZ#2232213) * NVIDIA - Grace: Backport drm/ast patch expected for kernel 6.4 (BZ#2232302) * [Lenovo 9.1 bug] AlmaLinux 9 will hang when "echo c > /proc/sysrq-trigger". (BZ#2232700) * [AlmaLinux-9] bz2022169 in /kernel/general/process/reg-suit fails on aarch64 (/proc/[pid]/wchan broken) (BZ#2233928) Enhancement(s): * [Intel 9.3 FEAT] cpufreq: intel_pstate: Enable HWP IO boost for all servers (BZ#2210270) * [Dell 9.3 FEAT] - New MB with AMP Codec Change on Maya Bay (audio driver) (BZ#2218960) * [Lenovo 9.3 FEAT] MDRAID - Update to the latest upstream (BZ#2221170) * [Intel 9.3 FEAT] [EMR] Add EMR support to uncore-frequency driver (BZ#2230169) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default kernel-debug-devel-5.14.0-284.30.1.el9_2.s390x.rpm 0d15ada8f542210c416728688369b839aca8c87fe2597a8d32ad65b3e5478e95 kernel-zfcpdump-devel-matched-5.14.0-284.30.1.el9_2.s390x.rpm 18e3de1f39e69da9b83ea66b8563f7b4ee444240124ee25e10faebae23f34ef1 kernel-zfcpdump-devel-5.14.0-284.30.1.el9_2.s390x.rpm 59c6f1783f5d236fe834f9453123d8ce561b2d78b6b014775a7db08625818854 rtla-5.14.0-284.30.1.el9_2.s390x.rpm 59cd349677cdf9d948bcecb0584a17ab1ddadfa64597281eab36c9cc48ca81cf kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.s390x.rpm 7cc556bb427aa89c99e1fa7c46e34b47748ec38f09b9277857ef0d6e4663c262 kernel-devel-matched-5.14.0-284.30.1.el9_2.s390x.rpm 9181ea5f71940d05b6559748ac3d898a560139ec6d94fecac097ca504864206e kernel-devel-5.14.0-284.30.1.el9_2.s390x.rpm d7a6bb36f40fbfb85472c54fdb22bdefae6733dc77fd12fabc7769cfb4362b39 perf-5.14.0-284.30.1.el9_2.s390x.rpm da863e81a8bdc20226606af193c151b1911d0f0cca0e2dd129029aa9345a3902 ALSA-2023:5071 Copyright 2023 AlmaLinux OS 0 1 Moderate

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603) * libcap: Memory Leak on pthread_create() Error (CVE-2023-2602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libcap-devel-2.48-9.el9_2.s390x.rpm 21b81981dad89226c28f9a2249d77063068c040bee0665b3aa0b06dce47cac2e ALSA-2023:5080 Copyright 2023 AlmaLinux OS 0 1 Moderate

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: registrar is subject to a DoS against SSL connections (CVE-2023-38200) * Keylime: challenge-response protocol bypass during agent registration (CVE-2023-38201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default keylime-6.5.2-6.el9_2.alma.1.s390x.rpm 056c81ac24e863e064bab111e4f0e66c60e416570179d301aeb5687cc684e93b keylime-registrar-6.5.2-6.el9_2.alma.1.s390x.rpm 0bd413d16ed62ed37a5099c9680f28f108f19b9161bdd37da47f95816b21779b python3-keylime-6.5.2-6.el9_2.alma.1.s390x.rpm 39317cab012bb0296a117d0e21b838646fda45118a9f6e2895d2ba1a6af1399d keylime-verifier-6.5.2-6.el9_2.alma.1.s390x.rpm 4dd03e7f0c50f1fde23e92f3c6483db4adf002f98a0e057a7b03446bb69c71f2 keylime-selinux-6.5.2-6.el9_2.alma.1.noarch.rpm 7d2cd2926a2a1055a094e35ace1481c09033033a86e78e656745ce16d58e4d61 keylime-tenant-6.5.2-6.el9_2.alma.1.s390x.rpm d4278f4e73efbf891c1a0f822c77f5676d7c7ea287ce7cb7256f63efd454b37a keylime-base-6.5.2-6.el9_2.alma.1.s390x.rpm e2d1dc3ad936b6b13a1e53bcdd2d861ce41f7cfd59c3146489bb01357a3dfb1a ALSA-2023:5081 Copyright 2023 AlmaLinux OS 0 1 Moderate

librsvg2 security update

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default librsvg2-tools-2.50.7-1.el9_2.1.s390x.rpm 2925868ecb50f3b8e006c2494a3ace2894f368f29a6919cf8e021605f4b3cb67 librsvg2-devel-2.50.7-1.el9_2.1.s390x.rpm d0a08089bd4f5ac9ca44eb421d02c1d794ec62b390c2dcd4e6d16f9e4a68c526 librsvg2-2.50.7-1.el9_2.1.s390x.rpm ee774248faaa7ccea2a86756ff3aa5f0989d721960bae2551008134d517f0092 ALSA-2023:5094 Copyright 2023 AlmaLinux OS 0 1 Important

qemu-kvm security and bug fix update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [qemu-kvm] rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization (BZ#2211923) * [almalinux9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest (BZ#2227721) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default qemu-kvm-tools-7.2.0-14.el9_2.5.alma.1.s390x.rpm 05a18320e25de3bb82e4db2159300f977861c5919ad77f1b6ab5f852b27812cd qemu-kvm-block-curl-7.2.0-14.el9_2.5.alma.1.s390x.rpm 0af0ecaf7276928ee582d0068be5722d4ad34d0c0aac9a0133cf1f899059a595 qemu-kvm-core-7.2.0-14.el9_2.5.alma.1.s390x.rpm 3b48a01c09df8bda7956170a7373c94f5ee9db881bc761723c05d7a99366fcf7 qemu-guest-agent-7.2.0-14.el9_2.5.alma.1.s390x.rpm 49e8ee8689b03475cd8a15321bd267695e6911c33a6c014d61e7926575a93e03 qemu-kvm-7.2.0-14.el9_2.5.alma.1.s390x.rpm 58ef41c61a76c0ed52236ff2890a4d710cdbff8522786d6491aa6ac585b259aa qemu-kvm-block-rbd-7.2.0-14.el9_2.5.alma.1.s390x.rpm 5d73e80f61b994a2573acb3200832034307a5115ef470b1c0e9574f5b4c577a9 qemu-pr-helper-7.2.0-14.el9_2.5.alma.1.s390x.rpm 7911c8d0ad2510590797f9dd8ac8555ffb45356fc3cfff0d2dfa6189f9c17d09 qemu-kvm-audio-pa-7.2.0-14.el9_2.5.alma.1.s390x.rpm 84b3294af977ba13d6772de33ffc0be02ca668740e3f5cbe73f7b5b04bf65e11 qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9_2.5.alma.1.s390x.rpm 8bd31e018b8c478839d5e95a73da031e425898ebaea93f42a1de680223a7d4be qemu-kvm-device-display-virtio-gpu-ccw-7.2.0-14.el9_2.5.alma.1.s390x.rpm 93c607b3b2181bce83b9038ca5e734545950334013411462a691891c2f548f65 qemu-kvm-docs-7.2.0-14.el9_2.5.alma.1.s390x.rpm c01ba4883257e2933b4577a65f26741dd6f8e2d467987e0b5e06b5708d4b4367 qemu-kvm-common-7.2.0-14.el9_2.5.alma.1.s390x.rpm c3e69d13ff5692ea80ef9aab3b9b56c912755e3ce172b118693f67ef19987ca2 qemu-kvm-device-usb-host-7.2.0-14.el9_2.5.alma.1.s390x.rpm d061d3b7a79b382ce7dc1aefb8581f4900f27ad35437153fadb4bea6d25dd259 qemu-img-7.2.0-14.el9_2.5.alma.1.s390x.rpm e9580db22907f76721e0c39f5b11c0af1323669881cbaa7abbb4cf52aa06f3d5 ALSA-2023:5143 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default aspnetcore-runtime-6.0-6.0.22-1.el9_2.s390x.rpm 22186ee30f38a602be8f5303b99ba060ecb93182eea176f599102b06126eff5f dotnet-hostfxr-6.0-6.0.22-1.el9_2.s390x.rpm 48a6c802308596b3deaebd2b9e41085287c04e57b3ffb7c0badd3b7a7f863263 dotnet-templates-6.0-6.0.122-1.el9_2.s390x.rpm 90fc195c56082c4bef1e28b61ba6467cdb5fa5fbc813ea8fe254a55f648e7f99 aspnetcore-targeting-pack-6.0-6.0.22-1.el9_2.s390x.rpm bcdd6dce7486a28d1030e9ed2ef6bbbea69d978a92ab410e468044959e4df62a dotnet-apphost-pack-6.0-6.0.22-1.el9_2.s390x.rpm d649df27f35dbdf204f04e8b040ff8c8e6abc752138f63cc8b65d758d98fb0d7 dotnet-runtime-6.0-6.0.22-1.el9_2.s390x.rpm f4deae044a57ea1e19054efa0188df803eadaaa62cefccc04f0cde04ef8fb9b1 dotnet-targeting-pack-6.0-6.0.22-1.el9_2.s390x.rpm f9fa51d3526d0f235e2ccb8c4efac2b97746013fb7f24eea989f9e7f02e8f942 dotnet-sdk-6.0-6.0.122-1.el9_2.s390x.rpm fda6737b4c23c907b89b64a454dddf8e302ff5a2e41a343c95508ca2244bed30 ALSA-2023:5146 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dotnet-templates-7.0-7.0.111-1.el9_2.s390x.rpm 0055517ede0001dff0cb2c3e3dccf5a302c9dfe271f79cf988271fc628e36440 dotnet-targeting-pack-7.0-7.0.11-1.el9_2.s390x.rpm 0a0890900952532537e58a2fa1c6903ecf1018924bd851f90e4907f19f141039 aspnetcore-targeting-pack-7.0-7.0.11-1.el9_2.s390x.rpm 2cd04684d3ea8e298311bbad02a398956dc599aaaebbcea72aa0c77aa66c7c43 dotnet-host-7.0.11-1.el9_2.s390x.rpm 7203f47824458d7328a7c87bf49bb03d499ca6ead95af184ef73c2fc70a0a1cd dotnet-hostfxr-7.0-7.0.11-1.el9_2.s390x.rpm 7a00332e5730da4c63a007ed06c6f9e1f04f981dac651f30654ecc3474d6bb1e netstandard-targeting-pack-2.1-7.0.111-1.el9_2.s390x.rpm 7f8ee78abc354adc46ee480910be787326e7ad519296fe662c66f052945c1cd9 dotnet-runtime-7.0-7.0.11-1.el9_2.s390x.rpm aa2f4d7570a22d64f130d55bbe897cbd0b5895bbb6af0f87fd8bc99645a4fde0 dotnet-sdk-7.0-7.0.111-1.el9_2.s390x.rpm b9b92fb36bb71f964153bfe7e66cd85810f781e2340af4c230e85bba27009c05 dotnet-apphost-pack-7.0-7.0.11-1.el9_2.s390x.rpm bf258f14b12e70309c32e4d5429b7e3d51866d76db117d1cf269f18ea49aa9b1 aspnetcore-runtime-7.0-7.0.11-1.el9_2.s390x.rpm d7e48ec7936fabbf352bde72c5952622e34f320828488b158ceb662ffc23d4d5 ALSA-2023:5194 Copyright 2023 AlmaLinux OS 0 1 Important

frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router (CVE-2023-38802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default frr-selinux-8.3.1-5.el9_2.2.alma.noarch.rpm 9f2cdde8e80c69a0ccfaf75e0a5547962330d34480d455d467beb0e0ddd801b8 frr-8.3.1-5.el9_2.2.alma.s390x.rpm fc10a4d7e58e41b008bc770ce16dc81a2f83bdcf35d795e9a74bdd7abe96fcec ALSA-2023:5200 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.15.1 ESR. Security Fix(es): * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default firefox-102.15.1-1.el9_2.alma.s390x.rpm 9b0be2452910ebd12ae19f9598642d68cafb018540cb315f7076c83f5dbf1e38 firefox-x11-102.15.1-1.el9_2.alma.s390x.rpm ee3be56a5ccca8abd0863911b9962c28d49e501b441b333ca054c05f7cd2fcf9 ALSA-2023:5214 Copyright 2023 AlmaLinux OS 0 1 Important

libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently. Security Fix(es): * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libwebp-1.2.0-7.el9_2.s390x.rpm 1dab22581c0e263a0f9d32a4b5c5bb2937bf606076797251c90d6ce257a1dd92 libwebp-devel-1.2.0-7.el9_2.s390x.rpm 6b1ae202e9d9d4fe62067086616825a0d1524c9a0841280ad429cccc9c589e83 ALSA-2023:5224 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.1. Security Fix(es): * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default thunderbird-102.15.1-1.el9_2.alma.s390x.rpm 1474571d3a295d2b1aea6a2ae71dcace26a0e3c1151c30b1719577c5f441236c ALSA-2023:5363 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (18). (BZ#2223313, BZ#2234404) Security Fix(es): * nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002) * nodejs-semver: Regular expression denial of service (CVE-2022-25883) * nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006) * nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nodejs-18.17.1-1.module_el9.2.0+36+853e48f5.s390x.rpm 03f7adff15426b9b50924d8a60298564c3bc215f47f4ceae64d0f75977ac8e0a npm-9.6.7-1.18.17.1.1.module_el9.2.0+36+853e48f5.s390x.rpm 28779f040572af53532f541d19ea1bc6f9699fb8559f3a1f1273d7a644104857 nodejs-devel-18.17.1-1.module_el9.2.0+36+853e48f5.s390x.rpm 3c2944d7c2f496cb6711a39085df933b29db8b5524a9bca1186a29bb5384175d nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-full-i18n-18.17.1-1.module_el9.2.0+36+853e48f5.s390x.rpm a27567fd511cfb83e5ab4adab666f5b2abfe38132ed93fcf071ae6034bfa4b69 nodejs-docs-18.17.1-1.module_el9.2.0+36+853e48f5.noarch.rpm c88feff14205e859cd2c765c6acb71f2b608773fddc3b6ebdb1247243500c6c0 ALSA-2023:5434 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.3.1 ESR. Security Fix(es): * firefox: use-after-free in workers (CVE-2023-3600) * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169) * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171) * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176) * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default firefox-115.3.1-1.el9_2.alma.1.s390x.rpm 37271f06ed4d98ee29a06f6f38c6891fb6681890785bd1b6041fa6954d4969f5 firefox-x11-115.3.1-1.el9_2.alma.1.s390x.rpm b5779794122a4d2caae12ca2dc64933af14fa926322d368fd11f17bd129b8db1 ALSA-2023:5435 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fix(es): * firefox: use-after-free in workers (CVE-2023-3600) * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169) * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171) * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176) * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default thunderbird-115.3.1-1.el9_2.alma.s390x.rpm 5184ae1fccf3ede845b79544f995743b1011e287ebd2aa9892ab52690870ecd1 ALSA-2023:5453 Copyright 2023 AlmaLinux OS 0 1 Important

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911) * glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527) * glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806) * glibc: potential use-after-free in gaih_inet() (CVE-2023-4813) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default glibc-utils-2.34-60.el9_2.7.s390x.rpm 0eaee6a25bc275070b6c8f243ffebdee5c887ac6f03ae7ff1593e1c06172cfd1 glibc-headers-2.34-60.el9_2.7.s390x.rpm 406265704bc7a92ae1a6301cf16eebc7522587b0b9595f92d6603e1297ec7ea6 glibc-devel-2.34-60.el9_2.7.s390x.rpm 4b2ae6abccac559c8153a0ae7886ce52ec2552d08e054eae39f2db167e72384a glibc-doc-2.34-60.el9_2.7.noarch.rpm b815dc8db3dc8d6e123d6718685d319dde9832dbad92f00d6f6b5d24f161bf18 glibc-locale-source-2.34-60.el9_2.7.s390x.rpm bc62766bf8ceaafb57050fdec0e0f08c031a79d8908b621a1f6bffd5ae2e270f ALSA-2023:5456 Copyright 2023 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3.11-3.11.2-2.el9_2.2.s390x.rpm 1632f0ba321954d79a4cc091693449f28546b9ca98ec6990bc9c28672f49389f python3.11-devel-3.11.2-2.el9_2.2.s390x.rpm 1dbd3d5bca8ec9ae0752b9b4dae42fc5a892e391222d4daf4a0b50511e90a9b3 python3.11-tkinter-3.11.2-2.el9_2.2.s390x.rpm 1fc1eab57a3d87753f11abfbee5854ec4cab32c9fb42faa4a951ac8bc82da517 python3.11-libs-3.11.2-2.el9_2.2.s390x.rpm dafb424bb6e7410dc6d6dbb72fce6cc4962b21ec5d1c17b0fdf83ec07da9710a ALSA-2023:5459 Copyright 2023 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default ghostscript-tools-fonts-9.54.0-10.el9_2.s390x.rpm 242005aed4b8cd721526c3f87787a8bbea852211acc1d50d4e1e340ddf8ed8a4 libgs-9.54.0-10.el9_2.s390x.rpm 2ec4d0e13fce79d1a7ff1d276a04f042c33db107275bd515251d74059d7d4544 ghostscript-tools-dvipdf-9.54.0-10.el9_2.s390x.rpm 35b045bf3b2790016ef0cee02d12faa7b068948df1c50a31ffa23dd373b124d3 ghostscript-x11-9.54.0-10.el9_2.s390x.rpm a7013045be057bcaeb6784e1661312173fd1b5de1a5a6f284bdb551224f3a1cb ghostscript-9.54.0-10.el9_2.s390x.rpm a8eba8426f4feff3777e152906fa218f902750423489c75e2672cc5467514110 ghostscript-doc-9.54.0-10.el9_2.noarch.rpm a9fbde0874ce6eceb343bd037c297ee445d98fc1185fedda26a3cc72fe9f2450 ghostscript-tools-printing-9.54.0-10.el9_2.s390x.rpm c31cedb7e5d4035e0330726124df7de5d8fa33ce3e7747f23bbc8a405138358c ALSA-2023:5462 Copyright 2023 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python-unversioned-command-3.9.16-1.el9_2.2.noarch.rpm 005b770b08188fbf2ab1fe356f947cca65f6aa836ecc6ec48769203034898af9 python3-devel-3.9.16-1.el9_2.2.s390x.rpm 2d835810a5c2b4728bab367acd86e71dd334c90df45d8d2735dd4f799f7501e1 python3-tkinter-3.9.16-1.el9_2.2.s390x.rpm 8e6dbf5b5dcfe303b7e140c70029a21d2b008b26e70af970dcf664fb6d1fb80c ALSA-2023:5532 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002) * nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006) * nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * nodejs: Rebase to the latest Nodejs 16 release [almalinux-9] (BZ#2236434) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default npm-8.19.4-1.16.20.2.1.el9_2.s390x.rpm 5eb90431bbcbcf692e364ced5a89630b6ba0f9220327617940edd83123e185e8 nodejs-16.20.2-1.el9_2.s390x.rpm b03a01d2894dae0461455a6c55987db0969945b79df9efa3f7db9bf3148240ca nodejs-full-i18n-16.20.2-1.el9_2.s390x.rpm d82727198b52f71adadf8ab922223272d505951911ad27320b14e5abc1c1657b nodejs-libs-16.20.2-1.el9_2.s390x.rpm d9465afd8debebcd5d40b03a37bdf4cdf13c4ab727b324c730aacca6d235a072 nodejs-docs-16.20.2-1.el9_2.noarch.rpm e9b2779d80a707dc7add98c8b2e875b6ce047e4af60f689ad6b78da46cb089ff ALSA-2023:5539 Copyright 2023 AlmaLinux OS 0 1 Important

libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libvpx-1.9.0-7.el9_2.alma.1.s390x.rpm 2e673b6423cbb24c2824ec5efeacee4b8cbb8d075dce7d6e8d9061ab154263bd ALSA-2023:5684 Copyright 2023 AlmaLinux OS 0 1 Important

galera and mariadb security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.14), mariadb (10.5.22). Security Fix(es): * mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157) * mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081) * mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082) * mariadb: segmentation fault via the component sub_select (CVE-2022-32084) * mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089) * mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091) * mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791) * mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default mariadb-embedded-10.5.22-1.el9_2.alma.1.s390x.rpm 1facc532013c20ac4076e4cdd92dc9cc32a3541b6da5c8999f26e680a294cfff mariadb-gssapi-server-10.5.22-1.el9_2.alma.1.s390x.rpm 30a1c6bc50a971f1a9592a7de6f584a337444f9c8a54750e4b3658437e3ebd86 mariadb-server-10.5.22-1.el9_2.alma.1.s390x.rpm 5958157f98c7259c8d383a579efe53dc9c2e988af244d6675c44456265cee095 mariadb-server-utils-10.5.22-1.el9_2.alma.1.s390x.rpm 718b6376eb0f5b4968f999152cbb0c39ae650f3969d8d34c47598f625d3a59ce galera-26.4.14-1.el9_2.alma.1.s390x.rpm 780e8d242c24f123991b5ae1d3772a3c1e17ed59a6cd167e890cd002fe50597e mariadb-errmsg-10.5.22-1.el9_2.alma.1.s390x.rpm 902d89549931026993e3248b675af2cb9633c37dd80b02660ee46ced8fc64fae mariadb-pam-10.5.22-1.el9_2.alma.1.s390x.rpm b0d5f9710489e33383e300c536ba8c0a52bc31d3160c47be8d665c298fab6e2b mariadb-common-10.5.22-1.el9_2.alma.1.s390x.rpm d04c5520f2765b2da2a5d051ce9e7332218d0402200ff6c5a82b041bf72171fe mariadb-backup-10.5.22-1.el9_2.alma.1.s390x.rpm d5fd5c84767e2c008894e6b128dd7938555c6d8e089ea1fec89c9cd9da3019e0 mariadb-oqgraph-engine-10.5.22-1.el9_2.alma.1.s390x.rpm d6ed7e33167d62423bffd10ecd14a538dee1983c927b4e0ba76158477743c460 mariadb-server-galera-10.5.22-1.el9_2.alma.1.s390x.rpm e7bf73476602b6fa3d37168c2bb15d870d9ddf7d495984c95d7f83bec5e91881 mariadb-10.5.22-1.el9_2.alma.1.s390x.rpm f92f1551b4a8f430c61443834c3cd6e016e638bbe613268902027803180ae00d ALSA-2023:5689 Copyright 2023 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default bind-9.16.23-11.el9_2.2.s390x.rpm 2625628d520345b69dcb2028e5e97093b4ec8a9a177df06a56a8bb9f472ee651 bind-license-9.16.23-11.el9_2.2.noarch.rpm 286a8760584b8db8241d9ca5eee6f08555ccc133659a4edf4c0976291ec10000 bind-dnssec-utils-9.16.23-11.el9_2.2.s390x.rpm 4a9827cf9c03f7d9131a3d918147eb0c3d045e4568f67a16f0ca764856ac1f5a python3-bind-9.16.23-11.el9_2.2.noarch.rpm 68add8db9f08d920be81a334a49c98a4ad4475725c0cbed03414757ca6c70198 bind-dnssec-doc-9.16.23-11.el9_2.2.noarch.rpm 6ccf0a2650f08758150be4498d10a6885e217045eeecdb6569f1d7225ab6beb1 bind-utils-9.16.23-11.el9_2.2.s390x.rpm 7de874188c17da2b967c54de4f74a18047a2bfcb8b2a842fef8a1ea9e637b71c bind-libs-9.16.23-11.el9_2.2.s390x.rpm c842621e3dd400d7379ea5947323e40b20383adcbd0de77384142cbacd2c8a9b bind-chroot-9.16.23-11.el9_2.2.s390x.rpm d961ca8469fd5b77951d5a34fbe6291677482ed2955eeb595356c3c8da7c9d14 ALSA-2023:5708 Copyright 2023 AlmaLinux OS 0 1 Important

dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dotnet-runtime-6.0-6.0.23-1.el9_2.s390x.rpm 321a1986e2a6974e3525286aab466c90748fda745134e979bf899592c93e3cb6 dotnet-templates-6.0-6.0.123-1.el9_2.s390x.rpm 39e53e7334e65e2d714c90b1887bab318a642418afda913e1e3a25a085e6b2e1 dotnet-hostfxr-6.0-6.0.23-1.el9_2.s390x.rpm 4c6d1acac1b6a2a570c17999d94a34351b135b1355e2dfef2385cc8df70d6b5c aspnetcore-runtime-6.0-6.0.23-1.el9_2.s390x.rpm 7ce52ba69c308d1f1513b9a2da1f0e9301a49bece02e5a2998cc5f8fcc59a944 dotnet-targeting-pack-6.0-6.0.23-1.el9_2.s390x.rpm 94cab28b5a3f7910a0b8268cd696b2cf33c87bd052e3f05c30c46b57a65ae322 dotnet-apphost-pack-6.0-6.0.23-1.el9_2.s390x.rpm 951dc9703107cea4c7af030502ebb01ad92c2da10a9845e19871d4b7898c79c4 dotnet-sdk-6.0-6.0.123-1.el9_2.s390x.rpm be5b961a901c5b10f2a82aa8a26faac87176e48b31aa43d3900f23713eeda5a5 aspnetcore-targeting-pack-6.0-6.0.23-1.el9_2.s390x.rpm df173cad40bc779e351f0f8578eadaf0740f32a028eb9a9100fde3e08b637e1e ALSA-2023:5711 Copyright 2023 AlmaLinux OS 0 1 Moderate

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nginx-1.20.1-14.el9_2.1.alma.1.s390x.rpm 160c5b5f6609da111597561a8753bdea1437af12af35334872de07ab65a860ff nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.s390x.rpm 168a2f091b0b21de7131ef3bd86ff994aecdd373fa14d32cfde9360540a473ef nginx-all-modules-1.20.1-14.el9_2.1.alma.1.noarch.rpm 224ccfde13a54c23ce3cbe0c073f8f26257baabf4776a292f519f69dbce4166b nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.s390x.rpm 26aa6a311d41f8b7526eaf0a3d9b2dd7991e599f202043e5bacc641f9c54cf70 nginx-filesystem-1.20.1-14.el9_2.1.alma.1.noarch.rpm 6eaa0e536cd84cbdd37d9c8634d8cdf4c575e532e35d0331db02fed271820662 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.s390x.rpm 92f1c1f803b141eb6ad5f4be17df697df2b4668955993dbe3571073b19fdff0a nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.s390x.rpm 95e0c22879ca844a305a3b908cb1338e558967c9504c5afd64bf07ab4d42c215 nginx-core-1.20.1-14.el9_2.1.alma.1.s390x.rpm e4c330d3436d8ea41b170928d6050ede927445b14eb5f827315c2fa53d4fab98 nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.s390x.rpm f877e75ee9f412650149234ae7f8989c14a6cbb5a11addd08f5a836f1f85a416 ALSA-2023:5733 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) * OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067) * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13593) * The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13583) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default java-1.8.0-openjdk-devel-1.8.0.392.b08-3.el9.s390x.rpm 1d6bd05a256c6edc39616591a3d54463bf2c214823e3ecc8e7e970bb3a19ef13 java-1.8.0-openjdk-headless-1.8.0.392.b08-3.el9.s390x.rpm 22c812d070b1227eceef1425ff91c19185ad03633c74d7181f6de5bfd986e110 java-1.8.0-openjdk-1.8.0.392.b08-3.el9.s390x.rpm 253e873b9f698b74ee41f174e22072b9bcac9ffd902596e85998ce915ba8623e java-1.8.0-openjdk-src-1.8.0.392.b08-3.el9.s390x.rpm 641264c397e180de45e8ca3384a7677ebd290c7ca043c04e98c4e446ed772ad6 java-1.8.0-openjdk-javadoc-zip-1.8.0.392.b08-3.el9.noarch.rpm 7b5b54be0f5c7a3fa0f7cc64e6644af44af3bbbb0aa67c20c7e66b854fb54d70 java-1.8.0-openjdk-demo-1.8.0.392.b08-3.el9.s390x.rpm 9a0c4ecf02d6626bbf25f9e3fb0db4be85ea81e762561c4c57c541a1ec6617a2 java-1.8.0-openjdk-javadoc-1.8.0.392.b08-3.el9.noarch.rpm d3353184281947d0544c3d05f8bd4d92cf07f53194a08ba90a42ca89c75fe534 ALSA-2023:5738 Copyright 2023 AlmaLinux OS 0 1 Important

go-toolset and golang security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: net/http, x/net/http2: rapid stream resets can cause excessive work [CVE-2023-44487] (CVE-2023-39325) * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Midstream dist-git patches (BZ#2223637) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default golang-src-1.19.13-1.el9_2.noarch.rpm 1e00a0e6c32111d4eb15bf27ea45f0ee5448e7411a7cb6b96516f1c22c1146c3 golang-bin-1.19.13-1.el9_2.s390x.rpm 488fd1b5af3685f6698fd7e017e366e2ba4a15f858249474486ed1c921f1926c golang-1.19.13-1.el9_2.s390x.rpm 583bd2f6b7f975be40071eb3d965264f1c5f00f40216e189d6793d732a5fd710 go-toolset-1.19.13-1.el9_2.s390x.rpm abd93448da88953318c0138b14f28b46be0f05f88894befbfb3c262046858a0f golang-docs-1.19.13-1.el9_2.noarch.rpm b5aac5c2d4cf88d4e4317c72aa8c6d0668231a8fce484ad8baf75ee90e706b7a golang-misc-1.19.13-1.el9_2.noarch.rpm f6dec5d72b4fe83f0c561cd7d019d7a3357c497a92f890d90bdbdbe227f57fc1 golang-tests-1.19.13-1.el9_2.noarch.rpm f8fb3e03768edd80525b2ac8e65807ef49defae23da467d9d6341427e2e2dccd ALSA-2023:5744 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 11.0.20 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 11.0.20.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237175) * A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 11.0.20.1, increases it to 16 MB. * The serviceability agent would print an exception when encountering null addresses while producing thread dumps. These null values are now handled appropriately. (JDK-8243210) * The /usr/bin/jfr alternative is now owned by the java-11-openjdk package (AlmaLinux-13532) * The jcmd tool is now provided by the java-11-openjdk-headless package, rather than java-11-openjdk-devel, to make it more accessible (AlmaLinux-13536) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default java-11-openjdk-jmods-11.0.21.0.9-2.el9.s390x.rpm 3b2e3b33eedf8435e750d7c774aa6a831e476de9b3c719b9725bd36a20208567 java-11-openjdk-src-11.0.21.0.9-2.el9.s390x.rpm 70449d633676e73c0d64694a9c1c193090f7c288ec7d116ab512382970398e40 java-11-openjdk-11.0.21.0.9-2.el9.s390x.rpm 7d61a228c415f66fd8a275cb799d1545351011f75940d646049d18bcfd04d253 java-11-openjdk-javadoc-11.0.21.0.9-2.el9.s390x.rpm 8e116b0af1df95cc20b534560bc26914f1aec2c618f5a334a335b9e56b7bb754 java-11-openjdk-javadoc-zip-11.0.21.0.9-2.el9.s390x.rpm b45d1e8c3f9b49b195df0e6c6b1e93b0e047c44f111846c722f05244e1746c53 java-11-openjdk-static-libs-11.0.21.0.9-2.el9.s390x.rpm bab9ec20a561282762d3fcdd9fba7bddfb39a643a783ec90d56cd664a4af991f java-11-openjdk-headless-11.0.21.0.9-2.el9.s390x.rpm bfb415bcbb777f91cd42802cb6917c8a31b8bc065476da1e36ff6f468a10666c java-11-openjdk-demo-11.0.21.0.9-2.el9.s390x.rpm c4b4ed3d705cc810f198f216720391a18777e9f5f89882e29ceef1bd9a1ee86b java-11-openjdk-devel-11.0.21.0.9-2.el9.s390x.rpm de49f7c4e826691dfdbbfffc3456e573ef697ef338916cf30b6fce41c518eb9a ALSA-2023:5749 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dotnet-apphost-pack-7.0-7.0.12-1.el9_2.s390x.rpm 37c86e09acd30f356570b1ec79041dd6846bad2732dba3104d0b37f41d138fae netstandard-targeting-pack-2.1-7.0.112-1.el9_2.s390x.rpm 4aad730e08822cfd009c2f89610d65b4c67413c62bbbfd42671a0343a99ce313 dotnet-templates-7.0-7.0.112-1.el9_2.s390x.rpm 61f55e11508c79123826adcf1dc4a05c597bd158762cdbdeb7ef1fc44142bea8 dotnet-targeting-pack-7.0-7.0.12-1.el9_2.s390x.rpm 7be892e35cf6669d68afc69baf739021da8a4d054c10d389191f2be9e6b326e5 dotnet-hostfxr-7.0-7.0.12-1.el9_2.s390x.rpm b105c728ffae206ee0f1c46d1e196e83bed17ee601608e397eb117cfb78f123f dotnet-host-7.0.12-1.el9_2.s390x.rpm b7b6b1e241bc8d118252bb104dae6b4c8249d271f5af1a3f64d13495093c4a27 aspnetcore-runtime-7.0-7.0.12-1.el9_2.s390x.rpm cc07c283bd22ebef9302d28d4049447cf77a324d7a4d378377c71e1033e5b2a4 dotnet-sdk-7.0-7.0.112-1.el9_2.s390x.rpm ce83d315f5fb736f8481a84b9d7f81ff2afe5601fa9659c57bc49f0243745efc dotnet-runtime-7.0-7.0.12-1.el9_2.s390x.rpm e17f9100e41eeff81bf2fe69239ead2495f9cb0747b72a216611e8c817e73a35 aspnetcore-targeting-pack-7.0-7.0.12-1.el9_2.s390x.rpm febbafd9ab68beaa3e6c06f6eb4470af4cd3c2290876fb318a5d45c8f8af4ecc ALSA-2023:5753 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025) * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 17.0.8 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 17.0.9, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237185) * The /usr/bin/jfr alternative is now owned by the java-17-openjdk package (AlmaLinux-13648) * The jcmd tool is now provided by the java-17-openjdk-headless package, rather than java-17-openjdk-devel, to make it more accessible (AlmaLinux-13651) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default java-17-openjdk-src-17.0.9.0.9-2.el9.s390x.rpm 2b46e7fbf6767f5f8cd96c6e8e72331ff1353298f9ae12df40c09c1b151324a9 java-17-openjdk-demo-17.0.9.0.9-2.el9.s390x.rpm 4901c71bfa73ee2f37b3c003e4008569c84ad39eb2a049eab9dbe11f8361a836 java-17-openjdk-javadoc-17.0.9.0.9-2.el9.s390x.rpm 6972c327a0d57d7468c159415aca09dbaa6ce16914bb363ccb5e76b64645d0f0 java-17-openjdk-headless-17.0.9.0.9-2.el9.s390x.rpm 8a33cb310d6535684c62e7964aa2c00526af523102993417d93fda2f154ce631 java-17-openjdk-devel-17.0.9.0.9-2.el9.s390x.rpm 8ff68fb46bff1c6e83acb5f3ed86d78aeeab8b4e8b6c883ef032c93ce8a2c8db java-17-openjdk-17.0.9.0.9-2.el9.s390x.rpm a0ba341629f1cfb8e2580cb925e620fa60c98bcedc72241bbfdd329127c6a4e4 java-17-openjdk-jmods-17.0.9.0.9-2.el9.s390x.rpm deb3e0556cf17b765d6749e74de7f84a228aabedaaffba9d4eda2d29d3174f32 java-17-openjdk-javadoc-zip-17.0.9.0.9-2.el9.s390x.rpm e796ea5f7b4ab1a6af1d79336fbeae8e8da7f01ad025e843f54c21c8a1b86956 java-17-openjdk-static-libs-17.0.9.0.9-2.el9.s390x.rpm fbc6559a055a883802b574e45008bfbe0b151ef61c771944d260e6fe0af843e3 ALSA-2023:5763 Copyright 2023 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545) * curl: cookie injection with none file (CVE-2023-38546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libcurl-devel-7.76.1-23.el9_2.4.s390x.rpm 5f432340245cf1a9e5209a9c777065af7bbea607d1d26198c7c43ba5f9ba7899 ALSA-2023:5765 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nodejs-docs-16.20.2-3.el9_2.noarch.rpm 0f5a5069d621f91301233c0819939ce698d99f80cd018abe7bf1c67e8cc9b50e npm-8.19.4-1.16.20.2.3.el9_2.s390x.rpm 106b26528d38b01657a88c2e1f9cb5f371b9c247cf072a8739d70cb1faf77bb0 nodejs-16.20.2-3.el9_2.s390x.rpm 1abb0413bda3a5bfc01448256632e00c9e64ef50635ef10c4af0b81a8e33c0f1 nodejs-full-i18n-16.20.2-3.el9_2.s390x.rpm 6ffbdb36543defc6168e38b65e0365d83457cb055fa9941225a90ad8dbbe9dc3 nodejs-libs-16.20.2-3.el9_2.s390x.rpm fd5ff6843d52e51691f06676dabdea72bcd6052e30c0a8f3a88cd9027100e868 ALSA-2023:5849 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) * nodejs: integrity checks according to policies can be circumvented (CVE-2023-38552) * nodejs: code injection via WebAssembly export names (CVE-2023-39333) * node-undici: cookie leakage (CVE-2023-45143) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nodejs-devel-18.18.2-2.module_el9.2.0+43+3ebc9e20.s390x.rpm 0e458433ae8f266b1fa375b50983243d998514ee2f0cc0bb3224f3de67b0c11b nodejs-full-i18n-18.18.2-2.module_el9.2.0+43+3ebc9e20.s390x.rpm 295d46b3c2837df4ab80fe5415b9fbcebf25a475d8c2e1ad8658674b47d03e0d nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-docs-18.18.2-2.module_el9.2.0+43+3ebc9e20.noarch.rpm 85883791e1d2b0d7c9b6926a8d15707c75b2b0fad25aa1ebc7700f9d5f4145b2 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 npm-9.8.1-1.18.18.2.2.module_el9.2.0+43+3ebc9e20.s390x.rpm dc3775d460894bf8b8c4f89d1021fd5a8b725de1f786a49c2af5fe2590595074 nodejs-18.18.2-2.module_el9.2.0+43+3ebc9e20.s390x.rpm fecb8b6f2231f38a70ca6c4d634f90225448b49ee4da53aa5aa7314f379a884b ALSA-2023:5867 Copyright 2023 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) * golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default grafana-9.0.9-4.el9_2.alma.1.s390x.rpm b9795802046374bb7a9882f6d65c851678f4ede64ab8870d9360e8a661cd3939 ALSA-2023:5924 Copyright 2023 AlmaLinux OS 0 1 Important

varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default varnish-6.6.2-3.el9_2.1.s390x.rpm 9ce53e484f6ba49f4a9f4cd5b87d97326beda8e88cb1a74f842e1838b2397904 varnish-docs-6.6.2-3.el9_2.1.s390x.rpm f846c3f702fd438999a77f0d13a47313133671ca0de5bd8d315364387940d38c ALSA-2023:5926 Copyright 2023 AlmaLinux OS 0 1 Important

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: XML loading external entity without being enabled (CVE-2023-3823) * php: phar Buffer mismanagement (CVE-2023-3824) * php: 1-byte array overrun in common path resolve code (CVE-2023-0568) * php: DoS vulnerability when parsing multipart request body (CVE-2023-0662) * php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247) * php: Password_verify() always return true with some hash (CVE-2023-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default php-cli-8.0.30-1.el9_2.s390x.rpm 0214339d4015e459802199d8a7eac160c8b23190ef14eeaecbee721d6b621430 php-gd-8.0.30-1.el9_2.s390x.rpm 0305f8a5eb447490a6bab00f3422e7b3500e95d78a8b3e9432c371b02b745e23 php-devel-8.0.30-1.el9_2.s390x.rpm 097e9ca9d1e37655a435d7130b952205c91edde31a972cf7b98c59aae4f7153e php-snmp-8.0.30-1.el9_2.s390x.rpm 13fbbc6a0ec5fb8febfe684d863829220cfcd60fa3dd920d79daf0e9e652e493 php-ffi-8.0.30-1.el9_2.s390x.rpm 1f517fc9ff5615864c396311b87ff8cb6e5cc92c54a08535eeba658156355536 php-pgsql-8.0.30-1.el9_2.s390x.rpm 3176d675a8917da000b1c983d4207476001b95cc08f11b6d0ff7834fccd79d54 php-ldap-8.0.30-1.el9_2.s390x.rpm 4c37e15473bd9c578ed0f044dd8b7e2452f9112fd9ac0c9cc513b861f12813bb php-process-8.0.30-1.el9_2.s390x.rpm 4c654ca16895bda5b8988d9e1f618b185ff9d47d2bda628fa60fcd04551580e1 php-embedded-8.0.30-1.el9_2.s390x.rpm 4e92257e2287c918188ddcfd202f7fd099ce612206ea4314b6211b699df08326 php-opcache-8.0.30-1.el9_2.s390x.rpm 59c5930658d41f1da05d03021ddbd899060e5cbcbae5ff7f39d41ae6eb759c06 php-gmp-8.0.30-1.el9_2.s390x.rpm 5e413a74fc1952d5aaedd2763f9b89735aa9daafb46ad31c679cbd2358356478 php-xml-8.0.30-1.el9_2.s390x.rpm 7b846d3c0c07e9a2fe3e22928a2cd57533ce4839850b48c7dc98cfa2eaeefab1 php-mysqlnd-8.0.30-1.el9_2.s390x.rpm 8695c1d1f6706882787c1d7c72b6ab37f30b1f125c9f4b200d125dcfb836ebd6 php-intl-8.0.30-1.el9_2.s390x.rpm a05b5bfcbf61c0b9e9126ea005aeac5491fb4d35ab952954794717399a1bb0ab php-fpm-8.0.30-1.el9_2.s390x.rpm a0f430520885669ba2f5d66e31624fc97ef2a852a08959b36e2c730191f4f623 php-enchant-8.0.30-1.el9_2.s390x.rpm bdb7a69e65916861ffcd5f6de169bf346718e5a565ce626c76b3982e5021bc39 php-odbc-8.0.30-1.el9_2.s390x.rpm c111a57c36cbdd9173103f52323f4801d8e3fc5564839df9acecfedec5478da7 php-common-8.0.30-1.el9_2.s390x.rpm c683749f25dd7beb1f5a0cc6cb20d1fcbce9483139a8bdeba311a9b4a3f3d1fc php-soap-8.0.30-1.el9_2.s390x.rpm c6feccaaf3702d3bc899be0cc4c80773a49e080b7074d1b0381ada87e4369996 php-dbg-8.0.30-1.el9_2.s390x.rpm c797fc3f9b1bf316bffb73b3f0910c580ca9c2de3462c935ea9e5a0ce6bb800e php-dba-8.0.30-1.el9_2.s390x.rpm cef8cc47da97a375516d0d6c7f8e9ea61f4a21eacf8ecb4c78fc177da5bacc81 php-bcmath-8.0.30-1.el9_2.s390x.rpm d91185e26961b7cf7f6c191af3718c1964b43351ef8a7cdaa09f6c5e225aa37e php-mbstring-8.0.30-1.el9_2.s390x.rpm e763f5fb2052a733d92db32fd3b83aec9be814c1c21936f1282b1e2e22021546 php-8.0.30-1.el9_2.s390x.rpm e9f6bee0c0d9bbfb395021c3a6b088e6583c5368c89b55c2fd32de7abfa2a79c php-pdo-8.0.30-1.el9_2.s390x.rpm fc70243fa02ef64324d1e3816569d04d17f47c54faea1fae1f7c1957e965c36f ALSA-2023:5929 Copyright 2023 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default tomcat-docs-webapp-9.0.62-11.el9_2.3.noarch.rpm 15052a457e5a02c13b632e40d663552c7eeaa43949f4188f913d5fcc35530961 tomcat-lib-9.0.62-11.el9_2.3.noarch.rpm 2840a620c450c5cc1f26d502731a50db4f9a87765500b20e82b585ffd3f75a3b tomcat-9.0.62-11.el9_2.3.noarch.rpm 3f046469ad314431c93dbeee6b078949c4b9196c11e29e9ccf9afe0dd9cddcc2 tomcat-webapps-9.0.62-11.el9_2.3.noarch.rpm 5e8cc805aa41b20d650fa527d072c026129eb795df7176522e4d03c271443686 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.noarch.rpm 87ec492c0f03a96fab9e1ce8e7101eeb3d678e793faab35a1f1b75e6367912fd tomcat-admin-webapps-9.0.62-11.el9_2.3.noarch.rpm c54b65accf697229b7c23a36122c4b44acb172c36a1e60d13488c6099d47daa0 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.noarch.rpm ddf0cc650d2bc16bdf0aa3074264608925c24fe8e34cc61e5a7db3d11d1a1444 tomcat-el-3.0-api-9.0.62-11.el9_2.3.noarch.rpm e6f600319b870be925018c7741b514a3a49670686a5938608e844ea170397251 ALSA-2023:6077 Copyright 2023 AlmaLinux OS 0 1 Moderate

toolbox security update

The rhel9/toolbox container image can be used with Toolbox to obtain AlmaLinux based containerized command line environments to aid with development and software testing. Toolbox is built on top of Podman and other standard container technologies from OCI. This updates the rhel9/toolbox image in the AlmaLinux container registry. To pull this container image, run one of the following commands: podman pull registry.AlmaLinux.io/rhel9/toolbox (authenticated) podman pull registry.access.AlmaLinux.com/ubi9/toolbox (unauthenticated) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default toolbox-tests-0.0.99.3-10.el9_2.s390x.rpm 0ee22db979c0577edda39924ddff5f02497301b5149da3585db4f687bb627c4b toolbox-0.0.99.3-10.el9_2.s390x.rpm 72efa4fc8b7b201f17eb533062fa67ae70843b2eebb36bbc425cc86ef7a5cf62 ALSA-2023:6120 Copyright 2023 AlmaLinux OS 0 1 Moderate

nginx:1.22 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default nginx-mod-devel-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm 1f9c0f3d71aa0a63b6ada1ec9a38ad679b113ed6a07fb73250b78c6fe7162f6b nginx-mod-http-xslt-filter-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm 3d8774d5fe5fc3cc0a4ed1dd0f554ba378b8c0f57d495ce5792afd51bbab3c79 nginx-mod-http-perl-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm 7ed5bad1c64b904534685be0beb11c70f6533d9d109bcb0e96049a6368ec9d9e nginx-core-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm 903ab1670547cbc7bbc1847eee8f0df3fabcc9ccdb77c9b836c999ed7d2ac0d6 nginx-all-modules-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.noarch.rpm aeb3236fb1a6ffd6ec0357beebae256ac1f87040d77ced91fa90e7ea61e1ee79 nginx-mod-mail-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm afe1d446ae9b65bce9338f834301c2f37dcfe563ca83b038bc9f1ccc59281f1d nginx-filesystem-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.noarch.rpm b6958158249f745572cda8ea2b11a8392750626ca99a882dea00d9ef34ffc439 nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm cc47bb1bdf452151a57cf691963d661387fc04418a31ee04fec8e004115b8c46 nginx-mod-http-image-filter-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm ceb4b3e0760c425edae95174d677eeae6cc9b0dc7371d5295c4cc03c85280e8c nginx-mod-stream-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm d0ef9abb4822ad669699f774801bd65544eacb84c0e594d1ea47872fd66229b5 ALSA-2023:6167 Copyright 2023 AlmaLinux OS 0 1 Low

libguestfs-winsupport security update

The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images. Security Fix(es): * NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libguestfs-winsupport-9.2-2.el9_2.s390x.rpm ed5252e766693d115aa7371a5487623acc505a8a92aaf55f62013bc3a2aa6cf4 ALSA-2023:6188 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.4.0 ESR. Security Fix(es): * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721) * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724) * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725) * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default firefox-115.4.0-1.el9_2.alma.1.s390x.rpm 86880ffb7f3aed02ea9b1f3d4a21da0cf4cc5ce42bd3a0695ff1520d2e76431f firefox-x11-115.4.0-1.el9_2.alma.1.s390x.rpm 8c48c2d54df6a972776fa67964a781d32d60d8935a90ba1a1e8a13691cadffbd ALSA-2023:6191 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.4.1. Security Fix(es): * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721) * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724) * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725) * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default thunderbird-115.4.1-1.el9_2.alma.s390x.rpm d4a39453c1e0802218065773e895132f22d34e4983b5adf326991096a7331b9d ALSA-2023:6242 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dotnet-hostfxr-6.0-6.0.24-1.el9_2.s390x.rpm 0c44d741c362a3cc22325dff149ddc78480048c47d6fb4cd62fa53da8b654070 dotnet-apphost-pack-6.0-6.0.24-1.el9_2.s390x.rpm 2ca13562611dd380625783de2973783d96fe14e3ce16c078b53dcd7f65a86a78 dotnet-targeting-pack-6.0-6.0.24-1.el9_2.s390x.rpm 467c3b12d39eedcfe927bb227790dd97dd129d3aeb3145bc58ae7e651c07dd40 aspnetcore-runtime-6.0-6.0.24-1.el9_2.s390x.rpm 79d4af42f3ec8c587a7f4acb1fb444a200d31a7fac28e5cbd92801793e0ae757 dotnet-runtime-6.0-6.0.24-1.el9_2.s390x.rpm 7f5dc8d5f4d4db22875a2613aacb8601103300a59e3f90b597ae4353f0f0cb9b dotnet-templates-6.0-6.0.124-1.el9_2.s390x.rpm a9de69dd7c1e5a3b41020b79c5bd84dcac0edc6416cd1edc6be8cb5ba6b45e5f dotnet-sdk-6.0-6.0.124-1.el9_2.s390x.rpm b6aad4a2967ed7bed0e3c79ae4ceae325103fd3162be63f6cab344f9ac535df8 aspnetcore-targeting-pack-6.0-6.0.24-1.el9_2.s390x.rpm e6e64d96fd2f82adf2cfbb4e28a79260ea0fac82ff01fcc7165a484a6dea8629 ALSA-2023:6246 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default aspnetcore-runtime-7.0-7.0.13-1.el9_2.s390x.rpm 213356938340e1805b7ade11c22f79bd200ecd4bc6b5cbcf4151f6d708146e24 dotnet-apphost-pack-7.0-7.0.13-1.el9_2.s390x.rpm 26df3352a374dd82d3f981f2d0b07699ee2a53e2736b3bed264393ba1aad80e1 dotnet-templates-7.0-7.0.113-1.el9_2.s390x.rpm 299c0bb8e1500fc16ffb2323b29ddb9f019eeb9e4cc652b06ab13ad9ec026f84 dotnet-targeting-pack-7.0-7.0.13-1.el9_2.s390x.rpm 5466eb40067152e8932fcdc75899c023eedf77f96e132ebe8181ebcfe28432aa dotnet-sdk-7.0-7.0.113-1.el9_2.s390x.rpm 7dc8a02ed0b6042e2f9f5d432ae82553bd9d5ebcee1852b6f6b22006e356ae3e aspnetcore-targeting-pack-7.0-7.0.13-1.el9_2.s390x.rpm 8359d5b99a3ae8db7b2337d004bbaa64f0abe2c6619b3ca94c36c4b4059f214b netstandard-targeting-pack-2.1-7.0.113-1.el9_2.s390x.rpm b441c996be11a055589b5a53f47271951d4dd7f0ade862c32783b9b1c27d884f dotnet-runtime-7.0-7.0.13-1.el9_2.s390x.rpm b86b1d58dc413e269cee1d153224efc191eb3cfa36eec601834aa7bbc9621419 dotnet-host-7.0.13-1.el9_2.s390x.rpm c59475d74c7b01510261c045fc665923cea53db14ebb2f6416d7855d2d141028 dotnet-hostfxr-7.0-7.0.13-1.el9_2.s390x.rpm ef61b18f369ab7db3c1bf9af242c287e72d0e8cb866abe614d70618fc3489f40 ALSA-2023:6265 Copyright 2023 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default ghostscript-tools-dvipdf-9.54.0-11.el9_2.s390x.rpm 0323d64794d85b6ca30e9d1a2c15be013268742324742493f6d401344a22badf ghostscript-x11-9.54.0-11.el9_2.s390x.rpm 59189f95deabb02404c6d02c1b43eadf7f75cb119f75ea111a88be1b584ae7b7 ghostscript-doc-9.54.0-11.el9_2.noarch.rpm 5b8dfd10c092ca54f56c949f274b6669bafa753c0520d65e13991351018884e5 libgs-9.54.0-11.el9_2.s390x.rpm 812634be0507a0647a8a1d05bbcb83df0fbba691876d96f24d6c81b725ca9708 ghostscript-tools-fonts-9.54.0-11.el9_2.s390x.rpm 9b1b36d7361b55b777438ff5f59bef33eb1f84a58250824c6a5a9201b39dbba1 ghostscript-tools-printing-9.54.0-11.el9_2.s390x.rpm cdbf112a5e711c2e18eeeddc2a0e6fc448fb7a1a689f63ce7a8af62ec8a039f8 ghostscript-9.54.0-11.el9_2.s390x.rpm f0e453010d989916a80e72b9b83db72334d8791000906cb00fcf7072ec6d5b1b ALSA-2023:6266 Copyright 2023 AlmaLinux OS 0 1 Critical

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) * SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846) * SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default squid-5.5-5.el9_2.1.s390x.rpm 0d9db22e60fe1803f47c4ef0db87067620732f9eb02fdf7bc1cd73da67c4143c ALSA-2023:6324 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.11-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3.11-pip-wheel-22.3.1-4.el9.noarch.rpm f7537bf8b9a5a45c95276f850dc1856a345144d4bce317f62c67d67e764f531d python3.11-pip-22.3.1-4.el9.noarch.rpm fd34722a1fe8e4736de5eaeb450f8b85fb79323b61846de58407d9df71ab1ad8 ALSA-2023:6330 Copyright 2023 AlmaLinux OS 0 1 Moderate

edk2 security, bug fix, and enhancement update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() (CVE-2019-14560) * openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default edk2-aarch64-20230524-3.el9.noarch.rpm 7f420a2e6902aa83721973936da687385ce3f9a318f79cec650eaf58da03c9ed edk2-ovmf-20230524-3.el9.noarch.rpm cf00362ca3ecc9d6ce43ec1f21168c8524b96b2675854692c3afd7bf709e0918 ALSA-2023:6340 Copyright 2023 AlmaLinux OS 0 1 Moderate

xorg-x11-server security and bug fix update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default xorg-x11-server-common-1.20.11-19.el9.s390x.rpm 1b2c1e5b4abe6e054b5ce5ce642c980e6f2d13e52b468d7d9e2e23e677eb93d4 xorg-x11-server-Xdmx-1.20.11-19.el9.s390x.rpm 56d0f1a90cb5283bcc8ea9cd9a0dea67bd29d5b3cdf6e0ff7645d61f72b83d81 xorg-x11-server-Xorg-1.20.11-19.el9.s390x.rpm 575c0a58016945469084f72bd8afc2331f478dfb0dfb01f99490c3367785c6f1 xorg-x11-server-Xnest-1.20.11-19.el9.s390x.rpm 8d5f708d6d0ade7bedf85ae663e85ef7a113a7317d5c83ae2dd915e25e423cfe xorg-x11-server-Xvfb-1.20.11-19.el9.s390x.rpm bebf647eb6037056993f968f0a3c41d3baa80fea3d7ea37aa537b3b7e1e9df21 xorg-x11-server-Xephyr-1.20.11-19.el9.s390x.rpm f334511cedecbc2d1c8633c79aa7d171bde634e5eb7c78c01380d6e1ed6484df ALSA-2023:6341 Copyright 2023 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security, bug fix, and enhancement update

Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland (22.1.9). (BZ#2158761) Security Fix(es): * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default xorg-x11-server-Xwayland-22.1.9-2.el9.s390x.rpm 9da0b0c4c16747391d2d7fa988ff6ec68a7a15bb2854e4b4b80f2522bc889977 ALSA-2023:6343 Copyright 2023 AlmaLinux OS 0 1 Moderate

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp (CVE-2021-32142) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default LibRaw-0.20.2-6.el9.s390x.rpm 2be1a2f3a95c92794a56ddfee37a32286a64dcebae83c83a6420d90565babe07 ALSA-2023:6346 Copyright 2023 AlmaLinux OS 0 1 Moderate

toolbox security and bug fix update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064) * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default toolbox-tests-0.0.99.4-6.el9_3.s390x.rpm 727fa3a5d3284a41bd5a6d5b881e419d133207944c89cb74aebbf72e5e7e8134 toolbox-0.0.99.4-6.el9_3.s390x.rpm cc4b88aa654d722001a6c974cd5739dc49ae032bbb32e0e4f8dd007f5e9b745e ALSA-2023:6363 Copyright 2023 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: go/parser: Infinite loop in parsing (CVE-2023-24537) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default skopeo-1.13.3-1.el9.s390x.rpm 703f34bd0081a890ca38da49246a5a6498ce581aed315d3d6d790cc0129b0216 skopeo-tests-1.13.3-1.el9.s390x.rpm b6c95a05ab5fbd78e33b67ba89eb83ec0bcd309e6eef42c60a0f65e746d9ef61 ALSA-2023:6365 Copyright 2023 AlmaLinux OS 0 1 Moderate

mod_auth_openidc security and bug fix update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character (CVE-2022-23527) * mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied (CVE-2023-28625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default mod_auth_openidc-2.4.9.4-4.el9.s390x.rpm c1c5ef13f60c1956d11a3b0aa1aba63446cde2a0822fecc100420cec77dd7f64 ALSA-2023:6368 Copyright 2023 AlmaLinux OS 0 1 Moderate

qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a later upstream version: qemu-kvm (8.0.0). (BZ#2180898) Security Fix(es): * QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) (CVE-2023-2680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default qemu-pr-helper-8.0.0-16.el9_3.alma.1.s390x.rpm 0a0b53bfa2f81dedc2dba280efe5f131b42355d5a1da7f83b0fca8c764aace5f qemu-kvm-block-blkio-8.0.0-16.el9_3.alma.1.s390x.rpm 2525409332e34c6dd51abe60c40062ad04bbfdd80f53ebd1586fddaab992caca qemu-kvm-device-display-virtio-gpu-8.0.0-16.el9_3.alma.1.s390x.rpm 2c729c850713d93ab8be40d82c3f8dc404f0c3c4d5802d4c5142e19ca2311faa qemu-kvm-block-rbd-8.0.0-16.el9_3.alma.1.s390x.rpm 312b67426e1fb4afc43a377572c59cbf05992b24aecc72b83995a5442d58a400 qemu-kvm-tools-8.0.0-16.el9_3.alma.1.s390x.rpm 4ce692219912ba2f0694f4509f4ba81f182eaee8f919a8f264d949da97a93a50 qemu-kvm-device-display-virtio-gpu-ccw-8.0.0-16.el9_3.alma.1.s390x.rpm 54509bbc045b2607bca93700bfeeda6fa74b97ac796854caa0d32d6e66cc199f qemu-kvm-block-curl-8.0.0-16.el9_3.alma.1.s390x.rpm 5d4a6d53eb32aa1ac6d25a83689727b34b911948558d6f26a39bd20abcf71566 qemu-kvm-8.0.0-16.el9_3.alma.1.s390x.rpm 6d32739ff900936d28225a0298655cef2c0b1b07c0395e9fbb6c813e96a94061 qemu-kvm-device-usb-host-8.0.0-16.el9_3.alma.1.s390x.rpm 6e59330d763428086aa8397311204cc2935bc24863e483d776b26b4d5f2a8f70 qemu-kvm-audio-pa-8.0.0-16.el9_3.alma.1.s390x.rpm 6ef3ce86efeb91baf6160765607763875775834e9076c780c3ac68146b695871 qemu-guest-agent-8.0.0-16.el9_3.alma.1.s390x.rpm 80e6e07389a43427d2f27c883c95c76e916e93d1f5d75df46435003d66806282 qemu-kvm-core-8.0.0-16.el9_3.alma.1.s390x.rpm a46bd5bf5780bc904d8ba94a1b63066becf2c74b742e3bdd679125eb88f7a172 qemu-kvm-docs-8.0.0-16.el9_3.alma.1.s390x.rpm b1ccde669983a667796b72769870e2436cafca98e596ffc105751db5a683af73 qemu-kvm-common-8.0.0-16.el9_3.alma.1.s390x.rpm c4b55758c167e0a9dbf98319388cd1735bae89b095f40d79c066906778508dab qemu-img-8.0.0-16.el9_3.alma.1.s390x.rpm fa71430568b2c985e0e6e7f788a86241e9fe02a6760bf7c3d0c5637b7ad68c7f ALSA-2023:6369 Copyright 2023 AlmaLinux OS 0 1 Moderate

qt5 security and bug fix update

Qt is a software toolkit for developing applications. Security Fix(es): * qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285) * qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) * qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369) * qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197) * qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default qt5-5.15.9-1.el9.noarch.rpm 1f03d500ce4714c52ed14b451049fb3d7f5102f275757c4803eeb326399f2988 qt5-qtbase-postgresql-5.15.9-7.el9.s390x.rpm 319d8ac95e2ea6c2fb8ed10599e0bcb94e4cc5ee13820eeafdf5a1c3fe907bbb qt5-qtbase-gui-5.15.9-7.el9.s390x.rpm 46257ad4d49a0275020c564abbc38f25e0962e82aba035007e606f2be41cd9f2 qt5-rpm-macros-5.15.9-1.el9.noarch.rpm 85144a67944d2d6c361c5da835b48399ff7ca39422027661915f58d0a7389f65 qt5-qtbase-private-devel-5.15.9-7.el9.s390x.rpm 97d6f48bf8a08e68e824874c2de6287fb6ec3366cb4b140f6a8adfdd62f59e46 qt5-qtbase-odbc-5.15.9-7.el9.s390x.rpm 9c1b3e02464f37902d1ff8b11e542216ccf7df2473f67df27bd77415240aedc8 qt5-qtbase-devel-5.15.9-7.el9.s390x.rpm af9749673a1ae03ac6142b58f9fb2b437dbed89194b8d7f2c7dc9ee780bfee18 qt5-qtbase-common-5.15.9-7.el9.noarch.rpm b4c263414cb34747e04caa5ec17718554621b059ac6e2aec604a7834cb244a03 qt5-qtbase-mysql-5.15.9-7.el9.s390x.rpm b59b63955229ffdd50cc68218d12967f07c5edea6f1707bb3171da952a583940 qt5-srpm-macros-5.15.9-1.el9.noarch.rpm c1f1403eebef89590fa960c668ba4b970b2cd83ca98034e4528831c1a05e8e78 qt5-qtbase-5.15.9-7.el9.s390x.rpm f57cd81888d1be534baf1a70890e8341047b98aa034c7155e5bb7d94d8160389 qt5-qtbase-examples-5.15.9-7.el9.s390x.rpm fc383a116afa7bd16aa408efe9717c7d71fefa02f2f4bdf02eacdee25815e719 ALSA-2023:6371 Copyright 2023 AlmaLinux OS 0 1 Moderate

cloud-init security, bug fix, and enhancement update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Security Fix(es): * cloud-init: sensitive data could be exposed in logs (CVE-2023-1786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default cloud-init-23.1.1-11.el9.alma.1.noarch.rpm 6543f9ac6dcf5896078fa6905c1b1017b73bd5ecc60d43d41be4af868aff8d4e ALSA-2023:6372 Copyright 2023 AlmaLinux OS 0 1 Low

gdb security update

The GNU Debugger (GDB) allows users to debug programs written in various programming languages including C, C++, and Fortran. Security Fix(es): * libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c (CVE-2021-3826) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default gdb-gdbserver-10.2-11.el9.s390x.rpm 40af26097c2ebc46560021e1655fc93c516a7318f0e03a8e640b72a67c86eec1 gdb-doc-10.2-11.el9.noarch.rpm 4f4578cb4c9bb950fd98a4091523de664e12486835a8a6f75653a2e05c5d0f21 gdb-minimal-10.2-11.el9.s390x.rpm 84062532e8836ca97ea73d9e52f53787921982bc03e790a3ebd0e83c45956e50 gdb-headless-10.2-11.el9.s390x.rpm bd2fe85ad3b617376886f3f8ac0c16f88a52f0bf44ad0652a7d800bbaaffc00e gdb-10.2-11.el9.s390x.rpm e5794338f8db10c6fca194dc334fb3ea2d40ef2c216d7ed2519d80f6b1e4f866 ALSA-2023:6380 Copyright 2023 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809) * runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561) * runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642) * runc: integer overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration (CVE-2021-43784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default runc-1.1.9-1.el9.s390x.rpm 102467e9862bad192c97eb3de75efecea26bb4528b4498efb991d8bdcc8457de ALSA-2023:6385 Copyright 2023 AlmaLinux OS 0 1 Moderate

liblouis security update

Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg). Security Fix(es): * liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767) * liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768) * liblouis: buffer overflow in Lou_Trace (CVE-2023-26769) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default liblouis-3.16.1-5.el9.s390x.rpm 926032d17ebdce811044949c09e26bbac6ea4536542761221a2a20ce41760f03 python3-louis-3.16.1-5.el9.noarch.rpm dd703bb9638c42a1ee89c9b39b2a03a38401268451406ff132cd8470daa88d78 ALSA-2023:6402 Copyright 2023 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security and bug fix update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default containernetworking-plugins-1.3.0-4.el9.s390x.rpm bfcd219a406229b3060f13e4d71998053f33abfbda467fece383d54d45a4f4fe ALSA-2023:6403 Copyright 2023 AlmaLinux OS 0 1 Moderate

httpd and mod_http2 security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following packages have been upgraded to a later upstream version: httpd (2.4.57). (BZ#2184403) Security Fix(es): * httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default mod_session-2.4.57-5.el9.s390x.rpm 1f73c7083475a68f53369bb6038b22f24051e80b6b6e781baf1e9328a588fc1b httpd-filesystem-2.4.57-5.el9.noarch.rpm 32e094505ffe7810a951b4ad337509c1d1dfda74acf8509405d2053e224a57e9 httpd-devel-2.4.57-5.el9.s390x.rpm 43c9c5574009e43b8ba80d546f763c2cf83748a97b9e23b1ac19eb9aeecb2956 mod_ssl-2.4.57-5.el9.s390x.rpm 4d36b621bd9d978b8b6daf6189320ee3a3ba9bd088456169735cd93fef4bf36b mod_lua-2.4.57-5.el9.s390x.rpm 69888c47bebd744947616b741906c02798b0177586e89028a2905e9219fa79a6 httpd-core-2.4.57-5.el9.s390x.rpm 6b942da85b3278ca2aee2b5b046d07ae94d889f52691b95e3c4fb578e16b6561 mod_proxy_html-2.4.57-5.el9.s390x.rpm 9c2f766d96d862ce35eaf3d972bfec059026012c74753fbfb3bf6d8ffb3f87f5 httpd-tools-2.4.57-5.el9.s390x.rpm a582c16d641ecc3a42a1fafd3ac391d74f13bdb078c1e69f90822148cf39a4c1 httpd-manual-2.4.57-5.el9.noarch.rpm b242a56538be35818ce6fd9ce455c42ad770d5e54f8cc7c8d1b8d971b70f7972 httpd-2.4.57-5.el9.s390x.rpm c2c127da2e5da4a4c8e5f369b4229736548b0a80e3b94e1a0944fa510ffbbdcc mod_ldap-2.4.57-5.el9.s390x.rpm e9937febf6e6d32819bd1ceb00a52bdd2586e668ded3690906d952823fcd5fec ALSA-2023:6409 Copyright 2023 AlmaLinux OS 0 1 Moderate

libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785) Security Fix(es): * libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libvirt-daemon-kvm-9.5.0-7.el9_3.alma.1.s390x.rpm 13cbaa9d1e188ddb899c7ceedb69408bd2528f3a5433a699aced6bc19618b94c libvirt-daemon-driver-interface-9.5.0-7.el9_3.alma.1.s390x.rpm 2cf6fd0f7e69c8c89271ad56f004be3b541c2e305933a6f4d7022b72a4e1b20a libvirt-libs-9.5.0-7.el9_3.alma.1.s390x.rpm 2f3e1a8caeb6ab2adb97682a88dfa78c9948b1c28679858040b644585eef857e libvirt-daemon-driver-nwfilter-9.5.0-7.el9_3.alma.1.s390x.rpm 35334ba2daa5a27778df5a1f061d3f9047f9494029fdc0cffdc7b67de9bb3803 libvirt-daemon-plugin-lockd-9.5.0-7.el9_3.alma.1.s390x.rpm 385174cf6899ced5037ceb518af8bf86bf124e3948329c3ae85830af3e88fc8b libvirt-daemon-driver-storage-disk-9.5.0-7.el9_3.alma.1.s390x.rpm 3b8fa22a98e8b462b91107b6ba0a3d2f548ec991b9fb65b319bb80df41bb64a7 libvirt-client-9.5.0-7.el9_3.alma.1.s390x.rpm 3c14cb14eaf87b4861e99895d266322f7a670cdc5023bbc7fb1bba80c373347e libvirt-daemon-driver-storage-9.5.0-7.el9_3.alma.1.s390x.rpm 425c9bafe5a1369450dd20081f0f998fad0c996522da9b2e10f1ad28aeb8726a libvirt-daemon-config-nwfilter-9.5.0-7.el9_3.alma.1.s390x.rpm 5152a9d53c4bbcf0c7265263b2d4e167d607e949416a51b4f540be746cee4cde libvirt-daemon-driver-qemu-9.5.0-7.el9_3.alma.1.s390x.rpm 67db680246bd3740f724162b451b54c4e10af5f3390a547f89f8148b58815f3c libvirt-daemon-driver-storage-scsi-9.5.0-7.el9_3.alma.1.s390x.rpm 72e63a20db52a5086ef8c115adb4e369f7abc7b7cd58a997159d78354008e5d1 libvirt-daemon-lock-9.5.0-7.el9_3.alma.1.s390x.rpm 7f10b74a041d9caedfd500289397d08d22f45838cdd696782311378bda97603d libvirt-daemon-config-network-9.5.0-7.el9_3.alma.1.s390x.rpm 859e823b78b9f93e92180762ade600d7aedb5ae65c451617820d2cfc706fe74c libvirt-daemon-log-9.5.0-7.el9_3.alma.1.s390x.rpm 8bd92777602177509220973c656f545f043f4ecd00720b280570bcb478aea03a libvirt-daemon-driver-storage-logical-9.5.0-7.el9_3.alma.1.s390x.rpm 914099b72dcd47a8cb20816ef18039b4b2c3c241e46c07dce235f207eae622fb libvirt-daemon-driver-storage-core-9.5.0-7.el9_3.alma.1.s390x.rpm 97679ac6b8d79d5083ef61282cac479da786fb34245904e5a7e227e94d3375df libvirt-daemon-driver-storage-mpath-9.5.0-7.el9_3.alma.1.s390x.rpm 9d3cead4395697f971a425dc3e99feb9bf8fa26125b8b1be27b5bb79961811ae libvirt-daemon-driver-storage-iscsi-9.5.0-7.el9_3.alma.1.s390x.rpm b348c6a0906217f8d38445f95d7bb1afa23db44c66439b1252d322803a364e38 libvirt-9.5.0-7.el9_3.alma.1.s390x.rpm b412f5ee21171cb851a7f461055bccb9a843b7a2a2cc4d684c5205781857e543 libvirt-daemon-driver-storage-rbd-9.5.0-7.el9_3.alma.1.s390x.rpm b706ebcda40089d29f587791949f690d4b9840fe61c8958d37bca81fb2f84dfc libvirt-daemon-driver-secret-9.5.0-7.el9_3.alma.1.s390x.rpm b9ca292b3b0db78ec59feb9e07e15ce608f877eeb3b6641cdda5aa51664f8ffa libvirt-daemon-driver-nodedev-9.5.0-7.el9_3.alma.1.s390x.rpm d468ab514e01e6dc67d35535d33a2608b567c1bd98efc0bc605743d741bbb414 libvirt-daemon-9.5.0-7.el9_3.alma.1.s390x.rpm d949e095ff4952c745a3401c74a532965688987fe9d82701accc61787624b79f libvirt-daemon-proxy-9.5.0-7.el9_3.alma.1.s390x.rpm df5302df08d2d0d4caa8e673f9278f8a6fcacdf245e30c178ebef900fe612819 libvirt-daemon-driver-network-9.5.0-7.el9_3.alma.1.s390x.rpm e1bb18dd39d9b7641b78d0ae6576e0eac1be04e734a423837d376787dcfcf67a libvirt-nss-9.5.0-7.el9_3.alma.1.s390x.rpm ea0573f89f0a64bd9f63698bacc0c0d89e5289f2eae649ad633def740db2eef6 libvirt-daemon-common-9.5.0-7.el9_3.alma.1.s390x.rpm ff80c28e96c1aa819b2ac53662e5503f7ff61f53ffabb74c68c5e2f948be0b7b ALSA-2023:6420 Copyright 2023 AlmaLinux OS 0 1 Moderate

grafana security and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: persistent xss in grafana core plugins (CVE-2022-23552) * grafana: plugin signature bypass (CVE-2022-31123) * grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins (CVE-2022-31130) * grafana: Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins (CVE-2022-39201) * grafana: email addresses and usernames cannot be trusted (CVE-2022-39306) * grafana: User enumeration via forget password (CVE-2022-39307) * grafana: Spoofing of the originalUrl parameter of snapshots (CVE-2022-39324) * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default grafana-9.2.10-7.el9_3.alma.1.s390x.rpm 5d80796062db2034a000a3b5525d8596f183e5630674668a3c55db728e405738 ALSA-2023:6429 Copyright 2023 AlmaLinux OS 0 1 Low

libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libpq-13.11-1.el9.s390x.rpm 6c22bf505478f0159651c22aae97df04ef82bcf8de6ce2043ec9046c98fa8213 libpq-devel-13.11-1.el9.s390x.rpm 8b3f4f98467e08f776c8cf86fb313340709ef5c6b48d748176ec1a0d5a8b7f9a ALSA-2023:6431 Copyright 2023 AlmaLinux OS 0 1 Moderate

libfastjson security update

The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects. Security Fix(es): * json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libfastjson-0.99.9-5.el9.s390x.rpm 3d9f1c33bd8fe9048cf76b2b238c0a4a9754057e515e32e27a74a2ce164ebac4 ALSA-2023:6434 Copyright 2023 AlmaLinux OS 0 1 Moderate

frr security and bug fix update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: Reachable assertion in peek_for_as4_capability function (CVE-2022-36440) * frr: denial of service by crafting a BGP OPEN message with an option of type 0xff (CVE-2022-40302) * frr: denial of service by crafting a BGP OPEN message with an option of type in bgp_open_option_parse in the bgp_open.c 0xff (CVE-2022-40318) * frr: out-of-bounds read exists in the BGP daemon of FRRouting (CVE-2022-43681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default frr-8.3.1-11.el9_3.alma.1.s390x.rpm 58892c0a844aacfe87875a5d9072242ec842d9603da4021cea9d8e91033cb280 frr-selinux-8.3.1-11.el9_3.alma.1.noarch.rpm 870b0f8fe1790980445cc04b697f5bc1d76221d1f374500912df87374d47bb49 ALSA-2023:6469 Copyright 2023 AlmaLinux OS 0 1 Moderate

wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: RTPS dissector crash (CVE-2023-0666) * wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668) * wireshark: Candump log file parser crash (CVE-2023-2855) * wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856) * wireshark: NetScaler file parser crash (CVE-2023-2858) * wireshark: XRA dissector infinite loop (CVE-2023-2952) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default wireshark-3.4.10-6.el9.s390x.rpm 4c97f3a779880e3f96062ac21db0cc2856e366061fabf148ff617c6f56176499 wireshark-cli-3.4.10-6.el9.s390x.rpm 83f86c802d1e0ea0b497a5dee7aeb456fbc5c8c927525d3d70b563572c8922c1 ALSA-2023:6473 Copyright 2023 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * containerd: Supplementary groups are not set up properly (CVE-2023-25173) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default buildah-tests-1.31.3-1.el9.s390x.rpm 3a79731fe89a2654eedf723e3d6fdd5a725d8a18bb26a72076adf4edef20db72 buildah-1.31.3-1.el9.s390x.rpm 6cfd3c4afa6aa431eadfec755903e5c44e3975e118bd2ccf795415aeaa811afb ALSA-2023:6474 Copyright 2023 AlmaLinux OS 0 1 Moderate

podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang.org/x/net/html: Cross site scripting (CVE-2023-3978) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: go/parser: Infinite loop in parsing (CVE-2023-24537) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * containerd: Supplementary groups are not set up properly (CVE-2023-25173) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default podman-remote-4.6.1-5.el9.s390x.rpm 128193af1bfbb521a26c723bf36502c4c5fd42c023538cb0c716b59f1f4224b8 podman-tests-4.6.1-5.el9.s390x.rpm 1d890173bf8908df21913ac3997c644cfefca81044546187a0058544baa12421 podman-docker-4.6.1-5.el9.noarch.rpm 26f969f6a921d0cce1dc6f9a5627c4710c59afb8598dad1ecc10b200fd5ebf9c podman-gvproxy-4.6.1-5.el9.s390x.rpm b51dff75c3a02c46dc3ba41deda364b7a2fc76912e2927a75e0cbb18e74f5549 podman-4.6.1-5.el9.s390x.rpm bc268eb1b926078b24832e271a5cd55a830e14ea6300e35ceaa3e73c5698d531 podman-plugins-4.6.1-5.el9.s390x.rpm f9a7ec6a193287326e5b7ad1ded73f97eaca35c21c5e587d3d87a81b2169d037 ALSA-2023:6482 Copyright 2023 AlmaLinux OS 0 1 Moderate

librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default librabbitmq-tools-0.11.0-7.el9.s390x.rpm 742cd67b1f4176bdacfd16f4afa3f18ecd70631b9fe2f999e487ce8716674d8e librabbitmq-0.11.0-7.el9.s390x.rpm ca6526bc24cda3289256c56cd2c5ba4b5cd3960a73777cd2bb274321377f10b3 ALSA-2023:6492 Copyright 2023 AlmaLinux OS 0 1 Moderate

tang security update

Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The tang package provides the server side of the Network Bound Disk Encryption (NBDE) project. Security Fix(es): * tang: Race condition exists in the key generation and rotation functionality (CVE-2023-1672) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default tang-14-2.el9.s390x.rpm da9d84cb8c5123cab67914e8618c3e47d4a4733c45f8934286d82d8a550275cd ALSA-2023:6494 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python3.11 (3.11.5). (BZ#2210785) Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) * python: file path truncation at \0 characters (CVE-2023-41105) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3.11-3.11.5-1.el9_3.s390x.rpm 17e443f98b4b2ed83eb87130a602efaf1efe1f35897b37fadd81db455cf7c3fb python3.11-tkinter-3.11.5-1.el9_3.s390x.rpm 7443a6dde107a5c228991f4eed766400aa1c5c6c86708b1606dfd0a563004d53 python3.11-devel-3.11.5-1.el9_3.s390x.rpm a303c682533a5a4711afa7e1cef5d6821a41158dbb38e144b99ec9fd636cdd84 python3.11-libs-3.11.5-1.el9_3.s390x.rpm e3c09331237cf35e3544e4f9db90633478ced3964b678bc02a02c6cfd03d4803 ALSA-2023:6496 Copyright 2023 AlmaLinux OS 0 1 Moderate

haproxy security and bug fix update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: data leak via fcgi requests (CVE-2023-0836) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default haproxy-2.4.22-1.el9.s390x.rpm abe47794f88d02873a71baf72c9ebc945eee7617735fe571dff351ad30dd1760 ALSA-2023:6497 Copyright 2023 AlmaLinux OS 0 1 Moderate

libX11 security update

The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow (CVE-2023-3138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libX11-common-1.7.0-8.el9.noarch.rpm 0cbe5dfc32d4d9fd68abb0d3e4e891a8dc0382f63aca1d7ba16dc3ee21fa971c libX11-xcb-1.7.0-8.el9.s390x.rpm 3cc38d473bb53515111de9f45bd802bd54c5fc68cb3d7aa8d8256841b9ffae63 libX11-1.7.0-8.el9.s390x.rpm 62724c202fef53d2a81bc626bc799ff10a535b5e1dd9e0b6710b74f023fecd67 libX11-devel-1.7.0-8.el9.s390x.rpm d74ffeb74952731211990c3b4aafac378a50697b7b1b74c18c28455c59002a87 ALSA-2023:6508 Copyright 2023 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: Empty entry in Java class path (CVE-2022-38745) * libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950) * libreoffice: Arbitrary file write (CVE-2023-1183) * libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libreoffice-ogltrans-7.1.8.1-11.el9.alma.s390x.rpm 1065fa48cf988fae48161cb3157410a9d292d111161dac0b21e4e4837b729431 autocorr-it-7.1.8.1-11.el9.alma.noarch.rpm 175366613442c2ede926c09391f3770d8eb7ccb977987d9d20c3e8da9660988d libreoffice-help-en-7.1.8.1-11.el9.alma.s390x.rpm 175e2c9893e35f957dec44907190ed81e932b6cea3d3a25971aa3abd5c3ca5f6 libreoffice-pdfimport-7.1.8.1-11.el9.alma.s390x.rpm 180acf338c9f24a88ad3758a7f6846fb85385b7265ce87a0b6a7ee3d8a308380 autocorr-sv-7.1.8.1-11.el9.alma.noarch.rpm 1b7dd0cd6bb741b1562ac7be47182262e78d08c6f2ee20ac115bfde2f7ab8423 libreoffice-core-7.1.8.1-11.el9.alma.s390x.rpm 1c0986cc844ba51984e4aee1992969cc7ab61b74a5042acbd3a9bf8ac90d9397 libreoffice-graphicfilter-7.1.8.1-11.el9.alma.s390x.rpm 1c40c0c1e7f9243efae6a83e7ee1b01d6c4a7f14c5178242ce2c4bce3f711af2 libreoffice-calc-7.1.8.1-11.el9.alma.s390x.rpm 286ddac5c26caae1e405182a28391519b918ac20f5721dd15bb6f9c4d75eaf79 libreoffice-data-7.1.8.1-11.el9.alma.noarch.rpm 33ef81fbfdaec7ebca6459a959adfc5c49c9dbb53f751e330fcc3e0ee525602c autocorr-fa-7.1.8.1-11.el9.alma.noarch.rpm 3469e833acb24319587667bc6104ddc4fc10eb8e0e6d73abdb9f2fe34fe8c0a3 libreoffice-ure-common-7.1.8.1-11.el9.alma.noarch.rpm 39f23bab4dd7afbd82b9ec80279ec948c75b5a5eff554c0296bd1f94aa2c4bdd libreoffice-langpack-en-7.1.8.1-11.el9.alma.s390x.rpm 3d384a5aa85bb7d65a1942f351b05b04e1aeb1b030bab9c98dc4a73bd0adbf1d autocorr-dsb-7.1.8.1-11.el9.alma.noarch.rpm 48dcfc54fad03b1e2c99903b276fcafc6c853000db1e1c50e6fa0067b3db25c0 autocorr-vro-7.1.8.1-11.el9.alma.noarch.rpm 4bd307452231df9c79f3d319e8b90a39a6fdfdb9f580064aa55870acfe37c597 autocorr-en-7.1.8.1-11.el9.alma.noarch.rpm 4de5a01d8a169ea663b8abc6ce726ccc47687d4c329364934db81179cb50c9a3 autocorr-mn-7.1.8.1-11.el9.alma.noarch.rpm 52ec501acbfc74b8c268aea934283ae1a4e744b6f6074d6922172f041fac1aaa autocorr-hsb-7.1.8.1-11.el9.alma.noarch.rpm 530beb7dd3075435af495db66c9aae85735e2d90f02613e5181df1ee93fa4784 autocorr-bg-7.1.8.1-11.el9.alma.noarch.rpm 543673bc32f764072de6dd9d1b705f28fdb12b7371ab80946b0d200ec2aeda1f libreoffice-impress-7.1.8.1-11.el9.alma.s390x.rpm 5ae35f644fa325fb4e2102a5a476bcbdd85cc72192e2f324bd935d67d584236a libreoffice-opensymbol-fonts-7.1.8.1-11.el9.alma.noarch.rpm 5b28f3e4cc56536c59b7ee350ed1842389600a960bbf800f4f95f955fbafb2cf autocorr-ko-7.1.8.1-11.el9.alma.noarch.rpm 5b700bf1b80045ba9cf77bdba5e96c1bf73d7fb815f735afac33c3257d163bb9 autocorr-sk-7.1.8.1-11.el9.alma.noarch.rpm 63a8bb4eab3dd91cc979d5fe389e4abc614b0fb700531af4350283926635bb19 autocorr-tr-7.1.8.1-11.el9.alma.noarch.rpm 684ceb063ed841f665d74c6925c00fe435b6a98c0a989bc7a9424f44f0c13e6e autocorr-vi-7.1.8.1-11.el9.alma.noarch.rpm 6d075ef8345ff0d72a6becb9c3f39ee2338d4584f84987d3ac43022b55508628 autocorr-nl-7.1.8.1-11.el9.alma.noarch.rpm 735ec826a1750551969f7c4e0a21f075edb10f73a702e51652b2d662f4ba31a6 autocorr-fr-7.1.8.1-11.el9.alma.noarch.rpm 7b3540e49ba44d6e7bd752c65712e9d669fce10f3d1862411859c6038b4210a0 autocorr-pt-7.1.8.1-11.el9.alma.noarch.rpm 813a8cf68523d78b9eae96c4b264a829af9fbb3f727188332cf2134075c7b873 autocorr-zh-7.1.8.1-11.el9.alma.noarch.rpm 943065ae9e2fa45011926673c7a4c32322022ac35cef6d01519b60de9bcdef3e autocorr-ca-7.1.8.1-11.el9.alma.noarch.rpm 9eef4bc73d018a2d37117604831513c28c675ae04696516c8fd7ca97d4862199 autocorr-ja-7.1.8.1-11.el9.alma.noarch.rpm a0c1a4012459a0fba90f97fea21b6090be5dbdddc0d66d484c63934698db01f9 libreoffice-ure-7.1.8.1-11.el9.alma.s390x.rpm a2db80243ce37da075d31d2c81cd05480604378a538547def5b18a3cda347193 autocorr-es-7.1.8.1-11.el9.alma.noarch.rpm ab9cae4a10acab2dd52902c7273524a42eb5dacd9c95bcc1edc1d967b3a07dc2 autocorr-lt-7.1.8.1-11.el9.alma.noarch.rpm ac9e9de72308ed585d84a7093e990ea558fcddaa4d0a7b2743cd2639cdab1a31 autocorr-ru-7.1.8.1-11.el9.alma.noarch.rpm ad20f0ea316d4f4daa91d5cdd9c09c833e6e2a1268f128ca1d143f77875400e8 autocorr-ro-7.1.8.1-11.el9.alma.noarch.rpm b3521bd527a264ed471153afd472eaaab433c9bdd0e350ddfe1c215aabb049e2 autocorr-ga-7.1.8.1-11.el9.alma.noarch.rpm bc52fd1e8ce77b0b42f81254f3078f892ad15681ae3426f0586e61c82650ccb7 autocorr-da-7.1.8.1-11.el9.alma.noarch.rpm c29d880be4ff60f317ea011908dbada4f6bb2d3350960c0a0f1e2214805e6529 autocorr-hu-7.1.8.1-11.el9.alma.noarch.rpm c4d854ae03e2d534b76343f984635b668a4a0cad506c4247fd298bcc26f33ee7 libreoffice-pyuno-7.1.8.1-11.el9.alma.s390x.rpm ca3fa7e1d2666d8c6af54e34dc1662a39d846ff4938f4a556c912e09c1c25037 autocorr-fi-7.1.8.1-11.el9.alma.noarch.rpm d6d7ddf2c5faa150d7787614b6e9512e1a33ee5dcc22ddbce72b3aa58c3ae9ff autocorr-pl-7.1.8.1-11.el9.alma.noarch.rpm d897bd02f9e8e568f98bfe7ea457cf51c1a2bf5b408e1b1fe8e573ef2f83aa7f autocorr-lb-7.1.8.1-11.el9.alma.noarch.rpm dec8021dbf8838add15047f1895854db02f93780710ed2d66f6443cec4586601 autocorr-de-7.1.8.1-11.el9.alma.noarch.rpm def31f18bc4602638f92dc8c53943d3d03c143939755578d2d03507d26ee2e68 autocorr-sr-7.1.8.1-11.el9.alma.noarch.rpm e08fb79399ed02920258871ef350b50d4a765590d51642f477476c67c4199f99 autocorr-is-7.1.8.1-11.el9.alma.noarch.rpm edb227bce18d4470146352cfa9e005c6352aeddee395763053df573d97955551 autocorr-cs-7.1.8.1-11.el9.alma.noarch.rpm eeb25ecbd3b47032b3ae0fb5ec05c0f7d398355ddaa6bdc6e2200f8e95ac9cf2 autocorr-el-7.1.8.1-11.el9.alma.noarch.rpm f50a89aac67adf16a4a53e31aa8c4202e4e9a3cb578167c45c37a30cc52cd21d autocorr-sl-7.1.8.1-11.el9.alma.noarch.rpm f63f30ca38e3c93fc45541c883de0885082f55c94ea3aa6f5a54a7292bd4622b autocorr-af-7.1.8.1-11.el9.alma.noarch.rpm f97b454dee535efa7fdbd052f774f6d9257f005e30a95bb58530902541af2880 autocorr-hr-7.1.8.1-11.el9.alma.noarch.rpm fbdc82b17b37c124f11c490bc24eff7eb489fcb6c1bb19e4dcbd05c7b97b271b libreoffice-writer-7.1.8.1-11.el9.alma.s390x.rpm fc790709b602be14ca87b78d1f6537a59477472aaeaa3cc560f87377bcb507da ALSA-2023:6518 Copyright 2023 AlmaLinux OS 0 1 Moderate

flatpak security, bug fix, and enhancement update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. The following packages have been upgraded to a later upstream version: flatpak (1.12.8). (BZ#2221792) Security Fix(es): * flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100) * flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default flatpak-libs-1.12.8-1.el9.s390x.rpm 364c8e31e15ce968d6a503fc5a9f1af3d254ede4fd6946f1e2e8d4311ce6949f flatpak-selinux-1.12.8-1.el9.noarch.rpm 469a239d4c34eae8e286edb3de5360898eb563a04d20528e0b45360fd1b89d9b flatpak-1.12.8-1.el9.s390x.rpm 9e0a0f928f69e5ef126fcda472d27b1a905092871f0261925f81a071caad2c60 flatpak-session-helper-1.12.8-1.el9.s390x.rpm a7190a909d839bda97fdf33a24c07a5f48860b0dce8348584edea74635305d58 ALSA-2023:6523 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-tornado security update

Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools. Security Fix(es): * python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations (CVE-2023-28370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3-tornado-6.1.0-9.el9.s390x.rpm 32710e95df7bba079c74bd01de777874a718f731f8c51478f70ddfeefc446b1b ALSA-2023:6524 Copyright 2023 AlmaLinux OS 0 1 Moderate

dnsmasq security and bug fix update

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-28450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default dnsmasq-utils-2.85-14.el9.s390x.rpm 6f95238256f3a77ffa8085ab8551dd164b81160b7801e967b1fc3c6a070043ba dnsmasq-2.85-14.el9.s390x.rpm c7b2f234b2d6e2a58d66ea2e292dc789eae59b2fbd8eeff238604d1fbd77b6c0 ALSA-2023:6535 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: arbitrary code execution (CVE-2023-32393) * webkitgtk: bypass Same Origin Policy (CVE-2023-38572) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592) * webkitgtk: arbitrary code execution (CVE-2023-38594) * webkitgtk: arbitrary code execution (CVE-2023-38595) * webkitgtk: arbitrary code execution (CVE-2023-38597) * webkitgtk: arbitrary code execution (CVE-2023-38600) * webkitgtk: arbitrary code execution (CVE-2023-38611) * webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885) * webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932) * webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954) * webkitgtk: use after free vulnerability (CVE-2023-28198) * webkitgtk: content security policy blacklist failure (CVE-2023-32370) * webkitgtk: disclose sensitive information (CVE-2023-38133) * webkitgtk: track sensitive user information (CVE-2023-38599) * webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434) * webkitgtk: arbitrary javascript code execution (CVE-2023-40397) * webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default webkit2gtk3-2.40.5-1.el9.s390x.rpm 1b70f5839e08f24b845be8fb9b7ff2f2cb6fc9d5208c7d73a7cb14650afdfb1a webkit2gtk3-jsc-devel-2.40.5-1.el9.s390x.rpm 2d32bc1890d6aec38f624c3869fd21a6bde56b67e42e1b13d300d2c20e98a2d7 webkit2gtk3-jsc-2.40.5-1.el9.s390x.rpm 521ff6577e922c0aaf4bedd460ac5dbb1573f657e5e313a07ad8b839ceb95aca webkit2gtk3-devel-2.40.5-1.el9.s390x.rpm 9d74bd036ece28e982f2a5874ca4e3449529e3d3d45bd83d0dca04f9e2eb173a ALSA-2023:6539 Copyright 2023 AlmaLinux OS 0 1 Moderate

perl-CPAN security update

The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fix(es): * perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS (CVE-2023-31484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default perl-CPAN-2.29-3.el9.noarch.rpm 74c55c9829b2161089335da08c942be8fa4c4b1d87fd84aa16e43dce8d99071d ALSA-2023:6542 Copyright 2023 AlmaLinux OS 0 1 Moderate

perl-HTTP-Tiny security update

HTTP::Tiny is a small and simple HTTP/1.1 client written in Perl. Security Fix(es): * http-tiny: insecure TLS cert default (CVE-2023-31486) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default perl-HTTP-Tiny-0.076-461.el9.noarch.rpm 7bc67a98cd73eb292036741d6e88925e35656650c75416b4c835cc9d61666798 ALSA-2023:6544 Copyright 2023 AlmaLinux OS 0 1 Moderate

ghostscript security and bug fix update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879) * ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default ghostscript-tools-fonts-9.54.0-13.el9.s390x.rpm 1def60354157960ddddc366e52dfb382fa46fe4c53199d1d926277b0c24907bd ghostscript-9.54.0-13.el9.s390x.rpm 4ea9d37dc0def2edf7457c49ac2c76f9c53d2add949c061416aef61761e30bac ghostscript-doc-9.54.0-13.el9.noarch.rpm 6222dc6fd993f4ebb21d1855184a5ec133bcf11a08260984a4cebec91fde644d ghostscript-tools-dvipdf-9.54.0-13.el9.s390x.rpm 85a8d169e34ea2e5f86fec7d91f331ca21997c41384f9b66f9046d8a0add86ea libgs-9.54.0-13.el9.s390x.rpm a0cac8bdcc43710674385bcba8accf106cdac4c6e7b4285fc50010aa8a48884b ghostscript-x11-9.54.0-13.el9.s390x.rpm a235153399d2f814bd4f20475902c8698c1e87fd7598354ea34a79460e8eaa98 ghostscript-tools-printing-9.54.0-13.el9.s390x.rpm a38a867d9f675eba1f7c8f59f8d347e413672c5c12493d51976a6667f2b2491c ALSA-2023:6549 Copyright 2023 AlmaLinux OS 0 1 Moderate

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Invalid IKEv2 REKEY proposal causes restart (CVE-2023-38710) * libreswan: Invalid IKEv1 Quick Mode ID causes restart (CVE-2023-38711) * libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart (CVE-2023-38712) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libreswan-4.12-1.el9.s390x.rpm d3a0706c77713032837652c67b7825569a653b52e017d8fac4e0d262aa944fc7 ALSA-2023:6551 Copyright 2023 AlmaLinux OS 0 1 Moderate

yajl security update

Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator. Security Fix(es): * yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default yajl-2.1.0-22.el9.s390x.rpm ca3adb18c24f6f645e4de6d2522e7bcee43980b8bc687f5a5d17928c58b7a30a ALSA-2023:6566 Copyright 2023 AlmaLinux OS 0 1 Moderate

libmicrohttpd security update

GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application. Security Fix(es): * libmicrohttpd: remote DoS (CVE-2023-27371) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libmicrohttpd-0.9.72-5.el9.s390x.rpm 1aae5bdf01007f33f3bfde7dbb6a39ddf68bf03ca007adc803766dbfcb194479 ALSA-2023:6569 Copyright 2023 AlmaLinux OS 0 1 Moderate

sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fix(es): * sysstat: check_overflow() function can work incorrectly, which could lead to an overflow (CVE-2023-33204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default sysstat-12.5.4-7.el9.s390x.rpm 9e7916648d324cd2b5ce7f893e372c227987faada7b0fe50f758c28e2267f617 ALSA-2023:6570 Copyright 2023 AlmaLinux OS 0 1 Moderate

tomcat security and bug fix update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998) * tomcat: not including the secure attribute causes information disclosure (CVE-2023-28708) * tomcat: Fix for CVE-2023-24998 was incomplete (CVE-2023-28709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default tomcat-9.0.62-37.el9_3.noarch.rpm 3243a5704e3756790a643180f73e6db416803a40c8121a29b02b63f7c09f15b4 tomcat-docs-webapp-9.0.62-37.el9_3.noarch.rpm 631738483d1c8a4a83ce44a7c2dfbbe6629f04d2ae1669f548f08310077b32dc tomcat-admin-webapps-9.0.62-37.el9_3.noarch.rpm 7dbf1bd58a807f362e68132507b310d6a9d71b02568d2442aa26c7f8d2161d49 tomcat-el-3.0-api-9.0.62-37.el9_3.noarch.rpm 9c937a2e67dd58371fd0ea3f9fdc0505c7fdc3aff6a521207c3ebe86879f7243 tomcat-webapps-9.0.62-37.el9_3.noarch.rpm b2b91cde77fa70d9f73654a89078e535a3d9bce64b1b28a06c3032707dc73089 tomcat-lib-9.0.62-37.el9_3.noarch.rpm b88307c078e6c360f31cf6274204b4c117363cd36c0daf1067805a883bd79f34 tomcat-jsp-2.3-api-9.0.62-37.el9_3.noarch.rpm c1a61b95274a92645b2a93cb200d35d5b7a06654261aca78c9684364381edfd4 tomcat-servlet-4.0-api-9.0.62-37.el9_3.noarch.rpm d4cde5b93ec9345cd3b3d3c8b851be99c6dcb7cdccc234e588f8045c52a56faa ALSA-2023:6575 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: null pointer dereference in LZWDecode() in libtiff/tif_lzw.c (CVE-2023-2731) * libtiff: tiffcrop: null pointer dereference in TIFFClose() (CVE-2023-3316) * libtiff: memory leak in tiffcrop.c (CVE-2023-3576) * libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c (CVE-2023-26965) * libtiff: Buffer Overflow in uv_encode() (CVE-2023-26966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libtiff-devel-4.4.0-10.el9.s390x.rpm 0e49b4a153be42a34b2f4ddb4a5c08f09b44d72f77cc335d024b225484d649c6 libtiff-4.4.0-10.el9.s390x.rpm 79e0ac0ed2c0bafeb955f97f8186aa681f4beb9c919897cbc28a7680084407fb ALSA-2023:6578 Copyright 2023 AlmaLinux OS 0 1 Moderate

libqb security update

The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling. Security Fix(es): * libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libqb-2.0.6-4.el9_3.s390x.rpm 9f057346a14d830f1e7db52089ed444c5a4e0a1799bc1ae37828979d4471fb08 ALSA-2023:6593 Copyright 2023 AlmaLinux OS 0 1 Moderate

binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix(es): * binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default binutils-devel-2.35.2-42.el9.s390x.rpm 36d47a7168a1008f92ae68a38a861d74bd24500fc5ef2c8ff20df2f7c83f6703 ALSA-2023:6596 Copyright 2023 AlmaLinux OS 0 1 Moderate

cups security and bug fix update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: heap buffer overflow may lead to DoS (CVE-2023-32324) * cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default cups-devel-2.3.3op2-21.el9.s390x.rpm 505735ddbf8c5715caafa9a7f0340312e357fe3fd346cda2d840a2b2730667de cups-filesystem-2.3.3op2-21.el9.noarch.rpm 68962dc1928b74302b651ac4230b67d5a0b12abd55225dd5b8d0ede2c3c1cfe0 cups-ipptool-2.3.3op2-21.el9.s390x.rpm be4899606f7cf3124fc2758365a0c8bf0495786c61145e8bf84230ac6569989c cups-printerapp-2.3.3op2-21.el9.s390x.rpm c898d8af7d2bface1be96c526d6c5e513d478fba909730902af2742e7ac4204a cups-client-2.3.3op2-21.el9.s390x.rpm dafc7dd575507f1e135e9396085a6bf7ce4bc3aba30cafe3bcb9e77a6ffc089b cups-lpd-2.3.3op2-21.el9.s390x.rpm ea04c0cb57c4fd46b0361624d8398b7bdb6e150f962d9fce352f4e70e71aa270 cups-2.3.3op2-21.el9.s390x.rpm ea90a848a584de5ceeefc6394e513735024af901ce62c73887af505ce1f13b10 ALSA-2023:6631 Copyright 2023 AlmaLinux OS 0 1 Low

glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499) * glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611) * glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default glib2-devel-2.68.4-11.el9.s390x.rpm 4f15a2950b9af4a5917d8a74973832189edd1a058aa60f1ac32f4469263c5231 glib2-tests-2.68.4-11.el9.s390x.rpm 5dda6023577ed31872b0d1324851d65865b7ecd123d7d8f49a16425c2475aa29 glib2-doc-2.68.4-11.el9.noarch.rpm 9d711ffafd75abebaf87048ec7616c332c8dd24f88398c746a5e8be14f921329 ALSA-2023:6635 Copyright 2023 AlmaLinux OS 0 1 Moderate

c-ares security, bug fix, and enhancement update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. The following packages have been upgraded to a later upstream version: c-ares (1.19.1). (BZ#2210370) Security Fix(es): * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904) * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130) * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147) * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default c-ares-devel-1.19.1-1.el9.s390x.rpm 24c4eda7837d40e039588634850eb4568d72cbb27c6c8aa851bcb4770d8cbe46 ALSA-2023:6643 Copyright 2023 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667) * libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libssh-devel-0.10.4-11.el9.s390x.rpm 074c98cb09f094df18da13936edfe1c6bf12fa21f669f4f34f2fc1eafcd8c29c ALSA-2023:6659 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python3.9 (3.9.18). (BZ#2210783) Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3-tkinter-3.9.18-1.el9_3.s390x.rpm 1939071d6a6e6461f85e248c1fa7cd265184e2ed9a419e5cc015c99a58d1da56 python-unversioned-command-3.9.18-1.el9_3.noarch.rpm 681d1b2a7e3cb78b4ad8467a5e8a7a406b3d2243b81d782539b45da8aa805088 python3-devel-3.9.18-1.el9_3.s390x.rpm 8bfbd959e1377efe38ce576f83a669958037a9ccda5264d8588777c2d1529626 ALSA-2023:6661 Copyright 2023 AlmaLinux OS 0 1 Low

gmp security and enhancement update

The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. Security Fix(es): * gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default gmp-devel-6.2.0-13.el9.s390x.rpm a8da50c9d278c087a7f02ec4d9b7d13552d32238d1fc38228d98757d947f9f9f gmp-c++-6.2.0-13.el9.s390x.rpm dd7098caa7c41f5ccc5051284f46e34dabcadcef5c60924b18cb6f2089ad50ec ALSA-2023:6667 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415) Security Fix(es): * samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127) * samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966) * samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967) * samba: spotlight server-side share path disclosure (CVE-2023-34968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default samba-winbind-krb5-locator-4.18.6-100.el9.s390x.rpm 58b6163df5f58caa64e53f55819aeda60b85a3eb5d4501859e52dc571bcee0cd samba-client-4.18.6-100.el9.s390x.rpm 715de1fc4be31487c87587ed449e27189c7f7f3bfa28c59cecc438f75b430cf1 samba-winbind-clients-4.18.6-100.el9.s390x.rpm ae98edab6e148e25a3fac944f8ea880d160ebedadc6a2cf0fcd6641c86eba7aa samba-krb5-printing-4.18.6-100.el9.s390x.rpm b815cc6c8f558a29bb5617333257bbefdfbebc6978b6cbbba940cd2afbfc235c samba-vfs-iouring-4.18.6-100.el9.s390x.rpm bf58626d1ff3dfd3fbdd95c0a299d45442cb211dc14780bffa77dde25bde1bf9 ALSA-2023:6679 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: GSS delegation too eager connection re-use (CVE-2023-27536) * curl: TELNET option IAC injection (CVE-2023-27533) * curl: SFTP path ~ resolving discrepancy (CVE-2023-27534) * curl: SSH connection too eager reuse still (CVE-2023-27538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default libcurl-devel-7.76.1-26.el9.s390x.rpm 19e8475674ff48d86aeeab8ab405be0a6850865254f39dd5626464bc6c57d014 ALSA-2023:6694 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default python3-pip-21.2.3-7.el9.noarch.rpm 0de03acbbb820b2371a37ac544cd894a921d1682dbfe94c8441c44172607f09c ALSA-2023:6698 Copyright 2023 AlmaLinux OS 0 1 Moderate

ncurses security and bug fix update

The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo. Security Fix(es): * ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default ncurses-c++-libs-6.2-10.20210508.el9.s390x.rpm 19f6a73969c819731b2b7e06a893a71194cde1343f288c3e5d9d82e70d25d171 ncurses-devel-6.2-10.20210508.el9.s390x.rpm 1f7177a5213dd98a946857a80e264522d9bd7215fdaa93736e0d103ec896176e ncurses-term-6.2-10.20210508.el9.noarch.rpm 35e1bd78bb33c310be53e5163f4e464607de7423cb31515685d7239383c49596 ALSA-2023:6699 Copyright 2023 AlmaLinux OS 0 1 Moderate

krb5 security and bug fix update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054) * krb5: double-free in KDC TGS processing (CVE-2023-39975) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default krb5-devel-1.21.1-1.el9.s390x.rpm ee035006c89d7fadb0a99aa3f6c85ea34ea77e19de468c0badfc4b8b51c63a01 ALSA-2023:6707 Copyright 2023 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468) * avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502) * avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default avahi-tools-0.8-15.el9.s390x.rpm 0cfa50a8b45376affbfe699b2f2b412e61efc2c686302b0981cffe0c7de0c950 avahi-glib-0.8-15.el9.s390x.rpm c6a388ea09fbc191b4bfaabbf1f6fb18683bb7187cc79a9de50f854231e5d92c ALSA-2023:6732 Copyright 2023 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default ghostscript-9.54.0-14.el9_3.s390x.rpm 21aab645768f3053dd9ec23f96a6e52b9153437b752c27f8ad19e39b44c97d8f ghostscript-tools-printing-9.54.0-14.el9_3.s390x.rpm 5e4e41e9aadc3105ff419cf65476669cb67f9730869757d1143ea48a74d2557f ghostscript-x11-9.54.0-14.el9_3.s390x.rpm 83609dd5951742caf72dbe96fca2ef4840eea1c65ab4b59d4b4d86ce44600db9 libgs-9.54.0-14.el9_3.s390x.rpm 906e1fb775095d19b41b4d5179dc10e00e15f97fc06558b05da8d92d0247f56b ghostscript-doc-9.54.0-14.el9_3.noarch.rpm 9479e1053be3d3d0a781bce60d6ffe0f971c920018f73bc35ee04d29fd63322e ghostscript-tools-dvipdf-9.54.0-14.el9_3.s390x.rpm c042a3ecf3e80983a120abaf469b09613cc83e7e51966442d042102d448d6f90 ghostscript-tools-fonts-9.54.0-14.el9_3.s390x.rpm cffabfb7a99a45d9f8f86bae51a3856b217f86a85a8d18568563a93ec631e8f5 ALSA-2023:6738 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-21-openjdk security and bug fix update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025) * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 21.0.0 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 21.0.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. * A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 20.0.0 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 20.0.1, increases it to 16 MB. (AlmaLinux-14954) * When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-14962) * Installing the same java-21-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-21-openjdk-headless package. This prevented the use of the dynamic dump feature, because the checksum in the archive would be different on each system. This release resolves this issue by using the .jsa files generated during the initial build. (AlmaLinux-14946) * The /usr/bin/jfr alternative is now owned by the java-21-openjdk package. (AlmaLinux-14959) * The jcmd tool is now provided by the java-21-openjdk-headless package, rather than java-21-openjdk-devel, to make it more accessible. (AlmaLinux-14948) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default java-21-openjdk-static-libs-21.0.1.0.12-2.el9.alma.1.s390x.rpm 07dc0cf762125ca17862c108af7db5ce309267edbaaabf60d65b74c9a12e8da4 java-21-openjdk-javadoc-zip-21.0.1.0.12-2.el9.alma.1.s390x.rpm 42a1fcc906eecc63948adbba2268e7c56fbec690fa90eea39c993ab181089e8b java-21-openjdk-javadoc-21.0.1.0.12-2.el9.alma.1.s390x.rpm 53a5b935fdd0b920f4258b7325095f1ce6fb6df1b796093b6aaa104a6c6ad74d java-21-openjdk-src-21.0.1.0.12-2.el9.alma.1.s390x.rpm 685a2dc95c3397ca856d8bb2a7c520e847e60592ae934069f30cbc3930403a2a java-21-openjdk-headless-21.0.1.0.12-2.el9.alma.1.s390x.rpm 833a992b884835072ed0ae4cbcf6dfee769372146c051c1139d2582bbd83dc5d java-21-openjdk-21.0.1.0.12-2.el9.alma.1.s390x.rpm ca612cd8dcbe79c2fcc48f9c4182072ccdab720839bb91a3720b7532d3295c30 java-21-openjdk-demo-21.0.1.0.12-2.el9.alma.1.s390x.rpm d7385226de23088ed3af66ba9333c92776e4243a1deaeaf0d06ca1b65f236bbc java-21-openjdk-devel-21.0.1.0.12-2.el9.alma.1.s390x.rpm df80e9e539533af76864e7a9983b70200ee6ccc5b525f2459fc7697b2829b50e java-21-openjdk-jmods-21.0.1.0.12-2.el9.alma.1.s390x.rpm ee339ff3f2eddc47e89919e9da2be85addc9e8e759933d0cd0fa163c124a3444 ALSA-2023:6744 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961) * samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091) * samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default samba-winbind-krb5-locator-4.18.6-101.el9_3.alma.1.s390x.rpm 52147d0d2ba79af9c70a8a16eb5d91ea196a4ee2695bcdcaa51ecc37820367be samba-vfs-iouring-4.18.6-101.el9_3.alma.1.s390x.rpm 6e77f6fd9544d4bb0a2105d4102cb6ab65ec3091ed2abc41b64096c30549fa7b samba-winbind-clients-4.18.6-101.el9_3.alma.1.s390x.rpm 8157afb545d3d0ff6d8d96eb3990ad5a3e477f48e70901c73dbd22dd3ab8d12f samba-client-4.18.6-101.el9_3.alma.1.s390x.rpm 94b5dd8ce17699d6334bcdf70351d705b4901774c4f0e07f60fffdd801505a71 samba-krb5-printing-4.18.6-101.el9_3.alma.1.s390x.rpm e6d705a46fb8677325b75ea676999229adf597a0134e1701bfa850d0191edbe9 ALSA-2023:6745 Copyright 2023 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545) * curl: cookie injection with none file (CVE-2023-38546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default libcurl-devel-7.76.1-26.el9_3.2.s390x.rpm edbf15f591c8701946437045308d253a1fb5256d58e1b029073f34edd44a7b14 ALSA-2023:6748 Copyright 2023 AlmaLinux OS 0 1 Critical

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) * squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846) * squid: denial of Service in FTP (CVE-2023-46848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_2_default squid-5.5-6.el9_3.1.s390x.rpm 5e7c56c6f155663f4a664394a04ffa2c554ecb91ae4afd98efcb31786e11d878 ALSA-2023:7253 Copyright 2023 AlmaLinux OS 0 1 Moderate

dotnet8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Security Fix(es): * dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049) * dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default dotnet-targeting-pack-8.0-8.0.0-2.el9_3.s390x.rpm 2297a091f9c80ade8b3cc0c001e4a71c1c00046fa3da644a1a31fc3574ed907f aspnetcore-runtime-8.0-8.0.0-2.el9_3.s390x.rpm 3f5162b47c3878a3103b8d33250c897c1b3d89cef840c84017a4dd1316666150 dotnet-host-8.0.0-2.el9_3.s390x.rpm 40173c5dd3b27a001b54c690e796d7f60485fafe141dd4374ca904c001104f69 dotnet-apphost-pack-8.0-8.0.0-2.el9_3.s390x.rpm 8378bab51751c174b2c09e24ba23ca482a35711a9fd1da887a6ee65a99fc82b7 dotnet-templates-8.0-8.0.100-2.el9_3.s390x.rpm 9550c7417b52438029a9ac86ca561ca1bc44fd2590e9e49c34f9d454f5ae4a4a dotnet-sdk-8.0-8.0.100-2.el9_3.s390x.rpm ad4c1a0dca8fd08911101909273fb27f9fa3aec05a609d9d8846098a253e86d8 aspnetcore-targeting-pack-8.0-8.0.0-2.el9_3.s390x.rpm d8a49e92b7542be539c86e00c2368620a93402088d26834673327f19d87a16b0 dotnet-runtime-8.0-8.0.0-2.el9_3.s390x.rpm dd534a96c79637b544c1a533baf283c8441d792b22abf6cd1694a3ffc84798e1 netstandard-targeting-pack-2.1-8.0.100-2.el9_3.s390x.rpm e1cbf015d6c1dfe1aa6c0c6978d91214e8ac0420c37a230432bb63271f960360 dotnet-hostfxr-8.0-8.0.0-2.el9_3.s390x.rpm e3ccaaa025f8cffd9cc143009da0f412bdeef0ee54141cc77ffbbf63d1532d3d ALSA-2023:7255 Copyright 2023 AlmaLinux OS 0 1 Moderate

dotnet7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14. Security Fix(es): * dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049) * dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default aspnetcore-targeting-pack-7.0-7.0.14-1.el9_3.s390x.rpm 03680507814c5cbf455950dfd1ee2f6c947540bda86965d04f36b8a92cc46651 dotnet-hostfxr-7.0-7.0.14-1.el9_3.s390x.rpm 2860c404883eb25932d59fa1de7929a07e55933e65d57aaff3f713468a9d00b3 dotnet-targeting-pack-7.0-7.0.14-1.el9_3.s390x.rpm 2e730ce504e4edd54e085e3dbaf86b65ef25192e36d4034f98b4d663593e675d dotnet-apphost-pack-7.0-7.0.14-1.el9_3.s390x.rpm 696318795cd381332d56cbfb21c49fbfe43adc9284068304b2bd7e57cc27653e dotnet-sdk-7.0-7.0.114-1.el9_3.s390x.rpm b0a6ccae12dbbd1ea3ceb9319b7a30fa61084212778b33a8b304075276e809df dotnet-runtime-7.0-7.0.14-1.el9_3.s390x.rpm b6f1623d59fa9018e603c441b7d2532acfc921857707eaeddb7ec989f3998c1a dotnet-templates-7.0-7.0.114-1.el9_3.s390x.rpm d905dffe50be64ec00ffc0af5554e773f664b929eb76902e94c747adb1c06bb2 aspnetcore-runtime-7.0-7.0.14-1.el9_3.s390x.rpm e709ae65410cdee0763c78cc0103dcfc85c52c28ceb14c159d1aacd5201881ff ALSA-2023:7257 Copyright 2023 AlmaLinux OS 0 1 Moderate

dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25. Security Fix(es): * dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049) * dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default dotnet-apphost-pack-6.0-6.0.25-1.el9_3.s390x.rpm 576b37f41e8eb147b715f9400729929ca09a957427616e4e9901c6a57b9b81d2 dotnet-templates-6.0-6.0.125-1.el9_3.s390x.rpm 73248944dbede1d997398f2eb685fbc36dba2f84aeb87f591f4de31e8c70e583 dotnet-hostfxr-6.0-6.0.25-1.el9_3.s390x.rpm 8a20f1a93690457c6d8a1ad83135f90380f907479b56a200dda75034b07b1e79 aspnetcore-runtime-6.0-6.0.25-1.el9_3.s390x.rpm 97f742cea27291323f71eb234d01864c654ba9914d23e30cc959cb416cf41125 aspnetcore-targeting-pack-6.0-6.0.25-1.el9_3.s390x.rpm abf35ce0129c1af628b653a44036acc26110d75d92d3e9b7772abeedcddfc781 dotnet-runtime-6.0-6.0.25-1.el9_3.s390x.rpm b14e2293c238bc924490b409917109bad1182a58585bd4ad2eb64083c850f972 dotnet-targeting-pack-6.0-6.0.25-1.el9_3.s390x.rpm d16a5dd2e29c940e0e095cb47b4c843c4e939417c4ba6aea31a955d90b62260e dotnet-sdk-6.0-6.0.125-1.el9_3.s390x.rpm e0e75978652a2a4c21bdc3598edb31e5c40acef35cb8da25ed5d3f40f34ae466 ALSA-2023:7465 Copyright 2023 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: DoS against HTTP and HTTPS (CVE-2023-5824) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default squid-5.5-6.el9_3.2.s390x.rpm 2622fd6b595278887d67d5033f24f22bf63aeb18ecc71f4b3c8474c2688e52cf ALSA-2023:7501 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.5.0. Security Fix(es): * Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204) * Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205) * Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206) * Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207) * Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212) * Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208) * Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default thunderbird-115.5.0-1.el9_3.alma.s390x.rpm f48d10c3f7af0953cf150d6be03763849eeb2c92aa6d196e019ab1fad478f5a8 ALSA-2023:7507 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.5.0 ESR. Security Fix(es): * Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204) * Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205) * Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206) * Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207) * Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212) * Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208) * Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default firefox-115.5.0-1.el9_3.alma.1.s390x.rpm 8628f05509e05e3b500eb31236b6d410c9f5b98bcd62089b39fbc5befe2cd101 firefox-x11-115.5.0-1.el9_3.alma.1.s390x.rpm a61e9b6d3d98056f863dab95e3bc72dfe2be6a05b50df5d1fbc90d3fc465789b ALSA-2023:7711 Copyright 2023 AlmaLinux OS 0 1 Moderate

apr security update

The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines. Security Fix(es): * apr: integer overflow/wraparound in apr_encode (CVE-2022-24963) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default apr-devel-1.7.0-12.el9_3.s390x.rpm 6aac13dcbf258bb1689c88edeb61a911329ffdc8c567793f80eddefb95b5c2a1 apr-1.7.0-12.el9_3.s390x.rpm b0061fd109e411313ce7c9dee754b0a918a23e361f1ef5fb622b464933cc2ae0 ALSA-2023:7712 Copyright 2023 AlmaLinux OS 0 1 Important

tracker-miners security update

Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker. Security Fix(es): * tracker-miners: sandbox escape (CVE-2023-5557) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default tracker-miners-3.1.2-4.el9_3.s390x.rpm 24d2a83d93823945b983c449b46b4190881b763c7f545bb85e51a4b974d1ee1d ALSA-2023:7715 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default webkit2gtk3-2.40.5-1.el9_3.1.s390x.rpm 043d599f817dec8417c1a281d30c7b0efbc021621f58faa9d6c7bc073f6aeb83 webkit2gtk3-jsc-devel-2.40.5-1.el9_3.1.s390x.rpm 580cc14c7aecb2505d3bb22f5f43ae526d37b387253db275c7e5333508a42325 webkit2gtk3-jsc-2.40.5-1.el9_3.1.s390x.rpm 96c2171a2584b826002d67a20f356fba93772b407d3b234b8c1e4b7fdadeeb41 webkit2gtk3-devel-2.40.5-1.el9_3.1.s390x.rpm a33a78f766f7cd026bb39240dc9249acd52b0564b5f17e9546a47ef313ec728d ALSA-2023:7747 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default libxml2-devel-2.9.13-5.el9_3.s390x.rpm fed0af2a10cd84d0448300ae1c2c773ab26a17ce253fd01f00d1f9191bf83608 ALSA-2023:7753 Copyright 2023 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920) * python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default fence-agents-kubevirt-4.10.0-55.el9_3.2.alma.1.s390x.rpm 1c990ca2b2187755d8c2aa4304c75ebcbc714bebbfb688273094709334b998fc fence-agents-ibm-vpc-4.10.0-55.el9_3.2.alma.1.noarch.rpm 7945b340fe328494dd4f3e89fb3ceb0c36fb0a70648bc9bbbf1a938ff741b364 fence-agents-ibm-powervs-4.10.0-55.el9_3.2.alma.1.noarch.rpm 80eff58a1a89b97995a951a4efcecc45eefbbc90757a0c4d7d1024bae7fa2edf fence-agents-common-4.10.0-55.el9_3.2.alma.1.noarch.rpm dc2d621180d9db27968919115009987ddf187fba19a3589f99e1186e8040865b fence-agents-virsh-4.10.0-55.el9_3.2.alma.1.noarch.rpm ef5db45357e983592d039b048539ec273e77876282975353eb099a6599f9b9c5 ALSA-2023:7754 Copyright 2023 AlmaLinux OS 0 1 Moderate

pixman security update

Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fix(es): * pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default pixman-devel-0.40.0-6.el9_3.s390x.rpm bc18de8eb8ef9b86bd91067a7dffa3986abb32ee9558599c08a11857679fc306 pixman-0.40.0-6.el9_3.s390x.rpm fcfb86a1c84f16e1f4c217b1d5fe6b32a05b4a6db0a2d8f99213ea4fb0d44e4a ALSA-2023:7762 Copyright 2023 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default skopeo-tests-1.13.3-3.el9_3.s390x.rpm 40f439741f357957f1fde35deaf4914fbb87ea994963b978177ead40be4e797d skopeo-1.13.3-3.el9_3.s390x.rpm a8d4d1b803e3d37b3194585ec118385721f25e500adda6b088e4312abd5ba172 ALSA-2023:7763 Copyright 2023 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default runc-1.1.9-2.el9_3.s390x.rpm 940f6140a2213d5d8a89c85c2481b38190cd4f460eb795ffffc9ee3159a74251 ALSA-2023:7764 Copyright 2023 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default buildah-1.31.3-2.el9_3.s390x.rpm 6b009a5bf2c56599e7fb9ec0bf92e7b2f6558418068511dbd139594da1d2664b buildah-tests-1.31.3-2.el9_3.s390x.rpm f76889fa2b08aa9717122e68d644aeedaec9a8f9769ef0920670c2d964bbd691 ALSA-2023:7765 Copyright 2023 AlmaLinux OS 0 1 Moderate

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default podman-remote-4.6.1-7.el9_3.s390x.rpm 339e0993591f16c2fc02d6c9ed519f79142b36cc76696a1f77f5b2fa8acf3e5f podman-tests-4.6.1-7.el9_3.s390x.rpm 59b6325d0517a23b95cfed12cb6ace1d8934f999d1745748d18cd8928953aed1 podman-gvproxy-4.6.1-7.el9_3.s390x.rpm 88a3462c563ea6f1da699c698ac078a08618256ed18ea767fa8c43a1c7ebd969 podman-plugins-4.6.1-7.el9_3.s390x.rpm be7f57edbb4d5126be2592eaebf38e798e9c9ed61440036e745add79f20333a9 podman-docker-4.6.1-7.el9_3.noarch.rpm e04db657a2b32f8ed6237a285a6a374c16fa32b0c4359d0aaaf7473b962e109d podman-4.6.1-7.el9_3.s390x.rpm fb112135cae5ad1e014edfca99315279cfc0958331aa4dc979212b1e8a268392 ALSA-2023:7766 Copyright 2023 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default containernetworking-plugins-1.3.0-6.el9_3.s390x.rpm 13c571102b6d3809d40603f6c993666f4980fe22f8c1a73498d3ffee7c3aff8f ALSA-2023:7784 Copyright 2023 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869) * postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868) * postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417) * postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default postgresql-contrib-13.13-1.el9_3.s390x.rpm 294596072827da1618f9d38631a7b7854f376b520d81032ac009e6327158fc67 postgresql-plperl-13.13-1.el9_3.s390x.rpm 307d6a221ee6cc5b52467ef383a5e2c24ef5c07c2f6a484904fb60c48f81e437 postgresql-upgrade-13.13-1.el9_3.s390x.rpm 55fefa49345afaa7a26137e5f4c0e4fa3935e7f384f69085d3e1f606969ae422 postgresql-plpython3-13.13-1.el9_3.s390x.rpm 569436fcda3da23c0a37923e087e81a48fadaab7e137d7f21953ae332b26fced postgresql-pltcl-13.13-1.el9_3.s390x.rpm 5dba871dae5eb2ada0d4885cdc3b705be6c5275b7609f8a11bc17d8c494140ac postgresql-private-libs-13.13-1.el9_3.s390x.rpm 61e69f3d98b1c8cb9b63c442329535e98a77a477cfb877563384d9d4ab312177 postgresql-server-13.13-1.el9_3.s390x.rpm 999c92b54032f90c20ce2e2e8779d0afcffa04e8b1a0eb5fa30d9d9ace77febb postgresql-13.13-1.el9_3.s390x.rpm dffa89fd6d0fef59e31fd50c607ff1048d475d0a567794d9fc6cba5cd57bc2c8 ALSA-2023:7785 Copyright 2023 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869) * postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868) * postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417) * postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870) * postgresql: MERGE fails to enforce UPDATE or SELECT row security policies (CVE-2023-39418) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default postgresql-15.5-1.module_el9.3.0+52+21733919.s390x.rpm 2879f1dbc378bf4db97f6e58943e806336fa8481e8de62114472aec32f994677 postgresql-upgrade-15.5-1.module_el9.3.0+52+21733919.s390x.rpm 34f9f78460d33972f0163a50ccd45eed7b64b778cfa48de860e5bb8774903904 postgresql-private-devel-15.5-1.module_el9.3.0+52+21733919.s390x.rpm 35ad49573e821591ab76c54b29e8724da2f7052304489f5eb6d98fb3aa756bbb postgresql-plperl-15.5-1.module_el9.3.0+52+21733919.s390x.rpm 3b46e886f0cc6d6aa1b7ac8de7d59796dc3723ef44fec61a457757950c6ca4a2 postgresql-upgrade-devel-15.5-1.module_el9.3.0+52+21733919.s390x.rpm 5ae6b6957cc6d4ecb9b21b9aa4ea89e5b243833c6a4aa7362c4593aa55897f87 postgresql-plpython3-15.5-1.module_el9.3.0+52+21733919.s390x.rpm 80c732422029056d13819cf4762cc8a41e16d693908071c20c0924dc08ca972b postgresql-contrib-15.5-1.module_el9.3.0+52+21733919.s390x.rpm 834048c115b9e189b79eec889599fcb20c824c7711a1af8e9b33cffcb8cee158 pg_repack-1.4.8-1.module_el9.2.0+22+09653793.s390x.rpm 8aa663b5c2ff175148a949b30c8b031b034134291fa2b86fad010de3264ce975 postgresql-pltcl-15.5-1.module_el9.3.0+52+21733919.s390x.rpm 912e7eda25884a096342de363e04d9ee7a85307601ed7b9f89cc5b9c2a7a87c2 postgresql-private-libs-15.5-1.module_el9.3.0+52+21733919.s390x.rpm a1632d9d7f9176fd998a39e8eff9fc8356928a4803a89dca548bc5c2ba681845 pgaudit-1.7.0-1.module_el9.2.0+22+09653793.s390x.rpm aae4db5a7b2a459bedc06107e043df328af5aba310f7377482a759ca6f274258 postgresql-test-rpm-macros-15.5-1.module_el9.3.0+52+21733919.noarch.rpm af65d718e2abe6c7280c9eabb0ca53120f62f0c2941b6d1c76bc6dd9aef13a19 postgresql-server-devel-15.5-1.module_el9.3.0+52+21733919.s390x.rpm b517ea727f893220a2f3fd7a573602c9ac33a689028a081dfc20344e1a63c5de postgresql-docs-15.5-1.module_el9.3.0+52+21733919.s390x.rpm c0de91ee13afda6ec068ccffee80c9a5135d2a341911958c7391a3bdec615a3c postgresql-test-15.5-1.module_el9.3.0+52+21733919.s390x.rpm e24a62f50d5d1b23684fbe40d4afc3f2ea2044033c2e6d25a2579897a9626bcc postgresql-static-15.5-1.module_el9.3.0+52+21733919.s390x.rpm e97bf6b8bfb3cb1c5799eba11d004933b63b31d75d651091ee7f5a8e2cf2a51e postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.s390x.rpm ed411af5e135cda227ddf7b810e4e04e1e6d923ead9a5300a03d167542d996c9 postgresql-server-15.5-1.module_el9.3.0+52+21733919.s390x.rpm f92159624c4189caa16e70dc9055043f3632113708df8a6e72b79e3273857153 ALSA-2023:7791 Copyright 2023 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429) * gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default gstreamer1-plugins-bad-free-1.22.1-2.el9_3.s390x.rpm fe35fca090b17447e3f46fe5cc6bdebf083dfb275945ead106a42e5c7bc388b0 ALSA-2024:0001 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.6.0. Security Fix(es): * Mozilla: Heap-buffer-overflow affecting WebGL <code>DrawElementsInstanced</code> method with Mesa VM driver (CVE-2023-6856) * Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864) * Mozilla: S/MIME signature accepted despite mismatching message date (CVE-2023-50761) * Mozilla: Truncated signed text was shown with a valid OpenPGP signature (CVE-2023-50762) * Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857) * Mozilla: Heap buffer overflow in <code>nsTextFragment</code> (CVE-2023-6858) * Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859) * Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation (CVE-2023-6860) * Mozilla: Heap buffer overflow affected <code>nsWindow::PickerOpen(void)</code> in headless mode (CVE-2023-6861) * Mozilla: Use-after-free in <code>nsDNSService</code> (CVE-2023-6862) * Mozilla: Undefined behavior in <code>ShutdownObserver()</code> (CVE-2023-6863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default thunderbird-115.6.0-1.el9_3.alma.s390x.rpm e5cc9d50f0d3a997a88461ab422eff1f8a6b606237de698c08fca6b1bcebed9b ALSA-2024:0010 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default tigervnc-server-module-1.13.1-3.el9_3.3.alma.1.s390x.rpm 24430a8537d7b994f88520239d1b932eadba811b109399893a8cbfae5d10d213 tigervnc-license-1.13.1-3.el9_3.3.alma.1.noarch.rpm 24e7c7b936310a7431a75cd4667a29a921adf4498d6b590d9d39f8bfc6b04e4d tigervnc-icons-1.13.1-3.el9_3.3.alma.1.noarch.rpm 3a9e687b068bc354e443cf57ab3543461ec41d8cb40b8746dd3c3582b55ca406 tigervnc-server-1.13.1-3.el9_3.3.alma.1.s390x.rpm 6666f3ead3262d4e1fe03f04afd01bbc9a09885b57e1a7e5cb0dd840e45c1f65 tigervnc-1.13.1-3.el9_3.3.alma.1.s390x.rpm 9ccc182315dfc34d5a11b5fea2179cf96237a98038c069f88e8e2c9a5ab4db48 tigervnc-server-minimal-1.13.1-3.el9_3.3.alma.1.s390x.rpm d031d1345a831a91338dd165a0989e3ee59a92419a41998506e985820283d608 tigervnc-selinux-1.13.1-3.el9_3.3.alma.1.noarch.rpm ff518f13e65a4aca8f744ae459296109897598014a61b9acfb792901d7f37af7 ALSA-2024:0025 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.6.0 ESR. Security Fix(es): * Mozilla: Heap-buffer-overflow affecting WebGL <code>DrawElementsInstanced</code> method with Mesa VM driver (CVE-2023-6856) * Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864) * Mozilla: Potential exposure of uninitialized data in <code>EncryptingOutputStream</code> (CVE-2023-6865) * Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857) * Mozilla: Heap buffer overflow in <code>nsTextFragment</code> (CVE-2023-6858) * Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859) * Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation (CVE-2023-6860) * Mozilla: Heap buffer overflow affected <code>nsWindow::PickerOpen(void)</code> in headless mode (CVE-2023-6861) * Mozilla: Use-after-free in <code>nsDNSService</code> (CVE-2023-6862) * Mozilla: Clickjacking permission prompts using the popup transition (CVE-2023-6867) * Mozilla: Undefined behavior in <code>ShutdownObserver()</code> (CVE-2023-6863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default firefox-115.6.0-1.el9_3.alma.s390x.rpm a84e655a1f8277d5728c7123dd8e6e68f1f341a5879043d8efb430de6f2bd60a firefox-x11-115.6.0-1.el9_3.alma.s390x.rpm bf21182d18c786589b2db6c94ae979ddc6f1d0a4041cd1bb0228324c25e104de ALSA-2024:0071 Copyright 2024 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service in SSL Certificate validation (CVE-2023-46724) * squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728) * squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285) * squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default squid-5.5-6.el9_3.5.s390x.rpm dd8737333807da668cef93da10cfc91ab380b473e6874efb2898331e1ef06e23 ALSA-2024:0108 Copyright 2024 AlmaLinux OS 0 1 Moderate

nss security update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): * nss: timing attack against RSA decryption (CVE-2023-5388) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default nss-softokn-devel-3.90.0-4.el9_3.s390x.rpm 10cf4c3074e51654f8ffc951f4bc2f8d752216809fcd63926d149c3aad5c4524 nss-softokn-3.90.0-4.el9_3.s390x.rpm 24f41673fb2b1f9767419553d248985fb581df82197a5a52e2ac43e36d5174c6 nss-util-devel-3.90.0-4.el9_3.s390x.rpm 33eda343ec1781f9d14c956915a84b52247be3cd378b6909446c502cda53368f nss-softokn-freebl-devel-3.90.0-4.el9_3.s390x.rpm 3c5e8d86748839204c5aa5aeb3b6040a904a256817efbb3095aabbf54bf444d7 nspr-devel-4.35.0-4.el9_3.s390x.rpm 408ce6714c7ab7da1529d1b8fad4c5c5f9c09e8f3f4e309fba52fdb253038016 nss-3.90.0-4.el9_3.s390x.rpm 4948d8dde0c40b93d01d4ad800cd0e8d75cde346e210179999fc8007af5586c2 nss-softokn-freebl-3.90.0-4.el9_3.s390x.rpm 4af1f4457748c80abd183c58d86f9074e9098262193f621ae33ce179119e61c2 nss-sysinit-3.90.0-4.el9_3.s390x.rpm 4d7c415ab94af57b04ffe1de1cab4cb6e2cc808855ebf8fd75773efec57e6f35 nss-devel-3.90.0-4.el9_3.s390x.rpm 7b52c53c249d7506efe26f00f00c9cd863fc6d1f230986c7757b48d1e8e5a140 nss-tools-3.90.0-4.el9_3.s390x.rpm 9504655dff7ffe5f915aa302eaac1820b7e98754c1986f5551498bcd8f46740c nss-util-3.90.0-4.el9_3.s390x.rpm 993e780d7d7c32c57c72e1859eee84216716d6fcb6e1e5589372d5166b25f8d9 nspr-4.35.0-4.el9_3.s390x.rpm ea740e2d51c2705e858ccf0d3cbddae103b7f57d3ead1db3c4d3ff6e739ce4c6 ALSA-2024:0141 Copyright 2024 AlmaLinux OS 0 1 Moderate

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: Invalid CSRF protection (CVE-2023-5455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default ipa-client-epn-4.10.2-5.el9_3.alma.1.s390x.rpm 0652b6c278782b35765e09c990fc32f3561344a50f2987a34a4504be786455c7 python3-ipaserver-4.10.2-5.el9_3.alma.1.noarch.rpm 16ba8eee5c0d9852ed9e72219f584538341dee5ea25bb6516795a45ace760256 ipa-server-4.10.2-5.el9_3.alma.1.s390x.rpm 3362f4ca5ca0197a77209317336747047140b733229b6f2fd4845ba16842a6c5 ipa-server-trust-ad-4.10.2-5.el9_3.alma.1.s390x.rpm 36548d8a86a8675b3d2289b9b08dfb5695d61525ec77c8acdd672aa9dd7a396f ipa-client-common-4.10.2-5.el9_3.alma.1.noarch.rpm 47e408569d39979a7e0bc85876446739514c22e803b2adb110ab4989fc748081 ipa-client-samba-4.10.2-5.el9_3.alma.1.s390x.rpm 4cbb5be5196e1bfa8901a23d9773df75d523e8405fd972a660efcf206c708e0d python3-ipaclient-4.10.2-5.el9_3.alma.1.noarch.rpm 5c9cfe33c8f5a6d616229f3751b5326b564f1f638c39c9cdd906066c12eed42f ipa-common-4.10.2-5.el9_3.alma.1.noarch.rpm 899c686d45b06648513fd66138046fe952364dabd24625e1016c7049f8e8cc35 ipa-client-4.10.2-5.el9_3.alma.1.s390x.rpm a4796df99bb529d42a6a7b631922a5efaa27474ee66143a4cc82f77cb3acf8f1 ipa-server-common-4.10.2-5.el9_3.alma.1.noarch.rpm aa2e06c49a204f9b9a9ac830153f944aa52e4885106b843e9f13c2cc53ba889c ipa-server-dns-4.10.2-5.el9_3.alma.1.noarch.rpm b7125da0a7b970fb6faf006f057b98d45136c632a0043b06e122ffeae16eab25 ipa-selinux-4.10.2-5.el9_3.alma.1.noarch.rpm b9a988d8af1d65976cbf6e2ce80a35d0e094d530f2d34afc08bc4f245fa4c0c4 python3-ipalib-4.10.2-5.el9_3.alma.1.noarch.rpm f0238ad6d6803455fc358a90a251128f1954518357c0e811d1fa3b91ffccbea9 ALSA-2024:0151 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15. Security Fix(es): * dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS) (CVE-2024-0056) * dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057) * dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default aspnetcore-targeting-pack-7.0-7.0.15-1.el9_3.s390x.rpm 394d0c886d2b33a448fa87c9de47a5d6afe2ba0b359c207cb58f26d7992c4496 dotnet-sdk-7.0-7.0.115-1.el9_3.s390x.rpm 4395acb6a1b29456307fe9c3412cc8e0dfcc0d40056b09196538fad092268d4d aspnetcore-runtime-7.0-7.0.15-1.el9_3.s390x.rpm 47b33f0e623bae00b5726b7623b015db1309b720a41e1a8802574c3fadfd00ad dotnet-runtime-7.0-7.0.15-1.el9_3.s390x.rpm 94e9e0e7a4db496a850aa3b941a753b22520c729684934a524edfeeee82c05a0 dotnet-templates-7.0-7.0.115-1.el9_3.s390x.rpm b00a7ad02cd1d6220258bf0785fc97d45fed3597e03244fead69f5e3e5cf751d dotnet-hostfxr-7.0-7.0.15-1.el9_3.s390x.rpm bfed8275e78015412539680afd4d2f3231f7ce40eefd450c1135e327e7011fb5 dotnet-targeting-pack-7.0-7.0.15-1.el9_3.s390x.rpm cc2ff8b8b978c476b6ad24074fc53824f8ac74c3e26a53118085e9953a48d9e6 dotnet-apphost-pack-7.0-7.0.15-1.el9_3.s390x.rpm e9eef27539a36e95924ae1decbaa477841db1c729afadc8f9baa3ac5a95f32b1 ALSA-2024:0152 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1. Security Fix(es): * dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS) (CVE-2024-0056) * dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057) * dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default netstandard-targeting-pack-2.1-8.0.101-1.el9_3.s390x.rpm 060445aa0e0988e3f74224e68066e2f3f300d9fafb174d165e1db1e90b927850 dotnet-runtime-8.0-8.0.1-1.el9_3.s390x.rpm 0ae7b714906609d576d8dd5539b2e18709b9aa6648e528d6a2364299d84aedb0 dotnet-hostfxr-8.0-8.0.1-1.el9_3.s390x.rpm 494f77818ca15e113a8b5c8c02187113a169f0e49b3832a83dec2be59629e988 dotnet-templates-8.0-8.0.101-1.el9_3.s390x.rpm 5d21078ee63555b2bacd76df6c5823323aaadad83c14d573e43f660c375c7c67 aspnetcore-runtime-8.0-8.0.1-1.el9_3.s390x.rpm 62789b8244e45f841ebe2947cae71f0188a4f9d2a50e6e028b4e984e5e41c71b dotnet-apphost-pack-8.0-8.0.1-1.el9_3.s390x.rpm 63c6bac817419e16c9104761a8ee8773474501f2034b8214645d0fe9ee0cfb0a dotnet-sdk-8.0-8.0.101-1.el9_3.s390x.rpm 74466088490c4cc9beb20bd0b35eecc20ccfaf2979630b55df1282794bf757d5 dotnet-targeting-pack-8.0-8.0.1-1.el9_3.s390x.rpm 935d7bb006b99739ff595b96f8b439e9421f3292a40e3b71c2ff516c01cc51d2 dotnet-host-8.0.1-1.el9_3.s390x.rpm e2531bc817d08043a90c4c139979bed31bd203ed6bce9af069ca36ddbf58512e aspnetcore-targeting-pack-8.0-8.0.1-1.el9_3.s390x.rpm e426606dbbc47b41e4c1b7ff43fdd3e0bed40e875dd63a7e786db73699629b62 ALSA-2024:0156 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26. Security Fix(es): * dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS) (CVE-2024-0056) * dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057) * dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default aspnetcore-runtime-6.0-6.0.26-1.el9_3.s390x.rpm 1270e9cf6f2c8179f4c7f2f608b43c7d79418b082600688fb2fe4bb1bab5d79a dotnet-sdk-6.0-6.0.126-1.el9_3.s390x.rpm 16ad29398b5a8ad92f3c6c1c6188c73feca505c3078f54387fe7f57891d260cf dotnet-runtime-6.0-6.0.26-1.el9_3.s390x.rpm 1bc837ed902508ba6e6b92ea2c815a6b15a0c05550c22fde8de50bd020bfc0bc dotnet-templates-6.0-6.0.126-1.el9_3.s390x.rpm 23720ad807e59dea12d9e8007451bb98940eeb8fd1cd62ed311d7ce096c6389c dotnet-apphost-pack-6.0-6.0.26-1.el9_3.s390x.rpm 27f8b6a473bbfc69e980740ea5418d0ec5e31411cd6b05a773becc5317e8d290 dotnet-targeting-pack-6.0-6.0.26-1.el9_3.s390x.rpm 512d436fb7d96000d9428af71a482808322e07aa9cdca5283b8a1698a1f5ed09 aspnetcore-targeting-pack-6.0-6.0.26-1.el9_3.s390x.rpm 58b660302039b1d67ec0065f4d2f14d6590167dc3f9395c1e8f2abe4ae06622b dotnet-hostfxr-6.0-6.0.26-1.el9_3.s390x.rpm 7407734b814d0faea44e6c8ebe4fdf158f8e34c3b49979716471891b28d350c7 ALSA-2024:0249 Copyright 2024 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918) * OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952) * OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919) * OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921) * OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default java-21-openjdk-jmods-21.0.2.0.13-1.el9.alma.1.s390x.rpm 28a5ed1683865626b7ef8ac01dcf454cb7f911b99b2006f59f2633de812fde50 java-21-openjdk-headless-21.0.2.0.13-1.el9.alma.1.s390x.rpm 7e8bd374ba2988018d6cd6118bf54daa98eaa7076d405a2a6820efdd5a5de671 java-21-openjdk-javadoc-21.0.2.0.13-1.el9.alma.1.s390x.rpm bf789ee695b6bd0c91545d845399e3edbfc2adfcad155df3da24de3a797b0a44 java-21-openjdk-devel-21.0.2.0.13-1.el9.alma.1.s390x.rpm ca4ab58c14a7b345bce5392aef18a218460c1c37ce768a61e03ffee8c6ba5b61 java-21-openjdk-21.0.2.0.13-1.el9.alma.1.s390x.rpm ce04fc2fc6a7a865bfa55499a48e0e4e3168ae855d3759f80e9d42754d39f761 java-21-openjdk-static-libs-21.0.2.0.13-1.el9.alma.1.s390x.rpm d6fe2041b3f362cdfdbce0ffc38dccdd9c72bd976a0e9880b72217ea8fe1537e java-21-openjdk-demo-21.0.2.0.13-1.el9.alma.1.s390x.rpm e02f946ab2f1dce757078a7777faccdf1e5a9cac466ab5da30c18bc04294542b java-21-openjdk-src-21.0.2.0.13-1.el9.alma.1.s390x.rpm e984a04adbf1f6baa5b63fed7b2c87c3ff662e73b1abd9bee1630700cbecf6c2 java-21-openjdk-javadoc-zip-21.0.2.0.13-1.el9.alma.1.s390x.rpm ec7c3bb03da4f655ddf04703969787275da59c0d2b345172a7da005847428016 ALSA-2024:0265 Copyright 2024 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918) * OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952) * OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919) * OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921) * OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926) * OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In the previous release in October 2023 (8u392), the RPMs on AlmaLinux 8 were changed to use Provides for java, jre, java-headless, jre-headless, java-devel and java-sdk which included the full RPM version. This prevented the Provides being used to resolve a dependency on Java 1.8.0 (for example, "Requires: java-headless 1:1.8.0"). This change has now been reverted to the old "1:1.8.0" value. (AlmaLinux-19636, AlmaLinux-19637) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default java-1.8.0-openjdk-javadoc-zip-1.8.0.402.b06-2.el9.noarch.rpm 321e6f480c0e0a8bcd4df7d6e262158acc423c387414d1af3fb522afb0d25532 java-1.8.0-openjdk-1.8.0.402.b06-2.el9.s390x.rpm 5d120bb166e0ffd28bdd20da783c62bb4628f2c469ef513d4c8b7a0aee139951 java-1.8.0-openjdk-javadoc-1.8.0.402.b06-2.el9.noarch.rpm 7dc4b796bf3a7f0012edb49e48b4fa8ee46fc26d795c45d7bf4852fd0af34dd7 java-1.8.0-openjdk-devel-1.8.0.402.b06-2.el9.s390x.rpm 95ded1b0ae1c8d4914dcbeb0bd8398915d34b5afb3357cbb4ace7c87255b057c java-1.8.0-openjdk-src-1.8.0.402.b06-2.el9.s390x.rpm db7fe94df7b73ce894ad8699c6dfb94ce92b8f5bf4b8d29b85bfaec9df7ee378 java-1.8.0-openjdk-headless-1.8.0.402.b06-2.el9.s390x.rpm ed62bdf20c657032bce93e9b98328c4d96819512cba80816510bd3a4eccde322 java-1.8.0-openjdk-demo-1.8.0.402.b06-2.el9.s390x.rpm ff1330194488787336212b484fd5fd96dfcc7c5c28533eaa2abc367572e51d72 ALSA-2024:0266 Copyright 2024 AlmaLinux OS 0 1 Important

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918) * OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952) * OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919) * OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921) * OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926) * OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default java-11-openjdk-devel-11.0.22.0.7-2.el9.s390x.rpm 241cc46f8c2a86a9ebb7e7ee8b00b754a8fd9794f1d5a9bb433cc550ad3c6321 java-11-openjdk-11.0.22.0.7-2.el9.s390x.rpm 758e19b26f15f2a26f59382d0998cff432971a22c0b0a8b5ffc48053b7bad5b1 java-11-openjdk-javadoc-zip-11.0.22.0.7-2.el9.s390x.rpm 8f7ec2d048d26313e63a373abab5e5a577c0e2faf6fca275c643a31430345daa java-11-openjdk-jmods-11.0.22.0.7-2.el9.s390x.rpm 99c568f175b0e4732b766e41d9bec112cc4bac8df364140b7b7aeac8686fabcc java-11-openjdk-javadoc-11.0.22.0.7-2.el9.s390x.rpm c1b209b655f01b5e72d01e94a760642f6f9b8e6016e3b4fbce1a17243527a014 java-11-openjdk-static-libs-11.0.22.0.7-2.el9.s390x.rpm c985a2b0312bc6aa5f4397cf69b97ea738180f0ad9a4fc58c09f0c5a59bcdbbf java-11-openjdk-headless-11.0.22.0.7-2.el9.s390x.rpm f3d3ea95b4bb02b5bd628554b85302d7c9d1ce823b4f7654d89b9c41af238aa3 java-11-openjdk-src-11.0.22.0.7-2.el9.s390x.rpm f8b814a76278bc39079f09a6737e7f9a05ed4d815f5960f0fc3e8d1c560f75c5 java-11-openjdk-demo-11.0.22.0.7-2.el9.s390x.rpm fac2530467acc5d4077e75d5e51f619451a6db4edd9432803e36b34afffec191 ALSA-2024:0267 Copyright 2024 AlmaLinux OS 0 1 Important

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918) * OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123) (CVE-2024-20932) * OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952) * OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919) * OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921) * OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-13930, AlmaLinux-13931, AlmaLinux-13934, AlmaLinux-13935) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default java-17-openjdk-jmods-17.0.10.0.7-2.el9.s390x.rpm 151eb2bf954d3945c083a6d72b9fe095d50a9e2e6400beedc2d69cab8c5d8e6a java-17-openjdk-src-17.0.10.0.7-2.el9.s390x.rpm 24dae19b0bd1d31b783907309598f29f2c70d16038d40afe66573d56e9481168 java-17-openjdk-javadoc-zip-17.0.10.0.7-2.el9.s390x.rpm 48618cacb689bf7c28d30d69e16d96f594ea484516258ff2235db28fcc4fd335 java-17-openjdk-devel-17.0.10.0.7-2.el9.s390x.rpm 7ad753ea3b6722b6f4ce6540a79de14fe7a2f367592f157729be1caa7eec8bb8 java-17-openjdk-headless-17.0.10.0.7-2.el9.s390x.rpm 91ea29db3dfd45087c0652ee1bf06e227cfb5f8fec977d2be1de4a4587d313b1 java-17-openjdk-demo-17.0.10.0.7-2.el9.s390x.rpm b0526a384355817f9275cc5f47094cca3fb1a899b817acb07663218e1cb3b6a3 java-17-openjdk-17.0.10.0.7-2.el9.s390x.rpm bbd41b44cce9893d3216cbfcee5e3b7eee6d5b42251803414b7e3bff6af8734e java-17-openjdk-javadoc-17.0.10.0.7-2.el9.s390x.rpm d36c534ce31cf3ced69a66076fb10132004e8a268fc6f52291505da66e9803dc java-17-openjdk-static-libs-17.0.10.0.7-2.el9.s390x.rpm eef5183f037cad4e4cce46a160f77f87b20191fae9ea1913ab3d9bec03d3d24e ALSA-2024:0310 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Incorrect cipher key and IV length processing (CVE-2023-5363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default openssl-perl-3.0.7-25.el9_3.s390x.rpm 5a9c27629956d793a8ef64a4bb69e32931c7bde73f775a7b781643ca227a259f openssl-devel-3.0.7-25.el9_3.s390x.rpm d56cb83e9dbfc7631d799ece200124f30bc176edbe1f6dd115f211d485090a45 ALSA-2024:0387 Copyright 2024 AlmaLinux OS 0 1 Moderate

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: 1-byte array overrun in common path resolve code (CVE-2023-0568) * php: DoS vulnerability when parsing multipart request body (CVE-2023-0662) * php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247) * php: XML loading external entity without being enabled (CVE-2023-3823) * php: phar Buffer mismanagement (CVE-2023-3824) * php: Password_verify() always return true with some hash (CVE-2023-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default php-fpm-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 038edf2bb31574b7f2585c9fe4480b80eac47b88b9bd4ec963845db3f60c4884 php-opcache-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 05435a6e0202ae09e4aa729871a48f0c160b506762bfe73737317a74e0e0da1b php-snmp-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 08e37355625b7f85b99ae429bfdf171072bb922fe727720c2fd08931593c2357 php-ldap-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 0c4e2e3ee649caefb98ad0452362ef9fde816527a7bcd2aab4603cf2dfbea3ae php-bcmath-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 153e21360363bcd9526f6fdc1132b416de1ae0ed345446f958b1126d70706537 php-devel-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 217829075e2e99d1c7f2a772a369466182c3b091bc5b13e8b74fb145d74e3a88 php-cli-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 27ff5820f539fba34b5af2a0ec7425d5c7f05b7d4448d20e30b2b33a7be463a4 php-gd-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 3a0e120efc5db8ea975e355cac55b91020290f9cde8e869fcc18d17d388586cc php-pgsql-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 4553ed8f0554036768af5ebe723afefa68e1d4ace29c94a1455e30cd178faa21 php-soap-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 62e01e03f2a9e97349fd3a00456f908a887bc3042544a796cc546c7ab2cd7b9c php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.s390x.rpm 6c89933d8e8153ed39764877e9c07501f556ba5057a9695bfefcfc75649f5734 php-pdo-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 6f551978fe404a7e2324b7a6c8e3517099e2510d0b5b650e70888ca3949459df php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm 74c41c08148fce005bb18c75bcfafc1e739cc84b6cac297b5ef955172eff0b69 php-process-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 78ebd7b740a2d78139e10618c22406a1c1c198e127140aefadca3d0cfb0650eb php-ffi-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm 8b72b0ae256c0907c78644730cd0290ad3d2225c054a1a02025be66f00a7344d php-intl-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm a271f38cefd6c022eb3cc74bed840ae02281afdeef5b48e500306c52c76a27ca php-enchant-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm a440487e3dfdc12f5182c69799d02de6606eaf96390e39e8e2a12dc338d4df3f php-common-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm ae067abe58dd0a687b546b34d77aec01d3af78e9112757e867fed44f7242b487 php-dbg-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm b5f7241f67633d495fc680d0553c0bc9c2ef2f395c014a144843452b9d3b9454 php-xml-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm bad46e217a0e146df4e5944fa3b7364cf64d68a120e877d5ed29294560fd05c3 php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm bd0093fac304470cea776e43f28256fbfa317c192bb6bd8762cc1ec00db6f9e1 php-mysqlnd-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm be3029313feda186dec3fcae82d6cdeb67ae43f25c95986352ddfde96ebf570b php-dba-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm d7e0d0aaf0512964cda1b9a922510d9d85142114b5e45c9e4aa5562e0e02822b php-embedded-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm e0d900efe0635075b6f68d4bac3ce4a39165f8aee11359fde12991681eb69b3d php-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm e1488f5a4bb41f0858102e8f1bd03a530ce4450c9d6a4845b1d3b6b0533815c6 apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.s390x.rpm e97fdc0e54c4a5d2084a375f0ff31f551c9dc8c1f4c2012f2e453b1a031a1328 php-odbc-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm ea628b0786671bf70c2ed9db38b06651b0a2b659aa0d77630263396542bca397 php-mbstring-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm eaa065a26c42904a4a7aa41f88cb0c9421442a8299dd1655bc381af78824f2dd php-gmp-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm ec9cc28e501883b9cc81753ec868ef631d27c0d2217557a1bf6461279b456364 php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.s390x.rpm fa41ac765cb61c3ac39608e29ace6064489a59257504df4cac926a261c7d392b ALSA-2024:0463 Copyright 2024 AlmaLinux OS 0 1 Moderate

rpm security update

The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Security Fix(es): * rpm: TOCTOU race in checks for unsafe symlinks (CVE-2021-35937) * rpm: races with chown/chmod/capabilities calls during installation (CVE-2021-35938) * rpm: checks for unsafe symlinks are not performed for intermediary directories (CVE-2021-35939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default rpm-apidocs-4.16.1.3-27.el9_3.noarch.rpm 67e8f8b71bc7a80e8ed58a470d3a1c8b10f2d0e8cbf9ba1d201eebd28fe06644 rpm-plugin-syslog-4.16.1.3-27.el9_3.s390x.rpm 68bc0614d96f728cd29422ff8113afd192b8c6d815e0f11f002a047afe30728f rpm-plugin-systemd-inhibit-4.16.1.3-27.el9_3.s390x.rpm 91b2bc3f3d493a5c1cf69b58c83ba15236b7c53b910419a159fd032725214442 rpm-plugin-fapolicyd-4.16.1.3-27.el9_3.s390x.rpm a35293bb87ae5ee09f64a71f06c1ee96e5cf18e9e80a10bbc78b6880885ce80c rpm-build-4.16.1.3-27.el9_3.s390x.rpm bdfe9be3cfdc27fa2cac461fe1e661f8496805dae2a1141f8f102d0bd8bd94ff rpm-plugin-ima-4.16.1.3-27.el9_3.s390x.rpm e3ec9b7583c88b877358ef2715031be45630e9d31ea004561ded2187279d5427 rpm-cron-4.16.1.3-27.el9_3.noarch.rpm e9685fd6dfc5db1d769b202635c622a6b4204c7abfbb2d676f0194d433b36990 rpm-devel-4.16.1.3-27.el9_3.s390x.rpm e9abb1f626d79f60fefebde8ca7a8abbcde3c47142ad374a18704cf93abf45dd ALSA-2024:0465 Copyright 2024 AlmaLinux OS 0 1 Moderate

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: heap-buffer-overflow at sessionfuzz (CVE-2023-7104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default sqlite-3.34.1-7.el9_3.s390x.rpm 121936a28b42f1167f6000b55414fa12725eb5115034121a9ca47d8d1c2c558e sqlite-devel-3.34.1-7.el9_3.s390x.rpm 94f578ac4972d02bd9aa24928f1fc1151c8925a3697f3eb35da6843fa24132b7 ALSA-2024:0466 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default python-unversioned-command-3.9.18-1.el9_3.1.noarch.rpm 1c2b78fa731c304752a4c4529ee0fa14111f20108bab5b5ac8d6c956e7a4879b python3-tkinter-3.9.18-1.el9_3.1.s390x.rpm e4536d4b0cf6264382060aab67f7cd5cfaf8faedf2fb6873a29e7a0727252db8 python3-devel-3.9.18-1.el9_3.1.s390x.rpm f16faf28f5c0f9d1846640c0cc207711cf60edcee18d444418e00d66eab7844b ALSA-2024:0474 Copyright 2024 AlmaLinux OS 0 1 Moderate

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080) * tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794) * tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795) * tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default tomcat-jsp-2.3-api-9.0.62-37.el9_3.1.noarch.rpm 0740bf8f9f669285ab9f32acbd00c60ffdac9f643ec7ca257797f3878748a606 tomcat-docs-webapp-9.0.62-37.el9_3.1.noarch.rpm 0f6fcc41fecfff1c5e74ab45f73d3c93f3b1b8e15f08198de22581f7ea5de756 tomcat-webapps-9.0.62-37.el9_3.1.noarch.rpm 1054d85fbdd1f970e62f81799df523b5dd9fb5e86bff51f2601a8f227150082d tomcat-el-3.0-api-9.0.62-37.el9_3.1.noarch.rpm 1883c285bd8f86d8e5937477b56d687bc781b12c01195108be1b7586b4a2e786 tomcat-servlet-4.0-api-9.0.62-37.el9_3.1.noarch.rpm 2629dc7851140c221fa3f6c19cb521e5b4ae5e17120c92a84370d043d45395c7 tomcat-lib-9.0.62-37.el9_3.1.noarch.rpm bb84943939e62408a8f8c11586a47d1d715b85c5b38eeb8227b6f8eabd3ff37b tomcat-9.0.62-37.el9_3.1.noarch.rpm fb4fad075c4f5f58f1840ba3f384c5716ed00ca0bc5e64780f0502acdd08e1a6 tomcat-admin-webapps-9.0.62-37.el9_3.1.noarch.rpm fb6cdc5d8a141074745d75390ee119a99b6f7727246c901d2128b8f6ecd0271f ALSA-2024:0477 Copyright 2024 AlmaLinux OS 0 1 Moderate

frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406) * ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407) * frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234) * frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default frr-selinux-8.3.1-11.el9_3.2.alma.1.noarch.rpm 8160c36eea1ef7ad5822f3878e2c4208786dd99887b0e1526e97519743d5ad4d frr-8.3.1-11.el9_3.2.alma.1.s390x.rpm cbbdb09e7ee75f4d7acbd5dbcc5d8a8d8bf88134796478c6feb09c5c38415e91 ALSA-2024:0533 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981) * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553) * gnutls: rejects certificate chain with distributed trust (CVE-2024-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default gnutls-devel-3.7.6-23.el9_3.3.s390x.rpm 4579af9ab635ab3281fe125b5f465a1bfd6b5cb1c1221f47340fab2605b99c49 gnutls-dane-3.7.6-23.el9_3.3.s390x.rpm 64b4f828c6cfd44c8f9cf70efeaead8b13d9ad888cd3388d5f73468ae33a76ed gnutls-utils-3.7.6-23.el9_3.3.s390x.rpm 807743077141845f2027f2d54566ff90cef3e2aaf86a6a86d0b036c571f19d26 gnutls-c++-3.7.6-23.el9_3.3.s390x.rpm 8cb8969b811129475ef345a8f83a9c61507a4466a5cb71976c8016f8965b4b3f ALSA-2024:0557 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default tigervnc-server-minimal-1.13.1-3.el9_3.6.alma.1.s390x.rpm 37a7e49a4ec628e53a1c6565a241f42b668dafa4a94e9eeb382feb9582902cfc tigervnc-server-module-1.13.1-3.el9_3.6.alma.1.s390x.rpm 38b9f15bd0dd8c2ccbffd78e6782f48955e1b677abd4631df54a3f579158d699 tigervnc-license-1.13.1-3.el9_3.6.alma.1.noarch.rpm 4c5f5ac26ea3fd5c86eb2a2ead5617a4c3afeab2d61239ba0e4144a6fc242cf9 tigervnc-1.13.1-3.el9_3.6.alma.1.s390x.rpm 92ab66d538f7f9d3624d325038fcbc68517e1a50cd45dc7296732f4372e8bc26 tigervnc-server-1.13.1-3.el9_3.6.alma.1.s390x.rpm b01643eeeba766695c35591505be40bcd0a16772baab2b4ed4712dc5b074035a tigervnc-icons-1.13.1-3.el9_3.6.alma.1.noarch.rpm e1af8361e82b513ee2f2fbbbd88156a499467cba27ddc1423e92d94293cbe255 tigervnc-selinux-1.13.1-3.el9_3.6.alma.1.noarch.rpm fec12fd04cc7d5cc50381ca18c190ad46a5cc938f296f16e3b6aa24d17e75b07 ALSA-2024:0602 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.7.0. Security Fix(es): * Mozilla: Out of bounds write in ANGLE (CVE-2024-0741) * Mozilla: Failure to update user input timestamp (CVE-2024-0742) * Mozilla: Crash when listing printers on Linux (CVE-2024-0746) * Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set (CVE-2024-0747) * Mozilla: Phishing site popup could show local origin in address bar (CVE-2024-0749) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2024-0750) * Mozilla: Privilege escalation through devtools (CVE-2024-0751) * Mozilla: HSTS policy on subdomain could bypass policy of upper domain (CVE-2024-0753) * Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 (CVE-2024-0755) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default thunderbird-115.7.0-1.el9_3.alma.s390x.rpm 5f95146cb536f7bd21fa676f0555a8b23533fb2a48e705c7463d6a03cfbdead2 ALSA-2024:0603 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.7.0 ESR. Security Fix(es): * Mozilla: Out of bounds write in ANGLE (CVE-2024-0741) * Mozilla: Failure to update user input timestamp (CVE-2024-0742) * Mozilla: Crash when listing printers on Linux (CVE-2024-0746) * Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set (CVE-2024-0747) * Mozilla: Phishing site popup could show local origin in address bar (CVE-2024-0749) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2024-0750) * Mozilla: Privilege escalation through devtools (CVE-2024-0751) * Mozilla: HSTS policy on subdomain could bypass policy of upper domain (CVE-2024-0753) * Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 (CVE-2024-0755) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default firefox-x11-115.7.0-1.el9_3.alma.s390x.rpm 096fd35b51b3ebc162fb9f05584c9b706ccdbd4a726489c44d8b1c121fb2b6d9 firefox-115.7.0-1.el9_3.alma.s390x.rpm 6f585401036e31b1013f43f0c5e948caa84d6075f96a9e22ec8f421acba17fbd ALSA-2024:0670 Copyright 2024 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * runc: file descriptor leak (CVE-2024-21626) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default runc-1.1.12-1.el9_3.s390x.rpm f8c331ea18cacefc669223a486131daeb5db5675c134933f068c79322ac173ae ALSA-2024:0675 Copyright 2024 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: dds buffer overflow RCE (CVE-2023-44441) * gimp: PSD buffer overflow RCE (CVE-2023-44442) * gimp: psp integer overflow RCE (CVE-2023-44443) * gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default gimp-libs-2.99.8-4.el9_3.s390x.rpm 691ab03de7ee0314fc535b3ec7f0ccac439f5e6d9e2a7407781f7597ddb763bd gimp-2.99.8-4.el9_3.s390x.rpm d417ffd61711e32b2dffc479a640ff3046e7b8cdd4b2fc25a0f257214b3be13b ALSA-2024:0790 Copyright 2024 AlmaLinux OS 0 1 Moderate

nss security update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): * nss: vulnerable to Minerva side-channel information leak (CVE-2023-6135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default nspr-4.35.0-6.el9_3.s390x.rpm 08cb7d7d1ea372451fe378cd0f024772c8b0585051ad8debab4bae5d7131079a nss-3.90.0-6.el9_3.s390x.rpm 0eb378e8301dc6b310aaff399d3abc7c618361902b2d9557db19639b379733e3 nss-util-devel-3.90.0-6.el9_3.s390x.rpm 1557be632e627858eb77b23ef69e50979b7a3667b42d58b7d333c3ae92d82d94 nss-softokn-devel-3.90.0-6.el9_3.s390x.rpm 2880df8ffae0464a0806752bf2cc40e854dda347f8b79c546fa8b6eb6bac2f0e nss-softokn-freebl-3.90.0-6.el9_3.s390x.rpm 31c11973f9e73c94e23b6d4879b272122c7f2c9e592c230c2f2280789334ee70 nss-softokn-freebl-devel-3.90.0-6.el9_3.s390x.rpm 3b1e4c779724d74f6dcd3eef6411547501f9a1d48804faf3284be7d77a4057da nss-sysinit-3.90.0-6.el9_3.s390x.rpm 47f40249ab9b35759c0596a4876c00ecd249301eb2d9e3401cd09a668dc2f0e8 nss-softokn-3.90.0-6.el9_3.s390x.rpm 48e347cb38343cece6015106a085be8727cf0517e570b3c902007fcdfb6a7e63 nss-tools-3.90.0-6.el9_3.s390x.rpm 854f73f18f97e17d214adbf321d2f510901a67f7f4f88ef13e86f3ab148f4227 nss-devel-3.90.0-6.el9_3.s390x.rpm 8f3e49714af67977fb39ab9664a4b7b2547861ab8d1bfa29fedad28a9a4b8706 nspr-devel-4.35.0-6.el9_3.s390x.rpm ce4cf5a810013d9f7653621eb0bb27cbb87594e42d5cf1ff278d59d7fdb027bb nss-util-3.90.0-6.el9_3.s390x.rpm e037256078f31c1d9afa159570e3b9ddf917eeee28659728d6428b2a367d9d8c ALSA-2024:0805 Copyright 2024 AlmaLinux OS 0 1 Important

dotnet7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16. Security Fix(es): * dotnet: Denial of Service in SignalR server (CVE-2024-21386) * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default dotnet-hostfxr-7.0-7.0.16-1.el9_3.s390x.rpm 032ed24ae6dff85750cae3b37cb545c965895e2b9e86f6ae086ecbfc8fa6ab78 dotnet-templates-7.0-7.0.116-1.el9_3.s390x.rpm 0acafd5b7db92540f55f90998314add214d3af17637325443aac6fa7179bb82d aspnetcore-targeting-pack-7.0-7.0.16-1.el9_3.s390x.rpm 37771bbdf891e7051ac0bd203abdaec3f0a918440f800a5a44d2dd3ad7060e55 dotnet-targeting-pack-7.0-7.0.16-1.el9_3.s390x.rpm 5d02eeb54bd30ab1101936ccea31e6e1e4d5025562050e7cac64f87da8f06495 dotnet-apphost-pack-7.0-7.0.16-1.el9_3.s390x.rpm b2e41b04c93ca86cc0ad37a3712f936ab9eb978cf734552617ac79e9222f6570 dotnet-runtime-7.0-7.0.16-1.el9_3.s390x.rpm e306c59d0daee1404ed7aa09f5fb82d49befb92cf6a10665da6d63a2c253975d aspnetcore-runtime-7.0-7.0.16-1.el9_3.s390x.rpm f10485c05485638b5c255e9e457bc3b2de625d82df577bc34580b20b88a43c2c dotnet-sdk-7.0-7.0.116-1.el9_3.s390x.rpm fb76c56aba2877e572544e73c0067365cf09d2b14653127a2428510cb901b8b8 ALSA-2024:0807 Copyright 2024 AlmaLinux OS 0 1 Important

dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27. Security Fix(es): * dotnet: Denial of Service in SignalR server (CVE-2024-21386) * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default dotnet-templates-6.0-6.0.127-1.el9_3.s390x.rpm 03961a88d021c1bb4450fcd66ce0e1eb917ae5509e7172284bb84b367cf254b6 dotnet-sdk-6.0-6.0.127-1.el9_3.s390x.rpm 33eb3913f86d164e58de34571801ddafd2cfa67bfee05d2bec6a194d9f83e592 dotnet-targeting-pack-6.0-6.0.27-1.el9_3.s390x.rpm 64301bef5deec03cfb855ac422940c6df137069d139b37f8d601ed50156d5aec dotnet-runtime-6.0-6.0.27-1.el9_3.s390x.rpm 6ce45026ce681a6602ac772398b1ebd650558ff6b06322dbedde02b738758838 aspnetcore-runtime-6.0-6.0.27-1.el9_3.s390x.rpm bdfcac243d074e59443c7d8d12e700c766621a47e42a0b2c4e565ac4fc985d00 aspnetcore-targeting-pack-6.0-6.0.27-1.el9_3.s390x.rpm c8cab26d9ab026640d9960f92d83ba5baf505420291cec6d1d8adf88eb130c97 dotnet-hostfxr-6.0-6.0.27-1.el9_3.s390x.rpm e4856a48d8ec348fe40c9b6cffbe86824202a9affe6bcaf489789aaa67119be6 dotnet-apphost-pack-6.0-6.0.27-1.el9_3.s390x.rpm ebe8733f921d587696580db1da384fafa21e4e5c7906161e5906d323cfd17669 ALSA-2024:0811 Copyright 2024 AlmaLinux OS 0 1 Moderate

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Bug Fix(es) and Enhancement(s): * CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output * CVE-2023-28486 sudo: Sudo does not escape control characters in log messages * CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default sudo-python-plugin-1.9.5p2-10.el9_3.s390x.rpm 192048338afdf4067804d1258514a5c76388c648b11a5f9f3ed9ec290c8738bc ALSA-2024:0848 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2. Security Fix(es): * dotnet: Denial of Service in SignalR server (CVE-2024-21386) * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default dotnet-templates-8.0-8.0.102-2.el9_3.s390x.rpm 0c7450dbef296ee6024ea769416e8530febb4fa0efa1cc452d4d97e937a44b58 dotnet-targeting-pack-8.0-8.0.2-2.el9_3.s390x.rpm 0cd2c5ee1c9b2a40189bc43986f442486f0ab02e21df91cfa922a852e9848266 dotnet-apphost-pack-8.0-8.0.2-2.el9_3.s390x.rpm 46270979f4c093d060a8ba0540bdb7a0d51dde24ae980ed7751a6845a267099e dotnet-hostfxr-8.0-8.0.2-2.el9_3.s390x.rpm 532ab6c11e7e6c0a870f9aac90354b0e3900f5e351232c47102c0d6fc3027ea7 dotnet-sdk-8.0-8.0.102-2.el9_3.s390x.rpm 7945190d1d789afbac390326e3822b4380e72710c7e53e13861dcc4c22d05bab dotnet-runtime-8.0-8.0.2-2.el9_3.s390x.rpm 81d19eeda9f250acaebc8af9964be044e8cfaefb7c2202be2d085671ac15a57d aspnetcore-runtime-8.0-8.0.2-2.el9_3.s390x.rpm 9a195eecefbfb8c8909e55b61b501d4adc954303b7b02940b47f866d8581dfe0 dotnet-host-8.0.2-2.el9_3.s390x.rpm b923aae2cf9a79042fe5af80b327bfec33c921836cbad28595ac5f0ff0e5bba5 netstandard-targeting-pack-2.1-8.0.102-2.el9_3.s390x.rpm beb776bd1ca10d6467fd130eec54bd69d2f03cffc5609c94e7c1a97667cb92e8 aspnetcore-targeting-pack-8.0-8.0.2-2.el9_3.s390x.rpm d571ae276646b849046af7d03627f25edff326efb2843c18c261ab899990a2eb ALSA-2024:0950 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default postgresql-private-devel-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 025c791121a4ea4ad00e6ac0747008ba8f3791a61ca8f2c38933fa3d03b54e96 postgresql-upgrade-devel-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 0b76df695721e8b2514f20c5cdd7ca1f0b3d7ca2e30f4f76761086cccfa03b04 postgresql-upgrade-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 31ff0e051c9d144f03baa9d226962f5e706967253ac2268fdb8282b597a91cc7 postgresql-server-devel-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 3b345555baac21e55f9d6441b4ed15f33e5ca1a11ae0dffd635aab14b547f84c postgresql-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 3fb7a8b8966ecb3fa0b7d424c337961e37e3c5341c65ddde5c9675140d468ffe postgresql-test-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 4af42c28d8e62612564fd794de648ec7b09e9d95b084d73aaf54454d910a951f postgresql-server-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 607adc388e75223a7ff8d5c987b4f49791628679a66926b5c45db2ecb89c4b3b postgresql-pltcl-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 76a0dc5c6c499a9fd0282d4788948c30386b67f6c3084c48c6c622ef2539e06b pg_repack-1.4.8-1.module_el9.2.0+22+09653793.s390x.rpm 8aa663b5c2ff175148a949b30c8b031b034134291fa2b86fad010de3264ce975 postgresql-contrib-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm 9afde100a50b31886936d08a341c30d1bd3cbe810a81f577e3d32474152d0e98 postgresql-static-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm a09586551ecbc9f16777b777cb3784ce6592704972b7805194d2db0a79135d1c postgresql-test-rpm-macros-15.6-1.module_el9.3.0+55+d62f4779.noarch.rpm a99959d67d3f83cfd6d4631d8925639ef28bee0a0709e6101740776712f3e5bf pgaudit-1.7.0-1.module_el9.2.0+22+09653793.s390x.rpm aae4db5a7b2a459bedc06107e043df328af5aba310f7377482a759ca6f274258 postgresql-docs-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm bd6681dddbf58c2c70c460c0a724c9a6eae0be3d46b50793f3f8a3cd35baeccb postgresql-plperl-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm c853c7e7ec445c8db253e8653ce5ea5a9d26d6af9c9bbe9f0688885ca09aac8f postgresql-plpython3-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm dd4591c4bcb7cc1965f41bcf38aca118fda83769233760b246d12360b7d27f19 postgresql-private-libs-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm e8fa9aa585e0885b837458bc873fa0decb49502d9ab14f42eb0a3284a4147367 postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.s390x.rpm ed411af5e135cda227ddf7b810e4e04e1e6d923ead9a5300a03d167542d996c9 ALSA-2024:0951 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default postgresql-plperl-13.14-1.el9_3.s390x.rpm 05fc0b8d5e7c3a6d09346e96db03a4d923acb1bddee7e7fe408528a4ea9e0038 postgresql-private-libs-13.14-1.el9_3.s390x.rpm 22d1097fc167a142ed14ee959e5affd5948201859a59c8b1f9872e8149ec4281 postgresql-13.14-1.el9_3.s390x.rpm 2f4d4179c508c06f6b660aab5f3f055764c089685f60e28c4b5bef6f716a3ede postgresql-plpython3-13.14-1.el9_3.s390x.rpm 5682a73cd43911060dbeabb04fee6e3fbd502d6c9f405bdc0470055d054300b2 postgresql-upgrade-13.14-1.el9_3.s390x.rpm d3ee2441dc9182fd5e9ccf95f2cf955d4626a8c0830ef66315c892a61103e8bc postgresql-pltcl-13.14-1.el9_3.s390x.rpm dbcc7436fa336cf76dfbf97c2d634cba07c41548afa66a9229355cf6c7c6f54f postgresql-contrib-13.14-1.el9_3.s390x.rpm e6d634b02b217e950681215b52990fd7bfcc80054f0601dfdfb9176c30d797be postgresql-server-13.14-1.el9_3.s390x.rpm fc92611b30bcb7898c7c4393f9f5d4865051f9f3cc836bc2f949fa4e70364570 ALSA-2024:0952 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.8.0 ESR. Security Fix(es): * Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546) * Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547) * Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553) * Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548) * Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549) * Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550) * Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551) * Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default firefox-x11-115.8.0-1.el9_3.alma.s390x.rpm 87adf4e689ea29d6ccb0e7364a1bd59b6b31d1075457364f93d4191b479e5639 firefox-115.8.0-1.el9_3.alma.s390x.rpm 8c4b8374769726b01a916aef475c7f5aed79b5129b2b5f69cbb014af1603bc7e ALSA-2024:0963 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.8.0. Security Fix(es): * Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546) * Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547) * Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553) * Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548) * Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549) * Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550) * Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551) * Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default thunderbird-115.8.0-1.el9_3.alma.s390x.rpm a55928bed8677be281530ed99b6b9c5a261a2277a83ecdbe3bd29ee521d42db4 ALSA-2024:0977 Copyright 2024 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default python3-unbound-1.16.2-3.el9_3.1.s390x.rpm a0c257c029784c7165fc349afd7141d4258af018917623cc59bccde68f0d1585 unbound-1.16.2-3.el9_3.1.s390x.rpm d24d48e87b96294936054f2a10e71f79a1c3de3a25a40e7bf78cb2ad334cedfa unbound-libs-1.16.2-3.el9_3.1.s390x.rpm e2358731ae118187900ec1ced92462974301ee1c4f3179400aaf259771930835 ALSA-2024:10090 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default tigervnc-selinux-1.14.1-1.el9_5.noarch.rpm 49a61a3344e8e4098d4df30e2e8aa25437cb433d2f58ddc65cfe1302368fc24a tigervnc-server-module-1.14.1-1.el9_5.s390x.rpm 9912b6f49fb609ece0e46140caa7a9e279148ad4bf65c7929d99499f34be52c0 tigervnc-server-minimal-1.14.1-1.el9_5.s390x.rpm c77c2e08e9352a219ff5910225dd91022e91b5a8d2e1a4953600767053b9238a tigervnc-icons-1.14.1-1.el9_5.noarch.rpm ee26e357ff2d42b1bd2468655eaa404b092d080495fd1d96787bca99a536a9af tigervnc-1.14.1-1.el9_5.s390x.rpm eeed8ab8bd623a26851646801802307e4f6dc4ca369447ea84b67687470ac833 tigervnc-license-1.14.1-1.el9_5.noarch.rpm f1165f116f4ccbd8f20aa8dd69405fc83c427289b86364cf455f6bb6b3ddd498 tigervnc-server-1.14.1-1.el9_5.s390x.rpm fa2064d8c87f099273d0e1578d75b3a09b2bfc0d36c7da6c0b72762558f932df ALSA-2024:10218 Copyright 2024 AlmaLinux OS 0 1 Moderate

perl-App-cpanminus security update

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM. Security Fix(es): * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default perl-App-cpanminus-1.7044-14.1.el9_5.noarch.rpm 1bb7350c514fdbde975c47b1ce48c2769919fd326b413281eff367cc12a2d05c ALSA-2024:10244 Copyright 2024 AlmaLinux OS 0 1 Important

pam:1.5.1 security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default pam-devel-1.5.1-22.el9_5.s390x.rpm 68fabdd88f988d5752c07e5978c0c84acb63dc0cbc2e0d4eaa0929f11c500212 pam-docs-1.5.1-22.el9_5.s390x.rpm a34ead546c4f4efcc4dd78578ccc18e9fce591ca05b06429a508ceb27ee9f47d ALSA-2024:10274 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244) * kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CVE-2024-50226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default perf-5.14.0-503.15.1.el9_5.s390x.rpm 08dd330aacff336df5b74561801ced1b2541da8498d5cafe4c97817dcc3e0ed9 kernel-doc-5.14.0-503.15.1.el9_5.noarch.rpm 15f48479217cfeda3e5af1d7a11c496d17a672565ce5f90cc67239d461ff7c28 rtla-5.14.0-503.15.1.el9_5.s390x.rpm 15faf5613cb208fff2a002078f2bff9659c30246781fb57d29725acf3567099c rv-5.14.0-503.15.1.el9_5.s390x.rpm 16480c08ae0c7b42b5b608c3bfc91ef1069b2551a62de7950d88722cbec157ad kernel-zfcpdump-devel-5.14.0-503.15.1.el9_5.s390x.rpm 67b3c4cc07cf434e2462409e964ef17d8dd442a2d5db247e4fbb1c90b4262cd3 kernel-debug-devel-5.14.0-503.15.1.el9_5.s390x.rpm 788c9922ae601fe7ac7aebe0bf74516b4a2183b49033c0ed3c4077d1ac70353c kernel-zfcpdump-devel-matched-5.14.0-503.15.1.el9_5.s390x.rpm 9a7df425fc7a82a4bb830f7b273ef4301c179df0d8000eb1d26140fc815065ce kernel-headers-5.14.0-503.15.1.el9_5.s390x.rpm a5adcfc272a9d220a85ca2ac8ef5a15dca2135d9b8271f6cc9e995cd4accae7f kernel-debug-devel-matched-5.14.0-503.15.1.el9_5.s390x.rpm bc1bbc14065438a09e981e4c8d4f8914db8974d823124e534db319769d72e7e0 kernel-devel-5.14.0-503.15.1.el9_5.s390x.rpm c18dff31628c465d9074f1fd11db97d4b986b492f2bf3a357446d7fb827ab91f kernel-devel-matched-5.14.0-503.15.1.el9_5.s390x.rpm ecc650e2bb82ee027c6e8f611715e1f9ba3262a4ef040ace95cb64e3baa8639c ALSA-2024:10384 Copyright 2024 AlmaLinux OS 0 1 Important

tuned security update

The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es): * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336) * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default tuned-utils-2.24.0-2.el9_5.alma.1.noarch.rpm 09b59391e3473513e1addac366c878caeeb4bd06a0a57fbe916b8cc72ef13685 tuned-profiles-oracle-2.24.0-2.el9_5.alma.1.noarch.rpm 1806d907006a2d77f2dabb6a981d347c46708ec1c580c2a47a91445d9e7fb2bf tuned-profiles-postgresql-2.24.0-2.el9_5.alma.1.noarch.rpm 4cdcf3d82ed9f90b61c15e1310f3dbf79203c07fa3ab8716cf87158345d6ba0c tuned-profiles-spectrumscale-2.24.0-2.el9_5.alma.1.noarch.rpm 643c091463125f5caa6792f17f2a68f9460ccd82f467a1a4fb0a8804276ecedf tuned-gtk-2.24.0-2.el9_5.alma.1.noarch.rpm 75bfc56b8e81c72d66a913b653e73517ba2e299863613d0c0d2b6d78e1558829 tuned-ppd-2.24.0-2.el9_5.alma.1.noarch.rpm 7640e7338f26ada7da9161c634dbc048bfd86b4bd9f42b1f4f740ed80137ef7e tuned-profiles-atomic-2.24.0-2.el9_5.alma.1.noarch.rpm 84fb648623a1324a3119d642f3fd8f478ff3b15a635c83ca3b3561e32f2d00ec tuned-profiles-mssql-2.24.0-2.el9_5.alma.1.noarch.rpm 97c9546dba5c8b4ed1da440303ec668f2e7b8f73ebaf3cd35159eab6cbc2b7d2 ALSA-2024:10472 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: data isolation bypass vulnerability (CVE-2024-44309) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default webkit2gtk3-jsc-devel-2.46.3-2.el9_5.s390x.rpm 1ff8db7c712cfc5a2aa4ed1356c58a6f26e03a8eb06e8533bfe19cd70675e1e5 webkit2gtk3-jsc-2.46.3-2.el9_5.s390x.rpm 73fa71cfc154fcc6f73b6ed74be39bb1f22785fc9ee9c3ff38f26eff96613452 webkit2gtk3-2.46.3-2.el9_5.s390x.rpm a937a645c0b323bc379e8c599ddb7d8dc462f82cd95649c261d6ed97e793ddc7 webkit2gtk3-devel-2.46.3-2.el9_5.s390x.rpm bafd8287f49567dcd1796ff2e25baff15c4e35631127edd5ed6f756a43dfa0d9 ALSA-2024:10590 Copyright 2024 AlmaLinux OS 0 1 Important

python-tornado security update

Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools. Security Fix(es): * python-tornado: Tornado has HTTP cookie parsing DoS vulnerability (CVE-2024-52804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3-tornado-6.4.2-1.el9_5.s390x.rpm 4f1cb443f94dc97a01dd8ac54cd0135a644484557311d28c62d2d623e4a5ecd6 ALSA-2024:10592 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message (CVE-2024-11159) * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694) * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696) * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692) * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699) * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695) * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default thunderbird-128.5.0-1.el9_5.alma.1.s390x.rpm d83a722212067a2a9ff778041c16fa9998a0e92051cdc0a318ceb28b76dbfc5f ALSA-2024:10702 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694) * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696) * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692) * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699) * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695) * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default firefox-128.5.1-1.el9_5.s390x.rpm 49123969ec749d14fc7ff482cef2aea2ed35f017d1d28c29da7157431aa424d9 firefox-x11-128.5.1-1.el9_5.s390x.rpm 75a48dfec953642a20cd0c8bca22f2c0ef990bd14aa59b55d57800effe29478c ALSA-2024:1075 Copyright 2024 AlmaLinux OS 0 1 Important

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230) * edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message (CVE-2023-45234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default edk2-ovmf-20230524-4.el9_3.2.alma.noarch.rpm 672357e5f22af5021147da1e6ea2940970361d3219b3256dc24010fdaeeb1424 edk2-aarch64-20230524-4.el9_3.2.alma.noarch.rpm c344e31df64e7b01343cb0aed155d8145237772f7f844a227dd8eda235c3368c ALSA-2024:10787 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default postgresql-contrib-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 01814bd318aab1460bc44344e2da7f770c98dd47d0fe37b2a12804379182b75a postgresql-server-devel-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 039eb8033140650ad46bc7b10b542a0cede60569cce370cbf0ad2a0bb040eac0 postgresql-upgrade-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 10658b5f6c1421af4d8112e6d1fdf3daae30b77205c27aa86f535f4dea3f5bf6 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89 postgresql-pltcl-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 1ae24b6a0421fa00df6027e788bc9c58dfe2f053c8ecfaad97a604f8fb115310 postgresql-server-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 28e639a1a32ac4c30ba5e3efb66dab32ce7d8c3cd30d9061acf5577e63d88498 postgresql-static-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 2e958fd5e824bea3e0dfe0a6e274d09f24620101fd619c82612c2a1005089f04 postgresql-private-devel-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 2edee8239ed5889801fdb704ed5a039b5e179f613d1ae1695eaa33d3eacf37b3 postgresql-docs-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 35ae759621eb6016631f8c8c72497ffbfe58b4dba1d52798caf39bef94917bd3 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445 postgresql-test-rpm-macros-15.10-1.module_el9.5.0+126+03d48c9f.noarch.rpm 546dfc0f0293f8590de6b31ffdac573a7d08b8cc21fb464b18f7cdd638276326 postgresql-upgrade-devel-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 67d5a2b211b7dee63cce53b82aa9c96f20105df9c5fbabfd522ae71280af30d8 postgresql-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm 895b4a89a1bb097f84b08791157b1e7b233ce0c085b7e279a9ebc3fddba9c32a postgresql-plperl-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm d92c3f28adeec39119146238b35bb7a4c610c8adc94aba92c4b091d5777183e1 postgresql-test-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm dcfca4e597b9e26c29c3dbaeea0c3d2df288a27e5346445526980fd8a9454f58 pg_repack-1.4.8-2.module_el9.5.0+120+4533eb20.s390x.rpm df1164222320af61b8334ca2db5460bf0aaee4337cfff3c51ce7ba90aa1e9b66 postgresql-plpython3-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm e62e945c74a57b1683cc419049f7b8a9ff2c24906fbc8af53330a85e7dad70f2 postgresql-private-libs-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm eea610b4b3e55dbd647e7e5b9691e5cb5d3020f40701120de8bb25a9c9b9f5d3 ALSA-2024:10788 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default postgresql-server-devel-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm 1ea7b3d264e188c4272c95b0100757fa8fb2c77435906dd6df5b934708ba92c9 postgresql-pltcl-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm 2498444fe4cafead2fafedc8f92a1db3c047526e4cceef1bc515c0ea690f55a3 postgresql-plperl-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm 2f20ff207b51530881c948abba8841440d02eaedf1abfdc1d97a6de7da3b479c postgresql-upgrade-devel-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm 3220cdd2d828d40744607affb3649d5c031858e554daef6a76430a6d26f15aa0 postgresql-docs-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm 525c4efe693cc93d1e72ef29ceac37fc99afbf464390134e7efd9448cf103efc postgresql-upgrade-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm 53930b0919ac5eba8af6486ef8ed2f352962fc3d71ced7ed6676ac0d0548b0c0 postgresql-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm 713809a592166cc6ffc17d0bed78b532b1e23a6553f948d6d9806a09206a4a9b postgresql-test-rpm-macros-16.6-1.module_el9.5.0+127+50ff03a9.noarch.rpm 7187c10a9d4422053b4301be6a2ec5d52b4ffac6d2739b224c0f759e1e2118ae postgresql-server-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm 748688b2e18b84e4bab679f76ad77c7496a69b0a2635f942d59ae4ce10863b73 pg_repack-1.5.1-1.module_el9.5.0+128+1095dce2.s390x.rpm 7f6298567f4c4c449fb6821c1b7f708373496b47a39e64274a57c0e48396e0fa postgresql-private-libs-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm 8bec36f4516ebd0d21e3e9a87ecddc8114cba02238ebc95e9763ee2dc5fc4706 postgresql-private-devel-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm 994bdfa5e990569c3ce9346f37a589218df63e1bd651ac8a6369d2e0e804220e postgresql-test-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm af9ba9c40059c1285089285a5213b1ed084a1f5a8fce964d27f08071956248f7 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-static-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm c8d394c936f2d1f9f0bd2e84d08d87c24cfd4b4b8b1a08d79736d3c06c2be76a pgvector-0.6.2-1.module_el9.5.0+120+4533eb20.s390x.rpm d9e5362a606cfeea735372eaed74bfcdf4f197951f254b8087bf4055677527ad pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 postgresql-contrib-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm dea5976fb35f472fe19be235519e47b6154eb6aa52d53e790f628118be0be7c8 postgresql-plpython3-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm fda64d751a6ee6baab851abde4ac3e859e8327d4ea06bf3cdf6cfafb90031206 ALSA-2024:10791 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default postgresql-upgrade-13.18-1.el9_5.s390x.rpm 6637a8dbc5615c3b84b301ef37b0287d3564672e4e59f5c5befb643984ca798f postgresql-contrib-13.18-1.el9_5.s390x.rpm 9ebb26485bdab766b7fca51df33a6687f163959a2fa36f62b9a3456a4586d5bd postgresql-private-libs-13.18-1.el9_5.s390x.rpm b2981a0c2c0f2b8c308efa70ba621c7111fba6b0a75b71a337d00e7a512eaf39 postgresql-plpython3-13.18-1.el9_5.s390x.rpm b6b6534a618cf832c9e7803a6527e2ed614aa9972d00304d6d5ae5aa7886f689 postgresql-server-13.18-1.el9_5.s390x.rpm bc65b191044c96562ccfe271c3185a76979a1fb679dfc32a84b6f04061ddc8b4 postgresql-pltcl-13.18-1.el9_5.s390x.rpm cff2555d024832d7177e97d3821385c8b80ea26dd72a11549e93ffcf4b701acd postgresql-plperl-13.18-1.el9_5.s390x.rpm d3fda30944900d6fcb22305de42deb5b0834770fb01970014be58b8065c89fcd postgresql-13.18-1.el9_5.s390x.rpm e129e0c2f2588123e4f7afba26fcec8855783a27af1d1fb1113c70b38e61d3e5 ALSA-2024:10858 Copyright 2024 AlmaLinux OS 0 1 Important

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: REXML ReDoS vulnerability (CVE-2024-49761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default rubygem-json-2.5.1-163.el9_5.s390x.rpm 15e6a531e33da6c8b6d305da599e653e0d9339eae39e0c1f36737d8cdf490d52 rubygem-psych-3.3.2-163.el9_5.s390x.rpm 19ee3bb0b22d0cad4570e42ac20fe41f9dcb55a94be05ea54ef0e3faad2cf2a1 rubygems-devel-3.2.33-163.el9_5.noarch.rpm 232bb85471c443772c091826c8eb9c354526fbe212ee1f8ee24bf1ce54b33c96 ruby-devel-3.0.7-163.el9_5.s390x.rpm 29c410d6396e74368d181a04c4a2ce342fa911f37ded0120561f85669ae9c55e rubygem-irb-1.3.5-163.el9_5.noarch.rpm 29dda18157bd7764cff8221139a51148cb14bc3814a22e6a9d8eff528ba12a52 rubygems-3.2.33-163.el9_5.noarch.rpm 5268018305828e4b7743975781e28c022486c906072f91025f19a783f79e6b7d rubygem-rake-13.0.3-163.el9_5.noarch.rpm 5e1180085b455e8b0eabed26b73ad6c3d0c359b3ef1063de167ed353b0bd8cc3 ruby-3.0.7-163.el9_5.s390x.rpm 65d0c9abd323ac570e56f28d435eb4796e99c2ba5fddee1e66243e803f26d692 ruby-libs-3.0.7-163.el9_5.s390x.rpm 6b6b16e327a1763893f2c8223ca4c6a85df2b5b65a2a59a20fd063886007957f rubygem-io-console-0.5.7-163.el9_5.s390x.rpm 6cbf7f0002947ffdec7b9097123be8ee29f93635b28121ab1fbf4daadac654f1 rubygem-bundler-2.2.33-163.el9_5.noarch.rpm 743129be5a0de70b0f0dfabdf8466b904edea7a16e6bf28aadd9417af97eed2c rubygem-power_assert-1.2.1-163.el9_5.noarch.rpm 7d41d9a9be6e6bfb145cf1b916804f00b75eb90766ad602298d41cb02365d413 rubygem-minitest-5.14.2-163.el9_5.noarch.rpm 7ec1f80250541c6650bc9e4c5dac0e40b8e7449869feedb92bc598c6be1ed2f4 rubygem-rbs-1.4.0-163.el9_5.noarch.rpm 7fab3b59c4cd69003c8f0f070f2541b7469e9867c77550b5a8eeec9e226607c0 rubygem-rdoc-6.3.4.1-163.el9_5.noarch.rpm 9a53b4745b144325874e08442fd4dc81a43a51af1eab0f7e69e16b9a665eb01c ruby-default-gems-3.0.7-163.el9_5.noarch.rpm 9eb7a316c0a7e413f9305edd39b03226160fb075943ad12d32c05147d312f4cc rubygem-rss-0.2.9-163.el9_5.noarch.rpm 9fb6ffc54dc5c69ffc6cc0b245257b774e148b4b91fd1692f776c0d12be63f7a rubygem-test-unit-3.3.7-163.el9_5.noarch.rpm bf8e74d7f7c866c796ac54cd22e0baaa4706f8c5e5e89a2f32c8a96149c6158f rubygem-typeprof-0.15.2-163.el9_5.noarch.rpm d1f54f1cd4085e69c4c00259e0cee5844b9ef27179f9b3a350b47f451d29dae5 rubygem-rexml-3.2.5-163.el9_5.noarch.rpm e0cd43fac49e8e7810a48b3c7302853fbca89ecc81677eb71cc216b2a4f48db0 rubygem-bigdecimal-3.0.0-163.el9_5.s390x.rpm eed749a711f4c11d2addfa0b9371b199522300cfba05de717b91f69518ed4ba0 ALSA-2024:10860 Copyright 2024 AlmaLinux OS 0 1 Important

ruby:3.1 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: REXML ReDoS vulnerability (CVE-2024-49761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default rubygem-power_assert-2.0.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 1a87118a897a317b8d91cb3ff5b0bdbc6c46a1e01a48eada9d704ba780a7da37 rubygem-io-console-0.5.11-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm 3fca50fb1c3fde7efd4f4d4b9cf970df4941632cea9ff554fe9bf70ef3d8ea19 ruby-default-gems-3.1.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 46c3117101c6a2f6ab77792b87553f8a8753a22e33e2dd4a5a7d62fb2db3c8ac rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm 47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8 rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.s390x.rpm 49b1f8d15c4626c94dbdf369d69aa871b2e1b4909ae4718089f41d7de50396ee rubygems-devel-3.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 5a5635bb37284e7f8944e22edeb54996bc2bb874fa24e2e4d1d7af2040d64c47 rubygem-bigdecimal-3.1.1-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm 5f372eef5be9c6436a34d5c853380e3ef7739eae6600af97e494ee80fc9499f3 rubygem-irb-1.4.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 609f96b6b4fbb4fd81e843ab154793bb83a9fdc834ceda4ac8fdae8971a99917 ruby-devel-3.1.5-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm 60a58272a4e369bfb1d4631cecc9190cda19e99c522b777f198336fa82264181 rubygem-json-2.6.1-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm 611dd077c04f90e0cbf5776573fb874dedfd8173e10337ebe299bec1581b931b rubygem-psych-4.0.4-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm 742ec517517ccaf6d889691ddadfa59aaf8efc3f604aa67fb42d890cb4f6b6dc rubygems-3.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 7866c7856d0910478354276361b0c7a0b04c84210b488c20e438d5a2bf74c6d5 rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.s390x.rpm 81af584c5f98cbff30e7733f802c0711cdfb921b4fc268dc21e6e002f4c9a292 ruby-libs-3.1.5-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm 8f53ed61262d2fadb925460b2a11e223e429597b6bd324c41e736d665802c3b2 rubygem-typeprof-0.21.3-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 9d8b840c834b7ca34b9b639786928be8d668ada058261cb4f696cdcc2400aa32 rubygem-test-unit-3.5.3-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 9fe8a32f2ca123c72339b450da0b96eee6793236e1ae8f96d35707ef1c53c556 ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm a4a30f88312e0b584f06fb7bdce12edab94548d105e76299bcd371e45d9fedb6 rubygem-rdoc-6.4.1.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm ab6f0392f046f1332b8b3c9e94d9f2d127038293ef8ac6a4d3eb1e92500e4370 ruby-bundled-gems-3.1.5-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm b33d86e789cc90e7170baf9f44e1ad5adac190ef0716e1776f57320183232c3f rubygem-rss-0.2.9-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm b628e996934d9fa3728b37b8c0946755593c8689299c68050bd8df8f208c179f rubygem-minitest-5.15.0-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm c0239a3c3442f7c918113b398f0e86bc2a382410c806e07d12dc830840fee5ec ruby-doc-3.1.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm c1a416acf12e7f80637f28006fc764047a3cbc1d801b8c2751584b9889fd1a07 rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4 rubygem-rbs-2.7.0-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm ccf958d35332f2d771a20081b101ce20ea4cbc58725d6a74af640e9362bf7377 rubygem-rake-13.0.6-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm d0e601cb3008cbf15b85ce311496b08ff2cbbcec47b9eb7fc246f33ddca18360 rubygem-bundler-2.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm f2dcf8aa2d59f7e4bb04f61f9624b06b29c6a0fa93e93c48459f07d23af932f1 rubygem-rexml-3.2.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm ff85ec821bb13c2a71eb6073e8387b5d068ee21398bbaec0897c8db7da4c98ca ALSA-2024:10869 Copyright 2024 AlmaLinux OS 0 1 Moderate

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis SORT_RO may bypass ACL configuration (CVE-2023-41053) * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145) * redis: Denial-of-service due to malformed ACL selectors in Redis (CVE-2024-31227) * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449) * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default redis-doc-7.2.6-1.module_el9.5.0+130+36ae7635.noarch.rpm 2c114e5e77004ee28712b857f95f1006f0b12a6df95654291887750a37cca3c5 redis-7.2.6-1.module_el9.5.0+130+36ae7635.s390x.rpm 4b2123b79f17caedd31178281228062dab839f4e7d205cb8aa104cadeaa5c3cb redis-devel-7.2.6-1.module_el9.5.0+130+36ae7635.s390x.rpm fdd14e4009c65ad2d0ca3726c57596aa0537ce9e815a70f6f0ddd1687dc1ddc3 ALSA-2024:10939 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615) * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854) * kernel: iommu: Restore lost return in iommu_report_device_fault() (CVE-2024-44994) * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018) * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695) * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949) * kernel: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default kernel-devel-matched-5.14.0-503.16.1.el9_5.s390x.rpm 18300eb5e7f76eba7e3952e07022aff231f47b30fc30ef26d9cd13ff99d1169c rv-5.14.0-503.16.1.el9_5.s390x.rpm 1e3c819cb66bc5a77971247fa604c25424a18f4bdce8a7b9bec351c6eb7f0499 kernel-doc-5.14.0-503.16.1.el9_5.noarch.rpm 202e63c678f26f51ec0ceb07070eb3742177bf1bfb7f8045aff4d293645a8939 kernel-debug-devel-matched-5.14.0-503.16.1.el9_5.s390x.rpm 298a6b4c3f5510f6e109333d5315c85b6f60da8a5bae42eba84e8ffcdcb800b8 kernel-zfcpdump-devel-5.14.0-503.16.1.el9_5.s390x.rpm 3caf738baa7de1a5317d8a761f1b1f7460ef86790942adfe332253fa82bf79d8 kernel-devel-5.14.0-503.16.1.el9_5.s390x.rpm 400870cdd215e9e6da00f735b7abcb0cf0034cebcb1b6aa26f30316f05ecb099 rtla-5.14.0-503.16.1.el9_5.s390x.rpm 6e1bd0239a9f90ff7da610d6c1f05fede0ca80f884be0d80752b4b56a530a26a kernel-headers-5.14.0-503.16.1.el9_5.s390x.rpm 7aafc6e849107e65f815befa6fe3e8062a7e469440e83b4106a37821a9809d08 perf-5.14.0-503.16.1.el9_5.s390x.rpm 99bd8388ba0be3056bfca4d7793f09a1e0a3b41c53fe9a5d51b3f1b2718a9713 kernel-debug-devel-5.14.0-503.16.1.el9_5.s390x.rpm bab05a0db48d384ccb18ca054e17eb6f40389fe91fba50c3b8990a93bc6b4bd5 kernel-zfcpdump-devel-matched-5.14.0-503.16.1.el9_5.s390x.rpm e8a3fa5ce3d11c300940fcae603a58a7b71f8d80e3223285a1114d9e9190928d ALSA-2024:10949 Copyright 2024 AlmaLinux OS 0 1 Moderate

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756) * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096) * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458) * php: Erroneous parsing of multipart form data (CVE-2024-8925) * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927) * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default php-process-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 03c8959c64d079356fe232fe163482333e36fb595012a2076bc5e112570a24dc php-pgsql-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 0c874fa5b320f703a37026bd8e6dc08d6a22abc2ab47f8932e6e58a6f95ba8d3 php-soap-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 1f8e8a7f7e72c73e6f6c119490214a9389451b2babefe81afdb631ad0c0c1226 php-embedded-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 28055a6db806ba9f469bfcc082370475e8048a095333bca04b16bba79f8d4bb8 php-mbstring-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 3a42fa7689efba6baf4652d28b75f915a9930b8c318d35439b71149faa57672d php-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 3b487159b8b3377b9faa6e4987d716b07a3c8831b7b2ce40bb121f477fcd4638 php-gmp-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 43f8eca9dad3d7b00116e910f3f57b85fe84d3610b0281f9e1ad5823033390ca php-common-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 492c54f27613dfbfdc4e24f513bc5dc53c46e4cf421c8105ed40f98d61fa9331 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-dba-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 4c374bf04579d8a5115d067ee1204a1eb4afc7258ca01f047ae07130744a45e6 php-ffi-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 50c6394d01ed801df237f901c98b8316d0422721bda2225e94a848bb0a912d1c php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683 php-dbg-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 6a423891e4bf8ac865c8794c12d2c466c9b50682948c8698aa739467516645e1 php-xml-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 7515c49b75df99af8f06028797b63b7351bc498b7da1928d73fe3459c6bfadb8 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm 7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a php-enchant-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 9a442c31e9e55bbf0bf58d07127c429622125d7a0742d1e7b600d53940a32de5 php-pdo-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm 9b4b72ae491313efc2820e0e4cb894990601fcc5783087031c4046db2e342474 php-opcache-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm a419363ddee17ebef6d4e56e108f9333786a54b838e7b79c2a12df6901ac5779 php-mysqlnd-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm a916083049024db81de24aad784b42ed57e139f44cb9f2864c02e39e23c8f3c0 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c php-fpm-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm b6d2f17dee6365feb57a3c6c172c6f288082a77b8174775bc0099fe8ebe863b3 php-snmp-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm bed2176e97ce088101e3d8ade07a0ee478402220ec30a0a31a68021685d068ac php-intl-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm cdc43e4e8c5bfa6d385572b08c3ed67728e103e2162c689b7647040728568424 php-bcmath-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm d20ea04f911d25c5f78d6526efc10c2174a36cd3250c262d14ff4a531f0bb733 php-cli-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm db25c506700e9fa257f8136a3c8e7eced0bbbe5d1ba0bfbd25734667249487c2 php-devel-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm de5f94d497b1a0cd4c836dfd17828b50ae878e9465b21c4aec37cfd0fb3283bb php-ldap-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm e0ecbbbf674c205c0ad436d4ab03cea4cb22e7f32b6069495a69908be8da903c php-odbc-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm e3024e3263760bd425e855f6092c1ef7ad240b541010f48a6fbb3464f422784d php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d php-gd-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm ffcafa7114eafefe181e46e8f109629dcbd68291e0d912eee44e5155b8b1019c ALSA-2024:10950 Copyright 2024 AlmaLinux OS 0 1 Moderate

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756) * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096) * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458) * php: Erroneous parsing of multipart form data (CVE-2024-8925) * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927) * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default php-pgsql-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 00ae08ce6483f418ed1b2b9e39061ad599bf4bccf1b397a93484028a508e6363 php-common-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 0533147b440499cb909292caf8a6829b5c60439af5f0894dfc4363b938a8aa2e php-xml-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 2848501d6a7e1ea69aa7e727bea98c9638609658bf30ef0c977cea089242c478 php-bcmath-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 2c6a8b8c2529bff9fd23e1a02cb9355af79266db81c7076194233413a6557198 php-mbstring-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 4c6bd4e5b65ac68b8ecc25ff72a02739ecc638d93c5729b96ca2332e32d08fba php-gmp-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 4fdafd1157e1af2c9c6f3a766b499be656eacc0cd7e4f3e6b6de50ad34cdb5cc php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683 php-mysqlnd-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 64445b7430b1abd46a1b9e3ac3805e4c43f19a34d504e5b21ad5a808f2005aad php-process-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 677212830865da3c2abb14ac8f8ba312eedf33d4774e7f2c0410c9b61d6fddcd php-opcache-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 6ac02254d50e52ec1d2bc8111556ddad305cd14cff5df2a6c4a9540daa7ff55f php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.s390x.rpm 6c89933d8e8153ed39764877e9c07501f556ba5057a9695bfefcfc75649f5734 php-pdo-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 6f8fcfc4adb059c4e89979e7b3bbc3b2163a2b8b538f0269d9ca9fe97e2aaa3a php-dba-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 748838f7ef9da04c8831257992f48a28543001e86c2af07e6a0b9b85509462d1 php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm 74c41c08148fce005bb18c75bcfafc1e739cc84b6cac297b5ef955172eff0b69 php-devel-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 88d1a4c1adc45acd2d265db5e717c657541c8c74e72b65dbd3f9917792f9299f php-snmp-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 8ab0dbd68074a9fa8ea90c71b9e74935e82921782b8245cc0eb0e49533f754e9 php-cli-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 8bff86d973207e56da3b26dd42089bf1ce73d1b2f093f94c83795542ae836511 php-fpm-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm 98415c8b21ba81114fbc2fe22fd44d1fa744cc027fa455842fb57d16533fbbe9 php-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm a67610c60d4718fdc211be22d2262095d8e2f771c8f90c37ae77c03597265bf5 php-soap-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm b17d57d7d562ca3fd4c2f684f5a8b8b2ed71010798bc0bd711ebbb8265bd2e0f php-dbg-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm b4a7cbe895d8057801715ee1c6fe4da76d99efa400e1c19b482731bca40192de php-enchant-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm bc7b9772668baab04c36b7b40157b5581b79fe0e1eb3406005651bf88b213d4e php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm bd0093fac304470cea776e43f28256fbfa317c192bb6bd8762cc1ec00db6f9e1 php-odbc-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm c131150ecc9432c290b5a6f273735b0da0c240a590bb3ebd7b08d5f6f2f26334 php-intl-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm c3deeb43bfcd5cc56f0b8c8e01a04e897ddd4b6d76dfbfb8cee64eb9ce7956df php-gd-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm cb8d20231bf872bced8eb16a09c60959e4f1e6d7e6a734b0a2dfda394bcba83b php-ffi-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm d1aa0f70386b93a66f4633e1caf439adf23b07115f9bce0849c06fa4d28cd355 php-ldap-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm d29bf1315c3727dd92ec7731d66f44b62681b36628054bef1f2e007c8fbab7b3 php-embedded-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm d5057772041acf3846f07814e54666862f9cd83c56039b73004d8f28e233629d apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.s390x.rpm e97fdc0e54c4a5d2084a375f0ff31f551c9dc8c1f4c2012f2e453b1a031a1328 ALSA-2024:10978 Copyright 2024 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287) * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3.12-devel-3.12.5-2.el9_5.2.s390x.rpm 28545d7171c652e061a0a689df649601302154fa19bdd9d2eb06fd6072877af0 python3.12-libs-3.12.5-2.el9_5.2.s390x.rpm 98c928b6677ce52d0b5b0ac2fa3fca21d49f4c20ccf8867a84092a1e1ab87d56 python3.12-3.12.5-2.el9_5.2.s390x.rpm e3dd1ada54d6607bc7783d91edac8b04d1f1fc5f52feadc616cbb68af85ad333 python3.12-tkinter-3.12.5-2.el9_5.2.s390x.rpm e72e553551a854794f89f538d7b0747085344f47fd2b34626681a5aa6e32dc75 ALSA-2024:10983 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9:3.9.21 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287) * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3-tkinter-3.9.21-1.el9_5.s390x.rpm 044486923e31ae735a9e21d31794e18dafe72a7b7a9a7fe6a11f9a0b8d057687 python-unversioned-command-3.9.21-1.el9_5.noarch.rpm 6e77041eec0c001b2a4131bf54ac4e15b0b06f4e3d103493ac45edfb1e20d42f python3-devel-3.9.21-1.el9_5.s390x.rpm bd1ba9225ed0233171edab91d468d07f33bb95b85cda7f022d0d8523b6e6b43b ALSA-2024:11111 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3.11-tkinter-3.11.9-7.el9_5.2.s390x.rpm 1492a3383eada962458c402a04a794c58ca0ea5d817df3fd36055551279c9e44 python3.11-libs-3.11.9-7.el9_5.2.s390x.rpm 4b1f39c94b9790f4fdc59bb0be9995080855019ad55a27b0a2cb0a6be75b2961 python3.11-devel-3.11.9-7.el9_5.2.s390x.rpm b88e6577d76163e8d6f28fc82d19fdd654af50a3f088f1425f80aec3c229363a python3.11-3.11.9-7.el9_5.2.s390x.rpm bbc27aadaf2d411e2869d4464ce834a1429fd56b9c56cf1ecdc24699e77de9d2 ALSA-2024:11122 Copyright 2024 AlmaLinux OS 0 1 Important

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540) * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537) * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539) * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613) * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVE-2024-47606) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default gstreamer1-plugins-good-1.22.1-3.el9_5.s390x.rpm 73e213381d67e81680e5207d4ec36d03ad8b4df74045f700830c500944f48e58 gstreamer1-plugins-good-gtk-1.22.1-3.el9_5.s390x.rpm d8205a330d8fe2fae8c0837f3445842d420ea483c78bc9391c77165b7b932fec ALSA-2024:11123 Copyright 2024 AlmaLinux OS 0 1 Important

gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538) * gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer (CVE-2024-47615) * gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default gstreamer1-plugins-base-tools-1.22.1-3.el9_5.s390x.rpm 696fbfd606df3c734b6b2f3eb72a2678b1f9622bf7bdfac1502b647dbe2941eb gstreamer1-plugins-base-1.22.1-3.el9_5.s390x.rpm b48900059adbc2548ce9831db890dfc77dc7cbf15218d5c43e119f026fcd4e76 gstreamer1-plugins-base-devel-1.22.1-3.el9_5.s390x.rpm d87e0482cb998438302cf96c418e7ac1f6e2f6dd1392ee4982436331c124d947 ALSA-2024:11219 Copyright 2024 AlmaLinux OS 0 1 Moderate

edk2:20240524 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default edk2-ovmf-20240524-6.el9_5.3.noarch.rpm 78c94982627bd8d6000410fa5f470a76850f56d9d10d3b989fdf8cc767e6221e edk2-aarch64-20240524-6.el9_5.3.noarch.rpm b4113deecdfdfe37d6e0009c5471b1d36782fb5ed693b1ca0c64dfd4f940de66 ALSA-2024:11238 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3.11-urllib3-1.26.12-2.el9_5.2.noarch.rpm d90ef51c63a9593846f6fa88cbbbb78e9856da80ae47f8bddff48b3a1fc94d8c ALSA-2024:11242 Copyright 2024 AlmaLinux OS 0 1 Moderate

mpg123:1.32.9 security update

The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries. Security Fix(es): * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default mpg123-libs-1.32.9-1.el9_5.s390x.rpm 709b566334b05def0afcf5a86bdc515d2440a6d41838383d92c70246cd4a4ec2 mpg123-1.32.9-1.el9_5.s390x.rpm b4515f909da304828e66ce669c0ba0995d1c03050d2103182e5f646a1e48dad7 mpg123-plugins-pulseaudio-1.32.9-1.el9_5.s390x.rpm cf30e2e7e671d47f3981c6e5208e49579061ebdf80f6bf671875f049b7f0274b ALSA-2024:11250 Copyright 2024 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: libpam: Libpam vulnerable to read hashed password (CVE-2024-10041) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default pam-devel-1.5.1-21.el9_5.s390x.rpm 3381d41ae9a7894d09e15d3395a00931a9b15ecda3086eca21a96aa907d50ea1 pam-docs-1.5.1-21.el9_5.s390x.rpm 8982e7a9335c60e602851d5d9f217a41e7436d227e2e86030f327f77ab18876c ALSA-2024:1129 Copyright 2024 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: information disclosure by exploiting a mixed case flaw (CVE-2023-46218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default libcurl-devel-7.76.1-26.el9_3.3.s390x.rpm 8579ecc8674a64c4c1138308b82d8e481e25f0762c88422e9ecd248c1620717d ALSA-2024:1130 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) * openssh: potential command injection via shell metacharacters (CVE-2023-51385) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default openssh-askpass-8.7p1-34.el9_3.3.s390x.rpm 165f7b5fa61b942d2f8978dd713262c9610e630b5d020d68ad447edda35c483a pam_ssh_agent_auth-0.10.4-5.34.el9_3.3.s390x.rpm 2e4b1441df878acba9ab856c0e6c9191c196d88a149bcac7a3156b7fa1fc5d7f ALSA-2024:1131 Copyright 2024 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: cmd/go: Protocol Fallback when fetching modules (CVE-2023-45285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default golang-misc-1.20.12-1.el9_3.noarch.rpm 18b5741c98702dceb2fbbe32d91ef09c212b01349c7294b51dd43633854553ab golang-docs-1.20.12-1.el9_3.noarch.rpm 1d75032b3ba6c05155bb06eee5c1c243ef875c089d2463e917e98d6c73183614 golang-bin-1.20.12-1.el9_3.s390x.rpm 87e595f0cbb17a5d9ea14e1a8c45b4a059fe4f50d9065e4525168ef99db9bff9 go-toolset-1.20.12-1.el9_3.s390x.rpm 88400e8672bdcc18e1b368974114ef535a9f53d6e99c724d90ce4d242a9d02bf golang-src-1.20.12-1.el9_3.noarch.rpm a2e7b607d02fe97390525c4e2a232778d3440d36d22a0d1fca8390e5dd5bbf57 golang-tests-1.20.12-1.el9_3.noarch.rpm adc11fe27a3a4f8626366ad43720f29f0349ab0c3b187743c0ce8a4d6b70dd7e golang-1.20.12-1.el9_3.s390x.rpm f084089e6ba850ffc2c1994ba5c535d31abaa6db369e0376fa659cb6a9bdbc34 ALSA-2024:1134 Copyright 2024 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default tomcat-servlet-4.0-api-9.0.62-37.el9_3.2.noarch.rpm 0164c92d3cf4769a215e18fec3fa4b459c82c6e6e52871e59c4a579b28eea94e tomcat-admin-webapps-9.0.62-37.el9_3.2.noarch.rpm 069c57fa81e2858166dca96c08e1c93f1259f11a411ad7cbfa82440d6375830a tomcat-docs-webapp-9.0.62-37.el9_3.2.noarch.rpm 76e70ae7ed64ac414de842c8dc61854879a92aa326155aea740a3edf0c4357a3 tomcat-webapps-9.0.62-37.el9_3.2.noarch.rpm 7789ab9419a6025cb459178543673fb5c992ce228b8b48240518be740909b1d5 tomcat-jsp-2.3-api-9.0.62-37.el9_3.2.noarch.rpm a744337038859ecd3f416462a7170a174807534c8b7f4d4c86467990ae256edf tomcat-lib-9.0.62-37.el9_3.2.noarch.rpm b21f1a2fd0eaa58172ab691b12f90e7d6c42fa0988ccb63007e4e0a2ba6c8d6c tomcat-el-3.0-api-9.0.62-37.el9_3.2.noarch.rpm c77cf32cc2001aa81bf17b88076d291e28e4af6ac43dbf41e9fc28465906dba7 tomcat-9.0.62-37.el9_3.2.noarch.rpm e7f160a9ff4aca2f762025d1c74fbe968415c9b8bd4f0ccdc206e148c89b895d ALSA-2024:1139 Copyright 2024 AlmaLinux OS 0 1 Low

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: Attestation failure when the quote's signature does not validate (CVE-2023-3674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default python3-keylime-7.3.0-13.el9_3.s390x.rpm 0fd943b473b99c9a02e8b52f43120e8199eed0d67b8d2fa17893d019714d1f75 keylime-selinux-7.3.0-13.el9_3.noarch.rpm 6fa1d17da5ef5e543bc7f876d5a207d4b9fc577d0190f6f5db1a8d9b917a7342 keylime-base-7.3.0-13.el9_3.s390x.rpm 79fdf524f98bc88d8ef118e8b7c2378d01856adcf436f796f8dae92178098fab keylime-registrar-7.3.0-13.el9_3.s390x.rpm 7af99c953f32ea35eae31eef1fc5c27b46a120a319da9deedcb621716b170677 keylime-verifier-7.3.0-13.el9_3.s390x.rpm a256e0d1efd7a7c8c3795db6975aeb4e95529c5a77b2d6fb505811260f7a82dd keylime-tenant-7.3.0-13.el9_3.s390x.rpm aa77405fa3b68fc345a4682fb1a3979372f84ec2ab1b0a33288abeac657b2c0c keylime-7.3.0-13.el9_3.s390x.rpm d1cd7e9d78e0cad9cd4efff29fa4a89d87fce9a8864ed3d91933a5ff6dc111b2 ALSA-2024:1141 Copyright 2024 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911) * mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933) * mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982) * mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962) * mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953) * mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21955) * mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966) * mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972) * mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980) * mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057) * mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112) * mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033) * mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046) * mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053, CVE-2023-22054, CVE-2023-22056) * mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058) * mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114) * mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111) * mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115) * mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-2097, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964) * mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967) * mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968) * mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969) * mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981) * mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983) * mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984) * mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985) * zstd: mysql: buffer overrun in util.c (CVE-2022-4899) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038) * mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113) Bug Fix(es): * Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (AlmaLinux-22454) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default mysql-server-8.0.36-1.el9_3.s390x.rpm 4ec390734148118ac4fbe60ad76a1c1c9310b43167e13b1ed428ecafdc5f31ef mysql-8.0.36-1.el9_3.s390x.rpm b91119edbee9832449e2a28e1770d7745ed98900f8af17dc48206465e09b2ef9 mysql-common-8.0.36-1.el9_3.s390x.rpm e72f9ab3320b9cba34888104ea7c87ded1bb7b5d2df9bff214dbf1ff6b6481a2 mysql-errmsg-8.0.36-1.el9_3.s390x.rpm ed0515c2c91cf651c662a0a2c5b3f5f6ddcdfc26c88e90edc466cac3aa5db813 ALSA-2024:1142 Copyright 2024 AlmaLinux OS 0 1 Moderate

haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: Proxy forwards malformed empty Content-Length headers (CVE-2023-40225) * haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers (CVE-2023-45539) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default haproxy-2.4.22-3.el9_3.s390x.rpm a1ada0a47fb6161557040e4eeb4aef03c4a68b439e86967fd81fc2b32674a2a1 ALSA-2024:1147 Copyright 2024 AlmaLinux OS 0 1 Moderate

rear security update

Relax-and-Recover is a recovery and system migration utility. The utility produces a bootable image and restores from backup using this image. It allows to restore to different hardware and can therefore be also used as a migration utility. Security Fix(es): * rear: creates a world-readable initrd (CVE-2024-23301) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default rear-2.6-21.el9_3.alma.s390x.rpm acd907876565bb2bfbc3d6c5b80ba5b3adad6caf7440f5986c2c17c77b3e97ea ALSA-2024:11486 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564) * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020) * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697) * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675) * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888) * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099) * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110) * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125) * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124) * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115) * kernel: xfrm: validate new SA&#39;s prefixlen using SA family when sel.family is unset (CVE-2024-50142) * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148) * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192) * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255) * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223) * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default kernel-debug-devel-matched-5.14.0-503.19.1.el9_5.s390x.rpm 032a2ae100bf2880e1247e63a893f53b2d9f4cb9d28fcd92b18ca232b71a1a1c kernel-debug-devel-5.14.0-503.19.1.el9_5.s390x.rpm 06cb12511438aacf2f714d0de578ab6ef07b67e3bca8fabadf4964bfc1e1ecbd kernel-zfcpdump-devel-matched-5.14.0-503.19.1.el9_5.s390x.rpm 170c69827e4da81ce133b0a654a89fbee7b2aba7086ca27a5b1f1a3e6402b074 kernel-zfcpdump-devel-5.14.0-503.19.1.el9_5.s390x.rpm 53f72b4ed1852eca28dcb88889cc86b3754e3226c25e8f4dd750579a644fb6af kernel-devel-matched-5.14.0-503.19.1.el9_5.s390x.rpm 59b977feb8fbf14281c5e76f67d10a1b4c2c064883e0235449425ecedd681768 kernel-devel-5.14.0-503.19.1.el9_5.s390x.rpm 5c4e6aa49d55c76d4ebde83ed02fcd3dedbe97a8bb7149996c89c5b456f677b2 kernel-doc-5.14.0-503.19.1.el9_5.noarch.rpm 5dec4edc8c35fbac0c780704373af0450eed349877746461fbc300ab50247abd perf-5.14.0-503.19.1.el9_5.s390x.rpm 7b96a518f9b656b11b44cc891d436e8be0aa374ea5d2e457f528749229a2df51 kernel-headers-5.14.0-503.19.1.el9_5.s390x.rpm 858eacaf46fcd74d02599b18f0c23e0fae38a9e5b1e235192fccfb2502cd16a0 rv-5.14.0-503.19.1.el9_5.s390x.rpm c2e3c28b975b2c25e232a7c3000a9d33f09799fede6e16a75180b24374e28e5a rtla-5.14.0-503.19.1.el9_5.s390x.rpm f0fad46f20a1574d58c31f6188f0cd0c3c03fb84753e4d6cf6b8407b6b123458 ALSA-2024:1149 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default skopeo-tests-1.13.3-4.el9_3.s390x.rpm 4e26b53e77bb493a98fe06e9defea9916ab33a0958de2838508843153e7d702c skopeo-1.13.3-4.el9_3.s390x.rpm 61bca8ee309412f72b0749740c511929fff57a80d46ecdb3d4fdebd6869af19c ALSA-2024:1150 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default buildah-tests-1.31.4-1.el9_3.s390x.rpm daf1fd6c65e2993badc41e8479bf4651a1ecf9d4941e3b69f88fb64cc5949a3b buildah-1.31.4-1.el9_3.s390x.rpm fcdf0cc3333a471a26bce6ab82d0d05d98675d33ed544e43b16943adea52534a ALSA-2024:1309 Copyright 2024 AlmaLinux OS 0 1 Moderate

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17. Security Fix(es): * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default aspnetcore-targeting-pack-7.0-7.0.17-1.el9_3.s390x.rpm 297e8c4352aa8dd2357a859aaa9a649ded8330721c26cffa9262dfc9e221078c aspnetcore-runtime-7.0-7.0.17-1.el9_3.s390x.rpm 38fdbda47f647b24686b4e4793fabb0a348e67d479c43ea66934f5050fa6b1ab dotnet-runtime-7.0-7.0.17-1.el9_3.s390x.rpm 552e59cc6cf7b33ee20d0386edafa51aa9dc9eb24479455457bedc6da6a40032 dotnet-sdk-7.0-7.0.117-1.el9_3.s390x.rpm 6b61e9bee59ea3bd1622497b953ffb3ad043d2d669153170c36edf7a2e083076 dotnet-hostfxr-7.0-7.0.17-1.el9_3.s390x.rpm a6b2fc1500cba20b2cf5eb3069059ebcc4f316f1002267a7c1786999e235609e dotnet-templates-7.0-7.0.117-1.el9_3.s390x.rpm ac1547ef81b3739354f187c08703131fb4ac343a37ef27d91f81a429502add49 dotnet-targeting-pack-7.0-7.0.17-1.el9_3.s390x.rpm f509862be936172c3b8adf0d252f9dbe71de4e7c9e9c38fdc4c623b3c86e50f7 dotnet-apphost-pack-7.0-7.0.17-1.el9_3.s390x.rpm fa124ee16cd31b77dcf15e84962dea105e8d4255df2789d763f11ef13d1f75aa ALSA-2024:1310 Copyright 2024 AlmaLinux OS 0 1 Moderate

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3. Security Fix(es): * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default dotnet-templates-8.0-8.0.103-2.el9_3.s390x.rpm 0357c662eb2a807211df6bb0f79a4a0017c9fe0fc86ce358ba4946575dc63a5c dotnet-targeting-pack-8.0-8.0.3-2.el9_3.s390x.rpm 1334fe73f3cd10fd8b2b6a9314f6f21ae4f0da5c32ab0cb458b39fcf2bdc190a aspnetcore-runtime-dbg-8.0-8.0.3-2.el9_3.s390x.rpm 1e40c766d2ba31ee5a738126950b68b188fcb3366f1fadcb9b9a12cd01e5d317 dotnet-runtime-8.0-8.0.3-2.el9_3.s390x.rpm 3945167c88ae2c31d8fa5279a835f14d2b5a84003318138a0410464ba6f285dd dotnet-host-8.0.3-2.el9_3.s390x.rpm 41a7d2f61bd896accf8aa81b8f1cfd449869f075dde4a79f738ffb9f4201873b aspnetcore-targeting-pack-8.0-8.0.3-2.el9_3.s390x.rpm 540fa3c18be558e75996273ab86a6d0dc556a098be5bb12bd1e3dff405457776 dotnet-sdk-dbg-8.0-8.0.103-2.el9_3.s390x.rpm 5680369122d4405e1c540b000b07c0683d5c4fad4abd656f3b8cb25a531b29bf dotnet-runtime-dbg-8.0-8.0.3-2.el9_3.s390x.rpm 819fd8d4b955d1ce8915850169dd5c6c1e4155710823ae2a5db5d2ca7cb56917 dotnet-apphost-pack-8.0-8.0.3-2.el9_3.s390x.rpm 8756f17579b714461a51e15fda39c25cd4f0fe50c575f65f1988a3fcb6350be2 aspnetcore-runtime-8.0-8.0.3-2.el9_3.s390x.rpm 8b0bdd8ea409ec1e2be1b7c35a643175f2b3fce1204ac93e5e273e08762cafae dotnet-sdk-8.0-8.0.103-2.el9_3.s390x.rpm 94baa5fcdf99e89c0a43e0c0acacc5427405dff133586ca7df2d8d27722d3580 netstandard-targeting-pack-2.1-8.0.103-2.el9_3.s390x.rpm a33c33d5111c0009b6f46a30deff7e417aa894374696d5ac9f40de4c7fc952ab dotnet-hostfxr-8.0-8.0.3-2.el9_3.s390x.rpm ec78aecc9dbd6a665fc4837fe65a3f0f3277aa566d882a6b6aa7fd7751f2bd5a ALSA-2024:1334 Copyright 2024 AlmaLinux OS 0 1 Important

dnsmasq security update

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * dnsmasq: bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default dnsmasq-2.85-14.el9_3.1.s390x.rpm 6fc7b10fd4a860e1e8ac105a92d101395aeae1fa79b3cc0a34b0abc8a6de841d dnsmasq-utils-2.85-14.el9_3.1.s390x.rpm f7aa7988a6fe29d9ac9a5c2ee91e955ce3bee69dfc2853faa1eb5673b951dbf6 ALSA-2024:1376 Copyright 2024 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: denial of service in HTTP header parser (CVE-2024-25617) * squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111) * squid: denial of service in HTTP request parsing (CVE-2023-50269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default squid-5.5-6.el9_3.8.s390x.rpm 153af32642245b125b74985f10dbc4db291e856777fc3414e1f5f25a9e8cbf62 ALSA-2024:1427 Copyright 2024 AlmaLinux OS 0 1 Important

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * CVE-2023-6186 libreoffice: various flaws (JIRA:AlmaLinux-20657) * CVE-2023-6185 libreoffice: various flaws (JIRA:AlmaLinux-20657) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default autocorr-nl-7.1.8.1-12.el9_3.alma.noarch.rpm 08d23ef7bab3840c5dcca2b34caaf986b82366d6ef71da6c38ef14a7523807b8 autocorr-vi-7.1.8.1-12.el9_3.alma.noarch.rpm 0c44737c1eba25bf6c5c541d963671d8e3e710242a2aa142af5bd9a381b20b02 autocorr-sl-7.1.8.1-12.el9_3.alma.noarch.rpm 0fb8e5eaceabc9cb3c719554714920cba021a64e59f1b8e2059aa0788fce834c autocorr-bg-7.1.8.1-12.el9_3.alma.noarch.rpm 118b0fbbc4e091515752d31e04be3204fcff1160572e937955fed522524757a3 libreoffice-langpack-en-7.1.8.1-12.el9_3.alma.s390x.rpm 1387c3044be81c4d1060be3e6c05762c2d7b4a7b7aa2e83c4ed77bef61fc0d0d autocorr-af-7.1.8.1-12.el9_3.alma.noarch.rpm 1806d8037b474f59dbbd45c52cfda357d8194ff2d475dae07c9d0f7edb3e364f autocorr-da-7.1.8.1-12.el9_3.alma.noarch.rpm 20fc20e9bd6252b9f9ab7c1e827b3820d2535fd557b2768c2da388628965072f autocorr-sv-7.1.8.1-12.el9_3.alma.noarch.rpm 230ab2ba0fb6e0e9e3c80a8f31cf33bf4d60ff9db7737074e3cd4c53eae6e2d5 libreoffice-impress-7.1.8.1-12.el9_3.alma.s390x.rpm 233f425a6dddc4786a99b1d23765451cd4ebd71b3cf6cb721ba3a0931f797bbf autocorr-tr-7.1.8.1-12.el9_3.alma.noarch.rpm 2597b44f6b24c08d6843c3ec6595fefc483fe551be4e8d5fc2c038a666530b7b libreoffice-writer-7.1.8.1-12.el9_3.alma.s390x.rpm 2a7f14b7a1cdefe1d25c11816010827f2de96b22540b4cbc8ea6d633c88a56a3 autocorr-es-7.1.8.1-12.el9_3.alma.noarch.rpm 2b16fb16eccba308daaa04ea884fdf430a16917f232eb9b91de15d71505451a5 autocorr-lb-7.1.8.1-12.el9_3.alma.noarch.rpm 2e866e039965cf8501dbffe2663318abf8226b595d7ad69ec65017044245b6df libreoffice-ogltrans-7.1.8.1-12.el9_3.alma.s390x.rpm 3115ae33d846d5a258e7fecc0b39043f47874e6728cd03a1f5c8c3447f405b95 autocorr-dsb-7.1.8.1-12.el9_3.alma.noarch.rpm 33045ede9a455ec31e8f06c00fc80efeb3a7e1c24e6322196022f180f8ae361d libreoffice-calc-7.1.8.1-12.el9_3.alma.s390x.rpm 347311b46ad50acfe410a08641cbf57b79269c325f67b632654e9dda2d1cab3e autocorr-lt-7.1.8.1-12.el9_3.alma.noarch.rpm 3783fa3193b37f6aca6e6c8f7f874e0646687cca1bd71b7a05fe48c139bd9543 libreoffice-ure-7.1.8.1-12.el9_3.alma.s390x.rpm 3b1fa68640e552bb1214cf294ad7bfad164028ca363eeaa4aa9c4abdd3ec48d6 libreoffice-opensymbol-fonts-7.1.8.1-12.el9_3.alma.noarch.rpm 3b494f26d28fe89f88dafed79282a07c28e27a7158e44b75e396afc43bd0534f libreoffice-pyuno-7.1.8.1-12.el9_3.alma.s390x.rpm 400f5fe358f50c477d7798216a3e6c432ebb9c6da946169566d9f1b6802a62de autocorr-ko-7.1.8.1-12.el9_3.alma.noarch.rpm 58dce1072c790448f6481d826d8025e01b9f10539a243a8873ecdfd52bd76783 autocorr-pl-7.1.8.1-12.el9_3.alma.noarch.rpm 61c58dccdfc3dfd9d4328d34b7403d5676948f3f18a3928c999b8f6a8a75ef9a autocorr-zh-7.1.8.1-12.el9_3.alma.noarch.rpm 61fff1fcd7df1af00d5d6c7edda8f98bfa652cbbf65ddc62c8c7a5267325d43b autocorr-mn-7.1.8.1-12.el9_3.alma.noarch.rpm 630038b93013dd1f89b12cfd8c29486c9ba7f6a3a60d7a4028e1400e42c00d79 autocorr-fr-7.1.8.1-12.el9_3.alma.noarch.rpm 6687ed962e115acd82e3533e054693ab304511b59f4bbc034872e1ebaeb7b814 autocorr-sr-7.1.8.1-12.el9_3.alma.noarch.rpm 6f8e0fd08eaa9213b11ef462a8781be67af58db4871f78b4d643ced3d6e16b94 libreoffice-help-en-7.1.8.1-12.el9_3.alma.s390x.rpm 71bba7a763d881805df0587844e9bfdb053cc4902231173091c358da6c92271d autocorr-hr-7.1.8.1-12.el9_3.alma.noarch.rpm 72b312df6fea1f47c59d28235216f55ff131b09fe6ca3c00414583842047ebdc autocorr-en-7.1.8.1-12.el9_3.alma.noarch.rpm 7a2ed313abab50b3b7db27887ee2c93f68f529d97cde680c1d3858e28a693dbd autocorr-ru-7.1.8.1-12.el9_3.alma.noarch.rpm 7a56df09c247090cb16dfb91271779ba169d0a067be0733f491f7ae21c2052c1 autocorr-de-7.1.8.1-12.el9_3.alma.noarch.rpm 7c9d3ad11a105ee6cbe8b77a5e3d14d355ab0b097b0179ce893f1ce7f9f812ad libreoffice-data-7.1.8.1-12.el9_3.alma.noarch.rpm 8cd38b22398373c438d62f74af633b3146cbe883def50f26b0200d13d0f32a39 libreoffice-pdfimport-7.1.8.1-12.el9_3.alma.s390x.rpm 8d2267ed838e4b77a2018cf2ebab7b26e5b557330e2b9b1a34b632f2f1b6d38f autocorr-it-7.1.8.1-12.el9_3.alma.noarch.rpm 9d82a3bb3b7dbfec694c1fb7e232d2deeefff1e58544321e0c57241c34726030 autocorr-fi-7.1.8.1-12.el9_3.alma.noarch.rpm b0cfd1f17e89b734a001e7c0b2d977ca26d256d98f081d9b0e871408a3db7dec libreoffice-graphicfilter-7.1.8.1-12.el9_3.alma.s390x.rpm b1dcb9314c9db21c169eb7d5c3600104e9e6e6417524c125d840ef28066d3af1 libreoffice-core-7.1.8.1-12.el9_3.alma.s390x.rpm b4a83f13140cd06e1cd8995af4eecd24c9df39cf2fa23e255ee92bee30e9705a autocorr-vro-7.1.8.1-12.el9_3.alma.noarch.rpm bb6ff11484cb161880eb05b1dee8081bc16bb9661e39a2bcf9a43fd4360e927d autocorr-ja-7.1.8.1-12.el9_3.alma.noarch.rpm c353b1e8487b4d01d285eead85017963ad9758e42fb38492a65a9dd6b0ac3d6b autocorr-el-7.1.8.1-12.el9_3.alma.noarch.rpm c7954c54ed7edc1e44c53c7f85d09fef8a629e56f7419ebc67110b6fce820990 autocorr-ca-7.1.8.1-12.el9_3.alma.noarch.rpm c946634f731ab834eb3febcf1bd195577cb6cbff7ef20d6f043a908471dcaf1b autocorr-cs-7.1.8.1-12.el9_3.alma.noarch.rpm c9d68cf543c5fb64840e116215373608b682bf34145bdfd8c6247e3713377852 autocorr-is-7.1.8.1-12.el9_3.alma.noarch.rpm d14c4423133f6f4f55cd99c91b670e4c16c1be9442b475d85378d05927605eac autocorr-ro-7.1.8.1-12.el9_3.alma.noarch.rpm da05acadfae89900a9497468b6669c485a2d9452efb7c1b0096747c185133c3e autocorr-pt-7.1.8.1-12.el9_3.alma.noarch.rpm e8a3269e71204ad6807700e6a52d8b62943008a30ec3c2fa511cbda7e4c98e53 autocorr-hsb-7.1.8.1-12.el9_3.alma.noarch.rpm ea3806eb6567f006ec8e34c3b23dfc2181a4006a42197ade2aebb2eb69130513 autocorr-ga-7.1.8.1-12.el9_3.alma.noarch.rpm eb845ad1759a1fe500228f326fa8b0d04f2d43c075fd9043d0644d39eb6e9ce5 autocorr-fa-7.1.8.1-12.el9_3.alma.noarch.rpm ebdea9f87e8dfef53e96c64b69972e8f7e66cb7c4ec79a55134d53a45261439e autocorr-hu-7.1.8.1-12.el9_3.alma.noarch.rpm ed10b0e859a522a8db3f719e829121e0679923596d89a89ea01ba80453ed0fc9 libreoffice-ure-common-7.1.8.1-12.el9_3.alma.noarch.rpm f5062dd13e58e696c48a3468beff78f31caa418004d61893e764d26267e30977 autocorr-sk-7.1.8.1-12.el9_3.alma.noarch.rpm f6215956af060a69506cb82458e31b3762500bb29bb55ac10f5b8eae961890ca ALSA-2024:1436 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql-jdbc security update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): * PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default postgresql-jdbc-42.2.28-1.el9_3.noarch.rpm ede3b40e7fe11086a3e183d3dd0be658c1fb5aea6a86fe91f30954f142a0b602 ALSA-2024:1438 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default nodejs-full-i18n-16.20.2-4.el9_3.s390x.rpm 2819f053ff0e6e0124040faa0d9badcbbf8ebfc95d7d34b7c7e8703b8c3ff710 nodejs-16.20.2-4.el9_3.s390x.rpm 8f3f06246db592d3fc0c40a96bbe002c01f00eaf1c4bb19a25409dcbcdda87e5 nodejs-docs-16.20.2-4.el9_3.noarch.rpm b7665cdefdd2b7370eacb21f03b8da394621bc6ab63e1a16bb5d2d7b0e6beaf1 nodejs-libs-16.20.2-4.el9_3.s390x.rpm dd500afff2fc66e705cce0bb7fcbd38c38d58dedc7416c2e2836a634e91d3a1b npm-8.19.4-1.16.20.2.4.el9_3.s390x.rpm df121a81a34a326298484387181d862c70a11f4c53c28e6926747348d1237311 ALSA-2024:1462 Copyright 2024 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default go-toolset-1.20.12-2.el9_3.s390x.rpm 0eb578b20ea645a391f4e89fd46c93676de95edf59f3cdd692cef145012ffd02 golang-tests-1.20.12-2.el9_3.noarch.rpm 104540960dc9de9d90d719da97b145bb0a1c23cf777e6c2fa2b454f9034f0a89 golang-misc-1.20.12-2.el9_3.noarch.rpm 9d0669662e5356a48ac139afa0098e31f30e38bb227aa9d35ecd6ed898ad2799 golang-docs-1.20.12-2.el9_3.noarch.rpm d4242bc4a26b65d6054ce70a3bdcc8a83a696d44dfb4b9d4bb2521478157f6d2 golang-1.20.12-2.el9_3.s390x.rpm d4499274183fedc127c8666a5caec1abcbb3f8ec3fe95f96873736b617646bd1 golang-bin-1.20.12-2.el9_3.s390x.rpm e02d92c7c516c52eabe86de94b1f0f71e1fe34184a25bf816db37bba5072c319 golang-src-1.20.12-2.el9_3.noarch.rpm fe1b76488759989192765f595c8ac6a1864ef6afab2cb8ad8f32e6bf32f0ae56 ALSA-2024:1485 Copyright 2024 AlmaLinux OS 0 1 Critical

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.9.1 ESR. Security Fix(es): * nss: timing attack against RSA decryption (CVE-2023-5388) * Mozilla: Crash in NSS TLS method (CVE-2024-0743) * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607) * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608) * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616) * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610) * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions (CVE-2024-2611) * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612) * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (CVE-2024-2614) * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default firefox-115.9.1-1.el9_3.alma.1.s390x.rpm 65ed78086306493a5253219e7bd069468db50061047abc877ee398e8392b80f2 firefox-x11-115.9.1-1.el9_3.alma.1.s390x.rpm 9149cbc13010775dcda7ed0b87da63b456546ac1d930a2a50c7e1cb2e6f1a08f ALSA-2024:1493 Copyright 2024 AlmaLinux OS 0 1 Moderate

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fix(es): * nss: timing attack against RSA decryption (CVE-2023-5388) * Mozilla: Crash in NSS TLS method (CVE-2024-0743) * Mozilla: Leaking of encrypted email subjects to other conversations (CVE-2024-1936) * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607) * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608) * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610) * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions (CVE-2024-2611) * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612) * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (CVE-2024-2614) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default thunderbird-115.9.0-1.el9_3.alma.1.s390x.rpm f1454e0e57fac02e6bed07f77a4ecf54de3c81c21f0cbcdfc0207693333933e8 ALSA-2024:1501 Copyright 2024 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default grafana-9.2.10-8.el9_3.alma.1.s390x.rpm f9fcefa977779d191cb4fa90abc859eddc007f5015345cd603b230c917b74e36 ALSA-2024:1502 Copyright 2024 AlmaLinux OS 0 1 Important

grafana-pcp security update

grafana-pcp is an open source Grafana plugin for PCP. Security Fix(es): * grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default grafana-pcp-5.1.1-2.el9_3.alma.1.s390x.rpm e470d5c6b0cbe90f2c28b7827a973c01a072521692be720f9ed579b9daa623d5 ALSA-2024:1503 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892) * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019) * nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) (CVE-2023-46809) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default nodejs-18.19.1-1.module_el9.3.0+59+28b95644.s390x.rpm 2305c54b0dfa428ded354037dab39acfce378a5c9a4dae27631604f9fef07c61 nodejs-full-i18n-18.19.1-1.module_el9.3.0+59+28b95644.s390x.rpm 296df79fafca2db7cf2c7bc40c49edcbe0292e3ecaacb18aee3ad8db7e8fc2da nodejs-docs-18.19.1-1.module_el9.3.0+59+28b95644.noarch.rpm 6d03eb3baa9c6cffd0a6b69aba5f9734712d9468356216b59e1c3249b0339ede nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 npm-10.2.4-1.18.19.1.1.module_el9.3.0+59+28b95644.s390x.rpm c64090190e46bde0b5a1d62b407a80516edaf625ac84770ea72bd1701ed0830f nodejs-devel-18.19.1-1.module_el9.3.0+59+28b95644.s390x.rpm e2a064d6e29e8a27146fbe656ac17164122e21f85f3386ee2c393da6ad4f1378 ALSA-2024:1530 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: parsing large tokens can trigger a denial of service (CVE-2023-52425) * expat: XML Entity Expansion (CVE-2024-28757) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default expat-devel-2.5.0-1.el9_3.1.s390x.rpm ff6f57c1ee531ec65fff588b254ba93e7369ef8a1e8a4af0dc03f7055e8ef573 ALSA-2024:1576 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-29052) Security Fix(es): * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621) * ruby: ReDoS vulnerability in URI (CVE-2023-28755) * ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617) * ruby: ReDoS vulnerability in Time (CVE-2023-28756) Bug Fix(es): * ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-29048) * ruby: Ruby cannot read private key in FIPS mode on AlmaLinux 9 (AlmaLinux-12437) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default rubygem-irb-1.4.1-143.module_el9.3.0+60+5ebc989a.noarch.rpm 0905ea50c6cc6d5a681460c632ba0a74e5f6d2ba1db15071c6898ecbecc2a245 ruby-default-gems-3.1.4-143.module_el9.3.0+60+5ebc989a.noarch.rpm 0c918bfd80963513ed8ebf939151fdce1a95440655605c2d67f99cd84d216be4 rubygem-bundler-2.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm 0cfb15f8920c73930c5fec462727ff8bd0d4d1fc94390b2ad491b78cc0c212cf rubygems-devel-3.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm 0e7ff1f07e4a144615a899bd26379a895339f798bd29586c0fe8c704eec129c9 rubygem-typeprof-0.21.3-143.module_el9.3.0+60+5ebc989a.noarch.rpm 12b6d49f2eb37de64c5359d95338466e4c556af74df4adef525b75843d89190e rubygem-io-console-0.5.11-143.module_el9.3.0+60+5ebc989a.s390x.rpm 23912bd393f9a5bc90aeecbfe116c0db72039d79e153668824a4b8a9a0f74861 rubygem-psych-4.0.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm 28171f973bcf4068f197181a32787ef152f841f9687b756db330fb2a2d0454c5 rubygem-rexml-3.2.5-143.module_el9.3.0+60+5ebc989a.noarch.rpm 354d1ca60ce97d60e2fb600c86afd727f668446370edb2394ee2935d4e106798 rubygem-rdoc-6.4.0-143.module_el9.3.0+60+5ebc989a.noarch.rpm 36f9528fb53df33c14bfec0c0b6cd001923bf8d59b7664a7e0110b900e83d99b rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm 47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8 rubygem-test-unit-3.5.3-143.module_el9.3.0+60+5ebc989a.noarch.rpm 48b4cecfa787eb441b96cb238ac59a92721e0e96871882a0c99535a41dce07ad rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.s390x.rpm 49b1f8d15c4626c94dbdf369d69aa871b2e1b4909ae4718089f41d7de50396ee ruby-doc-3.1.4-143.module_el9.3.0+60+5ebc989a.noarch.rpm 4eb51d23c8c72f8e460bd2914c19f7cd5dc68f46bbcbaa950473677350a79597 ruby-devel-3.1.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm 4eefdf9735833f0d6664cf37298289b0e72cce39d7a2b9354b7d9de275f25b90 ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm 527be15d0d170b8cb36d98a81034ffead2e66069d07436371534a46d1b685197 rubygems-3.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm 60fd72d151b2e2783689c5d4470411ffa6c39cbf7a4e4bd079e17fb95dc357e4 rubygem-power_assert-2.0.1-143.module_el9.3.0+60+5ebc989a.noarch.rpm 63219994c30877b59061770b580914f572efec91b2b19317f2060f0f9bd91827 rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.s390x.rpm 81af584c5f98cbff30e7733f802c0711cdfb921b4fc268dc21e6e002f4c9a292 ruby-bundled-gems-3.1.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm 82e860a765767761c2b83e22b938126589b14afd8a988c585abfd4d15a64187f ruby-libs-3.1.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm 88967599c39a2cf14d646d5f391da643e78ec732b8042b4f1f94f39094aac117 rubygem-json-2.6.1-143.module_el9.3.0+60+5ebc989a.s390x.rpm 946460aa34b688db4a8e888ff927d80122dcc1f2967e88bf1456753a7a8b04cf rubygem-rbs-2.7.0-143.module_el9.3.0+60+5ebc989a.s390x.rpm 94e8127efe8fbb57ba94ce682c71a594b6f8dfde0bb61965d243dbd7f9c261bc rubygem-minitest-5.15.0-143.module_el9.3.0+60+5ebc989a.noarch.rpm af3a3fc67bab63fc8271d1228f3d722e5d3eec8eb7b03b43a664aff57944e18a rubygem-bigdecimal-3.1.1-143.module_el9.3.0+60+5ebc989a.s390x.rpm b3a914936dd74c4a447dacc8e1af759dc97075f7b1cf164ebf5db6a41dfc015f rubygem-rake-13.0.6-143.module_el9.3.0+60+5ebc989a.noarch.rpm b6ae9ba983978a8dcb31c5a552e2ebe3d3871ada40297c0a50a3709151689b62 rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4 rubygem-rss-0.2.9-143.module_el9.3.0+60+5ebc989a.noarch.rpm e81933427fea30393c52bb8cff7b70f07e284fcee5be0e2e14cca0c33afb82e9 ALSA-2024:1688 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) (CVE-2023-46809) * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019) * nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892) * nodejs: path traversal by monkey-patching buffer internals (CVE-2024-21896) * nodejs: multiple permission model bypasses due to improper path traversal sequence sanitization (CVE-2024-21891) * nodejs: improper handling of wildcards in --allow-fs-read and --allow-fs-write (CVE-2024-21890) * nodejs: setuid() does not drop all privileges due to io_uring (CVE-2024-22017) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default nodejs-docs-20.11.1-1.module_el9.3.0+88+29afeaa2.noarch.rpm 0a539992ceaebbdf59f37fcbeacbeb18b6a3fed31399e6b9cc248c7c888a888e nodejs-20.11.1-1.module_el9.3.0+88+29afeaa2.s390x.rpm 0fac9e1a61c724440143c785653f0c47932d3128b136ddb943bb2092058b3ab1 nodejs-packaging-2021.06-4.module_el9.3.0+48+1cf146a1.noarch.rpm 35eb2a8230c495f14db654d04d574da1fcbda4788ab3b15100aa045fc30b01c3 npm-10.2.4-1.20.11.1.1.module_el9.3.0+88+29afeaa2.s390x.rpm 5bb5a237a5b29fee77d7d6086405ff59a0d371bf7516d406a35b3e232e905fe6 nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm 6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa nodejs-full-i18n-20.11.1-1.module_el9.3.0+88+29afeaa2.s390x.rpm a9f2598b47ca866b18796416edc4a2c41ea71f9f2479f5177d0ae681345a8e77 nodejs-devel-20.11.1-1.module_el9.3.0+88+29afeaa2.s390x.rpm c7891fb9647a2da68d0de0d408356b7568844687743d5447feb26c2f6d906eb6 nodejs-packaging-bundler-2021.06-4.module_el9.3.0+48+1cf146a1.noarch.rpm cf69099af4a291d5887aa79f025868a557e50c9f7d2b18b5e0e5f3e2a9624fa2 ALSA-2024:1691 Copyright 2024 AlmaLinux OS 0 1 Important

varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default varnish-docs-6.6.2-4.el9_3.1.s390x.rpm 6c3aee43b4d475d8d290d87f6385c06885dbe777d408968eee1aa06f17206764 varnish-6.6.2-4.el9_3.1.s390x.rpm eed05516ddc08b2ba07d26fef7e7d3ac024264177908187d15057395cd374e80 ALSA-2024:1750 Copyright 2024 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. The default combination of the "control-use-cert: no" option with either explicit or implicit use of an IP address in the "control-interface" option could allow improper access. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged local process to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether. To mitigate the vulnerability, a new file "/etc/unbound/conf.d/remote-control.conf" has been added and included in the main unbound configuration file, "unbound.conf". The file contains two directives that should limit access to unbound.conf: control-interface: "/run/unbound/control" control-use-cert: "yes" For details about these directives, run "man unbound.conf". Updating to the version of unbound provided by this advisory should, in most cases, address the vulnerability. To verify that your configuration is not vulnerable, use the "unbound-control status | grep control" command. If the output contains "control(ssl)" or "control(namedpipe)", your configuration is not vulnerable. If the command output returns only "control", the configuration is vulnerable because it does not enforce access only to the unbound group members. To fix your configuration, add the line "include: /etc/unbound/conf.d/remote-control.conf" to the end of the file "/etc/unbound/unbound.conf". If you use a custom "/etc/unbound/conf.d/remote-control.conf" file, add the new directives to this file. (CVE-2024-1488) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default python3-unbound-1.16.2-3.el9_3.5.s390x.rpm 173e4fcce80f1fa5f8e7314ddfdc206c9c63d67935bfc270a8265f4746996fe6 unbound-libs-1.16.2-3.el9_3.5.s390x.rpm a72858780e6d0ab8479f12258a2fac85349a91a5f79470a22468a2905ba315a3 unbound-1.16.2-3.el9_3.5.s390x.rpm e92b74bf37c4b6a7cbb17985f2ba233e6aa85a5a7fd5cc354ecfdce132c4316e ALSA-2024:1789 Copyright 2024 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868) * bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516) * bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679) * bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517) * bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default bind-license-9.16.23-14.el9_3.4.noarch.rpm 012982f0586afa53de7d12064b54b611c6aa3996136ae529dafd184fb5a1d4b8 python3-bind-9.16.23-14.el9_3.4.noarch.rpm 170453af55c64d7384969b646894606ed2f1c355646c5fd9c3af89cd4d2eb837 bind-chroot-9.16.23-14.el9_3.4.s390x.rpm 53d162149c0ac8728391699595b0d7acf54921d5fac14cb152c81f58b7467ba7 bind-dnssec-utils-9.16.23-14.el9_3.4.s390x.rpm 7ceb7384888b4121da4acacf4df81770b5d3d943d0e9b95e72a96a8f134c9009 bind-9.16.23-14.el9_3.4.s390x.rpm 867e9aa55b578c5a3f403612ce6a249d9065884d071defb62c98b0db71b3595f bind-dnssec-doc-9.16.23-14.el9_3.4.noarch.rpm 8d0966d77d817acd3ef8ba3560ebc38f42057b8f42362fbf4c75953e90c7e7cf bind-dyndb-ldap-11.9-8.el9_3.3.alma.1.s390x.rpm aef26e24d8ac9a8fdd2ebc9d1224b4020d424b8fb829d160965b9a32e44eb313 bind-utils-9.16.23-14.el9_3.4.s390x.rpm bed2f04a24cfbf1c543288058587098f145c779bf0a8d44d2d6f9861c6240c3d bind-libs-9.16.23-14.el9_3.4.s390x.rpm dbe18f462da0afd1a5321f5f620e9030aa2d5f1472921dc5f0393c4d8eb37932 ALSA-2024:1818 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085) * OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default java-1.8.0-openjdk-javadoc-zip-1.8.0.412.b08-2.el9.noarch.rpm 0bf563394bac944235c1daa621390ddcd68e797f78bdc4a37707332579a7e18d java-1.8.0-openjdk-src-1.8.0.412.b08-2.el9.s390x.rpm 911160a80c48e02981ad8526ef9c3b3fd75e7c5581e59b4ea14848e35ad8f02b java-1.8.0-openjdk-1.8.0.412.b08-2.el9.s390x.rpm 98a7e95cce800a04fc24f931fad1a2d1ea9799e1b0970568d9b66a87eb109b74 java-1.8.0-openjdk-headless-1.8.0.412.b08-2.el9.s390x.rpm a2a30dc19ec84ce5b663d982422dcdd3af1df6a00665087b1976afd321e24072 java-1.8.0-openjdk-javadoc-1.8.0.412.b08-2.el9.noarch.rpm cfc03711b0e7391441a8eaf6315973873c62d9b533bdcac02be4201aa9311579 java-1.8.0-openjdk-demo-1.8.0.412.b08-2.el9.s390x.rpm dc0a33072805636ec31eb94b53adbf4f106693abe6782e22c0e2a0f0940f861a java-1.8.0-openjdk-devel-1.8.0.412.b08-2.el9.s390x.rpm e9d8b2ab4d647083e7ac5c2fd5c7b146b09721d1000feaf2c0bfd74295ebb926 ALSA-2024:1822 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085) * OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094) * OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default java-11-openjdk-demo-11.0.23.0.9-3.el9.s390x.rpm 03813267be64eaf915284e7f4e38198bd87eb331883d04c31e58c27f2e8e19bf java-11-openjdk-javadoc-zip-11.0.23.0.9-3.el9.s390x.rpm 257cd7c473b6b293b87a2fb1f4efe02b36f17084e153a9a7025617e5854d553b java-11-openjdk-static-libs-11.0.23.0.9-3.el9.s390x.rpm 32cd23e7a2ac84e98eb5d811579d72854b2b5c8cc5e87fdbf2414b08c7b7f403 java-11-openjdk-devel-11.0.23.0.9-3.el9.s390x.rpm 32f2617f87dee30af2c373d0e481ab3e4745318c7625dd422b622ab68fb3196c java-11-openjdk-src-11.0.23.0.9-3.el9.s390x.rpm 60dddc989af101c18b8fe5781f36b20240cfea36ba0fcde9c11f94df184a9cb8 java-11-openjdk-javadoc-11.0.23.0.9-3.el9.s390x.rpm 6f8eea7c7d61e4da241c30a72233e44304f68587dfbf2095622bb5d647d36004 java-11-openjdk-jmods-11.0.23.0.9-3.el9.s390x.rpm 7454db9f6aa57be3bedc2cf8537d499acc747b4ac73dd8be2f860e0d72a37a44 java-11-openjdk-headless-11.0.23.0.9-3.el9.s390x.rpm 8b472ed66b7a8fd11b5612a3939f5d9e2c36749c22579656a3a6e0eae3f0729c java-11-openjdk-11.0.23.0.9-3.el9.s390x.rpm b8e042d8c85f7c2772ebee485560e615fed1b539796441dbaebb5d93c6b599af ALSA-2024:1825 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094) * OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default java-17-openjdk-devel-17.0.11.0.9-2.el9.s390x.rpm 0574d9e980feb7577cf4e9a0942990dead1e7017493ee4dc99da49d77d27a19b java-17-openjdk-javadoc-17.0.11.0.9-2.el9.s390x.rpm 08e625a213665e334899e1c78d650ff2494e798b0cedb12bcda32c705020e9a3 java-17-openjdk-demo-17.0.11.0.9-2.el9.s390x.rpm 3902ccafa1adbecb75518b740dfe31561c26cd5a4fe0354442107a5e0f728b3c java-17-openjdk-src-17.0.11.0.9-2.el9.s390x.rpm 3a690de73aa9acdb2067385c248df418868484c085bdf1c8be7a8274ca155ad5 java-17-openjdk-jmods-17.0.11.0.9-2.el9.s390x.rpm 96b33b020fc9d370f4274cf33094901b31de53fa948ee8bc340df9bb6e83c081 java-17-openjdk-javadoc-zip-17.0.11.0.9-2.el9.s390x.rpm b995da8ac1cf9defd21485c4bc5ca5478753e96596d883eccbe1a2fc3e02e939 java-17-openjdk-headless-17.0.11.0.9-2.el9.s390x.rpm c0037a33aaf13c4c0aac57eba4c9ab3305f0b392d22b5d76fd83770b44a9b334 java-17-openjdk-static-libs-17.0.11.0.9-2.el9.s390x.rpm c4d4d3bd0370020cdd205712495da7784d8c5e1e5957e459a84dde36ec5e6145 java-17-openjdk-17.0.11.0.9-2.el9.s390x.rpm c9541bcc453ee470cb77a0706845cbf02a5834b5c29bfa47f6d0376896b6094f ALSA-2024:1828 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default java-21-openjdk-devel-21.0.3.0.9-1.el9.alma.1.s390x.rpm 09284d8f65a9dae94fc99827bfc55db359d61973938b64da4c45f94ce38d760b java-21-openjdk-demo-21.0.3.0.9-1.el9.alma.1.s390x.rpm 471da2ca45fd71e5e0cf462d238fbcf14b8148508ca019229ba65ba4f0fe0b6d java-21-openjdk-jmods-21.0.3.0.9-1.el9.alma.1.s390x.rpm 74eb747e002df819bf0e43907db0d19b28243222bf7d5d6ea769f884dd4b6c89 java-21-openjdk-javadoc-zip-21.0.3.0.9-1.el9.alma.1.s390x.rpm 88131fc1eaddcd8e6483d21f9e19bc0940dbbd50370ef9b4794ab9576a7729de java-21-openjdk-headless-21.0.3.0.9-1.el9.alma.1.s390x.rpm 9a6f440da9635643be37b825173268ffc30c15ff5e7bb09550a012c9c3a0868b java-21-openjdk-21.0.3.0.9-1.el9.alma.1.s390x.rpm 9ed0de18a5931a13d8947c064cbc2b2001c997c0c9c8e01eab9932251ea310df java-21-openjdk-javadoc-21.0.3.0.9-1.el9.alma.1.s390x.rpm b9329bbb9cab70de3d8aacb4463c1337574e7d61d674959818c04e2f8998cc78 java-21-openjdk-src-21.0.3.0.9-1.el9.alma.1.s390x.rpm f66a6d7015510c5fe65739c2746335ec1fd507dde0a7773eb6e0366bb2536d5c java-21-openjdk-static-libs-21.0.3.0.9-1.el9.alma.1.s390x.rpm fb2a2faec1eeeabf53b8c89414b52297e279d97a2de4865e77812696aa159634 ALSA-2024:1872 Copyright 2024 AlmaLinux OS 0 1 Important

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: CONTINUATION frames DoS (CVE-2024-27316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default mod_http2-1.15.19-5.el9_3.1.s390x.rpm 659290b0856ae14a2662d3fa60ea08e0763b0e7de5a2400afa48844af12fffa3 ALSA-2024:1879 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) * gnutls: potential crash during chain building/verification (CVE-2024-28835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default gnutls-c++-3.7.6-23.el9_3.4.s390x.rpm 109668816b4186722c7af108fd354d7be30280e9b0c556cc67654be2b95ae5ef gnutls-dane-3.7.6-23.el9_3.4.s390x.rpm 35ae77abb25724b38ba775f1f22e36bb8fc114faa0ee9964a6d506ea0039b118 gnutls-devel-3.7.6-23.el9_3.4.s390x.rpm b24878da58c24dbf2ea696b6e32511da6f7fa92ede5c955d51d3a6b4f97c8a9c gnutls-utils-3.7.6-23.el9_3.4.s390x.rpm b6253c8bf2018418946123cc2e5d2391d6fa164d5329387751002d3c9f868572 ALSA-2024:1908 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.10.0 ESR. Security Fix(es): * GetBoundName in the JIT returned the wrong object (CVE-2024-3852) * Out-of-bounds-read after mis-optimized switch statement (CVE-2024-3854) * Incorrect JITting of arguments led to use-after-free during garbage collection (CVE-2024-3857) * Permission prompt input delay could expire when not in focus (CVE-2024-2609) * Integer-overflow led to out-of-bounds-read in the OpenType sanitizer (CVE-2024-3859) * Potential use-after-free due to AlignedBuffer self-move (CVE-2024-3861) * Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 (CVE-2024-3864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default firefox-x11-115.10.0-1.el9_3.alma.1.s390x.rpm 10dc0e5d92d932adfd0d393ea361872fbe2b4d028217fa8781128f7b9ee7dcdd firefox-115.10.0-1.el9_3.alma.1.s390x.rpm 717d1e927a78f1eef51bcd8e9247d80709d96ed35e51b73b78987cf73dd5a1d1 ALSA-2024:1940 Copyright 2024 AlmaLinux OS 0 1 Low

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.10.0. Security Fix(es): * Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default thunderbird-115.10.0-2.el9_3.alma.1.s390x.rpm ff78f7419e7468718e2a1c4d770ca03752dfefafe5a7ce4421575746f0b272dd ALSA-2024:1963 Copyright 2024 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default go-toolset-1.20.12-4.el9_3.s390x.rpm 008721b4fc66fe94c7206366ea233feb4851b06ef85feb2fd71d86743122d1e0 golang-docs-1.20.12-4.el9_3.noarch.rpm 2ee34144c6fa1a12f1ac5f287d3860b0728042489fe9f5fa18b39670bde4f55a golang-tests-1.20.12-4.el9_3.noarch.rpm 3a5fd7b0bc28197c3bb3c85bd87cd5b1746f9c32d95bbff8336b8d5312b211f7 golang-src-1.20.12-4.el9_3.noarch.rpm 4b3d61aa441caf36d71dde4418f41bd83783de9edc317744fdab14760bd6a72e golang-1.20.12-4.el9_3.s390x.rpm 9a98e32b3de853dbea58a1e86065d4abc9a3711d0d5ffb3aa2ab5603105716a4 golang-misc-1.20.12-4.el9_3.noarch.rpm e9c351910d43ecbe09ede3a784bd3e855a4f2396f4c5240fc83180b95cf69c96 golang-bin-1.20.12-4.el9_3.s390x.rpm fbc23db7e79e611cda871f5b67110f42c54f6d0f8719db2735daf97bdfd003be ALSA-2024:2033 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreswan security and bug fix update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default libreswan-4.12-1.el9_3.1.alma.1.s390x.rpm 331a67ec26b954e85ecb84b7b029f202e066de4ecb6e21d255c4db7de1bda44e ALSA-2024:2055 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * buildah: full container escape at build time (CVE-2024-1753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default buildah-1.31.5-1.el9_3.s390x.rpm 5c221f7bdd805d269ffa07d0b45ef747d2332b46723bf476377fd65d128f132b buildah-tests-1.31.5-1.el9_3.s390x.rpm e52c32e015c3816ee2e7df0685e74711eb0a48a2ada662fd4fb1fdb7f4797edd ALSA-2024:2079 Copyright 2024 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288,VU#421644.3) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_3_default git-lfs-3.2.0-2.el9_3.s390x.rpm caddf353a32918639b640e100a43eaa089d6cf57b6f1696b748bd4084b7a8d5c ALSA-2024:2119 Copyright 2024 AlmaLinux OS 0 1 Moderate

Image builder components bug fix, enhancement and security update

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security Fix(es): * osbuild-composer: race condition may disable GPG verification for package repositories (CVE-2024-2307) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default osbuild-composer-worker-101-1.el9.alma.1.s390x.rpm 13e57603eb082040dbb4e401fe2dd897899341f45129b5965a4e5169a7629b41 osbuild-composer-core-101-1.el9.alma.1.s390x.rpm e3fb112aac95393659f8e39ac967ee44cf66054342090acdd73d5eecf6221e10 osbuild-composer-101-1.el9.alma.1.s390x.rpm fc32118d8dcb3dfa5ee7ed8da621a2bc9fe436ed8a3fb73b5b6d63b69bd71dae ALSA-2024:2126 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213) * webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745) * webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359) * webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928) * webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983) * webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883) * webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default webkit2gtk3-devel-2.42.5-1.el9.s390x.rpm 22bd2911df91aeab4aead0d92c22854b32a621dd9cc5a7e9a2447e8103b6b257 webkit2gtk3-jsc-2.42.5-1.el9.s390x.rpm 34578b86856b5ff435775986ca85342c2d1fb153e3ea2006ac95208820c0d622 webkit2gtk3-2.42.5-1.el9.s390x.rpm 7fb58051b536be74bfcca11ad851e5bdefee1d5ffa443c60d7b8461d2b9956b9 webkit2gtk3-jsc-devel-2.42.5-1.el9.s390x.rpm d1fb2046a65059a7fa1bf8ea87b824d2d0f2ed654e1165c2162d9e4c7c8abbce ALSA-2024:2132 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security and bug fix update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) * pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) * jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default fence-agents-ibm-powervs-4.10.0-62.el9.noarch.rpm 210fde9bca7cfa78ea2a0af44508b12e00780dfbe06e95c394765aa7b43a02e7 fence-agents-ibm-vpc-4.10.0-62.el9.noarch.rpm 7de2e69a7d2f0cec06dc88b851e2b7e7fa3ee45cab5e8a927a5aae59d6af837b fence-agents-virsh-4.10.0-62.el9.noarch.rpm a1d8d69a0d0ef8fe7ea1589214340121fee9cf64ad705a9b859086356b5cebbe fence-agents-common-4.10.0-62.el9.noarch.rpm a5867c0ce0bdae504b066f42a12ff1903ac5d918bc03fca12a3ab48242558673 fence-agents-kubevirt-4.10.0-62.el9.s390x.rpm bd46bdbab35110106cf3eaa1fbe78154d6c154e956e321760f6c640ed0da37d9 ALSA-2024:2135 Copyright 2024 AlmaLinux OS 0 1 Moderate

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() (CVE-2023-3019) * QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service (CVE-2023-3255) * QEMU: improper IDE controller reset can lead to MBR overwrite (CVE-2023-5088) * QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() (CVE-2023-6683) * QEMU: am53c974: denial of service due to division by zero (CVE-2023-42467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default qemu-kvm-block-blkio-8.2.0-11.el9_4.s390x.rpm 15621caab9baa6b48a108e92d7bff35a8a29acdae9467ad1cb65a19ccb504ed3 qemu-kvm-device-display-virtio-gpu-ccw-8.2.0-11.el9_4.s390x.rpm 329c534475077a25db0597a4e72b77d172d164ed61519dba0974ca39988d41e5 qemu-pr-helper-8.2.0-11.el9_4.s390x.rpm 5d08fd2cca586890b06e6c428dd7010be59706467c72e24ec7268862da46a099 qemu-kvm-docs-8.2.0-11.el9_4.s390x.rpm 62ef7836d79d064f36ed4605bf07a3a810e8696f8cb50fff113887083821a74a qemu-kvm-audio-pa-8.2.0-11.el9_4.s390x.rpm 796de787a44adaab384e58db96f9f71207ae6ae6a1a04b7bb46a2c41264f1775 qemu-kvm-block-curl-8.2.0-11.el9_4.s390x.rpm 8a7462ffa1596f609bd4dc641dc8b7f9ff38029d94535f81edd85113f0f0a596 qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4.s390x.rpm 91cc9c4d3659de8cbde139e12e7fd3ebfc5b4c662ad7b0e34a78568ed329012d qemu-kvm-8.2.0-11.el9_4.s390x.rpm 9dbcdd56bcad71799f4872f00f07407692541b497a2568cb386360731484db05 qemu-guest-agent-8.2.0-11.el9_4.s390x.rpm 9f2c7450bd60f99d3a494fe3507be74e9563b340ff289dc16f960f0633b480a5 qemu-img-8.2.0-11.el9_4.s390x.rpm b1c4a7e4a1573ca5f9f666067c702d36cd6b4dbcce59fb601b6f256584f48db4 qemu-kvm-tools-8.2.0-11.el9_4.s390x.rpm bade6d8542a70127841d8f8e30bb61a020d126eb68e8a2b4aae54355c3a9eb50 qemu-kvm-device-usb-host-8.2.0-11.el9_4.s390x.rpm be825de4a6736ac6670faf1c8a4f971b94acb5c91d3e13cdbd8cbd6684036ba5 qemu-kvm-core-8.2.0-11.el9_4.s390x.rpm d5a8dcd404fdff68203c841a64900e295f9b20a87a3606026bff72f8a647cdf1 qemu-kvm-block-rbd-8.2.0-11.el9_4.s390x.rpm fbf0bf7d2b05ed58f2eac7bb42b02348a4b4a02f51fb25e2d6241bb4c1406fa2 qemu-kvm-common-8.2.0-11.el9_4.s390x.rpm fe2671f7aebce818a75399d873cb850da2aa6eaeba2e0caa6136431822d58247 ALSA-2024:2137 Copyright 2024 AlmaLinux OS 0 1 Low

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default LibRaw-0.21.1-1.el9.s390x.rpm 185314b15dff91f800f476232c11cfc8608a97d7d0832853438384733cd30059 ALSA-2024:2145 Copyright 2024 AlmaLinux OS 0 1 Moderate

libX11 security update

The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785) * libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786) * libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libX11-1.7.0-9.el9.s390x.rpm 05c60275551b76c57cbfdf761c9145b7a813cda20de0e435d69fbba7b52a8de0 libX11-devel-1.7.0-9.el9.s390x.rpm 52a91b26b95c4aec652813185206eac0eed235ec0fa1c411bcfb13f22e193676 libX11-xcb-1.7.0-9.el9.s390x.rpm 78e996037735d5faa745e3b7f285148d3922eeb6a2301de761864054b511938d libX11-common-1.7.0-9.el9.noarch.rpm 9db43557989cf17a44ff936cd59d632d0105f4c231f41317fd063de21d9ec0e7 ALSA-2024:2146 Copyright 2024 AlmaLinux OS 0 1 Moderate

libXpm security update

X.Org X11 libXpm runtime library. Security Fix(es): * libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788) * libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libXpm-3.5.13-10.el9.s390x.rpm 9e8d3f001082e3d81f277b3f3b1d457084f2469941c7a30896c8f8a300fb0011 libXpm-devel-3.5.13-10.el9.s390x.rpm bec95c2ff3484a97df00e6ccd4cb563d902dc8e906d152b6f64c4d0687267e09 ALSA-2024:2147 Copyright 2024 AlmaLinux OS 0 1 Moderate

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default ipa-client-samba-4.11.0-9.el9_4.s390x.rpm 03ea17e45e07621bfad0fe9013eb6b2d8c005706b182fe1e492edf5cf9965bf7 ipa-selinux-4.11.0-9.el9_4.noarch.rpm 08e9c818b6865cd30fd5ab517fe50c550f6a148d9ca30ed86066e8ef6c4b4c0c ipa-server-4.11.0-9.el9_4.s390x.rpm 14e411eba988c07e37d835ef57302c9c14c91b91225b2fca298b0c34e5bdf97d ipa-server-trust-ad-4.11.0-9.el9_4.s390x.rpm 1915e8d2b50eeb1b54605c153714305112acc6b2a2c1e6befd86bd1ecba98d9a ipa-client-common-4.11.0-9.el9_4.noarch.rpm 1ab0480879b73c23e4cbdb845320a83e387ba2625089f785e7cb8e52195a1067 ipa-client-4.11.0-9.el9_4.s390x.rpm 2ed762cb873b6b0b9d3f22557788b118637df6c02a69b3be6a8dddf2d64d4c16 python3-ipaserver-4.11.0-9.el9_4.noarch.rpm 76e822e20c9c40335530199c5769e7144883bd9506cc44cc7aaf16a96d5764d9 python3-ipalib-4.11.0-9.el9_4.noarch.rpm 7bcff5ae7212f01d767c97102900c6362dca72812f54fa211c8d41b28bff7afe ipa-client-epn-4.11.0-9.el9_4.s390x.rpm 89ae6b9d44eeecf8a568a53eae209c7d0896b1f5896b0636230b9c9f05cbea35 python3-ipaclient-4.11.0-9.el9_4.noarch.rpm 8f7f9bfc29aced9dc2e0bd72d04b9cd14638283efcc496bcfabec9ffea9b3ca1 ipa-server-common-4.11.0-9.el9_4.noarch.rpm 97beb0eb751268c2f53651231270b943d4d4735a085c59c47a445edf2d8218b8 ipa-common-4.11.0-9.el9_4.noarch.rpm cdf47c0e6f60a0bfd2a30c694fc302e0e7ad41f77aef5befa2cea3653404a481 ipa-server-dns-4.11.0-9.el9_4.noarch.rpm d1f4d0ec69f218a9cee7dee67a4e91b7da227cf843abbe2a153532ed78979a35 ALSA-2024:2156 Copyright 2024 AlmaLinux OS 0 1 Moderate

frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: incorrect length check in bgp_capability_llgr() can lead do DoS (CVE-2023-31489) * frr: missing length check in bgp_attr_psid_sub() can lead do DoS (CVE-2023-31490) * frr: processes invalid NLRIs if attribute length is zero (CVE-2023-41358) * frr: out of bounds read in bgp_attr_aigp_valid (CVE-2023-41359) * frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c (CVE-2023-41909) * frr: mishandled malformed data leading to a crash (CVE-2023-46752) * frr: crafted BGP UPDATE message leading to a crash (CVE-2023-46753) * frr: ahead-of-stream read of ORF header (CVE-2023-41360) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default frr-8.5.3-4.el9.s390x.rpm 0bc0e6fde4df305f69c51a06fd76ed52d2ba355f724a280b01948fa8a1c2047d frr-selinux-8.5.3-4.el9.noarch.rpm f85f64a1fb71053e0f2877d7703451ebadd7b820fa527fd6d06fe4022eb842c2 ALSA-2024:2159 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-urllib3-1.26.12-2.el9.noarch.rpm d8112f2b32b9d20ea46dd3d97d879f50ea39a56b348424644f799b5aa7ef7ccf ALSA-2024:2160 Copyright 2024 AlmaLinux OS 0 1 Moderate

toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default toolbox-tests-0.0.99.5-2.el9.s390x.rpm 160ab589efdb1e92d1b1bc530915309a3a4fa9b61b19022ec8b0b50b6fe6ac68 toolbox-0.0.99.5-2.el9.s390x.rpm 9d10eeceb65597b8a42dbccc4fc5216ab97d1d1e9ccccaefa08647083f41d65f ALSA-2024:2169 Copyright 2024 AlmaLinux OS 0 1 Moderate

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229) * xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408) * xorg-x11-server: SELinux context corruption (CVE-2024-0409) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886) * xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default xorg-x11-server-Xvfb-1.20.11-24.el9.s390x.rpm 7b885dbbe768f774a7ca8f1b1c1b8d07e5d05c22c3f507001eb4e791e970c0aa xorg-x11-server-Xnest-1.20.11-24.el9.s390x.rpm a86fe21247a3561a56a0f7729bce9ce3a88eaa08788fd9f1560b7eb58b67138c xorg-x11-server-Xdmx-1.20.11-24.el9.s390x.rpm b7470157ea9c444fcf62d7aaac7f9950da9e20e12a0a42c47913fa491e767774 xorg-x11-server-common-1.20.11-24.el9.s390x.rpm c53bacd84ed607fa33fa7b2df6ffc5a21ccc8ecd9bfada6b43d29b7993945a04 xorg-x11-server-Xorg-1.20.11-24.el9.s390x.rpm cc57901c002280ea3b3c0010993f71f136e75743bd892222abf20bd115271ebd xorg-x11-server-Xephyr-1.20.11-24.el9.s390x.rpm f71b78fa2c95cc438340abd3dd9cc75d4d0cf84eef54537720f64813eb8c2199 ALSA-2024:2170 Copyright 2024 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229) * xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408) * xorg-x11-server: SELinux context corruption (CVE-2024-0409) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default xorg-x11-server-Xwayland-22.1.9-5.el9.s390x.rpm 878b2ae2c9bf8877511b8dc4afc3d985c8b708d23649ffaca0065a6e1e49ee49 ALSA-2024:2180 Copyright 2024 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default runc-1.1.12-2.el9.s390x.rpm ca2ba567e1d1152d64c8cd51681edbb9f44020a82b4f1dc0decef053922c33d3 ALSA-2024:2184 Copyright 2024 AlmaLinux OS 0 1 Moderate

libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libsndfile-utils-1.0.31-8.el9.s390x.rpm 6325dea8d923ff74244a4d96b2f40c7ccbf0d5de4fd47be11dd41e8a8eb1bbec libsndfile-1.0.31-8.el9.s390x.rpm 872dac99f1021f8130a7387004026dabc50ebadd96a0659b4c0f61eeb7921522 ALSA-2024:2193 Copyright 2024 AlmaLinux OS 0 1 Moderate

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default podman-docker-4.9.4-0.1.el9.noarch.rpm 04afa407dea5eda0adee572d48983857be667cfa665ef8f5d9ad1479e385e0c0 podman-plugins-4.9.4-0.1.el9.s390x.rpm 3bd75cbd6ea9758fdeecf98fede6269856f9516a18c1bab6c202c445ee9d09a8 podman-remote-4.9.4-0.1.el9.s390x.rpm 7598969d8d21b219a57827160e206084908bd5cfc02098f596e723ecee34044d podman-4.9.4-0.1.el9.s390x.rpm f7ad1a8feba0c5ee0759db933f912821cf9dcccefd6e5c8b08fd04f4d727cfd1 podman-tests-4.9.4-0.1.el9.s390x.rpm fa45e5a3a499401a3f9d807288ebd738142dd7f425a0901101ef0227db2bc529 ALSA-2024:2199 Copyright 2024 AlmaLinux OS 0 1 Important

pmix security update

The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes. Security Fix(es): * pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default pmix-tools-3.2.3-5.el9.s390x.rpm 14bc8b3730f97364320bcc0164e357b874e843d19656b9cc05713c2e0cf4d497 pmix-pmi-3.2.3-5.el9.s390x.rpm 7a40f1a87b633dcfd6f315d66eb99b75da22ff4f5b68b97fe13a46b88baaf6c1 pmix-devel-3.2.3-5.el9.s390x.rpm 8f2f7e014cec444c2fe43874faf35873c71106fca5260c69fdd9419767744e23 pmix-3.2.3-5.el9.s390x.rpm dfd27eae4506eede32e4a7887aa508c941d86cc9dd200319487fc8e9e13c690b ALSA-2024:2204 Copyright 2024 AlmaLinux OS 0 1 Moderate

libnbd security update

Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients. Security Fix(es): * libnbd: Malicious NBD server may crash libnbd (CVE-2023-5871) * libnbd: Crash or misbehaviour when NBD server returns an unexpected block size (CVE-2023-5215) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libnbd-bash-completion-1.18.1-3.el9.noarch.rpm 330bac53c5f772da224cd145269ed56ddc486fd5b7a66fedfc609ea0869e0e24 python3-libnbd-1.18.1-3.el9.s390x.rpm 4e8dbf29df75e96c27086e81abb1c4b93d1ae034f7ae992cf31c4b845d118f1e libnbd-1.18.1-3.el9.s390x.rpm 59b277aef8e95a77c3dbadb9f27885bcd6c031c3470c49a5f1dc263260a35f8a nbdfuse-1.18.1-3.el9.s390x.rpm cd35ffffcd4e95f45a856fb370f70794bd3f8cc6d90d2e66c53ad2170369fb50 ALSA-2024:2208 Copyright 2024 AlmaLinux OS 0 1 Moderate

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: Incorrect offset calculation leading to DOS (CVE-2023-39350) * freerdp: Null Pointer Dereference leading DOS in RemoteFX (CVE-2023-39351) * freerdp: invalid offset validation leading to Out Of Bound Write (CVE-2023-39352) * freerdp: missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect (CVE-2023-39356) * freerdp: Integer overflow leading to out-of-bound write vulnerability in gdi_CreateSurface (CVE-2023-40186) * freerdp: Out-of-bounds write in clear_decompress_bands_data (CVE-2023-40567) * freerdp: Out-of-bounds write in the `progressive_decompress` function due to incorrect calculations (CVE-2023-40569) * freerdp: buffer overflow in ncrush_decompress causes crash with crafted input (CVE-2023-40589) * freerdp: missing offset validation leading to Out Of Bound Read (CVE-2023-39353) * freerdp: Out-Of-Bounds Read in nsc_rle_decompress_data (CVE-2023-39354) * freerdp: integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment (CVE-2023-40181) * freerdp: Out-of-bounds read in general_LumaToYUV444 (CVE-2023-40188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libwinpr-2.11.2-1.el9.s390x.rpm 32fba47558dc297c17987aa2740dd435809d58e022778dab12dd9b03d136f832 freerdp-2.11.2-1.el9.s390x.rpm 3bb22a50e0c5d2e2723fdb66d93c1ecaf011bf7d6fbdd05fd86a9d834ae04c5b freerdp-libs-2.11.2-1.el9.s390x.rpm 43657df33ac10340b91411776adf5d6af00331c7109c007a290488db5ac7d0a7 ALSA-2024:2211 Copyright 2024 AlmaLinux OS 0 1 Moderate

tcpdump security update

The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces. Security Fix(es): * tcpslice: use-after-free in extract_slice() (CVE-2021-41043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default tcpdump-4.99.0-9.el9.s390x.rpm e2db64a8f00428c17822f84fe228ce0f202ae61ad6553a826fdd98cc0634dcb3 ALSA-2024:2213 Copyright 2024 AlmaLinux OS 0 1 Moderate

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * pcp: unsafe use of directories allows pcp to root privilege escalation (CVE-2023-6917) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default pcp-pmda-lustre-6.2.0-1.el9.s390x.rpm 00ff57192928442bb14502e9ce0cbaf4114f3bd8073205398d5726c2273e14ac pcp-pmda-smart-6.2.0-1.el9.s390x.rpm 04c52fa7fe8e350ab40aeb625f1d9d12740d46512476af1350cfd626e67282f3 pcp-export-pcp2spark-6.2.0-1.el9.s390x.rpm 0cb4fe727dd377514484923018b8a9f9f3d0b7218e3c057968903b0be85cf3a6 pcp-pmda-lio-6.2.0-1.el9.s390x.rpm 0e811242f8f20228bc4b48062399c8544cf3a0b1ac42c0542846c8a784c05678 pcp-pmda-activemq-6.2.0-1.el9.s390x.rpm 1165ff44f97876271993989c68fa963a35212ae6025a48535455dbdc9827559f pcp-import-sar2pcp-6.2.0-1.el9.s390x.rpm 13801838b6dd23f1ffe2d1e1d501137212590ca9fed2304590c83b37ce5a7e5c pcp-pmda-mailq-6.2.0-1.el9.s390x.rpm 153d4d1c06283949b1cb508b13ebec8548299894b952f29f6abd8f5598229979 pcp-pmda-cisco-6.2.0-1.el9.s390x.rpm 16b8974ddde03ba517947709fb7fbfedc4e6b26585cf95b9a917f3510d77ceee pcp-6.2.0-1.el9.s390x.rpm 17eac06b9141303b3651480c7356e55181b8382ccfb046784fb25c9bc8c7be13 perl-PCP-PMDA-6.2.0-1.el9.s390x.rpm 1a4f9aa587f7f96880924d39ea2dea0057cc341a49d6aa2400e20611c3e9a9e2 pcp-gui-6.2.0-1.el9.s390x.rpm 1b333cce6b4c5354a1f3b149d147f2119f3c737045b4bcb3401101455a4cd22e pcp-export-pcp2elasticsearch-6.2.0-1.el9.s390x.rpm 1c9c0700af42c0ce2d6ca563c196bcbe1644bff01549831ee03e8e1e77ac813a pcp-pmda-ds389-6.2.0-1.el9.s390x.rpm 1fc88523f6c6e1eca46642d7ff6bf0d17bc6c82e2096f7f8adb30613500c0736 pcp-pmda-gpfs-6.2.0-1.el9.s390x.rpm 2317f71fe49ee7787cfd429878f0766dbca57a07ad4c05f1129d53611b7d7a08 pcp-pmda-oracle-6.2.0-1.el9.s390x.rpm 2d963b9a1798a8221229f4df0f8bf0b00ac87e6d3e5253277408bd014639d55d pcp-import-iostat2pcp-6.2.0-1.el9.s390x.rpm 2eb92c8da5b96a2d38ca9e27a5fa53794337d01811ba00c157ca92851175021c perl-PCP-MMV-6.2.0-1.el9.s390x.rpm 30d4b135786c6065576a93c44fa91c3baa6a869fb667fe32c9f7ae0747e71392 pcp-pmda-bpftrace-6.2.0-1.el9.s390x.rpm 328e7118b63f91d607ead4fa9ed73b97f0a122e5ee1cda7ed6e0cdd4392bf753 pcp-pmda-bcc-6.2.0-1.el9.s390x.rpm 34e8467f2044370546cd64f46a393d57c790b32f3e41160c456fce70438729b5 pcp-pmda-named-6.2.0-1.el9.s390x.rpm 3d0a08ee53b1b6aaea6fb4e3eeb1257a198b2c20f2d0ebef3106ebe2c6ce61ff pcp-pmda-nfsclient-6.2.0-1.el9.s390x.rpm 3dc55bc2d752a5b9aa61ef3ff98e93fd15d99cd574ef6b18ca75cf20ffa64502 pcp-pmda-sendmail-6.2.0-1.el9.s390x.rpm 40814408c52c2c561208b74f5e46cd7b24f32b536ae81ce77d766b0efa55c4b6 pcp-export-pcp2xml-6.2.0-1.el9.s390x.rpm 4313c49bce6f1c1286e70980ac08253e54dcb2f4d0e5a85d4aa3a57f1b1017b6 pcp-pmda-rsyslog-6.2.0-1.el9.s390x.rpm 4332f562b94a7ec5ac4ecaab768e0eb23bd7b4d8830bb633c7e7cb971db96301 pcp-pmda-cifs-6.2.0-1.el9.s390x.rpm 44394af7a2300e1cd7fbdcc56ada5e9723205b55246813ebe88200d780a593bd pcp-export-zabbix-agent-6.2.0-1.el9.s390x.rpm 47582407fb08afcbd885695cbd2bef79aab53e912f6eb11cbce33df526f8614c pcp-pmda-mongodb-6.2.0-1.el9.s390x.rpm 482764883bb8de7d0ac2b06b67b28685e5c0e2ee71bdf328f88bdbfa8a99fe28 pcp-pmda-elasticsearch-6.2.0-1.el9.s390x.rpm 4910831337553d947f988ee745f0dc4e6a67f2623bb71a730d45ed89e9e8dacc pcp-pmda-zswap-6.2.0-1.el9.s390x.rpm 4a46179160001d8352cf2f90763d9cb6b1f01756602a3376911dcfc758da9865 pcp-pmda-logger-6.2.0-1.el9.s390x.rpm 52aa3a09b980d0a7d0c0f4ab3549e5a538644999b545ee5d3f6cc7122a4f26a0 pcp-pmda-apache-6.2.0-1.el9.s390x.rpm 554e5c0007c6e87cffc7c08e99e0802f0db5dec438ffeb5b4f8c917491592982 pcp-pmda-gluster-6.2.0-1.el9.s390x.rpm 567e9502a97d187de8952da56d9bc100a53ce1e6a373181d6c75ea37e7facc9c pcp-pmda-hacluster-6.2.0-1.el9.s390x.rpm 5c7406938a19ce0dc92317dfb72ddb869eed266be6d35cec35bef58564f8857a pcp-pmda-rabbitmq-6.2.0-1.el9.s390x.rpm 5cd49fe4d76dad685172ceeba50e764a866227bbf52779fc1fc3f4af82b28af9 pcp-pmda-redis-6.2.0-1.el9.s390x.rpm 5f60ebde375b8334b3ffef6685bb75e4e311ee32cbc90d66a8d1102529facde6 pcp-pmda-news-6.2.0-1.el9.s390x.rpm 60ad9726a569c240bcf0096603965bcd6002dbc8b4de55f5990af13c3c68aa29 pcp-pmda-systemd-6.2.0-1.el9.s390x.rpm 631b475bf86632512f3958e8f37df99eabf488c0a430eb253a7db825704856c8 pcp-pmda-unbound-6.2.0-1.el9.s390x.rpm 64edb08c3c5b0520254c84e8eefcdd680015a15017ceb4d5a247ea447d2093e2 pcp-pmda-ds389log-6.2.0-1.el9.s390x.rpm 64ff9e329ff6f02006771473c90e7b4dafd6590272448a901681d2af35419885 pcp-pmda-weblog-6.2.0-1.el9.s390x.rpm 650372a7f61e9ce84012fbd41dcac61c59dd0037ca7aa3aa2871cc0f9db0882f pcp-doc-6.2.0-1.el9.noarch.rpm 6af8b6815243e2a33ef5683259c3a8217cd1a2826ff0d5a021caff2e0377a593 pcp-pmda-memcache-6.2.0-1.el9.s390x.rpm 6d3e6565dc62acfd260ccf4e5401fd62d81e59982d138887810905437c18331c pcp-pmda-openmetrics-6.2.0-1.el9.s390x.rpm 705d45f4527df4ebcf57a956a84db908780ed5740a99b5d688773dec79e1811b pcp-pmda-gpsd-6.2.0-1.el9.s390x.rpm 743b4e06f0a09efe6258c0b0e49ad154300d54571f612208b007d674303af956 pcp-pmda-bonding-6.2.0-1.el9.s390x.rpm 7acad112e6c7b1c54a635672179affb56bfd9bd38dc49d35674fcd068024aee4 pcp-libs-6.2.0-1.el9.s390x.rpm 8146ce6b657825e4623724df2b2c2490cb53b52a5c54b9ac5fca1e1eeeabbf0f pcp-pmda-haproxy-6.2.0-1.el9.s390x.rpm 863ddf868e6363550ebfcca4ad82a43c4ac44b34a4f36eb96083d8316c821704 perl-PCP-LogSummary-6.2.0-1.el9.s390x.rpm 90d7084b9d37c2b522cc181c66a491d728b92cb0f2a5aa680a3e0dbff7aa7be3 pcp-pmda-podman-6.2.0-1.el9.s390x.rpm 90f1db34d926f3600a47f74728150a88bd1fe62143fe42f99f696319d5bf83ec pcp-pmda-snmp-6.2.0-1.el9.s390x.rpm 9220f3a2d0e6ff16b5ac2f6fc2827fd6b5683e06347c2e6c824a19fd65d5bdb3 pcp-system-tools-6.2.0-1.el9.s390x.rpm 97e0f1b956b081a77732376d23fca953688f09b30cb56d358428eb32110612e2 pcp-pmda-mysql-6.2.0-1.el9.s390x.rpm 98188c20eaeacc648962c9e4943d7af0250c9e890fc11b70c3724e6b0a82f36e pcp-pmda-shping-6.2.0-1.el9.s390x.rpm 992fbf5d41d1a7407a0e2366dff56d11f1acac14477fccf0138417f800839c39 pcp-pmda-netcheck-6.2.0-1.el9.s390x.rpm 9f03e88f286b534e42c5ac6765c9fb8d298376f6a2489eb25c8d3bcb03fdf51d pcp-pmda-json-6.2.0-1.el9.s390x.rpm a08c2fce3ea68409e2f5ddc87f4f403e6526e2a42f93a8d09a1c5821e2b187d0 pcp-pmda-docker-6.2.0-1.el9.s390x.rpm a2f090dfe5c32838e3d3f31e0cdf5b3b7587de0cf84fe6abdee1242868f0386d pcp-export-pcp2json-6.2.0-1.el9.s390x.rpm a32bb92b162210cd479752653d388d51858d750412a790f6db3f37b1c5c89db4 pcp-pmda-gfs2-6.2.0-1.el9.s390x.rpm a56990a0eb66ebc8270c57ccd75993cbf2c08bed54545bb71cee8d06a5887299 pcp-pmda-bind2-6.2.0-1.el9.s390x.rpm ad0d1427a49052ef961be70c714200fb7f2625431cf516b4b0ba970e43ca0239 pcp-export-pcp2zabbix-6.2.0-1.el9.s390x.rpm ad7774554e78df2482e509282af4882e0438cecff25b46c333f0d5e47fb437fa pcp-pmda-dm-6.2.0-1.el9.s390x.rpm af0114d90423d113ac5a735d99edfb20e337674cf21891b12cd75f819ef9b67f pcp-pmda-zimbra-6.2.0-1.el9.s390x.rpm b4b9b446feeccb225146afa18499f46b0815e56a0b7b07f20c8af57162b58385 pcp-pmda-samba-6.2.0-1.el9.s390x.rpm b50da1bc20dfa4fd3c381d65b01bbd0f12cab196e0d0648e59df5febd0e93f9f pcp-pmda-postfix-6.2.0-1.el9.s390x.rpm b57f6cb3749bc255dd01c7537d5690171be77ff72f64114bc2923dd62da927c8 pcp-pmda-pdns-6.2.0-1.el9.s390x.rpm b62f8e1bc964698c7bde069f279a8acc42d43a9229426170972a24d8943a4913 perl-PCP-LogImport-6.2.0-1.el9.s390x.rpm b66974c9c77da99577bc76e75687c3420580ff984c38cb2d433384b9b8138ec8 pcp-pmda-sockets-6.2.0-1.el9.s390x.rpm b66a1335e73f77fe1cbcb0a6c58ab4331b7a5bd0c4453952d9eeb5f221c3853d pcp-libs-devel-6.2.0-1.el9.s390x.rpm b77bfe7ad4b03448917abcd4aea18168d7417671eeaa7b6c5c4f74277d8354f3 pcp-pmda-denki-6.2.0-1.el9.s390x.rpm bb2ead2dbc10da3d850c43e9d61b540fe4e35fe4bd4e555dfcd13147d68f1f4d pcp-testsuite-6.2.0-1.el9.s390x.rpm bbd9bdfec74091a599f9dfd6b415f8303ca07e7c576784d3be54b82fe97a6833 python3-pcp-6.2.0-1.el9.s390x.rpm bfe50d09a0cb0b70b2a84117aa0ddca589ddc72af95ee67dbde40afc2a04c6af pcp-import-ganglia2pcp-6.2.0-1.el9.s390x.rpm c4a8df95aa5838f16e5d6d4d43f38431427685fe566612d3d95e9e40d154570f pcp-selinux-6.2.0-1.el9.s390x.rpm c7846a6cd5dfe62ae94c622c71ee3b4385f3dd081206fb5e2e3c3adf8f746385 pcp-pmda-openvswitch-6.2.0-1.el9.s390x.rpm c8341c7bd4ba8ce7917f7e14e41bad8ac042be4acf0a7288d2757a278efcda2b pcp-pmda-bash-6.2.0-1.el9.s390x.rpm cd6597b345d2360b4200cc1df4020acbfcbaa8b27736caa5474cee9b5df2dbca pcp-pmda-netfilter-6.2.0-1.el9.s390x.rpm ceaa43f816a56e0e5e28eecf93c1fecd05fe71b3dc7202243dfe8b6932d3b77b pcp-pmda-libvirt-6.2.0-1.el9.s390x.rpm d51159467a76e660c5fb63bc2ced0a85b6f972815a97d49256f77cd86aa2ea53 pcp-pmda-mounts-6.2.0-1.el9.s390x.rpm d6ee7bc5ca8bb76af598fa5202aaaaf4a0dcd7737f85005531234b0ae38a6056 pcp-pmda-summary-6.2.0-1.el9.s390x.rpm d74f0c1974c7586276e777e3013f3923ef5f85d60e3bc9de990db509267d3a54 pcp-export-pcp2graphite-6.2.0-1.el9.s390x.rpm d823493a0c6ee8cbeae54ee91527faa0e4dff55d3e554cbfe1b398b9af69d9c0 pcp-pmda-lmsensors-6.2.0-1.el9.s390x.rpm d93f086f5f3a0ecf125cfee206836a0398dd59adbf7a839476c8cc53fd90f8a6 pcp-pmda-trace-6.2.0-1.el9.s390x.rpm dd27642674eb11d2c699b94ea5009f5d4ac1c5b5a39e0fcf4991670a5a354958 pcp-pmda-nvidia-gpu-6.2.0-1.el9.s390x.rpm de2d036ac7815f9f7e8f7851615dd8c8eb641e7ad46b25e884573ee3b2b66550 pcp-pmda-nginx-6.2.0-1.el9.s390x.rpm e0ce8f44a8a887b98dd6574fb3fb67e8c629a0c06915bb2c5f0a9d88f3bb2905 pcp-pmda-postgresql-6.2.0-1.el9.s390x.rpm e42a07923db32fad2604572eb6046bc4dd466594718fb166094e53d361031ffb pcp-conf-6.2.0-1.el9.s390x.rpm e4370bd95b97793650406cf0b56a5cce62d827019e000d339ff5363a718f22fb pcp-pmda-dbping-6.2.0-1.el9.s390x.rpm e6d3c3b3f56d7e455d6a2ca04cb6370193c15ade7d4f7d59ae06155a23edd743 pcp-import-collectl2pcp-6.2.0-1.el9.s390x.rpm ed781c4c77ab523d77a483d1d802a29a748b54cc1d248074d2bdd66ec1a1eaef pcp-export-pcp2influxdb-6.2.0-1.el9.s390x.rpm eecac73c87e2df04a75cab4b44e6a2a6c2aa9f8354b4380fe83fbc6ff3299e98 pcp-pmda-statsd-6.2.0-1.el9.s390x.rpm efa8dd600ce2dbd903454ff3aeb0b4c8885dab3bfd34787c43ac88233437835c pcp-pmda-slurm-6.2.0-1.el9.s390x.rpm f2cc8a24f9882a437b02ca6077e34915b4063f5bcc98bb344693744ddcced06b pcp-pmda-lustrecomm-6.2.0-1.el9.s390x.rpm f306a80c613d53c2843b50e3eb0e02ef8746cf2b722ad50a11625347062a3ab5 pcp-pmda-mic-6.2.0-1.el9.s390x.rpm f30e8348a2acb1abd7ace39fcf73c17d814ef15924afb6faa8e96af71d2d61cb pcp-import-mrtg2pcp-6.2.0-1.el9.s390x.rpm f4f00f7102c4ec5c1c7948d2f6042acf95d955b53a53738444c03dc77e47745f pcp-zeroconf-6.2.0-1.el9.s390x.rpm f63278e0000336a02df31e0031737524147b78595afba7a6c7367adabd1fef1f pcp-geolocate-6.2.0-1.el9.s390x.rpm f7950de261e46289deedd533364c5d2483b88cc0d8d14deaf157dd40dde2c7b7 pcp-pmda-roomtemp-6.2.0-1.el9.s390x.rpm fb909b726ccd35596fda65913a2f518b28a0c77b23b643f3690e53d01773c797 pcp-pmda-farm-6.2.0-1.el9.s390x.rpm fbbd40fcd6b71c7723cabb0cf89c3bb263b0e42dd7f783fdf59de71eabc7217e pcp-devel-6.2.0-1.el9.s390x.rpm ffc0df7ca7b3d6d7a45b57d50461e122103f46acd40d42defea3c5bd7a40b512 ALSA-2024:2217 Copyright 2024 AlmaLinux OS 0 1 Moderate

motif security update

The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager. Security Fix(es): * libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788) * libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default motif-devel-2.3.4-28.el9.s390x.rpm 0cc6c6711f5ec59560f1cf709d20016f96a0a370257bb4f5b52e9623779e4ab4 motif-2.3.4-28.el9.s390x.rpm 1aa10ee253604be8de839f1618693f34d5eaf3fbbcd80d870d517b91b2e9252b ALSA-2024:2228 Copyright 2024 AlmaLinux OS 0 1 Moderate

perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Write past buffer end via illegal user-defined Unicode property (CVE-2023-47038) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default perl-DynaLoader-1.47-481.el9.s390x.rpm 00e9dd0dc72bec3942ab95f9a664a2050547b586becb4fba02022bbbd1f66088 perl-Net-1.02-481.el9.noarch.rpm 0295d4efd94f1aa32449f49679998d099991304621ed967b1ad39db3937f619b perl-ExtUtils-Constant-0.25-481.el9.noarch.rpm 03f212aabeb68f36c57a3cadd93df43e03cdaf1db099aa9b7a2d54ea8b76033c perl-IPC-Open3-1.21-481.el9.noarch.rpm 048ab2c41c1cc5c4d3448c08f7e816d21fc3ae79fd55bb3b0a1aa5aafcc52868 perl-Attribute-Handlers-1.01-481.el9.noarch.rpm 05a00399c7d57ad34ac370de118853fd6e95cedbc8d87ef80bdbd74d5dac8961 perl-libnetcfg-5.32.1-481.el9.noarch.rpm 071a1b5609d19209e2f6b27ef19b43fb2057dc0d76c9f8a68ab141fec7d53add perl-less-0.03-481.el9.noarch.rpm 0856348b54de84fa2d177f5e114d1614f3f9d13fecfeb360f31a3e6e09d1b5bf perl-AutoSplit-5.74-481.el9.noarch.rpm 09559d72c64f9d21e611855dd2cda5164b5c5e765ada4d549ccecc8e234c9cc4 perl-vars-1.05-481.el9.noarch.rpm 0e90c6b801bee7e2662b8494f92c0d797e7d70f47e1735b8ff59a2dd2aa4ef47 perl-Devel-SelfStubber-1.06-481.el9.noarch.rpm 0f1255c0a57676ff9f3fde8908b3f1e07c144467d924ffe9751c415ca1078b82 perl-Tie-Memoize-1.1-481.el9.noarch.rpm 0fdfd1bad7dcbb4e49e9e4d6bfe17d25ca98d2547d1e1fafb738d0059a2b318a perl-Thread-Semaphore-2.13-481.el9.noarch.rpm 10ce3f264230a2cef197b020a0b928bc8e35929cc9e2a074ee2b74eb9adb74ed perl-ExtUtils-Embed-1.35-481.el9.noarch.rpm 129dd08fac6da18b36c95aaef428b148ffc8551e86b631fa7114b290891b3b91 perl-Sys-Hostname-1.23-481.el9.s390x.rpm 12b401c0ca6d83086e1b1f0f62c7e5f569df4dc9417fb5e2be7faa16f79dc9ac perl-Fcntl-1.13-481.el9.s390x.rpm 144a1c1a60328faabf764c59a2cd451b491c26fe971919da2edb84d95f13161d perl-I18N-Collate-1.02-481.el9.noarch.rpm 16f98404d16a8232eb130cdba2897ad1bf6693ec0ee5639f79f100727459c20b perl-FileHandle-2.03-481.el9.noarch.rpm 1928bd2377994731d104a6243c0d433827a7ec60db40da1a9b690dcf34d285ea perl-FileCache-1.10-481.el9.noarch.rpm 1c1748786d3843a0dde874f2319b6e953d201513abd7889358e92851cea369d5 perl-filetest-1.03-481.el9.noarch.rpm 21f01893899a1325f39a96d386a71cde22fb9f5a76d63f5b26e13770a751a493 perl-overloading-0.02-481.el9.noarch.rpm 26dc2bd86aff3ad8957271b6938dce89f32b09e3766eeaaa4c7abaeb05a40398 perl-Text-Abbrev-1.02-481.el9.noarch.rpm 2a89cfb4c0b2e11c383f5c76c8f780cc686b773d6b35f6c065a645f3f51ff480 perl-Memoize-1.03-481.el9.noarch.rpm 2e469414c2611244736ec9ff6af2154f0db69f87e7fa15ab295f84f46ebf21a6 perl-DirHandle-1.05-481.el9.noarch.rpm 3398f1bc7771927ad29f8d1f07f18cd2f289c197f702b8317cb15b7418160125 perl-mro-1.23-481.el9.s390x.rpm 37838dcbbbd8890e48edea11c4a479ca277c98d7b337bb4bef20d0d6cb76fb3d perl-Pod-Html-1.25-481.el9.noarch.rpm 38211f7cd5ea62f597220bf3c5eec6c4eb01e7bce988fba52a3d799c136f558d perl-Hash-Util-FieldHash-1.20-481.el9.s390x.rpm 38cb07e096a74966158d96a8b6b088a641d0c82125b6f83b5947f78824cbc63b perl-Module-Loaded-0.08-481.el9.noarch.rpm 3bc3aacd40a3003131485ba13b483103bfefdb41a5272dfe1a89a94024c9e564 perl-B-1.80-481.el9.s390x.rpm 3c3897139e03c93f9efe3407b23d511170dbe383081863f8be2194065ba6be0e perl-Symbol-1.08-481.el9.noarch.rpm 3f15673449eba60988dbc72b8ae84c05d3f173fe2a7ab9894888d011a448b2e9 perl-autouse-1.11-481.el9.noarch.rpm 3fa35ceb4fcddf6e952dbdeb5d3b5dde5a98dc7a7c6593721a12e3e494d14c5b perl-blib-1.07-481.el9.noarch.rpm 413710c092e8f9245e20c4ff4ce3254f5383a5452e0ea9e7b9cddd4d8ff72da2 perl-Opcode-1.48-481.el9.s390x.rpm 46cc708e99e213d009dfc9eca0a84e2359d5d21d0546d4e276c881dc3c9504b3 perl-Locale-Maketext-Simple-0.21-481.el9.noarch.rpm 4851313939f69a96a268e6ba728d2ba3cf0ba7dd56eafce29831b7fbef5ff00c perl-encoding-warnings-0.13-481.el9.noarch.rpm 4949291b5916d2a1f30e44c641c2d16ae7a16d51f7ebb28d464c71e80e96468d perl-File-Find-1.37-481.el9.noarch.rpm 4d26e91151827aa4731cc93e100398ca87931559cb6a63be4177543876f66e0c perl-locale-1.09-481.el9.noarch.rpm 4e41195ed8687a39f55a386a864d58de055c25ac036e7e508d723cac46953906 perl-Pod-Functions-1.13-481.el9.noarch.rpm 4ede75a3c1b342b5298ab2821d1716d495d847ffd1e0129e9bb3b65417f59ba1 perl-Class-Struct-0.66-481.el9.noarch.rpm 5059a16b850db181c9ca0a1c1cc4666fdda9fa1a45f7d15509524b3c7d5aa891 perl-NDBM_File-1.15-481.el9.s390x.rpm 51b8075306c135a8d9e1ae3b29fa5e1988b20535eac4b9021ef343358c6fce62 perl-Term-ReadLine-1.17-481.el9.noarch.rpm 52be7ec09600471121a699ff1e4364b93ca2aea950dc7921a646e3d519c0f79e perl-macros-5.32.1-481.el9.noarch.rpm 55191b08752197779dfe4264173d441209433b0bb97942c9e2d9b2957afc0fa0 perl-debugger-1.56-481.el9.noarch.rpm 57a817f4f9812c0d64d7c5151e1b03388466f6a78ac277e47a1bc901ee64bb20 perl-Getopt-Std-1.12-481.el9.noarch.rpm 588affa63d25b60e837eb14736226a4db5bf89f6a010507373dc01f754263ccd perl-if-0.60.800-481.el9.noarch.rpm 58e386b02173a7823b40a263b150fb0289c6732c482d9b880ea29341ca2ca341 perl-File-DosGlob-1.12-481.el9.s390x.rpm 5f552865c0e40095a665eab3a2dd975d9016d45a51d192c6a5c1c79ec447734a perl-Time-Piece-1.3401-481.el9.s390x.rpm 60364e5507e11e89670e669053ba1272d92f82720e18fe59f60f0f559127eacf perl-DBM_Filter-0.06-481.el9.noarch.rpm 622279dbaf4bbd4de9d1a67996179daf2af598c527fdac73b8c15fa01ab8dad8 perl-I18N-Langinfo-0.19-481.el9.s390x.rpm 63305502f509a3ffbd7a1797a60dce287114330b0faf51c327c1b271aa2b8272 perl-sigtrap-1.09-481.el9.noarch.rpm 63c07920e9df66934c402860ade150186547fe9b922699b77b34d6067c451726 perl-User-pwent-1.03-481.el9.noarch.rpm 68791d69ca71125fdd6586e405c119d6ee467fede56aecc7be0f846683ba1b48 perl-File-Compare-1.100.600-481.el9.noarch.rpm 6c89e0ec688d1eb101bdbc0a0b179d972663775066c0f68855ae218c5bd833ac perl-File-Basename-2.85-481.el9.noarch.rpm 70d472e930c25d30a6d00789e007a8d8bb01ac763f4fb64639fdf2b3411be0b4 perl-Safe-2.41-481.el9.noarch.rpm 73eddfbbff6d7cd9c7bb95d2fe6952c3b72e090520c2d24f8b193de8d5f3cbd9 perl-Search-Dict-1.07-481.el9.noarch.rpm 76c09695f26829bf3c4815b88bfb549365adec70bde5f8c961fe58c5c27f70b2 perl-AutoLoader-5.74-481.el9.noarch.rpm 78acac1cee3dcfce077b1474cc395f9cb4c698661fac9a80df3cc39178e07b31 perl-sort-2.04-481.el9.noarch.rpm 78fc4ebb75866f96293d4bd7e3d14df82b656d6197dc76a0e118b6cf4a8452b8 perl-lib-0.65-481.el9.s390x.rpm 7cc76459a5a7acd4f7dd1d8595a3ad93e4eb34b758509edbf12877a0366ba912 perl-Dumpvalue-2.27-481.el9.noarch.rpm 84cfaa6a0448b84b69fb88eaf1613001bbde059fd707f0346326f970a83c4b50 perl-ODBM_File-1.16-481.el9.s390x.rpm 8890e388d43bd4a907d0b71db1278feb14fd17f9f10f90383bebd1ec6cd0f18f perl-SelfLoader-1.26-481.el9.noarch.rpm 89055b10cc909c9762bd667914dae7b33fe2acda18681c269d0f1ffa0dbdcc90 perl-doc-5.32.1-481.el9.noarch.rpm 8ce04a23d3ae8d2e7676336497de5dfb0ee10f57fe4604b779261d948d52d073 perl-File-stat-1.09-481.el9.noarch.rpm 8df3190ef1f912154ac613fada8872fbb13d9e53b006d98e287a8c87f66995c9 perl-Term-Complete-1.403-481.el9.noarch.rpm 9a57fc846b8636f954a934cbf1257d04cfb5fb4cb8297e59f5b0fcc7899ac502 perl-diagnostics-1.37-481.el9.noarch.rpm 9b3800238bb25cf90044dd60f4fd374c203947d98084505180437b0107cc8a21 perl-ExtUtils-Miniperl-1.09-481.el9.noarch.rpm 9bebd70a3655f17218aa3fd88eb2fed72ca77530d3b79383e561f87fd65f7ab1 perl-fields-2.27-481.el9.noarch.rpm 9e815f46e9144a3beee8eb9f09ff69d1f96c35425c50a1b2ae034c205a873b24 perl-meta-notation-5.32.1-481.el9.noarch.rpm a2ae305c426191cb53c83de2fc46e7e9eeec2fe194a8c0ca90fec074b0376c7e perl-libs-5.32.1-481.el9.s390x.rpm a3eb8e53f6ad27c0759a4dc88cd3d89e95051db9d76586cb54ed1a8d2821eb95 perl-Benchmark-1.23-481.el9.noarch.rpm a5182d64773f6b71d6afa91aaa1458c80574a1e298efde7498c1b74f413f66d6 perl-ph-5.32.1-481.el9.s390x.rpm a6667a434f9918a74276a2df649d7bdd7e0a074b89c18f11eaa4e1f62b71b2b1 perl-devel-5.32.1-481.el9.s390x.rpm ab606a167ea15c4e798a6b936df67fedf2f2c8cda451f0ec516ec300c3896524 perl-utils-5.32.1-481.el9.noarch.rpm abb9f8f255a3deefb7489b6a5d5c8d404f913cc311f9b9be6ad8ed4b1ff5d8d0 perl-base-2.27-481.el9.noarch.rpm b388bfb7221c509e8c7024e0438750006b1b0292344e134fd8b89084e6a0fc75 perl-Thread-3.05-481.el9.noarch.rpm b3a0034bdc617ead7a18b713770e4d4edaaffc8d44d6be79ab7606bbe18d8215 perl-Test-1.31-481.el9.noarch.rpm ba5c4b0cb74d4329deefb73721dbecdc620100706eabfa9973f4eb398ddb3c2a perl-subs-1.03-481.el9.noarch.rpm bcb72c58761890cb5ca2a95e9b89fdb3571f49a0a69a2468e8ceb12e4003b859 perl-Config-Extensions-0.03-481.el9.noarch.rpm bcd3645ab7adddea2c04915d2e8d762adc6f676410f7bc10662f9a9e6b461c97 perl-Devel-Peek-1.28-481.el9.s390x.rpm bf17a59f262c56718520e78845be4018c4d7b5e9c40d5bec0d598e5cc8a19cd4 perl-Time-1.03-481.el9.noarch.rpm c50ed531cbabd7400676731c8dffae2e95d38f54f7107a5020aa38c2f9f1c443 perl-NEXT-0.67-481.el9.noarch.rpm c84e0a083f201ef71327a5e81431ac6e95bb3ea6dfb9d5535ba3110b4d3b3978 perl-deprecate-0.04-481.el9.noarch.rpm cae0c283625809d1121eb2f3302a4fef4082f4f51b54fd22910f3ffd50d3bd2f perl-overload-1.31-481.el9.noarch.rpm cc7ed3ccbb90c2e8f7f2f1a6acfd618e4451c3c5d32b8382f40a2ba8960438c1 perl-POSIX-1.94-481.el9.s390x.rpm cd2fdd6a12ad65ce7eaafb742d56a11ac6ea065ee3ea8823df2e772ce93cd84d perl-Math-Complex-1.59-481.el9.noarch.rpm cf6df12e7e1f5f154fc2d4a69413546d66a7cb8283a76c3bc85da1dcd8cf9d83 perl-I18N-LangTags-0.44-481.el9.noarch.rpm d3b3e5dbd32a44b9b09f5e641a31c150b0529dafca151ae072efec5b8c98944b perl-Errno-1.30-481.el9.s390x.rpm d51a1e51af9873aa0324a12c36afb8f75095b40a83967fcb90e38522b994154f perl-SelectSaver-1.02-481.el9.noarch.rpm d5cf2a24cc26f50ac5c51ee8ae3fffe8e010061fbb90d8eb9e37d11065b1a95d perl-File-Copy-2.34-481.el9.noarch.rpm d7d52064da450830fd69aca6ad725f49910df7b0ea889453330dcc5a9b8eccaf perl-5.32.1-481.el9.s390x.rpm d9d88bb0f6296ddae9330066bb2effededa005d11a69c0e26fb543e514e88feb perl-Tie-4.6-481.el9.noarch.rpm dd3ca47bb9825c83de9fded399a6e10aaee7d7a5b206266cf1e3540e53cf3554 perl-FindBin-1.51-481.el9.noarch.rpm e6d94cae502308a6c73082e3a129534a9f53039ea5d1c140a41bb31e6f9066b7 perl-interpreter-5.32.1-481.el9.s390x.rpm e7578335250b449c5d2db010cf975d2a807a3de66672ff2c8546dbe4d6f02e7d perl-IO-1.43-481.el9.s390x.rpm e82a9879dbb902597834bf23760377fb4436731e9308ef0b2de9a57bedeebaee perl-Tie-File-1.06-481.el9.noarch.rpm ebf10d2b643333271e0c0f59840c6d3ea9a4a763bfaceb701ee7919fb4175834 perl-GDBM_File-1.18-481.el9.s390x.rpm ec257f5a8bcae2c88b82acd78e5d4c77a40b3bba1c60a9b6e7ca3f06c32e6cc4 perl-open-1.12-481.el9.noarch.rpm f4a9340b12509bd2533772f358d0a3f16358fd4ded743f4f12f26a86de351c76 perl-Hash-Util-0.23-481.el9.s390x.rpm f5655112e6def991e3fd8f93b45d7cad3871118e4b9516a819a8c4b548f07c02 perl-vmsish-1.04-481.el9.noarch.rpm fb332fbb8e44e8b07e4e67f11eddb425d9b0780e9a8ed186d8423a41e20ec1a8 perl-Unicode-UCD-0.75-481.el9.noarch.rpm fd21c4087b050631d8d1e120893fd07de627cd9ae0c8f48a8646ed631c44520c perl-English-1.11-481.el9.noarch.rpm fd7ec0810b6bd863ebfacfcc146c0416688f9df380c43790c32a515ac8750e7a ALSA-2024:2236 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvirt security update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fix(es): * libvirt: NULL pointer dereference in udevConnectListAllInterfaces() (CVE-2024-2496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libvirt-daemon-driver-nwfilter-10.0.0-6.el9_4.alma.1.s390x.rpm 0e618a1fd16e1c8f8443e30644c3e9a1d15a467f59c054c7b1bb906aeea9d5f1 libvirt-daemon-plugin-lockd-10.0.0-6.el9_4.alma.1.s390x.rpm 2c0ba99ed3f8c4933cda5dbd766cd76e62572fe0c58c025746db6bcc4d4dd88b libvirt-daemon-kvm-10.0.0-6.el9_4.alma.1.s390x.rpm 2ea849a2b70db6d344ac1c271765ddf0de61f5bdf0bf90b46891d35aa1005394 libvirt-daemon-lock-10.0.0-6.el9_4.alma.1.s390x.rpm 2ecb0393cc04f6f276a76abcc6cdb4a3758160454427c52832b391ad7eca489f libvirt-daemon-driver-secret-10.0.0-6.el9_4.alma.1.s390x.rpm 3080b95f48b18412ca0d3712ce0560b63bcd7ed2ce40cfb589fd71f831b0bc97 libvirt-daemon-config-nwfilter-10.0.0-6.el9_4.alma.1.s390x.rpm 36e66701002c6c4677e0b2f767ac2f26bec406d747842dfb897b4b60485722cd libvirt-client-qemu-10.0.0-6.el9_4.alma.1.s390x.rpm 382fe16157437aafe8467f8d2208446c4b6fe4d65ad75451eb23ea7dcc4a14a1 libvirt-daemon-driver-nodedev-10.0.0-6.el9_4.alma.1.s390x.rpm 48cb70c0806625f18d830fa031559625b26b7c609dc38cf5a2946db3bd474ec4 libvirt-daemon-common-10.0.0-6.el9_4.alma.1.s390x.rpm 5b7786b902e87eabeb2c83482929daa436e6f2b97a38c44a30787f72f57643f4 libvirt-nss-10.0.0-6.el9_4.alma.1.s390x.rpm 5b9d1b5a3e54023607f2aabc5d8ec069442d5d048976086b7ca67c6656d25c35 libvirt-daemon-driver-storage-scsi-10.0.0-6.el9_4.alma.1.s390x.rpm 5ce73e597a7486e5495c9433132d2d5f96491b577ea007657d0239e24f385b6b libvirt-daemon-driver-storage-core-10.0.0-6.el9_4.alma.1.s390x.rpm 608321cfd99b241ec2c1eb182af704ea11652a0b207b239b14950ef893798483 libvirt-daemon-driver-storage-logical-10.0.0-6.el9_4.alma.1.s390x.rpm 78a2a3611fd2afafc57edadc69a67488e907cd33d9f60a890a0697097c444aa1 libvirt-daemon-driver-storage-10.0.0-6.el9_4.alma.1.s390x.rpm 8c9fd6653a3cb021f57730dbceb6fece56d865c32b30d90d7f6b54da5ffbd618 libvirt-daemon-driver-storage-disk-10.0.0-6.el9_4.alma.1.s390x.rpm 91b4e5670ac7024ae695c106a8fd532e2bedba9cee811d6674811f2e61345201 libvirt-daemon-config-network-10.0.0-6.el9_4.alma.1.s390x.rpm 98dcc77189b441af3abdc691e92aee87a2d04d7497b2ff6a4281d56cfdec9737 libvirt-libs-10.0.0-6.el9_4.alma.1.s390x.rpm 98f298cba7d59c41db37df1d2f23cfb77c995c5c905b5cf54cf74ab6cbb025c0 libvirt-daemon-proxy-10.0.0-6.el9_4.alma.1.s390x.rpm a75ad9c7576694e29f969e4e22340e428233dd766303db19fc2178ca8463dd82 libvirt-daemon-driver-interface-10.0.0-6.el9_4.alma.1.s390x.rpm aa4d46fbcc6214111b871860e7d64f4aca94072798fd64967d2ca76653ec0192 libvirt-daemon-driver-storage-mpath-10.0.0-6.el9_4.alma.1.s390x.rpm b02c1d5617ae8565ad097e9fca38a230707f4073edefa7fd60df674a10f3a1d6 libvirt-daemon-log-10.0.0-6.el9_4.alma.1.s390x.rpm b12108190935ddbf93394c6750d599e1b0f9e1f76e69174122f3662a1dd23329 libvirt-daemon-driver-qemu-10.0.0-6.el9_4.alma.1.s390x.rpm c66fe67f553bd0edfa8b71abf17cdc66026fb3faea1bb8d5473ee67fd817753d libvirt-client-10.0.0-6.el9_4.alma.1.s390x.rpm d3b2e16b6bb6262677d1dd2a824c80b88f80a4ba69e68af4b61574072ad382bc libvirt-daemon-10.0.0-6.el9_4.alma.1.s390x.rpm de4df554548967707662aa54f9e3f25b92c2b86ac0885287015803510ddec241 libvirt-daemon-driver-network-10.0.0-6.el9_4.alma.1.s390x.rpm e93ca0cb32ba299c50fd2ddd932a4de0a07e4f59d7e521bbdc123f1742b1bc23 libvirt-daemon-driver-storage-rbd-10.0.0-6.el9_4.alma.1.s390x.rpm f8d7f8f33cce2d0088c931712ef374e312942c2fd1544a915b0e6061d0e6fbbd libvirt-10.0.0-6.el9_4.alma.1.s390x.rpm f9a286e5aa3e83f632b5534797cb85c676f5f5a7cc9ffd7b86611264c34c8559 libvirt-daemon-driver-storage-iscsi-10.0.0-6.el9_4.alma.1.s390x.rpm faeab53b7044c9c45c6f297a12e43bc87dee2473a51ac2934a2bf5f94e9bcd21 ALSA-2024:2239 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default skopeo-1.14.3-0.1.el9.s390x.rpm 8d6ff5f61f5d6be4e458c14e5295814bd9b20be572a7714682f3eaecd97eaa15 skopeo-tests-1.14.3-0.1.el9.s390x.rpm f86bb1ed60a0ef5ce873f0ce0fb7d9f60056cf9827935ae42214f04f4407cdbd ALSA-2024:2245 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-1.33.6-2.el9.s390x.rpm 271fa7bdb4b4c44dd65b584284ce1016899bf9f5dc85139b24bec807cc17f2b7 buildah-tests-1.33.6-2.el9.s390x.rpm 67bc5eff13f5c0ea02cef144f2cc195ed910ca15449c6fd516fc2a9656dc243c ALSA-2024:2246 Copyright 2024 AlmaLinux OS 0 1 Moderate

ansible-core bug fix, enhancement, and security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): * ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration (CVE-2024-0690) Bug Fix(es): * Update ansible-core to 2.14.14 (JIRA:AlmaLinux-23783) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default ansible-test-2.14.14-1.el9.s390x.rpm 41bf53e74bb3aef3ef3864c1d89cd44cfd3d24ae23cf7589f462c2fa887710f8 ansible-core-2.14.14-1.el9.s390x.rpm 684f6470b4a3ce836abe2b0d3c3e1c9216e69ca5c6d8da11abf7e0e8537f2dc9 ALSA-2024:2272 Copyright 2024 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-2.el9_4.s390x.rpm fc936d003814d66424c98bb3e7f7cee45d4fa779a81af7b8499481cafb3d8649 ALSA-2024:2276 Copyright 2024 AlmaLinux OS 0 1 Moderate

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: incorrect integer overflow check (CVE-2023-51714) * qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default qt5-qtbase-devel-5.15.9-9.el9.s390x.rpm 49a0efee80b8b9f41f542343c1f11258f261e5715c9a6c008fd5218ac58de7ce qt5-qtbase-mysql-5.15.9-9.el9.s390x.rpm 8eb0f33eaecc8d4eb5f74ef54fc90e4b8b5c1edd83f4381531c9083c1e93348f qt5-qtbase-examples-5.15.9-9.el9.s390x.rpm 9110941496d9faed3edc7bbe89cdedb815a28f00bbf90d4417e173bee4acfb42 qt5-qtbase-postgresql-5.15.9-9.el9.s390x.rpm 9dfb83c057fa8b11c5d26878826c89967ef2766a3b38e00adacd2a9307433cd2 qt5-qtbase-gui-5.15.9-9.el9.s390x.rpm b85182a05d9a656050d13dc2581eae8dff14acd607e7b9ceb2e4d90d7b6dcd92 qt5-qtbase-common-5.15.9-9.el9.noarch.rpm dd44a1f1ae33d4b240175f6bde45a73c18ddc2ab5ccd92b5fe97ccb8ed0fc99f qt5-qtbase-odbc-5.15.9-9.el9.s390x.rpm e253f7b0d3d308664723bb6d0ed833956ce3124e6a3f7ff76e20933b2c3ec7b5 qt5-qtbase-5.15.9-9.el9.s390x.rpm fcfe5e4d689bb7a9506dda0243fbd9dd9521a8cebf28a61ee55c18b7b6b35b84 qt5-qtbase-private-devel-5.15.9-9.el9.s390x.rpm ff0af1ac28c0441cf9fc020eddd8fdaa132841c96789c1a2beb17a2597390c83 ALSA-2024:2278 Copyright 2024 AlmaLinux OS 0 1 Moderate

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default httpd-tools-2.4.57-8.el9.s390x.rpm 0b31627a8d5248d6f06bdb6ba9ec26b4ff4325ce50b8bbe329fd3982d105fbe2 mod_ldap-2.4.57-8.el9.s390x.rpm 2a688be449a1ec12a8313ef123d130a6e8605bc3ed3c0006ea757bf61b88385d httpd-2.4.57-8.el9.s390x.rpm 2a9f21d9eda84782ef09cf50531091aa30073d6ae3f8bb071e081c55d1e0dd22 httpd-filesystem-2.4.57-8.el9.noarch.rpm 2ab36a5c74e62f31f570c01fe4312b7e8d60488429e28e07a8a5395b005f68e0 mod_lua-2.4.57-8.el9.s390x.rpm 2c4cd71775146547c0cfb3688eee6234b20e5cc665f82fd75860c6a0207acd35 httpd-core-2.4.57-8.el9.s390x.rpm 2fb70c253e67725db75c63264c096dadfbf9850134f8b1037720cc577e36691c httpd-devel-2.4.57-8.el9.s390x.rpm 431e1cb3ebf8f91537ff01caec9ef32b4b29bc8c207e5c1816f2cede8366012c mod_session-2.4.57-8.el9.s390x.rpm 4b9a678901aa022f550f290f3c037cb27e805a59cc5b537bb9315f18476b04f8 mod_proxy_html-2.4.57-8.el9.s390x.rpm 737227f7c5d0ed303093ab9cfe1458c69ba36b8bac5a1bac43b46eb99434e1b9 mod_ssl-2.4.57-8.el9.s390x.rpm 7dbfa23e9dc1b1b29dfca4e107fc9d9ed90888642fe378636ec3d07a0add58c1 httpd-manual-2.4.57-8.el9.noarch.rpm fbcf58ec068a000054e200feb51f9895f88c020e0957e544f35b5c450e8dc47b ALSA-2024:2287 Copyright 2024 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474) * gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475) * gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476) * gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gstreamer1-plugins-bad-free-1.22.1-4.el9.s390x.rpm 5ad4f98a8d5670f69af34ca6a35a881948abb50b629722afa429175326eb8886 ALSA-2024:2289 Copyright 2024 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090) * libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618) * libtiff: integer overflow in tiffcp.c (CVE-2023-40745) * libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175) * libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libtiff-devel-4.4.0-12.el9.s390x.rpm 062cbd864cef9021e9a2c706a4ab4cc32e7bd025d291031a497589da9f64596c libtiff-4.4.0-12.el9.s390x.rpm 4ffb9a2dee15cf0e01150fec685200f1072ad120d8b6f66b208c95138067c229 ALSA-2024:2290 Copyright 2024 AlmaLinux OS 0 1 Moderate

mutt security update

Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP. Security Fix(es): * mutt: null pointer dereference (CVE-2023-4874) * mutt: null pointer dereference (CVE-2023-4875) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mutt-2.2.6-2.el9.s390x.rpm 271ee9ec47fcb2be6bf0c5deae82853a231431ab38ee8820029504c82633b3c0 ALSA-2024:2292 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-tkinter-3.11.7-1.el9.s390x.rpm 0ea385bcce98236441d7cc0d4dad2715a8dbcbc3a53dd75445b075173ecd0aff python3.11-3.11.7-1.el9.s390x.rpm 1b0e5af2f5470d8cd8f230e588df336c07995fb9e1f953bb49956ec93883bb88 python3.11-libs-3.11.7-1.el9.s390x.rpm 42d1fcd46927d9e2873ebc1e538494aa507598aeb5ec38fdd61c44f010ae3ea4 python3.11-devel-3.11.7-1.el9.s390x.rpm ed4327d387da194b6819cb21eb07cfde5dca345fbb73a6230cbe5231a216e361 ALSA-2024:2295 Copyright 2024 AlmaLinux OS 0 1 Moderate

libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fix(es): * libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libjpeg-turbo-2.0.90-7.el9.s390x.rpm 3801bb7e60ea4fe3fc9e047ff863a56d1a958a943325e25457f9b48a2e8bccff libjpeg-turbo-devel-2.0.90-7.el9.s390x.rpm bed7d426effc1e492258249a157d02e985910d9b975aa8701b70b51a7e2aa403 libjpeg-turbo-utils-2.0.90-7.el9.s390x.rpm ea699d88c344a6baa3f4d2b3f7b4ee0e481cfc21b8ca6351d71e9f532a1e8a70 ALSA-2024:2298 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Use-after-free bug in DamageDestroy (CVE-2023-5574) * xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default tigervnc-selinux-1.13.1-8.el9.noarch.rpm 1b4bc52ba827c1770a7def1186a1504849384f92f681963770b92aedaf8430cf tigervnc-1.13.1-8.el9.s390x.rpm 5ec413cd7a553b519f6ebcbedbb666e0c3a11ce9dc778a5e65b2942556af8767 tigervnc-server-1.13.1-8.el9.s390x.rpm 7ef5ff1d6e1684a82455f683a2c9ae6f58eac24dea4977b089718ef0e396d1ba tigervnc-icons-1.13.1-8.el9.noarch.rpm 979a5550d7a93b3b7c3315d677c68e470613c62749d044aff57d64a6f23d6153 tigervnc-license-1.13.1-8.el9.noarch.rpm bd0c418ae3f80bd20978191c7c8771eaa24e156fe3f255c792c2af4e8869ec28 tigervnc-server-module-1.13.1-8.el9.s390x.rpm d4d4fb550a295cb252cdd3fb0dc075695c873cda3d076d3b7bd735b5e4d72d39 tigervnc-server-minimal-1.13.1-8.el9.s390x.rpm de2faddfa3d8bb99f9c43c39e1375055453f9ee02cc06911537c18945f6ad434 ALSA-2024:2302 Copyright 2024 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer-plugins-base: heap overwrite in subtitle parsing (CVE-2023-37328) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gstreamer1-plugins-base-tools-1.22.1-2.el9.s390x.rpm 095fdff4d123cf7b6fe103b41291b1441a73239ad0363b857965f4bb5d363b22 gstreamer1-plugins-base-devel-1.22.1-2.el9.s390x.rpm 50bfebbd5ef321a4ee08718bf70513945838935297e1ad9ed6ec5bd7bccc6195 gstreamer1-plugins-base-1.22.1-2.el9.s390x.rpm a72867f2131a9864acde3ad1a6608c44b660095b84b69167b757ea4ef4993f51 ALSA-2024:2303 Copyright 2024 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling (CVE-2023-37327) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gstreamer1-plugins-good-gtk-1.22.1-2.el9.s390x.rpm 96857a86d361ccc666308ade3fab1917031dd1b887adc1d77c72c2bfe62161f5 gstreamer1-plugins-good-1.22.1-2.el9.s390x.rpm d85f1ccf62b2573cabbcc785cf172f303d987c729db6cb19f30367c4aced3532 ALSA-2024:2337 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-cryptography security update

The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers. Security Fix(es): * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-cryptography-37.0.2-6.el9.s390x.rpm b5f777b80c421bb63778a2b538c8a98f59c4e31459505e0768f89a84bbea36b1 ALSA-2024:2348 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-jinja2 security update

The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Security Fix(es): * jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-jinja2-2.11.3-5.el9.noarch.rpm 26ea89d6c53af8b9395a9165cc42afafb92cb1bb71b81bffbed08898e33a2487 ALSA-2024:2366 Copyright 2024 AlmaLinux OS 0 1 Moderate

freeglut security update

freeglut is a completely open source alternative to the OpenGL Utility Toolkit (GLUT) library with an OSI approved free software license. Security Fix(es): * freeglut: memory leak via glutAddSubMenu() function (CVE-2024-24258) * freeglut: memory leak via glutAddMenuEntry() function (CVE-2024-24259) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default freeglut-devel-3.2.1-10.el9.s390x.rpm 6425cc3ca012681348468836ab808bf5843b86f546f9ea9ea9ce1398eb28fe2a freeglut-3.2.1-10.el9.s390x.rpm dec2a365426bdc12ac8439045fc93f657cc70ee348c152c32556b6ad2216f512 ALSA-2024:2368 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_http2 security update

The mod_http2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: mod_http2: DoS in HTTP/2 with initial window size 0 (CVE-2023-43622) * mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) (CVE-2023-45802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mod_http2-2.0.26-1.el9.s390x.rpm edddcc9b8fcc5e1a318b3136aa8f784ba1aade9452cb270b086be95a68df9953 ALSA-2024:2377 Copyright 2024 AlmaLinux OS 0 1 Moderate

zziplib security update

The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default zziplib-0.13.71-11.el9_4.s390x.rpm 56f1f8f0a483727b82fed0b0b20f65c71b0585bfab50875ed4e7b6697f5886bf zziplib-utils-0.13.71-11.el9_4.s390x.rpm 5e0f384880ecd264f253dd94f6dabdc1a09942a12a69dde26502dd30a8888729 ALSA-2024:2387 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_jk and mod_proxy_cluster security update

The mod_jk module is a plugin for the Apache HTTP Server to connect it with the Apache Tomcat servlet engine. The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Security Fix(es): * httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure (CVE-2023-41081) * mod_cluster/mod_proxy_cluster: Stored Cross site Scripting (CVE-2023-6710) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mod_jk-1.2.49-1.el9_4.s390x.rpm 1dbf1bfbfc9c76b3feb16feb3854b21cec86a5cc24b2283265958db4b6b69ee9 mod_proxy_cluster-1.3.20-1.el9_4.s390x.rpm 40ee496dba076c0a85cc45936df0df60274f659a9273e51d850d5a2e10800879 ALSA-2024:2394 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546) * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582) * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555) * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480) * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448) * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934) * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040) * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531) * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931) * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023) * kernel: irdma: Improper access control (CVE-2023-25775) * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464) * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866) * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083) * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194) * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756) * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863) * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) * kernel: mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489) * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522) * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581) * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578) * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580) * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610) * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565) * kernel: tls: race between async notify and socket close (CVE-2024-26583) * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584) * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585) * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586) * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593) * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609) * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176) * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476) * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-zfcpdump-devel-matched-5.14.0-427.13.1.el9_4.s390x.rpm 44005a7f1d50c1e8a68b15ee316a603d4661ee890a68e3537c3c756d3ae1179d kernel-zfcpdump-devel-5.14.0-427.13.1.el9_4.s390x.rpm 4db8893c0cc9f2ac93489d461bd36d74098a6194e0818125a4e67ecc12af09ac rv-5.14.0-427.13.1.el9_4.s390x.rpm 6cdf73a13a3c4f2f3cef6f66e39d79b9f5d8ca53dcef7ba057b268ebdfd1b870 kernel-debug-devel-5.14.0-427.13.1.el9_4.s390x.rpm 7396186306e4659013666eccd6de26c0bec946f9cff266ae0db24aad87a82a90 kernel-headers-5.14.0-427.13.1.el9_4.s390x.rpm 810e9741ca19b4ea21a54fe01dbdff8c13e4ae0376acc89ca0f807be069ac204 kernel-devel-5.14.0-427.13.1.el9_4.s390x.rpm 9317cf76b5a04ad3ad417945f138dc1691a8fdb429e5e424d1ea19f40d4d940d rtla-5.14.0-427.13.1.el9_4.s390x.rpm a756d909a567729b6958d69e0bcfbabfc0f10e4da5db100e09cf600f64c00e09 kernel-debug-devel-matched-5.14.0-427.13.1.el9_4.s390x.rpm b46dcb19a9381853469d6f2a8eee1077fa69f604bc8839204f796afaf9a92bd3 kernel-doc-5.14.0-427.13.1.el9_4.noarch.rpm b67841ac61f12b5f5a84ccb263ccb3c6d9369085ada5f0bd898995885898c7ec kernel-devel-matched-5.14.0-427.13.1.el9_4.s390x.rpm cc43f06b2c11fec74a13d9e6b3b24cede324567acb50f5935e70aa3aec647abf perf-5.14.0-427.13.1.el9_4.s390x.rpm f3198b6535b378f3419654b86b23cc20e013fb4e120af831658414408adab7b5 ALSA-2024:2410 Copyright 2024 AlmaLinux OS 0 1 Moderate

harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine. Security Fix(es): * harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks (CVE-2023-25193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default harfbuzz-devel-2.7.4-10.el9.s390x.rpm 37a722815691c7ef201e376bbea3145b3bc03f2186a3c341b893f95bdfd3bb2e harfbuzz-2.7.4-10.el9.s390x.rpm 41712944238648492b1c29fc8379782fe8869fc2ad9151363a710088321aa4a0 harfbuzz-icu-2.7.4-10.el9.s390x.rpm 647c133c879eab3848bcd0f66ee84acbbd0f415e4898932fc06c1524a94755ee ALSA-2024:2433 Copyright 2024 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469) * avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470) * avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471) * avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472) * avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default avahi-glib-0.8-20.el9.s390x.rpm a23db422b279474ae07119e399e120efa0096979cfe8a6ecc8bb0c51c1e841fc avahi-tools-0.8-20.el9.s390x.rpm aa6852f40daa4490e5ac802a43e8eb06c6ba8651ba84a4ae172b6f9d956d3e00 ALSA-2024:2438 Copyright 2024 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: allowing unprivileged user to block another user namespace (CVE-2024-22365) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default pam-devel-1.5.1-19.el9.s390x.rpm 17f58398ddc09c50d2f543d0a406894bc57de1fa8bc37371b15008893b187377 pam-docs-1.5.1-19.el9.s390x.rpm cdf205092f062bc5d59166d34425f482b588c90c8b3d16b3f0c2e05889cfd781 ALSA-2024:2447 Copyright 2024 AlmaLinux OS 0 1 Low

openssl and openssl-fips-provider security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975) * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446) * OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817) * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678) * openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129) * openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237) * openssl: denial of service via null dereference (CVE-2024-0727) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default openssl-devel-3.0.7-27.el9.s390x.rpm a9b6f2800503a2d199717f9c57b36f5a8aa8da761961a8e043d3ef2a3aa9dc8b openssl-perl-3.0.7-27.el9.s390x.rpm d3ee05bd35fa9648b874d7dfc82867205412da2d8defd39619666e32094099da ALSA-2024:2463 Copyright 2024 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default systemd-devel-252-32.el9_4.alma.1.s390x.rpm 5ce8db9b3a059576ee280b4743c46304d515513e06c0380e2bf63b4022d5cd03 systemd-journal-remote-252-32.el9_4.alma.1.s390x.rpm b6b7f173e281d758600545c0b978cb5197946bdbd553a8c9655199950ac9dbba ALSA-2024:2504 Copyright 2024 AlmaLinux OS 0 1 Low

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004) * libssh: Missing checks for return values for digests (CVE-2023-6918) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libssh-devel-0.10.4-13.el9.s390x.rpm 0ee9aa4b6b5765f1135935919ddcb73d02ed6a622eb8fe57cb0ceb63fee90423 ALSA-2024:2512 Copyright 2024 AlmaLinux OS 0 1 Low

file security update

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats. Security Fix(es): * file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-file-magic-5.39-16.el9.noarch.rpm 62fb8e14b9695ce3cc2bd865118725b0051215cac1cc03649dc2308fb701bcae ALSA-2024:2548 Copyright 2024 AlmaLinux OS 0 1 Moderate

podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: * podman: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786) * podman: buildah: full container escape at build time (CVE-2024-1753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fixes: * liveness probe not called by podman when using httpGet (JIRA:AlmaLinux-28633) * Unable to copy image from one virtual machine to another using "podman image scp" (JIRA:AlmaLinux-28629) * [v4.9] Backport two docker CLI compatibility fixes (JIRA:AlmaLinux-28636) * Issue in podman causing S2I to fail in overwriting ENTRYPOINT (JIRA:AlmaLinux-14922) * Need to backport podman fix for SIGSEGV in AlmaLinux 9.3/8.9 for UBI based containers (JIRA:AlmaLinux-26843) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default podman-4.9.4-3.el9_4.s390x.rpm 48402bd0fb0a16967674d3601f4db871d016e4fa7b4d425897d75f9bb3929f6c podman-plugins-4.9.4-3.el9_4.s390x.rpm 7dff49b06f1aea0f079b9de987cb23e326e0b44c7f682e9c2e0841fd9c8da06f podman-remote-4.9.4-3.el9_4.s390x.rpm 9677aef4f072fafcbd132e3b2a4ec028a5b53c7c5a0672397f5528afdcd70157 podman-tests-4.9.4-3.el9_4.s390x.rpm a5000827c76c68c65dd24018b7032e1093ae7493c95c061a358da45df9e39eb5 podman-docker-4.9.4-3.el9_4.noarch.rpm edc23a43c6ee0d766ffe41a44709a24a1f5464266842fb1c10b47288866212f0 ALSA-2024:2549 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786) Bug Fix(es): * TRIAGE CVE-2024-24786 skopeo: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [almalinux-9] - AlmaLinux 9.4 0day (JIRA:AlmaLinux-28235) * skopeo: jose-go: improper handling of highly compressed data [almalinux-9] (JIRA:AlmaLinux-28736) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default skopeo-tests-1.14.3-2.el9_4.s390x.rpm 337a9c0a5b3833120b8416e9f59593a895387a2b47ebc567564e98f0f77377c0 skopeo-1.14.3-2.el9_4.s390x.rpm e95a30993a7de472be93715ef4c0aeb14d0a91f7972e3d09ca759f5cc8d6c23f ALSA-2024:2550 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Bug Fix(es): * TRIAGE CVE-2024-24786 buildah: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [almalinux-9] AlmaLinux9.4 0Day (JIRA:AlmaLinux-28230) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-tests-1.33.7-1.el9_4.s390x.rpm 6a84705764f14026e26df62c0cd3284ccca0914b8bfb458912f4a2a082d8bc73 buildah-1.33.7-1.el9_4.s390x.rpm f429d8dc39b9a0cd835ac1b7e888b2ddd5b599b5859a4eca86b5f1900cadf029 ALSA-2024:2551 Copyright 2024 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868) * bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516) * bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679) * bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517) * bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408) Bug Fix(es): * bind-dyndb-ldap: rebuilt to adapt ABI changes in bind For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-bind-9.16.23-18.el9_4.1.noarch.rpm 3353e9654688cd38306bd37aa10893fbfae95a52fc000889d856ce6c964dfd28 bind-license-9.16.23-18.el9_4.1.noarch.rpm ae7bf12a28a5753931c0725bf5b9bbea371aa3cbefdd5fe0075bedd29c59be6a bind-libs-9.16.23-18.el9_4.1.s390x.rpm bd375fbdf9e6af651316f0cb2677a847f55ff03aab99d51847370b1b43e73ef6 bind-dnssec-utils-9.16.23-18.el9_4.1.s390x.rpm cfa95b34c82b7fa734a95f2213229dda189990dea4b11a17fc70d38fc52db571 bind-utils-9.16.23-18.el9_4.1.s390x.rpm d651fd40033b2bee4c988f1084686e959cdaf8e11af9de733fc41dce97b8165e bind-dyndb-ldap-11.9-9.el9_4.alma.1.s390x.rpm d96b3bf06c0ef711f24a821f5e74c28c329aed8209e4697a4541e8f4d8feb709 bind-dnssec-doc-9.16.23-18.el9_4.1.noarch.rpm e4388e0eef62d2414d5a5aee824ba06b2443eea617ae13bfeac580a1f2ea3939 bind-chroot-9.16.23-18.el9_4.1.s390x.rpm f619354188b2370021b502de0b9b0d16e4b1c3d9e23d3362f1d6ee6ddc92c46d bind-9.16.23-18.el9_4.1.s390x.rpm fe48569595f8a63c043dfba3fb75994da60f4f588dd4f122a1ef29d70ca57c1a ALSA-2024:2559 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-jwcrypto security update

The python-jwcrypto package provides Python implementations of the JSON Web Key (JWK), JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Token (JWT) JOSE (JSON Object Signing and Encryption) standards. Security Fix(es): * python-jwcrypto: malicious JWE token can cause denial of service (CVE-2024-28102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-jwcrypto-0.8-5.el9_4.noarch.rpm 93ea7fb7badf93b8413264ae4031101bd9e3faedcad0899428155e0068cf5575 ALSA-2024:2560 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvirt security and bug fix update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: * libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441) * libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fixes: * libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081) * libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libvirt-daemon-plugin-lockd-10.0.0-6.2.el9_4.alma.1.s390x.rpm 12b653a50520064035d51a7d479f94a1a2d5f3999099d3badef21fa511ea9d2a libvirt-daemon-driver-storage-scsi-10.0.0-6.2.el9_4.alma.1.s390x.rpm 135f48ec1289f98409bbeda3035b705024dfd35c3134aef129019adb450ed7eb libvirt-libs-10.0.0-6.2.el9_4.alma.1.s390x.rpm 16ea35166ef2de3bc780fcc06ee14161087786089e77ae2e0b18335e81731913 libvirt-daemon-proxy-10.0.0-6.2.el9_4.alma.1.s390x.rpm 1747a19921662cefd13c3efd565aad08f4014bd768da61770e2f40f1dbe0bf66 libvirt-daemon-common-10.0.0-6.2.el9_4.alma.1.s390x.rpm 200fe39a5949181c8a9f9dfa776db77344f4ec48fcd1f463e13dc61040be59f0 libvirt-daemon-driver-network-10.0.0-6.2.el9_4.alma.1.s390x.rpm 2b7d55e3bd042ad2825bf377db12b42f09b80cd15eb34e64aca47f499294499c libvirt-daemon-driver-storage-iscsi-10.0.0-6.2.el9_4.alma.1.s390x.rpm 2f8171240f189201ead53e3a90a2b24d9996e66fa38349f7ae5be8d44b166456 libvirt-daemon-driver-interface-10.0.0-6.2.el9_4.alma.1.s390x.rpm 361f9b43a7759b52bb64c537e939f4d2add370e297d2aab766c71f1867121db4 libvirt-daemon-lock-10.0.0-6.2.el9_4.alma.1.s390x.rpm 363b691fca8e81129de3d863364ae7c420ad73395d31eb45dc58d0c436f27a32 libvirt-daemon-log-10.0.0-6.2.el9_4.alma.1.s390x.rpm 3d11f3cc96a714237edcea14246fe0ea541a6b25b2f7fb56498e11aa9f6c0f95 libvirt-nss-10.0.0-6.2.el9_4.alma.1.s390x.rpm 41d6e69c377240cc7c1b038465c5fe728559bf681c540abcf7a54bc0b1442455 libvirt-10.0.0-6.2.el9_4.alma.1.s390x.rpm 45d485b4050f34d9708bd667668720bbf5198f1124a3bdfd5a8fce200af47cdf libvirt-daemon-driver-storage-mpath-10.0.0-6.2.el9_4.alma.1.s390x.rpm 54f717aff02127c6591c0bdd83413e70aff0af0e4dd3caa9c2dc82fcf3fd378f libvirt-daemon-driver-storage-rbd-10.0.0-6.2.el9_4.alma.1.s390x.rpm 5915a39a1b0255c43c044329c2eb835a11b7baddc8bb353f40139acc66c39b88 libvirt-client-qemu-10.0.0-6.2.el9_4.alma.1.s390x.rpm 59b425a439a71dc27f73e83945b880626b6b31c3bce072760f47afcddaef3023 libvirt-daemon-driver-qemu-10.0.0-6.2.el9_4.alma.1.s390x.rpm 79af3e94acfa961841f0a9a64164033b6cc3d196f81df2fde571739ad36c6c5c libvirt-daemon-driver-nodedev-10.0.0-6.2.el9_4.alma.1.s390x.rpm 86900905fd2ec4264e3cdbc165e44783d1f3503c29356de423b54b415501a3c0 libvirt-daemon-driver-storage-disk-10.0.0-6.2.el9_4.alma.1.s390x.rpm 8f9ee599376feefb2d5717f2cd7b75548844deb12b25ee66628f241b1ed13c86 libvirt-daemon-kvm-10.0.0-6.2.el9_4.alma.1.s390x.rpm 9454a3d5a46d5e066847c90dc4c7ddf7bc560c7ef56b607d3b871a1963b0ccf1 libvirt-client-10.0.0-6.2.el9_4.alma.1.s390x.rpm 9d6d43e91e8d4fc7aafe16a44433ba8d26ee36fa0d0555d47b8e40d0b491a619 libvirt-daemon-config-network-10.0.0-6.2.el9_4.alma.1.s390x.rpm 9df1be57657a2794bd30a00f6893a0876471ed47d37bda7d8756b693b5debdda libvirt-daemon-driver-storage-10.0.0-6.2.el9_4.alma.1.s390x.rpm bb7176f0e938933d8fb131dce3b2e13eff9ea73345d000a93defc3bc7961a38d libvirt-daemon-driver-nwfilter-10.0.0-6.2.el9_4.alma.1.s390x.rpm be38d53f002b46db782be05aa3bc614b5afa9778ae48f95837684fd39f1cc89b libvirt-daemon-driver-secret-10.0.0-6.2.el9_4.alma.1.s390x.rpm c479171196df2eda2b9446b1a6d0005be0089403a3df0077a4652abd97c73b41 libvirt-daemon-config-nwfilter-10.0.0-6.2.el9_4.alma.1.s390x.rpm cf72464ffe12c4c602e4a72de3a4297513d599e57e8be3e7efb7fb7943d4d0d4 libvirt-daemon-driver-storage-logical-10.0.0-6.2.el9_4.alma.1.s390x.rpm d32142a1b5a915b9c1802f2cdfcf1a10e069aedeaef7fd35cafb691d1f76d00b libvirt-daemon-driver-storage-core-10.0.0-6.2.el9_4.alma.1.s390x.rpm d5a1b7d6086ff0acbce1261055c1ebec757f65a5f61d7ebf315d80749dfda80e libvirt-daemon-10.0.0-6.2.el9_4.alma.1.s390x.rpm d81107b600106ce6dadabacebc4e6d4e032ef4554218fe1776f9380e4aa335eb ALSA-2024:2562 Copyright 2024 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289) * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784) * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default golang-1.21.9-2.el9_4.s390x.rpm 457bc541ef8fcadfa9ebbfea453da05d5833212bc878cd729918423c51738627 golang-bin-1.21.9-2.el9_4.s390x.rpm 796dd6bf45e3bac5a2f68de98df787cf2c80934b95c6ca2b01625821b6d87785 golang-misc-1.21.9-2.el9_4.noarch.rpm a53b40dbec2876ebcdaf54a0f1575f5f7a0e75b6c82ad1bcc0d6acfef1b02fa5 golang-tests-1.21.9-2.el9_4.noarch.rpm a9a260ca1ee00ce2fbd31e1d9c44bfdfb901f9b21fac658b0efd08596d6e3009 go-toolset-1.21.9-2.el9_4.s390x.rpm b4149163db5df196fcf5cda7ec48d038d6807e9910bc344ccb17e6863669f3be golang-src-1.21.9-2.el9_4.noarch.rpm c896dc6ca35a3612feec754f9c5c5a1b0ec322576d34fa5ecf0846d4abe20afc golang-docs-1.21.9-2.el9_4.noarch.rpm f44154f1729f1277a3d8cbb6eee053a8617f3d0d2542d6f824d2fe978a0455ea ALSA-2024:2564 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * mod_http2: httpd: CONTINUATION frames DoS (CVE-2024-27316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mod_http2-2.0.26-2.el9_4.s390x.rpm 89e634276578f4902e9ec136a7938242c21d68b9f1d1f5ba879ab8931d4bd588 ALSA-2024:2565 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libreswan-4.12-2.el9_4.alma.1.s390x.rpm ae7eff5b7a0dd06eaa6d84139a806130795b1ae9249f28aecd78e8034693e563 ALSA-2024:2566 Copyright 2024 AlmaLinux OS 0 1 Important

pcp security, bug fix, and enhancement update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default pcp-pmda-summary-6.2.0-2.el9_4.s390x.rpm 00bd0e7c06b2b918a44d2fe81ff6ed2843a64545ae5a78159a23d0a21bab88ef pcp-pmda-zimbra-6.2.0-2.el9_4.s390x.rpm 0702f7ebff7fcaa00f5ae3b283935215b9572081527e4a543c07a7fe1cd2ecb3 pcp-pmda-redis-6.2.0-2.el9_4.s390x.rpm 0a3d292a0cab705d86267aea961ba17508046a662ca024b75e17c733e229fe11 pcp-pmda-slurm-6.2.0-2.el9_4.s390x.rpm 0d848915ad47bc0e5e54e1bf3ef60a9a5af01a0a7173e820cd23873b854777ef pcp-import-mrtg2pcp-6.2.0-2.el9_4.s390x.rpm 0e253bce2a8056c2c1818b3f21dd68a9a59a3f287d4ca41403a1b0ae39abe388 pcp-pmda-sockets-6.2.0-2.el9_4.s390x.rpm 11d0185dc0744cbeb650b0fb2b5cabd8cc1730076c2df2e074b2bf32cfd652e1 pcp-pmda-zswap-6.2.0-2.el9_4.s390x.rpm 142e330b5f7c099f5372bdd4f67b8941f141d8909a4b7a6584b023813f531e31 perl-PCP-MMV-6.2.0-2.el9_4.s390x.rpm 1613f64331ea4fa99a193d3314700c953533de5c49deb55b34a77cc7e4728fe3 pcp-geolocate-6.2.0-2.el9_4.s390x.rpm 1691d59531a6c63b9cc25b64dc8d7f5caa4a91d446f22dd60e7ac5d25646dbb5 pcp-testsuite-6.2.0-2.el9_4.s390x.rpm 175b953a7e5f6fc31b8e2951efd1ff5db9b45690f9d4c2b8bb2043b0e1915655 pcp-pmda-smart-6.2.0-2.el9_4.s390x.rpm 1887d53b4882e83fea29fb16afb88fc58dcc3e8f6a567e7c88508d05e5023eec pcp-pmda-lmsensors-6.2.0-2.el9_4.s390x.rpm 1a55d5d4ffec6420655b541ed055f8d8451ae0c46465534e103d2a4b21eaa6f0 pcp-pmda-bpftrace-6.2.0-2.el9_4.s390x.rpm 1ccdb572d9091ee997fadf376cc9e15960df1c9829017b2b4a3a412138e514b0 perl-PCP-PMDA-6.2.0-2.el9_4.s390x.rpm 1cf5ebbdc652263ed2fc1ec753dac2d56759aca4954ea438db4ce2960cf68f72 pcp-pmda-postfix-6.2.0-2.el9_4.s390x.rpm 1e15adccb2e6d9be81e76e143b8f9c49bbb467744a2a87835781ad65e8f9244e pcp-pmda-farm-6.2.0-2.el9_4.s390x.rpm 1fbdad99008ae1cbb4ce081920e4b49ec7708926aefc0058bee16eac0a8c8dd0 pcp-pmda-systemd-6.2.0-2.el9_4.s390x.rpm 213b8e157082e8596f28a0e1b8d99c77db794977fb14535d3b8b1979ecf50294 pcp-pmda-json-6.2.0-2.el9_4.s390x.rpm 28256fb1a27aecb24d67bf34e3942754cff0c65c8d53dee483efd6f004a45862 pcp-pmda-rabbitmq-6.2.0-2.el9_4.s390x.rpm 291ffe26efc9f3b7665184ebf54513d7bc84e3a28e6efe47a92445bef5a8cec9 pcp-pmda-ds389-6.2.0-2.el9_4.s390x.rpm 30f6837fa0e0cff56fb2a60457a87f40ee306da8b5766330003b4c8695290d66 pcp-pmda-hacluster-6.2.0-2.el9_4.s390x.rpm 31d7bc8202575fb0aa5e0080fc73407e1cfc1e20666f201c16425e0845ebdb43 pcp-pmda-roomtemp-6.2.0-2.el9_4.s390x.rpm 37551658dea28b2ac5c8927b87e51c2619e5e1cb3176a1fd37932bf6045c5e80 pcp-pmda-dm-6.2.0-2.el9_4.s390x.rpm 39b8da603852b2255b292fd13170c8b689d01ff01a0cfbcd25cf61f631cc92e6 pcp-import-ganglia2pcp-6.2.0-2.el9_4.s390x.rpm 3f04709e3f60208db10044bc56e6262e6046eb1b1072d4e203a18a1b62233f9b pcp-pmda-gpsd-6.2.0-2.el9_4.s390x.rpm 453b3bd668ee513c871e137ec8ea7c9cf56399e6e7ad612a2811b21a97b47c1f pcp-export-pcp2elasticsearch-6.2.0-2.el9_4.s390x.rpm 4551a5e5600ae4a143e5a87d80f9f432a5f36b8ff145354b87369a67f5382c2b pcp-pmda-gluster-6.2.0-2.el9_4.s390x.rpm 4c70b2f161c18dd1ef12ade45b0e956b0550246b3c99e3eb09f24bf464578169 pcp-pmda-mysql-6.2.0-2.el9_4.s390x.rpm 4efe112bffeeca8d6a92fe0477e5af50649256fd6e0bbfd50791b39ba1525dad pcp-pmda-bcc-6.2.0-2.el9_4.s390x.rpm 50982dcee1dfa3079e54a75a9ff8935ef4962c051e84484def5aafe5d765227d pcp-selinux-6.2.0-2.el9_4.s390x.rpm 531e9aaeb40b0d2de8e528860cb0c87291f7c17b3f01a22934eb9f7e15f9b5da pcp-pmda-oracle-6.2.0-2.el9_4.s390x.rpm 546e78d0e49a5337578321a119c983302fb27ae0a6f1a35416dc9469add1597e pcp-export-pcp2spark-6.2.0-2.el9_4.s390x.rpm 55c1956f9d761c7af84e3c41216e93d6ec14407cfc9ff444418ad76ea3c0b550 pcp-pmda-snmp-6.2.0-2.el9_4.s390x.rpm 5afb4cba7a5abfcff6f4c219134fcddad791147d2cebfe828e3667fc76caaf65 pcp-pmda-podman-6.2.0-2.el9_4.s390x.rpm 5d9294ac8ff4e67205441251cd6d0a175a06eeb1086ee404fc829dc748db6b40 pcp-pmda-elasticsearch-6.2.0-2.el9_4.s390x.rpm 5e0ea7a5ced5526f5519ad0dd1876f0710f8a870d17597ebbb5b089d5f4377f5 pcp-pmda-news-6.2.0-2.el9_4.s390x.rpm 63b4455d91b67247a0e76980eaa62755830e2d7acfc57ca4f8a05e0451791571 pcp-conf-6.2.0-2.el9_4.s390x.rpm 66d1331c80d27d12c7014cdf3c5e95e7c826acb209ad14b96fb4421e68ef7a70 pcp-libs-6.2.0-2.el9_4.s390x.rpm 73639b409148d1d3cb531f0c99975591d2bdd95930dc3d37a9bf345489ca90bc perl-PCP-LogSummary-6.2.0-2.el9_4.s390x.rpm 73861f922fa829c56e52bf8cd253aaa570cba14f8005599844bad2f14d183e58 pcp-pmda-mongodb-6.2.0-2.el9_4.s390x.rpm 7843eb317c207dbde709b001df0a7b8a4a41ec861a5ad020ca3053cd7953fa60 pcp-export-pcp2zabbix-6.2.0-2.el9_4.s390x.rpm 79034143d117cb4b667bb8e03a084e2ea7aa5e9520e0531bc3971675fd4b6d51 pcp-pmda-memcache-6.2.0-2.el9_4.s390x.rpm 7f17b8b046495cd17586259e8305ef1012757ca75e41666e7c0498cda3055138 pcp-pmda-openvswitch-6.2.0-2.el9_4.s390x.rpm 8047bec6ca605414749fb49ff3c3d0db9d8001d3fc2bd17459f76f3d68ce375c pcp-export-pcp2json-6.2.0-2.el9_4.s390x.rpm 84b20af62feacb7fd12964496cb9bd93ea4336f14ba92e9c99baa408ae2fd0a0 pcp-pmda-bonding-6.2.0-2.el9_4.s390x.rpm 852e52933e2c83ee8427ea7c7d2c27e2f40a382773ead2618298a575fbe5c32c pcp-pmda-lio-6.2.0-2.el9_4.s390x.rpm 856f77a4db1136d9f6718b2ff2dbb636a9f39dd9e0b551268a0f690098c32fbd pcp-pmda-nginx-6.2.0-2.el9_4.s390x.rpm 8f91a90b7898cd6a7359c8ad4f4458a4ea72a5e589b2b3a58a46feeeee79ab11 pcp-pmda-mic-6.2.0-2.el9_4.s390x.rpm 8f94e42fbe29d756d5fbb7140601c5764a55f76f6a2c9d85edb6656a9935ddb4 pcp-pmda-lustre-6.2.0-2.el9_4.s390x.rpm 9036ea9d61a8b513f553ba8087be8ee2f5145d8ff1d8f6c4c5ff7c369f307354 pcp-pmda-netcheck-6.2.0-2.el9_4.s390x.rpm 95139eb90ebefd76f94de24e35b050573ee8c9225778ce3d453df736196d7f3f pcp-pmda-gfs2-6.2.0-2.el9_4.s390x.rpm 9c87cc685d838ef6d52bc7dbae930a757a9d72412bd97f26185a53f2f9f8284e pcp-pmda-samba-6.2.0-2.el9_4.s390x.rpm 9ddca5744559f71f5207145a5b605d2563e113a24143d501627603fa84a87ba8 pcp-pmda-mounts-6.2.0-2.el9_4.s390x.rpm a5a2a05d22f6e987dab7061e501527c241d83c66f48cef3d05770de0ee378238 python3-pcp-6.2.0-2.el9_4.s390x.rpm a82066e0079f898251d41a4a880913580730c23f885d56f46efe8cdfdd761d27 pcp-pmda-bind2-6.2.0-2.el9_4.s390x.rpm a99c87c306f773c8672401c7c131f682a493ae974396acd78e40ffe70021a340 pcp-pmda-bash-6.2.0-2.el9_4.s390x.rpm ad3982ef7c292ae115f245f4fafc419ddd94aec3e1685a7723460abb053f78bd pcp-pmda-openmetrics-6.2.0-2.el9_4.s390x.rpm ad976aecf438fd50741b1096c3f4a1ef954f9dedc96894898ac96d6013340303 pcp-pmda-shping-6.2.0-2.el9_4.s390x.rpm b140babdc4be8e1d6ac301b97857e2adf50a648645d00ab06d65bbb14aa26bd8 pcp-pmda-haproxy-6.2.0-2.el9_4.s390x.rpm b2d7c64aa5e023a84796f8452c42c42f7dcf139c324312b2b807af9ad55f53d5 pcp-pmda-statsd-6.2.0-2.el9_4.s390x.rpm b5460bda62575f76ff34521496245027661b68f3cafc6c2512d28cfe6d472d04 pcp-pmda-ds389log-6.2.0-2.el9_4.s390x.rpm b8a059a0e9107c9db8871f4a232666a66ac66e2a86442d5b29b772d226ef692d pcp-pmda-gpfs-6.2.0-2.el9_4.s390x.rpm bac7365e3cccc8d85053af1fcb66c532b429b1f4631d37a9ba14126074572a76 pcp-pmda-weblog-6.2.0-2.el9_4.s390x.rpm baf8c6a221d1d8d414d8102fe526031871b4b5492a0d9108a614bd2af1276f1f pcp-libs-devel-6.2.0-2.el9_4.s390x.rpm be0b004128f01a9fa077dd8aeb406f9776e9990e4c99593eae2fe576c33efc10 pcp-pmda-logger-6.2.0-2.el9_4.s390x.rpm bf52ab4c62b313ecfbcd08f6ba5b639630dcca30c41a7f87e90620797f8a1697 pcp-import-sar2pcp-6.2.0-2.el9_4.s390x.rpm bff53249527a57e95bf6b398a7bad0da6d8a9a038bb87ec5997fa95a73fdf120 perl-PCP-LogImport-6.2.0-2.el9_4.s390x.rpm c0de39ef878972d4a60a2d4192cd030fee89b6317d5384e9498bec191456514e pcp-pmda-lustrecomm-6.2.0-2.el9_4.s390x.rpm c32917f2d3931309f822f71c6bf0506ce632fd589f73aacc034d7ea435f9880e pcp-pmda-denki-6.2.0-2.el9_4.s390x.rpm c455ede17f5e8a37dd9c1c49b8c1fa8e2cb6b9e4c1257da07668a6707982dd4f pcp-pmda-trace-6.2.0-2.el9_4.s390x.rpm c522ac9020fe40d9c410f7264cec393dea72aafd5f15d6167b6102baa37125df pcp-pmda-libvirt-6.2.0-2.el9_4.s390x.rpm c5a8d544b7a7d33d20c70681d4ab645e3f549a8c495220f037d8a08e1099a74f pcp-pmda-named-6.2.0-2.el9_4.s390x.rpm c66a801149d81765b718d452bf93b46ce00f8de0b39f55f84f4c48c346dfaa10 pcp-export-pcp2graphite-6.2.0-2.el9_4.s390x.rpm cb8ca817efe391d4b86593360b48ce9d427c4bb189fb45586a98dc7a6e9ed70a pcp-pmda-sendmail-6.2.0-2.el9_4.s390x.rpm cd5ec9f6e9bf4ab3d91ab29ea4de48e265f59b3d00b1b1f0c7a810865165f2b5 pcp-zeroconf-6.2.0-2.el9_4.s390x.rpm cfeadae56e751af96a23926663b027a57eb7f1cd497336ed7ad89ff0ea255654 pcp-pmda-mailq-6.2.0-2.el9_4.s390x.rpm d12e11ae4afd9bd4b93bc1b6a945835c1209da71bf8b4433227333ec2f73eb29 pcp-export-zabbix-agent-6.2.0-2.el9_4.s390x.rpm d18f77bf1fe3a9d92186fef9ede844731a781c309cf7fd26930d259b700610f6 pcp-import-iostat2pcp-6.2.0-2.el9_4.s390x.rpm d1f1778d487715494ca5d7f9d6f7671815c24ebd5b2f39f0e932d93134db6edf pcp-pmda-netfilter-6.2.0-2.el9_4.s390x.rpm d431af5860fe79017b8c1ce3ff3c747d4926a074871b86896e738820891a963a pcp-pmda-docker-6.2.0-2.el9_4.s390x.rpm d71868864751ecec66db1b623f2f1d9b9252d3ba5ba24e9f824c15cd010c49de pcp-pmda-activemq-6.2.0-2.el9_4.s390x.rpm d8647afeb7d6320131c2987e68995e819440560872a2e68b6525829321a1357f pcp-system-tools-6.2.0-2.el9_4.s390x.rpm d948b7752377a6f026e6b022ad36c8a9589a102c5a8a1725a9dcc581199b6611 pcp-doc-6.2.0-2.el9_4.noarch.rpm d9ebf07165b85e07494e2a654f6430ae6d81a524001434e3cede4ee9f5d93b5c pcp-pmda-postgresql-6.2.0-2.el9_4.s390x.rpm dd3b521d1bfeca3b4e19c5e0c2f4ad3ee6e8ec54900090911c113a16534fb60b pcp-pmda-apache-6.2.0-2.el9_4.s390x.rpm de44c204a77c2abc774b11add98b2f9e66c48f96db070f73522cc128fff522af pcp-pmda-nvidia-gpu-6.2.0-2.el9_4.s390x.rpm e1190852129eaf8cbec51e6a1145a3cee08632b9a157f46ba4e63858e4dbb899 pcp-pmda-unbound-6.2.0-2.el9_4.s390x.rpm e235184738c3d5a5f32e5fc361e9df926ff4dc73072392efc8ee1a47dfb3ca1b pcp-pmda-cifs-6.2.0-2.el9_4.s390x.rpm e24c10b1a455585020711dce4b2291561cad0fc43530f63287210a4bd43163b1 pcp-pmda-rsyslog-6.2.0-2.el9_4.s390x.rpm e2dd13e7f61902c7fc6ea883504dd9002b9970b8b5fefffcbde0473a585be43a pcp-6.2.0-2.el9_4.s390x.rpm e47581415c9f85dc2c326de3ae5cd42f3077a8806265407c3e7c25119aadec32 pcp-pmda-pdns-6.2.0-2.el9_4.s390x.rpm e69d5b2e2cb34e5efd4802061f664ff7cbefa65c788d04bbe15f8d02865f6e2e pcp-pmda-nfsclient-6.2.0-2.el9_4.s390x.rpm e91e2309dc47c4c4204b340950e566f2dec724879e2f2ecb4003db32e42a3504 pcp-import-collectl2pcp-6.2.0-2.el9_4.s390x.rpm eb7ddc23e2cf271de59b9382faebc1fd22af4fdba8c9e13bb622a45b6274a1bc pcp-devel-6.2.0-2.el9_4.s390x.rpm edfdae4110d327f482b346564d6432a87514734b877bb61e9e7af3247b956571 pcp-pmda-cisco-6.2.0-2.el9_4.s390x.rpm f43ed865b43dbee2a1e7252fc16fc39fb3967584a0331d50db530f7a5aa112a6 pcp-export-pcp2xml-6.2.0-2.el9_4.s390x.rpm f558786f5a9b9bf52bb72a8f509642b28a8eb4413234f821dcc75b62a9917f43 pcp-gui-6.2.0-2.el9_4.s390x.rpm f71e352ce25e252eb04ac01447316794833531dc4e6f62913ed877a9bfb9792c pcp-pmda-dbping-6.2.0-2.el9_4.s390x.rpm f82034cd9e47bfeae52f422210470f926e08591db4e27f82ccc09768053a2ddb pcp-export-pcp2influxdb-6.2.0-2.el9_4.s390x.rpm f85338ba4918f52b14a2b87ed5bff497373d02568047971af8407423566b7db6 ALSA-2024:2568 Copyright 2024 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) * grafana: vulnerable to authorization bypass (CVE-2024-1313) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default grafana-9.2.10-16.el9_4.alma.1.s390x.rpm 39a865347fee0f74c1c9102aab4044f3c5f3392c95f31a4780b208bd6021732f grafana-selinux-9.2.10-16.el9_4.alma.1.s390x.rpm e218b764ed3fb8a1bdce479a5f1bd4a2fa84da84f8e32932d7d8ae9033d34f1a ALSA-2024:2569 Copyright 2024 AlmaLinux OS 0 1 Important

grafana-pcp security update

grafana-pcp is an open source Grafana plugin for PCP. Security Fix(es): * grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default grafana-pcp-5.1.1-2.el9_4.alma.1.s390x.rpm 21c2e83f802174b26945ad11e6b68424bbfab8624dcde703d4dacd59655e4353 ALSA-2024:2570 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) * gnutls: potential crash during chain building/verification (CVE-2024-28835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gnutls-devel-3.8.3-4.el9_4.s390x.rpm 366c5713c169f96c0c074124b7aebff39d4dbfcd356c3f7114c6d56baddf33ba gnutls-dane-3.8.3-4.el9_4.s390x.rpm 4e908018cef8a8452120963ad86ac91cba0d86b67ef14aed6a924e38d9a1f193 gnutls-c++-3.8.3-4.el9_4.s390x.rpm 7656fa22b659a9b422a0a5e947510ee4a6b49bd6f5781db3ae6f80ace70c2103 gnutls-utils-3.8.3-4.el9_4.s390x.rpm ba3a3e6387654ff3316b404d9369e20f61f63f4fc0b86587b617d45706a1e3b2 ALSA-2024:2571 Copyright 2024 AlmaLinux OS 0 1 Moderate

sssd security and bug fix update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758) Bug Fix(es): * socket leak (JIRA:AlmaLinux-22340) * Passkey cannot fall back to password (JIRA:AlmaLinux-28161) * sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default sssd-idp-2.9.4-6.el9_4.s390x.rpm ec316ed20cd59f83d8c87a01e2f757f406b6f7e2ca07d1a0a5a7e93e02bdf78b ALSA-2024:2616 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default tigervnc-server-minimal-1.13.1-8.el9_4.3.s390x.rpm 52a9f604559d6e2ba43959e344e4abe48342968ddccd4a5b529f0cbf7e77e97c tigervnc-server-1.13.1-8.el9_4.3.s390x.rpm 6749bf2f1ade1c4319e4cd99502367a5bc7f00b403eb4ffdb58dd72c3de631b3 tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm 88652459ddee8141a01cb5d645b69d58dedb3a05a9566afcaa09e66ea70b3603 tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm a1dbfd534a994217c669b5b8951f5cc408536fc21ed62f9ff803c3f2251e6efe tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm a421fb125245971d1fc8ec645d9ca3e6ced04403cb7342fa35834f4b276df45e tigervnc-server-module-1.13.1-8.el9_4.3.s390x.rpm df5b16866d49d917fdff14f9bd691fab9ea84f53400c0d4b2fd96c8eec6011d2 tigervnc-1.13.1-8.el9_4.3.s390x.rpm f504ce4661c8e0294100ce83757ec6e7d4aa8738a3d81d625a04c6d21c30716b ALSA-2024:2679 Copyright 2024 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: use-after-free in XMLReader (CVE-2024-25062) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libxml2-devel-2.9.13-6.el9_4.s390x.rpm d36a1856384075faf4543fcdc3a6f7d662c3b8311a00a663625bb3bcadc72ca9 ALSA-2024:2724 Copyright 2024 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288) * golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289) * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default git-lfs-3.4.1-2.el9_4.s390x.rpm 179991142ba9deeaa2de5e21626b82b6212ea9fc5a01c9f85e673d7554a9357e ALSA-2024:2758 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240) * CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743) Bug Fix(es): * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009) * mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235) * [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673) * system hangs completely - NMI not possible (JIRA:AlmaLinux-30678) * ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-debug-devel-matched-5.14.0-427.16.1.el9_4.s390x.rpm 025094d6df0075f2bf078ebd1f0dae0d2da93026cae4ae19120538785cf67c3d rtla-5.14.0-427.16.1.el9_4.s390x.rpm 034108f3d79519c2cc2de50a11fa3e83f222b08c72be7897946551966fe7d845 kernel-devel-5.14.0-427.16.1.el9_4.s390x.rpm 5b68f1eede99c00840242455271181b22fa16a360614cf96d1a9ee0e1bda68c2 kernel-doc-5.14.0-427.16.1.el9_4.noarch.rpm 6f78a2b532e7e545c5b2c34448a44f42fcf5ca898f3b3abba26b8a660583b7ff kernel-zfcpdump-devel-matched-5.14.0-427.16.1.el9_4.s390x.rpm 7756d44c8ec51afbd6bd1330fb184179e5ff01d9e36934e8c12563a6e4889e3f rv-5.14.0-427.16.1.el9_4.s390x.rpm 7ddf680dd2bcf14cdcad6597ffe45e9894a5341fa0c4ca09377ed9c11f931d03 kernel-debug-devel-5.14.0-427.16.1.el9_4.s390x.rpm 8cf54df6d0cb10ebe92b1808174bafd29ebfc149c235580c572d550a7f0ccc36 perf-5.14.0-427.16.1.el9_4.s390x.rpm 92f1b19476b986af7253743c9a9d6d8b62189d29c941a2361ed6c95f9d038445 kernel-devel-matched-5.14.0-427.16.1.el9_4.s390x.rpm cbd6cf68d489113032a7e2b2918f47d1604dfc1bc65d22b996511e7dc05c2bd4 kernel-headers-5.14.0-427.16.1.el9_4.s390x.rpm f1f991f49ab5691b3a225b24acc4330f1a63e24af93868e6535096c129e2655d kernel-zfcpdump-devel-5.14.0-427.16.1.el9_4.s390x.rpm f8bd250a8246cef003add1054ab4833929ecfa419ca4feca27ce3cb320a43d6d ALSA-2024:2779 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: CONTINUATION frames DoS (CVE-2024-27983) * nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025) * nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982) * nghttp2: CONTINUATION frames DoS (CVE-2024-28182) * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default npm-10.5.0-1.18.20.2.2.module_el9.4.0+99+a01f7676.s390x.rpm 131cd8beac23c513c7d525b077795b16f068d830c2e57bff7eff19ddccb1298c nodejs-devel-18.20.2-2.module_el9.4.0+99+a01f7676.s390x.rpm 3f26d8194c092068bd17c1efb605b2d1c84b18aa96c71124556f567babb55004 nodejs-docs-18.20.2-2.module_el9.4.0+99+a01f7676.noarch.rpm 5046029717db3f41b95ac1e0a4d7e166800f21dcaeb1f00767c2fdb2498e7df7 nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-18.20.2-2.module_el9.4.0+99+a01f7676.s390x.rpm 7d8175707b2c2f36e3e44f38d6ea23ceb05687aebf7e98630c209ee9ed2ac781 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-full-i18n-18.20.2-2.module_el9.4.0+99+a01f7676.s390x.rpm fe5591f91e88dca0ee96ec7df5c50878619df0b03989d6a2e86c590b71e20d4c ALSA-2024:2842 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5. Security Fix(es): * dotnet: stack buffer overrun in Double Parse (CVE-2024-30045) * dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default dotnet-templates-8.0-8.0.105-1.el9_4.s390x.rpm 11098d4de98ec09959ee4b178a9cb2dbc52f5f839e2a36e2998f2fc991e717ce aspnetcore-runtime-dbg-8.0-8.0.5-1.el9_4.s390x.rpm 11b6e255f613bfdf3d9ba5897f0e89a7ec642f4b32bb52c182831602f2b53e4c dotnet-host-8.0.5-1.el9_4.s390x.rpm 14ed3d38ade57b0147f1f418c7f8e5793c7ff7fb2f8464afd44c6be201650383 aspnetcore-runtime-8.0-8.0.5-1.el9_4.s390x.rpm 577826f6e12a5b410d16edfca9bda5c762fe758a59f591fc98af47a4ad559004 dotnet-apphost-pack-8.0-8.0.5-1.el9_4.s390x.rpm 5fc2e6baaf68f4e4b2af0cc779d0f217511f2f6249af7834731529468e30ef76 dotnet-sdk-8.0-8.0.105-1.el9_4.s390x.rpm 7813049549b39f110c62f8781ecd71036dc8f1af8b9a4149573e90543436e8ac netstandard-targeting-pack-2.1-8.0.105-1.el9_4.s390x.rpm 806f1208ae311f8f14a759fe8406f416143e7b59e564513f924560b33cd3f078 dotnet-sdk-dbg-8.0-8.0.105-1.el9_4.s390x.rpm a477348c0a2878f71a7761290873739a1e3d4949ac55866e860904adc1708ae9 dotnet-runtime-8.0-8.0.5-1.el9_4.s390x.rpm c20acf676ab6e85058eee6a33f2f028272268c34549bb9f8b8e5042076eb24b8 aspnetcore-targeting-pack-8.0-8.0.5-1.el9_4.s390x.rpm e100a691f27365182e11655511c51b45a74a8f55c81772afeefb0395e6195302 dotnet-runtime-dbg-8.0-8.0.5-1.el9_4.s390x.rpm f91bc5da82d6e6143a1b5bf911ce391cd4a203f256ce5f93a54e13bf66abb344 dotnet-targeting-pack-8.0-8.0.5-1.el9_4.s390x.rpm fb30fb4fa1ea75001ae16c34f906601c82ba8e59bf568472e6a821d2bbca87e4 dotnet-hostfxr-8.0-8.0.5-1.el9_4.s390x.rpm ffc2cbcbd9e411843af74b75599c5b7137cbc17690fd522b2ea9687f75e7cc46 ALSA-2024:2843 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19. Security Fix(es): * dotnet: stack buffer overrun in Double Parse (CVE-2024-30045) * dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default dotnet-sdk-7.0-7.0.119-1.el9_4.s390x.rpm 195f09b1cc820a174724c26c038efb07c45ff269f261f54f9ecd3b830f7a1554 aspnetcore-targeting-pack-7.0-7.0.19-1.el9_4.s390x.rpm 37e6494404601bb3a1b195db51f1d3fa4ab8a1476b68f88a3cc3c3cd86c82210 aspnetcore-runtime-7.0-7.0.19-1.el9_4.s390x.rpm 3ebece77eacdecf0ab3d02e8df4f5e3104fc5a0c970647a91c070ad383178c61 dotnet-templates-7.0-7.0.119-1.el9_4.s390x.rpm 421902584edd9fee5885176f0e3718a8be8553da69ab1a3cfcae161e94d51038 dotnet-runtime-7.0-7.0.19-1.el9_4.s390x.rpm bdbdf2284fef7799b7d96459c9a4b2e921d172c254b6decee5aa889e8fbca2db dotnet-hostfxr-7.0-7.0.19-1.el9_4.s390x.rpm c18114c6d2e3362cbee481f4b0e3cc83b26dcf8a41bfecd742429bb85a9e6cdc dotnet-targeting-pack-7.0-7.0.19-1.el9_4.s390x.rpm c47db1ccbb3ca7c0adbaca963a74d274e51086125ebd20a2a4296f524ab6edb4 dotnet-apphost-pack-7.0-7.0.19-1.el9_4.s390x.rpm df3a617017454d014e47fa51049d8082ceeb244090cc89dc28306b32a0462a78 ALSA-2024:2853 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) * nghttp2: CONTINUATION frames DoS (CVE-2024-28182) * nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025) * nodejs: CONTINUATION frames DoS (CVE-2024-27983) * nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default nodejs-docs-20.12.2-2.module_el9.4.0+100+71fc9528.noarch.rpm 0ba467930563644df03005a17524df078431cab3658d3ee5b9a819179762c049 nodejs-full-i18n-20.12.2-2.module_el9.4.0+100+71fc9528.s390x.rpm 0c1ce19c8133ab1456f54f00e40768d3106b1a10896b890acfb03bf83eb24341 nodejs-20.12.2-2.module_el9.4.0+100+71fc9528.s390x.rpm 12dbaa193db70860e8ce0cfec62a38ccd2aa56a5e899435a4344effb8e7c0aff npm-10.5.0-1.20.12.2.2.module_el9.4.0+100+71fc9528.s390x.rpm 28880dbf573172aeabe781795f0b240cb7663f316666ae5b1a78a046fb918634 nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm 6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f nodejs-packaging-bundler-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 94ac92c4ae695d87df9c616a6d3ecafca411d07358cf60516392e320eefcb3c6 nodejs-devel-20.12.2-2.module_el9.4.0+100+71fc9528.s390x.rpm c1dc088ce88adc6814b56f3667e25e81cbd0bc9ed9e34f1e41a2bd5d4e0a1794 ALSA-2024:2883 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.11.0 ESR. Security Fix(es): * firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767) * firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768) * firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769) * firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770) * firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-115.11.0-1.el9_4.alma.1.s390x.rpm 19da8633fc0877a24a07d9b33e0f20f38846195ec68d84a634f8af23a4d63c8a firefox-x11-115.11.0-1.el9_4.alma.1.s390x.rpm d595111073f40d70d4f95e7c9e4b00e611eedb8a874f2fae539a0cf3c13541e6 ALSA-2024:2888 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.11.0. Security Fix(es): * firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767) * firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768) * firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769) * firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770) * firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-115.11.0-1.el9_4.alma.1.s390x.rpm c9502b1644983b23ece27f85a81724480070c2cca71db00c209a12d7f62edba5 ALSA-2024:2910 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: CONTINUATION frames DoS (CVE-2024-27983) * nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025) * nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982) * nghttp2: CONTINUATION frames DoS (CVE-2024-28182) * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default nodejs-16.20.2-8.el9_4.s390x.rpm 5e1f703bdbde91d1d516acd232018376a5c988b2dd67baf3b2fd866f1ae4cfcb npm-8.19.4-1.16.20.2.8.el9_4.s390x.rpm 7f92eadc97d1e3451107866be0d70d4473daca58a491f61237046867a3bc839b nodejs-libs-16.20.2-8.el9_4.s390x.rpm 9ec9b5500ab500f3d845903e32367e3f21de0a4f2778f6e5793e40649e241311 nodejs-docs-16.20.2-8.el9_4.noarch.rpm b1b792b69a5411822d1b67865bfa0e978b9dbeeb54e65ac1739ca4d446ca1803 nodejs-full-i18n-16.20.2-8.el9_4.s390x.rpm c471c11fb541b5cec6f1d1522b91f3ce0ba9f7aaf83b2954338c206aad90c57e ALSA-2024:3306 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673) * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-debug-devel-5.14.0-427.18.1.el9_4.s390x.rpm 05e113bd7a23252952c3f6543be835d40dd214c73cff885ae5380e980de15a15 rv-5.14.0-427.18.1.el9_4.s390x.rpm 36b7439c68f196ce10ce543f106c111e37e1d3e39c7d8d46884e718902a063c2 kernel-devel-5.14.0-427.18.1.el9_4.s390x.rpm 482dd4bc78054e08e1b543202b6e4d6c4a4f0bfb481168d1d10fef5d59f40326 kernel-doc-5.14.0-427.18.1.el9_4.noarch.rpm 4a845b6d8740ef83d332d1ce8b7a50fb36d3eb855277cea863aa8360b5ae886c perf-5.14.0-427.18.1.el9_4.s390x.rpm 53418f74ad6625dd92d6db89ae186a3e322c3704e1557cd40e990601aa8b7ffd kernel-zfcpdump-devel-matched-5.14.0-427.18.1.el9_4.s390x.rpm 5f4357b243ba609b49fb96ca18ceab084332209972918a4bad74fb3b443803b5 kernel-devel-matched-5.14.0-427.18.1.el9_4.s390x.rpm 64810e7f70ca076c694b8f31ea9cfed268f23caa994259cc8dc132e2e3312ff3 rtla-5.14.0-427.18.1.el9_4.s390x.rpm 746cd86d77fc104163a3981c574212ed680698c425b2fcdb7ebbdcd5d505dc59 kernel-debug-devel-matched-5.14.0-427.18.1.el9_4.s390x.rpm 7496189b3cd8df1fc0af2a978fa8a5701fc934324948033974556cd0e4b93111 kernel-headers-5.14.0-427.18.1.el9_4.s390x.rpm ad6567a6afdf6bee3a3af6ddc94290ecd898bb2ecc11d85e5c4338c8d7e19d67 kernel-zfcpdump-devel-5.14.0-427.18.1.el9_4.s390x.rpm dc504676b1a48c00f29a20193a52975840c7ba122e63bfa1dd6390685be029b0 ALSA-2024:3307 Copyright 2024 AlmaLinux OS 0 1 Important

tomcat security and bug fix update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) * Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) Bug Fix(es) and Enhancement(s): * Rebase tomcat to version 9.0.87 (JIRA:AlmaLinux-34815) * Amend tomcat's changelog so that fixed CVEs are mentioned explicitly (JIRA:AlmaLinux-35328) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default tomcat-admin-webapps-9.0.87-1.el9_4.1.noarch.rpm 46911e3fcb7bb32ce6d7d81c6698016965d3dfa9f3ade42b26e732dcab6e9307 tomcat-lib-9.0.87-1.el9_4.1.noarch.rpm 5511b3cd77efb66f00bf306124bed6a090b4a389f4bb4e48ede9c632400d1fe6 tomcat-servlet-4.0-api-9.0.87-1.el9_4.1.noarch.rpm 55f1470202d68436d5fd10ff5277d39df5927d895900c2f28f5e4a43865dff55 tomcat-docs-webapp-9.0.87-1.el9_4.1.noarch.rpm 5c1c7654f603de561dd9dcb1b43070e39e7dda1bef73d488674d16b3cf4a3076 tomcat-jsp-2.3-api-9.0.87-1.el9_4.1.noarch.rpm 5ef90b8d4e322bd28bc710cd268bd41d4618900d553a1a7fb0ed7ab2cce4e85b tomcat-el-3.0-api-9.0.87-1.el9_4.1.noarch.rpm 67e1fffe94eb51ff39131c4ea514e47e8b9c29a8b6f8844dedb77d5017b82a69 tomcat-9.0.87-1.el9_4.1.noarch.rpm b709e0f99858126ef0e3035d83810b8e0b9345bcc35eb0c15dca2a5a5f7abc51 tomcat-webapps-9.0.87-1.el9_4.1.noarch.rpm c494ce9d83a4ea89b913b175b6144beeb28fd0a6c1d8fb03ad6c108094850b51 ALSA-2024:3339 Copyright 2024 AlmaLinux OS 0 1 Important

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (CVE-2024-2961) * glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599) * glibc: null pointer dereferences after failed netgroup cache insertion (CVE-2024-33600) * glibc: netgroup cache may terminate daemon on memory allocation failure (CVE-2024-33601) * glibc: netgroup cache assumes NSS callback uses in-buffer strings (CVE-2024-33602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default glibc-doc-2.34-100.el9_4.2.noarch.rpm 48321f383378f0cf27fb6f86b30c2e16ff71d185127f15398de09ce5f88cf5c1 glibc-devel-2.34-100.el9_4.2.s390x.rpm 54e52ee25e681bd9bd8c40fab3eae7c5ad1f195d2cbde664285462cd1cd0ea49 glibc-utils-2.34-100.el9_4.2.s390x.rpm 96362aaa9a7cd134488c31a6c090ba5f1ae93abf71df44886912a6e2d1e92583 glibc-headers-2.34-100.el9_4.2.s390x.rpm 9985d6d672311b61177c9eec65ca773557c368c9641fd79337672b4d9b8f49fe glibc-locale-source-2.34-100.el9_4.2.s390x.rpm fa8f7f8cf817bedb9d5a98984dcde8cbda79fd0a5f115e711e7ce19e793a12e4 ALSA-2024:3619 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735) * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-debug-devel-matched-5.14.0-427.20.1.el9_4.s390x.rpm 0520c9e96b8bacc7fe28a5799d9aa280b4c596f24a4422f70c6f1e2f93a502d1 kernel-headers-5.14.0-427.20.1.el9_4.s390x.rpm 5db730e3442dba85d8c49263c9d8cb210509f9bdfcbd299e8d5d0748ee58e1eb kernel-zfcpdump-devel-matched-5.14.0-427.20.1.el9_4.s390x.rpm 5ddc7d3cbb401b18c07b778c71f80cd80cf0ad0b04708f2880ac0b781a33bd6a kernel-debug-devel-5.14.0-427.20.1.el9_4.s390x.rpm 7a1f7becb9ef59c383ed805d421682982a16ced1ee7e73a9f2d68d4b437db989 rtla-5.14.0-427.20.1.el9_4.s390x.rpm 9849ab069fe5e0f0a0adf7888379e69229de2c463515e76e6cebd83b9b4e8c74 kernel-doc-5.14.0-427.20.1.el9_4.noarch.rpm adc196792686bce2e8a341674ec0d450d7d08ce4d32cfd2313aaec3c818d5677 kernel-devel-matched-5.14.0-427.20.1.el9_4.s390x.rpm bfbb33386a47ffa2e88a3326cf4519416bfbedd3a637c35dcde487710d393cb9 kernel-zfcpdump-devel-5.14.0-427.20.1.el9_4.s390x.rpm c7d7ee5ab8ab0294b4f00af90dbcef059e6a7a51414f9650190dfd7ede234229 kernel-devel-5.14.0-427.20.1.el9_4.s390x.rpm d35016d4d4bc96054dff47cb8ee4f03448ee1a59b30140d49b7bbd24917baa53 rv-5.14.0-427.20.1.el9_4.s390x.rpm df1a864f68319180036d1dc09345e7afe635430c402d382832dedd91624730fd perf-5.14.0-427.20.1.el9_4.s390x.rpm ea6e209dd18a35d94ff9227eb727477ab72d579f6002379f959f96e0122b4f77 ALSA-2024:3668 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-35449) Security Fix(es): * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280) * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281) * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default rubygem-rbs-2.7.0-144.module_el9.4.0+101+d58a8d95.s390x.rpm 1d1a112fc3b8a27fbfc1d73dce926b687e2c7998fbf68b8f881a483d0d824847 rubygem-test-unit-3.5.3-144.module_el9.4.0+101+d58a8d95.noarch.rpm 1d60045ef82a5bbeecbc2287592b1591b55700fae7fd399d58baeef25a1f0e50 rubygem-psych-4.0.4-144.module_el9.4.0+101+d58a8d95.s390x.rpm 22a821d1c12c5ad1ff12c6cda4a7a94407fb084f58b768f80f434cb97baad40e rubygem-typeprof-0.21.3-144.module_el9.4.0+101+d58a8d95.noarch.rpm 24cb1a7c1e4aeda56fa4fcdf89d1ff6b077ff837e0e687e9ae7cd7480aefd145 rubygem-rake-13.0.6-144.module_el9.4.0+101+d58a8d95.noarch.rpm 30d7cb20ddee1557f047d9b4b1d9b26b4087c95a76053d5bd4ab5a143c73fed8 ruby-default-gems-3.1.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm 393efcc1c737ca8aafadf7e5e3efd4ad73d2781b7659373f27fabf02d3e28fdc rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm 47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8 rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.s390x.rpm 49b1f8d15c4626c94dbdf369d69aa871b2e1b4909ae4718089f41d7de50396ee rubygem-io-console-0.5.11-144.module_el9.4.0+101+d58a8d95.s390x.rpm 5a7fe7c4cf6774ae29562ab21f65d5888a38fd6e0356488982b82619b29095f5 rubygem-bundler-2.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm 74e82c75f35c48e200bdd0f13040c5d8cae6d4ab74ed7769e59622008baed436 rubygem-minitest-5.15.0-144.module_el9.4.0+101+d58a8d95.noarch.rpm 7641fcb6f89c336a71ea20debc329a809f96b29e9dc4563a574ea5cb8a62797f ruby-bundled-gems-3.1.5-144.module_el9.4.0+101+d58a8d95.s390x.rpm 78f31ee25053c1754e7d9af6d5d78dada2e6543542d02ce71988d9a1868ac1a6 rubygem-bigdecimal-3.1.1-144.module_el9.4.0+101+d58a8d95.s390x.rpm 7d665dff78a913ffd0872a4258d892d7ac21bd24a5af53a4c88bdb50c397d9dc rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.s390x.rpm 81af584c5f98cbff30e7733f802c0711cdfb921b4fc268dc21e6e002f4c9a292 rubygem-power_assert-2.0.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm 92d64262b45999e76de317aad96cb770b73720d55e9ebfd275207ddad00c3d86 rubygem-rdoc-6.4.1.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm 9bd1632b1cb4319201859701f1eaf84666419345c170ef93cd47ab4031829429 ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.s390x.rpm a461424388708e06d84966f9622e3556f44b6ba9cd310beae2a6b89be341b5ab rubygems-3.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm bc697c3ad63d00ee0bad232fea31d960c9b955859ae4dc256d87c278f8d0f0da ruby-doc-3.1.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm bebcbffa554dfed194d3fc1212ba3d01dd89f3a6ecdda3228069f2a3d6ddb640 rubygem-rss-0.2.9-144.module_el9.4.0+101+d58a8d95.noarch.rpm c09830da0af358c4dd7f61e57c051158c302433acc0274930fe76e2b6b983c4a rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4 ruby-devel-3.1.5-144.module_el9.4.0+101+d58a8d95.s390x.rpm cf88b45dd320b39708857de29827fc2b0d2ec7fdd46867eceecbc4278221302d rubygem-json-2.6.1-144.module_el9.4.0+101+d58a8d95.s390x.rpm d1bbc50c4d944f76cbee80c3acef48a6f14b2bfd955b40d66fe8eb5849e2560b rubygem-rexml-3.2.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm d395d040309f58998acea87e2743d77e76cf53c44ebdfa3fe0fc26ce092eda60 rubygem-irb-1.4.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm d7f12808af01af69e86302277c2e88e8e91350d449160799c77eeb4af8509670 ruby-libs-3.1.5-144.module_el9.4.0+101+d58a8d95.s390x.rpm dccf903729d176701eef0f2752264af70372f0b2693911249731aebaa60a853d rubygems-devel-3.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm ee39f8098869a8f763ea082ee44bb91041439215ed3a24be7172710e3bd45917 ALSA-2024:3671 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37697) Security Fix(es): * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280) * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281) * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.s390x.rpm 05258957f4a8ba14cc6ebf5219ecc4e0e325a64dcd11edc78435445fb2231e41 rubygems-devel-3.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm 05ba48bdeda8e01d3470d0bf7d33015690b1997e4bb25d0fc69797c9afae1916 rubygem-bigdecimal-3.1.5-2.module_el9.4.0+102+68a93853.s390x.rpm 070997a41248e01966472fd84011e64ca60b38c54ad3b7b0efced72a73a19683 ruby-bundled-gems-3.3.1-2.module_el9.4.0+102+68a93853.s390x.rpm 271f85b5aea662819ea92e65551c40763eb378a222f2c2c4e800418f775e779e rubygem-bundler-2.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm 27a30884ae6fa12a9de09ee3bda1973c07c6d60abf1f973faffc4cc1738f44a6 rubygem-rss-0.3.0-2.module_el9.4.0+102+68a93853.noarch.rpm 2c429b7a055c6f9b412d5ee390ec6c0a88dea2567435dfae5cd4ad42b5e166d1 rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm 37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58 rubygem-rdoc-6.6.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm 57e1d24b92a4a14badd87e0c44c6f5f8c0bab776be40835bb728b02d64e8f009 rubygem-rake-13.1.0-2.module_el9.4.0+102+68a93853.noarch.rpm 6424338c8361e0e095543455d2612460c41532b09272bc16813805ea300bbde5 rubygem-mysql2-doc-0.5.5-1.module_el9.4.0+75+1a8fe981.noarch.rpm 65b0d0cc45f0088e7962db0543b7f1672cbc730924b371f28cdda18a25b33edf ruby-devel-3.3.1-2.module_el9.4.0+102+68a93853.s390x.rpm 66449393d742e738c7f96433fcef925158e73e4636fb20d658c769f8719ae45b rubygem-test-unit-3.6.1-2.module_el9.4.0+102+68a93853.noarch.rpm 66cbe8756ebbeb78a8260b97a493cd2652d462769355328be41b2161ba0321ea rubygem-rexml-3.2.6-2.module_el9.4.0+102+68a93853.noarch.rpm 7c87bbd4e24e647635f83b56c1eacbe966a0b069e0fd2b111ed825ef4f5247dd rubygem-irb-1.11.0-2.module_el9.4.0+102+68a93853.noarch.rpm 853620c2a9729478a537a057938c253494ff63ce1fd4c042303ba942d9ac2640 ruby-doc-3.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm 867cf153f94223d8490a1f00567be22df60179b5cf18b7afa9ed1895fc1bccd3 ruby-default-gems-3.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm 87859f05ea0fe77e2e991a2b42083f3ffdfa0a25c19d4577bddf6e9ee95c4965 rubygem-power_assert-2.0.3-2.module_el9.4.0+102+68a93853.noarch.rpm 9f45f58c8fd93f89f7b1471e8e904876abde5bf3381d6811bd19c9cf5ab7ab93 rubygem-psych-5.1.2-2.module_el9.4.0+102+68a93853.s390x.rpm a1edcdca84c8298d7688944f30e419a2c29624bb5196fa715fa9cda1c2b688b2 rubygem-typeprof-0.21.9-2.module_el9.4.0+102+68a93853.noarch.rpm a73909cc8567623583c4366b91370617bfdf02a0f098a2402b2b90b279bda810 rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.s390x.rpm a81354cf449ea715f53abe583ed241f40275e30991a4a7bafc454729c2c75cc0 ruby-libs-3.3.1-2.module_el9.4.0+102+68a93853.s390x.rpm c003eed5620ebef2e1676b387ce5cd0a266ab049e20f092314bdb7fccccaa271 rubygem-racc-1.7.3-2.module_el9.4.0+102+68a93853.s390x.rpm cc830be351ac4e58b68d72c98f2e52af38c5b84440c511a7d82981b9df2bcadd rubygem-json-2.7.1-2.module_el9.4.0+102+68a93853.s390x.rpm d72f6a43a476fe9aeb005cabfa1bce800c8e29321dcb73149580bdef67b4aace rubygems-3.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm d7e394a7d6504872209c8e49a4adf8c212a55ab52ac30e81834535b8788a0b49 rubygem-minitest-5.20.0-2.module_el9.4.0+102+68a93853.noarch.rpm e288892ef6dc536761fff9f15fb42502eb7c4cee7dd69426b95dd69290bdfe42 rubygem-io-console-0.7.1-2.module_el9.4.0+102+68a93853.s390x.rpm e48ab13a898bdd492d9d3babf10b8055c387e2da20a27b2b23d088cd3f37cd74 rubygem-rbs-3.4.0-2.module_el9.4.0+102+68a93853.s390x.rpm ea47fad4821a191daf1244dc80d8bbaca6b85d66992fdc742f90cf1eccda0131 ruby-3.3.1-2.module_el9.4.0+102+68a93853.s390x.rpm f2a4e212bb8ad6d97b4e04bb409bf8681c4f3147c6d7ca817efad5796c703bf0 ALSA-2024:3754 Copyright 2024 AlmaLinux OS 0 1 Important

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698) * freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-ipaserver-4.11.0-15.el9_4.alma.1.noarch.rpm 40a4154db8aac39968fc4f7cf327863ac3f3bd8919b4dc68e6c14a4ab01eb5c9 ipa-server-trust-ad-4.11.0-15.el9_4.alma.1.s390x.rpm 43130ef4b459935a9a8ab8743662b773422517d68b627958e1c10c6a5afd0268 python3-ipalib-4.11.0-15.el9_4.alma.1.noarch.rpm 4685c4ad0d7809b20234c8c41abd2c35f8e846c30823f4a51f5b2cd7d3a5021d ipa-client-4.11.0-15.el9_4.alma.1.s390x.rpm 4a7cf96614a163e3c974ccbef6edaef34fda34780c0f33f22809ff0d7de42027 ipa-client-samba-4.11.0-15.el9_4.alma.1.s390x.rpm 770b8342412bade75e039b46b3cacad1c70aa619ddeeddcd3122759c8ffe05e0 ipa-server-common-4.11.0-15.el9_4.alma.1.noarch.rpm 78c12a5600633f1655b2a35f3b63d7b39c0f49136f53f5fbf1f43b90763e9534 ipa-client-common-4.11.0-15.el9_4.alma.1.noarch.rpm 7c8ab597afb44822aa519229f86d7b7cfb15bbaecd4c98b86ef69236c3b69f38 ipa-server-4.11.0-15.el9_4.alma.1.s390x.rpm 82309fe2033647b0df0f0d17d44d44cfed7c412d503e21b69a83e97a20fe62fd ipa-server-dns-4.11.0-15.el9_4.alma.1.noarch.rpm 94b714cb309d009eb644237221dbe3f71e52bf8c8a8e51d5d146782776c0cfa1 ipa-selinux-4.11.0-15.el9_4.alma.1.noarch.rpm b7912916951acae4663a14ab6732f523cd11b4e839c61cb35d699ac5a136f38e ipa-client-epn-4.11.0-15.el9_4.alma.1.s390x.rpm d6b1861fb9f1d18292d06eda52a21615ae9325b3d9552c7cc1691d0eb2f29e32 python3-ipaclient-4.11.0-15.el9_4.alma.1.noarch.rpm f39f0f73b007711341356b8af46f1f1e4e354a48afe1770649cafa532bc42a24 ipa-common-4.11.0-15.el9_4.alma.1.noarch.rpm f4e82a031b6db79bb4ef20babac0d8c4f972deed8860231e96bfa98c15ca5c11 ALSA-2024:3820 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * jinja2: accepts keys containing non-attribute characters (CVE-2024-34064) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default fence-agents-ibm-powervs-4.10.0-62.el9_4.3.noarch.rpm 14a5c427e4ffff4b128e8c325243492da2b3a4deecb11de0ef93675bc786bbc4 fence-agents-ibm-vpc-4.10.0-62.el9_4.3.noarch.rpm 22454a2b95edf73814a9bdf1010542ab73940ec252e8cc0ae8bfbc1cb3bfec03 fence-agents-virsh-4.10.0-62.el9_4.3.noarch.rpm 931740abb4c2d76c045b121cad133b3e1a58482fdc5efd1067e8936886714353 fence-agents-kubevirt-4.10.0-62.el9_4.3.s390x.rpm 9e1728fa8362c81696bf8c0109a0d42be03c409b77d7850adee8b18c55df546b fence-agents-common-4.10.0-62.el9_4.3.noarch.rpm d3caf2e25a1f6a35cbd868b45f8a672e3964f1f16964b934663b4c87f34834e4 ALSA-2024:3823 Copyright 2024 AlmaLinux OS 0 1 Moderate

rpm-ostree security update

The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and rollbacks. Security Fix(es): * rpm-ostree: world-readable /etc/shadow file [9.4.z] (JIRA:AlmaLinux-31852) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default rpm-ostree-libs-2024.3-3.el9_4.s390x.rpm b480726dbb07ddc2aaec30818532b2c1ee5eb623b9c260e44cdaaacb615d146e rpm-ostree-2024.3-3.el9_4.s390x.rpm fac68ef0ca215bc6e46c914d23788014cdbbd38c72bd41f024220e475f9c5f0f ALSA-2024:3826 Copyright 2024 AlmaLinux OS 0 1 Moderate

podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: * podman: jose-go: improper handling of highly compressed data (CVE-2024-28180) * podman: golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * podman: jose: resource exhaustion (CVE-2024-28176) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default podman-plugins-4.9.4-4.el9_4.s390x.rpm 6821c9769b964a14dcdba4eb4de0a3290b39b82567a406124ef50df5a760cb48 podman-tests-4.9.4-4.el9_4.s390x.rpm 7f495d55949a6d2c03373c10b766c7d4ff4d6d73f183cd6d5182f82144bb6ead podman-docker-4.9.4-4.el9_4.noarch.rpm 9d79c85548bc603fddea4f740cd5337264900f7281d245c93a4d92712d0a83cb podman-4.9.4-4.el9_4.s390x.rpm df97b1bb16a3094a3195e2a861ddbc4a327bb9c0b282be63a25634e47925a44d podman-remote-4.9.4-4.el9_4.s390x.rpm ed43313ef3c23bb4094fd026ab9352a504dd1d09edba5ab73dc1541313de7302 ALSA-2024:3827 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security and bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * jose-go: improper handling of highly compressed data (CVE-2024-28180) * buildah: jose: resource exhaustion (CVE-2024-28176) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-1.33.7-2.el9_4.s390x.rpm 226218bce35d72cfff16498172f56d77314152168a0396e2564686af324c366e buildah-tests-1.33.7-2.el9_4.s390x.rpm c003f4af4a5369894cd6c12f15df77e4c35f12ab84ec223457b04f5863e05d32 ALSA-2024:3830 Copyright 2024 AlmaLinux OS 0 1 Moderate

gvisor-tap-vsock security and bug fix update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.s390x.rpm 00ca7400713cbfd5e6e50125d4b9dc5761409323d22f7587215c1002f6592926 ALSA-2024:3831 Copyright 2024 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security and bug fix update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm 36b0f4160d2a7b56f4bf364e477997f585b1b2576b9125bd490abb34be6a3dff ALSA-2024:3834 Copyright 2024 AlmaLinux OS 0 1 Moderate

gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gdk-pixbuf2-devel-2.42.6-4.el9_4.s390x.rpm 4667523a13cb42c87027b25887c0ce11070c8c60cb1bf1a3f2a198bd24132fba gdk-pixbuf2-2.42.6-4.el9_4.s390x.rpm e2506a11a7e65d8f18070da8d0048c0935461ee209aff42517a68595c64c41dd gdk-pixbuf2-modules-2.42.6-4.el9_4.s390x.rpm e27e02ed0ea45b035ba99404b7044ccb88021cf22d72f51506351de8dd4cf484 ALSA-2024:3835 Copyright 2024 AlmaLinux OS 0 1 Important

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution (CVE-2023-6185) * libreoffice: Insufficient macro permission validation leading to macro execution (CVE-2023-6186) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default autocorr-ca-7.1.8.1-12.el9_4.alma.1.noarch.rpm 02329fa7e5a0e7da7dd4bba68bc1c4fd83456d40dbba7879678ee62d8eb922ca autocorr-da-7.1.8.1-12.el9_4.alma.1.noarch.rpm 02c8f4deacff2600cbc0f0a519f8e7f5c5ae251ff8b5f9ae390b75f4da40ec21 autocorr-lb-7.1.8.1-12.el9_4.alma.1.noarch.rpm 04d41aa4d935411483398b2c03fec611c44ef42a1f1e2b0d9a1257f9473c8d03 autocorr-fr-7.1.8.1-12.el9_4.alma.1.noarch.rpm 051159f352efc090758d94235826c60a93cfe9526127cd68e5793c784b598bb2 autocorr-sv-7.1.8.1-12.el9_4.alma.1.noarch.rpm 0eb7cb0f9f3af8118462b356cec124a914ef6cd7ca13137610e8802824670273 libreoffice-data-7.1.8.1-12.el9_4.alma.1.noarch.rpm 0f0680c80a17ccdff48b834592d372076b959103e7872176f180134ca14026d9 libreoffice-pyuno-7.1.8.1-12.el9_4.alma.1.s390x.rpm 11e6fe88342f2247b94863aa37c4e28781ede1f716ae270aadfd435191110bb0 libreoffice-writer-7.1.8.1-12.el9_4.alma.1.s390x.rpm 15f77235a8dc252d6a87bdd63419f5dc0796d0ce79a5f1b6791f2d5d94421c89 autocorr-tr-7.1.8.1-12.el9_4.alma.1.noarch.rpm 26471a15b4a501a8d3f9040494ca5f5496638116c5af1584a7342e5c82023454 libreoffice-help-en-7.1.8.1-12.el9_4.alma.1.s390x.rpm 2e8bbf700b4a598224e0f46487c7bbc35232cf487ed5f66943ec554591ea6ec6 autocorr-pt-7.1.8.1-12.el9_4.alma.1.noarch.rpm 34b6fd3a86e00a0f01e5306f71ea6f8bc627fee1c4691890a14e28c45e9609c4 autocorr-hr-7.1.8.1-12.el9_4.alma.1.noarch.rpm 351582cde30bd561d4c550c4d816497971807e517f096e720f1290ed575a1936 autocorr-is-7.1.8.1-12.el9_4.alma.1.noarch.rpm 3bde270ffb7d49d8b97a10c64dfa489bfd7107b003b37a946505e032c0e6c4fe autocorr-ro-7.1.8.1-12.el9_4.alma.1.noarch.rpm 3e3e7c46230b3d8b15553bd339cd1d17ef7b22da3a9b2077c4e6bb72716e034d autocorr-it-7.1.8.1-12.el9_4.alma.1.noarch.rpm 4e582024e498300fa1a3c059d5552769050f581299d3dc22a45755fd58272b30 autocorr-en-7.1.8.1-12.el9_4.alma.1.noarch.rpm 51ef5432ec735945c5e258870ac5ec0be74fa1662f7b7a7538924c8dfda83af4 autocorr-fa-7.1.8.1-12.el9_4.alma.1.noarch.rpm 58c97e3494bba6f7096a318498f3b74f50d554a694b1412cec565812a582c527 autocorr-zh-7.1.8.1-12.el9_4.alma.1.noarch.rpm 604a3205d62f2de15432ced13fe32cf28b5d357de20daf1da87da644c5702219 autocorr-dsb-7.1.8.1-12.el9_4.alma.1.noarch.rpm 61bd5b1956e86098431a92578562a2b706d3f961d64bd870761c4c1dc46370de autocorr-ga-7.1.8.1-12.el9_4.alma.1.noarch.rpm 6c3817e4efb2b0af7f5527138bb74c880864c941c712518e63b8ddfbe1c2fdf7 autocorr-nl-7.1.8.1-12.el9_4.alma.1.noarch.rpm 7903c0170e36d9ec67128d61d264a01adcf60db0d1a349c93cd6901cc75d90c5 autocorr-el-7.1.8.1-12.el9_4.alma.1.noarch.rpm 79308e023da222c845b82f7d093983198d6fd8f5f9ae80f425ee8b6dc3e02935 libreoffice-core-7.1.8.1-12.el9_4.alma.1.s390x.rpm 81289f503e419bf3f7844e32d9c9180df9ed9c78114c9cfb5eb5bea1b1f2760c libreoffice-ure-common-7.1.8.1-12.el9_4.alma.1.noarch.rpm 8e3b06f440f1a1cfc897b4bf1ac1220a1f9e937870e90c15847463e5892c8980 autocorr-vi-7.1.8.1-12.el9_4.alma.1.noarch.rpm 90ec78a7a23a02aca093db8dda8e0b7d373cf8675e05101c7a5095433e2d9c71 libreoffice-graphicfilter-7.1.8.1-12.el9_4.alma.1.s390x.rpm 918ccd3e4e2bb1d4b99419dd2ce9716f375a93b73de27bec6cd4039a5d2693a5 libreoffice-pdfimport-7.1.8.1-12.el9_4.alma.1.s390x.rpm 94bf634a7b02f6119a5d1f79ec41b8a3279d1ab2ef624b6b1cc9d6570e4586d9 autocorr-mn-7.1.8.1-12.el9_4.alma.1.noarch.rpm 9625b41e0b2a841c5a4aad2d619d870b9846244d776e5580134ceef57514da3e autocorr-vro-7.1.8.1-12.el9_4.alma.1.noarch.rpm 9633da2652be3cfb7a0c1a8403b52d978c83bbd99d2b2e08d7ef7f6e1bddf17a autocorr-bg-7.1.8.1-12.el9_4.alma.1.noarch.rpm 990d3ae692491cf360bc38a3641f728f24b15ff8411ac6254245f1a402811a1d autocorr-hu-7.1.8.1-12.el9_4.alma.1.noarch.rpm 998b08b0fe2aaa1299edb90c82de0517abeb9e5fd3898c6cfcd4767a7550c589 autocorr-cs-7.1.8.1-12.el9_4.alma.1.noarch.rpm a070bcc56f79bd9382f04f0d7b2e6fc4fdf17acd16c50392db3d3e74ce9cee8d autocorr-fi-7.1.8.1-12.el9_4.alma.1.noarch.rpm a323d21a958cb2ffbe79b413cf60f197247cc48ec8cfedafd9488f1b1a2df771 autocorr-pl-7.1.8.1-12.el9_4.alma.1.noarch.rpm a7db04ab2b54020ae630c80e4785f53c56f55270273b9b45d7362e6a582964da autocorr-lt-7.1.8.1-12.el9_4.alma.1.noarch.rpm b83bb5a8d8256fad38ba4420e4ae13bdc8d703a6cde24eefbab5f67e41aadb5a autocorr-es-7.1.8.1-12.el9_4.alma.1.noarch.rpm ba374606f39616b9259e8f551d315536d9360713089cd6d2cc6249145479dc50 autocorr-ja-7.1.8.1-12.el9_4.alma.1.noarch.rpm bf81e2b11eaf60e1808f3f8c2ee26778d5d7d6d6962e145a43df9d42379b8eee autocorr-hsb-7.1.8.1-12.el9_4.alma.1.noarch.rpm c078a218020af3b55f0b4495db435ec5687d90545274cc2a1b24810f526a0fb7 autocorr-af-7.1.8.1-12.el9_4.alma.1.noarch.rpm cc0903de6575a6e87c2e282cfebf777b4eea8f619ea7bdc9eb638506b7a19d3a libreoffice-opensymbol-fonts-7.1.8.1-12.el9_4.alma.1.noarch.rpm d4eb4ec144af407dd8212c83e8bf79387b6ed711387836bf4c0c3a2e2d48c556 autocorr-sr-7.1.8.1-12.el9_4.alma.1.noarch.rpm dd6517f86011117dd7d5d73eca58d0fd75d7297e926ecd63b81631c88cbacb0a autocorr-de-7.1.8.1-12.el9_4.alma.1.noarch.rpm e02017ca036419892d84b7fcdb545d16c6f5fd66bb01ddbb986838ad6cf669ca autocorr-ko-7.1.8.1-12.el9_4.alma.1.noarch.rpm e20e124513667e67d98ed17c1ad01be0fecfc2a1509ab7b48c8095b84a1bfd90 libreoffice-impress-7.1.8.1-12.el9_4.alma.1.s390x.rpm e8e4a38b7727660aa8762c335559cb3453de7c14ed79259e9651f907dbee010c autocorr-sk-7.1.8.1-12.el9_4.alma.1.noarch.rpm efd59b87b2526e3ec8417629d303c4e28c04ebc43d6443edfb32df901ac0098f autocorr-ru-7.1.8.1-12.el9_4.alma.1.noarch.rpm f3dbc5b77ac98314cbf0c12f9044c00f7ecd6eefccbc0d8ede9351bd2bcbd869 libreoffice-calc-7.1.8.1-12.el9_4.alma.1.s390x.rpm faa4dfc936498fd7759335d3536c87d65bd760dc00eb999cbcbde0a4d0266d33 libreoffice-ogltrans-7.1.8.1-12.el9_4.alma.1.s390x.rpm fb858a746b65b99913e7b1cc71f4bb4c3d7685f9a94f9c314518c46de18deae8 libreoffice-ure-7.1.8.1-12.el9_4.alma.1.s390x.rpm fb94d91b67c1c342b9bf1632e28b6574e4bd2515452e2dd21220eefd8dd90f20 autocorr-sl-7.1.8.1-12.el9_4.alma.1.noarch.rpm fd4587b4116c03a914f5835f872dc5e1c6ba6c9d1f7f35b6a217bd669f71da83 libreoffice-langpack-en-7.1.8.1-12.el9_4.alma.1.s390x.rpm ff739f88dd6466831a9f174aa8939364081eb6e3786c1802743a14997c78c5bb ALSA-2024:3837 Copyright 2024 AlmaLinux OS 0 1 Important

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-lib389-2.4.5-8.el9_4.noarch.rpm 13a71cd517eeffda1384aa1a720f66dafe47f1f2d381a2f852010d50b9d829aa 389-ds-base-2.4.5-8.el9_4.s390x.rpm 346ac74217f783d72d897610316d4b4211c25539fb7bec443305e7e678618c6b 389-ds-base-libs-2.4.5-8.el9_4.s390x.rpm 9e2c5a8cefc468c41955f1d424d4fe22bf16ba56d4b7dfe911f5b462cd2c7de6 ALSA-2024:3838 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.0). (AlmaLinux-35740) Security Fix(es): * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621) * ruby: ReDoS vulnerability in URI (CVE-2023-28755) * ruby: ReDoS vulnerability in Time (CVE-2023-28756) * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280) * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281) * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default rubygem-rbs-1.4.0-162.el9_4.noarch.rpm 0bfac6c9da7968b64d54a690969dd309c9b0150643e757efe6dc85ddf5c357d7 rubygem-irb-1.3.5-162.el9_4.noarch.rpm 1a34a95184a16559ec775224458fbb4e5d7eafa8b02c14b4d4de241a4ca24669 rubygem-rss-0.2.9-162.el9_4.noarch.rpm 1f466276d00158edc966eafaf20af5d2d8a47c474fb3cada1c487659c8046b4b rubygem-io-console-0.5.7-162.el9_4.s390x.rpm 2707bcba6bca49f50d2aad7e9f4c0bcd336dc8f9f640267c6bc3aaa1a0bfa411 rubygem-psych-3.3.2-162.el9_4.s390x.rpm 2f3bf458cb41bc24aca18ca4b2881d13220072c0de25a68c1adb807e13189d8b rubygems-3.2.33-162.el9_4.noarch.rpm 347e4dc030a5241683a27f18c647f3fc0e7dbc9bc5e785a0da30335cefdefacb rubygem-rake-13.0.3-162.el9_4.noarch.rpm 35b188eebdbd09683b30a8af5a3624c9964b3fc780c7d77b6583461424e5224b rubygem-json-2.5.1-162.el9_4.s390x.rpm 3923138897bf64417f2978c11b0fb8645af44ab568a5db9565f5cb1e23a43f23 rubygem-bundler-2.2.33-162.el9_4.noarch.rpm 3f4a2346edc0c1c3446d3c66bd2ba64ab24f0742412b59c537f08239a2dfd5c8 rubygem-typeprof-0.15.2-162.el9_4.noarch.rpm 530717f0a8bfbc3fb92b8b8a71d3926c0f2f55b22c1488d92b58cb5635b99891 rubygem-rdoc-6.3.4.1-162.el9_4.noarch.rpm 61efa2918d01d92c6a737ab7b3dd698635ccdec9026edab5146425418db962b6 rubygem-bigdecimal-3.0.0-162.el9_4.s390x.rpm 719faf48a4e1392e055986f296054ba7954df2d0dffed24941bd6e862c067937 rubygems-devel-3.2.33-162.el9_4.noarch.rpm 8f176439e95a09833a724cde74b7c078b093659ea59454aa38b5f428c8f73480 rubygem-minitest-5.14.2-162.el9_4.noarch.rpm a78beda206af7255e4d33f11d78b0a9c1fa541abafcfc7741c0fb00104fe3a80 ruby-libs-3.0.7-162.el9_4.s390x.rpm bf43234f913a0e87e76e4fdb3e20d33c522f436df23f982a30f86027dc2a6b4a rubygem-power_assert-1.2.1-162.el9_4.noarch.rpm cf9abec31ee790b95caeb7f3611af2fbc5682a93248f60c4a6f5db1bcd237bc2 rubygem-rexml-3.2.5-162.el9_4.noarch.rpm d0278393db1ac1c2f56329b1d47402c84a38afdb0e76f78638b80f071db40dfd ruby-devel-3.0.7-162.el9_4.s390x.rpm e85dbd297deb15872efa7bfe1b3d9982cf3af62047faaca533cf2d705f84c40f rubygem-test-unit-3.3.7-162.el9_4.noarch.rpm ecfdbb201207f939bafee5ce30ab3977262636e2f73b28218e6d63628828dc5d ruby-3.0.7-162.el9_4.s390x.rpm eda6795ddf6af1a33c0d11d2aae22fc4c93bfb6459da7932b3de3b361ed573c0 ruby-default-gems-3.0.7-162.el9_4.noarch.rpm f6809eb4fbdc71511e0819d5b7b419c0f51d8e2ddaa37a2c79e09159f9fa0586 ALSA-2024:3842 Copyright 2024 AlmaLinux OS 0 1 Low

c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default c-ares-devel-1.19.1-2.el9_4.s390x.rpm 74bc85483b802e649da4f96130036ae843c9900640919ca65b9e25f3754786f7 ALSA-2024:3843 Copyright 2024 AlmaLinux OS 0 1 Moderate

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: command injection when deleting a sosreport with a crafted name (CVE-2024-2947) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default cockpit-pcp-311.2-1.el9_4.s390x.rpm 118fb87b978fc9eb2161f3d1d4d06ec6a77928f8f65c39b44b952c75f1d45771 cockpit-storaged-311.2-1.el9_4.noarch.rpm 76e5c124290b224d819d5972ea581ed9d4052781b70e0fda74d8928cfd15a193 cockpit-packagekit-311.2-1.el9_4.noarch.rpm 84700784182c44b69c2e4e620d94e50da125720aaff9f5c88336d5bab327e19f ALSA-2024:3955 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.12.0 ESR. Security Fix(es): * firefox: Use-after-free in networking (CVE-2024-5702) * firefox: Use-after-free in JavaScript object transplant (CVE-2024-5688) * firefox: External protocol handlers leaked by timing attack (CVE-2024-5690) * firefox: Sandboxed iframes were able to bypass sandbox restrictions to open a new window (CVE-2024-5691) * firefox: Cross-Origin Image leak via Offscreen Canvas (CVE-2024-5693) * firefox: Memory Corruption in Text Fragments (CVE-2024-5696) * firefox: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 (CVE-2024-5700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-x11-115.12.0-1.el9_4.alma.1.s390x.rpm c221d213bcaa471a8707f36b92eb5eec8bf850a3a153d82a3e18dd3ed91ae422 firefox-115.12.0-1.el9_4.alma.1.s390x.rpm cbcd855bccadb5c142ba22048254abc2497a114cc8b40c5c762c5cc974afa82b ALSA-2024:3959 Copyright 2024 AlmaLinux OS 0 1 Important

flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default flatpak-selinux-1.12.9-1.el9_4.noarch.rpm 06dbdc42d81b1aa97d49382abf1808b9d53376bbb4a4a4027fea7bd61fee8ef3 flatpak-libs-1.12.9-1.el9_4.s390x.rpm 5f4573e73dd8d2e1cc954eab817f487bdf29557b7be2590fac1dccf87c0fa2e5 flatpak-1.12.9-1.el9_4.s390x.rpm d9651393547ddbb9f46c0dbde498dfdaae428175f948ff509a232b8ffcfb2f3c flatpak-session-helper-1.12.9-1.el9_4.s390x.rpm de3e2d0bd1e8bf4984ce9998e6ce29215dceb68dc381e2d6673c1189747ad239 ALSA-2024:3999 Copyright 2024 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libgs-9.54.0-16.el9_4.s390x.rpm 3ad43d049bf4e638613ff48b00a2e57bce91e92872a70ba170d4c8a833e63e00 ghostscript-x11-9.54.0-16.el9_4.s390x.rpm 402a6cc7849619a4345f92a5053477f252d90cf3b5d04e67abb63519018929fe ghostscript-9.54.0-16.el9_4.s390x.rpm ab94df592773d33aeee1c02a86cad5ea3217044bb2d936fd68371ca8977a3cf0 ghostscript-doc-9.54.0-16.el9_4.noarch.rpm b8e54a1a0e129bf71e2635e8d3b1905f49d2d8d1681c229a2c0615d591858cf8 ghostscript-tools-fonts-9.54.0-16.el9_4.s390x.rpm c27bff1d343c15920c2f39752ff61f4c3940ccbfa39262cf1d470544e21678b2 ghostscript-tools-printing-9.54.0-16.el9_4.s390x.rpm d936821ada214627c363c18dc3be16ec96070e23bd26f41cf830b01c554dc3cd ghostscript-tools-dvipdf-9.54.0-16.el9_4.s390x.rpm de1212230da9ab7fcce26d92fc27034b2fdb65fbcd9c4c6d6be098596f1c17a8 ALSA-2024:4002 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.12.1. Security Fix(es): * thunderbird: Use-after-free in networking (CVE-2024-5702) * thunderbird: Use-after-free in JavaScript object transplant (CVE-2024-5688) * thunderbird: External protocol handlers leaked by timing attack (CVE-2024-5690) * thunderbird: Sandboxed iframes were able to bypass sandbox restrictions to open a new window (CVE-2024-5691) * thunderbird: Cross-Origin Image leak via Offscreen Canvas (CVE-2024-5693) * thunderbird: Memory Corruption in Text Fragments (CVE-2024-5696) * thunderbird: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 (CVE-2024-5700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-115.12.1-1.el9_4.alma.1.s390x.rpm 1d7c67a31884ec62ee83a84453e0dce5a353c25d11d0e083623600f92a90c142 ALSA-2024:4050 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv1 default AH/ESP responder can crash and restart (CVE-2024-3652) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libreswan-4.12-2.el9_4.1.s390x.rpm 81d44fd0ab9f5b3b153b1fd061dc6f5217d335703ebc0def9dbd521ce4855e49 ALSA-2024:4077 Copyright 2024 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-3.11.7-1.el9_4.1.s390x.rpm 0506b88132498adad6fe457f57a332c641b41b5a38b6ccc2064319867b4c82bc python3.11-devel-3.11.7-1.el9_4.1.s390x.rpm 50f221a058a1d13312cabf406c4a2f28ef2ffb2730a03ad430012b93aafa83ed python3.11-tkinter-3.11.7-1.el9_4.1.s390x.rpm 94f847a75c7adfc9ab009ff23a3a62b8a35d273718ae840903d5c73dfa367951 python3.11-libs-3.11.7-1.el9_4.1.s390x.rpm b80d6ae361922193bea2bdab246a252b0ac053d6e280e34b76598d41e0a81e7c ALSA-2024:4078 Copyright 2024 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597) * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-devel-3.9.18-3.el9_4.1.s390x.rpm 11965f8a3feb9aae464a52b2bffb31e4f7cbcd5ecba8dda50f1dc1d2b6c785dd python-unversioned-command-3.9.18-3.el9_4.1.noarch.rpm 9a6e6fe85c1bf82d97516b4b79184dca8e7bfa773926061af401ec530726cca2 python3-tkinter-3.9.18-3.el9_4.1.s390x.rpm cb01b198d75d57168557540eefd33e284adb1350b55b0e93a416c22d28bff663 ALSA-2024:4083 Copyright 2024 AlmaLinux OS 0 1 Important

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: Recursive clones RCE (CVE-2024-32002) * git: RCE while cloning local repos (CVE-2024-32004) * git: additional local RCE (CVE-2024-32465) * git: insecure hardlinks (CVE-2024-32020) * git: symlink bypass (CVE-2024-32021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default perl-Git-2.43.5-1.el9_4.noarch.rpm 1040a006be76c4ab6fd587de6b2fa2e1057bd491b4f06108f566b973f7ff606a git-instaweb-2.43.5-1.el9_4.noarch.rpm 1f9e2bb9dc7ce2e5c6cb9fd782c5ba444ca18027e0797dcd0dcc16ec6a45b7a0 git-credential-libsecret-2.43.5-1.el9_4.s390x.rpm 2b889a7e7a95dd32b3f418bb622907da94a9166461b9be18bf5fdeb39736bc61 git-email-2.43.5-1.el9_4.noarch.rpm 32d0050fb7bc85092b757aaa20509941905d6b5ec6ef2f2a03a3637ef6395cce git-svn-2.43.5-1.el9_4.noarch.rpm 3c041a3de73ac67dd10243e216a44ae32a67422bf16ecf9e868cd559e1edaeac git-core-2.43.5-1.el9_4.s390x.rpm 50da31825057a077d41a379dfd208e23b2f12472e4c5c35536ec2d070657d77d git-core-doc-2.43.5-1.el9_4.noarch.rpm 6b0bc3f5051fd024621c98f25ea0044cea0719dac8157201a77f3428ce1fe3f3 perl-Git-SVN-2.43.5-1.el9_4.noarch.rpm 6d13b9cadb4d3d0487071cca7ab6c7b21fb70d7f8fd059e85c90e906997eaa67 gitweb-2.43.5-1.el9_4.noarch.rpm 834cee01896b8d3c1ea3c6351f7f03f353216f4f065ba1c49a2b3751ee3ceab4 git-subtree-2.43.5-1.el9_4.s390x.rpm 8e655c49dfe96df2e41e3d77c06899b4e4e11f7421b99db337d85676c1b87d12 git-gui-2.43.5-1.el9_4.noarch.rpm a62589f893188de99786f204c82ed8ad898034c02c545ce9ce3859676b33de8c git-2.43.5-1.el9_4.s390x.rpm c96a3214372ac7ac3632ca03ffc7c2d8812a9dcffc2f907c642f796ae6e17d7a git-all-2.43.5-1.el9_4.noarch.rpm cb02f0771e12424bdffaa9757eaf1efe1d904baef497b67a9975795806ada690 gitk-2.43.5-1.el9_4.noarch.rpm d072cfefaf0501cf3ef324a529aa0775bafe170547712c65b752d8b83b6d88ed git-daemon-2.43.5-1.el9_4.s390x.rpm f2036a6dc1bf82bb8b348050ff4145fcecc9e5c6500d9895639bcf635ae02c5b ALSA-2024:4165 Copyright 2024 AlmaLinux OS 0 1 Important

pki-core security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * dogtag ca: token authentication bypass vulnerability (CVE-2023-4727) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default idm-pki-est-11.5.0-2.el9_4.alma.1.noarch.rpm 1066184cb7ab11c16786d87d07aee621f77f99a40acbe01ff2936d4f74b65684 idm-pki-ca-11.5.0-2.el9_4.alma.1.noarch.rpm 33727518f6f149863858eb0c0b76291ed3820887f2472706cf922c7f9d5c589f python3-idm-pki-11.5.0-2.el9_4.alma.1.noarch.rpm 415da43ff8c2f53b843ee61509626d5be70ec8910e1991ac91f827fcb34a6f8a idm-pki-server-11.5.0-2.el9_4.alma.1.noarch.rpm 5f69eff8a1800df05aef1387487eda845003e398830e56bf7342eca40c7810cc idm-pki-acme-11.5.0-2.el9_4.alma.1.noarch.rpm 7c7e9e9eeee54e3974d92a8231a87e73ae65447ef192e79b85f8bb641e2c5cd7 idm-pki-kra-11.5.0-2.el9_4.alma.1.noarch.rpm 9ee0c6262063e920a116bc74b3bb40a507ebc0160ef441536415189339f9e254 idm-pki-base-11.5.0-2.el9_4.alma.1.noarch.rpm ad4f7b9fc5c178d5b523d7a132583ece79e6403a95495123953bccf7a8246117 idm-pki-java-11.5.0-2.el9_4.alma.1.noarch.rpm ae64b42d15d1c104a579912fd032a3e5c7e80bb67d33d5762bff138a7a26ff5b idm-pki-tools-11.5.0-2.el9_4.alma.1.s390x.rpm fb9c2c5e4d2082c44cf84c76562718bfbf57802b9e12de516892ef7703f77b3d ALSA-2024:4212 Copyright 2024 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default golang-src-1.21.11-1.el9_4.noarch.rpm 1dc8fe926a6e996a9389af8437654ea05c3fabfd6b1c1ea77b686e1ac6929d4b go-toolset-1.21.11-1.el9_4.s390x.rpm 22d3189212c5db92e56d18200f9429e64097c377b21e7541de8525cb600a2134 golang-docs-1.21.11-1.el9_4.noarch.rpm 30626121b356e804d0a886f80b2ef247ba16cc13500f3f03cf97223e5851dca3 golang-tests-1.21.11-1.el9_4.noarch.rpm 429a278d9e9a73f16399e6c19b78677cf6273b69886bd7c4cb73a9d7dc35a3f8 golang-misc-1.21.11-1.el9_4.noarch.rpm 497a732a5881c550134eec767645fb08778b65dd891c720dca5b5fb8245d8cc6 golang-bin-1.21.11-1.el9_4.s390x.rpm c9b72a58a83e68e5aa4b653906b93fdf572fb701aca3381f7085f861d044fabe golang-1.21.11-1.el9_4.s390x.rpm de0d3d59a67fd404ac2b7838b422ef67920e87b7d49f4cd709c0ae6918cc1cb9 ALSA-2024:4278 Copyright 2024 AlmaLinux OS 0 1 Important

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write (CVE-2024-4467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default qemu-kvm-8.2.0-11.el9_4.4.s390x.rpm 04766040b1b5ac1e393d1d9248ec513fc81c32724e81ff76f9000ab0ca0a3bb4 qemu-kvm-device-usb-host-8.2.0-11.el9_4.4.s390x.rpm 10deadf13726973dc9561fa944a36e526d3b441b8642bdb1aab081c891db9362 qemu-kvm-block-blkio-8.2.0-11.el9_4.4.s390x.rpm 11c0636b8be1e1d5bf2084e1898c48a609b751933de65177b3d3eac360fd4621 qemu-img-8.2.0-11.el9_4.4.s390x.rpm 2497787a68f1004c02e80f10aea64ccca408ff5ca1dcbd3a3554456fe5306e86 qemu-kvm-tools-8.2.0-11.el9_4.4.s390x.rpm 41fb1d2fc110105255780f1a2def53cf959e7bb101cc6b0a7611bfaa705d4e13 qemu-guest-agent-8.2.0-11.el9_4.4.s390x.rpm 43de6dc3bf2294b1a6c7d8082e65663d65ae6f59c950cafb1a68e57f411f374b qemu-pr-helper-8.2.0-11.el9_4.4.s390x.rpm 4482d0176e23f37c08d4d6f9d8c3a997094a6dcdd5fc412aa8502e8c771aef29 qemu-kvm-block-curl-8.2.0-11.el9_4.4.s390x.rpm 4b0e84e7df1ffd7601a876f50bd96ff86d400d7617b6113a50f123b3daedb15c qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4.4.s390x.rpm 68cde7dc505daa6d320b7c1bbfde329b9c819178f2cc54274b8d3ccf91f29330 qemu-kvm-common-8.2.0-11.el9_4.4.s390x.rpm 6f599bce4df8be833490749168b2b48b93ce8500dd8763a2f21f7cbff69bf03e qemu-kvm-device-display-virtio-gpu-ccw-8.2.0-11.el9_4.4.s390x.rpm 8007a497119935288f29a8a15d92443e0731fba7d69e257a110a9096b7ba167b qemu-kvm-core-8.2.0-11.el9_4.4.s390x.rpm 829217b3acab5603780d8403b6e898866d8b8da97265101f8bccf85ca74dce9c qemu-kvm-audio-pa-8.2.0-11.el9_4.4.s390x.rpm b78e58619bf41ceefa871bd18d4dfcd52c583bb2143fe0901d8c1da79d4f40b0 qemu-kvm-docs-8.2.0-11.el9_4.4.s390x.rpm c18908eef92ede85136786a4016292414a93a5461fdab04e40b32aeb6e47c694 qemu-kvm-block-rbd-8.2.0-11.el9_4.4.s390x.rpm c6be02d4ca6810a0d1e2cf6f046c0608894845e6769724eb2b43b9f7ebb497b0 ALSA-2024:4312 Copyright 2024 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Possible remote code execution due to a race condition in signal handling (CVE-2024-6387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default pam_ssh_agent_auth-0.10.4-5.38.el9_4.1.s390x.rpm 58cac824c16d93fb1fe32a2b0ab18d8df0f91ed1158f67473616bb664485f991 openssh-askpass-8.7p1-38.el9_4.1.s390x.rpm a4a6a5f7dfc5fdf8c97b74aaaf3c59bc0facb33370022c1475f69fa0cd3194d5 ALSA-2024:4349 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626) * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801) * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974) * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393) * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667) * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870) * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960) * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400) Bug Fix(es): * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943) * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672) * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220) * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687) * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716) * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641) * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669) * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252) * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595) * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083) * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953) * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default perf-5.14.0-427.24.1.el9_4.s390x.rpm 0d8b1b0c4b506f15d1ee9dde156c0fde8a280df843b71c75e0f8e55421dc7191 kernel-devel-matched-5.14.0-427.24.1.el9_4.s390x.rpm 2958fdd573f51c8dc41843f3810cc9abf5db8f480c5025cff1ea1a866ff12487 rv-5.14.0-427.24.1.el9_4.s390x.rpm 3c8bc644131b4ca0f32bd08a7b7f4b3885de9ced96220d3ffdf696c3df69a7a9 rtla-5.14.0-427.24.1.el9_4.s390x.rpm 6358d1b8f922a82c5a4da902bb7bc8141bc674ff3f6c08ae72ecb59dac336c78 kernel-devel-5.14.0-427.24.1.el9_4.s390x.rpm 6978e69b696354ecc6fe4eec20601e50fd15b1c101bab8fc8934d570026e1766 kernel-zfcpdump-devel-5.14.0-427.24.1.el9_4.s390x.rpm 8146d49a4572840e405ef17b49a85ce0504561b896785ff9b4cc2d32349b34a7 kernel-zfcpdump-devel-matched-5.14.0-427.24.1.el9_4.s390x.rpm 9686322e7616a5142156d76bcdf316673c474a0ba5cbbf5738c1bcfed7b2937f kernel-headers-5.14.0-427.24.1.el9_4.s390x.rpm c95e905e7d8e13808b70d526a48cb31c4ac945fb47c4c43dcfdf43618b2aef62 kernel-doc-5.14.0-427.24.1.el9_4.noarch.rpm ccc8b24794ad81b3ecaa94f5f3f996e6d38c86928c1aff1394fff26ff7283d34 kernel-debug-devel-5.14.0-427.24.1.el9_4.s390x.rpm e9343b08ff4d3c5229c3e6b0c3cee6d39d0453f3f45d4df2a490c4df45b3c30f kernel-debug-devel-matched-5.14.0-427.24.1.el9_4.s390x.rpm fa8bcb590d7da41e1318ef195c85e2e7a5abd9feace027268730bd34982fff79 ALSA-2024:4371 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-1.33.7-3.el9_4.s390x.rpm 200090b64a324e265f8b60f81b72247afec110682c9dcbb92f1dbd8863581734 buildah-tests-1.33.7-3.el9_4.s390x.rpm 4d3f674af728549a1dc8dc80c0904d5f3f8e5e6580bfa18405baaa2487ba36d9 ALSA-2024:4378 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default podman-4.9.4-5.el9_4.s390x.rpm 1a36cde0664ea80451ccfdc05bb5115d99c4caddeb14c1a1dd950e6e69bce45f podman-plugins-4.9.4-5.el9_4.s390x.rpm b5bcfed48051ec5607ceeebd86c08cf980672e45c74c7324354e07659f5b1d7f podman-docker-4.9.4-5.el9_4.noarch.rpm bd559588942879b0c05b245986b0e042e349a97be5ec839cafdfada3f5975d70 podman-remote-4.9.4-5.el9_4.s390x.rpm ce1d5bb79141effba6b34a23455cf73029e82b10ed0bc1ac8c438306742c3113 podman-tests-4.9.4-5.el9_4.s390x.rpm f66eacfe51a8629e3fbad01584221075a2fe65521b3129bfa16d36e7224ee2ab ALSA-2024:4379 Copyright 2024 AlmaLinux OS 0 1 Important

gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gvisor-tap-vsock-0.7.3-4.el9_4.alma.1.s390x.rpm 6b51e36fd71d31dd656c727ea2825c73fa4431906363adc00509395e2aa269a6 ALSA-2024:4422 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default fence-agents-virsh-4.10.0-62.el9_4.4.alma.1.noarch.rpm 065b47140db0c6b670d6296398f699378ee6d552bf5ee62acbecf45acda1b5d8 fence-agents-ibm-vpc-4.10.0-62.el9_4.4.alma.1.noarch.rpm ba7789db5bc847807bb947e184652a667c987fcfbf2b708600008ce09dd1d1f9 fence-agents-kubevirt-4.10.0-62.el9_4.4.alma.1.s390x.rpm d9c7fc47bfae4beb0b375bd1400ec58a1416a5a1cf30e113d08a2becc2092abc fence-agents-ibm-powervs-4.10.0-62.el9_4.4.alma.1.noarch.rpm e375fa35013dd9c16ff5ab185772111f0f9448825233eae247e25e4528952305 fence-agents-common-4.10.0-62.el9_4.4.alma.1.noarch.rpm e88901f7ef2b32a7cb8313f4901ab8359034ebcbe0cd7b99d77002330b4010be ALSA-2024:4439 Copyright 2024 AlmaLinux OS 0 1 Moderate

dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.132 and Runtime 6.0.32. Security Fix(es): * dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default dotnet-templates-6.0-6.0.132-1.el9_4.s390x.rpm 04490739ab79ed744ab365ebcc74b1ce8519b2d34ee84e30e2267ef0be8c0e85 aspnetcore-targeting-pack-6.0-6.0.32-1.el9_4.s390x.rpm 068faf142cb4cb4b3cba93daa1bea2ec45d6bffdfa7c5f3420afc449d257eb95 dotnet-targeting-pack-6.0-6.0.32-1.el9_4.s390x.rpm 431a8cca9547eda5ae10e37b9427e71cbb05d24122c99c10533b525617e118a3 dotnet-apphost-pack-6.0-6.0.32-1.el9_4.s390x.rpm 65101c75788e672645e75919403ea52b320d7c90698b9c76bcfc574c9c3bbeb9 dotnet-sdk-6.0-6.0.132-1.el9_4.s390x.rpm 6a79d23433815d1d630cc03c8cb343ba25f6d7af979aefcf55b106d619c0616a aspnetcore-runtime-6.0-6.0.32-1.el9_4.s390x.rpm 8b4b722607c1370da42ae58befbedf72fe71d55e5d563d23f62294ed52ba7ace dotnet-hostfxr-6.0-6.0.32-1.el9_4.s390x.rpm b08f909309da0f6fe96ab9727c9cc37218d3234aa99adf1a4d815eed84667cd6 dotnet-runtime-6.0-6.0.32-1.el9_4.s390x.rpm de73e80b1664e869e151d21efbf510df9741155fc9cfcccd12c70207377b57c7 ALSA-2024:4450 Copyright 2024 AlmaLinux OS 0 1 Important

dotnet8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7. Security Fix(es): * dotnet: DoS in System.Text.Json (CVE-2024-30105) * dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264) * dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default aspnetcore-runtime-8.0-8.0.7-1.el9_4.s390x.rpm 0504c1f0a99d18a09f315d2429cc57881b93b8713b11b167d555038d2bbab6b4 dotnet-host-8.0.7-1.el9_4.s390x.rpm 118ec31d56d50b2946b0c09d7bf46efa9ebaa15563db8f5775bfcf1f0fd152f4 netstandard-targeting-pack-2.1-8.0.107-1.el9_4.s390x.rpm 272578bb575dffa157da384187c763955a75de24276ea9e17a17c9a0a3f9df63 dotnet-runtime-dbg-8.0-8.0.7-1.el9_4.s390x.rpm 58e974e03b4092ae85440d6e9e1baaec23134b96f214f497484894ef148e1178 dotnet-sdk-8.0-8.0.107-1.el9_4.s390x.rpm 9248f6157446a205a989504f3b1463ab0573c153e1b3c2f76d7c16bd92a770d1 dotnet-templates-8.0-8.0.107-1.el9_4.s390x.rpm 924b98c92d4711382779557166a8f455a6301b745f5f7447274e5131f1b0ab43 dotnet-runtime-8.0-8.0.7-1.el9_4.s390x.rpm 97e602ac18181acf39e531435706b7b207b7bc5a3731ecdc1d74fbc75de38763 dotnet-sdk-dbg-8.0-8.0.107-1.el9_4.s390x.rpm b31344d597f0d900ab8781136ec78660bed5864f7834cc0881a2b3736094ec03 dotnet-hostfxr-8.0-8.0.7-1.el9_4.s390x.rpm bf510b70bd6669461111553ac3593b12c151c3f962840084f9df6ecb820036b6 aspnetcore-targeting-pack-8.0-8.0.7-1.el9_4.s390x.rpm c72ef448f5ce55cf7cbc03eb1556c9a852eb68b395789d198e610b2123788fcd dotnet-targeting-pack-8.0-8.0.7-1.el9_4.s390x.rpm cd41a1cd5701f4e16019db48d8bd25a5510e976deea0c8d28ad436511d58fd82 dotnet-apphost-pack-8.0-8.0.7-1.el9_4.s390x.rpm cdf3c8400cdc6f9bacf1851e747e49b574064993bf0b3420e2ce926e8469d912 aspnetcore-runtime-dbg-8.0-8.0.7-1.el9_4.s390x.rpm fce911392c8e589fea29e9f855c24a75e89a1bfe1ec6ace01cb0b70b5251c06b ALSA-2024:4457 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Possible remote code execution due to a race condition in signal handling affecting AlmaLinux(CVE-2024-6409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default openssh-askpass-8.7p1-38.el9_4.4.s390x.rpm 05b2a9741568f9e8135a66474bf6914e8e4797a35bbc167bcf37f515a6914842 pam_ssh_agent_auth-0.10.4-5.38.el9_4.4.s390x.rpm 8ecdd0dd00a3058da0ef9c9d2e28c820f58959121d958fe0879b76d0db47eb51 ALSA-2024:4500 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604) * Mozilla: Race condition in permission assignment (CVE-2024-6601) * Mozilla: Memory corruption in thread creation (CVE-2024-6603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-115.13.0-3.el9_4.alma.1.s390x.rpm 91ca525ba1ceb7dd9a5a989efe818e22fe63f35efee113e374b4600a4f4b4938 firefox-x11-115.13.0-3.el9_4.alma.1.s390x.rpm d7521805eb0fcc9a07668f661954b60a0c9bb82a23bb64a51ba8c68ff284c5e4 ALSA-2024:4502 Copyright 2024 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default skopeo-1.14.3-3.el9_4.s390x.rpm 3d0ddb6e3d5c15a7714c42335a9a1252cbcca39632fae45d692ad36d604388d9 skopeo-tests-1.14.3-3.el9_4.s390x.rpm 538003afd922e49a01f080d73e8493c2661500d535d2a7f06a7931394d0c1956 ALSA-2024:4563 Copyright 2024 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147) * OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131) * OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138) * OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140) * OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144) * OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default java-1.8.0-openjdk-demo-1.8.0.422.b05-2.el9.s390x.rpm 129be5eadf0581e1205016006ee48e55138b7e1bfbe181566d6711cabd073eea java-1.8.0-openjdk-devel-1.8.0.422.b05-2.el9.s390x.rpm 628f63a6cd726ebcd540416dcbdb41cc39e1d3d674a338bda8c91702cf687b36 java-1.8.0-openjdk-src-1.8.0.422.b05-2.el9.s390x.rpm 62f04890bdf735380aff046bdcccc9b329182c1699074aa59373b840ec0198c1 java-1.8.0-openjdk-headless-1.8.0.422.b05-2.el9.s390x.rpm 6677ee60fe8aff8ee57cf9cb100850c8228c54956ba48dfee928f1072949c8b7 java-1.8.0-openjdk-javadoc-zip-1.8.0.422.b05-2.el9.noarch.rpm 8649a75965b7e20d3dcacb5dccc208506bd9e11401671023bfa8d02dd21314f6 java-1.8.0-openjdk-1.8.0.422.b05-2.el9.s390x.rpm 9b210af349b56cb0a1633b3ccc0ae4692f05e99b5ba4e6761099e8bea8073635 java-1.8.0-openjdk-javadoc-1.8.0.422.b05-2.el9.noarch.rpm ecf55c1f2df39692caf84f33dd4fad0c0b30f4454881f6dfb0afa9dd2f98ebbc ALSA-2024:4567 Copyright 2024 AlmaLinux OS 0 1 Important

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147) * OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131) * OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138) * OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140) * OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144) * OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default java-11-openjdk-static-libs-11.0.24.0.8-2.el9.s390x.rpm 14e8e9d98d62eda7ff3ef816647359b1661792d6b2605aa37b2b8688b95277b5 java-11-openjdk-11.0.24.0.8-2.el9.s390x.rpm 1f81805bd307ca409fab50a4f573a909ff448aeb5912875b5c50bdaead3c83d3 java-11-openjdk-javadoc-11.0.24.0.8-2.el9.s390x.rpm 39fb7b2523130186e5f6c0b42b06faf5796963b5142ed4b31f767cc0fbaa3c37 java-11-openjdk-src-11.0.24.0.8-2.el9.s390x.rpm 4d26ea38e7a81e5b4fe334d68a2c989c4112097118ff2f31098a0b7453fe4bff java-11-openjdk-headless-11.0.24.0.8-2.el9.s390x.rpm 596d7b98cb9a33e473aed9734fa693e8d739fafe0597fe5ece4f1390e72c0598 java-11-openjdk-devel-11.0.24.0.8-2.el9.s390x.rpm 60c840bbdf997ee1bb0bfacdf42425e9e7db2bcf4f55cf75edec225fb67e560e java-11-openjdk-javadoc-zip-11.0.24.0.8-2.el9.s390x.rpm 6861a10933f4f9a5699cd22a20d053d4282bb66ac53727721c2f437c0eefba1c java-11-openjdk-demo-11.0.24.0.8-2.el9.s390x.rpm 8a55e30c1cff57d9c91c21a30d5ee74b83fe2a30698b11a1995ff1b0ccb85550 java-11-openjdk-jmods-11.0.24.0.8-2.el9.s390x.rpm f48b4d2da42cb603336a27f9920c4d9afca0b8de482ec0febf71b063f5008d48 ALSA-2024:4568 Copyright 2024 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147) * OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131) * OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138) * OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140) * OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default java-17-openjdk-17.0.12.0.7-2.el9.s390x.rpm 0bec120c5010dcf23ac9f0b25764dc953493cd9275e2ffce3106412f4b022bec java-17-openjdk-headless-17.0.12.0.7-2.el9.s390x.rpm 5f958cd66290e5621b82add8242f91d45dd3b03fc3f71f872a928ce561304d85 java-17-openjdk-demo-17.0.12.0.7-2.el9.s390x.rpm 693c1ec3f6cae8689aae58016236944a71a9c6fb9a883727223261e93f5c395c java-17-openjdk-devel-17.0.12.0.7-2.el9.s390x.rpm 6a953cac5a21c2f66b93a81fd763ec91afa30c255c977ba340af17e2f67d27c0 java-17-openjdk-javadoc-zip-17.0.12.0.7-2.el9.s390x.rpm 73a450f850cde1e880bfee5dc56a57dcf8fa8dce6e466b306010a25813e51717 java-17-openjdk-javadoc-17.0.12.0.7-2.el9.s390x.rpm 8f57e80bff59dcc5f9fa7a1ea31b2a6e599a6141a194b51a4effd2370ea190ec java-17-openjdk-static-libs-17.0.12.0.7-2.el9.s390x.rpm e6bd62a906cf010e7d9b1ee233e89e46481d750b77ec80920b0d56af3e4ca1c5 java-17-openjdk-jmods-17.0.12.0.7-2.el9.s390x.rpm f7321ee1e7646e13fa2006ae897528df31294fc516e2ee548dd780241c895694 java-17-openjdk-src-17.0.12.0.7-2.el9.s390x.rpm ff805b13c62b874ca5a18660f715aeaf0efba435026e6b9073c14b35e2138c39 ALSA-2024:4573 Copyright 2024 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147) * OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131) * OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138) * OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140) * OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default java-21-openjdk-jmods-21.0.4.0.7-1.el9.alma.1.s390x.rpm 0a2e950d0e375520e13559bc1fd9c541397955a646f2d8179d80cccff9551421 java-21-openjdk-javadoc-21.0.4.0.7-1.el9.alma.1.s390x.rpm 2a3f4158af951b978e358b2a1953e674faeea467b23a7ab9c20fd368dbc591e1 java-21-openjdk-src-21.0.4.0.7-1.el9.alma.1.s390x.rpm 34b9efbfda254bc6a0c16e5ede0bd4ef476b6c15268e89c3d161e400e9577b21 java-21-openjdk-javadoc-zip-21.0.4.0.7-1.el9.alma.1.s390x.rpm 5a50189453a1ca7f52aa2db26a946fee42ba6b718fca59027c54d7b8153e20a9 java-21-openjdk-headless-21.0.4.0.7-1.el9.alma.1.s390x.rpm 70f26bc9f776cbc1fb3e1cc706fcb8d80cee92285ae88b1f1f99c0d1e8afc06e java-21-openjdk-demo-21.0.4.0.7-1.el9.alma.1.s390x.rpm 89dbac2e310d46d65ca3feb1533e3c8093f0f19ee08b1c05d94ba5ec175aa627 java-21-openjdk-devel-21.0.4.0.7-1.el9.alma.1.s390x.rpm a73d95b06a58b9fade722970dcde5cd1d2dd53126b60c09a49aabf54ced18ca1 java-21-openjdk-static-libs-21.0.4.0.7-1.el9.alma.1.s390x.rpm a8ce30fbd85315722b0d1b949c733381dc3c82b6530eb8303ee527eea2084d23 java-21-openjdk-21.0.4.0.7-1.el9.alma.1.s390x.rpm acb452dbf36ca4cd1abf99b7df86a221936034f8d875b79a2bf3bbd99f29bc68 ALSA-2024:4583 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886) * kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548) * kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596) * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627) * kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638) * kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783) * kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858) * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397) * kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435) * kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958) * kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904) * kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543) * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) * kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593) * kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270) * kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957) * kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-devel-5.14.0-427.26.1.el9_4.s390x.rpm 2fbcc68107d1b52dab8f9ec8d4950bfd89a092e631461a416695e881e85b7987 kernel-doc-5.14.0-427.26.1.el9_4.noarch.rpm 2fdd15a93267a5bac0ed7269710d1ed6a12ee7fb382a0255ccb72fee8548efc6 kernel-zfcpdump-devel-matched-5.14.0-427.26.1.el9_4.s390x.rpm 398c565d12a377cb043a279c779c5637b89767fef47febaf5a0dd9b0b1fe504a rtla-5.14.0-427.26.1.el9_4.s390x.rpm 44056ff25dfa0c9559e411fb906a3ff101758f33b4b79892014ea73dd76ebeda kernel-debug-devel-matched-5.14.0-427.26.1.el9_4.s390x.rpm 49f9e3b1c2d70a0db6f4fcf86550f174a40467f22b2450a83c003bf2aaac31c0 kernel-headers-5.14.0-427.26.1.el9_4.s390x.rpm 87bb0f6082fdb70be0d4918360eba290f6c25433448aa9216e126748014b4a7b rv-5.14.0-427.26.1.el9_4.s390x.rpm 909bc10ffcd671c5e69c2fb19f5090ce94016a5681bcb7ebfc3e5223e71ea29a perf-5.14.0-427.26.1.el9_4.s390x.rpm 9d1248103a618a3f20072a352c21cccbdc2ed73e24d227d417841ad8f6edb851 kernel-debug-devel-5.14.0-427.26.1.el9_4.s390x.rpm ae6ba1706fbe3eb6a78f367d88ae283d9b89c2e7f60724f20ad552461004deeb kernel-zfcpdump-devel-5.14.0-427.26.1.el9_4.s390x.rpm daa78976f2ff81fd9372ce2913c4a846424e8bd215b298c90cf6439b40b77a04 kernel-devel-matched-5.14.0-427.26.1.el9_4.s390x.rpm e5778c9cfd5c5d8456bb55d3db684cb7b12c6b2baa721c8233fb3bfb7130bbba ALSA-2024:4623 Copyright 2024 AlmaLinux OS 0 1 Important

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default qt5-qtbase-examples-5.15.9-10.el9_4.s390x.rpm 0910577559923a95dadb9bbcca5d3c3680aa57adacab1cae5665243839df56e3 qt5-qtbase-gui-5.15.9-10.el9_4.s390x.rpm 31b773e2d698b029af14d7153262565a06a753bf511cccae8420fa481d27dcca qt5-qtbase-odbc-5.15.9-10.el9_4.s390x.rpm c4bc3fb79296f06c94a4fb27fba6b3276912807ea8a1aca2a994659f4d02fbcb qt5-qtbase-private-devel-5.15.9-10.el9_4.s390x.rpm cf75eb2c88290f84169ef2c770293f1267cac60c73e0081cb2869f7b14ab0d19 qt5-qtbase-mysql-5.15.9-10.el9_4.s390x.rpm d6edcd3dbf9b43160a62d67ee66dcc876a6b52ce000beac8a6a43c3249eacf05 qt5-qtbase-common-5.15.9-10.el9_4.noarch.rpm e8ba0c47c1d2af35f0577f0d67f1e533ad3a3f4e792dcbdf445d52044e514baf qt5-qtbase-devel-5.15.9-10.el9_4.s390x.rpm ea03a3a197d449efe6319c0aff89411513f89cae27e415b43315bcfe0cf6fb71 qt5-qtbase-5.15.9-10.el9_4.s390x.rpm f73df4f0ab486c9e0dc43c983ab927bb59bcda2abc756bd1faa2c31009e26519 qt5-qtbase-postgresql-5.15.9-10.el9_4.s390x.rpm ff48d86561d0c829b4bf44031b4cc72306be05180fa562017dedcf614e834ac1 ALSA-2024:4624 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * Mozilla: Race condition in permission assignment (CVE-2024-6601) * Mozilla: Memory corruption in thread creation (CVE-2024-6603) * Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-115.13.0-3.el9_4.alma.1.s390x.rpm 0735f13b256772629dec3c7346aac03aea5408a704c787f589d072eb917b54be ALSA-2024:4726 Copyright 2024 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Improper escaping of output in mod_rewrite (CVE-2024-38475) * httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474) * httpd: null pointer dereference in mod_proxy (CVE-2024-38477) * httpd: Potential SSRF in mod_rewrite (CVE-2024-39573) * httpd: Encoding problem in mod_proxy (CVE-2024-38473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mod_ldap-2.4.57-11.el9_4.s390x.rpm 0e10f044b9e11d4a9c1e6b477d2e3a3b7b7895d344d2ed485d2040417c515979 mod_proxy_html-2.4.57-11.el9_4.s390x.rpm 3d3a36d9fe6d3171b748b769a3a6f05516699a345a678a4168b5719288475ed5 mod_session-2.4.57-11.el9_4.s390x.rpm 43f330227208e1f72de34f703cb23335a902771817cd2d7c6fccc842c2efb53a httpd-core-2.4.57-11.el9_4.s390x.rpm 6edbf9752888c2a52a85db7f12b50ad7900b626a31b9ababd3390fd9b313cf28 mod_lua-2.4.57-11.el9_4.s390x.rpm 70c415bbe56c5f4872a34124d58c483f529a7296424d0e76563e2141516f74af httpd-filesystem-2.4.57-11.el9_4.noarch.rpm 83c3fadfe9c92ba0d104583616b13b3807bad424b82edbb30814263953b71361 httpd-devel-2.4.57-11.el9_4.s390x.rpm 891e34fb788f0162fe7013108efa21700a436f0050c33a238621984515c159e5 httpd-tools-2.4.57-11.el9_4.s390x.rpm 94dfb4957c2009d7e0e1e29b75a15cfccc7ffbd1d1f17dbabc6c14f5cf85c1b1 httpd-2.4.57-11.el9_4.s390x.rpm ac0a64acc41fce626a857f3217953eb9180a434016026f29c6ed31225e46270a mod_ssl-2.4.57-11.el9_4.s390x.rpm ad4a10a7f001cc31e1236230f32579eca80a467b55ba1c87195c9e09beb1994b httpd-manual-2.4.57-11.el9_4.noarch.rpm bafdbbd696cea4482b92bfbd18bfa476e362601fce71b5d4c83d4a97243c9a00 ALSA-2024:4749 Copyright 2024 AlmaLinux OS 0 1 Moderate

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765) * edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236) * edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default edk2-ovmf-20231122-6.el9_4.2.noarch.rpm 07ab65898528b14bd133dcc29037207a0575b113ba24d06b8ec9fb9a2740a4a8 edk2-aarch64-20231122-6.el9_4.2.noarch.rpm 9a5248396531529aa0a93ef15d4a30176a9c18dced35b724cbc45a4b1e0b3784 ALSA-2024:4755 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic (CVE-2024-3044) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libreoffice-data-7.1.8.1-13.el9_4.alma.1.noarch.rpm 03e3ef148b80826d3481e2a6b20466babd1d3a77baf85404a79b4539a8aa9105 autocorr-ru-7.1.8.1-13.el9_4.alma.1.noarch.rpm 04368f95302b72ae743f5536e8b52a790dbdd2b5d4807375400c024ba0e47e4d autocorr-hr-7.1.8.1-13.el9_4.alma.1.noarch.rpm 0bfdcce25ea72d11fddf83ead3c0af28283bbf6fcc07bd0b933a7004157b4bcd autocorr-ja-7.1.8.1-13.el9_4.alma.1.noarch.rpm 0ff756cdb0ab836d4f48e3b09dd3aa7268befe47756541c30898d3dd2f2b9806 autocorr-zh-7.1.8.1-13.el9_4.alma.1.noarch.rpm 21fb07b9b0d3a42ed1ffefc4e6bf62e9d572eb99f351f8bc72c79ee05ba40d8e autocorr-mn-7.1.8.1-13.el9_4.alma.1.noarch.rpm 26291d58d9a9e49fb6b29cca4d790b644224a1ffc72ec5b3b36aae26c84d8f4a autocorr-pl-7.1.8.1-13.el9_4.alma.1.noarch.rpm 33c59a214526f7111c07aadb43125513a7291995b56c1b69044b77f8fa585070 autocorr-el-7.1.8.1-13.el9_4.alma.1.noarch.rpm 3a1fddb25f77c31938f72bb9953628a5eff04e84bf5ff923d14884f9eda69a18 autocorr-vi-7.1.8.1-13.el9_4.alma.1.noarch.rpm 3f11efe5d7f6572776aa981fe768b975555668d3e130439778628a95bc453bd5 autocorr-lt-7.1.8.1-13.el9_4.alma.1.noarch.rpm 41c1ba137ea39e07ed1e90932b0ad2e2c5e5680d6a46cdbdaf4338f612d97e35 autocorr-lb-7.1.8.1-13.el9_4.alma.1.noarch.rpm 482786b3374f7bda0179e8794843b3bbe9fd9b5790b52cf62dc1be5897c97a67 autocorr-ro-7.1.8.1-13.el9_4.alma.1.noarch.rpm 48b90cc6c673056aaeeafc7879ccbe5e4bde525a7a64f34dd0c1c24270b533b8 libreoffice-core-7.1.8.1-13.el9_4.alma.1.s390x.rpm 4acbc2fe32f616dd8bd19e9c8e25c2e17b726aaad2c0c89976b20f3a74d158cf autocorr-fi-7.1.8.1-13.el9_4.alma.1.noarch.rpm 4d2c23209ded6d5f46357c1e6a5785b5e0cae52f5b93f661b371419630ed801e autocorr-af-7.1.8.1-13.el9_4.alma.1.noarch.rpm 553aa18cecb1b5d6f1c37a819fb6a476103cf40180913845fcfe1d989879f7c3 autocorr-nl-7.1.8.1-13.el9_4.alma.1.noarch.rpm 5896b1e6cd29e2905a2c7b67855656a547b198e3fbc6a0aab42bc8ae16f9a093 autocorr-en-7.1.8.1-13.el9_4.alma.1.noarch.rpm 58dbcb989a0caf1fcf1bbf5beb3a4fdc0cc3a5d410ae29c1ede7433eaab2a169 autocorr-vro-7.1.8.1-13.el9_4.alma.1.noarch.rpm 5cbf4b22dcb5be7aad41abf4330a10597eb5d3e1a55d4518473799f3d3fdb0b7 autocorr-da-7.1.8.1-13.el9_4.alma.1.noarch.rpm 5ed9841679ec426eba2b450a4bd0b1aba6355d248ffb11b3404efa7f0f2d3bfe libreoffice-pdfimport-7.1.8.1-13.el9_4.alma.1.s390x.rpm 6059b223433bf065031beb3caa033701dafb09ef7d9e429cd34f2e3a2379bcb6 autocorr-sr-7.1.8.1-13.el9_4.alma.1.noarch.rpm 61f3bb4512d322bfe4450d94c8b213720e4f1a575d517be36fd05663af289673 libreoffice-impress-7.1.8.1-13.el9_4.alma.1.s390x.rpm 67a68b1862a0542fefd541c2553fac0170445f1a0196710f77b3515aad46a562 autocorr-fa-7.1.8.1-13.el9_4.alma.1.noarch.rpm 67bf550b430ecfcd58464c4f0916e19d0006dcc4f2026894473c157816830e44 libreoffice-help-en-7.1.8.1-13.el9_4.alma.1.s390x.rpm 6a80205b8677fc3932bf071d248f0541229c608089f1478d5f42323412dc5463 autocorr-sl-7.1.8.1-13.el9_4.alma.1.noarch.rpm 6d593e0f513e1f9759ebe20a1aacc5d57123032cd21c8073253f3e907316549c autocorr-hu-7.1.8.1-13.el9_4.alma.1.noarch.rpm 7134cc9c8e9c241937855244210fd8a22f4ac8c442aeca3dc3b7fa953e0aaf6d autocorr-de-7.1.8.1-13.el9_4.alma.1.noarch.rpm 8a7b92ab40755f779d6a8c800e6f26c5b71a5ea862ea35c1856b49fbedafd08a autocorr-ca-7.1.8.1-13.el9_4.alma.1.noarch.rpm 8b22cc7a6f30eb9d3458a1f50d05508cb932cc6c92cf9534d9e27947d40e5c96 autocorr-dsb-7.1.8.1-13.el9_4.alma.1.noarch.rpm 8cfd5efc96a5eda885dc1407fd7e53e75bc4cc2b4c7616727642ecc1accdc4ce autocorr-sk-7.1.8.1-13.el9_4.alma.1.noarch.rpm 92d0017acd5e3e1fb111e95c34b69a1c56e9d4654f8fee49efaafef9eac4a450 libreoffice-ogltrans-7.1.8.1-13.el9_4.alma.1.s390x.rpm 9891d40c61b00d54ad14b94d9915e88060dba7f3c2e4c47ac130807e74715c8f libreoffice-opensymbol-fonts-7.1.8.1-13.el9_4.alma.1.noarch.rpm a14029041caa166db9e3e7fcb9522c63f51a84068144950bcf3c86f6d89b176c autocorr-tr-7.1.8.1-13.el9_4.alma.1.noarch.rpm a59952c9f31efcc64e64f79cfb9eee529b2ae190ea688e87ec2b6c8e607ebb31 libreoffice-graphicfilter-7.1.8.1-13.el9_4.alma.1.s390x.rpm a74165e4cae3b0b64bfe4773df2b22a5502e1935d59ba215179cd527df21a664 libreoffice-writer-7.1.8.1-13.el9_4.alma.1.s390x.rpm a7d924ad4255b43204da90d0057557d0bba892390466f3a92a878fc5677c112a autocorr-fr-7.1.8.1-13.el9_4.alma.1.noarch.rpm a92a70dc08078bb962dd8f53540a6837323062cb2bd1e0d0554374a829c0385e libreoffice-pyuno-7.1.8.1-13.el9_4.alma.1.s390x.rpm abc8bb12739af6371a8cff0f328e284573e26d9563ddf439517689b986ee3739 autocorr-is-7.1.8.1-13.el9_4.alma.1.noarch.rpm ae1915cfcde098ca74df265293bb5d8b938f2ff51aad797286c51aa0617a007b libreoffice-ure-7.1.8.1-13.el9_4.alma.1.s390x.rpm b5319b7bc2422ee69bbf063bfd79d1171c65e12048eac589153e5161f7f29e5e autocorr-cs-7.1.8.1-13.el9_4.alma.1.noarch.rpm b8aebbda56c6ad5ccdb1c1327aaaa611e022c13e2c667786a7ccca58182119b6 libreoffice-langpack-en-7.1.8.1-13.el9_4.alma.1.s390x.rpm c4968b1a32efc32ac70ce8e53eb5a1d86121223dc548167b8bb95668d17d800b autocorr-es-7.1.8.1-13.el9_4.alma.1.noarch.rpm c55a382a9fb04e4f5cd1d4ae5a71ca29867cabcb762a75df6187a8e6e04d1d7d libreoffice-ure-common-7.1.8.1-13.el9_4.alma.1.noarch.rpm c6c54a61ae8d0402ffeb117db1e2cccf0dec2d6d89c7184bed35a5c85c292218 autocorr-ko-7.1.8.1-13.el9_4.alma.1.noarch.rpm ce577e8074dff08c4ed365137827e96ed6d3a3779b07219719097a823dfd0fc6 autocorr-pt-7.1.8.1-13.el9_4.alma.1.noarch.rpm d53671b7aa1c3c76d720eb6e64ede94c5c0425cc0657d85998ab21f4e6eecb7d libreoffice-calc-7.1.8.1-13.el9_4.alma.1.s390x.rpm d7939a3d2bc7624ef1407b8a1cf57300fd42ecc241b5aea59a8863ce94a29e27 autocorr-bg-7.1.8.1-13.el9_4.alma.1.noarch.rpm d7cc28139068242dbd3cf04c40263dc8244dc81b34f35e5b356ef12deb435925 autocorr-sv-7.1.8.1-13.el9_4.alma.1.noarch.rpm df72468b6c0dd69cc70f27346003de85f2cf71f88c31f860f86b2d861cfe0621 autocorr-ga-7.1.8.1-13.el9_4.alma.1.noarch.rpm e4ea9eea9a01896a51e6018ba2d17ec68ac739e96b4946eb621dbe0930117daf autocorr-it-7.1.8.1-13.el9_4.alma.1.noarch.rpm f669964675ff5f951eea9ee6e003ee1a686155585414a86ae76fc43c627a020e autocorr-hsb-7.1.8.1-13.el9_4.alma.1.noarch.rpm f6a60f696cf02281eb30e968752d1805a096fef2eeeb513e4ab6a36dfcaf95f7 ALSA-2024:4756 Copyright 2024 AlmaLinux OS 0 1 Moderate

libuv security update

libuv is a multi-platform support library with a focus on asynchronous I/O. Security Fix(es): * libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libuv-1.42.0-2.el9_4.s390x.rpm c43026bd5309b7c41c4802a03cd3e9a78eed16e9eaff104efd7e1602e226191d ALSA-2024:4757 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvirt security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * libvirt: stack use-after-free in virNetClientIOEventLoop() (CVE-2024-4418) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libvirt-daemon-driver-storage-disk-10.0.0-6.6.el9_4.alma.1.s390x.rpm 0425677002f815304845828d7fa47cd6720c0238400114f7580ba71a2c1f5fbb libvirt-daemon-kvm-10.0.0-6.6.el9_4.alma.1.s390x.rpm 045b83467b9fe44bf948c19a9a0cae2b08b98b6397716e92d63bb4dad4359594 libvirt-daemon-driver-storage-scsi-10.0.0-6.6.el9_4.alma.1.s390x.rpm 04de3477eb11afdce25a806a1c38b47441ec0545a88221a135b28dfe99975edb libvirt-10.0.0-6.6.el9_4.alma.1.s390x.rpm 0b52e7fce4516c02e3a24e4e4df5b372689aabb90298c73cefe96d9fd5813178 libvirt-daemon-driver-secret-10.0.0-6.6.el9_4.alma.1.s390x.rpm 1dbc593a51860c0df31ab125387c21bb42bb5848e07236e753976206c09b550b libvirt-daemon-driver-interface-10.0.0-6.6.el9_4.alma.1.s390x.rpm 3b289dba9f27537fbf1efdc4487cd54f782da2d42c0d14a6c60112e6a8b6edf8 libvirt-daemon-config-network-10.0.0-6.6.el9_4.alma.1.s390x.rpm 4cece3a4299ce809db07c695aa9e1eb2c9ee2655a3c41350217da414462f3ceb libvirt-nss-10.0.0-6.6.el9_4.alma.1.s390x.rpm 574662a5d99ca40af70cbc1cf5105db3173887530b70092476ca0c1da823412a libvirt-client-qemu-10.0.0-6.6.el9_4.alma.1.s390x.rpm 59a0f7e1f312a9c0bb185bfa90ecc8d15f0a498af29f67eacc6f7157c151c257 libvirt-daemon-lock-10.0.0-6.6.el9_4.alma.1.s390x.rpm 6ca64adb278aaca22d1037c12511e4d15d9e1fd6f9834c8efa728a01af777af2 libvirt-daemon-driver-storage-rbd-10.0.0-6.6.el9_4.alma.1.s390x.rpm 746b5a71eba30b56f5c3136642fde383ca78aef3b8e0f2b60b7cc6af361bdfb6 libvirt-daemon-plugin-lockd-10.0.0-6.6.el9_4.alma.1.s390x.rpm 7ed289a55aaa32478ce6dd6cda2fc11d3492a3d529a77a35f94b42a0f3b79ae6 libvirt-daemon-driver-storage-mpath-10.0.0-6.6.el9_4.alma.1.s390x.rpm 85ff9d83c73c0da71801915bfafad26c0799485ffe714779fad4769bb21fb61d libvirt-daemon-driver-qemu-10.0.0-6.6.el9_4.alma.1.s390x.rpm 9303acd7a14b4b7ebf110da510d58b33ee062dd999d67c7613176877e4253d2c libvirt-daemon-driver-nwfilter-10.0.0-6.6.el9_4.alma.1.s390x.rpm 946357f8ffa198bda12d2a1c18017a908367597671e464c8d4515ce544694389 libvirt-daemon-log-10.0.0-6.6.el9_4.alma.1.s390x.rpm a790fbce5293e4681e32659f6c4e114b16c7119f020ea80c2e22cae63f859833 libvirt-daemon-driver-storage-logical-10.0.0-6.6.el9_4.alma.1.s390x.rpm ad86faf12b2b21b543d91a0655ff2cd7ed7165e3beec93a28996813aefa6bada libvirt-libs-10.0.0-6.6.el9_4.alma.1.s390x.rpm c4ab41b1eca4aa1f14c9a4bc89c05fff3b050f868597507dca04af7ea7f58310 libvirt-daemon-driver-storage-10.0.0-6.6.el9_4.alma.1.s390x.rpm ca44f72f70656f4b995e602e92c8ecbfa0f4726309c6a15561bcf98384506dad libvirt-daemon-driver-storage-core-10.0.0-6.6.el9_4.alma.1.s390x.rpm cf601e950c1bb4ab4c4903a174f3263e7d1877e9056f6932445d88934f16d235 libvirt-daemon-config-nwfilter-10.0.0-6.6.el9_4.alma.1.s390x.rpm d7b5f6b57d27d69a6afb4527d8919344f6599532853d44d53b8c98f69a4d0138 libvirt-daemon-driver-storage-iscsi-10.0.0-6.6.el9_4.alma.1.s390x.rpm d8c82b30e2bc4c2776df8aa5b2be72d96502c63bd21ded40834e7607b4b69051 libvirt-daemon-common-10.0.0-6.6.el9_4.alma.1.s390x.rpm da80db1b80dd37feda3e698c6c6e11d0e9f884be3cf99cc158a5ccf97577e3ca libvirt-daemon-driver-network-10.0.0-6.6.el9_4.alma.1.s390x.rpm ed078a71ba9e70dc78800a90fc23e779d11838db3a39566a1c024b1e6f38f906 libvirt-daemon-10.0.0-6.6.el9_4.alma.1.s390x.rpm f132f141f0a1a718cc4f46779273bee3cee83db1b0af4ec475636653bbd2fbf2 libvirt-daemon-proxy-10.0.0-6.6.el9_4.alma.1.s390x.rpm f388a34ce1734c29d5db3b303d56c2279a4c8d9bb4a2f974a5e65208fa56a8fd libvirt-daemon-driver-nodedev-10.0.0-6.6.el9_4.alma.1.s390x.rpm f90482bfb8f85b3df3fe10a9801d8c5f93115ef5ae3b150c81219e9f9c764840 libvirt-client-10.0.0-6.6.el9_4.alma.1.s390x.rpm fad953a4accac9bb36feec2f9e15f5f63bfebbfb20a06be5f4c120265bd095b1 ALSA-2024:4761 Copyright 2024 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-4.el9_4.s390x.rpm 06fcd9575511b3833d1dbbb61998b4d544eba4916bfd71b1abc185f5c91da416 ALSA-2024:4762 Copyright 2024 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default runc-1.1.12-3.el9_4.s390x.rpm 3dea5554aed2bb494195bb4457523cee40e766290815436849188e3a17dfe685 ALSA-2024:4766 Copyright 2024 AlmaLinux OS 0 1 Low

python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-tkinter-3.11.7-1.el9_4.3.s390x.rpm 156ff7c6fb87ffc2acfabbd1fa342cf29222c51619ccf43aeca9862517432dce python3.11-3.11.7-1.el9_4.3.s390x.rpm 4cc67465216bf34b94e7565d7c3ffc06e72eb1eb1b3b375f014aee255ec0efa7 python3.11-devel-3.11.7-1.el9_4.3.s390x.rpm 8485e30bc1336bc1800db4acc39a39571224874b71dee811c035ac0d0cb248e8 python3.11-libs-3.11.7-1.el9_4.3.s390x.rpm faa92b46b4b6796cafd57bcfab777f12db170432d88a1c7827c71569ba1b11df ALSA-2024:4776 Copyright 2024 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default cups-ipptool-2.3.3op2-27.el9_4.s390x.rpm 2acc812bf1649ddde16705794352cd08bd773e00c27439ed6d97359082031689 cups-printerapp-2.3.3op2-27.el9_4.s390x.rpm 45865d297f56a187ed0a225f5a18a2f9c982b34e465afdd61c729049f38e4156 cups-client-2.3.3op2-27.el9_4.s390x.rpm 5121524d98ef46da42092b9e5db384c03f42c51f0c8722c779531c213c38ef73 cups-filesystem-2.3.3op2-27.el9_4.noarch.rpm 5fdc0be73bfc2c4c6f4754f3dcc19f535aeed65c4cb68a4685f0d359d0013f39 cups-2.3.3op2-27.el9_4.s390x.rpm 72f22e6c33630c5fb199d0c7add638433860645ee9ed707d307ae896c1256584 cups-lpd-2.3.3op2-27.el9_4.s390x.rpm ce85529206103a630cef6eb588c2dae66de0da369d2ad01e248dc3b4e4b4b4ce cups-devel-2.3.3op2-27.el9_4.s390x.rpm fccf36a69f51a8e8009b0ff2d2b4323bab7ac0103678178199e62b2f7db760b8 ALSA-2024:4779 Copyright 2024 AlmaLinux OS 0 1 Low

python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python-unversioned-command-3.9.18-3.el9_4.3.noarch.rpm 5d3cc9204ccd70c8d5b44389772bfe5510ceffd6ba60cc3b3317e18db93080e2 python3-tkinter-3.9.18-3.el9_4.3.s390x.rpm 752f029e3a350587a089aaf588a9d6b8c825270382835caa8b0b5b35d123ff18 python3-devel-3.9.18-3.el9_4.3.s390x.rpm 7cfdd40ced104ce483ed816f4fd83fcd8ae92421f42104f61f5eeb8f18de109d ALSA-2024:4861 Copyright 2024 AlmaLinux OS 0 1 Moderate

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638) * squid: Out-of-bounds write error may lead to Denial of Service (CVE-2024-37894) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default squid-5.5-13.el9_4.s390x.rpm 78b15be567b83005c6df015c76734e27cae4034fdb3fd843d14b4ff7542153e6 ALSA-2024:4928 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458) * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773) * kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737) * kernel: dm: call the resume method on internal suspend (CVE-2024-26880) * kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852) * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982) * kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046) * kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030) * kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857) * kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907) * kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885) * kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809) * kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459) * kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924) * kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952) * kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743) * kernel: epoll: be better about file lifetimes (CVE-2024-38580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default rv-5.14.0-427.28.1.el9_4.s390x.rpm 0eb86a34a7c95cbc287d3049bd42255349a0e735436d0f09b09863c5ca634493 kernel-doc-5.14.0-427.28.1.el9_4.noarch.rpm 1c12a2a9970700b5c07411ec2acfc301d3189eaf6bf085792d0377321826bfb6 kernel-debug-devel-matched-5.14.0-427.28.1.el9_4.s390x.rpm 2359997c18ab59569047b5e9ccf60b771508cbdc2a325d1c2014cfcdb06db5d4 kernel-devel-matched-5.14.0-427.28.1.el9_4.s390x.rpm 3f734a637397d6de55484f12e19fd9fb4cf7da82eb79231393d48107bbffb14b kernel-debug-devel-5.14.0-427.28.1.el9_4.s390x.rpm 46d78514f72e5a22ff7bea6b8f3beacf0ae982879f8a98de5e1113a836ed9a45 rtla-5.14.0-427.28.1.el9_4.s390x.rpm 71c69ab94bdb7076af53bf2fb960dca309ed70f2206ff9b9dcd70d4f82757aaf perf-5.14.0-427.28.1.el9_4.s390x.rpm 9b7ccde48331486d0e8230852fa72b4d3d2e0aefad34ebe16585e5dbc5abb1f6 kernel-zfcpdump-devel-matched-5.14.0-427.28.1.el9_4.s390x.rpm a330011662ce92a87a12aceee9eca3699d568c7b7e4150e5b6a578d2dfa242b4 kernel-headers-5.14.0-427.28.1.el9_4.s390x.rpm a72a529e64c19d04c03da0cf9065d52aa76113973177f6fcdb129dbbf49aea73 kernel-zfcpdump-devel-5.14.0-427.28.1.el9_4.s390x.rpm b2e380f71525373033e97f9948c9abb5f3ade86efb3caa0e42e8c2d0b67d8f73 kernel-devel-5.14.0-427.28.1.el9_4.s390x.rpm c4c7c491a8b20b28d2689c2b45fbc186c735ca48441eb9715f4cc6301e64ec91 ALSA-2024:4935 Copyright 2024 AlmaLinux OS 0 1 Important

freeradius security update

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es): * freeradius: forgery attack (CVE-2024-3596) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default freeradius-doc-3.0.21-40.el9_4.s390x.rpm 49bbada5742095ef1b83c5fbb3a5ef3d9c3b4289076ab351cd92c43e03263023 freeradius-3.0.21-40.el9_4.s390x.rpm 7bcf674b370ad22e094c0612bd744f67633fc9dd5630cae082b7b25a9ac9c465 python3-freeradius-3.0.21-40.el9_4.s390x.rpm a558fde33c7169cad68d60329e23d9083d18c408822704c6421792469ed51995 freeradius-ldap-3.0.21-40.el9_4.s390x.rpm c189dc153e9003084d8f56e69c074421f9b7b6662df02bc687bb36e222e2069f freeradius-krb5-3.0.21-40.el9_4.s390x.rpm cdfd1ac6a1e6f7cc10222abd608131f1be32796a938f49f3d722587f4be74651 freeradius-utils-3.0.21-40.el9_4.s390x.rpm ce4fdb454173733ca8ebccb1a174f766be27f92a0597dc7e444d5b9384be3656 freeradius-devel-3.0.21-40.el9_4.s390x.rpm f685aaeb81ce653a9796a5558ddcfde026988a2e48ca40d159cba02dba00d5dc ALSA-2024:5138 Copyright 2024 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Security issues via?backend applications whose response headers are malicious or exploitable (CVE-2024-38476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mod_session-2.4.57-11.el9_4.1.s390x.rpm 1dfa2081bf467377880a0ba79e254340f6d74547083af5ab834af88f1b96349d httpd-2.4.57-11.el9_4.1.s390x.rpm 201fabdb575f0dbfc54ba301d41476f4546b6060d3dde104b4c6eb998b2617c4 mod_proxy_html-2.4.57-11.el9_4.1.s390x.rpm 2689dd706aff742e64b5abbd857bf68930ccfa85d2c157489b09d0e9853bfd11 httpd-manual-2.4.57-11.el9_4.1.noarch.rpm 617bedd804bdb369db24741136d165abe40e2adea6db7598de6ae9c59b87e76f httpd-devel-2.4.57-11.el9_4.1.s390x.rpm 7062dec77c4897a0996ab88249a2902dedca544ff0a1db13cd4c365ab505c7a7 mod_ldap-2.4.57-11.el9_4.1.s390x.rpm 86e8b94092d8dbdc2184adf4351f736cf2da8b6595ea0c209e3ca52cda78ec0e httpd-filesystem-2.4.57-11.el9_4.1.noarch.rpm a672dbfc7677ed70ba8883e04b529a83e68f1ad60d0ecd06a678c54172c0e81e httpd-tools-2.4.57-11.el9_4.1.s390x.rpm c451fd391b134fea7df7ae1dc172ce449a7034858d8b2d5bfbd5ded4bbc7be88 mod_lua-2.4.57-11.el9_4.1.s390x.rpm d73211cab6f66fd7ce8bee1c498c4c255ca251be9655e3a78f708e41e1d03c44 mod_ssl-2.4.57-11.el9_4.1.s390x.rpm d9d916501578156d080e45d65025cbac5a48cbbb8cafad17f0710f9425ff1620 httpd-core-2.4.57-11.el9_4.1.s390x.rpm e2babb90102ef45e881a5363edc5e96221887c30ea7934b975fccb9e383e7ca9 ALSA-2024:5192 Copyright 2024 AlmaLinux OS 0 1 Moderate

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) * 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-lib389-2.4.5-9.el9_4.noarch.rpm 997deceabd3440cbb5e7221f2b55f9b34c4f83cb166e3a748bd3d5c89b6475ee 389-ds-base-libs-2.4.5-9.el9_4.s390x.rpm cd3a33efbfb395d5cc9b7b15b85848c79ed71f070c30dc2d5a69fb7bc76d86bc 389-ds-base-2.4.5-9.el9_4.s390x.rpm dfa00100132c18bffc3ae4ff0c3b2dc1ff31c9b853df3786abce3e54ab72dab3 ALSA-2024:5231 Copyright 2024 AlmaLinux OS 0 1 Important

bind and bind-dyndb-ldap security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737) * bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975) * bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default bind-dyndb-ldap-11.9-10.el9_4.alma.1.s390x.rpm 165c9a207dbff2af2827157afb50355ce903a0e2d9c61c9f732018139e84330f bind-utils-9.16.23-18.el9_4.6.s390x.rpm 2e080f4a57886166e40b6ad52680ebcec19528e12acfbcd5e9503cfc7d308138 python3-bind-9.16.23-18.el9_4.6.noarch.rpm 42f691db1d5bf19f61201edc16027b0d23e1f8d4b636127269cfefaf1e8c5719 bind-dnssec-doc-9.16.23-18.el9_4.6.noarch.rpm 71e7eda62fad82b98d7b568cdbd6ca85957e36db56c15ace1d21a620f75ea390 bind-9.16.23-18.el9_4.6.s390x.rpm 81333e2f597c72ab8bbf1712dcb99859552688df0e081b318ff703c145308a87 bind-license-9.16.23-18.el9_4.6.noarch.rpm cc05b8ec2e3a7cd1137ed17e0fddf12248c2470a2903f59f80e72afcbcfd45c3 bind-dnssec-utils-9.16.23-18.el9_4.6.s390x.rpm e46c13fd8ac0ead6ddc12c1096067eebe390a4745744ce6d32b9bb9fc0f7522e bind-libs-9.16.23-18.el9_4.6.s390x.rpm f83922fb8a25a6b6a867f7f9d11dc886aa68a3189d3a0019bcf400dc4976340d bind-chroot-9.16.23-18.el9_4.6.s390x.rpm fcc3fe306fbecefaa52ce8ff7f7f497c7d70cfb0c667e661cf973dc61a328c07 ALSA-2024:5279 Copyright 2024 AlmaLinux OS 0 1 Important

python3.11-setuptools security update

Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources. Security Fix(es): * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-setuptools-wheel-65.5.1-2.el9_4.1.noarch.rpm b7eddbb0feda7b779b306cf6fc494adf054e33044fd8797c121c93be6402b6bd python3.11-setuptools-65.5.1-2.el9_4.1.noarch.rpm dc9b9dc462b369ac7d6c955501897d2ad8f605733bdca796757157ca2aaaf9f9 ALSA-2024:5322 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * Firefox: 115.14/128.1 ESR () * mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518) * mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519) * mozilla: Type confusion in WebAssembly (CVE-2024-7520) * mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521) * mozilla: Out of bounds read in editor component (CVE-2024-7522) * mozilla: CSP strict-dynamic bypass using web-compatibility shims (CVE-2024-7524) * mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525) * mozilla: Uninitialized memory used by WebGL (CVE-2024-7526) * mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527) * mozilla: Use-after-free in IndexedDB (CVE-2024-7528) * mozilla: Document content could partially obscure security prompts (CVE-2024-7529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-115.14.0-2.el9_4.alma.1.s390x.rpm a3dbf738ba571eb9717caa1ce4acc0ddee62d2304a012d4800766b66fb5e0186 firefox-x11-115.14.0-2.el9_4.alma.1.s390x.rpm c1568093afe2dade091873fbfdbcb82b5b9135e2d0dec2245f27d62f3d3a4808 ALSA-2024:5334 Copyright 2024 AlmaLinux OS 0 1 Moderate

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8. Security Fix(es): * dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default aspnetcore-targeting-pack-8.0-8.0.8-1.el9_4.s390x.rpm 1e2145a7b318a47c68a87b93396f2d28ae6655fe65e5af843f4272a4f13cc8b0 aspnetcore-runtime-dbg-8.0-8.0.8-1.el9_4.s390x.rpm 35f1fc2ad534164ebc46a89ff50e51734f580419793e066712c17fc0aff25a2c dotnet-apphost-pack-8.0-8.0.8-1.el9_4.s390x.rpm 41a55773bef523c131f95fa74ac69d8f3ac569b286efbe35601c5a4a1aba8219 dotnet-host-8.0.8-1.el9_4.s390x.rpm 48d3f3b4d72669d7891c59d0518092302315ca8e983e4e5869cae599954f07a3 dotnet-sdk-dbg-8.0-8.0.108-1.el9_4.s390x.rpm 5e1e29de8574a0fe88de0666abf164bd02818e011ce5975c9ed717b2cf2c801c dotnet-targeting-pack-8.0-8.0.8-1.el9_4.s390x.rpm 60b0c3ac229d7b31b67accb0e62247434e4b83cf37b545dac69f105ecb72735e dotnet-runtime-dbg-8.0-8.0.8-1.el9_4.s390x.rpm 647e9131956bd7907b9248a8ab1edc2726b6200dae4cf11527a0acd01f13a89a dotnet-runtime-8.0-8.0.8-1.el9_4.s390x.rpm 7ad06f5b9de98dab66862e841f4dff334b30f5d01ca8d459f41ec532d0105616 dotnet-hostfxr-8.0-8.0.8-1.el9_4.s390x.rpm 81b8ff4050025fe2a377b07e828eae6ffd5002ca7adcd3caca5ceadf091830e6 netstandard-targeting-pack-2.1-8.0.108-1.el9_4.s390x.rpm aa4e13d8333f4371318134bfb6cb8856c3e43265007c2404e9021e8b10a54e81 aspnetcore-runtime-8.0-8.0.8-1.el9_4.s390x.rpm c4c9eb581cbdaf49bf911936959eb34273764e1275ccee67a10727a066963968 dotnet-templates-8.0-8.0.108-1.el9_4.s390x.rpm e35a64f83d6cf00d74cae03df21abe878feaec0cf2ebf47fc0110cd38ba9eb54 dotnet-sdk-8.0-8.0.108-1.el9_4.s390x.rpm f36e2fa8a7085a66f973f25fb2e559b289baa332397d88b55c0981c9f5a721dd ALSA-2024:5363 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: phy: (CVE-2024-26600) * kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005) * kernel: cifs: (CVE-2024-26828) * kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575) * kernel: nfs: (CVE-2024-26868) * kernel: igc: (CVE-2024-26853) * kernel: dmaengine/idxd: (CVE-2024-21823) * kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961) * kernel: vt: (CVE-2024-35823) * kernel: efi: (CVE-2024-35800) * kernel: mlxsw: (CVE-2024-35852) * kernel: eeprom: (CVE-2024-35848) * kernel: ice: (CVE-2024-35911) * kernel: platform/x86: (CVE-2023-52864) * kernel: i40e: (CVE-2024-36020) * kernel: rtnetlink: (CVE-2024-36017) * kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954) * kernel: ipvlan: (CVE-2024-33621) * kernel: tcp: (CVE-2024-37356) * kernel: virtio: (CVE-2024-37353) * kernel: tls: (CVE-2024-36489) * kernel: cxl/region: (CVE-2024-38391) * kernel: bonding: (CVE-2024-39487) * kernel: netns: (CVE-2024-40958) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-debug-devel-5.14.0-427.31.1.el9_4.s390x.rpm 0e842e55bd6bcd34ae35a6fd68f63fa580b528aaa36c8ea6d284f8e51145554e rv-5.14.0-427.31.1.el9_4.s390x.rpm 3c4268b6fb96f9ad210e8c8a633f1d19c6e2a07c10cafc22d21d3ae04ddf30f2 kernel-zfcpdump-devel-5.14.0-427.31.1.el9_4.s390x.rpm 4d81cf86f89887e14fd6fa014b3957e55eb6894b6f0f38a38bbc912fb07deddf rtla-5.14.0-427.31.1.el9_4.s390x.rpm 899480b8f62f1f910cf8bf01a63fbfc69f20c399fdf5dd2021a2af2d0365ccf8 kernel-headers-5.14.0-427.31.1.el9_4.s390x.rpm 94999d2ef2c4b7816013990c7c753d1d7d520d76f0ddd9af92a2b48b714849f0 kernel-devel-5.14.0-427.31.1.el9_4.s390x.rpm 9a04319c61fe28ddd4daee7f2e06b5abbd5b448a89b44a17e64f81c3e02c8816 kernel-debug-devel-matched-5.14.0-427.31.1.el9_4.s390x.rpm b76d14277a25b616352e47d782361ed614f6a75c3f0ef86a7b5c06910c3d6364 perf-5.14.0-427.31.1.el9_4.s390x.rpm c44b472f4ecb0115bada3e29e6dd45f98a3523bba112ae1fb5b418f07533643e kernel-doc-5.14.0-427.31.1.el9_4.noarch.rpm cf0dc6bd374628b67126e261a3e3fefcee1907d8166fe71dab81aa579c7a1b26 kernel-zfcpdump-devel-matched-5.14.0-427.31.1.el9_4.s390x.rpm d04932757295c13961e9ae46b48441d423d19bd5da0df68f88dda62c3784e5b8 kernel-devel-matched-5.14.0-427.31.1.el9_4.s390x.rpm e641b36c6fef1478bfe92e6ec30b39eeaf5e0cb02cc56e7cb1dddfbd00adc6c0 ALSA-2024:5392 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * EMBARGOED Thunderbird: 115.14/128.1 () * mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518) * mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519) * mozilla: Type confusion in WebAssembly (CVE-2024-7520) * mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521) * mozilla: Out of bounds read in editor component (CVE-2024-7522) * mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525) * mozilla: Uninitialized memory used by WebGL (CVE-2024-7526) * mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527) * mozilla: Use-after-free in IndexedDB (CVE-2024-7528) * mozilla: Document content could partially obscure security prompts (CVE-2024-7529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-115.14.0-1.el9_4.alma.1.s390x.rpm 6baeec1a8b9a9b08e4353f6a590792e572b7d8190d631c206f1164aae2a8010e ALSA-2024:5529 Copyright 2024 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP/2 push headers memory-leak (CVE-2024-2398) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libcurl-devel-7.76.1-29.el9_4.1.s390x.rpm 27d20f0224db2d2c93d72b4da3e4b73a6afa7534b33d570b8413737dc03fa533 ALSA-2024:5533 Copyright 2024 AlmaLinux OS 0 1 Important

python3.12-setuptools security update

Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources. Security Fix(es): * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.12-setuptools-68.2.2-3.el9_4.1.noarch.rpm 2279cfb9ea221569984b787a7fec27b7b50af47b8f76a308565dad2b0bb65d7a ALSA-2024:5583 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: bility to trust not validated macro signatures removed in high security mode (CVE-2024-6472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default autocorr-pl-7.1.8.1-14.el9_4.alma.1.noarch.rpm 02a6c2b3247f82470265d54b9d1992c001ba9bdd46c323fdc14213a5c7f8a2e6 libreoffice-pyuno-7.1.8.1-14.el9_4.alma.1.s390x.rpm 0342024555a5efb07937d17fce21cba309edcfe2679111cd31f8994b0448f391 autocorr-zh-7.1.8.1-14.el9_4.alma.1.noarch.rpm 05bc41c6badc408b9d2f0867ada881973ed60b6dc9453b3880d7e1f9ab3969c3 autocorr-lb-7.1.8.1-14.el9_4.alma.1.noarch.rpm 05e4aba60712bdf7b582ee623f921efe98d2885d429de48a9e467b0232772f0f libreoffice-impress-7.1.8.1-14.el9_4.alma.1.s390x.rpm 13bc0c2a7e96951d1dfb387aae8623a8f328b3ae9ae1dad6a0bc27dc22a527f1 autocorr-fr-7.1.8.1-14.el9_4.alma.1.noarch.rpm 199e0b702025c674d2a7161be2c3a1b65a3d9c0cc7988c8509081eb399565e82 autocorr-ko-7.1.8.1-14.el9_4.alma.1.noarch.rpm 28cee6bb04eb7063ff67b6c63214b464557b2a5d687e1ba350be9c6735286cbd libreoffice-writer-7.1.8.1-14.el9_4.alma.1.s390x.rpm 32a585d80e10638f02f6f485c042d0c360cc5ad7fbee255cee5fb7e066e51c0f autocorr-nl-7.1.8.1-14.el9_4.alma.1.noarch.rpm 34678581d856272dc58b06c7cfbbc20f63e0b99681c2a5d31bf4001ac923d4d4 autocorr-en-7.1.8.1-14.el9_4.alma.1.noarch.rpm 352cebd5f1aea55bdf50865d2c096de863bc6aa5f3722ea7fdb4ed6bb647a4d7 autocorr-dsb-7.1.8.1-14.el9_4.alma.1.noarch.rpm 38ea364fac71dc376107f197047ac7fb0ae97fe70e021310d9eb32c2b1b0fe2f autocorr-is-7.1.8.1-14.el9_4.alma.1.noarch.rpm 3ca2e56368c9e0bf56576f9055eecc60da9d6af87776c893da8b24227e67f253 autocorr-ga-7.1.8.1-14.el9_4.alma.1.noarch.rpm 40c65802f3807a229c044caa28378d0896ee6b0e9caf3c79fd541bb3043a741f libreoffice-ure-common-7.1.8.1-14.el9_4.alma.1.noarch.rpm 4291feae901d3cf892eba3e5239092ba410b7de14bc260acd9634c43f17bd83b libreoffice-calc-7.1.8.1-14.el9_4.alma.1.s390x.rpm 4a670122b906b34454782892903e8ff85fc46514e84a54d18987a8ec41d359f1 autocorr-vro-7.1.8.1-14.el9_4.alma.1.noarch.rpm 4c2eaaac055ca71254f1e2a1ec6fa65fbf450cb216d56d609a9bf2bf8ee8f48c autocorr-es-7.1.8.1-14.el9_4.alma.1.noarch.rpm 53ad21dcadcf49aca5d1f6c8687699d995cfd2e5122e14d25d7bef04bb7e9a02 libreoffice-data-7.1.8.1-14.el9_4.alma.1.noarch.rpm 57d0f7bbfe4252a743dbda6d7827d60dd7a7642a261dbf90cccd859af57611b3 autocorr-sr-7.1.8.1-14.el9_4.alma.1.noarch.rpm 6545894b8c39ce7f556f824b323f07de5d645937ee6f7c5f9e8d391dfc50215c autocorr-fi-7.1.8.1-14.el9_4.alma.1.noarch.rpm 65c386f85824567f6c79ea1df4e3b50e259f1d9bfb89e75253e527eb1376cafc autocorr-ja-7.1.8.1-14.el9_4.alma.1.noarch.rpm 6b7148ae7a1bc9a56a9e22085a80e194ce8436ab9d6ecc9984c3bd9d3425b19b autocorr-hr-7.1.8.1-14.el9_4.alma.1.noarch.rpm 7e73671ab7a4d78a8705ece9fa8f86667590e39c189f42e8d6396434b0294eed autocorr-fa-7.1.8.1-14.el9_4.alma.1.noarch.rpm 7fbe676c5cd96458be8eeb9c0caf0851654c9f44aba9c55bdee8f11d4f04d4de autocorr-ru-7.1.8.1-14.el9_4.alma.1.noarch.rpm 854fc8acb4552cf10dadb6ca0248156c50bc36827592f173cdee979223b4fdd2 libreoffice-core-7.1.8.1-14.el9_4.alma.1.s390x.rpm 8b39f6f8a93e904b107a4e6e38b7c42683ca44d7124f2ae951f619bb337f86b0 autocorr-ro-7.1.8.1-14.el9_4.alma.1.noarch.rpm 917a09496d0e65f6b8fbba2f549119b9bf586b20b0bf6159d6825692d808993f autocorr-lt-7.1.8.1-14.el9_4.alma.1.noarch.rpm 972e69ef6431fee03aa3524adbeb44381c36e227b9bffb3f8ddb71a8ae4af282 autocorr-ca-7.1.8.1-14.el9_4.alma.1.noarch.rpm 9906fc219965f1c5987ce6a15b2cb9f6927ac872140a1599c2b90d6086edb617 libreoffice-help-en-7.1.8.1-14.el9_4.alma.1.s390x.rpm a3288b6a85fbd8149cd9083f32997d8cd56501ef4c70f0f8326fa33ef2691f79 autocorr-it-7.1.8.1-14.el9_4.alma.1.noarch.rpm a3ef42834dde79540013495b7335647bbb91ebb29d847568809a2f1e56f537ac autocorr-af-7.1.8.1-14.el9_4.alma.1.noarch.rpm a9ccef1e43e676f3547777ce4b4f02cc12d5b706bd246a4fab15d1d7f220965d libreoffice-ure-7.1.8.1-14.el9_4.alma.1.s390x.rpm aa403985baf4d5ae1c0220f5ab12a69a453b98672ec892bfcbf95ff97780537a autocorr-hu-7.1.8.1-14.el9_4.alma.1.noarch.rpm bf86ce8854f77d58f880883e1c9847de3609d645b082eb26618679acd9320e3f autocorr-bg-7.1.8.1-14.el9_4.alma.1.noarch.rpm c1a78c4f23031a4231af3c749aa1b40eb0f6dd48f5d8d1ca1a3126c78b088857 libreoffice-ogltrans-7.1.8.1-14.el9_4.alma.1.s390x.rpm c24f00808cb79e72f74d526e48299c43f28d2d6410d7d7582029512553dff54a autocorr-da-7.1.8.1-14.el9_4.alma.1.noarch.rpm c775ef1c5924f061b728179ae9a2bddc5e38f715da6abcef8560d4fa2b016656 autocorr-de-7.1.8.1-14.el9_4.alma.1.noarch.rpm caf4102616b9e75a46f4dfb8a7b538ad6918fc65660b30f0e3b386fa87bac65e libreoffice-langpack-en-7.1.8.1-14.el9_4.alma.1.s390x.rpm cb1b6014614fa5dda0f896a1e98b2fdfc7c276772556dd54a5046dc2a47d7d1f autocorr-sv-7.1.8.1-14.el9_4.alma.1.noarch.rpm cc718c3e0045d5d3d1817c5683e952a2e89bfd3b2aa0d33cfbab0abb3983b4f5 autocorr-pt-7.1.8.1-14.el9_4.alma.1.noarch.rpm ce4692654eb0e2e7221536dfd9547f8dab75c0ed040a53bd1c37e5fcadbc0861 autocorr-cs-7.1.8.1-14.el9_4.alma.1.noarch.rpm d1bf8cf35dc8ce70e5f899c75e586eabf380aad96325167c1269d0ff5bbd7ced libreoffice-pdfimport-7.1.8.1-14.el9_4.alma.1.s390x.rpm d33e8b5ad77942587e08c05d620713f4337b32e18c82f942eafda5c5488a6f58 autocorr-vi-7.1.8.1-14.el9_4.alma.1.noarch.rpm d8bb66dee07b3cf1c922dc9a05586dc13fbe9e3aa1c5d22b58f254c6940b2961 autocorr-sk-7.1.8.1-14.el9_4.alma.1.noarch.rpm dca4350a8bd783c54e5e525d3ee0741f26388a28ba979c2131bf44aab3edf4b5 autocorr-hsb-7.1.8.1-14.el9_4.alma.1.noarch.rpm dd2d65bd599be9e5c410e2cc1103b57927580009b8b3b03feffbd53dd67825aa libreoffice-opensymbol-fonts-7.1.8.1-14.el9_4.alma.1.noarch.rpm e3d0bdf99370a15841869707cf7257b3662537e2e49afd084afc419913602f84 autocorr-tr-7.1.8.1-14.el9_4.alma.1.noarch.rpm e82ec8bc149c63a77dfd14d08daad61259b03a7b9ae6261b621cce3a611740c7 autocorr-sl-7.1.8.1-14.el9_4.alma.1.noarch.rpm ee3cc02f39479ee7ffa63bfd6e36f3c171ff8eeefb822cc4954150c1f2d7ecb8 autocorr-mn-7.1.8.1-14.el9_4.alma.1.noarch.rpm f3efc3bf522b03e97200ab089eba90cd1402d101b5c4af43f4d1ef06d3f6c8f2 autocorr-el-7.1.8.1-14.el9_4.alma.1.noarch.rpm f85e217c6b2413ee6d196f404aaf38dff8d131ac37d6fc8389b02f87dbabe079 libreoffice-graphicfilter-7.1.8.1-14.el9_4.alma.1.s390x.rpm fc2cac35a5ff73981f34bb2abbc2a244d3eb914bd76c4722beca4660afe6cfa4 ALSA-2024:5693 Copyright 2024 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default tomcat-docs-webapp-9.0.87-1.el9_4.2.noarch.rpm 01904a6fb73b0bc6f290c034a3676703f46c84645628bb122d1a86340c4e2a41 tomcat-jsp-2.3-api-9.0.87-1.el9_4.2.noarch.rpm 2b335cf78354a8be19f8542b0539c61412169ae6a244f38cef1c45b9c572d858 tomcat-lib-9.0.87-1.el9_4.2.noarch.rpm 62fe3b4463304cae3c698f5e1d2f601916e58179a849b706cadde3aff3932d0a tomcat-servlet-4.0-api-9.0.87-1.el9_4.2.noarch.rpm 9390ce84a2e34dd9e1a467b91358aaeefe00bcc6ab276aa7dc71ca4644e3e57e tomcat-webapps-9.0.87-1.el9_4.2.noarch.rpm a787954b9946e7d56a62a6239d6ddeed9db293b99878db7fae307ec78545b5c9 tomcat-admin-webapps-9.0.87-1.el9_4.2.noarch.rpm b8f8d9aa82b9e1d483cdb4aeef9be13514414f2332ec7d2daf0c4fa0d0d7c75e tomcat-el-3.0-api-9.0.87-1.el9_4.2.noarch.rpm ccddb2529b13cbb6e8f188a6162174398310a98b0dc227b541b6f94f42d8d2c0 tomcat-9.0.87-1.el9_4.2.noarch.rpm ce7d9aa19e6c158359f9e3b6df7f9bc9651188bba623f82c0ef783f4ad68ed63 ALSA-2024:5815 Copyright 2024 AlmaLinux OS 0 1 Moderate

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Bypass network import restriction via data URL (CVE-2024-22020) * nodejs: fs.lstat bypasses permission model (CVE-2024-22018) * nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default nodejs-full-i18n-20.16.0-1.module_el9.4.0+107+dbd477e4.s390x.rpm 07eba36cfba84a3ade683cc65f8d1f01e65cc06bc89b37c41a2598a8110cb36e nodejs-docs-20.16.0-1.module_el9.4.0+107+dbd477e4.noarch.rpm 54d42b8e6332690ae739d234375760478031d5587beb471bcb6bd3a503254a00 nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm 6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f nodejs-packaging-bundler-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 94ac92c4ae695d87df9c616a6d3ecafca411d07358cf60516392e320eefcb3c6 nodejs-20.16.0-1.module_el9.4.0+107+dbd477e4.s390x.rpm 9f27b0990d6936f55d1aa46df40870906bca651ce7b4439d5e42e9f73a30a652 nodejs-devel-20.16.0-1.module_el9.4.0+107+dbd477e4.s390x.rpm b743409083ae1a20fa8ecbaf881dec8fa16b92233d42a7dadd966d688796e7d9 npm-10.8.1-1.20.16.0.1.module_el9.4.0+107+dbd477e4.s390x.rpm fd7127db11acfa37704dea859727eb27414ca1fe065fe569b3b591f4c9ae2657 ALSA-2024:5928 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581) * kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668) * kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810) * kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855) * kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908) * kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019) * kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016) * kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415) * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898) * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897) * kernel: netfilter: validate user input for expected length (CVE-2024-35896) * kernel: netfilter: complete validation of user input (CVE-2024-35962) * kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003) * kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771) * kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880) * kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025) * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608) * kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579) * kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544) * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540) * kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538) * kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476) * kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905) * kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911) * kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912) * kernel: mm/huge_memory: don&#39;t unpoison huge_zero_folio (CVE-2024-40914) * kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929) * kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939) * kernel: wifi: iwlwifi: mvm: don&#39;t read past the mfuart notifcation (CVE-2024-40941) * kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957) * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978) * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983) * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) * kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041) * kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076) * kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110) * kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-headers-5.14.0-427.33.1.el9_4.s390x.rpm 11aeac6815462e21dfce7628e45c7b6fd58cebe06ce4e90610d4f39a2bd7f0b1 rv-5.14.0-427.33.1.el9_4.s390x.rpm 26d9af65cd4463e61022fa2e076a4cdce534ae2f6419338062974fcb052fdd14 kernel-zfcpdump-devel-5.14.0-427.33.1.el9_4.s390x.rpm 48ca3ee3cabc65312b7007d5f1bdd51da3b47d62cea4212fabf1bf372baf9a7f kernel-debug-devel-5.14.0-427.33.1.el9_4.s390x.rpm 65b5f5316feaacc420bfe1f2e0e9f27dc5e3c3dc7c748f2fb7821869f0535943 kernel-debug-devel-matched-5.14.0-427.33.1.el9_4.s390x.rpm 6ab7273b3e1e32a08a34431bb4a138a742d2dd31e1347457fa2aad0c95bb9685 kernel-devel-5.14.0-427.33.1.el9_4.s390x.rpm 7d7a4822a959efd053d6c096075507907c88884281bc293cc248590288f610eb perf-5.14.0-427.33.1.el9_4.s390x.rpm 97c354386cd846ca14a3380f8b28de11230bc70046e29f8a2a568b918fc02b16 kernel-devel-matched-5.14.0-427.33.1.el9_4.s390x.rpm be166c137936d837672a936bcd2ca9375483e2f0f65a13f864abe6e0ff5b5f7f kernel-doc-5.14.0-427.33.1.el9_4.noarch.rpm c652db69e7ae2a7888de8d1f379059d067e94fe3a5e03498067fa20f7cb4ae09 rtla-5.14.0-427.33.1.el9_4.s390x.rpm c6e18bd0465cdf8cc1c920b3ac44da607309aea3fe06b6e579f76f6087baeb07 kernel-zfcpdump-devel-matched-5.14.0-427.33.1.el9_4.s390x.rpm d5fe32ecd62f8de3fd2c2498f46bb2e7fb7b78017b3f08943e3ee25aab643b94 ALSA-2024:5929 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317) * postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default postgresql-test-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm 0ccff393a269c5b2c537c8bd96c9e2db26822eb171dc9410908725b084054343 postgresql-contrib-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm 2eaede5222294b789713a13aff7077d05928a9f022a26dc03329c7ac7c5b82b3 postgresql-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm 3875bc4f4963d4309c245f807670e69e5bad2341eae84a50fcfa93145fb929b0 postgresql-private-libs-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm 41c40b84467c89891609a2de2317466127cd91728973e2a497630ef92e55f0ee postgresql-pltcl-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm 4cb757ccd6c33c2be6dd49bd84b8ae9020a36ac591f316733e88e6ebc15f50de postgresql-plpython3-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm 8efe37374243ceefb7620a1529bbf7aa75c4cb1b12d30c81959947983491fdd1 pg_repack-1.4.8-1.module_el9.4.0+66+eb9878bc.s390x.rpm 94efc54332bce0e7d22ea099915d7356397e7517cc3a90837d7e24725b87461e postgresql-test-rpm-macros-16.4-1.module_el9.4.0+109+624ac33a.noarch.rpm 9a63e985bd0be681d52f689ef51210d8174d13c50f2de4208d0a784cc74ab9d2 postgresql-server-devel-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm 9d00cedfbbd81f503571367b61e1161669a8fc19ee7e41af9fd65aa5c02c0661 postgresql-server-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm a03cd07e1e57406db0613cf2096b55e1c92cbb1f5f0d1e8ffc20bc40e2357617 postgresql-static-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm b00c079bffb2f8ef502a5e7d8d5f0884c5d3ac768815ccff50c244f2ac608172 postgresql-private-devel-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm b5c42c8366f74c32bf969492c310465f127297313f352342740afdafd1295c0e postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-docs-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm bd37ba266bdd2e97e7d0ce98d6e5e58b8d698ff843b9638a3d06b433efc01bab postgresql-plperl-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm bf343cd28274be8a57dfca6c3cf636e52a183df85660bcd2c8dc3d5e7d2411f4 postgresql-upgrade-devel-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm c332750f7cc9f55e170fed972aa550a2eb91048d3e0b195443df46066d7d1ffb postgresql-upgrade-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm da1abb4dfcea961c8a4fd263cf96322a15d08b999b37f76c7b80e0b51117e8b6 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 ALSA-2024:5999 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default postgresql-plpython3-13.16-1.el9_4.s390x.rpm 13e05649e9a50d0093f9a360987fac86dc98e535d39fc11f416cb90b655e74e7 postgresql-13.16-1.el9_4.s390x.rpm 2efc7b8c82e6450bd6f16cb5133937370467abe7497543249ff7c518d841b483 postgresql-plperl-13.16-1.el9_4.s390x.rpm 4148977a3d11fedbf2593eff966d0317173f61177c428ae5f56588c56194619d postgresql-upgrade-13.16-1.el9_4.s390x.rpm 50db5949f71dac5a564b7b076e042c64d1d525bf5d198f3a9d48d4827c466d1c postgresql-contrib-13.16-1.el9_4.s390x.rpm 5811b931cead3d09047a798f04bd22338abcaa493d7dd88dbcd4b44126b86275 postgresql-server-13.16-1.el9_4.s390x.rpm b94bf72eebfe2f8e9d7cf548a1193877e226f746e059d37f3970db229431ec82 postgresql-private-libs-13.16-1.el9_4.s390x.rpm c84919416be64fc8280306e320a227d21ff027fc68bb9ad57845297db86ec234 postgresql-pltcl-13.16-1.el9_4.s390x.rpm e8e3419c59c24aa7b54ecbe8c2fbf492d7ebd3a28072298ece28f75e8ed489e7 ALSA-2024:6020 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348) * postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default postgresql-pltcl-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 0694b2a480810fbf632c587a9a8b9e004f4b2e60e899cc309e863b6788890a66 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89 postgresql-private-libs-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 340b50ddaf24d27acf77529d70917046dc2cf99d41834c97652ba9315b388f44 postgresql-server-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 34beaeeee69b202a29ae21757ba24b894cfbfee39917d520593381eff3725427 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445 postgresql-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 39aeb61d59f5026f8aa0826cd649afa1784c67c082fba357e25ef93ded01ce3c postgresql-upgrade-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 3e0976630f2d5ba24cdd9107404515614acbd8ca6b427b9a9d4392c276a0a863 postgresql-private-devel-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 4427eeab882815d89d646d69e5cff537838fb42fe23b8c76f1ab8a13d38deacb postgresql-upgrade-devel-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 4582f6ff612fc537ea9112194fbd9fb37314a11eec7028e6cff8b606bfe96a97 postgresql-test-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 49006a663a2d767ed2785281b2c105dbcc8ec68b39a00a597b5c58fa43436cb9 pg_repack-1.4.8-1.module_el9.3.0+52+21733919.s390x.rpm 5f868073dcfefc5ea23c26a1624fa9e78b698d25c3e02e08a7533e2e4c6589e2 postgresql-docs-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm 9bd90a46160c45e06f9631e7d3010c74c2c0159d45fd7c392bc1d36f8646ef79 postgresql-plpython3-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm a5347b2efd6ac505ad08d02cf069f7d320afde5d16d25e0321887275c478b103 postgresql-contrib-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm b88e5d6bda54e31ceea627ff0cd27842686502e408436fb13492ebf6f142c4e6 postgresql-plperl-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm bdc9ac4537bebc94b6e8a6307756881e2ae6bd3320ebea3de24abe2cd4f7604b postgresql-static-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm c3ed92181c140027b3c366d4d40cf66b784dce500cbf9bab8fda3c2d7cd956cd postgresql-test-rpm-macros-15.8-1.module_el9.4.0+111+667b9e9e.noarch.rpm dee51d8823d2bdd22387d82a4d8e40de05058d00c94a5e9216bdaba278f792dd postgresql-server-devel-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm f7f0eadc171b4f5c1880e76784a28ec88b2db57453ef983439cf1e9ddbbae335 ALSA-2024:6146 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.12-libs-3.12.1-4.el9_4.3.s390x.rpm 0044f8837f3629750f669de199c5a38fc97a4479060a5f9b280325650dccb6f7 python3.12-3.12.1-4.el9_4.3.s390x.rpm a70cfed14937a859194f478c9b850e93f20e4a921073f749966379e5e2ac67ea python3.12-tkinter-3.12.1-4.el9_4.3.s390x.rpm ab27bc4384f98ca4ca314b23dc0bfbc9a5d2145aa9e994075f7d96141b542abd python3.12-devel-3.12.1-4.el9_4.3.s390x.rpm cb3b446df230eb4118863a7ccb0bc3165baaf469f5605bf9362792f8a9704f72 ALSA-2024:6147 Copyright 2024 AlmaLinux OS 0 1 Moderate

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863) * nodejs: Bypass network import restriction via data URL (CVE-2024-22020) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default nodejs-18.20.4-1.module_el9.4.0+112+bb28ff81.s390x.rpm 453c4867352d2829b52d34979eec702c449aaeb85d2d9ffcb79fb4382dfb3c6f nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-full-i18n-18.20.4-1.module_el9.4.0+112+bb28ff81.s390x.rpm 7c65c11a838c2531a78015673461afa0a239f2f0b3f1b6894f429c56a5b0171f nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-docs-18.20.4-1.module_el9.4.0+112+bb28ff81.noarch.rpm c1e7db42d47c00e5e295bdcf95a9537a5fe05b24354641c7e5c16390e6498698 nodejs-devel-18.20.4-1.module_el9.4.0+112+bb28ff81.s390x.rpm cbd646200d3a6a430329b481f5297b522ff6b565df8f8b37d1637c65191da268 npm-10.7.0-1.18.20.4.1.module_el9.4.0+112+bb28ff81.s390x.rpm f4ddd38c9784b1edf2b69239ffa894732b065b05053eace294677bbf43da363d ALSA-2024:6163 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-devel-3.9.18-3.el9_4.5.s390x.rpm 6b3a8efa7556ee2f7ec32b27206240ecafc0355e27fc92599825b8ccdbd412a4 python-unversioned-command-3.9.18-3.el9_4.5.noarch.rpm e1a6012337dbcb80e3b8adae23768f6d42391a00e2dab862efff55c711a18e90 python3-tkinter-3.9.18-3.el9_4.5.s390x.rpm e842a8b97147e569d1cb54c9a3153422c455beccd68918df7500885723db35cb ALSA-2024:6166 Copyright 2024 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: GSS message token handling (CVE-2024-37371) * krb5: GSS message token handling (CVE-2024-37370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default krb5-devel-1.21.1-2.el9_4.s390x.rpm 4ec883a8ca6d13506d7bb71d23dbdfe02e27ce1fce1fd2649047afa7e9f95f4b ALSA-2024:6179 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-devel-3.11.7-1.el9_4.5.s390x.rpm 5243aec7838299ee93f547360e7a266e23f6775606af8e934192c882b51785ba python3.11-tkinter-3.11.7-1.el9_4.5.s390x.rpm 614ba2d5487beea86896d33be47e0b930caf53c6c3d34306c3983a5a887daf3d python3.11-libs-3.11.7-1.el9_4.5.s390x.rpm e51a5f1c4797abfa9f1ed42b2b64848364366c25a4beb044fd6739f4c76d1e41 python3.11-3.11.7-1.el9_4.5.s390x.rpm f33724a9aff08d9bc6205fe70d5117e38c0469746446d8c124e79bdb42cbc181 ALSA-2024:6184 Copyright 2024 AlmaLinux OS 0 1 Moderate

orc security update

Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations. Security Fix(es): * orc: Stack-based buffer overflow vulnerability in ORC (CVE-2024-40897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default orc-0.4.31-7.el9_4.s390x.rpm 090c62a007a4ac8ef06b8e4a59427452b911acbc45d99ab41353d4e210c3743e orc-devel-0.4.31-7.el9_4.s390x.rpm 498af633a70ed1ef5abd1f182e3fdca863451e667e03624b961aeb0b9bf2e1e2 orc-compiler-0.4.31-7.el9_4.s390x.rpm 70ce91e581ea8295f483de1664b65a7ae96bf340077570a4524f7a1da24bba5f ALSA-2024:6186 Copyright 2024 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-5.el9_4.s390x.rpm 65387cbd789f38d9493400bb42bdba9bc4b828170992f94bc01927342d87f078 ALSA-2024:6187 Copyright 2024 AlmaLinux OS 0 1 Moderate

gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gvisor-tap-vsock-0.7.3-5.el9_4.alma.1.s390x.rpm 0243834f1d37a1588bd8a06bac950d03093444a0fc95489aa0720b61b331082b ALSA-2024:6188 Copyright 2024 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default runc-1.1.12-4.el9_4.s390x.rpm 2629602bcd40393f3d5c8a828dbca545723a5894620b40579e37190a3e079da7 ALSA-2024:6189 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-tests-1.33.7-4.el9_4.s390x.rpm 394a60a34000ddc4f5e91765f6866225342ceef2beb4866bcbdebbc739683a45 buildah-1.33.7-4.el9_4.s390x.rpm 81cf725b0f6c502d1a08b64e012184ffa50e871abcb31028027a7d2d1c56194c ALSA-2024:6192 Copyright 2024 AlmaLinux OS 0 1 Moderate

wget security update

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * wget: Misinterpretation of input may lead to improper behavior (CVE-2024-38428) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default wget-1.21.1-8.el9_4.s390x.rpm e61fedcfe951df916ca35758286b32a0fe0f594590f558e2ca440cdc9c62221e ALSA-2024:6194 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104) * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default podman-remote-4.9.4-10.el9_4.s390x.rpm 8ae4d1e9faf7f2144b44123b66f084a8bbfdd0adee14f95774d9efe3726cec45 podman-docker-4.9.4-10.el9_4.noarch.rpm 9211804ac5d3c7cc1f7490d67ca70d07a72c9b68c3bc0830397903b832991129 podman-tests-4.9.4-10.el9_4.s390x.rpm f3b4645129d4f522c082fa800e3fe3bf3d817d2ca3a45da57eb7af00f8c7749e podman-4.9.4-10.el9_4.s390x.rpm f5cd26e686b73ec23ecf9567f25920c2e9d5a7f74766b9fdfd489a2260f4d16c podman-plugins-4.9.4-10.el9_4.s390x.rpm ffb0475f78cceb0ea7ee38a38f8b32b769bde7896a09341cae68aa326623d4e3 ALSA-2024:6195 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default skopeo-tests-1.14.5-1.el9_4.s390x.rpm 08bdccfc257a7cb5324b55ba177dc968e08ec54244237c31792f69e9a967b966 skopeo-1.14.5-1.el9_4.s390x.rpm d8d683815e17b0e9566c337e9b0ce941d50af218d161c89abb0b4ef34c890458 ALSA-2024:6197 Copyright 2024 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: format string injection leads to shell command execution (SAFER bypass) (CVE-2024-29510) * ghostscript: path traversal and command execution due to path reduction (CVE-2024-33869) * ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths (CVE-2024-33870) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default ghostscript-9.54.0-17.el9_4.s390x.rpm 2ce44cc9c030c1dfb0ba6ae77c7ebd11406786b905049d66e86543a252c0e8cc ghostscript-tools-fonts-9.54.0-17.el9_4.s390x.rpm 2ec60ec5861f58494f3fe8c5539b636918c5ae725ffbba8638612e02c3e80356 ghostscript-x11-9.54.0-17.el9_4.s390x.rpm 624e69fe26ba034e9bcda18b655ad6c2337b2b2b6f94c16c1d1e7f6a2153db13 libgs-9.54.0-17.el9_4.s390x.rpm 73ecf3a0c6d276c368f29892ed1ffedae4a35c08c62ad36587eaa02ff45a2a9b ghostscript-tools-printing-9.54.0-17.el9_4.s390x.rpm 750f0293fccb14dfa85b9e63d531a2bb2c261ca2a1c31743a9d617f3f4ae2e86 ghostscript-doc-9.54.0-17.el9_4.noarch.rpm 876f49c2bf4783256e97669baae56fdab8ac9e9e87b009224182323e48476af4 ghostscript-tools-dvipdf-9.54.0-17.el9_4.s390x.rpm 87a3b365280eeafcf87a8dda56868f91e3b6ddb8af0f378c952cf20e9587700f ALSA-2024:6356 Copyright 2024 AlmaLinux OS 0 1 Important

bubblewrap and flatpak security update

Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default flatpak-session-helper-1.12.9-3.el9_4.s390x.rpm 4dca9ab068ffacc00bd7e1236882d17c494ba792a98ca1fe5da7420772adf572 flatpak-1.12.9-3.el9_4.s390x.rpm 57f82acad52a8c6800f53a1e0189298e47e6a9a3ecbfc191d26080519bcf7091 flatpak-selinux-1.12.9-3.el9_4.noarch.rpm 7e2b017a0ca2293f95a3bb3e8e7162e4f52deabe086853c3704c4fd5c5048d1e flatpak-libs-1.12.9-3.el9_4.s390x.rpm aacd40b255034e3da04ac9a4efc5cb675dc07011fd189a889a257ff40087f311 ALSA-2024:6464 Copyright 2024 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib2: Signal subscription vulnerabilities (CVE-2024-34397) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default glib2-doc-2.68.4-14.el9_4.1.noarch.rpm 6f5dc26757eaf41ad7827166a1f9d8d08025b1145beab9ac66b523b2b90f55f1 glib2-tests-2.68.4-14.el9_4.1.s390x.rpm 7a9a814e1720e3674dddb25e1d1e592798c6263bb2b4a7eb6a389b74380d8030 glib2-devel-2.68.4-14.el9_4.1.s390x.rpm 963bea2782464473e09792fe5855a86bada303c4f865eeae963f99f743462735 ALSA-2024:6510 Copyright 2024 AlmaLinux OS 0 1 Moderate

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default emacs-nox-27.2-10.el9_4.s390x.rpm 1dfd21688a7a31c380adcd1a5c32ee100ad5f47779bb7509c970653ed46f86da emacs-lucid-27.2-10.el9_4.s390x.rpm 430423b1ede43c153b79741c267b1ceac04e29c924a24bfcc2af31132db516c9 emacs-common-27.2-10.el9_4.s390x.rpm aadc7dbb9770b5e5bbfa796add0fb30d09adce7fe79815631cc0ca4cdb4b2255 emacs-27.2-10.el9_4.s390x.rpm cfd9744bd0100cc5a7e11a8b38a45681f5dfbf4c9eb20326022f991f0f17405b emacs-filesystem-27.2-10.el9_4.noarch.rpm ef93dbe7e32a0acc409bf52449feea9913b5cd3c0d64f9cc01d02a7b54c2ce33 ALSA-2024:6529 Copyright 2024 AlmaLinux OS 0 1 Moderate

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184) * dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default dovecot-mysql-2.3.16-11.el9_4.1.s390x.rpm 415eeaffc476826d809b7676e9fd03b08c5d28868d597ead6bf1da23f2b3ce7f dovecot-pgsql-2.3.16-11.el9_4.1.s390x.rpm d9ca3a2a839759d49df49863ce5eeed97908b5fa2249988fc27368706a64bf81 dovecot-pigeonhole-2.3.16-11.el9_4.1.s390x.rpm db70d10736bb948c296a521eec1183e450237b1ce3df97397bce3a6cf735f5a3 dovecot-2.3.16-11.el9_4.1.s390x.rpm fc71161a7ec261c53c2061aab1f747a5ba69ea956051108a9eb1430034be351e ALSA-2024:6567 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463) * kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629) * kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630) * kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720) * kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886) * kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946) * kernel: KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region() (CVE-2024-35791) * kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797) * kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875) * kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000) * kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801) * kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883) * kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019) * kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619) * kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979) * kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559) * kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927) * kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936) * kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040) * kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044) * kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055) * kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096) * kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082) * kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096) * kernel: Revert &#34;mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again&#34; (CVE-2024-42102) * kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131) * kernel: nvme: avoid double free special payload (CVE-2024-41073) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-headers-5.14.0-427.35.1.el9_4.s390x.rpm 11b659f3d001cfbb4b3871b2447ef7a0e48ffd09e2e85833ebd1641ad2f478a8 kernel-debug-devel-matched-5.14.0-427.35.1.el9_4.s390x.rpm 17bb7f6d5988eb5aa346e5a42dab2df8a1a5ff18a05b860bd4189f5179655ade kernel-zfcpdump-devel-5.14.0-427.35.1.el9_4.s390x.rpm 3ffc160bb8c246eeff4a0af75f7d490ed0a2dbe0babd51dc3f5aeb70e8063d17 rtla-5.14.0-427.35.1.el9_4.s390x.rpm 4d928c42de8ba65cd8bccafb24db657e0e361e80940a485663ebdfd07643454f kernel-devel-5.14.0-427.35.1.el9_4.s390x.rpm 523d457ef79a1d00e2eb46fc3fcefd5f1ae027c9b134ba4aab13f23f7a0a52eb perf-5.14.0-427.35.1.el9_4.s390x.rpm 67ed643eebe5293af33b8c0cb228c595d8bea4075c946ffdb8eeea3a9a849aa4 kernel-devel-matched-5.14.0-427.35.1.el9_4.s390x.rpm 7b9cd04a0e3204d68d6f044d91c9f05a31e9f88c3dd812b0f75ffe423338d80b kernel-doc-5.14.0-427.35.1.el9_4.noarch.rpm 8940be9bc5c5169ae4ed41a0408afd2d67daf12a689a4ebc2b947485cfb89c5b kernel-debug-devel-5.14.0-427.35.1.el9_4.s390x.rpm 92dac77d111962f0be9789bf7a38ebdd58974123606c9c212658851765b21870 rv-5.14.0-427.35.1.el9_4.s390x.rpm 9c4ce119e04f6c69091db13f2cffb87277fb6dd08f4c124bafc3b922347a1dfc kernel-zfcpdump-devel-matched-5.14.0-427.35.1.el9_4.s390x.rpm cb13f2a43c5dac4aa695fe81398df2719bf9079ece764af2fb975876a4cebef6 ALSA-2024:6681 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: 115.15/128.2 ESR () * mozilla: Type confusion when looking up a property name in a &quot;with&quot; block (CVE-2024-8381) * mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382) * mozilla: Firefox did not ask before openings news: links in an external application (CVE-2024-8383) * mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384) * mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385) * mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386) * mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387) * mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-x11-128.2.0-1.el9_4.alma.1.s390x.rpm 9ef450f7fbcb93f2a8dc347d8365244f19dce30a76d63167b1fc5d48b213102d firefox-128.2.0-1.el9_4.alma.1.s390x.rpm f63537e35fbba933eeb2d506abc0d1119d121bb087be2f29b951dcb82953f616 ALSA-2024:6683 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: 115.15/128.2 () * mozilla: Type confusion when looking up a property name in a &quot;with&quot; block (CVE-2024-8381) * mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382) * mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384) * mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385) * mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386) * mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387) * thunderbird: Crash when aborting verification of OTR chat (CVE-2024-8394) * mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-128.2.0-1.el9_4.alma.1.s390x.rpm 2acdbd5c84981f1a66513bcb2fb3d28c5bc23625b3ff31e6c74236844499697c ALSA-2024:6726 Copyright 2024 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default fence-agents-kubevirt-4.10.0-62.el9_4.5.s390x.rpm 148727be2c6d0347123c1ee47bd109be77e90634187de47850bd488ec41206fc fence-agents-ibm-vpc-4.10.0-62.el9_4.5.noarch.rpm 3d429e1c1ae226a8b751760329fee14d0cd426cd371379edb1ba91204b2efac3 fence-agents-ibm-powervs-4.10.0-62.el9_4.5.noarch.rpm 6d9d0109c086db60429c98c9cf1a8434e74b836d2cea1263a7b223558363651e fence-agents-common-4.10.0-62.el9_4.5.noarch.rpm bb8e86bfef0b69d3c507e075d45f573402d5a0993d7200167ee06a3de8e6c7a6 fence-agents-virsh-4.10.0-62.el9_4.5.noarch.rpm dc5f33cff413eeb80c3345d8820de96512dc3267e77e6ac41b565ab725436d8c ALSA-2024:6754 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: Negative Length Parsing Vulnerability in libexpat (CVE-2024-45490) * libexpat: Integer Overflow or Wraparound (CVE-2024-45491) * libexpat: integer overflow (CVE-2024-45492) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default expat-devel-2.5.0-2.el9_4.1.s390x.rpm 5fea1267d90bf8a5ef17bd02da90c3734ea7b6744c97f892483cbbdfff38e246 ALSA-2024:6757 Copyright 2024 AlmaLinux OS 0 1 Moderate

libnbd security update

Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients. Security Fix(es): * libnbd: NBD server improper certificate validation (CVE-2024-7383) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-libnbd-1.18.1-4.el9_4.s390x.rpm 1d3dc4d74e4b59ece06bcfdaee1a33c5755683914f2138fc59fa68312af8373a nbdfuse-1.18.1-4.el9_4.s390x.rpm 20153f29b661828830135b62a8402c1af038a0c548f8f4dc67be4a9b1aa3606c libnbd-bash-completion-1.18.1-4.el9_4.noarch.rpm 7567f1ba72caef39942e13d41c4c9c22ca2f3f47a99cbe2f37fffb64b4507430 libnbd-1.18.1-4.el9_4.s390x.rpm baeccd30455ca1235abdd0d998d23cb146d7c7dea7b28a652ae76b9ede41f821 ALSA-2024:6783 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Possible denial of service in X.509 name checks (CVE-2024-6119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default openssl-devel-3.0.7-28.el9_4.s390x.rpm 8aa7dc0be97aa1fdfd06b2076036e2fe521d66834c3e459e0ad82b633b6c2f70 openssl-perl-3.0.7-28.el9_4.s390x.rpm e4f7c819f47a40c83403c88f7d734c1a4504cbcbfb12febc24a9aebfa0a143d3 ALSA-2024:6785 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: DoS vulnerability in REXML (CVE-2024-39908) * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> (CVE-2024-41123) * rexml: DoS vulnerability in REXML (CVE-2024-41946) * rexml: DoS vulnerability in REXML (CVE-2024-43398) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default rubygem-rexml-3.3.6-3.module_el9.4.0+115+226a984b.noarch.rpm 01b567338af4d61c6a835bbaebc646a8595f5cd016e21509794a81b393c75f8c ruby-default-gems-3.3.5-3.module_el9.4.0+115+226a984b.noarch.rpm 0351daf0db7b974a5f6477748ecbf3279a489aaad57ed5f65f7c6902d1701587 rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.s390x.rpm 05258957f4a8ba14cc6ebf5219ecc4e0e325a64dcd11edc78435445fb2231e41 ruby-devel-3.3.5-3.module_el9.4.0+115+226a984b.s390x.rpm 0a03825ea7bbe60ff05a00f14a5cb16999ae6d085fc4c1ecd4f6d1bb7aef8baa rubygem-psych-5.1.2-3.module_el9.4.0+115+226a984b.s390x.rpm 0a89bd3ea548c70760c15fefa5eb84229b72f9393fc33aebfb57883966aa2ebf ruby-doc-3.3.5-3.module_el9.4.0+115+226a984b.noarch.rpm 10a6e030a0e01466854ff77a489671066c0afae33a9c302a7b4a2b1759d0e9a4 rubygem-bundler-2.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm 1dad4f622c6d8e5718e20d88f2fdfd4805c58b17cbb3c5b007d4c17511132a0c rubygem-io-console-0.7.1-3.module_el9.4.0+115+226a984b.s390x.rpm 25c96b780574575854ea6815c560e86208465445fcbdc6e6b9684cc18c256cf1 rubygems-3.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm 26b6048365106718e21840305172ce1de134b53c73690d93b49e95d30699b806 ruby-libs-3.3.5-3.module_el9.4.0+115+226a984b.s390x.rpm 2abc6e6f85b7585eea1bc29e82e7cc1b39e9f27af9165a13a6c9a87b1736fff9 rubygems-devel-3.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm 2cec22f63f0ee9a4743b8b035f6219accf700d2f7b7f53c8da4ea18a52396e7e rubygem-bigdecimal-3.1.5-3.module_el9.4.0+115+226a984b.s390x.rpm 2dc4dede6b949f484de0f62b13decb8089aa0f3e17ef287cb8bfe470a76a0694 rubygem-test-unit-3.6.1-3.module_el9.4.0+115+226a984b.noarch.rpm 36815187b458555d7c33e736abe8606c9b47f05e1f4f5431dd04df376ed1ecb1 rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm 37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58 rubygem-mysql2-doc-0.5.5-1.module_el9.4.0+75+1a8fe981.noarch.rpm 65b0d0cc45f0088e7962db0543b7f1672cbc730924b371f28cdda18a25b33edf rubygem-power_assert-2.0.3-3.module_el9.4.0+115+226a984b.noarch.rpm 6933cce96666eb2c7a499796b717c035a58461dbd8727c62c67a0da8c8f26a57 ruby-bundled-gems-3.3.5-3.module_el9.4.0+115+226a984b.s390x.rpm 6e7dc0aeb166b4b2dbc04bc964eca88310cb14be0bd2efd3fef69446db6baec8 rubygem-json-2.7.1-3.module_el9.4.0+115+226a984b.s390x.rpm 76f852382a4abe4afa455b310d077ff2c87513e57291bde8c6bb9a38ebd63106 rubygem-rdoc-6.6.3.1-3.module_el9.4.0+115+226a984b.noarch.rpm 8926bf67c5af8614216ce5a08f227efdd104a5e2af6972405379bb549b1fe5fd rubygem-rake-13.1.0-3.module_el9.4.0+115+226a984b.noarch.rpm 9972528d830029d64bd6804bf54568df638b640a81aec5c71f115c6f1d36be18 rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.s390x.rpm a81354cf449ea715f53abe583ed241f40275e30991a4a7bafc454729c2c75cc0 rubygem-irb-1.13.1-3.module_el9.4.0+115+226a984b.noarch.rpm bc7ffb08fd40e98e821c072bc7ba265f8f451365f692698f073fa8dc155aeb4d rubygem-minitest-5.20.0-3.module_el9.4.0+115+226a984b.noarch.rpm c1bbe8d893ed1d0f2f0954403db9c24bf8363aa194f2ac8dc61f6ad9c2f94651 rubygem-rss-0.3.1-3.module_el9.4.0+115+226a984b.noarch.rpm e0d4ad72d336733fef97fe3e25963dab793801a7258a69131ec501ec87f2a583 ruby-3.3.5-3.module_el9.4.0+115+226a984b.s390x.rpm ee420d64f27b53d782b2872646492610969ecfad58667a4910dec98ef06d8ec8 rubygem-rbs-3.4.0-3.module_el9.4.0+115+226a984b.s390x.rpm ee4bc25dc5249b7910aad5f8cd4b5cd6879d50e55f71b5073efbf626a217dca0 rubygem-typeprof-0.21.9-3.module_el9.4.0+115+226a984b.noarch.rpm ef651c4f8cee6bcd1879db53dd45cce247b031335bc451c6126129cd55185694 rubygem-racc-1.7.3-3.module_el9.4.0+115+226a984b.s390x.rpm fa85c6ff19a93f557580f074f80147c90fa4851807dcd76456f229fc6f525314 ALSA-2024:6848 Copyright 2024 AlmaLinux OS 0 1 Important

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770) * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default pcp-export-pcp2spark-6.2.0-5.el9_4.s390x.rpm 0756d4b88e0f6e5c5fc4cfd6ab2bb8c5ec153d67851b263617eb190560558bb3 pcp-libs-devel-6.2.0-5.el9_4.s390x.rpm 0b3966b7bb6c84db6cdfc8ed2b4be0f7071a145cd98fa21e644410c38e64c6bc pcp-selinux-6.2.0-5.el9_4.s390x.rpm 0e9c6021af3bebb4d5fdb050272d2f7ab8981e63d6439e6cacf442de06e8222a pcp-pmda-bash-6.2.0-5.el9_4.s390x.rpm 127e2c1e421678d73eafccd76655557ac61dd11e43753afa85f2360604927d21 pcp-export-pcp2influxdb-6.2.0-5.el9_4.s390x.rpm 138d75191c91a3e7927e146aa1308be492e88352b13b3c796bf107cae26bfaa5 pcp-pmda-libvirt-6.2.0-5.el9_4.s390x.rpm 150a9e1768d7a43e5a5446a8e6344392367cea681a09742680ace1f08ac73ee9 pcp-gui-6.2.0-5.el9_4.s390x.rpm 16a88e6415b4d0c7829d73979a160926705152f9f21e55dbf52780950f74a571 pcp-pmda-trace-6.2.0-5.el9_4.s390x.rpm 1bcc66e81af3ba190edec856114affb946f04744553d8545467dee2e02ffeccf pcp-pmda-pdns-6.2.0-5.el9_4.s390x.rpm 1c81c18601a50b3ad7fdb0038edabcced58b51fac0e725849e5224a4f587f8ae pcp-pmda-lio-6.2.0-5.el9_4.s390x.rpm 1d440d603074f7970701e030c7152dc45ce796738aa34ee83cead4b5deed306b pcp-export-pcp2graphite-6.2.0-5.el9_4.s390x.rpm 26d5a3056d61af06a6fa50067ace8f75f02a853e8ca1d99e860bcfd259e194d8 pcp-pmda-named-6.2.0-5.el9_4.s390x.rpm 2d94d5e421dbc739e0d7805fdde2feafabdd61779c3b31dfeb404b416ccea59e pcp-pmda-elasticsearch-6.2.0-5.el9_4.s390x.rpm 2f077f17b9fc3b4312cb4ce7001e963ed797eccf7f0f1026ea303e62a80fa1fa pcp-pmda-rsyslog-6.2.0-5.el9_4.s390x.rpm 31a36298dbcde377ec75916513d52a341ada8384efc602fc0cc0b4a5798c081a pcp-import-sar2pcp-6.2.0-5.el9_4.s390x.rpm 355eb0407c430fd1cd5a49dd8085392614d498b24515bad48ba77147c6b36581 pcp-pmda-mailq-6.2.0-5.el9_4.s390x.rpm 35e9e6a89a9f0d8d6eeda9f35613767e7455d95da0276004d3ee9383a0ebd429 pcp-testsuite-6.2.0-5.el9_4.s390x.rpm 387ea29f02d2f31724800b0b3c8d52ff38bff0129c47b59e7c00cc809bfa67eb pcp-pmda-memcache-6.2.0-5.el9_4.s390x.rpm 3a628c170bf0168ce59b03d72aad3671927a6e71d75d61982e84028c4ee03f5a pcp-pmda-ds389-6.2.0-5.el9_4.s390x.rpm 3ea93700ee64f0b93c0a7f383a790898f129b5af481e4d128452432a67de9ed7 pcp-pmda-mic-6.2.0-5.el9_4.s390x.rpm 3f18ad4b474326549be952b6c3c39b71834ad2c78046ced71a49580533614c92 pcp-pmda-dm-6.2.0-5.el9_4.s390x.rpm 40295dce619fd3b1b5d7ab981999658f8fea0da3406af977e53e166b782b92eb pcp-pmda-gpfs-6.2.0-5.el9_4.s390x.rpm 40d83fa42561069d8db218d9a066dd1d53e8fb981a411fc72bcfd4ad37e6bd68 pcp-pmda-zswap-6.2.0-5.el9_4.s390x.rpm 41fd0a00f2611a02aaa7d9e87e24fc90770aca9208d1d7bdf99374fd0094be76 pcp-pmda-oracle-6.2.0-5.el9_4.s390x.rpm 44e316cf190d8475ee4e34961f09a9c7726f7d4f425b31701a4c93994f5aa64f pcp-geolocate-6.2.0-5.el9_4.s390x.rpm 4dfdbce2c714a5af39bf0984b3da58a975bb4400ef95ba48749bfc592c9d5301 pcp-pmda-redis-6.2.0-5.el9_4.s390x.rpm 4e353bcbe1c551945981d9464a214cacb4057406896b78368af7f9c04b87be91 pcp-pmda-activemq-6.2.0-5.el9_4.s390x.rpm 63cd62682d67a6ce5cf921015d2ca786559837ba91dd4b5a36189405a354783e pcp-pmda-haproxy-6.2.0-5.el9_4.s390x.rpm 642e73fe148dd57166e6ecba8bed77c66fc4ac7b2afbc4433b26c3b1c10ca0ca pcp-pmda-bind2-6.2.0-5.el9_4.s390x.rpm 64608d5239cf364e744f45d6288f3810e0c52ec3c5481a2fd078beec01af3fe1 pcp-pmda-snmp-6.2.0-5.el9_4.s390x.rpm 648922653b5f3dab6090dcafe90c1926358dfff96740e872a781dea4957ead2a pcp-pmda-openmetrics-6.2.0-5.el9_4.s390x.rpm 65026b3e9eb76b5b4cf18880cb18074b215b73228f7692c4c960395fa9131fa6 pcp-pmda-hacluster-6.2.0-5.el9_4.s390x.rpm 6697ae79694044083e112bd0aad8bf33e746fcdbfb5838584f677c736941bc2f pcp-zeroconf-6.2.0-5.el9_4.s390x.rpm 6ca731bf9d61dc175ea19c89b6088c720648d91758a5274af42ad48fe4c714bb pcp-import-iostat2pcp-6.2.0-5.el9_4.s390x.rpm 6cc95b5eca48167a7b576fecae6eeff2f00f1e95dbdc82b89d9aa2156333ac12 pcp-export-pcp2json-6.2.0-5.el9_4.s390x.rpm 6cebbf85331d14401b329c16017f052e7f5ea54c41177fd6b5b0e737c01b3b57 pcp-pmda-mongodb-6.2.0-5.el9_4.s390x.rpm 7090df5d384cb02be21115225aae7833913831f5cbd4d293ba0616e44690f2c4 pcp-doc-6.2.0-5.el9_4.noarch.rpm 76b193e4674d16310141c86556ee0011aa5ac58e65d5b6681fea838941d2ad27 pcp-pmda-denki-6.2.0-5.el9_4.s390x.rpm 76c311e867998163dfc00aa5e5a35832e583eca5727c8973b16423b541c8c832 python3-pcp-6.2.0-5.el9_4.s390x.rpm 7b5711577db8ca31b13b4103fe320343c1dca2213b117bee13b8f1b43f349ea7 perl-PCP-MMV-6.2.0-5.el9_4.s390x.rpm 7caa32ff0b929e33fce3da8ebd46150ebe5a2647156ae7077eab0ca1a1e71881 pcp-pmda-samba-6.2.0-5.el9_4.s390x.rpm 7d103f32af1fb1f4be215e0a7576976c046fd5370b29997da523dcb10a00a1b9 pcp-export-zabbix-agent-6.2.0-5.el9_4.s390x.rpm 7de3cbf6d1389cb4d2f94be3c72f155512abdab840856faeb0b118192b0859b3 pcp-libs-6.2.0-5.el9_4.s390x.rpm 7e5b0d0da2b20e55316019d4102654a92c22c07f659d50160d0181c895e5a256 pcp-pmda-cisco-6.2.0-5.el9_4.s390x.rpm 813abba710a7f9f078804dc819c7733b7aa412a4898845c4a314c9269d7f4f17 pcp-pmda-gluster-6.2.0-5.el9_4.s390x.rpm 841214f483c7907bc40050077c952d17265090d5caa118e77bdbeea8ca8e2375 pcp-pmda-cifs-6.2.0-5.el9_4.s390x.rpm 849b06f809b5248aaaedc324d5c0310770964d25385d672e2f1690bcfa501caf pcp-pmda-news-6.2.0-5.el9_4.s390x.rpm 85d3cab7cc052c8bbf0311fc58cf28a0fe5948422664b246125969efe548409d pcp-pmda-docker-6.2.0-5.el9_4.s390x.rpm 867a8dc16eba139257e97930a35c40e1a8ab39fa2a4c7560fe33efff9bacc6d1 perl-PCP-PMDA-6.2.0-5.el9_4.s390x.rpm 8728bf977fb8da714a003bbba77feba31686f98db970595e8033bb580dc728d8 pcp-system-tools-6.2.0-5.el9_4.s390x.rpm 8c8b4bf0587787d9be78bac07f6bef7f23e782c38201fd6ac9e8b12b84e7a4b1 pcp-pmda-sockets-6.2.0-5.el9_4.s390x.rpm 8eb92e1c5ae7182a8d79fbdc562c51e1fe7f3b5a486df03464bbc354108f533d pcp-conf-6.2.0-5.el9_4.s390x.rpm 903c6fdb64cfa1580607d5178be4e5209c9ccf81ffecaed060e7379b56a3386c pcp-pmda-shping-6.2.0-5.el9_4.s390x.rpm 92a794e9b212482d678fbcaadd732326afa154cead2d31c36304b5772c09bc5c pcp-pmda-farm-6.2.0-5.el9_4.s390x.rpm 9684f80eae8ce71ef21dfda3a32bc5a64ba111b2cbbc6c63d4afe9e88ba1028b pcp-pmda-statsd-6.2.0-5.el9_4.s390x.rpm 996c87f827201b4ade79e61c34814107521700ba5b675f4c3966678e222734de pcp-pmda-json-6.2.0-5.el9_4.s390x.rpm 9c77721043e4f698cfd51707b7b03715c74778c79902a0ef886690c7c889738f pcp-pmda-netfilter-6.2.0-5.el9_4.s390x.rpm a1cb303c2674118eed94b1a80daec35066549a634106da06df201753613dedf2 pcp-pmda-logger-6.2.0-5.el9_4.s390x.rpm a573b33d5d7a6784d84723f18a48e193cd49205cd2869f1599f20dbdf6cc9e4a pcp-pmda-summary-6.2.0-5.el9_4.s390x.rpm a592b1c7c8f76b072453aa9be6ad5d48df1f29a927dc42c8716085a117a506b3 pcp-pmda-lmsensors-6.2.0-5.el9_4.s390x.rpm a5ab6c635065eed64d152c3e51c5f3fa471519d9675b513a174c2f0394f24b10 pcp-pmda-mysql-6.2.0-5.el9_4.s390x.rpm a660b688e736a3956c33b3303499a1d9fe838184b91f682ad59e67f6c7b85eb9 pcp-pmda-roomtemp-6.2.0-5.el9_4.s390x.rpm a8722863406e203c4742cb4372d9e62efbf9e1a91da07bf49af8a1ddb6b461ba pcp-export-pcp2zabbix-6.2.0-5.el9_4.s390x.rpm aabae5f9911602e169334dcadd09a491f42bc33ea74f071b2b94253e110a7f05 pcp-6.2.0-5.el9_4.s390x.rpm ac93b4c9d27b6715cf08c1c2169c019bb9931ca6a640ee0d610b31d5b69e5274 pcp-pmda-podman-6.2.0-5.el9_4.s390x.rpm ae61f24a910a70c0a645a49d76de1ed0c5d8ae58dc3ef79b47327e89f38fee68 pcp-pmda-mounts-6.2.0-5.el9_4.s390x.rpm b2af7bb791da8a89207a754245e810f0ec090bdccdf9e1d2a581cbb9828c38d1 pcp-devel-6.2.0-5.el9_4.s390x.rpm b670bac023aa425199cd5044f16161ea5ac6923d5d4736bad552bfc0b08b4dee pcp-pmda-rabbitmq-6.2.0-5.el9_4.s390x.rpm b6ca978066a2a2a60adf2369ed9cbcaca2e417bdd23e7b9de3dda769feab2c50 pcp-pmda-nfsclient-6.2.0-5.el9_4.s390x.rpm b718fea46eb53aaa5e0d749dc43adf3e5dfb76456d65cb14bcf12fcdd7714700 pcp-pmda-slurm-6.2.0-5.el9_4.s390x.rpm b7e86aca6f3fe3faa4163204d0eff43c751b572d64dac83f42bbe71f72be62a1 pcp-export-pcp2xml-6.2.0-5.el9_4.s390x.rpm b8d1c49f1f4da61accbf9f7e6d7c252858b5cecd2dcb303716059f82847dbee5 pcp-pmda-openvswitch-6.2.0-5.el9_4.s390x.rpm bc7c8879763b3a380a1deb8bd0bacf9d3facea05289694707c96220b7531a3c8 pcp-pmda-dbping-6.2.0-5.el9_4.s390x.rpm be1fc5a1ec437b744f2a9f161e4870945c35c98474d6abff2b47ceb209b0d1e8 pcp-pmda-bonding-6.2.0-5.el9_4.s390x.rpm be98c76a40b97311e0e90365d79c7960c239b08074e13a422ee9f0b971bc5936 pcp-pmda-netcheck-6.2.0-5.el9_4.s390x.rpm beae7526eabd5979840060f371679eb1d734b42fd598f5dccc82ee76b9400045 pcp-pmda-gpsd-6.2.0-5.el9_4.s390x.rpm c204d28954305fa5aed600f8a256b1589d6978a8d8bd14a70d887c19b2d46fc8 pcp-import-ganglia2pcp-6.2.0-5.el9_4.s390x.rpm c6ac1a26e92a3a9507fd97b0fcf38b3e6b140e9c99250ad57d88098e05e1d354 pcp-pmda-lustrecomm-6.2.0-5.el9_4.s390x.rpm ce288c6d56184b9aa4fecf546d16d10f76ac8fda2fb24e3e04b767de7b22b83b perl-PCP-LogSummary-6.2.0-5.el9_4.s390x.rpm cf6c8d0a4fa49823724973d87cba718652e41ee3dea16e3e00ba13e36238c572 pcp-pmda-postgresql-6.2.0-5.el9_4.s390x.rpm d06016aa65aadc233aad07a2d4b9bdf4fb6881efa0e93099a8e3da57e8f388a2 pcp-import-mrtg2pcp-6.2.0-5.el9_4.s390x.rpm d70afea74fb366d9622d3755760cae83ea9a2337e0d556d112d21ef6873b29a6 pcp-pmda-ds389log-6.2.0-5.el9_4.s390x.rpm d79214788c535b57a5edb96a44d73147efeaed246eb80d174acbf13f3638730e pcp-import-collectl2pcp-6.2.0-5.el9_4.s390x.rpm db87fa957e3e4e55bc9f9731506e563e29cd8a8930a0d32e11c7bb0a3c7a3cc0 pcp-pmda-systemd-6.2.0-5.el9_4.s390x.rpm dc285c28ca7674da0212495043c00290d5ae423c2ec454d5b14a64359c7154bb pcp-pmda-lustre-6.2.0-5.el9_4.s390x.rpm de367dc1b5433743060455a049343bc1eed31a1343c85f9479d075a7981cc090 pcp-pmda-zimbra-6.2.0-5.el9_4.s390x.rpm e27b1e48d3479b79a02ebfcc995005ef9675171fa2a7cf8e924a368b9bcc8374 pcp-pmda-bpftrace-6.2.0-5.el9_4.s390x.rpm e682966df395aee2f12228734e78b24127ee79e233041dd2d5864ace9a343bd5 pcp-pmda-unbound-6.2.0-5.el9_4.s390x.rpm ebd97102161e47cbe3068a700b62e8c032c6606287ec2496f99dfc6b9056b754 pcp-pmda-sendmail-6.2.0-5.el9_4.s390x.rpm ed5c1584961ea27cabc1e1c6ad2a467efa9048748deef20e3426ddcdb489771f pcp-pmda-postfix-6.2.0-5.el9_4.s390x.rpm eda088b76f4ae5222f6efe4bcdfb22738b47bb4b5a6ec4dfb3144aa6d4e68a80 pcp-pmda-weblog-6.2.0-5.el9_4.s390x.rpm edfeae747ea25a7b25248ad95485ef76a2693c39963371a3af81fdcc12414391 perl-PCP-LogImport-6.2.0-5.el9_4.s390x.rpm ee755d9414c1cd88cd43c37d6cf13b63e4104d891b855fcef55328d6496faecc pcp-pmda-apache-6.2.0-5.el9_4.s390x.rpm f045358fb2c99144157a39656bf623157c88c0d7709b76e534cb9d837b19bbf9 pcp-pmda-smart-6.2.0-5.el9_4.s390x.rpm f0f432bd1cc8221707c8505ed3fe31fd9fa9320c6c94d30caa14dd410700f471 pcp-pmda-bcc-6.2.0-5.el9_4.s390x.rpm f1e74789a13790a05397cfab113a7a0edd9555446cb940e84c471062460a9bde pcp-pmda-gfs2-6.2.0-5.el9_4.s390x.rpm f814646af8bc83804df68eb523c450e996466856cbbe7c437a903db4ecec410b pcp-export-pcp2elasticsearch-6.2.0-5.el9_4.s390x.rpm f9db7d2865c0b1975892f83b6a170cb5bda3400f3847220d5b7a5daa5ad3ad6a pcp-pmda-nginx-6.2.0-5.el9_4.s390x.rpm fead453451c7584e953a313c024094352e1de80cdb11dc585cf7c9bf35ea0db8 pcp-pmda-nvidia-gpu-6.2.0-5.el9_4.s390x.rpm fec6b480c45fb32407b1cdeeed6d524d85bbf19241d9143f67b0c1841cd1bd56 ALSA-2024:6913 Copyright 2024 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default golang-tests-1.21.13-3.el9_4.noarch.rpm 0a9a2e10f59fcd9afdedd681cc2094369a54047107e97b51f89dbbbc7a8f88da golang-misc-1.21.13-3.el9_4.noarch.rpm 4c96643e7b664e24c52084d40ba7e275c8ad632bac3ea356c27933cbedaf288b golang-1.21.13-3.el9_4.s390x.rpm 810368ae2683be44f640ede786ba7000974fdd4515dc70b7b9e5f012e70fd7b2 golang-docs-1.21.13-3.el9_4.noarch.rpm cb58cdb66dfd1b8b62f02981ce8a93b0ac62f5a533cc85df49c70b58d10b2785 golang-bin-1.21.13-3.el9_4.s390x.rpm da067d2573dc55f36b6a6fb98257e6ee928fa15cbe9082e22f44b1e36d522065 go-toolset-1.21.13-3.el9_4.s390x.rpm dbdf03ab2f53a9216d8280bd0a9dfa751d3bc4f4c61881304d88f9fd52c41f4e golang-src-1.21.13-3.el9_4.noarch.rpm fa177fd98f928892135d944e2f65fbdeeb1a1135cc3e724ad3af2acf7711333b ALSA-2024:6946 Copyright 2024 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default grafana-pcp-5.1.1-3.el9_4.s390x.rpm a952716b1fcf60c9ad31298104ee6a06aeafe1c1e5309aea987873a40d33eb69 ALSA-2024:6947 Copyright 2024 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default grafana-9.2.10-17.el9_4.s390x.rpm 1e0a53bf59fcb5a60b32983f59a6de004f91a87455e5a96b2c834f869f7ce251 grafana-selinux-9.2.10-17.el9_4.s390x.rpm 248976cac47d24d275f15801b41e013cb839e64c4dfde36cc78069a4cc268306 ALSA-2024:6997 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439) * kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739) * kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947) * kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931) * kernel: scsi: qla2xxx: Fix double free of the ha-&gt;vp_map pointer (CVE-2024-26930) * kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929) * kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022) * kernel: KVM: x86/mmu: x86: Don&#39;t overflow lpage_info when checking attributes (CVE-2024-26991) * kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895) * kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016) * kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899) * kernel: cpufreq: exit() callback is optional (CVE-2024-38615) * kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601) * kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573) * kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570) * kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562) * kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884) * kernel: ACPICA: Revert &#34;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&#34; (CVE-2024-40984) * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071) * kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225) * kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default perf-5.14.0-427.37.1.el9_4.s390x.rpm 0e2b5da508c10fda1949325c61b6734bebd1b6a729731481fa4208a4726d4565 rtla-5.14.0-427.37.1.el9_4.s390x.rpm 18476ad118d5af626958a2f262b4d20188119f35a2a7201d292c5ccf8dadcfc3 kernel-devel-matched-5.14.0-427.37.1.el9_4.s390x.rpm 1915a070299b716afba7cf6854dc76127fafcd7ff02781304630dfdc9f13094f kernel-headers-5.14.0-427.37.1.el9_4.s390x.rpm 24f374e98f8daf9598490b48b8851989c8302bebd6ec91ccee50d7d2af2ca844 kernel-zfcpdump-devel-matched-5.14.0-427.37.1.el9_4.s390x.rpm 3dce346c09ba00a33195d03fa03843482ab3a9fb7045346bff8a3bed6628f946 kernel-devel-5.14.0-427.37.1.el9_4.s390x.rpm 56997fc00329967e8392f26744e45516937812363af0d7666786af0109995c4a kernel-debug-devel-5.14.0-427.37.1.el9_4.s390x.rpm b7b4d48c960e1c269bfc94174491b945686d6f1d2dbbfb732ad799c97218f81b kernel-debug-devel-matched-5.14.0-427.37.1.el9_4.s390x.rpm ce2768aa7366a3d66c2a9a2f4743685e30dee50d7b770d9bb9efdd5d2769da26 kernel-zfcpdump-devel-5.14.0-427.37.1.el9_4.s390x.rpm d4c57bed1ff61212b84c5d9c22a78282235bd649da387b6509d9b93dc10043c8 rv-5.14.0-427.37.1.el9_4.s390x.rpm ec2f2e9b201081b814d9ac4b32d6d85fb975761db1076af58bf8fdad5fcd548e kernel-doc-5.14.0-427.37.1.el9_4.noarch.rpm fb1929d07c80de3e2bbbf647ab980790d752af44a051795ee39a8d498f981f6a ALSA-2024:7136 Copyright 2024 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default git-lfs-3.4.1-4.el9_4.s390x.rpm 34dbbde3f87e997cf6a6cb685ad34413d553785c49487e797412fabc87d920fa ALSA-2024:7204 Copyright 2024 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default osbuild-composer-101-2.el9_4.alma.1.s390x.rpm 1c2380dd9749dfdfcaa62aa5e4e01f5aac91d17006b4f68f1d09e3bcc2fc0368 osbuild-composer-worker-101-2.el9_4.alma.1.s390x.rpm 2eb097661000e6d8adc6e02f1479bc9998c3564afdd36655cf74775e16f2d525 osbuild-composer-core-101-2.el9_4.alma.1.s390x.rpm d7e766b82e4a79ff9a4dd8705db8fcdb5ef8b650597fab02e9a65514b7006363 ALSA-2024:7260 Copyright 2024 AlmaLinux OS 0 1 Moderate

net-snmp security update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. Security Fix(es): * net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. (CVE-2022-24805) * : net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously (CVE-2022-24806) * net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access (CVE-2022-24807) * net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. (CVE-2022-24809) * net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference (CVE-2022-24808) * net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. (CVE-2022-24810) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default net-snmp-5.9.1-13.el9_4.3.s390x.rpm 28c47afe97cb6caa6bbf746502e90da65a352a7c4cc3e2515ba74031be2bdff5 net-snmp-libs-5.9.1-13.el9_4.3.s390x.rpm 3dccf58f5f688a6d26cd8dbc4fdbe15339bcaddc9a369763609638aac81599cc python3-net-snmp-5.9.1-13.el9_4.3.s390x.rpm 3ed0cfbce60c05ad85758c6716e3d0019ae52acaedd130b7f8bc949b067c702f net-snmp-devel-5.9.1-13.el9_4.3.s390x.rpm 9378eb95076d68d43c0729c8650da4116d85dff166bf2e6f0d8c656c69ec6767 net-snmp-agent-libs-5.9.1-13.el9_4.3.s390x.rpm 9f66c1c4eddfa9df23d23275ffb7d38b611279e420f53ac87f5d5e49949651ec net-snmp-utils-5.9.1-13.el9_4.3.s390x.rpm a536566afebd28b4ad07e54544659255510c27a2ecc4d0d3b3a845c43fa04081 net-snmp-perl-5.9.1-13.el9_4.3.s390x.rpm f341760eab884be93923b94bb900f8197c42f93c2229216b6cc788ea0e916fbb ALSA-2024:7346 Copyright 2024 AlmaLinux OS 0 1 Important

cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. Security Fix(es): * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source () * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076) * cups: libppd: remote command injection via attacker controlled data in PPD file () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default cups-filters-1.28.7-17.el9_4.s390x.rpm b1c5c1ba21e10c0964c75a4a16310a2d5a7991e4e0a7250b812bc808958ecd0b cups-filters-libs-1.28.7-17.el9_4.s390x.rpm c6a3d0ed654d3b973d7bc36b6ce9de460df9ef1746578bcd6315c085d43ef6f0 ALSA-2024:7457 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_jk bug fix update

The mod_jk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine. Bug Fix(es): * Rebase to upstream 1.2.50 release (JIRA:AlmaLinux-58855) Security fix(es): * mod_jk: information Disclosure / DoS (CVE-2024-46544) (JIRA:AlmaLinux-59800) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mod_jk-1.2.50-1.el9_4.1.s390x.rpm f31342a12bc4cd9bfe85ac8b3d014934e537bd4e2d7523d17b9455eae1598dc4 ALSA-2024:7505 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: 115.16/128.3 ESR () * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402) * firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393) * firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394) * firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-128.3.0-1.el9_4.alma.1.s390x.rpm 36b0f80801d3e67c82eb0cd971f2f19cfa4796b15fb9271ef22ce3830f6b7351 firefox-x11-128.3.0-1.el9_4.alma.1.s390x.rpm dae509fcfed81977691f41083558e1f11d34155f3867205d8c1d7ad33c77dc90 ALSA-2024:7550 Copyright 2024 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default golang-bin-1.21.13-4.el9_4.s390x.rpm 0300dd31facda1fe353395dc82015ce7db069d5199cf251d38a22ef95dafbdad golang-misc-1.21.13-4.el9_4.noarch.rpm 0f72d31e8fbde81879a46087a6220436db2b8631d2c713649e87305cc7f210dc golang-1.21.13-4.el9_4.s390x.rpm 37c6353679c7a4b44763e14ab1bac8f19bbf4e1600c33d9c0039ddbf5c9ee3ed golang-tests-1.21.13-4.el9_4.noarch.rpm a0ff5a7dfcd2c46d774fe24b5b8e059cf04914ca594917c161bac2f7f8828714 golang-src-1.21.13-4.el9_4.noarch.rpm a62939759bf10a05b8f7f952edf57a46532e54e0b173d668b5e6487da2c0c0fb go-toolset-1.21.13-4.el9_4.s390x.rpm aa3cb7cd82ed5bf99692c07914946a138178e0bb9dbcc88ab26b16c8f429c8c8 golang-docs-1.21.13-4.el9_4.noarch.rpm e512e9dac95c21e867e8756b6d47f671a5f41144b9d8c652c45ddf27712b9365 ALSA-2024:7552 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: 115.16/128.3 () * firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403) * firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402) * firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398) * firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400) * firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396) * firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393) * firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394) * firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-128.3.0-1.el9_4.alma.1.s390x.rpm 99d8ae8d668ebc3a11f223856065c017551047aadbe987be9cc3ca1c533b4e4c ALSA-2024:7867 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35. Security Fix(es): * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484) * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485) * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484) * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483) * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default dotnet-apphost-pack-6.0-6.0.35-1.el9_4.s390x.rpm 2387365629aa63dca1b32a63656c2f842a7cea4b558b6e45d4cea0f1c1b566df dotnet-runtime-6.0-6.0.35-1.el9_4.s390x.rpm 31f22365b55ead23f46a7c5ca599eacd6a82fb8a8d48bf914ed52f7fa285a702 dotnet-hostfxr-6.0-6.0.35-1.el9_4.s390x.rpm 69c73a25fa982cbe6847227e45e11a947df3e811271f82bef6bfc7414ecd2964 aspnetcore-targeting-pack-6.0-6.0.35-1.el9_4.s390x.rpm 9d4381f465e24ec14f19bb7a4cedb955754a7b1c0867134bd0eb7f7ad71a1b77 dotnet-templates-6.0-6.0.135-1.el9_4.s390x.rpm bfa71fe85614457e01f002e35a19cd1eda90217891192201579cc5143608cf03 aspnetcore-runtime-6.0-6.0.35-1.el9_4.s390x.rpm c02f7694d8729d6f57c033dc66945c157100e60df4fcffad3cab1d21c97ce3af dotnet-targeting-pack-6.0-6.0.35-1.el9_4.s390x.rpm c5e5ada7eeee4daf6568834c0fc685406cb0464d33e092b1db049207dae647d4 dotnet-sdk-6.0-6.0.135-1.el9_4.s390x.rpm f4c7defaed09afefa1d2c260b15097e9db9dadfd09c9507fe1dd46b267111b37 ALSA-2024:7869 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10. Security Fix(es): * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229) * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483) * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484) * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484) * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483) * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485) * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default dotnet-sdk-dbg-8.0-8.0.110-1.el9_4.s390x.rpm 16e35b134d022b5a591d7da1380191157b52397d96d07383c754c6f4c761ce98 netstandard-targeting-pack-2.1-8.0.110-1.el9_4.s390x.rpm 2600ee70e338650ea15ec65dc379d8f05b215f76ea45a9f324cabb176adcf497 dotnet-apphost-pack-8.0-8.0.10-1.el9_4.s390x.rpm 2ab5edbc6a8d0e8fda9163f324df0f3391a1055f13387c7c34d93daac6e022a1 dotnet-targeting-pack-8.0-8.0.10-1.el9_4.s390x.rpm 2c142d195a5e34864d872d4f0083c183825217a13878e459980addd1d7e294fa aspnetcore-runtime-8.0-8.0.10-1.el9_4.s390x.rpm 67e989d9b6753463b2892d4ee500876a613d40d016569258f32afa4e5e9c1a78 dotnet-runtime-dbg-8.0-8.0.10-1.el9_4.s390x.rpm 8d00b203e29080179f5c99b188ccc866b9740d078683c1a9ef7c16760b9654be dotnet-runtime-8.0-8.0.10-1.el9_4.s390x.rpm 969680b5cea24914c6d3b66670b45e25b39aac643f8a007627355e029db74c5b dotnet-host-8.0.10-1.el9_4.s390x.rpm 96c3f5da9c842aeedeca4ef48f252fc0b5c7b42050e1bd405fd5d1f9eee5ee25 aspnetcore-runtime-dbg-8.0-8.0.10-1.el9_4.s390x.rpm 972a60789f63c6af584c2a7b73c5492f1fc9292ac0a2b92eb44b02ebd3c56867 dotnet-hostfxr-8.0-8.0.10-1.el9_4.s390x.rpm 9a26b7e8716f6e244d5c154d09a1a40447a78f660f3d164e26ff735d69311c08 aspnetcore-targeting-pack-8.0-8.0.10-1.el9_4.s390x.rpm b899a33201c7c6908ef6c051978b95fcb06e4e5835c09b54f8877d446f99f325 dotnet-templates-8.0-8.0.110-1.el9_4.s390x.rpm d9c0d12ec000211c97dd4359f0bd270e163dcc3f35ac45dc6f0bd05c22c55493 dotnet-sdk-8.0-8.0.110-1.el9_4.s390x.rpm fb5ab288bdda1d32cde8f209d3a86ba0912a2238f20dd99dbfa19613c984a385 ALSA-2024:7958 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-128.3.1-2.el9_4.alma.1.s390x.rpm 889d8b46f50a87bf95352c58ccff01b6a1add9e1957946a6df3347e1251dbf14 firefox-x11-128.3.1-2.el9_4.alma.1.s390x.rpm f965e49992ca11eff9a208eb843b9c7034e048b1ad1a55e23579f535fa136a4b ALSA-2024:8025 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-128.3.1-1.el9_4.alma.1.s390x.rpm 0e73c9976c29763f2d7e8cbb9631d8582a0403fc83fea03121c26b2837177d33 ALSA-2024:8037 Copyright 2024 AlmaLinux OS 0 1 Moderate

OpenIPMI security update

The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring. Security Fix(es): * openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default OpenIPMI-2.0.32-5.el9_4.s390x.rpm 2b794b536cf479dc4ece61a17443e2c034ce728b6c1767503df4c54761425c2e OpenIPMI-libs-2.0.32-5.el9_4.s390x.rpm b39b0e3e83611e6b4d47e34fc3e4adc23242b1fb037218c6ef415f5097a10043 OpenIPMI-lanserv-2.0.32-5.el9_4.s390x.rpm c4df55e7ce81369948ae6719299ad7cd62bdff1fd0e0206c5b950aa1d3c196ce ALSA-2024:8039 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default podman-plugins-4.9.4-13.el9_4.s390x.rpm 7e770b9ae82b969adedd0421dbc2539a80a01e1251209dbf6665ebcc91f0a974 podman-docker-4.9.4-13.el9_4.noarch.rpm 8e99dfe6481b7e84d3a8caf5f2458c7f6851abb4570575d78c4014b823ed0dad podman-remote-4.9.4-13.el9_4.s390x.rpm d4061b04cb8e4368163749fecc26f4a84054a9790d2a7d551427099b2392c66f podman-4.9.4-13.el9_4.s390x.rpm d541b6870031f9bd70ec874385be20c060bbf70c7d9e006ee13a263444b7a0dd podman-tests-4.9.4-13.el9_4.s390x.rpm df538143b5ec76a22b0758d87cbaf547cbce5b04d89b96e9208bd41feccaae49 ALSA-2024:8110 Copyright 2024 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-6.el9_4.s390x.rpm ba787fc67eb3c5024799cdc36db907c78bb95371ab1e7c80a6719fae6e93aead ALSA-2024:8111 Copyright 2024 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default skopeo-1.14.5-2.el9_4.s390x.rpm 38068598312b01d9dc316035ed250864414cd6107f72414e60b851701013409f skopeo-tests-1.14.5-2.el9_4.s390x.rpm d1d01bdc10e9ca1f8f563a652fd41bffab5a11b234da156b0b46cd1346a1f1a7 ALSA-2024:8112 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-tests-1.33.9-1.el9_4.s390x.rpm 1c206ed116a0b25cc4d5d04cba370dd147faafaf9ea75680ba225e34b8f493bb buildah-1.33.9-1.el9_4.s390x.rpm 5f3f4e7c7ea7c575d8030c06354d91caa96bdeca055db0c299de2dd87c3151bb ALSA-2024:8117 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default java-1.8.0-openjdk-src-1.8.0.432.b06-2.el9.s390x.rpm 2cd967032b75c6ee3c9f988377566dd0d3feb7a8be4b16983bf14dc9197196ba java-1.8.0-openjdk-javadoc-zip-1.8.0.432.b06-2.el9.noarch.rpm 4ddf0bcc6626495dce4e4d805a971106c42927125ead702018b3e1e31558268b java-1.8.0-openjdk-devel-1.8.0.432.b06-2.el9.s390x.rpm 53b61662168eea9b5275af70ab914e4043f436bef07a6e1aa52884532d691c81 java-1.8.0-openjdk-headless-1.8.0.432.b06-2.el9.s390x.rpm 6155a6a477d1391468e6c635c20276639e8740894be3ae1af2f83552e8014ca4 java-1.8.0-openjdk-1.8.0.432.b06-2.el9.s390x.rpm 86113aaf08dea4ea0b2e34fee2f9ba1c63362fd38cec28d5634fe8b31cc33902 java-1.8.0-openjdk-demo-1.8.0.432.b06-2.el9.s390x.rpm 8d333b23f2baaa0124a8d6bb7c3be5315c48861f24eaeea55b0be138d721f975 java-1.8.0-openjdk-javadoc-1.8.0.432.b06-2.el9.noarch.rpm bb77d29b8740cded757516caecc65e5a1ad349e1368fab4a402f1135d5e5be63 ALSA-2024:8121 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default java-11-openjdk-static-libs-11.0.25.0.9-2.el9.s390x.rpm 0c57680895616aad182eaeeb16d454683df75f83cf2972b156619b8a8f3745a0 java-11-openjdk-devel-11.0.25.0.9-2.el9.s390x.rpm 1c6daec1237ea29e496f5783f505ff103623c224344f4de319e0a6405c843fd0 java-11-openjdk-11.0.25.0.9-2.el9.s390x.rpm 1daf76d869fa41951f179d7b262a39ef93bae0931b8a377309c96113b6ea3d30 java-11-openjdk-javadoc-11.0.25.0.9-2.el9.s390x.rpm 3fceb0605db9592e38fda23d8a2f7b85af72dad1dbd311ce9b1ef88a10e1fa07 java-11-openjdk-src-11.0.25.0.9-2.el9.s390x.rpm 6440e681454e98dc04027d5243df26367c8a93f0f3921dd30c0dbe2e478e0272 java-11-openjdk-demo-11.0.25.0.9-2.el9.s390x.rpm 8920c94d4ba942fb970e93c3f923d35e22100a85fd896763424c93af472269fe java-11-openjdk-headless-11.0.25.0.9-2.el9.s390x.rpm b38549a9973d5fae2ab8e9a0021e877d1ab5c3ae3775bc318a957bd676f518ba java-11-openjdk-jmods-11.0.25.0.9-2.el9.s390x.rpm bb42f0363fe1db4efa0e711f8c13d4fd3cc2cc154a5600b0717dd0af908253e5 java-11-openjdk-javadoc-zip-11.0.25.0.9-2.el9.s390x.rpm f0b7913403308d27531534a22e43f4ee0822e01f2293940288608c753333d80c ALSA-2024:8124 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default java-17-openjdk-demo-17.0.13.0.11-3.el9.alma.1.s390x.rpm 186d99d3999c4e1617a58293ace8e139d47405c5890a97f42ed3d596b75e7125 java-17-openjdk-devel-17.0.13.0.11-3.el9.alma.1.s390x.rpm 1abac7170cae2688d845a0ac85b6ab1230efd15875a454af82570eaaa60f4eec java-17-openjdk-src-17.0.13.0.11-3.el9.alma.1.s390x.rpm 29ed865469620fdd5707ee8217310ce41feeb6d3745434e53148cf24ca6b3043 java-17-openjdk-jmods-17.0.13.0.11-3.el9.alma.1.s390x.rpm 7329d32342bc375ae03471433bf2fd954e185935af1221943d7127f95e9ae74a java-17-openjdk-javadoc-zip-17.0.13.0.11-3.el9.alma.1.s390x.rpm 96a95ca3944de44940030acab8bd578854f8448d79f4eb9fe0e99981d6505b8b java-17-openjdk-17.0.13.0.11-3.el9.alma.1.s390x.rpm aeb03c3b139fd0e4cbeaf883bf61c93808617f1f800de47c9fcbe4e5fdc93ab6 java-17-openjdk-static-libs-17.0.13.0.11-3.el9.alma.1.s390x.rpm cc8ee1af442fe0686c381f5ef758008d6ef0531cc78208599a57bf18c287cdf4 java-17-openjdk-javadoc-17.0.13.0.11-3.el9.alma.1.s390x.rpm e193ebbcc7a2a3247aa7ef7ad991a620d78a5dd27cbf91b01bedf8b7d245a5db java-17-openjdk-headless-17.0.13.0.11-3.el9.alma.1.s390x.rpm f3448e13e0a19055ab6e37f82148216a824c9ba5dde4744e56e19bb8e5747f23 ALSA-2024:8127 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 runtime environment. Security Fix(es): * giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default java-21-openjdk-headless-21.0.5.0.10-3.el9.alma.1.s390x.rpm 18e5839e8c7b363587e823ca4b8cebf3357ed15c8f215352a7a5e5a5ac2a2775 java-21-openjdk-src-21.0.5.0.10-3.el9.alma.1.s390x.rpm 33da6883bdb83f23cf2bae43db160dfa2a356405551669620c672bab77df1b7b java-21-openjdk-21.0.5.0.10-3.el9.alma.1.s390x.rpm 3bc155937f06a3b4e2e91c9ee1f652ea112fa413f148bbb222128773b865a465 java-21-openjdk-javadoc-21.0.5.0.10-3.el9.alma.1.s390x.rpm 57245e221e5309559689bf6301e2d9ff25a519eb05d46814be034578823f308c java-21-openjdk-static-libs-21.0.5.0.10-3.el9.alma.1.s390x.rpm cc3d789ebb959d4bb06d562a8090b43f1c6be41ae515571da52b87279f216988 java-21-openjdk-jmods-21.0.5.0.10-3.el9.alma.1.s390x.rpm d3431925ca51913fbd91d2bad2951940ef696521635e47a15b9b02b8e33c920d java-21-openjdk-demo-21.0.5.0.10-3.el9.alma.1.s390x.rpm ef1c7cc613453c6364d41fb3552817181445cbed7fb1cd2a8e3ca22278777f64 java-21-openjdk-javadoc-zip-21.0.5.0.10-3.el9.alma.1.s390x.rpm f083bf3902082f0d3be67e59d8a0a8729b4fb82470c6eaa2d0389e9be620f17f java-21-openjdk-devel-21.0.5.0.10-3.el9.alma.1.s390x.rpm f79bc133fe3e89007abe4ddfc2f628af680579df3d7a7558d9d89366963e5c90 ALSA-2024:8162 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746) * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403) * kernel: Revert &#34;net/mlx5: Block entering switchdev mode with ns inconsistency&#34; (CVE-2023-52658) * kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989) * kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385) * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889) * kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978) * kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556) * kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483) * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502) * kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959) * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079) * kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272) * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-devel-matched-5.14.0-427.40.1.el9_4.s390x.rpm 29dd1a54eb711d5b42bbcd1100d9efd00b2680edd7499c19fa60bede9cb62d6b kernel-zfcpdump-devel-matched-5.14.0-427.40.1.el9_4.s390x.rpm 30737576701b839f7ceddb31496d55886957b9a80b070cb1b53516c6b2fac9e3 kernel-headers-5.14.0-427.40.1.el9_4.s390x.rpm 42ac7baa4551f0500add7999c4c8c507eedff48c31f5850b4d6982531b11064f perf-5.14.0-427.40.1.el9_4.s390x.rpm 5b67d72000719813b9162fa263061ecf3c9a4954e576adfa9ada7d985092d0e5 kernel-debug-devel-5.14.0-427.40.1.el9_4.s390x.rpm 6476153c054e76650daf471fca10728f7a6872cc272af1dba5b3b33df1643ced kernel-devel-5.14.0-427.40.1.el9_4.s390x.rpm 69e5d34d1567f9afa9bb911fb3a9e2f776201520a11ea41bde6f518eeb115649 rtla-5.14.0-427.40.1.el9_4.s390x.rpm 6f60fa811a20a4c3c433c70b3b32d4c233f8eb003de6fc1dc046ff5db7464300 kernel-doc-5.14.0-427.40.1.el9_4.noarch.rpm 86622373d7e6b6e7a3a3c609bc6a724fcd1620c90ff30b454cb9163d9040524b kernel-debug-devel-matched-5.14.0-427.40.1.el9_4.s390x.rpm c3d983442b578a45c2b782efb80d9f7921e1b44c80a7df27468855087f25723b kernel-zfcpdump-devel-5.14.0-427.40.1.el9_4.s390x.rpm d89c98a7cdce51b5f287fc4472c0daa299703e6b350522e0d6fc70bb422f798f rv-5.14.0-427.40.1.el9_4.s390x.rpm df4fe0e163df8b9139d4740736d14670ba7406beaf04248c056f25cfe8a1020f ALSA-2024:8180 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789) * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780) * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779) * webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782) * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866) * webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default webkit2gtk3-jsc-devel-2.46.1-2.el9_4.s390x.rpm 64ce1c297a162a634e390f2db40e0f131b720db0d8276636646bc271c1d4c09b webkit2gtk3-devel-2.46.1-2.el9_4.s390x.rpm 9a1591c999175fc803a48347f6809f1c7ad601bb61b128ba4ebc60904ffebe92 webkit2gtk3-jsc-2.46.1-2.el9_4.s390x.rpm a09861b87d50758ccae6560069aeacd46c3e7368a0be58b88029c78ec6683e78 webkit2gtk3-2.46.1-2.el9_4.s390x.rpm d650e2395c2caa81bab9bc6ca8825dea89b8601674cbb727ab9e394d6600d42b ALSA-2024:8374 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-libs-3.11.7-1.el9_4.6.s390x.rpm 67ca4c4ba2d2087c0ec3b7fa71c2898eacc1c570da613c0bd403645a5b05f833 python3.11-tkinter-3.11.7-1.el9_4.6.s390x.rpm 8926f3a3fe03f4f5430369779e1a30aa7f93724a3fd5f85d40f8a1179ecac450 python3.11-devel-3.11.7-1.el9_4.6.s390x.rpm 8ba23053ad069fb92cab68e5b0588668db7e8dde34c373961385553b1cb2d2f8 python3.11-3.11.7-1.el9_4.6.s390x.rpm e83aa9a4913e05ef4adb87a118536ee73f2bbdccc4ef24ad80bdacd13f619b88 ALSA-2024:8446 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python-unversioned-command-3.9.18-3.el9_4.6.noarch.rpm 4322cbb263e9dba528a82fdb49690dd6b957241192fe4601f57a5fa361653ff2 python3-devel-3.9.18-3.el9_4.6.s390x.rpm 51256b344004ebea9effc9384a842a6c884c5186614fa8adf07e120a5442d79c python3-tkinter-3.9.18-3.el9_4.6.s390x.rpm fea1532c74b20260a5748b7d052abc8bd899326b9e1710f57eb8f37c32f6049d ALSA-2024:8447 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.12-libs-3.12.1-4.el9_4.4.s390x.rpm 1e35bd9c9d75d967951726c7349f50d3295bc2b9035bc5fcba743b54d3aa6837 python3.12-tkinter-3.12.1-4.el9_4.4.s390x.rpm 4cb62cf1df92bd77ea35083f505d540ac50ad5298b596c6d4add7c76f52f1b0b python3.12-3.12.1-4.el9_4.4.s390x.rpm d97fa980ada7c7b9419bd0d95b1fe7cb0c18a140fd34a7b812e13ecb3ad4e96d python3.12-devel-3.12.1-4.el9_4.4.s390x.rpm f1f232675f5bc67319b590a33e6b33ed4537569dbc836b867fe6e5b592a3a692 ALSA-2024:8563 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-1.33.10-1.el9_4.s390x.rpm a12a63923f5741a104017eea6c596a788514afa0ce018de98348a3850dfdb57b buildah-tests-1.33.10-1.el9_4.s390x.rpm b77c4c0187a9a8992df1ae96295962ee2c95471462b1d503f2d175fbc71f5db5 ALSA-2024:8617 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201) * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640) * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826) * kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923) * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961) * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935) * kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383) * kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244) * kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472) * kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504) * kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904) * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931) * kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960) * kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972) * kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977) * kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995) * kernel: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super() (CVE-2024-40998) * kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005) * kernel: xfs: don&#39;t walk off the end of a directory data block (CVE-2024-41013) * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014) * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854) * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default kernel-zfcpdump-devel-5.14.0-427.42.1.el9_4.s390x.rpm 43023e6e0d645976dffa463e16706f44c7a396b60ede5d735460f200147016cc kernel-doc-5.14.0-427.42.1.el9_4.noarch.rpm 72bddd3c3e8ac424dd6e46fd025d65806a823f1136fb50a94065c460bec46bbc kernel-zfcpdump-devel-matched-5.14.0-427.42.1.el9_4.s390x.rpm 73619dde6829bc9f7e2ce37c5a87ea05d821e8d23d6f29eb40ad26555ab7e8a6 perf-5.14.0-427.42.1.el9_4.s390x.rpm 91e83408596dd9d1638f3ba22f08ad62c5357a303d6f10b8c67ab484e815603e kernel-devel-matched-5.14.0-427.42.1.el9_4.s390x.rpm 9a83bbe36fe942f6e4bab3ee6ec03cfb8c36b2b83abfa8b90f2cc3fed0074b0f kernel-headers-5.14.0-427.42.1.el9_4.s390x.rpm a7a24816b3fdbae8990cfa4b12e5075621058f7b1d6a54f42bc767ccce0aee78 kernel-devel-5.14.0-427.42.1.el9_4.s390x.rpm c1fc9a1053e05bb7bba01e7ed4ea3a11a9555dcd76a6b5fd75ae35c6e026201d kernel-debug-devel-matched-5.14.0-427.42.1.el9_4.s390x.rpm c2a5c3e044c4db38497d5e7558f9c95711ddd3c843177ca066d944f7da088bf5 kernel-debug-devel-5.14.0-427.42.1.el9_4.s390x.rpm e31819997e06062193834b1ae86f7640ae184b878b9fa5933390bc795f2e3b9f rtla-5.14.0-427.42.1.el9_4.s390x.rpm f2435bb3b39aabf778feb91d2560540ad34413a71a91aee40f0a392a2488bda9 rv-5.14.0-427.42.1.el9_4.s390x.rpm f5be5ff4281880ce244b1ee747eeaa157d19b2c331a1954239be244c8bc27c21 ALSA-2024:8678 Copyright 2024 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355) * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default grafana-selinux-9.2.10-19.el9_4.s390x.rpm 7bf9a2a22ec68639023df04aecf83dd02943f67cb5a3cc8960a4ac153345fd5e grafana-9.2.10-19.el9_4.s390x.rpm 8585334261b83d1509ddb4f54e4fcf68062ea0e33ddb14b9c8696c7ebcdf9c48 ALSA-2024:8680 Copyright 2024 AlmaLinux OS 0 1 Low

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mod_http2-2.0.26-2.el9_4.1.s390x.rpm 6e7aa13aa204be5b2ffd2adf926ee99c2e499a706c57f1410992e694d1cc8611 ALSA-2024:8726 Copyright 2024 AlmaLinux OS 0 1 Moderate

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464) * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461) * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458) * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459) * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467) * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465) * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466) * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463) * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462) * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-128.4.0-1.el9_4.s390x.rpm 573630fe5f8009d5c5e23dc992987b8db7969a610f254080d2bd54dfe17f4b74 firefox-x11-128.4.0-1.el9_4.s390x.rpm b146cf8181468b9446f4fba3f3fb392b91b3702e6353174d4473af130aa88792 ALSA-2024:8793 Copyright 2024 AlmaLinux OS 0 1 Moderate

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464) * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461) * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458) * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459) * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467) * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465) * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466) * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463) * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462) * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-128.4.0-1.el9_4.alma.1.s390x.rpm 90399a724b3e18b22e3c10b79fff25b791e3e1ec7f1057ec79953a29b547e4d5 ALSA-2024:8800 Copyright 2024 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default openexr-libs-3.1.1-2.el9_4.1.s390x.rpm 090cd942b418304dfe59c4613a5c71c33a4e16fe1b1fa6ceca09fea9e8c5bc24 openexr-3.1.1-2.el9_4.1.s390x.rpm 56b3bcc5a6bd6a3b75106de617d40be5c9644acc2cc1c603fef2d893ffd4689b ALSA-2024:8914 Copyright 2024 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: NULL pointer dereference in tif_dirinfo.c (CVE-2024-7006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libtiff-devel-4.4.0-12.el9_4.1.s390x.rpm fa7dabf020a6c5607897fc7f53d1a1ed2224cf4bb6f9dfbeb0fd6ad6d1e39a81 libtiff-4.4.0-12.el9_4.1.s390x.rpm fc78119f0079c6af3bcefab86f3cc232d52d914c2faf8703a874944aca0339b2 ALSA-2024:8935 Copyright 2024 AlmaLinux OS 0 1 Moderate

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: Possible denial of service in X.509 name checks (CVE-2024-6119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default edk2-aarch64-20231122-6.el9_4.4.noarch.rpm 6ead2d3429f2753faeac142fafcbdb556ed7e654686566cc8c3c51d6d0443a73 edk2-ovmf-20231122-6.el9_4.4.noarch.rpm f240e4196ec775d8927b7347b3954c802adec030b855c4acc8bda3228f24530f ALSA-2024:9051 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default podman-plugins-4.9.4-16.el9_4.s390x.rpm 34bd3b7fa0aad185028b5b8f8588a570fce893c5f3be8863684220d58de681b6 podman-tests-4.9.4-16.el9_4.s390x.rpm 873ad89948902fb2bdd4feda05895028d4377e3a421bbb3af78bbef3f8ddeac6 podman-4.9.4-16.el9_4.s390x.rpm ab3f797451eec4cb8722badc0c7ed19d139cf71381163d5127dbab0aaf2aa08d podman-remote-4.9.4-16.el9_4.s390x.rpm b382c675c7f3f49bcfc584b31721624147e7bc14e3320d8dd6151ab078828a8a podman-docker-4.9.4-16.el9_4.noarch.rpm cd443bee4356a06d153ed758b873dc9841cf680477297951706ae1557bd1a9bd ALSA-2024:9089 Copyright 2024 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default containernetworking-plugins-1.5.1-2.el9.s390x.rpm 86c7d7cdb15f05680cb1a719eed92defc3f50b3e6d4b4a006cfa8935293c7664 ALSA-2024:9093 Copyright 2024 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default xorg-x11-server-Xwayland-23.2.7-1.el9.s390x.rpm 9a027fc09be6ddbaeb8fba16abda572ab536edb173734548823e746202534efa ALSA-2024:9097 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * containers/image: digest type does not guarantee valid type (CVE-2024-3727) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-tests-1.37.2-1.el9.s390x.rpm 436f25445c648134d1c424ebec471a41fabacc57ccd63f1efb2c0325c22c6ddc buildah-1.37.2-1.el9.s390x.rpm f03acf2ed4cd604800717fb12d479759a704948eb1c11eda5d59ded55b2ef2d9 ALSA-2024:9098 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * containers/image: digest type does not guarantee valid type (CVE-2024-3727) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default skopeo-tests-1.16.1-1.el9.s390x.rpm 07fe07efbf54bf185b6424df987512d182655e8a3602e139873d273dbc89dc81 skopeo-1.16.1-1.el9.s390x.rpm 403e6ae5839c7f5afab0fbe5cbe9fb66a3afb8246d4e3b649393fa2ce20dbfdf ALSA-2024:9114 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnome-shell and gnome-shell-extensions security update

GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts. Security Fix(es): * gnome-shell: code execution in portal helper (CVE-2024-36472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gnome-shell-extension-systemMonitor-40.7-19.el9.noarch.rpm 038a6ca646514a4289b90d50b3a382c98008e1927ec9c090fc55919696320510 gnome-shell-extension-screenshot-window-sizer-40.7-19.el9.noarch.rpm 23547f205b09d7c05816aacab9322d9a421b3eb025dc903d1af598efcb71ac2d gnome-shell-extension-common-40.7-19.el9.noarch.rpm 26dd8f424121a86af4520e5277f915e64aad4e6c6f58195c5337a27ef31d275f gnome-shell-extension-workspace-indicator-40.7-19.el9.noarch.rpm 300fd231adbcc889d30dc539482f4d4e887ca520409f40a83d47aa6b82d19629 gnome-shell-extension-updates-dialog-40.7-19.el9.noarch.rpm 308fdc076d131ac0dae9b0bbdb55a609e5a3f6bbd95a5c4cc7ca9d0c224ccb1e gnome-shell-extension-gesture-inhibitor-40.7-19.el9.noarch.rpm 3891c630c048f1adac55a5c3f77ac09729f4568659d60e3330719e5e76d6af4b gnome-shell-extension-classification-banner-40.7-19.el9.noarch.rpm 392e7e70ee0b06c5121e2f18a459bd21983e75ebaf8879445db8417edde9b4a5 gnome-shell-extension-desktop-icons-40.7-19.el9.noarch.rpm 4d9118b31b3d2fd09310c6083bb5cf261bd339b18f18d555348dee43ed7d19bd gnome-shell-extension-heads-up-display-40.7-19.el9.noarch.rpm 5b6f86ebd8bd845d3b5229c8800c073ae4779b9f91afed738ce737e2247c2c9f gnome-shell-extension-user-theme-40.7-19.el9.noarch.rpm 5f882209169ce32ad0146d8b231765dac30c51ad335ca40e5223b03756b71816 gnome-shell-extension-custom-menu-40.7-19.el9.noarch.rpm 6c51bbaa003c1628786eb06c957dfc2802f084c2cf22e7a78b1e555dd084588e gnome-shell-extension-dash-to-dock-40.7-19.el9.noarch.rpm 6e8601dd9b24a6b1758ac1e7e1322974e0c0de8946a7654beff4a904f6945c37 gnome-shell-extension-window-list-40.7-19.el9.noarch.rpm 750813fb7a7f4bc564a3f6cb98e7c0d870a79fc4bc9270444b92aa13140ddce3 gnome-shell-extension-panel-favorites-40.7-19.el9.noarch.rpm 81f3487bda6ef31b3ad8c34ca92cc3c3648f5273ed76961b185b43500ff7042b gnome-shell-extension-windowsNavigator-40.7-19.el9.noarch.rpm 97af102fd81f14d1bb81ab45ede9c99d3e6cca06670604f6c65509179e2fe1e1 gnome-classic-session-40.7-19.el9.noarch.rpm 9d313e6f328eedadf34848606dc7382333b92de818fba895caf0fef0c6406cbe gnome-shell-extension-apps-menu-40.7-19.el9.noarch.rpm a956dc78a5d002213472f231f98e7f1ae75a55e90f37113de7b94272898f847c gnome-shell-extension-places-menu-40.7-19.el9.noarch.rpm abcdbbcb2236a7dcf558d56c4fb5d702d9f646c44d3e52a060b7041c297d67bc gnome-shell-extension-top-icons-40.7-19.el9.noarch.rpm c5160b0e8b8becda49a40b70dc09f8408ea2c5f03276d68ad7785355f9cc0806 gnome-shell-40.10-21.el9.s390x.rpm c93246ebec55f1e8163863911564325933bc6e1dcf3cf1a51f465a9ec5f57175 gnome-shell-extension-launch-new-instance-40.7-19.el9.noarch.rpm d13c7f4747c58c18c9c94d68de9fbd4ca25057ed656832afeb73eaf58a8fda9e gnome-shell-extension-drive-menu-40.7-19.el9.noarch.rpm d6675c78a285a915f4fc8d4b340d07a49c35f77681d0964297bc08c6ae1d909e gnome-shell-extension-native-window-placement-40.7-19.el9.noarch.rpm dce4645603853b8c2f33d7a34c7d4e508c4a835dd0e240632e32e81c7555b9d1 gnome-shell-extension-dash-to-panel-40.7-19.el9.noarch.rpm e5049e349f79964c6a93942e2425e77423ad8382689de047bea09986b155d00d gnome-shell-extension-auto-move-windows-40.7-19.el9.noarch.rpm fdacd41b4fed9e3551df97aff1142f8a2cb2f94fc0d6e2eb153a393fca332377 ALSA-2024:9115 Copyright 2024 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default grafana-10.2.6-4.el9.s390x.rpm 3a0df0aeec9eb7c13cefaa6c518a1f5bbb2f16fe58c74359eafcdae80f740260 grafana-selinux-10.2.6-4.el9.s390x.rpm a3993476d7a2d1aca83bb0657ae730f0cc6f94542f42aed291057b91496170c6 ALSA-2024:9122 Copyright 2024 AlmaLinux OS 0 1 Moderate

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default xorg-x11-server-Xnest-1.20.11-26.el9.s390x.rpm 163650150edb7b2a900c21d7499082679e80326ee94de8b5c9a57738a48507ce xorg-x11-server-Xephyr-1.20.11-26.el9.s390x.rpm 2114e31234243b36d603324411ec6295093017604a0565a7207890c1c823fbe4 xorg-x11-server-Xdmx-1.20.11-26.el9.s390x.rpm 4ff758c65e5291a4d270d278e7f0339fe3d05756b0319c66f0f85edd3839b97c xorg-x11-server-common-1.20.11-26.el9.s390x.rpm ca7c764e950521145bc3f07e75fc3a2854ed4dbec3ff7dd842812b5eca3d353a xorg-x11-server-Xvfb-1.20.11-26.el9.s390x.rpm da31cc5469301d9a7ef34d68f49428cbaed9c35330c562a0b98980ea234ee330 xorg-x11-server-Xorg-1.20.11-26.el9.s390x.rpm ef2340369dd1bb7b2560014882ba0bf96e5d6ec5684b773657f66d20e5549ee6 ALSA-2024:9128 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvirt security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * libvirt: Crash of virtinterfaced via virConnectListInterfaces() (CVE-2024-8235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libvirt-daemon-driver-storage-core-10.5.0-7.el9_5.alma.1.s390x.rpm 08cd3e525891731e0d9ed62344c0f7aa1390e641ec11fb3433277f31caf0f4c2 libvirt-daemon-driver-interface-10.5.0-7.el9_5.alma.1.s390x.rpm 0c9280adcf1046a38f338f2c4028fd01723f67e28df84d9a631b33238cfc8fbe libvirt-daemon-driver-storage-iscsi-10.5.0-7.el9_5.alma.1.s390x.rpm 0ffba1f12af97d4cf780fc6e32e08591b0d0eb00d90e6e82170e62e757e07685 libvirt-daemon-log-10.5.0-7.el9_5.alma.1.s390x.rpm 157395cf5efb7966ec77d77e56ad7ade804e1834893ecc44e67d96efba9d586e libvirt-daemon-config-nwfilter-10.5.0-7.el9_5.alma.1.s390x.rpm 25dd8c85bf5706806f3b23714e4ad8a8631d4cf8af87a2d2feef9f047b5b75eb libvirt-daemon-driver-qemu-10.5.0-7.el9_5.alma.1.s390x.rpm 27ba42fa0c1d650de8af06ccfb768eb6081d7fa2751861a133dcf975f81328d6 libvirt-daemon-lock-10.5.0-7.el9_5.alma.1.s390x.rpm 2c66ae0571302ea42763d0a8ffeb36ca09d3bf043fa4f9d526e57e0813743c88 libvirt-daemon-driver-storage-mpath-10.5.0-7.el9_5.alma.1.s390x.rpm 2d8b9af53115526dd2e9f6081a99c72e55b9a069271be2a2281b90229e73b071 libvirt-nss-10.5.0-7.el9_5.alma.1.s390x.rpm 2d9c49133bfaa1a4eecced9e52f7ddde5a3f9a5397991b4b80ec1d3a0e345cd3 libvirt-daemon-driver-storage-logical-10.5.0-7.el9_5.alma.1.s390x.rpm 32ba4d8a0d82d6ce0738e99b4ffb0823284dd0415a7abdfed0d90ea6d3c0134f libvirt-daemon-config-network-10.5.0-7.el9_5.alma.1.s390x.rpm 429ab07f350a5c04bd0fd70f001db09cc8dce25e7761abf695b02e442cdbaf62 libvirt-daemon-driver-network-10.5.0-7.el9_5.alma.1.s390x.rpm 55dd80e5a3f2a17c61ceecc4075cc5fcbd5823c8fa6874ac8efc73b4053fa08e libvirt-daemon-plugin-lockd-10.5.0-7.el9_5.alma.1.s390x.rpm 591f53740c4fcc1ea2cb7adb1cf24327e481baea9d86825a2bc4a94a87256c71 libvirt-daemon-common-10.5.0-7.el9_5.alma.1.s390x.rpm 5e3107c167d53616f1cf92c1d6d13750420230e332c57878b7ca4966f80d5ba6 libvirt-daemon-driver-nwfilter-10.5.0-7.el9_5.alma.1.s390x.rpm 5f3f1186125a8ff1f97903b57ba780c8543580543c348c62d6f7de3e2c654c28 libvirt-daemon-driver-nodedev-10.5.0-7.el9_5.alma.1.s390x.rpm 6635a8597bbb4bfa0c06ac06f83382c3f2d413d2546e2354058e2f223ae7db21 libvirt-client-10.5.0-7.el9_5.alma.1.s390x.rpm 6edf33eff44a9ea4e019c968015b6f72ac64fce3064f55fa3caffd190091dc79 libvirt-daemon-kvm-10.5.0-7.el9_5.alma.1.s390x.rpm 826d400151cab96d691fe43199f95d1578153326c5abb31b731b7a06e4cf3f43 libvirt-client-qemu-10.5.0-7.el9_5.alma.1.s390x.rpm 842c24a207c4981a65cf9fa94dc391df667525be946a470b7ed8785a1de0c753 libvirt-libs-10.5.0-7.el9_5.alma.1.s390x.rpm 87a61d8e7ad3819762f98aa1078ee2f96ee52090ef96a73caa47cb1e07a7f615 libvirt-daemon-driver-storage-rbd-10.5.0-7.el9_5.alma.1.s390x.rpm 8fa144fbb2b7326875be359db775ddf50feb8a25deb7785df29b45c71a9eb7a9 libvirt-10.5.0-7.el9_5.alma.1.s390x.rpm 926d1271711489ae31c09ab3c650a53b8ea5d36483fafce4ba8a29cd1201f2d4 libvirt-daemon-proxy-10.5.0-7.el9_5.alma.1.s390x.rpm 9aae553ba0df62b5a16bfcd0c3821df2ca7d906e3c8cbff1bd0411343e6bffcb libvirt-daemon-driver-storage-10.5.0-7.el9_5.alma.1.s390x.rpm a601206fa84dc6e09e5088b3fb26b20fe0a949fc45116b32f55bfb18b8d54f3a libvirt-daemon-driver-secret-10.5.0-7.el9_5.alma.1.s390x.rpm c8c33a89412e4f111dad086edaf49f53d055dc7b714d3290eb555f87aea2628f libvirt-ssh-proxy-10.5.0-7.el9_5.alma.1.s390x.rpm cf30000c368a5fd34343f6ff9f7b652602ddd3036ef1462a8898089dd8e3ae30 libvirt-daemon-10.5.0-7.el9_5.alma.1.s390x.rpm e3cba3e4a9c14085e15b2a0115a8fc11b0c4811cc6cbae62bfecbcd5a9ac23a0 libvirt-daemon-driver-storage-disk-10.5.0-7.el9_5.alma.1.s390x.rpm e7e3a56ecc6cc7479d21ab3548565814b54740b891cec50231b2397cb7402471 libvirt-daemon-driver-storage-scsi-10.5.0-7.el9_5.alma.1.s390x.rpm f06086b2709ae89d41577824abc7dcb0693a43002d21dd1bcd262295c532126f ALSA-2024:9135 Copyright 2024 AlmaLinux OS 0 1 Moderate

toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * golang: net/[http:](http:) golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default toolbox-0.0.99.5-5.el9.s390x.rpm 04c8b37f9c1d69ce08c1f2885dccf33cc8b912077533b44a50582de9649f0f28 toolbox-tests-0.0.99.5-5.el9.s390x.rpm 1c20fd10cd6d96e44139018861f5a10539c0d56c7296c7ea798a8501578318cd ALSA-2024:9136 Copyright 2024 AlmaLinux OS 0 1 Moderate

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow (CVE-2024-26327) * QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446) * QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default qemu-kvm-audio-pa-9.0.0-10.el9_5.s390x.rpm 346afaddb71b88ad73b47956d1d8c7a4713130c164f60aefb8e9ce8f0c7f95f8 qemu-kvm-block-curl-9.0.0-10.el9_5.s390x.rpm 356f898df9fd0ea27f33dda63c1c4161ad7153edf863b03920fa0aef974ea496 qemu-kvm-core-9.0.0-10.el9_5.s390x.rpm 406330240a9d12342fa260cac302fcc1d15a29ac9edd3c9b9a8d5f44ab444790 qemu-kvm-device-display-virtio-gpu-9.0.0-10.el9_5.s390x.rpm 42c3ca6724d753fb65e1ecf9a6a29237d922575956e35abf452ed46f15326fe9 qemu-kvm-block-blkio-9.0.0-10.el9_5.s390x.rpm 58d1159b25803c589336b0189b867171636431acf289fad79c39cb2cea820966 qemu-img-9.0.0-10.el9_5.s390x.rpm 63ac6663562a534bdde7a0665ebe818270825a0ad8901fdf3bfc2afa77f20a80 qemu-guest-agent-9.0.0-10.el9_5.s390x.rpm 63f7ed3b65d863caa55f86b6f559be7c89fcebad2c6692e1135e80b0fe9ffbb9 qemu-kvm-9.0.0-10.el9_5.s390x.rpm 65e985d0dafcaa80742e1fa157ac2f608bfde482677ba2d2d88771277bc61cad qemu-kvm-block-rbd-9.0.0-10.el9_5.s390x.rpm 775355bc683512d795d0de7823a9592b53a0819d38864c464da121b177c58253 qemu-kvm-tools-9.0.0-10.el9_5.s390x.rpm 9b9cfc003bff8abf6e6ac2f33faca361ed39509784327c6c3e2b3d9e14e6bf49 qemu-kvm-device-usb-host-9.0.0-10.el9_5.s390x.rpm 9dda50bdf1f7c0b5d08666fbbed6f3c423d19a88ca72f6d439f40e3b857f34c1 qemu-pr-helper-9.0.0-10.el9_5.s390x.rpm a6764ca2713c55084edcf58560c8eeb6d727a8f586229813b57cee0f9fda02c8 qemu-kvm-device-display-virtio-gpu-ccw-9.0.0-10.el9_5.s390x.rpm a88aba92433d2e0c16fb044ab6b690b739d8c4746443cc76709bea0da93bd58d qemu-kvm-docs-9.0.0-10.el9_5.s390x.rpm d5170b11d92a58accc16fac3b31ccbeec244beab4b152790014c00c3df7852bb qemu-kvm-common-9.0.0-10.el9_5.s390x.rpm f463faf799924b2d7ff1c4a8865909b4a1d723317d392e7449fc1805d7d6847a ALSA-2024:9144 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkit: visiting a malicious website may lead to address bar spoofing (CVE-2023-42843) * webkit: heap use-after-free may lead to arbitrary code execution (CVE-2023-42950) * webkit: processing malicious web content may lead to a denial of service (CVE-2023-42956) * chromium-browser: Use after free in ANGLE (CVE-2024-4558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default webkit2gtk3-jsc-2.44.3-2.el9.s390x.rpm 5891a6a24ad76557b894b6b3418d5f7a6e1a0ccc968f79ea4c937f407bfefd76 webkit2gtk3-2.44.3-2.el9.s390x.rpm ad6ea617ab4190b8a6b638ab2b529283e881aab745bbcbc13fd5bf9029d1ba9c webkit2gtk3-devel-2.44.3-2.el9.s390x.rpm b8d89b1743b0e4a7cc52b8db21fb2eb92943ada0b6cdc1cac7d6c4e66f97ad62 webkit2gtk3-jsc-devel-2.44.3-2.el9.s390x.rpm ef4ff01ad239c10ef7c83ede114780deb9168374386ec8a373203eff05b38220 ALSA-2024:9150 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-jinja2 security update

The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Security Fix(es): * jinja2: accepts keys containing non-attribute characters (CVE-2024-34064) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-jinja2-2.11.3-6.el9.noarch.rpm c2e94cdf42485c89ff688bf4214002f4935732183fbb072404e58cb8899c30c4 ALSA-2024:9158 Copyright 2024 AlmaLinux OS 0 1 Moderate

lldpd security update

LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices. Security Fix(es): * lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827) * lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612) * lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default lldpd-devel-1.0.18-4.el9.s390x.rpm 50c3b99c54e9594d89f6413361de3b3a37296b57d302409a0054806122536a8e lldpd-1.0.18-4.el9.s390x.rpm 5f4746c404763b7b5a076590bd8e7d98250e2cb7d1b31ddef29da1fb3504baf1 ALSA-2024:9167 Copyright 2024 AlmaLinux OS 0 1 Moderate

poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default poppler-qt5-21.01.0-21.el9.s390x.rpm 51af0d00423888d1ecd2f36cec671ec72d9bb38415ef832f37a502fb60db031f poppler-utils-21.01.0-21.el9.s390x.rpm c6356ad730641c4e6e809c373135ef88cc5c6e8c27a33ccd3318046f9fc16bfa poppler-21.01.0-21.el9.s390x.rpm deedef7a3841ee46598dc2094469c44c3129eb7caec4495f2f3b8fb732b4c76d poppler-glib-21.01.0-21.el9.s390x.rpm ee88f8eb959e469c146073240dc7d477337b8569b4f34526a8bee899fd2d1dba poppler-cpp-21.01.0-21.el9.s390x.rpm fc06bcf2a313589a1ae8ff93d78c7ca340a1f520deaec2596351a3c46d931496 ALSA-2024:9180 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_auth_openidc security update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies (CVE-2024-24814) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default mod_auth_openidc-2.4.10-1.el9.s390x.rpm 003822eec00ac733af1364601b9ff7d9397aa8fb0026c31f15ad2728d0b9fd40 ALSA-2024:9181 Copyright 2024 AlmaLinux OS 0 1 Moderate

jose security update

Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption (NBDE) in AlmaLinux. Security Fix(es): * jose: resource exhaustion (CVE-2024-28176) * jose: Denial of service due to uncontrolled CPU consumption (CVE-2023-50967) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default jose-14-1.el9.s390x.rpm 2624d16b26c256349c3b213d31b1391e945be0d437c947af8bd6a403a6938a4c libjose-14-1.el9.s390x.rpm 6185f276c825313355f9cf57fb0f3e1f927024ad64eb4102b1a66aa0dc00a7b1 ALSA-2024:9184 Copyright 2024 AlmaLinux OS 0 1 Moderate

gtk3 security update

The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3. Security Fix(es): * gtk3: gtk2: Library injection from CWD (CVE-2024-6655) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default gtk3-immodule-xim-3.24.31-5.el9.s390x.rpm 04aaef855936c697aa55d467eec99bce3090169ad44d38f98093167d897640c8 gtk-update-icon-cache-3.24.31-5.el9.s390x.rpm 3516580a90d0f0ce3183c0b230dc4423c9c81c56d70d92dbca11b4f62e2dcd23 gtk3-devel-3.24.31-5.el9.s390x.rpm 4df65ed4828c8fc9cb7e7f66ab598c50ef7dd004e7cc687f24b4b10f3e7c9ed6 gtk3-3.24.31-5.el9.s390x.rpm e0cde5d6331a0b61d22dba512dc660f648df516c70c9f568b157ffddfa08ceed ALSA-2024:9185 Copyright 2024 AlmaLinux OS 0 1 Moderate

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: possible denial of service (CVE-2023-7250,ESNET-SECADV-2023-0002) * iperf3: vulnerable to marvin attack if the authentication option is used (CVE-2024-26306) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default iperf3-3.9-13.el9.s390x.rpm 72c23ad94e9975b4aaed0371df13f5a520eb569238f3010cea540fde889bebee ALSA-2024:9187 Copyright 2024 AlmaLinux OS 0 1 Low

bcc security update

BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool. Security Fix(es): * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default bcc-0.30.0-6.el9.s390x.rpm c2c6c6ef1af2168390ee1d0d06658abde0cc98cd9ff53d40cde7f1d395521330 libbpf-tools-0.30.0-6.el9.s390x.rpm e3df4e35b29f03b09d73418ee7854c8824704564b205db19e4b607b120fd1390 python3-bcc-0.30.0-6.el9.noarch.rpm ea87f60b957329202b9687a56a8eaa09ae0ad1c01b6aa1a6f8c42dcad0eb6d62 bcc-tools-0.30.0-6.el9.s390x.rpm f5da41a634ff168abc84b5f5732e71a40414083738b72dd18a3290307491b334 ALSA-2024:9188 Copyright 2024 AlmaLinux OS 0 1 Low

bpftrace security update

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap Security Fix(es): * bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default bpftrace-0.21.1-1.el9.s390x.rpm 87f993ada4230e368b739cab9b3190546397325941d333e29aaf7f423f494a64 ALSA-2024:9190 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450) * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032) * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.12-libs-3.12.5-2.el9.s390x.rpm 4ea2782e54f4e84e4c01a0401505f21e9866c85bcef41d1c593e64814c828923 python3.12-tkinter-3.12.5-2.el9.s390x.rpm 88c2a615ddaa4d022f55244998d2d506a779a4604145ce5ff99f01e86ed47585 python3.12-devel-3.12.5-2.el9.s390x.rpm 8927167d79049375e8645e1f06e68a2bd2c7f09e4dd2a36c5f60119e398dd7c8 python3.12-3.12.5-2.el9.s390x.rpm ce5ee3423dfbf1ddaeacb6da57e10f7aae8df1b885c70877735b81b13f334f27 ALSA-2024:9192 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450) * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-tkinter-3.11.9-7.el9.s390x.rpm 0b88168cee0f3b1ce2d698ef969783df5207e23c6601bc902c43ebe01d51bea7 python3.11-devel-3.11.9-7.el9.s390x.rpm 85c55002bcbdf08da5587cc3660e7c90b06e50bc11ade87f59ec60e57a5eb92b python3.11-libs-3.11.9-7.el9.s390x.rpm 8e0acecc0e5501314d765715f1c55cd2ca43e55d6193dd326a7959e473ef9294 python3.11-3.11.9-7.el9.s390x.rpm fa1e98914af1b29af05e4dc3642644145ddef8e6b9d1061758ec803dc5e17e92 ALSA-2024:9193 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12-PyMySQL security update

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython. Security Fix(es): * python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.12-PyMySQL+rsa-1.1.0-3.el9.noarch.rpm 665de27ef3f4760443b3dea2bc9d92b783ae9d3e58aa7f7e915ff7bd024e1b71 python3.12-PyMySQL-1.1.0-3.el9.noarch.rpm ca24e6b68867f6338171b2ec1d569c507a998ffad99a5a9eef972f5e72376e83 ALSA-2024:9194 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-PyMySQL security update

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython. Security Fix(es): * python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-PyMySQL-1.0.2-2.el9.noarch.rpm 2cff937c79794b89d5a4f880c85da6a6d8fb285441e4f198435f73dee61714a5 python3.11-PyMySQL+rsa-1.0.2-2.el9.noarch.rpm 9e2948cd6000d9f0b106ef5a3da0e49117f62d629b5e72b80bcc01f1e3a827ca ALSA-2024:9195 Copyright 2024 AlmaLinux OS 0 1 Moderate

cyrus-imapd security update

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. Security Fix(es): * cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command (CVE-2024-34055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default cyrus-imapd-3.4.8-1.el9.s390x.rpm 7eac2d9a5b0fa8e5f830623605cca06393bb25c0f46f92654abbe7529a4717e5 cyrus-imapd-utils-3.4.8-1.el9.s390x.rpm 9ef0ad43e81252d8548a3b3d4bdec9519802fe30b80ce80fe30b16d6aa66b90a perl-Cyrus-3.4.8-1.el9.s390x.rpm a15cc779053293e839907ff2c9133cd1ab2dd515b77257f3888e2776f567b6a8 cyrus-imapd-libs-3.4.8-1.el9.s390x.rpm b9d0d96f3edfb9f8510cc76dbc4af1eb45f66d4dbde2e5248dfd4a3087e94d83 ALSA-2024:9200 Copyright 2024 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default runc-1.1.13-4.el9.s390x.rpm bc3839b84f189045fd693301669451138afada7effc70076eaee3be2166dbcfd ALSA-2024:9243 Copyright 2024 AlmaLinux OS 0 1 Moderate

postfix security update

The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS. Security Fix(es): * postfix: SMTP smuggling vulnerability (CVE-2023-51764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default postfix-perl-scripts-3.5.25-1.el9.s390x.rpm 36c887c41dc881ab738cceb086e14a04d69c3ee0e02ca1585a9e3ab8bb1a35ce postfix-pgsql-3.5.25-1.el9.s390x.rpm 3bf0e19a541e6136cf182c9d70716d36003744155f71d67bf86da26fbde4869c postfix-cdb-3.5.25-1.el9.s390x.rpm 585b847c3832ab4f8b5c93a7bc34f88be03db458179afae6e415098a30a61ada postfix-sqlite-3.5.25-1.el9.s390x.rpm 5d0b4ff2845b913f9e84c240e84a25564ebc25e4f964dff30ee6a835c1c87c89 postfix-lmdb-3.5.25-1.el9.s390x.rpm 62d3588229061e02b5a1a48f138af9992ed2cf70cc26c09a5b31eaca76e958fa postfix-ldap-3.5.25-1.el9.s390x.rpm 6f37bae29747eaef6e58451fa3b67e93c29bdadae4d181ea86a2b87f5502d851 postfix-pcre-3.5.25-1.el9.s390x.rpm b60f12d19c4952c30b3e49d39924bf246c9ae91c249ace4280e437daa880ca2b postfix-3.5.25-1.el9.s390x.rpm c12ee6e4a811fa9ef91057c962f0238b01556dd30fb138625780ee7b8a1055f7 postfix-mysql-3.5.25-1.el9.s390x.rpm e529caa41bcf0d3056db789249649e4bb001caf2ad3e022496a9022bbb12187d ALSA-2024:9277 Copyright 2024 AlmaLinux OS 0 1 Moderate

oci-seccomp-bpf-hook security update

OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default oci-seccomp-bpf-hook-1.2.10-2.el9.s390x.rpm 4dd67dde7ae8b1ee29b2095a8e860a1fba8771f0a16da21fe536f14503837039 ALSA-2024:9281 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-jwcrypto security update

The python-jwcrypto package provides Python implementations of the JSON Web Key (JWK), JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Token (JWT) JOSE (JSON Object Signing and Encryption) standards. Security Fix(es): * JWCrypto: denail of service Via specifically crafted JWE (CVE-2023-6681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-jwcrypto-1.5.6-2.el9.noarch.rpm f23f6bea4cb6abd0e3b01dc52f05da93bc9884a575cf57e6cee873c153e90de6 ALSA-2024:9306 Copyright 2024 AlmaLinux OS 0 1 Moderate

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: HTTP response splitting (CVE-2023-38709) * httpd: HTTP Response Splitting in multiple modules (CVE-2024-24795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default httpd-filesystem-2.4.62-1.el9.noarch.rpm 14b18c5f70ad9bd24012ee959564c824985ebe6d0e5abb47ced6455fa438441e httpd-tools-2.4.62-1.el9.s390x.rpm 2c3f4bc5bc6a88cfd801189cd86625146fc4c223ec206772c853a9ef5ee3df3b mod_ssl-2.4.62-1.el9.s390x.rpm 5e31ab4169e307a0d84f30a755792abb6eb7572270d0823ae9b16df62f009fd3 mod_session-2.4.62-1.el9.s390x.rpm 702665e138b10afaf2da48db46c3c1d3c3476201ff6c700ca793fb138236a8cd httpd-devel-2.4.62-1.el9.s390x.rpm b0dc4af494e99f2af7fef1e1627fcaa2a33051ae3c98510a4f4526ccd8fa4bc5 httpd-core-2.4.62-1.el9.s390x.rpm c88c3b8e4007682ae7cd3e49c6e1a77019a4f52845db9e6a84182b2c23e4a641 httpd-manual-2.4.62-1.el9.noarch.rpm c8c388c7362b7ad90badd642815c9082f038f080d85d1564d1d4dd206949e51f mod_proxy_html-2.4.62-1.el9.s390x.rpm ce0985654b00e5487e0bece93b6d707a04b3b583002f5d85c452327d184eb51b httpd-2.4.62-1.el9.s390x.rpm d380924b4e07df6b598ba05e1ce3758ce7764dcccaedbc9097922ea82aeb8754 mod_ldap-2.4.62-1.el9.s390x.rpm edcf47163cda4cdc985892d848c04be3a6e6130cf459ff3894d041ef312a6c83 mod_lua-2.4.62-1.el9.s390x.rpm f49bd5f72e0f023735327ddedfdcf9c189d46d85aaaf423f3c6eb276c72fbe7b ALSA-2024:9317 Copyright 2024 AlmaLinux OS 0 1 Low

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * NetworkManager: Denial of Service (CVE-2024-6501) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default NetworkManager-ovs-1.48.10-2.el9_5.alma.1.s390x.rpm 1b64b4bbff90664627a41ec8f767ba1eb12e9bd94a285f8e41598ef984cfe70b NetworkManager-config-connectivity-redhat-1.48.10-2.el9_5.alma.1.noarch.rpm 46bec8e9f6a3ac1c043fd041a8a39e69f4ce82cdba85ee88a70756e667bf397b NetworkManager-ppp-1.48.10-2.el9_5.alma.1.s390x.rpm 4eeefc42760d982ed262c48d6c26f64d7a262c2817e6aeca387329f581d55d01 NetworkManager-dispatcher-routing-rules-1.48.10-2.el9_5.alma.1.noarch.rpm 6cf0bbb7768f67d58daf7ce6de56051bf60c09e3df67b4b5f89dbb3f9409095b NetworkManager-cloud-setup-1.48.10-2.el9_5.alma.1.s390x.rpm f732badc9987b48926d0e5ccce8201f8ea8835793f8ebd7cf4cadaa6f3e76ff0 ALSA-2024:9325 Copyright 2024 AlmaLinux OS 0 1 Low

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default cockpit-pcp-323.1-1.el9_5.s390x.rpm 208f299af2bea8524c58a2442bb402235c12751504e3a2c94085d24ad8fb61ca cockpit-storaged-323.1-1.el9_5.noarch.rpm 5c0b31aa290dae63c6d54434ed4c52453aad980f8cd50858b037b655c8065bd5 cockpit-packagekit-323.1-1.el9_5.noarch.rpm f11f8d5faa1930670c93db8d29bfe7043deab6aa3678c51c44aae49deb2c9f05 ALSA-2024:9331 Copyright 2024 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c (CVE-2024-26458) * krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (CVE-2024-26461) * krb5: Memory leak at /krb5/src/kdc/ndr.c (CVE-2024-26462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default krb5-devel-1.21.1-3.el9.s390x.rpm 65f5c92c9da7dcda68c397de0c9ee77d3ff71472ae7486476f57f4466ad1b713 ALSA-2024:9333 Copyright 2024 AlmaLinux OS 0 1 Low

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511) * openssl: Excessive time spent checking DSA keys and parameters (CVE-2024-4603) * openssl: Use After Free with SSL_free_buffers (CVE-2024-4741) * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default openssl-devel-3.2.2-6.el9_5.s390x.rpm 2b201baf5a6d06efb00bd1723d17ca4a97abe5ca123a1724cef1854b84c980e8 openssl-perl-3.2.2-6.el9_5.s390x.rpm 7efe1ba69e120bda1c7e2f69e9910d4414c567e0665fb5237d3dfa5ccd0ca395 ALSA-2024:9371 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python-unversioned-command-3.9.19-8.el9.noarch.rpm 745ac7db1cf590dec59dcf2a3ed0847a481934748a8a3cb51d45b23c03cf2f66 python3-tkinter-3.9.19-8.el9.s390x.rpm adb611b058308802422c891beab45d9370d96a91bff45afe65d0e7406d8a3f0b python3-devel-3.9.19-8.el9.s390x.rpm b0e5db25b436d959f560652f20cb15cd3444fe0fb464c12751784e9022a43192 ALSA-2024:9404 Copyright 2024 AlmaLinux OS 0 1 Moderate

libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libgcrypt-devel-1.10.0-11.el9.s390x.rpm 6e1c64aeb6090508c98515b6909c68438043dc169652bf9379f8dc477238026c ALSA-2024:9405 Copyright 2024 AlmaLinux OS 0 1 Low

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: heap-based buffer overflow vulnerability (CVE-2021-3903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default vim-enhanced-8.2.2637-21.el9.s390x.rpm 199420188769bedf3baf5bf01e7a73a3f21245b52e124a071224631febde7d72 vim-X11-8.2.2637-21.el9.s390x.rpm 80006a1345f2b143a08a481cdbe1795a1068e660e2786bda267bf8449cc20cf7 vim-common-8.2.2637-21.el9.s390x.rpm ae0937e0ff37df1b7f8617e44a19f3cd2c3ebc7d417eabc729c0fe9b2ee8f4a4 ALSA-2024:9413 Copyright 2024 AlmaLinux OS 0 1 Moderate

bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files. Security Fix(es): * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866) * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596) * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594) * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592) * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589) * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580) * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default bluez-cups-5.72-2.el9.s390x.rpm 04019ef1918796570ce4b2d33a4de9f0c1137115bc12f68633fffe02d29ccf13 ALSA-2024:9424 Copyright 2024 AlmaLinux OS 0 1 Low

tpm2-tools security update

The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module (TPM) 2.0 devices from user space. Security Fix(es): * tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote (CVE-2024-29038) * tpm2-tools: pcr selection value is not compared with the attest (CVE-2024-29039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default tpm2-tools-5.2-4.el9.s390x.rpm e0cdc78f76cba3ef269818c6b6292c691219f4950f57bbadba82fbb4d077ef04 ALSA-2024:9449 Copyright 2024 AlmaLinux OS 0 1 Important

bubblewrap and flatpak security update

Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default flatpak-libs-1.12.9-3.el9_5.s390x.rpm 3afcbcff041d52f66273037a400eb9af43c579a14a9fd80b4fc51c96a948b258 flatpak-session-helper-1.12.9-3.el9_5.s390x.rpm 669288996a627a266b1a797a503ad64de7f766376c8181e64b451ade97e108aa flatpak-1.12.9-3.el9_5.s390x.rpm a75586628cbdca427a24837ebbd2f8161ef94a02fd1736176eed3a54f70bf204 flatpak-selinux-1.12.9-3.el9_5.noarch.rpm d9f29fcb044c065b28d63428e0b95b09bce1f9a812c2363d25add0dfca286f4a ALSA-2024:9450 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-devel-3.11.9-7.el9_5.1.s390x.rpm 3b266d4911af22c9c5bb66dd33862f771c96e8d815f72cb963da5ef6c94652a3 python3.11-libs-3.11.9-7.el9_5.1.s390x.rpm 50b06c209ef8dbe954022310c0b3c1f523179e732439968892dbe760aa659ccf python3.11-3.11.9-7.el9_5.1.s390x.rpm a7370f89280652709e31ff2e7c6d98131c3221b9c76901a2b6a004e120b15d5c python3.11-tkinter-3.11.9-7.el9_5.1.s390x.rpm eda0d0eeb7cb852783bee2ba69811c67eba7f87a3cc3cd4afbdfc3dd7618ab72 ALSA-2024:9451 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.12-devel-3.12.5-2.el9_5.1.s390x.rpm 36d6269b8be3d07fede135e4ffa66954f98218940e712bba4089bf783feae2f4 python3.12-3.12.5-2.el9_5.1.s390x.rpm 4dc7c34dcad0f59bd176f7eb80cab25f28e4dca48b8a6dfc95660168138afa20 python3.12-tkinter-3.12.5-2.el9_5.1.s390x.rpm 7231b5816e5d1614d87fba307cfd0a79891fe56795db214df363b19fcd650c67 python3.12-libs-3.12.5-2.el9_5.1.s390x.rpm edde44d4e7b2d13c97c793326187d49e60ae176c86866b2696b1c9f5292d8a14 ALSA-2024:9452 Copyright 2024 AlmaLinux OS 0 1 Moderate

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770) * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default pcp-pmda-mongodb-6.2.2-7.el9_5.alma.1.s390x.rpm 05cd6477d2e8f2f70023ad9b042149d215cea9cb71cbb3439dfc5d59f46485ca pcp-pmda-statsd-6.2.2-7.el9_5.alma.1.s390x.rpm 05e09f133dd263e52036187c604bcec7cc1f51ad62d8e6e771a1561f432f3407 pcp-pmda-logger-6.2.2-7.el9_5.alma.1.s390x.rpm 06b661a768ca8aa0836bb9f5bcad5e52f64a136f4f1d94f6ede222f655aa4e49 pcp-pmda-named-6.2.2-7.el9_5.alma.1.s390x.rpm 0a163a451396a3f90ed6efc6d325634d125eb527c0235ae8b92c322163c60340 pcp-export-pcp2openmetrics-6.2.2-7.el9_5.alma.1.s390x.rpm 0da727c886cabe90335822b3b21e820447d0e6d8aaa03733f4b2a91870169f38 pcp-pmda-bind2-6.2.2-7.el9_5.alma.1.s390x.rpm 0e91926be51bc0fa955ba05fff6ff15afa849de1817a0d7d4155964abb7f6e1b pcp-pmda-hacluster-6.2.2-7.el9_5.alma.1.s390x.rpm 11b437595a5480bd9e2483b13fba5c87693c8a81e07fa1a8f7ad5fe20a8b4f60 pcp-pmda-libvirt-6.2.2-7.el9_5.alma.1.s390x.rpm 12a0d0ce82315da9bf2df4a8291e6e3c6822199c9e7abb7a48c998ed54c8a33d pcp-pmda-cifs-6.2.2-7.el9_5.alma.1.s390x.rpm 143e926611850cf6555cc3b02979608eff8e81b7ee46de39f6a169f264f529db pcp-export-pcp2elasticsearch-6.2.2-7.el9_5.alma.1.s390x.rpm 150bf52108fa715351c0395749e4b51b6b289068817ffdcbb13e8ce9c10ccbe2 pcp-pmda-slurm-6.2.2-7.el9_5.alma.1.s390x.rpm 1a4c85b601b3aa0f7d103e8e148de6fb61f43eb1aada96d01dca8989c76107d3 pcp-pmda-mic-6.2.2-7.el9_5.alma.1.s390x.rpm 1b8ef540183c56d558fb9c7aa4ed6916c1a2ca571f97748ac48fe776602811dd pcp-pmda-cisco-6.2.2-7.el9_5.alma.1.s390x.rpm 1c1e12f3eda519e86c08137aa2f4f48928b862d014f5044b3b3a477bae74165c pcp-selinux-6.2.2-7.el9_5.alma.1.s390x.rpm 23d9ee5a47d85843a4faf2f29494c48c51e9e81657511a5ced67566a01d88db1 pcp-export-pcp2zabbix-6.2.2-7.el9_5.alma.1.s390x.rpm 265ad1732283fc7d399ec9c7fb4ba635d9184c63fd2ce72659e738f20a6ad02c pcp-pmda-redis-6.2.2-7.el9_5.alma.1.s390x.rpm 2798a70c85a9f1020e1505188a9748e893bf5423233ac234e5e1284c2f58f91a pcp-pmda-zimbra-6.2.2-7.el9_5.alma.1.s390x.rpm 27cf22544dd7a755ccad705125b4b7932ef1f1f5448b8171a257129ee979510d pcp-libs-devel-6.2.2-7.el9_5.alma.1.s390x.rpm 2997be4a22cf7552741e264489962b281c6a975edf6443ee7c2c5aa6de570f5e pcp-pmda-pdns-6.2.2-7.el9_5.alma.1.s390x.rpm 2bd6699388487d091af65e1ba5375b3ee94fdc5301ac27d60491756dc634e274 pcp-pmda-samba-6.2.2-7.el9_5.alma.1.s390x.rpm 2c967396e3f1acf4955136c8276fbdbf03f74291d48ea88ced63a8669af0f21c pcp-import-sar2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm 301b54eace6f8b627b87393d6e05bcc1dfc9f6b81dda42dfce0a111e8836fcc4 pcp-pmda-nvidia-gpu-6.2.2-7.el9_5.alma.1.s390x.rpm 31061047832db314eb257e9edf93cd8add2bba671f263c4198ecef29f412ce47 pcp-pmda-snmp-6.2.2-7.el9_5.alma.1.s390x.rpm 33327409edca7de34936e8423160eaa475b2901583ab4e75345eb61d9e4441b2 pcp-pmda-dm-6.2.2-7.el9_5.alma.1.s390x.rpm 338d87c69f920d2ebd6a1a74a4ba0e3b9f6185b9a15f5560f0ebfb943d708021 pcp-pmda-nfsclient-6.2.2-7.el9_5.alma.1.s390x.rpm 346815a1f898d1de6d258b97ef9431a4c37d8d7c9b06df9b9d0033e7486507b0 pcp-doc-6.2.2-7.el9_5.alma.1.noarch.rpm 35410b2bdcd4dd180b8e9c06f7a3e257d5f102e12a9dd3c54ab0f3bba44373ea pcp-pmda-postgresql-6.2.2-7.el9_5.alma.1.s390x.rpm 402b4abda5592910234ce54386eb2d52f6c2797844e4673cfd7f93ec4779dc2b pcp-pmda-lustre-6.2.2-7.el9_5.alma.1.s390x.rpm 40b6e222fee0b2e8a85c14d4f4f39320dc705a9550a2bf4b883f9bf464757570 pcp-pmda-weblog-6.2.2-7.el9_5.alma.1.s390x.rpm 40c7f0b01cd02bfefc8cd564e801fc02df5236a3376f6cb0d0a0dd0a0528272c pcp-pmda-netfilter-6.2.2-7.el9_5.alma.1.s390x.rpm 41704b7c3846564353de59e57b581af26fb68984064f70ec24115ae90ce1226f pcp-testsuite-6.2.2-7.el9_5.alma.1.s390x.rpm 428dda8389441e3ee9dd294abf8ba66e4a904e3d00dea1424a20713e3029960d pcp-pmda-netcheck-6.2.2-7.el9_5.alma.1.s390x.rpm 429c030b4d752a06790a6afe8c82bee9f7a67ea73fc29e4462e43855f0c6a419 pcp-pmda-activemq-6.2.2-7.el9_5.alma.1.s390x.rpm 48de0e975cbfde5420a6c6a7c92facd6a5b3d869d9c07f276b873cf8584fe583 pcp-pmda-rsyslog-6.2.2-7.el9_5.alma.1.s390x.rpm 4afa1f8073044aa8b7b461a7f6069bf44a9cf2f294323d87b8e05f85b3799258 pcp-pmda-mailq-6.2.2-7.el9_5.alma.1.s390x.rpm 4bdeee9fda733346f4d3d494b816e8404ec75852957289562c5e8ad7e4baf1db pcp-pmda-gfs2-6.2.2-7.el9_5.alma.1.s390x.rpm 4e1c27f733128ccccb163586ea2fad57fab66b3a1e7cdd733f32c3ac36ca0fd4 pcp-export-zabbix-agent-6.2.2-7.el9_5.alma.1.s390x.rpm 516884e8e3e30201c8d3d614589782cc8b0491d3507e0c69cf632f5e044e653f pcp-pmda-unbound-6.2.2-7.el9_5.alma.1.s390x.rpm 54c7900319acb704898c93a9ecedae66be861b21449968ae4d668c7b9f21d8e6 perl-PCP-MMV-6.2.2-7.el9_5.alma.1.s390x.rpm 566873e62b257a57e65a14c691155abf153fcb420bb6bf802242f53a220087b5 pcp-pmda-ds389-6.2.2-7.el9_5.alma.1.s390x.rpm 5a96652a2edd5ad87279780f7e7a4b243c20c9dc03fe6c9aab314432a1020991 pcp-pmda-bonding-6.2.2-7.el9_5.alma.1.s390x.rpm 5aabee9e7aea2c2f552e316f00442dcda5ef9ca3317c720c36da1ad57a50b7ef pcp-pmda-bcc-6.2.2-7.el9_5.alma.1.s390x.rpm 5b1fe5d988ef44381bbadd3cca5ea57a258ce9f6689040a6371e80b47d8e2e37 pcp-devel-6.2.2-7.el9_5.alma.1.s390x.rpm 5fd336cc36413c345ed5c26e209ee8e45cf358091b530d3a13e8f81d46c3b99b pcp-pmda-smart-6.2.2-7.el9_5.alma.1.s390x.rpm 60633bb60872ab1c6b8b1d7bb8bba8c21ccc47dd130d1876beb6e5efb5290f0e pcp-import-iostat2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm 6187e773eb0f1953127e210a0387cfe28283c0fd6348c14bcf51ffe159198b47 pcp-pmda-ds389log-6.2.2-7.el9_5.alma.1.s390x.rpm 63509f38d091233b1924d90ce066a7877c4c35bbcf879a5eee17d47a03b8c120 perl-PCP-LogSummary-6.2.2-7.el9_5.alma.1.s390x.rpm 663817d64dc69ae2472a36a4a577993bb3ae510a4624c0d0243da5aa7d324216 pcp-pmda-openmetrics-6.2.2-7.el9_5.alma.1.s390x.rpm 69b5f4b8ac9f0cd3aefe8a374f6e74d2493384d0136b481640688afca363923d pcp-pmda-haproxy-6.2.2-7.el9_5.alma.1.s390x.rpm 6fdfeb0cb5cfdf11685e506892eb80b72de703390a45c878e7471886baba8e6c pcp-pmda-gluster-6.2.2-7.el9_5.alma.1.s390x.rpm 749aa849a483fcd12edcc98f4b95c2eccfb64b52dd0c2f4f59ed59abaedf9c80 pcp-conf-6.2.2-7.el9_5.alma.1.s390x.rpm 7522c84772490ce4df05130301e20eb6c9f1aee1017d8e19e26b88dee77bb2f8 pcp-pmda-bash-6.2.2-7.el9_5.alma.1.s390x.rpm 75236ad843c0f419ca3b182b5e405a284189d4fdecb98af9f308e8a5aafbf1bc pcp-pmda-apache-6.2.2-7.el9_5.alma.1.s390x.rpm 7670a9acd7c453cf8b6d10344011d51b1bc81f3fa3458b0d40e6e4ca73c4d2a8 pcp-pmda-farm-6.2.2-7.el9_5.alma.1.s390x.rpm 7a31c755820d476cb759a30fa4d1b4dac070aa0759fa9613f6dad3eb6fff4433 pcp-pmda-sendmail-6.2.2-7.el9_5.alma.1.s390x.rpm 7adfd01e40e3e97e4c6b19264488d14a44bb91b10c08ce485e54524da0e330db pcp-export-pcp2xml-6.2.2-7.el9_5.alma.1.s390x.rpm 7d7237804e5eb540ceb3f016b71b4323e8b260eaaddc3d943e64b0fae941e058 pcp-import-collectl2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm 806e406035c70778dda41a80e83f4b669e333e73cbbfa3291792e5361b027e64 pcp-pmda-lio-6.2.2-7.el9_5.alma.1.s390x.rpm 83ad6453d642be28f77700c9cd2cb317000f277725a93f910e47cd100a920155 pcp-export-pcp2json-6.2.2-7.el9_5.alma.1.s390x.rpm 8608524df8080aed5d17b4699266d7e73a640729759185750d25591495a320cb pcp-libs-6.2.2-7.el9_5.alma.1.s390x.rpm 896b09f21576790b1246450d397efb557eb1880c6dbdb1eaea38168762817f94 pcp-pmda-gpfs-6.2.2-7.el9_5.alma.1.s390x.rpm 8ad20628971597bc873358d34c9bde1e38f05d103f33c18bdfdc43ef2020d693 pcp-pmda-uwsgi-6.2.2-7.el9_5.alma.1.s390x.rpm 91d0e064a25242a0cb259bcb79de846766cf325d40092ec35f524953d59d566c pcp-pmda-bpf-6.2.2-7.el9_5.alma.1.s390x.rpm 9444d62b962b1a237b3060dbc05068d014f5405daf14de68ca57af59ace48a3c pcp-pmda-lustrecomm-6.2.2-7.el9_5.alma.1.s390x.rpm 94665e0992b1bbefd6ddd5a65977b089b67e61e7ff7653bf9c7f088b24a733f0 pcp-pmda-lmsensors-6.2.2-7.el9_5.alma.1.s390x.rpm 95ce55e6340917c961fa9ee0712f5086bd603bfd7a008dbf222e3484aa245dcf pcp-pmda-sockets-6.2.2-7.el9_5.alma.1.s390x.rpm 999312fb16bc1d85c789dff52d001e1b800114167cb28b4e3315a1017898dd31 pcp-export-pcp2graphite-6.2.2-7.el9_5.alma.1.s390x.rpm 9a207090d020c3e79e795b6d2839e4cbd8b12adc3cb751fe2f3703c41bad1469 pcp-geolocate-6.2.2-7.el9_5.alma.1.s390x.rpm 9dd0ef7bd5ac8a1f11c710d1d1a5ff93699964066b56a74754d24a00f928389d pcp-pmda-bpftrace-6.2.2-7.el9_5.alma.1.s390x.rpm 9f4c60000c551a611e562b9ecbb42a1af860a026a9c0f941644140d0b2846c47 pcp-pmda-rabbitmq-6.2.2-7.el9_5.alma.1.s390x.rpm 9f8dce791a2068ac40992b7c9b8d77a67ed99a66300c27f942e7c37290117826 pcp-zeroconf-6.2.2-7.el9_5.alma.1.s390x.rpm a0787053e2ddbb183be6dc1141997a2ee553d6826dfa565cfa93f615f9ff3a5e pcp-import-ganglia2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm a1163bc05f6413b163bfd8f21829fc3941e3ecab8c5514e68c8ea232543e04dd pcp-pmda-systemd-6.2.2-7.el9_5.alma.1.s390x.rpm a261cb90adb6f6fa21817fa3da31d3d72639785d734ae8ffae670a00184fdb19 perl-PCP-LogImport-6.2.2-7.el9_5.alma.1.s390x.rpm a95e3c47a511cc9847cbf6fa04a2625fc1b74d681a3093cb2e29b7c24600c74a pcp-export-pcp2spark-6.2.2-7.el9_5.alma.1.s390x.rpm aa95052f1ea3bb8bb9fd7fd9f9d13d5c8cbe9e5bae2f237ebd105a93f51dfee0 pcp-pmda-podman-6.2.2-7.el9_5.alma.1.s390x.rpm b11deef6bed67b83911071d5f83d5276cd90598e18e1d001f77a70c8dbf674d0 pcp-pmda-memcache-6.2.2-7.el9_5.alma.1.s390x.rpm b33a96e252c785405517038c90d23c43355728f888ad0eee0c7ff3284b56965c pcp-pmda-openvswitch-6.2.2-7.el9_5.alma.1.s390x.rpm b4300ff57c804997edc45851516a7bc356783138dd2d3ac8897cec284f731279 pcp-pmda-news-6.2.2-7.el9_5.alma.1.s390x.rpm b7e4e2703773ebff98ffaf8242e0ea4afcda07a4b41178eb0800c73ccaa6ea97 pcp-pmda-shping-6.2.2-7.el9_5.alma.1.s390x.rpm b9a7eec5cfc7435ad24234abc83072e19edcee186fe740e1a11f93f89a6d4787 pcp-pmda-json-6.2.2-7.el9_5.alma.1.s390x.rpm bb55ee33530c0636a92f8ccaafdd68fe918d65799defe668a0253c6d9213188b pcp-pmda-postfix-6.2.2-7.el9_5.alma.1.s390x.rpm bcb80ed6d9ede835018159652963c80fc971a01797a03a01ca961aa555942232 pcp-pmda-dbping-6.2.2-7.el9_5.alma.1.s390x.rpm bfc8cfbd940571f040141e4f7d164f85b8298a841d07928f0e4d019b1cd2454c pcp-pmda-trace-6.2.2-7.el9_5.alma.1.s390x.rpm c253a520d2778aa78280c84ed0ac585c5d76d10f88a041e83cc50456fbebc6f5 pcp-pmda-oracle-6.2.2-7.el9_5.alma.1.s390x.rpm c26ecaef6b63bf9f88b03ef12490a166072d6d257071a519651b249697a1aa85 pcp-gui-6.2.2-7.el9_5.alma.1.s390x.rpm c2cfe96b612275fac57d4403991d0f741a4fa132b9d3d50204890969c0d8817d pcp-import-mrtg2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm c527c92bc10599db04e7efd2c2ae76039ea1d1f97416dafa4e95660702742708 pcp-export-pcp2influxdb-6.2.2-7.el9_5.alma.1.s390x.rpm cc2aa53bb3139407b3825dd32b8d3ee33c6006bacedce1b1b4b3e4e0041053c8 pcp-pmda-summary-6.2.2-7.el9_5.alma.1.s390x.rpm d8ba74f4277c132d1a014a9349c7d8f7816bef8621949b83895ad3c517eb3d44 pcp-pmda-mysql-6.2.2-7.el9_5.alma.1.s390x.rpm d98b8474572de06e3dcc8777446f77bda3fa866cec736ae89bd03a4860564dd3 pcp-pmda-elasticsearch-6.2.2-7.el9_5.alma.1.s390x.rpm dd4348f62a22e04a2e708a21ba80065ce134eb625cfa9b50961bf1e5d932a7b0 pcp-pmda-zswap-6.2.2-7.el9_5.alma.1.s390x.rpm e1a7f1abac34f5e4cf1b46c438e29b98c2db431467c6b279747b91d52ea4077e pcp-pmda-docker-6.2.2-7.el9_5.alma.1.s390x.rpm e3a6172ac339f5f8b2b72c5d3c4ebae18a5fd6464026cabf164ff0622dcf64e3 perl-PCP-PMDA-6.2.2-7.el9_5.alma.1.s390x.rpm e583eeb2bc951e19ac5cca2cfb12791ebddda91a90a454711446744cf4183e76 pcp-pmda-nginx-6.2.2-7.el9_5.alma.1.s390x.rpm e6e31baef1d273e7deb33634c709b24888113b93cb93fe4d00b99ea3095a3445 pcp-6.2.2-7.el9_5.alma.1.s390x.rpm ee9176492a0d7c336c84dc8226795486cd5523ff12190ea53deb8e507da54e32 pcp-system-tools-6.2.2-7.el9_5.alma.1.s390x.rpm f635da5c304891dc5b4ce8b4be180ad4a6089667b998e09c55b151f28459a5da pcp-pmda-denki-6.2.2-7.el9_5.alma.1.s390x.rpm f88f3eea23a30c0bb5ded7ae95473e1efc14f85b5e4cdf3c38f965ddc6f085ce pcp-pmda-roomtemp-6.2.2-7.el9_5.alma.1.s390x.rpm f9fd5ff7f87e01f9bd6fb420e4dfdda16655a9c98bb4a53d348b820c839531f5 pcp-pmda-gpsd-6.2.2-7.el9_5.alma.1.s390x.rpm fa13722b1988afa797007fad71240bb8dab8904b861ddba7ec40f4e0dd795826 python3-pcp-6.2.2-7.el9_5.alma.1.s390x.rpm fa19676c8de292e53a11a839252649be39ada4d791f20a2953ef1a44c452ea7c pcp-pmda-mounts-6.2.2-7.el9_5.alma.1.s390x.rpm fc0ccfa4db4459d1d225502ab35adc491848af48e842e3e521c31d2a11ab21df ALSA-2024:9454 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default podman-tests-5.2.2-9.el9_5.s390x.rpm 0fb578e9c9d3e35aba90b7f23d9e146fceb5f6980ec5416dff450a7d9236b3c6 podman-docker-5.2.2-9.el9_5.noarch.rpm 3cf500c963e97a37b41255a5f3b5242353a74dfcfb4df4438197b74a571d7958 podman-5.2.2-9.el9_5.s390x.rpm 9f37cd5b6aa6a3f85b8c2876567f8ed318d5b361ba4fb5c7af98e219e7d7c700 podman-remote-5.2.2-9.el9_5.s390x.rpm c97824504691b3879dc9230135392f25dbbea934726c5b06be936851462134bf podman-plugins-5.2.2-9.el9_5.s390x.rpm e23986b1676ff487c118554b1165cf765c0f5ab2f76cb5b94340da0dede50b7c ALSA-2024:9456 Copyright 2024 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default osbuild-composer-worker-118-2.el9_5.alma.1.s390x.rpm 3e7d2086fae183a0880450a9e7056840f0df7ad791940399669f1fef9a4ad0c9 osbuild-composer-118-2.el9_5.alma.1.s390x.rpm 9472033c13b7b81090e5b611ec19a6f4b83026098c8e2be5c5532452bf21e75a osbuild-composer-core-118-2.el9_5.alma.1.s390x.rpm fee25ecb26c4b61296ba17900f46d34143717df060066565a300350326a4f32e ALSA-2024:9457 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12-urllib3 security update

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: • Thread safety. • Connection pooling. • Client-side SSL/TLS verification. • File uploads with multipart encoding. • Helpers for retrying requests and dealing with HTTP redirects. • Support for gzip, deflate, brotli, and zstd encoding. • Proxy support for HTTP and SOCKS. • 100% test coverage. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.12-urllib3-1.26.18-2.el9_5.1.noarch.rpm 1683c45e96bf409b94bf40648c7d7beb9fc83b5e352fe6e78f2dd37945d0b01e ALSA-2024:9458 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3.11-urllib3-1.26.12-2.el9_5.1.noarch.rpm 736233d036a75f950e9daa6004cb2365ba9f07d946ac7625f22d8891afc7c36f ALSA-2024:9459 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default buildah-1.37.5-1.el9_5.s390x.rpm a014dd0e7136aab5be3c19916de77a949fb976e4443cfba67b492502c6e37c71 buildah-tests-1.37.5-1.el9_5.s390x.rpm bdd58dcc077d2d7faba14c33d8ce576e3e3119e81be8de9cbaa94e73c9df1cc1 ALSA-2024:9468 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default python3-tkinter-3.9.19-8.el9_5.1.s390x.rpm 7c356f8ea783393e7d3e90bbaeb0b3968aa401d4097736fa4f2742fa1771fe3c python-unversioned-command-3.9.19-8.el9_5.1.noarch.rpm cc0768d17cf6d3430eee61efe98caaea21eeb3d6fd12b0e61ead7d66854acaea python3-devel-3.9.19-8.el9_5.1.s390x.rpm d2411e6dc369060783fa3dc0ebcf48232f339da67269b163b8b0f4049b917b8f ALSA-2024:9470 Copyright 2024 AlmaLinux OS 0 1 Low

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: libppd: remote command injection via attacker controlled data in PPD file () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default cups-client-2.3.3op2-31.el9_5.s390x.rpm 27b69feb08ca20bcfd7f45ac0587dec8ab99e8ccdec10703d5587048f92dde9d cups-devel-2.3.3op2-31.el9_5.s390x.rpm 2acfacae3cf1716fc9bd02d489773396727dbbeaeb95b840f6f2ed1ca542a99d cups-2.3.3op2-31.el9_5.s390x.rpm 331afc5d61c5a7b605ced90805515c84da8e0f3fb385140fc1d2d8698cd5de46 cups-printerapp-2.3.3op2-31.el9_5.s390x.rpm 8fbe22b370a43f371631bf26b80407461eb250f6bc3eb3b8d44bb99a97d568c4 cups-filesystem-2.3.3op2-31.el9_5.noarch.rpm a7b66edc195788d9dff4276a2d48d507b51a1afbe19511fd41ef9a8f3e0dc470 cups-lpd-2.3.3op2-31.el9_5.s390x.rpm a8361b043f55a7fac1e93cf93ef91af35350675f31d85e96df5af7cdad1932d9 cups-ipptool-2.3.3op2-31.el9_5.s390x.rpm d5259633402b3370cbcb6e93e197a28bfb7dafc8acdfad95f23515ae1f07612f ALSA-2024:9472 Copyright 2024 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default grafana-pcp-5.1.1-9.el9_5.s390x.rpm ca2e11da0c4fa812a32055a23a31c545dd2ed39aa7ed07ea258ca1ab76297757 ALSA-2024:9473 Copyright 2024 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default grafana-10.2.6-7.el9_5.s390x.rpm ba0548bd3dde3ad8c5b1f1b329525947398c069d43a02c3387fb05b0c3f6c26d grafana-selinux-10.2.6-7.el9_5.s390x.rpm ef86fe87d2e11405e02d5eb6af560bb895b519cb72d50712c36489d0d11792f6 ALSA-2024:9474 Copyright 2024 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * freeradius: forgery attack (CVE-2024-3596) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default krb5-devel-1.21.1-4.el9_5.s390x.rpm b91f6e1fb21c50c05ae9276b5f351b5936c9d0f045fa131ce818da4c8dd2cad3 ALSA-2024:9541 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default expat-devel-2.5.0-3.el9_5.1.s390x.rpm 7ca308228a8d85f9447f3897cca6b0f3b60b060cc27745e0d5390798e229d059 ALSA-2024:9543 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.100 and .NET Runtime 9.0.1.0. Security Fix(es): * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498) * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498) * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default netstandard-targeting-pack-2.1-9.0.100-1.el9_5.s390x.rpm 2967c05cd10c15cbf7299f885729656d7f72659fba6616ad39295e798178f8fd dotnet-hostfxr-9.0-9.0.0-1.el9_5.s390x.rpm 344077b2b88959b47334ba2b902be92e0c1eb057b23956e489d0fa3f5b8a5398 dotnet-runtime-dbg-9.0-9.0.0-1.el9_5.s390x.rpm 4e3396ffb0744c3c8caebf4f88c4d2215da035913fb10c9a5b4f9c8dfe4af91d aspnetcore-runtime-dbg-9.0-9.0.0-1.el9_5.s390x.rpm 76f326e6e1fe75f834cb427f93edf74220dda4ab90066169e3a9fa68230270c3 dotnet-apphost-pack-9.0-9.0.0-1.el9_5.s390x.rpm 774647fb41488babe6aff4509dc15e7f5c1d94668ca2241981251a69a618900d dotnet-sdk-9.0-9.0.100-1.el9_5.s390x.rpm 78fac27ab94ffebd7516bf4856d8e8c8abeeaf5283ee2481f1ca0e9033438c2f aspnetcore-runtime-9.0-9.0.0-1.el9_5.s390x.rpm 863aae91663eed0d18880c094b6d52d0f9a872b3c12ef69548ff0ad598155f7e dotnet-templates-9.0-9.0.100-1.el9_5.s390x.rpm 89683c28190e3c8e366d6ca5a9963987e657653daccb211da8d73633ba131eb1 aspnetcore-targeting-pack-9.0-9.0.0-1.el9_5.s390x.rpm 8f785b1c18d61de82c80054042fd4a70aae1038ed709719734321b185ab62c8b dotnet-host-9.0.0-1.el9_5.s390x.rpm b5d1ab12902d0e6e1529fe5e741a98cd52cdd8b98b6cc93444817d3bc4ed1e26 dotnet-runtime-9.0-9.0.0-1.el9_5.s390x.rpm c6276ba2e474a33d079434e21fbf4315ec860d9d1a25410a70666847a6fd0402 dotnet-targeting-pack-9.0-9.0.0-1.el9_5.s390x.rpm cf280410ef86cf61dbd28c489e5e98b7926551c6c85c7ed6cf8aa9e51c058808 dotnet-sdk-dbg-9.0-9.0.100-1.el9_5.s390x.rpm fcb52ec66f1d1c86b7c5a1f5d055492f1224736aa235fc33b21407dccef731bc ALSA-2024:9548 Copyright 2024 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default openexr-3.1.1-2.el9_5.1.s390x.rpm 4f4da2fa47652389e9892c13e823bc12585c59a80d6e0799c61556c7565cb71c openexr-libs-3.1.1-2.el9_5.1.s390x.rpm e24fc2620a8f8b0764866c46892aa25497670bd8ece522bbdeaf4910200cae3c ALSA-2024:9552 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680) * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464) * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461) * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458) * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459) * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467) * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465) * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466) * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463) * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462) * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default thunderbird-128.4.0-1.el9_5.alma.1.s390x.rpm e1430c760e2d4ee57426e8c75271de257cb38951224a1f2695981e740dd1c6ea ALSA-2024:9553 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44244) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2024-44296) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default webkit2gtk3-jsc-devel-2.46.3-1.el9_5.s390x.rpm 1ef356522bbe204043a7696320e9cad8bbaca85f0cb21641001354e1af5c1f9d webkit2gtk3-2.46.3-1.el9_5.s390x.rpm 2ca48ec751a5741eca322b20f4f13e9133b7e071bdde1f17049735e87ca1e70f webkit2gtk3-devel-2.46.3-1.el9_5.s390x.rpm b7dbf140c735c4e0d3b832f5df8004a37bc27b641fbe875a6d5823fffd4367ac webkit2gtk3-jsc-2.46.3-1.el9_5.s390x.rpm c72ee5d7fcfcdc28cf2a8d4721afe4206d2a42107a2e8dfaebc578947bec12cc ALSA-2024:9554 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680) * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464) * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461) * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458) * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459) * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467) * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465) * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466) * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463) * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462) * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default firefox-x11-128.4.0-1.el9_5.s390x.rpm 5b03eeed1127188e9f97015b57179a904460f0c9c8ebc10404f3ca290255f92d firefox-128.4.0-1.el9_5.s390x.rpm 63fb7cdedf0520fe9fe03a153d810a5c326364479db9aca4e30a3afd9b60d174 ALSA-2024:9555 Copyright 2024 AlmaLinux OS 0 1 Important

NetworkManager-libreswan security update

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fix(es): * NetworkManager-libreswan: Local privilege escalation via leftupdown (CVE-2024-9050) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default NetworkManager-libreswan-1.2.22-4.el9_5.s390x.rpm 21ef768f6f3516305bab39ac51d3b67f3d4d829f6ecc116537e707de84d0052f NetworkManager-libreswan-gnome-1.2.22-4.el9_5.s390x.rpm b47381d7f507fda5bfe3906fe5982681307f8628f894d1818f8d7cd28700c256 ALSA-2024:9559 Copyright 2024 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: infinite loop while reading websocket data (CVE-2024-52532) * libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libsoup-devel-2.72.0-8.el9_5.2.s390x.rpm 8c3394380ebed9bab04b429191e3285754de9b964844858de2b705bdf7d388c0 libsoup-2.72.0-8.el9_5.2.s390x.rpm c75d4286538ce6f1251e88c655f1b70399e4d088716aab29beefae8bee70e02a ALSA-2024:9605 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283) * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824) * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default rtla-5.14.0-503.14.1.el9_5.s390x.rpm 415b69bd95e8958c873ce912176245e4f7ef12d3344458af38e41befdf9ebf23 kernel-debug-devel-matched-5.14.0-503.14.1.el9_5.s390x.rpm 5071dd9c197bcd288ab47b7f6c29a8700d4924d2a2beda913707107e4a4a9a9b kernel-devel-5.14.0-503.14.1.el9_5.s390x.rpm 5aef45b6c60d43c6d04122b18358447b0569cc077b4774caf781a2e283e39474 kernel-zfcpdump-devel-matched-5.14.0-503.14.1.el9_5.s390x.rpm 5c4c68fe10e8e11660b9673284efb9a1036cbe3122d9127360cbaf7e942c73a4 kernel-headers-5.14.0-503.14.1.el9_5.s390x.rpm 5cbc8fba3393e75f3d7773c6b5cd6d3db865c1d987beb4721898413e568828f3 rv-5.14.0-503.14.1.el9_5.s390x.rpm 6db1b8475186aecedbba85cd48f0c244427d45d56c00f3cd8824b81c461ede68 kernel-devel-matched-5.14.0-503.14.1.el9_5.s390x.rpm 734a00b046d8732b8e1e14a7cdee21fef508c254cbf99232aa84044e85d4b0c5 kernel-doc-5.14.0-503.14.1.el9_5.noarch.rpm 78c50ce63615187ec9c871c0f907520dcf8ebe2db10af6ecbec54b81e4d16492 perf-5.14.0-503.14.1.el9_5.s390x.rpm 979f016d7ca79076442c063dd9f3ff5bc85e0d401312b0d50663a2bcfae8f531 kernel-zfcpdump-devel-5.14.0-503.14.1.el9_5.s390x.rpm bf8e0e6ce4b519910b9ae2f2201b02d96fc90a760424bbe5ae423d87d38da32d kernel-debug-devel-5.14.0-503.14.1.el9_5.s390x.rpm d83f7c26e404bbdb6b67a2fda6b166c61711e5cd3214a6edc77ff05a49852436 ALSA-2024:9625 Copyright 2024 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service processing ESI response content (CVE-2024-45802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default squid-5.5-14.el9_5.3.s390x.rpm d49caa8c17e2e4a795145106c592e26fea1cff680826e27265bfae2dd8164682 ALSA-2024:9827 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_4_default libvpx-1.9.0-8.el9_5.s390x.rpm 7a7693fb0da68f2392cf999cbd605bb8a2b991620f763676269cfbe1de38ef48 ALSA-2025:0059 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713) * kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208) * kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252) * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default kernel-debug-devel-5.14.0-503.21.1.el9_5.s390x.rpm 1fc14f80c44f8d727da21d2c310fcc22d432f0d06dbe51bfb74cc0e3e5c8a405 perf-5.14.0-503.21.1.el9_5.s390x.rpm 419b9e3799d1216a82179722c6f82e44898022e10d793722226caa2bb724d7cd kernel-headers-5.14.0-503.21.1.el9_5.s390x.rpm 7a77ecc972b1201ae045e18402aefb419117d5fd7fda14a90ff1b6b6e5201122 rtla-5.14.0-503.21.1.el9_5.s390x.rpm 8f443500a0298ad03b9e2b12ebff9fcac3d20948f5a739b39e42b9cd4da4dca3 kernel-zfcpdump-devel-5.14.0-503.21.1.el9_5.s390x.rpm 95bc7bb53f9e746508462a3a787688d027f22524284c5094b177885e74724068 kernel-devel-matched-5.14.0-503.21.1.el9_5.s390x.rpm aa68a685ed19bc1167cfa7679d776b21918384c1e01d8a8c817f080929f624e1 kernel-debug-devel-matched-5.14.0-503.21.1.el9_5.s390x.rpm ad57b7cba56d4092dc8d1469bf66d8561a886df097a29475e89e616675d023cb kernel-zfcpdump-devel-matched-5.14.0-503.21.1.el9_5.s390x.rpm b02e762f87040390b0359a1b18ba4f0102dd4924278edc60a0610f07eaf14f32 kernel-doc-5.14.0-503.21.1.el9_5.noarch.rpm c539e750db6c5cbd72dfda73ca9ae3b584bdf57ab181756f7d2a84d6d0467763 rv-5.14.0-503.21.1.el9_5.s390x.rpm c85469e07160f43581c695dbbe823d4088775b05f7d2a022e02410a5dcbf9534 kernel-devel-5.14.0-503.21.1.el9_5.s390x.rpm e6f8fe5d16991b7918bfcbe37326316303e95070d3a35760df625cd9fa28c64f ALSA-2025:0080 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Use-after-free when breaking lines in text (CVE-2025-0238) * firefox: Memory corruption when using JavaScript Text Segmentation (CVE-2025-0241) * firefox: Alt-Svc ALPN validation failure when redirected (CVE-2025-0239) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242) * firefox: WebChannel APIs susceptible to confused deputy attack (CVE-2025-0237) * firefox: Compartment mismatch when parsing JavaScript JSON module (CVE-2025-0240) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default firefox-128.6.0-1.el9_5.s390x.rpm 6aab6fefaa140460054aa0121f19199c13c63ccc85ed53f39b264e9bf7227499 firefox-x11-128.6.0-1.el9_5.s390x.rpm e28537c6d18552ed43b8feeb016b721796c41dd80f7fc9eafaa5f0aaf14e3dcb ALSA-2025:0146 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54479) * webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54502) * webkit: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54505) * webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54508) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default webkit2gtk3-devel-2.46.5-1.el9_5.s390x.rpm a512e12e4714ace7fd1db51fc24361877300f3db911598efad4f68ee0ff172e0 webkit2gtk3-jsc-devel-2.46.5-1.el9_5.s390x.rpm d3e5491baf0ad41a4b4c4f275b33c736484e9f7e8b30988719ef0865c7ee2dbd webkit2gtk3-jsc-2.46.5-1.el9_5.s390x.rpm f24577f636a8016f8a835ed795da82a7b3d60ecc9a39f0f56466cc438045a558 webkit2gtk3-2.46.5-1.el9_5.s390x.rpm f5e08f27d27521d29ace632e7ffa51b5ef7e29cfe4338dc0397d63a152f9ff46 ALSA-2025:0147 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default thunderbird-128.6.0-3.el9_5.alma.1.s390x.rpm 8592394ed87258a88b07f49404ab531288c269807d6a08b4f7e0b10767e01ca0 ALSA-2025:0161 Copyright 2025 AlmaLinux OS 0 1 Important

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default iperf3-3.9-13.el9_5.1.s390x.rpm b2f187d0e2cea70b7c2b91ce8624685665383fc2c9782841067e054ac07ef50e ALSA-2025:0210 Copyright 2025 AlmaLinux OS 0 1 Important

dpdk security update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix(es): * dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library (CVE-2024-11614) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default dpdk-doc-23.11-2.el9_5.noarch.rpm eb0892025d08d1aeab2b137f2cbd9ae5c0ea1702eb2762ed8c2ae92d59177d7f ALSA-2025:0308 Copyright 2025 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * fence-agents: Jinja has a sandbox breakout through indirect reference to format method [almalinux-9.5.z] (CVE-2024-56326) * fence-agents: Jinja has a sandbox breakout through malicious filenames [almalinux-9.5.z] (CVE-2024-56201) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default fence-agents-common-4.10.0-76.el9_5.4.alma.1.noarch.rpm 55f869cd3725fd7d4c3e074266e3a5c5f2607df66964b9532e66b966a6d02933 fence-agents-ibm-powervs-4.10.0-76.el9_5.4.alma.1.noarch.rpm 69d8b3153192e1d7336a369dcb8317760b1e3f1f4d96b982a91aee420e1698ad fence-agents-ibm-vpc-4.10.0-76.el9_5.4.alma.1.noarch.rpm 979642e28a5f5d597147c9497136ff0c49325cc5bb3069aa5a2b0b489a5f7482 fence-agents-virsh-4.10.0-76.el9_5.4.alma.1.noarch.rpm 9bdd4de968c776fd7ffd2d658d439af61f8d8e9b34807436cb9e18cfc2ee1cf4 fence-agents-kubevirt-4.10.0-76.el9_5.4.alma.1.s390x.rpm e7f559f96ea6ecefa44a0ef500d478de711212b7881cc230829382c30e973f2d ALSA-2025:0312 Copyright 2025 AlmaLinux OS 0 1 Important

raptor2 security update

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fix(es): * raptor: integer underflow when normalizing a URI with the turtle parser (CVE-2024-57823) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default raptor2-2.0.15-32.el9_5.s390x.rpm 0aaa81b81e25f871d2674621318fb4941de5638b2040eb927602239947abdb3f ALSA-2025:0324 Copyright 2025 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default rsync-daemon-3.2.3-20.el9_5.1.noarch.rpm fa7977516dd6fb920d0b41a04102678ad6fc8e3a9d3cd960a143328a67dff746 ALSA-2025:0334 Copyright 2025 AlmaLinux OS 0 1 Moderate

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeipa: Administrative user data leaked through systemd journal (CVE-2024-11029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default ipa-server-dns-4.12.2-1.el9_5.3.noarch.rpm 1bccf32a24ee4e2787ffd28eb9167aefd8d578c7c34c567fbf7da594f3a0d273 python3-ipaserver-4.12.2-1.el9_5.3.noarch.rpm 27df772df6ea381a088bf6aeb4b01e4c59ad6d25ebf40eef473d214d0bcb6726 ipa-server-4.12.2-1.el9_5.3.s390x.rpm 2dc93b3a11b6c4410ddc6cd1bf3ce06c87455db05dfaa7a01e103347ecdca497 python3-ipalib-4.12.2-1.el9_5.3.noarch.rpm 31caed3d45a1835a859cd329139d46cb6d57435c2fb1fcb03a7c89a7a93b9858 ipa-selinux-4.12.2-1.el9_5.3.noarch.rpm 5587c0a368fbef7db1486151de4eb81aa69b4b6212b9f10718d9d72428b05ceb ipa-client-4.12.2-1.el9_5.3.s390x.rpm 64bbb50fe04540eba34f9c7dcab6e6950ee92c77dc21d2005850b324e9acdbdb ipa-common-4.12.2-1.el9_5.3.noarch.rpm 709622fc964eb74b03436a28c3cf0331b985cbe8289d4c3988ab3c9019181161 ipa-server-common-4.12.2-1.el9_5.3.noarch.rpm 775114f61e02a5ab43c46478cd9120f635814b99a930de57e4005179f8da3b06 ipa-selinux-nfast-4.12.2-1.el9_5.3.noarch.rpm 7a691b13c945753633baba0df8e57a0cc903e8c6e87fbff7283f4302533fa48c ipa-client-common-4.12.2-1.el9_5.3.noarch.rpm 7cda0ebc397d23097db8edded2de102b8aa0939e4e0a704e29be813736222166 python3-ipaclient-4.12.2-1.el9_5.3.noarch.rpm 8e4e5a3b7093d943035afa26a83a3f157858b24ac79be92b42e0cf06c8dd7049 ipa-client-epn-4.12.2-1.el9_5.3.s390x.rpm a7270923755afbcea64d4c87b786c34d4a5e211cb52d8fbaaefa1456b004f1a3 ipa-selinux-luna-4.12.2-1.el9_5.3.noarch.rpm a81175f6b1ce8e510292f1ff146ecbdc32013c89153f47d0d9e4528658a3b7aa ipa-server-trust-ad-4.12.2-1.el9_5.3.s390x.rpm acc5df01f05e46c43ef5c9a5e595d9c60e0772d102caaa28f16f3079479b7bc0 ipa-client-samba-4.12.2-1.el9_5.3.s390x.rpm aeb5c740216cd644c1ae06668e5dc1aa51e5a928e6e9ddd9fa0c6dab72402d43 ALSA-2025:0377 Copyright 2025 AlmaLinux OS 0 1 Moderate

Security and bug fixes for NetworkManager

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security and bug fix(es): * Routes in table different to main are not deleted on reapply [almalinux-9.5.z] (JIRA:AlmaLinux-73013) * Route to VPN server not stored in routing table that is specified by ipv4.route-table [almalinux-9.5.z] (JIRA:AlmaLinux-73166) * VPN connections do not support ipv4.routing-rules settings [almalinux-9.5.z] (JIRA:AlmaLinux-73167) * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic [almalinux-9.5.z] (JIRA:AlmaLinux-64726) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default NetworkManager-ppp-1.48.10-5.el9_5.s390x.rpm 49ea0c14b20dda32090cb70550f7efdfda108b61d92c468da6357ed7e1cf655f NetworkManager-config-connectivity-redhat-1.48.10-5.el9_5.noarch.rpm 6e63c112ece5fa58a595b67bafb290d2b87302e2c366e4ac2a9b00e0ba9e6dd4 NetworkManager-cloud-setup-1.48.10-5.el9_5.s390x.rpm a48a5919cac7c398aeee779d59812df463be0886fbafce29e34fd00efc5c5e18 NetworkManager-ovs-1.48.10-5.el9_5.s390x.rpm cad8b1a761c91663cdaea01b855814b8390fe2e6f890fa6d97ea68fefb41e314 NetworkManager-dispatcher-routing-rules-1.48.10-5.el9_5.noarch.rpm ef852f8942e70d6500ff1a7c938b943c2c89f20b74b1a2341ced64f0ac0af73f ALSA-2025:0422 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance array handling (CVE-2025-21502) Bug Fix(es): * The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. With this update, the JDK has been updated to use the latest version of copy-jdk-configs, which has been used for some years on later AlmaLinux versions (AlmaLinux-73867, AlmaLinux-73871, AlmaLinux-73872). For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default java-17-openjdk-static-libs-17.0.14.0.7-2.el9.alma.1.s390x.rpm 40f9f5c0c452c9366b17e3923ac71894d19f058f426e08c048fd727b5053dcdb java-17-openjdk-headless-17.0.14.0.7-2.el9.alma.1.s390x.rpm 436eb66eac56ddf5dbdcb5cae759a745236b797c3fc333ce8736ab688181e553 java-17-openjdk-jmods-17.0.14.0.7-2.el9.alma.1.s390x.rpm 539d66c39d7b5435d7cef16546b8e0335b9ea7e76b063ceca30aa82044320170 java-17-openjdk-src-17.0.14.0.7-2.el9.alma.1.s390x.rpm 54407f7d54fe002dfc4956a0f6167200bffc84418ca6665ec78aed56ffdd214e java-17-openjdk-demo-17.0.14.0.7-2.el9.alma.1.s390x.rpm 5dc321712ea20dcb6f9faefdb4ba74255a547a0ba3d8288d7210691239971617 java-17-openjdk-javadoc-zip-17.0.14.0.7-2.el9.alma.1.s390x.rpm 6ef3da16fd1262aaa31dcda500a786465c3428e92f246644fa43f164da99e028 java-17-openjdk-javadoc-17.0.14.0.7-2.el9.alma.1.s390x.rpm 741f91ff578c8ffc72cf37147f944602928684dc12f8871d881fbb7ca193b12c java-17-openjdk-devel-17.0.14.0.7-2.el9.alma.1.s390x.rpm 7ddfbbd959085d8f84c9c93c45f262729667f6c116245458846cc36008d00b74 java-17-openjdk-17.0.14.0.7-2.el9.alma.1.s390x.rpm 8c734f8467c441528f16669a4ea8a7c2b8628b9f66de0dc2d2b3ce9c22a633a2 ALSA-2025:0426 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance array handling (CVE-2025-21502) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default java-21-openjdk-headless-21.0.6.0.7-1.el9.alma.1.s390x.rpm 2be1dccce816bcdf43c64167881c33dcd1811d92ea562d563b8aa98cd969a587 java-21-openjdk-jmods-21.0.6.0.7-1.el9.alma.1.s390x.rpm 41da9253e8c6db100d4dcd5455b63f05861dc3e15d59881154a39cfc8d22869c java-21-openjdk-javadoc-21.0.6.0.7-1.el9.alma.1.s390x.rpm 4ab70a156b6898ee95173f099cc8eff72147045c93e0942950ea7afcbb98289f java-21-openjdk-src-21.0.6.0.7-1.el9.alma.1.s390x.rpm 602dffa86bb42ccb5bb5b99bc371860b9161f321cb912d4da22b1eeed3db4eb3 java-21-openjdk-static-libs-21.0.6.0.7-1.el9.alma.1.s390x.rpm 70dae547f560278af48d6be5adbc6f8b3f1ff8871e916d199102fd6d9ce1acbb java-21-openjdk-javadoc-zip-21.0.6.0.7-1.el9.alma.1.s390x.rpm 9bf1fb792d56a311b3d7809fd910877677f5ddc4d454bcba053a33a7340284f5 java-21-openjdk-devel-21.0.6.0.7-1.el9.alma.1.s390x.rpm a310daf045352787fd416b3ad77fc12107826e71edfb335b6c043b42dd8e02d3 java-21-openjdk-demo-21.0.6.0.7-1.el9.alma.1.s390x.rpm d578aaee7921acb0e1c60f9d02a06ec47818ca436c8c4caccb0f93af04702151 java-21-openjdk-21.0.6.0.7-1.el9.alma.1.s390x.rpm e87a1e1bb55a7b2086c92c1c064cf5edff450e697b3843cca2908e112078a3fe ALSA-2025:0578 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp/dccp: Don&#39;t use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154) * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275) * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default kernel-headers-5.14.0-503.22.1.el9_5.s390x.rpm 317287c1139a17d89978786f9af9b41442141d2f0c3b4a553f607c506c0f7a33 kernel-doc-5.14.0-503.22.1.el9_5.noarch.rpm 72d58663689b22e51a687cf535db90e40296a9b08001ac98e9c2de25f4f005c3 kernel-zfcpdump-devel-matched-5.14.0-503.22.1.el9_5.s390x.rpm 871b42fc37f87ca757f1c512248b2d6ad928959cd6a59fcaa238c166218ccf1a rtla-5.14.0-503.22.1.el9_5.s390x.rpm a114fe1764d9c43fcf27a453cc9726edfd373ee8d0d3b4d1fc70c24ee61d60af kernel-zfcpdump-devel-5.14.0-503.22.1.el9_5.s390x.rpm a5b063354fdb25a4a4ae64d0268182a20840559e779db4e58dbdb4576439e0e3 kernel-devel-matched-5.14.0-503.22.1.el9_5.s390x.rpm ac4099972d8beb7f898f44476fbc9f94308cb64eb83edcee2785a253f95328c5 rv-5.14.0-503.22.1.el9_5.s390x.rpm ccb06aa2878babe6e57e67ddf2ede4d20d65d73e3d2ae46ad026163d129ffa9f kernel-debug-devel-5.14.0-503.22.1.el9_5.s390x.rpm d8f2f0d8be572a95be12775ae49b382b0ee4d44ce0da13b519524f15154e4829 kernel-devel-5.14.0-503.22.1.el9_5.s390x.rpm e65b0078a61cf052ee860aa9c12ad5ff4d4ea7b8ee35886674828fcb6de51cef perf-5.14.0-503.22.1.el9_5.s390x.rpm e84b39eedf2608b38b6f188a1b64989eaa81908e639b754492b158dcc95a9735 kernel-debug-devel-matched-5.14.0-503.22.1.el9_5.s390x.rpm f010d81ff053429b5a204d05e0439e9314603418fd4ea62eaa4ffa3301324443 ALSA-2025:0667 Copyright 2025 AlmaLinux OS 0 1 Important

python-jinja2 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3-jinja2-2.11.3-7.el9_5.noarch.rpm b37b28e722e1a428ce39b57bf09f41fe44038131bc485aa035e29d46da13d10c ALSA-2025:0673 Copyright 2025 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs (CVE-2024-53263) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default git-lfs-3.4.1-4.el9_5.s390x.rpm c622a750909e25dc8534945fbc8004f7cefe5a3a05e51988d0d9efc88996536a ALSA-2025:0692 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981) * redis: Redis allows denial-of-service due to malformed ACL selectors (CVE-2024-51741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default redis-devel-7.2.7-1.module_el9.5.0+134+2e645600.s390x.rpm c7ed486965df1215a397a78991007448f5c5a67b49ac483c151c3bff9ad64668 redis-doc-7.2.7-1.module_el9.5.0+134+2e645600.noarch.rpm dd018d1e2402c528d76eb3d758ae78dcb70dff64ee95736a6dbeba53008d990e redis-7.2.7-1.module_el9.5.0+134+2e645600.s390x.rpm e5ad09c76694b7dd8bc78c8b0eb4c59f72067cfa89f8ea21d4aa1f037b90b2a5 ALSA-2025:0693 Copyright 2025 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834) * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145) * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449) * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228) * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default redis-doc-6.2.17-1.el9_5.noarch.rpm 54c3cc22155c670b53674226da0b9dfa7cb677202584e77e691154b3c4c9c697 redis-devel-6.2.17-1.el9_5.s390x.rpm 82d3e8639efe4036c70e10fc1e4ecbd5fcdd55351eadcbfcd8d0625ea29dc83f redis-6.2.17-1.el9_5.s390x.rpm 8961213bb15d278bb5c1d30256c8d3dfe22a4fc2cbdb6fbecd97e93ae676f6e8 ALSA-2025:0791 Copyright 2025 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (CVE-2024-52531) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default libsoup-devel-2.72.0-8.el9_5.3.s390x.rpm cfb7a325c4463e1d12955eabb1e18c8c2919371a9c276aa40e368b7e213aba96 libsoup-2.72.0-8.el9_5.3.s390x.rpm fbf897159cc8ea83048f78653b7f66cfde475519be2192710f926e42b8b97951 ALSA-2025:0912 Copyright 2025 AlmaLinux OS 0 1 Moderate

mariadb:10.11 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default mariadb-oqgraph-engine-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm 191865772221855b46e07f867f060e6ef09310fedfcacee2863a9103f2e03780 mariadb-server-utils-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm 35a2bf2d5716a9725b4fba56fa4185da85a24c2f2c336fb5d440d176ae46dcca mariadb-embedded-devel-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm 53eb083c382453a2f566ae443cecda09819214be29329616bb09a188b6b28ef8 mariadb-common-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm 74cad325f542053af483f3b375cbe3de776a949e0ad2643e741aeee1091c6dd3 mariadb-backup-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm 795502695a157c93526352cf71d8fed06ff21516c21f7f0b0258a8f032225b82 mariadb-server-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm 84ef0e376cbf9358cda55d14733fbb972d618283a1d22ef7b1f8244470056dd0 mariadb-pam-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm 9cf35b04d85774c0825e8b12e5df3b58bd938cffb0199fbd1a50c888467b8b4c galera-26.4.20-1.module_el9.5.0+135+c9657a87.s390x.rpm b1736be01bc8575b37793302af46791604d60ec5c5eb0f7a3320a2d92b27eef4 mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm b4669501dc3421e045d85ebea42019e10641b417eb00c24bc9f3a91de6e5130d mariadb-gssapi-server-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm b869bc4dc03e83a97fcaea13da13de385ea5587e519453dd31e87c4277d3b765 mariadb-server-galera-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm c29d70c8875a6c26a1257ef76eea214b5bb69261f3ce8166c5b823a2780f7e13 mariadb-embedded-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm e47e453cc9ef04b7f877db71ce5f7096f55fe92e05e9b2d3a374f157ced103cc mariadb-errmsg-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm ec5b5a2d463622b709c9811f9a78b09c0a8928f37025e1f349ef02ab1f681d81 mariadb-devel-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm f638ab6ed7655f83e3000add291302404bc9b9fbc801deb25527998e5d82e42b mariadb-test-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm f6d56a1651c42919fbeb21b20fe436f6c3fdb96ffeb4dfd1ae98b060b7047ff5 ALSA-2025:0914 Copyright 2025 AlmaLinux OS 0 1 Moderate

galera and mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22084) * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default mariadb-backup-10.5.27-1.el9_5.s390x.rpm 1c8bac26d24149871bd237d5244de2f234964bedc1c60c397098299c2aaf1c58 mariadb-server-10.5.27-1.el9_5.s390x.rpm 2ecbd5d9b5e8afc4245fa08b73dbf6f6854d396129d91599841b528f04fe26d3 mariadb-pam-10.5.27-1.el9_5.s390x.rpm 757cbfa300402d529d1c44131a6d06a9091aea80ecdd1c28412ea29ea83c73bc mariadb-server-utils-10.5.27-1.el9_5.s390x.rpm 818115f5b1e16d162bacf49eec75b20bab11804477fecac7ca072016064fb27f mariadb-common-10.5.27-1.el9_5.s390x.rpm 887f53d527a0b84da98f1b6e739e5518472d5ccee99e785074b36af04f7824a9 mariadb-server-galera-10.5.27-1.el9_5.s390x.rpm bf3941b74cfa05d6a3e8f6f7dea770ad11cb38e9935d093911d9c9489c062065 mariadb-gssapi-server-10.5.27-1.el9_5.s390x.rpm bfe019833b2062daba3f08ab2446e11d7e06bb25c0a32e1500eb9a47777c1da7 mariadb-10.5.27-1.el9_5.s390x.rpm c27b4f63202156a9190171b91b2fcb1d394c70b1e36624f6d9be7f64d07ab0f8 mariadb-oqgraph-engine-10.5.27-1.el9_5.s390x.rpm d254504e11b2ca3e5692e66acab6f3ebdabd04d881542eeb108d9de45d9d5edf mariadb-errmsg-10.5.27-1.el9_5.s390x.rpm dfff0b2303341a3c2f3992a2893682353f66a0dd4ca547fcedc6e6b87d55dc8b mariadb-embedded-10.5.27-1.el9_5.s390x.rpm e58a9a4f137b198cebb2fca0867bc0a66c811993181ad60f755515dcba34cf60 galera-26.4.20-1.el9_5.s390x.rpm f752780de8c1e2447b93b22982d39fe26afd151cac0496613e785182ebc11cef ALSA-2025:0917 Copyright 2025 AlmaLinux OS 0 1 Moderate

keepalived security update

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover. Security Fix(es): * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default keepalived-2.2.8-4.el9_5.s390x.rpm 3978775733cbf7fc862d7c032962b6186100508f2da34b0cdb8ee4004a44da1f ALSA-2025:0922 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default podman-plugins-5.2.2-13.el9_5.s390x.rpm 10b39827a2a55e7df995d2545b9762ccfb8a2c0feecba657b49afaa2c089217b podman-tests-5.2.2-13.el9_5.s390x.rpm 52b87df2898f688756f3e3720d2e1e8ba24657482279fa13bc21bc9a87f163bc podman-docker-5.2.2-13.el9_5.noarch.rpm 5b8984a1cf0fae4c9dfac351e806e9e7eba479071338040c0c06325b5f8806b2 podman-remote-5.2.2-13.el9_5.s390x.rpm 98e339d00c0fbcf7977b413d658ab57c5eefc19731d1823246f3faf7de60eb8e podman-5.2.2-13.el9_5.s390x.rpm f2391a028d17cfb532681752bb77a2f23fcb3393c126a358516c5ccf38afa6c4 ALSA-2025:0923 Copyright 2025 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default buildah-tests-1.37.6-1.el9_5.s390x.rpm 3ce5680adef259346398671110de7238e62882f8cf85ee4fc8c3751664a5db54 buildah-1.37.6-1.el9_5.s390x.rpm 81f53acabfb0834da12045268be4fb9b58fea6a34461cfb8ace3739e091e0c3f ALSA-2025:0925 Copyright 2025 AlmaLinux OS 0 1 Moderate

bzip2 security update

The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs. Security Fix(es): * bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default bzip2-devel-1.0.8-10.el9_5.s390x.rpm 9fceeba9a900639d91c143734d620427c3e6a8be8fde78f30d8ab33bcc35203e ALSA-2025:10072 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430) * firefox: Use-after-free in FontFaceSet (CVE-2025-6424) * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429) * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default firefox-128.12.0-1.el9_6.alma.1.s390x.rpm 392dc605a98545786b14657b0dff48d27c2b239be36da9e848c47ca137090179 firefox-x11-128.12.0-1.el9_6.alma.1.s390x.rpm 5dded53a5b816b07a05c21113e3d456657401c0721c8e9cab2136722335bf881 ALSA-2025:10136 Copyright 2025 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435) * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718) * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330) * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517) * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-devel-3.9.21-2.el9_6.1.s390x.rpm 565432d78077b4da72be0187f1f1fbf6d35d24e9e9801e16f7a03b76d3dde65f python-unversioned-command-3.9.21-2.el9_6.1.noarch.rpm 769cfb1ddce8092618f63df000696505fa07ed2aa1dd748a4db8cf0be4e009bf python3-tkinter-3.9.21-2.el9_6.1.s390x.rpm 7c9d788bf9020a515b661c35e6f9a9dea7510506f053868eacde29e9a1f76049 ALSA-2025:10148 Copyright 2025 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435) * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718) * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330) * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517) * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.11-3.11.11-2.el9_6.1.s390x.rpm 064417e1c0dcb05f319f95cce8a5206c9ff1b53b5c079f3e114460aac096663a python3.11-devel-3.11.11-2.el9_6.1.s390x.rpm 536c4eeed98a74a58a9d866bc80cc0cad2573fdaa896eed077b7f3415758ca22 python3.11-tkinter-3.11.11-2.el9_6.1.s390x.rpm 90863a5715233dbe997f43e5c1bace17198ff3884067ca94ab70c447cfed5def python3.11-libs-3.11.11-2.el9_6.1.s390x.rpm a4ace617fa65f4aaa5a4bbcf558ad45a44fbe02faddd67ab8f6d5e10bc2c5a5b ALSA-2025:10189 Copyright 2025 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435) * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718) * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330) * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517) * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.12-devel-3.12.9-1.el9_6.1.s390x.rpm 4d261ecdd14c3624ad89c711237ce4fa731778e68939b8549bbf0b10b348c5e9 python3.12-libs-3.12.9-1.el9_6.1.s390x.rpm adf6d0c81a5c74f25cdbffec82d1740b8571b3aa83d250cef1f4498c6c237730 python3.12-tkinter-3.12.9-1.el9_6.1.s390x.rpm cb669b5ef2b393d63d813b594c2395e50652746a0794c5cb9b0e281804d8fa48 python3.12-3.12.9-1.el9_6.1.s390x.rpm f48090b8c020fa63bc1d8f1e666aeee3727f4bb4a8f19f7ceadc6f24cee342ae ALSA-2025:10196 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default thunderbird-128.12.0-1.el9_6.alma.1.s390x.rpm 79f1986010950de1108ddfceb6b1a2ca4fe4b5f8c1f67554dd8e430f36cedfc4 ALSA-2025:10353 Copyright 2025 AlmaLinux OS 0 1 Moderate

socat security update

The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets. Security Fix(es): * socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default socat-1.7.4.1-6.el9_6.1.s390x.rpm ca8a731dff8975dc3eadc783a45f0d2d94be1ae5fdae7ee5194783fff6e6dceb ALSA-2025:10379 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759) * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887) * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004) * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846) * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-debug-devel-5.14.0-570.25.1.el9_6.s390x.rpm 0b7337f00e651aebef5627a322a1697e167fcf9bbdf780e82b83705b35d34905 kernel-devel-matched-5.14.0-570.25.1.el9_6.s390x.rpm 0c23e1e943b6ec3321b61726d022f236bcc6e178d23a3a3956dc37121e919a6f kernel-zfcpdump-devel-matched-5.14.0-570.25.1.el9_6.s390x.rpm 22d10c7298bb7a2354756865516c200e4eeec15441a6fd566715013e0dbaaf06 kernel-doc-5.14.0-570.25.1.el9_6.noarch.rpm 355e813d6ceb31e26d92033e46cfb0f85dc3b764bde10d8ab903f3c77eab2b4d python3-perf-5.14.0-570.25.1.el9_6.s390x.rpm 747c849ca1a369eb205c9b4b87702b1b3d58c097939c5cbf70b1fdaea0e8d3e9 kernel-zfcpdump-devel-5.14.0-570.25.1.el9_6.s390x.rpm 7c1c9f8d27507ded76360ceb51778dd5b09bdc39560a7172a7e5dda1eff92dae kernel-devel-5.14.0-570.25.1.el9_6.s390x.rpm 948761331ec42e6c24b20e16daf8c9acc77c32d94aa3c810c335145bf4ddafcd rv-5.14.0-570.25.1.el9_6.s390x.rpm b5c5e7f7677a65a0f6b251ed9f83c244171896cb63582dc2bca00fefbc8b97a7 perf-5.14.0-570.25.1.el9_6.s390x.rpm bdd5737f51bf04e18ecafec88d25e630c782078d6466969730c60cc15328c443 rtla-5.14.0-570.25.1.el9_6.s390x.rpm d86a4196cf01d4e2762768741b23679aa8e656342d2d94a66c57416fd17eb95b kernel-debug-devel-matched-5.14.0-570.25.1.el9_6.s390x.rpm e421d5d4968a6695da7468b1565ab55cf3aa335d1eba799b9a1f82e15169ac4d kernel-headers-5.14.0-570.25.1.el9_6.s390x.rpm e6bd74d84b79d4f351fa10c46b03ea48dfc9a51c8536dff1c1504dc96ee8e3f1 ALSA-2025:10550 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: podman missing TLS verification (CVE-2025-6032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default podman-plugins-5.4.0-12.el9_6.s390x.rpm 0371cc7d9531e2784031490a6458f212a8ad7f7c37896c497221ac5a71aaa18a podman-tests-5.4.0-12.el9_6.s390x.rpm 22ccde65930884026f170592654d79c9163e20540e7f7e2e28d873cdc564d851 podman-remote-5.4.0-12.el9_6.s390x.rpm 7e16ad31a2b8ee3255f430cf6a62479b7191f43db1632ed3e255efadf5c89fd9 podman-5.4.0-12.el9_6.s390x.rpm 9a8566c26f92316a2d778567ba152d57661c94136ebcd029ac06b951fa3f49b0 podman-docker-5.4.0-12.el9_6.noarch.rpm e02696db3aab6a7d91efeba519de931041386602af04f62b8cbc0b72adda96f9 ALSA-2025:10631 Copyright 2025 AlmaLinux OS 0 1 Moderate

gnome-remote-desktop security update

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gnome-remote-desktop-40.0-11.el9_6.s390x.rpm 331bc0fbe7f7aac305ac0755e0de846af30fd5be644e346121ae5347f484f6c0 ALSA-2025:1066 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017) * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010) * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016) * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013) * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011) * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009) * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014) * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default firefox-x11-128.7.0-1.el9_5.s390x.rpm 0d96e872b1780af49b9374f588b734903ec48d96b4edc2312f11cb944fccfe45 firefox-128.7.0-1.el9_5.s390x.rpm 68e8ddb1d61413bcbf557ca735190ccf27d82c037004c6807e042bb659053d09 ALSA-2025:10676 Copyright 2025 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default golang-misc-1.24.4-1.el9_6.noarch.rpm 39bded93e51b1eab3a048663974373172565d4d24477f46d808c3a05309bb9a6 golang-1.24.4-1.el9_6.s390x.rpm 4504027693cb4c99d7996739d522198e0a361e78e0819606a1ae116f1f502cfe golang-race-1.24.4-1.el9_6.s390x.rpm 8aaaf87f9ac7a1b286f5de2f825ded3fac99d865675e63265ad8d2b0d30a7a38 golang-docs-1.24.4-1.el9_6.noarch.rpm a1c1ebd61db1c0dd854eb3d18dde55855fb0be1a8054509a0fb502433e5fc783 golang-tests-1.24.4-1.el9_6.noarch.rpm bef4424522b28367f82728a1006a4d0e15dae1f31ee4a55d64eb69398f0354b5 golang-bin-1.24.4-1.el9_6.s390x.rpm defeebf456efa6f1845c5a77be487cbd4e80940cfa3a0bad34116ecce2684ec2 go-toolset-1.24.4-1.el9_6.s390x.rpm eb307255c4a02404b3ba8b2d68fe5bf1b59ac4843a178b0f18a4dbb21aeb1983 golang-src-1.24.4-1.el9_6.noarch.rpm ff534786c4c7f9770db6ed0667783c231f44215708f37f8e84d3c4eaf05dad74 ALSA-2025:10699 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794) * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796) * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libxml2-devel-2.9.13-10.el9_6.s390x.rpm 96f66528bffd2c802c69ee809a5ffa15e096a8418bf67f1e412a112df0bb801d ALSA-2025:10837 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-perf-5.14.0-570.26.1.el9_6.s390x.rpm 0b45fee227744d5238d732311fb4abcad7b14010f83f9d013b567fece2ecb267 kernel-doc-5.14.0-570.26.1.el9_6.noarch.rpm 1cd51f675f76af7972b2ab02fcdf47e3c0bd338425841b0f850560f53a33d100 rv-5.14.0-570.26.1.el9_6.s390x.rpm 3e690e79d37d11c40bc4a3db9090c57ce5d71b88fa4d14d367490a551693f4bd perf-5.14.0-570.26.1.el9_6.s390x.rpm 4ff3333aeca156516c8c91c2c6abd8bd076b7e3432e53605b0437b0f2294f22a kernel-zfcpdump-devel-matched-5.14.0-570.26.1.el9_6.s390x.rpm 624275404bd90cae0383456e3ae98de7a8f71bf6c16c1d8be252bb9f5c05f1bf kernel-zfcpdump-devel-5.14.0-570.26.1.el9_6.s390x.rpm 72f5536aa6546888861afcfea5202a98ec0ccdee9d3a3861be04cacd2fcf3dde rtla-5.14.0-570.26.1.el9_6.s390x.rpm 855e793399a1723d15f699d832e2320e080ae78dd49c7120c867c71bfe2f9bda kernel-debug-devel-matched-5.14.0-570.26.1.el9_6.s390x.rpm 8c499fb1bb4602c1e7a46eb7248cae7c6c64e502ef151f0d153cd8ee56654d82 kernel-headers-5.14.0-570.26.1.el9_6.s390x.rpm de464747435a2b62e695cd1d3dfc955e02e1920a62d0aa3b2add780d002d7fb4 kernel-debug-devel-5.14.0-570.26.1.el9_6.s390x.rpm df344d57eb25b99ba4186dec0d295aa537c35e8d27cbd6d04f6601341d2539c3 kernel-devel-matched-5.14.0-570.26.1.el9_6.s390x.rpm e97d39de06fdc9b0822a44654bd8dd036171e993812e8a0ae47dca3384a80160 kernel-devel-5.14.0-570.26.1.el9_6.s390x.rpm ff520e823dee496be0af3a3512ec4ffd195b9bb81efa38d766c669159997492c ALSA-2025:10848 Copyright 2025 AlmaLinux OS 0 1 Important

cloud-init security update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Security Fix(es): * cloud-init: Cloud init permissions flaw (CVE-2024-6174) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default cloud-init-24.4-4.el9_6.3.alma.1.noarch.rpm 9d46e891e1c012191d100c9ed99c5e56c9a4c74b0e8bf51cfb2e51597e27a694 ALSA-2025:10862 Copyright 2025 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Better Glyph drawing (CVE-2025-30749) * JDK: Enhance TLS protocol support (CVE-2025-30754) * JDK: Improve scripting supports (CVE-2025-30761) * JDK: Better Glyph drawing redux (CVE-2025-50106) Bug Fix(es): * On certain system configurations where the IPv4 stack was preferred over IPv6 (either due to -Djava.net.preferIPv4Stack=true being specified or no IPv6 interfaces being present), the method java.net.InetAddress.getLocalHost().getHostName() would return the fully qualified hostname instead of the short hostname. This behavior was only ever intended for Solaris systems and it deviated from the method's behavior for IPv6 interfaces. In this release, the method will return the short hostname on all interfaces. (AlmaLinux-102904, AlmaLinux-102905, AlmaLinux-102906, AlmaLinux-102907, AlmaLinux-102908, AlmaLinux-102909, AlmaLinux-102910, AlmaLinux-102911, AlmaLinux-102912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default java-1.8.0-openjdk-devel-1.8.0.462.b08-3.el9.s390x.rpm 16495ac9524dcd818230b452e97db1fee836f4d7cd37283bb66f1415e92c8cec java-1.8.0-openjdk-src-1.8.0.462.b08-3.el9.s390x.rpm 3d0301ea5ab2b9afbb1b1d61093826f5ba7c8b5c058a1d7019912eddcb63b1e3 java-1.8.0-openjdk-demo-1.8.0.462.b08-3.el9.s390x.rpm 4c1e9237d204fe88db7a52670979a2d852c761299df5c8b63954448910345da6 java-1.8.0-openjdk-javadoc-zip-1.8.0.462.b08-3.el9.noarch.rpm 5330baf86f2300516ddf69f4d5436937dbf9b81c14ffd67624fd0dbf9f4dbdcc java-1.8.0-openjdk-headless-1.8.0.462.b08-3.el9.s390x.rpm 585e084d5b7e0479179a04e02b5e9929951bcdc2dd9e2e7ee3b68708fd1ca037 java-1.8.0-openjdk-1.8.0.462.b08-3.el9.s390x.rpm 5f1890daa60fbc2d91eea5b14b52956544d812ee713663267b9a2f8c937879e2 java-1.8.0-openjdk-javadoc-1.8.0.462.b08-3.el9.noarch.rpm 785c4c8a84cad05fbb69c19031341c5255a0525009775028d1d9c7dc85861f94 ALSA-2025:10867 Copyright 2025 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Better Glyph drawing (CVE-2025-30749) * JDK: Enhance TLS protocol support (CVE-2025-30754) * JDK: Improve HTTP client header handling (CVE-2025-50059) * JDK: Better Glyph drawing redux (CVE-2025-50106) Bug Fix(es): * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default java-17-openjdk-headless-17.0.16.0.8-2.el9.alma.1.s390x.rpm 1791ca4182ef7a31789dd2c0c3c09d5710c92d63d97c5bbc8758c9a27f5d081f java-17-openjdk-src-17.0.16.0.8-2.el9.alma.1.s390x.rpm 2732cb7084bb43c1d51ae91c3c3aa708261b1323f854fddbe62e897d5eabc1c9 java-17-openjdk-static-libs-17.0.16.0.8-2.el9.alma.1.s390x.rpm 5e68e6ef1d31a2ac2e0e6a0c667329c5629afb7cb9f30fd9f154a2bd27e81ff3 java-17-openjdk-javadoc-17.0.16.0.8-2.el9.alma.1.s390x.rpm 77a2dcfdaf8020c01b0190ca7bd8e4a30c1bacaa94c72a806e6c407540108539 java-17-openjdk-demo-17.0.16.0.8-2.el9.alma.1.s390x.rpm 94dc16cbee9ed9365ca522b6471db3ff09cf5fc9656ca512e92037361ed3e41b java-17-openjdk-devel-17.0.16.0.8-2.el9.alma.1.s390x.rpm 9f76a88cff7047aa3a7bdc91825b871ed0c2a35aedda49f3814ba3a7344c73b0 java-17-openjdk-javadoc-zip-17.0.16.0.8-2.el9.alma.1.s390x.rpm a1d7c4db9d62bf0f99b9f24d9bdf1e5a80532210a82f9e07a29f73659ebc1747 java-17-openjdk-17.0.16.0.8-2.el9.alma.1.s390x.rpm b251911166dc74e67a7ebcfeb921344ec1817ace99e1bebaea1d37fc210c9a10 java-17-openjdk-jmods-17.0.16.0.8-2.el9.alma.1.s390x.rpm d90766c869c21cb920bf1f8a630429c4b41b3db1b66add24822a85c6b8ccb564 ALSA-2025:10873 Copyright 2025 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Better Glyph drawing (CVE-2025-30749) * JDK: Enhance TLS protocol support (CVE-2025-30754) * JDK: Improve HTTP client header handling (CVE-2025-50059) * JDK: Better Glyph drawing redux (CVE-2025-50106) Bug Fix(es): * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102683, AlmaLinux-102684, AlmaLinux-102685) * On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (AlmaLinux-90307, AlmaLinux-90308, AlmaLinux-90311) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default java-21-openjdk-21.0.8.0.9-1.el9.alma.1.s390x.rpm 4f1b8c5c0851e1b117fc8e4082c316f4295f26f0c42f1b5a5337f77622d78450 java-21-openjdk-jmods-21.0.8.0.9-1.el9.alma.1.s390x.rpm 6eca19f3eed3f472bf63589dce9bdad071398949e9b1d77c733003fcfc2ccde6 java-21-openjdk-headless-21.0.8.0.9-1.el9.alma.1.s390x.rpm 7aa77e2683eb506269bd1668fe004ca9ab45d9563a890c2e52504fd386dbaeda java-21-openjdk-demo-21.0.8.0.9-1.el9.alma.1.s390x.rpm 96f4fb98cc6ac4c6e5b7077dd689b580baaf55bb72c3b52fcd880a2cadb48e43 java-21-openjdk-devel-21.0.8.0.9-1.el9.alma.1.s390x.rpm c2bfdda5f2ea1faeac9309f01a37c5669d6c767fcbcd1d7c2f97e9d903b681dd java-21-openjdk-static-libs-21.0.8.0.9-1.el9.alma.1.s390x.rpm c925ca6f68f12ba26c5d5310a49da614b2158b273151d811d0fb177b32e6071e java-21-openjdk-javadoc-zip-21.0.8.0.9-1.el9.alma.1.s390x.rpm d61ac89e421fb8975534c4582db37abe28ddba79041d37ba74ade13e815abd5f java-21-openjdk-javadoc-21.0.8.0.9-1.el9.alma.1.s390x.rpm e1f75a5ebb6686c42085ee617e72eaf2fbffb77a66977146614fd347774451ea java-21-openjdk-src-21.0.8.0.9-1.el9.alma.1.s390x.rpm f336fe85b3f51492a233282751b25e1f36adfe9e6e8d86f9b414f98b300acd78 ALSA-2025:11140 Copyright 2025 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: buffer overflow in set_connect_msg() (CVE-2024-52533) * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default glib2-doc-2.68.4-16.el9_6.2.noarch.rpm 310b01475b36a88db15ac012b0c7a14760bc4e0c89395fd289bad27ebcae45a2 glib2-devel-2.68.4-16.el9_6.2.s390x.rpm 63dc54f7083353224744ffba397d730acd0b0fc94b6440a4785bb6ae26f13757 glib2-tests-2.68.4-16.el9_6.2.s390x.rpm 8cf47ba36afe3ab2482bedc923d6967d2b29326f68215028eab3fe35be465843 ALSA-2025:11335 Copyright 2025 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) * tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default tomcat-webapps-9.0.87-3.el9_6.1.noarch.rpm 281eef4bd6b16bf6eb470f47c3970df8c4a2836d3028e30a580a65e7ada60137 tomcat-servlet-4.0-api-9.0.87-3.el9_6.1.noarch.rpm 2f77795bdd90d1fe412da61d5569c0c6f4df28efef4d1a2e1df4d05b88203261 tomcat-9.0.87-3.el9_6.1.noarch.rpm 3f28b0bffd962832563895e539c63bd5f74e5b356793560472765017e3fcdc39 tomcat-docs-webapp-9.0.87-3.el9_6.1.noarch.rpm 43a12fc223d779273ea81e84f3222d95e201277edbabd0e096a865b2469e2fb5 tomcat-lib-9.0.87-3.el9_6.1.noarch.rpm 76af4613615060c07f2c5cba8447fb39aff4c16a6b29d9f1ed2e7159bbf35b51 tomcat-el-3.0-api-9.0.87-3.el9_6.1.noarch.rpm 76ebae4b3642bcd9d070c0622225bb74d863fb10967e6c30cce72588ef0b8a43 tomcat-jsp-2.3-api-9.0.87-3.el9_6.1.noarch.rpm a00f3033de27158d1def3b40024da89c33fbffbecaba33be74116fa2c8639890 tomcat-admin-webapps-9.0.87-3.el9_6.1.noarch.rpm c54248bc0df878433b36160be3be0e55b285dae90d13ce1a812815b56cc512af ALSA-2025:11411 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002) * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-devel-matched-5.14.0-570.28.1.el9_6.s390x.rpm 10721b1ae633cba3f82ad89e03f1b803632b4002bc3dcc60d945ea29758fb720 python3-perf-5.14.0-570.28.1.el9_6.s390x.rpm 2250a0dafdbde4c99a783e0ca316da365d34e024bc0f81872899508a9f140d33 kernel-headers-5.14.0-570.28.1.el9_6.s390x.rpm 2f036e07f3d6eda7a2e9d77f31281d6a91812f01ee0d18cd0fb8a12dc273a743 kernel-debug-devel-5.14.0-570.28.1.el9_6.s390x.rpm 652c3da4e030a12df6cbaa179b5e4414bdbfad760ef03b8339e00f624856ae86 rtla-5.14.0-570.28.1.el9_6.s390x.rpm 8817a0d45eb58635eb1d3716cf380452dabc47b4562ffd71e6d5896df64362fd kernel-devel-5.14.0-570.28.1.el9_6.s390x.rpm 888d6f7a7f039d40f9851affd9f3e5cdde2b0a16f233f77f50f574f73a66ff48 rv-5.14.0-570.28.1.el9_6.s390x.rpm 935ede4a1aa28a836d26ed678f7222ef1697508b3b2afaeb2e6d4d97060c0ffb kernel-doc-5.14.0-570.28.1.el9_6.noarch.rpm b58903c7edfc03844df37ad954767a2d2b330556855dbe3f07bcb28ef2b74963 kernel-zfcpdump-devel-matched-5.14.0-570.28.1.el9_6.s390x.rpm d515a3d55415ac03ce34a447b251f7ec192fe8a3114a7a5ee7931519d9d68b29 kernel-debug-devel-matched-5.14.0-570.28.1.el9_6.s390x.rpm e3dfe7951692d6513f57ac4961b29cedd9bdefc3e50e8e66eea4a877418a61aa kernel-zfcpdump-devel-5.14.0-570.28.1.el9_6.s390x.rpm e480f2d92981f4c92aaf5206b20441fd5e652f8a9d6d20daf75e02499d5ebec6 perf-5.14.0-570.28.1.el9_6.s390x.rpm f8534c7baca82363d6aec286a4735dc6ff34da33ea99c0ffd8dbd4fae8ee5954 ALSA-2025:11462 Copyright 2025 AlmaLinux OS 0 1 Important

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: Git does not sanitize URLs when asking for credentials interactively (CVE-2024-50349) * git: Newline confusion in credential helpers can lead to credential exfiltration in git (CVE-2024-52006) * git: Git arbitrary code execution (CVE-2025-48384) * git: Git arbitrary file writes (CVE-2025-48385) * gitk: Git file creation flaw (CVE-2025-27613) * gitk: git script execution flaw (CVE-2025-27614) * git: Git GUI can create and overwrite files for which the user has write permission (CVE-2025-46835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default git-svn-2.47.3-1.el9_6.noarch.rpm 039c7428d046d2a93f8b541a1a012e23190a028df8a2ed48f3974503c2c8ab88 git-credential-libsecret-2.47.3-1.el9_6.s390x.rpm 062b01f8cce706df09c2f69efd2343151a7765ce33ad192d3edc9d4ce3689540 git-core-doc-2.47.3-1.el9_6.noarch.rpm 154f29b0e1dfbf2a77b8ba0bad45a4ddfffae7a34ecb2154dc7afe811ffd9194 git-email-2.47.3-1.el9_6.noarch.rpm 296d6134e3e0fcb08684a5a0c5ff8f37da7dfc3929e97ba7972347b8b75ef7cd git-daemon-2.47.3-1.el9_6.s390x.rpm 59289fd59c70cbc22024ba4953434da17cf2b40d8ae60194ad7bcd3c8d7acb77 git-core-2.47.3-1.el9_6.s390x.rpm 5cf9ac7f09cf7a97bf7b1d0645aed8de4e4fd244f40f43226e5fdbfa97fd8ee8 git-2.47.3-1.el9_6.s390x.rpm 5e65de7000c8003ec8fcf4eaa4627c87a070283e12d609888492a9645681a25b perl-Git-SVN-2.47.3-1.el9_6.noarch.rpm 6260e2162ff7971a9214ef11ee0604619036b34a824ad49aaa454b02628ea6b3 gitweb-2.47.3-1.el9_6.noarch.rpm 643b62eeb3e2ab909065bdcd816b6773f748d4caa8b355a2c6195bfcfb5a0bf8 perl-Git-2.47.3-1.el9_6.noarch.rpm 7bb360063a9bc96c44b1293282e549051313b8095997e106947e61d4368a49b8 git-subtree-2.47.3-1.el9_6.s390x.rpm 9901c330ef8281cfe837e19f5c8ac9fb10f722b66d88a649669e0ba6ee75cd8f git-gui-2.47.3-1.el9_6.noarch.rpm 9e8a0552cee383c9d37569bb221744a12672fa0e534a8477c240027c5ff156ef gitk-2.47.3-1.el9_6.noarch.rpm a4155777242e30a1f4da9e3fc2b2d18887f9ddb5c33b93ece8f3ee16d86245ef git-all-2.47.3-1.el9_6.noarch.rpm a787ed1f399dae43821c2e9196b8c67fc4af6ccf0695a61b278b551b4e8410c6 git-instaweb-2.47.3-1.el9_6.noarch.rpm cf55cc547c4de2274cb03a3b3683691f7c0d706ab48904b9ebf507e435a9e099 ALSA-2025:11463 Copyright 2025 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default fence-agents-scsi-4.10.0-86.el9_6.7.noarch.rpm 03e70d492f92498d27bbf33eb1257bd26ffff882c1f6d990dc1c4c4feb82ab59 fence-agents-bladecenter-4.10.0-86.el9_6.7.noarch.rpm 08a4711a27b328e1717555941dfee8a9f93c16edc5e2eac5a52d0b1392f1ec32 fence-agents-ilo-mp-4.10.0-86.el9_6.7.noarch.rpm 123ef8fb76983d0378dad7dc1e6ce90251564c121935aaca01c7980fe85770dd fence-agents-lpar-4.10.0-86.el9_6.7.noarch.rpm 18628cafc5ba3d22490a6740d1955aba878c3ddd5ea221d99cf99a815b0aebcb fence-agents-wti-4.10.0-86.el9_6.7.noarch.rpm 1887210096e059e32bd64fbc2bb587919c5e2e61c95a2ad47282924a0c93d4bc fence-agents-eps-4.10.0-86.el9_6.7.noarch.rpm 19afca3ce09c82e42ea1c57b47ebd549d0f253faf082b3884fa58f6c7db3c6f6 fence-agents-rsa-4.10.0-86.el9_6.7.noarch.rpm 231147f351b2037ef9d91f698f696eeae2e7b35fcf365beb7f684b92055dc102 fence-agents-kdump-4.10.0-86.el9_6.7.s390x.rpm 2324e3e083d2bd053866c55fce76b14d5e7aa3b3dd2ad23045c9267ec4c399dc fence-agents-ipmilan-4.10.0-86.el9_6.7.noarch.rpm 29c70b96c3d278220914ae7ce0e58acab84bc7d1cb4021295880a7c001be0cd1 fence-agents-rsb-4.10.0-86.el9_6.7.noarch.rpm 2d05561e1eaedcda8faf42a7605e825f4d43123809ddb202d0c6e586790f8707 fence-agents-mpath-4.10.0-86.el9_6.7.noarch.rpm 2d75c1b4f2f48fb7c1b471185b6bbb576099820302c67634ebbfb486938daa32 fence-agents-apc-4.10.0-86.el9_6.7.noarch.rpm 3196fea08937ed254ac9da0ea5ded5bf0e02dfc4298729e2129f114ec6943269 fence-agents-ilo2-4.10.0-86.el9_6.7.noarch.rpm 379acf603af424c87da3481f15432ebcf6d00927ffe05db5c552419aa6f5ea8d fence-agents-ibm-vpc-4.10.0-86.el9_6.7.noarch.rpm 3b9d4e191b953b7f955456eff64c73d4ca4a96f1d485e45fbf502b65e6fbfb54 fence-agents-ibm-powervs-4.10.0-86.el9_6.7.noarch.rpm 49b9df90f33a67ac008739c591d9d3c214f54be684825a367aef8cb482995c41 fence-agents-ifmib-4.10.0-86.el9_6.7.noarch.rpm 4ebe57452f93914e3c25bf4fce4884e3bc942f017a4a812c18301f5a47fe0698 fence-agents-sbd-4.10.0-86.el9_6.7.noarch.rpm 4ed39cc7b365d6c12ba4a317148cfb2a00656a414318d4751c145d7e3fb10820 fence-agents-ilo-ssh-4.10.0-86.el9_6.7.noarch.rpm 53ca76df5cbaa300da93a833619a3d9928cf217f560c6fe119e2f8828643fa55 fence-agents-cisco-ucs-4.10.0-86.el9_6.7.noarch.rpm 5acecd445f2a7276a6570f1d4a807138cc0485e7b7bfc2fb08e8153f9976d2ec fence-agents-hpblade-4.10.0-86.el9_6.7.noarch.rpm 5ae822356695218e886c4b5730a2660aca6f6f5fe954b337468bad0aeaba2ca5 fence-agents-virsh-4.10.0-86.el9_6.7.noarch.rpm 611196be29f8f9a806989f4d189a96ff303f4e83b85d2ffbe08bb72c08b2d82f fence-agents-eaton-snmp-4.10.0-86.el9_6.7.noarch.rpm 68b6495143f277dabae7c3826897294b960cab6603c8d87122b823fb846af5c3 fence-agents-apc-snmp-4.10.0-86.el9_6.7.noarch.rpm 6d113c7b79b43205f83b395d3df6d59ab1b15f1a177a96add9b3a7a55fdadc55 fence-agents-heuristics-ping-4.10.0-86.el9_6.7.noarch.rpm 715a164bdeb252d009fedec71f5acc499ede803ccd8df1a4be83696f214021eb fence-agents-amt-ws-4.10.0-86.el9_6.7.noarch.rpm 726cd03542754b1a1fdaa9f932cc46cac886d72bcb4526cc9b31f5eb35aa2111 fence-agents-ilo-moonshot-4.10.0-86.el9_6.7.noarch.rpm 7709df4112d280a284be7c3f654ba0e0399a9f889ed01c0ecca128e78b0feae5 fence-agents-cisco-mds-4.10.0-86.el9_6.7.noarch.rpm a466cc0f0114e09549ee5dc8ce49f81d40c44354f0db6acbd115f4faa6e4a388 fence-agents-zvm-4.10.0-86.el9_6.7.s390x.rpm a68f41654676675e15595908d54e5b98a561b9772b827bf2b635b7e44b0b28f6 fence-agents-ibmblade-4.10.0-86.el9_6.7.noarch.rpm a89b35adf0867c1dc63bebdfa8ff43876450b8d42ffd975bad33612f5b306185 fence-agents-kubevirt-4.10.0-86.el9_6.7.s390x.rpm abbbf12e2d3f747f2fd90663dadf08d518ac6c5b6eb1cf6d1bf7a9082e480a98 fence-agents-all-4.10.0-86.el9_6.7.s390x.rpm ac841715e1b45c519d17f3590c577f26bf43bad6c06b0dc6be4ff7ff92a5bffd fence-agents-ipdu-4.10.0-86.el9_6.7.noarch.rpm b3e776650eebcc7a4e2085a5bceee5bf1ce1b192e16776824b2cb5e134b5a955 fence-agents-common-4.10.0-86.el9_6.7.noarch.rpm b6bee14a91a22593f2db4144a63fcbabb3b51a0b2af1ce02fa0329d1906d32c3 fence-agents-emerson-4.10.0-86.el9_6.7.noarch.rpm c9995a66f5efc573cac153315d67cb93a6f83470bd2d29aa3b1471c5312b6066 fence-agents-drac5-4.10.0-86.el9_6.7.noarch.rpm cc1d1711453a99b2439a5320c73a6df92f73fc8949e5b0ed89beb02be68bdbec fence-agents-redfish-4.10.0-86.el9_6.7.s390x.rpm d410a954fc4f4003277b976a6b94d14911abe3036e304016649399ec151d7783 fence-agents-intelmodular-4.10.0-86.el9_6.7.noarch.rpm d72b20e22394b016a27caab7d2e3fb1878f72e27a931a2fa7e184e7b152c9a7f fence-agents-brocade-4.10.0-86.el9_6.7.noarch.rpm e209d1f482a3ee785ff79577efb021d1de3adbe4bf0ba4cb598966c6131fe85c fence-agents-rhevm-4.10.0-86.el9_6.7.noarch.rpm e34eec2d3d75c533c9ab40c350f0fa12f67380ad77bcc7eb2e0f2455020845eb fence-agents-vmware-soap-4.10.0-86.el9_6.7.noarch.rpm f47e04428c8fd0eb8555278754675db062736140e1dca78cf7e04772e6f102ea fence-agents-vmware-rest-4.10.0-86.el9_6.7.noarch.rpm ffed8b2e8adc5c0d017b73cd6023d957747cd15853675ef72aca6061af6b4c9d ALSA-2025:11748 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028) * firefox: thunderbird: Memory safety bugs (CVE-2025-8035) * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031) * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027) * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030) * firefox: Memory safety bugs (CVE-2025-8034) * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033) * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032) * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default firefox-x11-128.13.0-1.el9_6.alma.1.s390x.rpm 6b8764a29258323ec69a76d03b8f2c6fbb333917d2b5aaa6f83089275bc7873c firefox-128.13.0-1.el9_6.alma.1.s390x.rpm 6ba87396a87cdf74039df610c3383f925ac92c47db322249f61e2dc49a54f2c0 ALSA-2025:1184 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017) * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010) * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016) * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013) * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011) * thunderbird: Unsanitized address book fields (CVE-2025-1015) * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009) * thunderbird: Address of e-mail sender can be spoofed by malicious email (CVE-2025-0510) * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014) * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default thunderbird-128.7.0-1.el9_5.alma.1.s390x.rpm c1557d75c993afe170f13769121b79a6d9c757d850ba66053017d8d3aca32dd9 ALSA-2025:11849 Copyright 2025 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound Cache poisoning (CVE-2025-5994) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default unbound-1.16.2-19.el9_6.1.s390x.rpm 6bb2eb337773e06e7de78109d15ffd7bea4a8becacbde7d484eed38e1c32af57 unbound-dracut-1.16.2-19.el9_6.1.s390x.rpm af706996673b3da3f0202eaa739503988d5e80006af6e23c2c41aadad0833c6c unbound-libs-1.16.2-19.el9_6.1.s390x.rpm bf848d95b4b489d0a95f502f658ca22a22d25efbcb61de937b5a70be82deec09 python3-unbound-1.16.2-19.el9_6.1.s390x.rpm d08c843facd4dd95de8f3cff380655fddab4b30cb51f6a798c0c88f0e84b86ae ALSA-2025:11861 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905) * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091) * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121) * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113) * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797) * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958) * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086) * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-perf-5.14.0-570.30.1.el9_6.s390x.rpm 0742b70053a9af8478e9b431e67bba97144a03113a6f7c9161226b986358aa80 perf-5.14.0-570.30.1.el9_6.s390x.rpm 0b0deef72964a4e15c5e290503cb0521b70721033c64d2cb3ba92c5919fa0500 kernel-headers-5.14.0-570.30.1.el9_6.s390x.rpm 17e5dec3cd623fdb11b885a094c4fb63be4ce0cfb20fe8ffc697920b19cc2d01 kernel-debug-devel-5.14.0-570.30.1.el9_6.s390x.rpm 5250c0f8150d65b4e7a169bcb499171329c3c12d8445e1502601afef2d5d36e9 kernel-devel-matched-5.14.0-570.30.1.el9_6.s390x.rpm 6e99fc15c0ab4ec6780d0161e75729412226e8a4394d1dad4a1e1850818d751e kernel-devel-5.14.0-570.30.1.el9_6.s390x.rpm 9de0149a853b8c1c73ac85378d2d269a8e93cbe5fb334ec35ca08edd291df4d0 kernel-zfcpdump-devel-matched-5.14.0-570.30.1.el9_6.s390x.rpm 9e60ede76a018e4c31d6a3c880d566d0f9e93db990dcd5c020fc0e9e76e039c3 kernel-doc-5.14.0-570.30.1.el9_6.noarch.rpm a5dff664f5e93b8d89c791087629044ca46f28380fd903f5365e969f6c07d6f5 kernel-zfcpdump-devel-5.14.0-570.30.1.el9_6.s390x.rpm b11138b11037c035737b41a3f2217628be17494213397f4894a38bc0b623e74b rtla-5.14.0-570.30.1.el9_6.s390x.rpm b47c625b4fdb452e4cb0ba8c691032b642eeee2b15ac186cc34a786b74af57f1 rv-5.14.0-570.30.1.el9_6.s390x.rpm e2417b33aaab0d86017b6eb2575052379a836846901af81e83caed7ac93964c8 kernel-debug-devel-matched-5.14.0-570.30.1.el9_6.s390x.rpm f64d7a249002145e7d988349a37db3d0427ec03985a7af58ebd5e307a47efd2f ALSA-2025:11992 Copyright 2025 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: Integer Truncation in SQLite (CVE-2025-6965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default sqlite-3.34.1-8.el9_6.s390x.rpm a35dd49c8c3046c5fdc1b0bb89962b0c6a560b4d3a0aa39c584fb314296c0aa1 sqlite-devel-3.34.1-8.el9_6.s390x.rpm ff923d47d7e3ea90fa5c986898a8a6bbb6cde752b5015df588141c60ec7fbb28 ALSA-2025:12008 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis Stack Buffer Overflow (CVE-2025-27151) * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367) * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default redis-7.2.10-1.module_el9.6.0+173+efaf9205.s390x.rpm 053c9c45b4718e749f5675759e4c27e811e46b0ff241df4d5b1681dbab95555f redis-devel-7.2.10-1.module_el9.6.0+173+efaf9205.s390x.rpm 14820149f8c423f3c82877170e32ccc0bba4ab657b1133873dce2f5a19f288f5 redis-doc-7.2.10-1.module_el9.6.0+173+efaf9205.noarch.rpm d9641067b51be2618121118a90f958ee05b5100f3e7b13973432c4ab7160cdb0 ALSA-2025:12083 Copyright 2025 AlmaLinux OS 0 1 Moderate

icu security update

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. Security Fix(es): * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libicu-devel-67.1-10.el9_6.s390x.rpm ce34aebbebb834f54d50d6e30fbc2cd7c4971d3da8721778101b1cd680db491f icu-67.1-10.el9_6.s390x.rpm d2561d197fb98623480afb9c65818c1477c09d32df922487faf8d9154679d735 ALSA-2025:1210 Copyright 2025 AlmaLinux OS 0 1 Moderate

tbb security update

Threading Building Blocks (TBB) is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default tbb-2020.3-8.el9_5.1.s390x.rpm 4a6f91bf68ef4ce7c65dafe1647249851b420a65092903c56ba391f37e55d037 tbb-doc-2020.3-8.el9_5.1.s390x.rpm 990856224174deff9241a396d8c29b9068cce57dc7c00e70b8114324601a692a python3-tbb-2020.3-8.el9_5.1.s390x.rpm cf06c92f7b8dadb24a169370f63bedd854becf07eb1884472999c67971f432cb tbb-devel-2020.3-8.el9_5.1.s390x.rpm d6f826bfa4bd41a169327ca532d49f56812c1ab3a6b9d159b40979b0c280a853 ALSA-2025:12100 Copyright 2025 AlmaLinux OS 0 1 Moderate

libtpms security update

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines. Security Fix(es): * libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libtpms-0.9.1-5.20211126git1ff6fe1f43.el9_6.s390x.rpm 4cbc29178533f0197bcf851dc234a27dadb1d82ddb927054e28141e67ad57f6a ALSA-2025:12187 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028) * firefox: thunderbird: Memory safety bugs (CVE-2025-8035) * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031) * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027) * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030) * firefox: Memory safety bugs (CVE-2025-8034) * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033) * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032) * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default thunderbird-128.13.0-3.el9_6.alma.1.s390x.rpm 6c9cc36e4c28a06e2b3255895b4a4e02bbee098bf8c2a706c6d945443c9d36cc ALSA-2025:12280 Copyright 2025 AlmaLinux OS 0 1 Important

jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default pki-jackson-annotations-2.19.1-1.el9_6.noarch.rpm 004448294b369b31bb70d2f1e1feb823f92d7f5785b7e2bea5ae9f40f7a2b51b pki-jackson-core-2.19.1-1.el9_6.noarch.rpm 243f145c8799fb698a266151b9c7aafe94c83a343cc44f0da497d0028d623cc7 pki-jackson-jaxrs-json-provider-2.19.1-1.el9_6.noarch.rpm 464fb4c458c52ac48d297423964b79899f7ed89c6ba69f09d68c34f371406a27 pki-jackson-jaxrs-providers-2.19.1-1.el9_6.noarch.rpm 8806f6149c80621f8eaba5fc00c5d97334c3074990a4d88ef90135644aa1e641 pki-jackson-databind-2.19.1-1.el9_6.noarch.rpm ac248e7a3dadbddc93574e6d812179b061f20c0a2a7d211248ba14673f685d29 pki-jackson-module-jaxb-annotations-2.19.1-1.el9_6.noarch.rpm d6883c249a98e8768aeeafee063b37a5705fdfcc8bfaba3d26ccd42615970b2f ALSA-2025:12447 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libxml2-devel-2.9.13-11.el9_6.s390x.rpm 64f699dc8be76b8d201d91618849c5262c03515568e921b0b24d8b3662be8b2d ALSA-2025:12519 Copyright 2025 AlmaLinux OS 0 1 Moderate

python-requests security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-requests+socks-2.25.1-10.el9_6.noarch.rpm 29a6c050749e8e45500e9319c24a916f761b5c952abd8a222671c049d77c92e8 python3-requests+security-2.25.1-10.el9_6.noarch.rpm 5ce5843872b15a95ca2b6b6f40658941b22f0db0b36fdef207fbd9f139762d45 ALSA-2025:1262 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default kernel-zfcpdump-devel-matched-5.14.0-503.23.2.el9_5.s390x.rpm 25e340894e49b6bbada1aa031fdaa043f95739a9d74da718010bd97b80127afc kernel-devel-matched-5.14.0-503.23.2.el9_5.s390x.rpm 4881d6520add662ec983dc86da37852d47d7a6b1ca653e303988c69ea9c7f6f7 rv-5.14.0-503.23.2.el9_5.s390x.rpm 50dba6de1e48fa1f70fa3428990c0a8558ba7ec2cc3c1b2c2da05a263397076d kernel-zfcpdump-devel-5.14.0-503.23.2.el9_5.s390x.rpm 52257ccfb8379c6a9a9484fabe3cfb8f3b60005fb355035cf1209f9aca536b36 perf-5.14.0-503.23.2.el9_5.s390x.rpm 5edfeea191ea86ead070560c2936b1c9596e98bb624fe5a7295b813a3a9f3866 kernel-devel-5.14.0-503.23.2.el9_5.s390x.rpm 957a1a3893b208579141c219e1d795bac6d0f7db3f1ef4fdf6ddb9a88b326e48 kernel-doc-5.14.0-503.23.2.el9_5.noarch.rpm ad343e2e5557a6d549fc41ab4b55f553a5ce6217f46a75402424afb90812e392 kernel-debug-devel-matched-5.14.0-503.23.2.el9_5.s390x.rpm b5fce3461b876ee23e28a2eb29715d572c9e328ce7701d3a9969910b6b2748ab kernel-headers-5.14.0-503.23.2.el9_5.s390x.rpm d7a9576cb71eee2ce110b819167387291523fee5ac8d0074cba2abefb589df51 kernel-debug-devel-5.14.0-503.23.2.el9_5.s390x.rpm e3c0806228db5819cf211b5d9852706d3f29456587b8aab61032b0e6f4e85958 rtla-5.14.0-503.23.2.el9_5.s390x.rpm ec81bc3eca46165612598a297e961f2c04bfb3a5fc9c1411f8db1227faa43514 ALSA-2025:12746 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727) * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929) * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962) * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020) * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890) * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052) * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-debug-devel-5.14.0-570.32.1.el9_6.s390x.rpm 152789529965e8658cd5e9358cb0c6829209c301e5a43b7918991af78eb026d8 kernel-doc-5.14.0-570.32.1.el9_6.noarch.rpm 188a599f3b9dcd313c11cc5e7329aa40c9078144c79f3b6a7be334d175bbc647 perf-5.14.0-570.32.1.el9_6.s390x.rpm 1b5b6385b2b7a5352d7f85535fde5ad591ee2b737b8269da3ab685e556671868 python3-perf-5.14.0-570.32.1.el9_6.s390x.rpm 446d51329150743943a089d5657dcc9a011f11f314190c025b7cdb4f53e0fe25 kernel-devel-5.14.0-570.32.1.el9_6.s390x.rpm 681c2d45dc389f01321ba5cf0cdd022deed3e01df00fbd0bdfdbf65c56b64e34 kernel-headers-5.14.0-570.32.1.el9_6.s390x.rpm 88d1ad998eec2bf0994181df0f5dbf20b3fbeeb784eb2298a4e66235f8acab3c kernel-debug-devel-matched-5.14.0-570.32.1.el9_6.s390x.rpm 937cd0665bb26b839dbc4ad736950a87327fd4c4287735410ef40364e4499802 kernel-devel-matched-5.14.0-570.32.1.el9_6.s390x.rpm a3731ea34ecb4c46253b616bc34c0eec6ca064c88012c16301490d423259e88c rv-5.14.0-570.32.1.el9_6.s390x.rpm be90ffb8467c05cd0d98fc1925b88ed214528fad74c046c7a69eb7197455371a kernel-zfcpdump-devel-5.14.0-570.32.1.el9_6.s390x.rpm d0548fdb09eae98e4d2b46af07c857f251a5bc678d94fccfd733a1c6e3678e3b kernel-zfcpdump-devel-matched-5.14.0-570.32.1.el9_6.s390x.rpm e45d6fe44c5fcf06c0a5efb2509dc53a0312704901f68e76f40842edeca66256 rtla-5.14.0-570.32.1.el9_6.s390x.rpm ef2c4f170e70d04bac1c7ecf7a49906053ba6d0ec781332eabafad3635dc8a60 ALSA-2025:12831 Copyright 2025 AlmaLinux OS 0 1 Moderate

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default opentelemetry-collector-0.127.0-1.el9_6.s390x.rpm 5a18773f5bfa612f98378cdacd514db449c0b844960e24e649061eb01f088841 ALSA-2025:12834 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.12-setuptools-68.2.2-5.el9_6.noarch.rpm a79161142b7cad19b3935433516c3b92ab60a0fa44916bc0de99529e80ff1785 ALSA-2025:1300 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc-toolset-14-gcc security update

The gcc-toolset-14-gcc13 package contains the GNU Compiler Collection version 14. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default liblsan-14.2.1-1.3.el9_5.s390x.rpm 17f207a879ef147dbcf3027f42d3e4a1916f16e0548dd4165c87952284cfddd1 gcc-toolset-14-gcc-plugin-devel-14.2.1-1.3.el9_5.s390x.rpm 25f6df62ddabcc7a4f768fcf638ebcce0908dd3504027cfd10f8553ec99a54c1 gcc-toolset-14-libgccjit-devel-14.2.1-1.3.el9_5.s390x.rpm 282c086716e4b94f4261208b92a9bc17401310def2865a9a36c1fb96f5d9169a gcc-toolset-14-libtsan-devel-14.2.1-1.3.el9_5.s390x.rpm 451ebb6e599252aea68659feea85a35271408a8a288db3775ecfafc706ca5fa3 gcc-toolset-14-libubsan-devel-14.2.1-1.3.el9_5.s390x.rpm 50fa3bad244c531f23e8189f2268cfe0b579dd9f2001214a960d210641fc144e gcc-toolset-14-libasan-devel-14.2.1-1.3.el9_5.s390x.rpm 527f76fbc781b2c1c5e94fd1eedea781cdfe9c3bee7ffe8e5c3fb4de79a70355 gcc-toolset-14-gcc-gfortran-14.2.1-1.3.el9_5.s390x.rpm 5461494b5bec2cc300f092fde7b7f712d5158599c74a68a34d95bf18270e3768 gcc-toolset-14-libatomic-devel-14.2.1-1.3.el9_5.s390x.rpm 5c9a060832f74f30000b745bc5d8bc142262ba7b7a463148942ea8d4214a9f3b libtsan2-14.2.1-1.3.el9_5.s390x.rpm 7cdd0c73afcbae3ebfa5ba31ecc57079b8a05bc1578dd24cc8aa93b62394d62a libasan8-14.2.1-1.3.el9_5.s390x.rpm 83c3f50cbefda3f90e9e7232573f726e985b1e0c145e7241b5973c364f829217 gcc-toolset-14-liblsan-devel-14.2.1-1.3.el9_5.s390x.rpm a06a79fa55ecbf404c1a1c1c0807b89705176aa02ee3e8085d88abe0d1910d3b gcc-toolset-14-gcc-14.2.1-1.3.el9_5.s390x.rpm a07cc51e2b6a0b69540c7ca757c92f67254405126b0b8634afa88f8c02ab106e gcc-toolset-14-libstdc++-docs-14.2.1-1.3.el9_5.s390x.rpm a0b63e3cdf38229f2bdb4883f62895b24d4da18faaf1e59cc967c9d378aeda13 gcc-toolset-14-libstdc++-devel-14.2.1-1.3.el9_5.s390x.rpm b85287afa983178da6e98ec21084a06ddbbe89bc265ee06f0d2b71a71639214e gcc-toolset-14-gcc-plugin-annobin-14.2.1-1.3.el9_5.s390x.rpm c070cc42ff8c554eb87f7327d7b42e131deb63acebbe5cf799e21be35c657c17 gcc-toolset-14-libitm-devel-14.2.1-1.3.el9_5.s390x.rpm c8dc3025c8814ed9d80fbc8b6603211c60b21e406ba79d18e4949cf020b1fd07 gcc-toolset-14-libgccjit-14.2.1-1.3.el9_5.s390x.rpm ecc2c25b4e191f8cd30f2609d617f0181eeb911bf182ff038bcdc9751ce1db35 gcc-toolset-14-gcc-c++-14.2.1-1.3.el9_5.s390x.rpm ee1699c0896222f235e9e3a4d1d2074955a76944306c6d967df539f4e9ef1278 ALSA-2025:1309 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc-toolset-13-gcc security update

The gcc-toolset-13-gcc13 package contains the GNU Compiler Collection version 13. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default liblsan-13.3.1-2.2.el9_5.s390x.rpm 00e546cff3f907c4a57ab5b63398760c206709d0eb388eb2b190f523be178c61 gcc-toolset-13-libstdc++-docs-13.3.1-2.2.el9_5.s390x.rpm 213b4fed54c059d2bf1e990d836977fbf6d5c02f922b0d8401780109eedad322 gcc-toolset-13-libgccjit-devel-13.3.1-2.2.el9_5.s390x.rpm 30830e1c08fcb64eda89293cff84244711e633af4b449b77a2ef627988cb1fdc gcc-toolset-13-libitm-devel-13.3.1-2.2.el9_5.s390x.rpm 3105c5ce57ea9fbd01eac68d941b7b947768bb0e6b42eb55215cf88ef5bc661f gcc-toolset-13-libgccjit-13.3.1-2.2.el9_5.s390x.rpm 4950be66d00e747e2b29090dc7308b6b3e03a10deb8770639dc0deaaaf9ab515 gcc-toolset-13-gcc-plugin-annobin-13.3.1-2.2.el9_5.s390x.rpm 4d3529586256c8d6b857e3e5ca71a469dcee10ff0e674c691ea0b837aeebf986 gcc-toolset-13-libasan-devel-13.3.1-2.2.el9_5.s390x.rpm 60f7024e6841c606df8f9eed73da76bb6297ef81eecd9fccacbc8db0b1a4a89e gcc-toolset-13-liblsan-devel-13.3.1-2.2.el9_5.s390x.rpm 88028952bddbf5a0a7b69ba2b4368994ba5b9eb97eb867f0bdc4fe285f1a5803 gcc-toolset-13-libatomic-devel-13.3.1-2.2.el9_5.s390x.rpm 8eea4742a784c8c8bf44b620715f2baece6806261ffc71311072b01b313e9664 gcc-toolset-13-gcc-gfortran-13.3.1-2.2.el9_5.s390x.rpm 99ae018207614680ef2a746423678329b7950b60266d95cf6479653a60da6913 gcc-toolset-13-libubsan-devel-13.3.1-2.2.el9_5.s390x.rpm a45a6aefd34aa5b2c145a6b884983e7a97b31ca2d957541f271ab95d18fbe6e8 gcc-toolset-13-gcc-13.3.1-2.2.el9_5.s390x.rpm bbaa043cc1dc3a45d3bf71a4b975b5d96376bfbe23750f332f1bfbad05621a65 gcc-toolset-13-gcc-plugin-devel-13.3.1-2.2.el9_5.s390x.rpm c26159fecf7308ef28300d55f99990f7a36fd779c6d469e6fbe9b8099bf566f4 libasan8-13.3.1-2.2.el9_5.s390x.rpm c4bd81e076ad638f724bf6372b6fa57109488943b5c86edb335ff40d6478fbe5 gcc-toolset-13-libtsan-devel-13.3.1-2.2.el9_5.s390x.rpm cb91312ca431b8853598947f3f293325b2ca94c800daac4f3349324c59508930 gcc-toolset-13-gcc-c++-13.3.1-2.2.el9_5.s390x.rpm cf2f552ade3e0164e6b88d42707484eb426f9d4753288bdecc4cb399dd09df9d libtsan2-13.3.1-2.2.el9_5.s390x.rpm e005de35869f5d3211eb07e57354b8e78af9bf32095d5943d6ea942aaa7aa306 gcc-toolset-13-libstdc++-devel-13.3.1-2.2.el9_5.s390x.rpm f9526bf18f3e95c15abb97361cf9a472023ff19cdb9c28dd424644798e0fb540 ALSA-2025:1330 Copyright 2025 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default openssl-devel-3.2.2-6.el9_5.1.s390x.rpm 3e04c3b680ff806df582cf4e20f3d79ec14faad7a9fb4d59684e4cf6e8cecee6 openssl-perl-3.2.2-6.el9_5.1.s390x.rpm dcf2add9a8c0502f4566120c274d81af77df0b636b5a6a18432c0e643157fb48 ALSA-2025:13428 Copyright 2025 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414) The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414) * libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libxml2-devel-2.9.13-12.el9_6.s390x.rpm 72c6e4afb48438b6f4801c9ed88da92b0ca08658fb70db1cf4e0e680bc391ae5 ALSA-2025:1346 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default libstdc++-docs-11.5.0-5.el9_5.alma.1.s390x.rpm 03c0d7f9bc9a64d6438d1f212e58277dd0ee4aa7389d0a02306bcdc4b3fcb721 cpp-11.5.0-5.el9_5.alma.1.s390x.rpm 1f1ea37b27ec5778cf49a078a63000542ddcc6673b22f2133a1c6484ac0bc78d libgccjit-11.5.0-5.el9_5.alma.1.s390x.rpm 225f264fd5ee057e37ebc65c5ffcb1c66c0eb8598e8c7ba39b857d50a0c7e624 libstdc++-devel-11.5.0-5.el9_5.alma.1.s390x.rpm 50bbd076ffae7f9a05e2d3d2ec51872b2b790e864602f997c52f00196033374d libasan-11.5.0-5.el9_5.alma.1.s390x.rpm 60260e57b655f115513a2d5b92c9b586aa8e219b293133062e0a4dedde4bc454 libubsan-11.5.0-5.el9_5.alma.1.s390x.rpm 63ac7063bf1dc78c54218b322393bedb35bba64a74ab29f8a66a529aca9cb9b0 libitm-devel-11.5.0-5.el9_5.alma.1.s390x.rpm 6529ee5bd6f3411849f4ccd145ce1580ef2473fe321e9724f06ba86a34d80a87 gcc-11.5.0-5.el9_5.alma.1.s390x.rpm a9b575cc22dee5c71548a8e8b912679a114c37c2e109b363eaacd7ea9a536870 libgccjit-devel-11.5.0-5.el9_5.alma.1.s390x.rpm cd54a86f98973dc7c550e45916c429f27e5743d4033263bcd82df8d1a6f211bb gcc-gfortran-11.5.0-5.el9_5.alma.1.s390x.rpm d2752003f4fc10d689d7094cb6ed03aced1aa78a63e9d1ea6dedae918e92bfa2 libitm-11.5.0-5.el9_5.alma.1.s390x.rpm e10ec8016c9d66d9fa0a08671345fc4a17901833361622b93c1d1e4392c40f23 gcc-c++-11.5.0-5.el9_5.alma.1.s390x.rpm ebc7d91701c95fd42105de5fd5ca1456607f37cf4715641a389f80624e9d9526 gcc-plugin-annobin-11.5.0-5.el9_5.alma.1.s390x.rpm ecb06b3df1611a1ee312a871300d696c5e9558251bbbe308e4a19d6ba2df3f55 ALSA-2025:1350 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default libxml2-devel-2.9.13-6.el9_5.1.s390x.rpm a7a6b1c21c0ed0e604514761dd568ef54dfd5958076b82f7087d75811c28d9e4 ALSA-2025:13578 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.11-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.11-setuptools-65.5.1-4.el9_6.noarch.rpm 3bbd1e54d2528438e395fb2c9d4fbabc0afd8867c15d7444f08cfa0a43addff9 python3.11-setuptools-wheel-65.5.1-4.el9_6.noarch.rpm c933e948175b386b2891bfa95f25574e3de4856e2ab60364f5c93a9cd5fa24a6 ALSA-2025:13602 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-devel-5.14.0-570.33.2.el9_6.s390x.rpm 2d906c63f5cc1c421ec77e268c6aaf8a68a1cfac91f64302e060f462016ab008 kernel-debug-devel-matched-5.14.0-570.33.2.el9_6.s390x.rpm 2d98c0e031dd921d3390b6a56e597fafce6967c0f944a08e1406d8de451a6f70 kernel-zfcpdump-devel-5.14.0-570.33.2.el9_6.s390x.rpm 8e253f0ce2db6bac19270e7bad1c6b0c64dd2adfcd786c8844064d00895ca91a kernel-zfcpdump-devel-matched-5.14.0-570.33.2.el9_6.s390x.rpm 930712ac2cc54f8df63ee22afcb3bedf49ca9eb51c34b318891c556caed40136 rv-5.14.0-570.33.2.el9_6.s390x.rpm abfe2e6cdf1f353c22c7cf53c7fd9c18419194cfbd82fde8e871b891ee0b516d kernel-doc-5.14.0-570.33.2.el9_6.noarch.rpm b17d250deb8082ff6f32327acccb98c12e7a58db0dcd109fe4a249a6426f4773 rtla-5.14.0-570.33.2.el9_6.s390x.rpm bb60cf4fe9d5bc1e03c60bb9d38d0c9ba3dbfcaafcf2499250060978a339ae6c kernel-devel-matched-5.14.0-570.33.2.el9_6.s390x.rpm c082143e8d12dcff817764aa7772b6f555b13316533ddeda98f924c2ac49850d python3-perf-5.14.0-570.33.2.el9_6.s390x.rpm d4d6164a5388ce84fe166babbb25fe5210c3381ff3372271f0f9dbca0db5ba32 kernel-headers-5.14.0-570.33.2.el9_6.s390x.rpm e4b7fb59fc0ac374b027c80e192d7256978bd78902d60a9852397c32f76c2042 perf-5.14.0-570.33.2.el9_6.s390x.rpm f6780a41b8fa160270bb224861d664004ac520332042da8288cd3728375a328b kernel-debug-devel-5.14.0-570.33.2.el9_6.s390x.rpm fe1e77bd0abddc210de82c6cf18e956d058a0ff0745015ba926ef12095085208 ALSA-2025:13673 Copyright 2025 AlmaLinux OS 0 1 Important

toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit (CVE-2025-23266) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default toolbox-tests-0.2-1.el9_6.s390x.rpm 619a15aae701cb4a552722455c4311ec3ede193db555b2e10c6e8ec878ce02da toolbox-0.2-1.el9_6.s390x.rpm ebc5b29df005ff73ac0306414158a257cc6faadd11fa1da4fb4ea7373d1f2791 ALSA-2025:13782 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * angle: insufficient input validation can cause undefined behavior (CVE-2025-6558) * webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216) * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227) * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default webkit2gtk3-jsc-devel-2.48.5-1.el9_6.s390x.rpm 4cd1899eb8d2f8836a266bb64f0ebd469155a0dded73a89b70966144427d5f57 webkit2gtk3-jsc-2.48.5-1.el9_6.s390x.rpm 4f9856d0bc628647be817803604ad9de8b179dd2f2c19fd2fc45e78e7c05e101 webkit2gtk3-devel-2.48.5-1.el9_6.s390x.rpm c241b278a8a29eedce80272e361c38fd5206c5b7105fade8e8996604761a3aae webkit2gtk3-2.48.5-1.el9_6.s390x.rpm f6e0c61700549c80028b39f58c827c22b693b62d310bc4b35a2fff32a227c2d9 ALSA-2025:13935 Copyright 2025 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * cmd/go: Go VCS Command Execution Vulnerability (CVE-2025-4674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default golang-1.24.6-1.el9_6.s390x.rpm 1c3a452fe4ad54c81041b3390686bfdc02746f41fb4e3922b15d8accba69a658 golang-tests-1.24.6-1.el9_6.noarch.rpm 3e979194a930d315da6e1d4c2862d63713132fe833d4c743998b27c90734b88a golang-race-1.24.6-1.el9_6.s390x.rpm 529bf3b4fbdf8bb9a4942694d69ab32bdb2cb4b35aa2b697fc758527021e58e0 golang-misc-1.24.6-1.el9_6.noarch.rpm 665118655522de2908ac73a38bf76662b6d7af9f3bdc7f23455d230a930e5d21 golang-docs-1.24.6-1.el9_6.noarch.rpm 6be21eeb7d47530ff343e6857d1b47c72975b79d526bb6f8cb6b80967e8e5269 go-toolset-1.24.6-1.el9_6.s390x.rpm 8c9908258f737e7c37f26d2ac10b1e5f27729bae70f9a526f1a882a00d0342c0 golang-src-1.24.6-1.el9_6.noarch.rpm 93f3d8e82b0aaa4e4ba39f65ba558b39772fb4c83758a9e537ad377b2f8b841a golang-bin-1.24.6-1.el9_6.s390x.rpm d0a77dfd2d01a1c1cc11bf8e74cca326aeca91627e7c4e392b565f47a90a5f4e ALSA-2025:13962 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867) * microcode_ctl: From CVEorg collector (CVE-2024-28956) * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084) * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085) * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124) * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159) * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250) * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380) * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-debug-devel-matched-5.14.0-570.35.1.el9_6.s390x.rpm 3286a19359df4427fd52cdc136d840e88ee9d6a0b2d98190a187ca1d689048ff rtla-5.14.0-570.35.1.el9_6.s390x.rpm 44ab475a3b8c6ff989ededfe78daa32c8c0f19c884548efed4757a5792b2ab8f python3-perf-5.14.0-570.35.1.el9_6.s390x.rpm 52f527719547aa35550bdbbf99c1462d4c2a15cf1a2dcba1d613b3485b741341 kernel-zfcpdump-devel-5.14.0-570.35.1.el9_6.s390x.rpm 53b8d3cc9c21f26d262d1df4c1b937749e3ea7214bc7fc69dd9a4c906d34ae3b rv-5.14.0-570.35.1.el9_6.s390x.rpm 7f230d94b1d8a871ffbf93f3a31a31210d7340ee4002938a82a7d7212418ffe3 kernel-devel-matched-5.14.0-570.35.1.el9_6.s390x.rpm 7f50e5e7506b2a7013b9b7dcebd94d185fb72db1cc5c3233b4cc9fdd3d79b632 kernel-devel-5.14.0-570.35.1.el9_6.s390x.rpm 85513507f5e469ff4608747191765090a0c179343abb3b0292e3244b383319a1 kernel-zfcpdump-devel-matched-5.14.0-570.35.1.el9_6.s390x.rpm 88edecbc6b18bd505551d363224b534a758560f0bab7d4e0f4be85c4791dfe4f kernel-doc-5.14.0-570.35.1.el9_6.noarch.rpm 9c2dc9051e9e61e16119c5d58d0b83cb49316586f4124f89368d477e8edbf724 kernel-debug-devel-5.14.0-570.35.1.el9_6.s390x.rpm a483581eea724aeeb6bde0282b3f45bcfff3675c9399f1dcdeba23207297d8d0 kernel-headers-5.14.0-570.35.1.el9_6.s390x.rpm d7c8b423aef6397dd44c5a77e84be16c7f01874cf0a910d27363623fdc334dec perf-5.14.0-570.35.1.el9_6.s390x.rpm dd14ee10cba5c26ac7a8d628e32d8db24d349268d6053f38719508980eb20a65 ALSA-2025:14075 Copyright 2025 AlmaLinux OS 0 1 Moderate

xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. Security Fix(es): * xterm: Buffer overflow in set_sixel in graphics_sixel.c (CVE-2022-24130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default xterm-366-12.el9_6.s390x.rpm 1fe164199e0768da9bc4d58fad68711957d360da33cf4e8975b5aa18ae566e98 xterm-resize-366-12.el9_6.s390x.rpm e97e8e188df4f3c99181f9ed9f6c77f36fb63db58da821a23205f69c64292e65 ALSA-2025:14130 Copyright 2025 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default bsdtar-3.5.3-6.el9_6.s390x.rpm 8473d58ee39d231ec9a0cb20b6f54e7b877abf838e7db0890812a663f2b17bf2 libarchive-devel-3.5.3-6.el9_6.s390x.rpm c50b8e6cccc1462c64baf3c8d63ec5d85313fc99cac0303d13146db1defe4aba ALSA-2025:14181 Copyright 2025 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat DoS in multipart upload (CVE-2025-48988) * tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) * apache-commons-fileupload: Apache Commons FileUpload DoS via part headers (CVE-2025-48976) * tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) * tomcat: Apache Tomcat denial of service (CVE-2025-52520) * tomcat: Apache Tomcat denial of service (CVE-2025-52434) * tomcat: Apache Tomcat denial of service (CVE-2025-53506) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default tomcat-jsp-2.3-api-9.0.87-3.el9_6.3.noarch.rpm 3d1b2f60c937138eabe2a357da202ce1e61407aaf1616e6636ffdb263d80eeff tomcat-admin-webapps-9.0.87-3.el9_6.3.noarch.rpm 557fd1368406aa21877f8e8d659b54ca1dd55cb657555f0672c46c69ae0fd2d4 tomcat-el-3.0-api-9.0.87-3.el9_6.3.noarch.rpm 55d082d20841c00e2b3d849f9bc6bc808658ec95f9c55afd25f9ef4a890a6c6e tomcat-lib-9.0.87-3.el9_6.3.noarch.rpm 60dc40355b5199b744c4e87c95aea98eef6b463881fb693fcdf9a5cff1e8fbe9 tomcat-docs-webapp-9.0.87-3.el9_6.3.noarch.rpm 8eb1f3d95d9f23b78e0d9c85b4fb6e5b9a81c47c74e5aac9045745ac9811aa28 tomcat-9.0.87-3.el9_6.3.noarch.rpm 9238596ca9828174c3c53c5045a85daad045caa5c2f5bebe482aaaafb2f01a33 tomcat-servlet-4.0-api-9.0.87-3.el9_6.3.noarch.rpm 927f314c3f4a4cdf02014141604408eea896e608ce5cb8e84c4701181bafb6b6 tomcat-webapps-9.0.87-3.el9_6.3.noarch.rpm e7004fac42215d59539ca6924f81d84a43afaf93ca89f3a4e773f49e2682545a ALSA-2025:14416 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182) * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179) * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180) * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default firefox-128.14.0-2.el9_6.alma.1.s390x.rpm 21ca6cfe3bfb1a2cbc6e2d1ba896580a4d3b6930d9394304d4feb7b5406aa126 firefox-x11-128.14.0-2.el9_6.alma.1.s390x.rpm aceb7b925b6678209bce3bdb15f6ff6afdad1b7845500ad0d9bc6f08a3c22b90 ALSA-2025:14420 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Fix memory accounting leak. (CVE-2025-22058) * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914) * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-perf-5.14.0-570.37.1.el9_6.s390x.rpm 08ba84e697c23219297821893fd69b5cb1f04051cdda709876c8fc1b0f95d6eb rtla-5.14.0-570.37.1.el9_6.s390x.rpm 3cfe5373f356a123ce91368f504ae23e7bc769e70469704b6d9b358f2abdc282 kernel-debug-devel-matched-5.14.0-570.37.1.el9_6.s390x.rpm 4683936a42392ab9351c4682f8122eab11d03a187d5b88a7f0193985202efae8 kernel-zfcpdump-devel-5.14.0-570.37.1.el9_6.s390x.rpm 4b80ab8a3dbc32a5ccc3a06dc9cac71495e61a6950a9f45e28f35d00819ff659 kernel-devel-5.14.0-570.37.1.el9_6.s390x.rpm 90eaf5dcb002a87c2dc030d2c777abb4010290687c9dba109141a181d7391535 kernel-zfcpdump-devel-matched-5.14.0-570.37.1.el9_6.s390x.rpm 9f5a41a299b386e469226dff4854c36ff19c30cfbc5351d993f435c943438688 kernel-devel-matched-5.14.0-570.37.1.el9_6.s390x.rpm b6c351717d3c273751af2273a2e685a4259a036ad6bf0306c67a3f3e8e2d1761 kernel-headers-5.14.0-570.37.1.el9_6.s390x.rpm bbf032241e8bb9c76be48cf482147df3a76cbef70fc16578fa22e85cef21e11e kernel-debug-devel-5.14.0-570.37.1.el9_6.s390x.rpm d395dde1abbdb3c52c5f1a8824a00d0eb3ca4f63298ecc14525caa0dafedfffb kernel-doc-5.14.0-570.37.1.el9_6.noarch.rpm e00b33a85bacd8049e46d4d900f7d66d95674050f43ee8a6dd49265cd32b10f5 rv-5.14.0-570.37.1.el9_6.s390x.rpm e85bb052a2caabe2549eb55aab68ecaf963c2c3f1a4fadb2b99aeeb9acfdfd90 perf-5.14.0-570.37.1.el9_6.s390x.rpm fc36ca4ed07a4feb29f9e7fefe6f3aaed41aeef6cc55e68fc925dc3737ff0c3c ALSA-2025:1443 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150) * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083) * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default npm-10.8.2-1.20.18.2.1.module_el9.5.0+137+381f3eaf.s390x.rpm 29168ddc7d6d2f391cc40a4f78d126a706b8855437b70fa5f709a5616ac6c6e5 nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f nodejs-docs-20.18.2-1.module_el9.5.0+137+381f3eaf.noarch.rpm 89461b6ac62cedc048af335c1d731fe920e824dcd6aa21c8afd28ce8da18fae7 nodejs-20.18.2-1.module_el9.5.0+137+381f3eaf.s390x.rpm aceab1639de2de5b03b05ccd0f874db2eaaeb2d97f797b9495686709c4bd4d8e nodejs-full-i18n-20.18.2-1.module_el9.5.0+137+381f3eaf.s390x.rpm b627a2876fb42aa1319a7213d2c8ed4e42b302f5c485a7cd8944b26920d52f86 nodejs-devel-20.18.2-1.module_el9.5.0+137+381f3eaf.s390x.rpm b9bf80bcc753b0f0b10379fe53b10b36c8bef9acbb5fb486c1658aca9690719c nodejs-packaging-bundler-2021.06-4.module_el9.5.0+124+df88fe49.noarch.rpm cb21fb7f8fb0ef5afe10bf3cfbdd7c7d11c15d5c6b567e91a1a2b2256a2424a2 ALSA-2025:1446 Copyright 2025 AlmaLinux OS 0 1 Moderate

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150) * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default nodejs-devel-18.20.6-1.module_el9.5.0+136+92f38f3c.s390x.rpm 064fce9035573c420c608ac59d5ba1b669d7c56e1722f8ae5471b819bc9c4e7f npm-10.8.2-1.18.20.6.1.module_el9.5.0+136+92f38f3c.s390x.rpm 2b93007cc1f5e56290e15bb96a4d062d043bb264d47a18d26f20e2dd24e99747 nodejs-docs-18.20.6-1.module_el9.5.0+136+92f38f3c.noarch.rpm 44794d60a66eef706a67719d77d8b9cbb1ca037963058fa7386dc40b5163b921 nodejs-nodemon-3.0.1-1.module_el9.5.0+136+92f38f3c.noarch.rpm 9568f3f288eb90ba5d978da40785d16e3210b65e92276e8ca17b6d88a3339c1b nodejs-packaging-2021.06-4.module_el9.5.0+136+92f38f3c.noarch.rpm bfb954cf0a070014a29b11e53507cb0f05b992c7e1bf6cb568840bb815dca58e nodejs-packaging-bundler-2021.06-4.module_el9.5.0+124+df88fe49.noarch.rpm cb21fb7f8fb0ef5afe10bf3cfbdd7c7d11c15d5c6b567e91a1a2b2256a2424a2 nodejs-18.20.6-1.module_el9.5.0+136+92f38f3c.s390x.rpm ccf29521730b387b77ac628257f3cefab5befcd702959302fdaa02a3c23206e9 nodejs-full-i18n-18.20.6-1.module_el9.5.0+136+92f38f3c.s390x.rpm e347e92eea6c9154cecda77354798768a1c071e183b882355f7565e1590a64a2 ALSA-2025:14493 Copyright 2025 AlmaLinux OS 0 1 Important

aide security update

Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions. Security Fix(es): * aide: improper output neutralization enables bypassing (CVE-2025-54389) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default aide-0.16-103.el9_6.2.s390x.rpm 4acad050507a86ce188ad8cb0366541f30704e80ce65e7fab7ea95ded36ae352 ALSA-2025:14640 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182) * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179) * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180) * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default thunderbird-128.14.0-3.el9_6.alma.1.s390x.rpm 9fa318b42d880e33790382f5d86c113450bc3704f3fc46bbefed1fe9f260d439 ALSA-2025:14827 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm 0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906 postgresql-private-libs-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 021478c952c032fb6e17ad39e5242d4d750522529d4c950855325748fc49a045 postgresql-server-devel-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 09848d26aa6067abadf19f45f03a17a7fa29fda4e32bcc559aa9c727ca504604 postgresql-upgrade-devel-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 4937779f996667337273c558ac68e1bb70650f866c8c4a2ee71213e708045d48 postgresql-plperl-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 5ec730fec91514c2264458fc1255d0e20b16634d4ac1e05ad4f2e15d8c5d0539 postgresql-test-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 6d1482b33b7b37f7be27f30ee6bf128e047356ee5903af18f2dc544ff2212775 postgresql-upgrade-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 743f634739b9802982bdb6609cdd556b19943204d9dad46f1eed554b797dc12b postgresql-plpython3-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 7e4c8377ef200409292242e3858ccedaf62b9d858fc98cd08528550d6dc1330b postgresql-test-rpm-macros-16.10-1.module_el9.6.0+174+80cb77f0.noarch.rpm 8cd0978dce92e40295d15a58a3df8e11d64b51a4c0d3f647b2342cc2a57d84a1 postgresql-server-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 8ceabf2395e0753a2a0d86ebd776154a840fc26a3f719682818b8c8ef7917ef5 postgresql-private-devel-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm 958b4e1108a6383acbfc0106b4f43e451c0844b25ee3c93456c2a19834fd16c8 postgresql-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm a1259062eda07e1506c8c44ddeba4ee31cf943810e31f398415953bd2b6a32df pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360 postgresql-docs-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm a56e7f0a4f21befd26e3c297a0d8aad8995f62edccb87bb74d512a5d434754d3 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-contrib-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm be9f3f4a6f99d0f02098ff05ea8a7fee5ad9482ea0beecda2cea205537735e72 postgresql-static-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm c8877ca835c6b9e75b4659acf81087e76e7682b45a252f14095c91e347eb81fc pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 postgresql-pltcl-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm e0df43a4aa8fc5bbf1f3cd84659f2c90c773d54fb4aad8c81508daaa6835a196 ALSA-2025:14862 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89 postgresql-pltcl-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm 144b5aa38d192e02b2dc962321539ee6f97bd3fe83d3d6284e7d6ef924806e21 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445 postgresql-private-libs-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm 4ad82c9b91006defac74e77a20277d2f4610fa932ace75e6fe8c139e60899142 postgresql-server-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm 4bd264dcb8f415577ee1aebe2fce1689f00c3ace1b06b3a9ef6810ddd877077e postgresql-test-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm 4fe697c27c9ced5bdacc0fdf6fbeaaaaec1986c46ab4ca49d966a3dda5b1a3d3 pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm 565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f postgresql-plpython3-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm 64fd186b66437bd1984f6668255f947984cb0cf91891a844f28468b010e13bed postgresql-contrib-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm 6ff2ab8643f199614dd2861d8d7b0bf37ae63a934149ae01f85a23bd3e1f9fad postgresql-server-devel-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm 7ad2887f2ef986496416e67d0057b2b50698fee359ca06e926ebaf6a36b4d3ea postgresql-upgrade-devel-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm 7bae7f879ff8a1e204a749b37543fe6c3a2bfaade7259a33df6c83c6d61bb615 postgresql-test-rpm-macros-15.14-1.module_el9.6.0+176+c508cfa2.noarch.rpm 8f444764231792d83992cc5f7c32837a23051773da9cd0c53a4cf84da5820e2f postgresql-static-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm a070e2dc460d8f0bdbc9f72ece4cc46200ae55709bdb3b3158ae8a201f466753 postgresql-docs-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm a3cb24bb9e2004bc10e10cb5a112f77597d7efe5884c882ea2c5a2c9d6703c34 postgresql-upgrade-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm b1c1ce7b359576b1c23a66c7a68970559ea658700c78510e0817c5e0c337a715 postgresql-private-devel-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm d5747359d0765671d4060ba16ccd33d8326f1d3e5ce6ff9c415c6c78ceeb9d8c postgresql-plperl-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm e1ec6b603e7a0888692e5dd21aa86a9437755e744bad72b6e3d72dab3ca1f426 postgresql-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm ee842480ccdb7d09238a628b21d187cc3ce7abe9f8f247093cd5bd49c6716d57 ALSA-2025:14878 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default postgresql-contrib-13.22-1.el9_6.s390x.rpm 14372c953f65b3b27133919310f64ce72a567a20d74314fed5301d55983aa791 postgresql-upgrade-13.22-1.el9_6.s390x.rpm 25eab2598b1c7ca873485fb3fe9859c62787afdb511361ff5d7766dc4cad276d postgresql-plpython3-13.22-1.el9_6.s390x.rpm 48582c0a76ba982a7d72695bba0f8cffee41f3f94491cfd58a1b2748dd78ba71 postgresql-plperl-13.22-1.el9_6.s390x.rpm 739157fd845776a28517a61bdcb352fd9bdc5ae4070e7b01344da431756fcb02 postgresql-pltcl-13.22-1.el9_6.s390x.rpm a11c674630758719f5199bf85abb32879e9dfe413d916e97b217d08d0fa52948 postgresql-server-13.22-1.el9_6.s390x.rpm becfdff9d0845904ed2d83fc966ca20c0d39ad8ba6d9aabd63484e61068c1060 postgresql-13.22-1.el9_6.s390x.rpm dc0cd2414064c9fa919b3b1ac9631e6c92c05f84e40f12e5a3d7f0d1e328843a postgresql-private-libs-13.22-1.el9_6.s390x.rpm eafd7fb6674a0da729bd70dd8e716b1771bda18cc2322d4928f48ef3cb7a0c88 ALSA-2025:14983 Copyright 2025 AlmaLinux OS 0 1 Moderate

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: mod_proxy_http2: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module (CVE-2025-49630) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mod_http2-2.0.26-4.el9_6.1.s390x.rpm 0404f83a056b857d681ca9e1d540044bc92200388f4f43b1305f919a86141830 ALSA-2025:15007 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.12-3.12.9-1.el9_6.2.s390x.rpm 5401714730a66cda19f5c2927af581e5443a96ead1e652a6dc0200ecc906e425 python3.12-devel-3.12.9-1.el9_6.2.s390x.rpm 67f4ae347385eeaa702b1a438685bbc07b0fa2ffc33a3a2a90c353288e4277d5 python3.12-tkinter-3.12.9-1.el9_6.2.s390x.rpm c6ef06fe28373c883e21ad71e2885582fb72d4f91d6d3800b1ff95a9f537bcfa python3.12-libs-3.12.9-1.el9_6.2.s390x.rpm e6365733509a6363db9d21ec1c0edae4495a99589b75cca1d3f8209f87b379b8 ALSA-2025:15010 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.11-tkinter-3.11.11-2.el9_6.2.s390x.rpm 5559a4b67ccbc004d8d5b34496c51ee0d29ab25c7e29baebd71541445eb0c309 python3.11-libs-3.11.11-2.el9_6.2.s390x.rpm 6375258532b1caa085b526b31ebb40960932065ff30b766bc34a10aa01e15a44 python3.11-devel-3.11.11-2.el9_6.2.s390x.rpm 95b67dd1be5b27afcd58613eb98281c98e666b5170257e5707aaa64cbe567be6 python3.11-3.11.11-2.el9_6.2.s390x.rpm c811e0b35595ffcb05f6cac3be9f68ce8e69d273bbd443ac2dfc4f02a97269a8 ALSA-2025:15011 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823) * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200) * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211) * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350) * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464) * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461) * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-debug-devel-5.14.0-570.39.1.el9_6.s390x.rpm 115a3a5749dceb35ab3b680d046534f7e219b88c8d69beb15e204565c4f7634b rv-5.14.0-570.39.1.el9_6.s390x.rpm 1a8ad467c9aad58514d5bc83957326c7c227d5a3fb43d3437aac82ff51086ebe kernel-zfcpdump-devel-5.14.0-570.39.1.el9_6.s390x.rpm 222faf74e86bef2a80c4038964f7fb4e1d2bc72f1c3d7c131a589c52a8011a93 perf-5.14.0-570.39.1.el9_6.s390x.rpm 2867948516285e1e40a2eeb8ad692d8bbe377b8a6a138800b3d15cacd8abdfab rtla-5.14.0-570.39.1.el9_6.s390x.rpm 4b4ad6e75a55e55ee25cf6a20ce8bd88bbe032cb73961ce2abe268f08d2a4749 kernel-debug-devel-matched-5.14.0-570.39.1.el9_6.s390x.rpm 68b9728ef6e6fad73e3caad4a2c669f2c8a05e2116f43e9a7f43b06d390148f0 kernel-zfcpdump-devel-matched-5.14.0-570.39.1.el9_6.s390x.rpm 76cd69de513468876435f9aaaf33085f0de64df10a0300af85576d7a96b9b7cb kernel-headers-5.14.0-570.39.1.el9_6.s390x.rpm 8b6526051a83e172ba56e69cef2925069cdf065a17a8d25dbb8ad244c0645eb8 kernel-devel-matched-5.14.0-570.39.1.el9_6.s390x.rpm ba9539b9f5610cfc5b97790a87f2d2ca647899053272ace0adccb5f605458fd8 python3-perf-5.14.0-570.39.1.el9_6.s390x.rpm dbed1129b3fb7d13801da6568e332ce48b5b4a37625941e2706befcaba57713e kernel-doc-5.14.0-570.39.1.el9_6.noarch.rpm e3a9ccef85eaf1c49e12b6d1ef3ae79c481bdf12c9f25578a0eadf29b91ba204 kernel-devel-5.14.0-570.39.1.el9_6.s390x.rpm e95389e5e9f815d70ff0a2e77fa26892ef25b75618c7b232280e62ea4f8979cf ALSA-2025:15018 Copyright 2025 AlmaLinux OS 0 1 Important

udisks2 security update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fix(es): * udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default udisks2-iscsi-2.9.4-11.el9_6.1.s390x.rpm 32b93d7f37b193a2a5250d8826f14f71342e013050e4dcd3b76d0da10524f850 libudisks2-2.9.4-11.el9_6.1.s390x.rpm 534ee23f1c511a2ccef4f39524d412bd663a0c731246acb401e03b9c40835266 udisks2-lsm-2.9.4-11.el9_6.1.s390x.rpm 78c47d73b4e86176241776a6e504bc075d775813505fdf2035b9b1e8109f5691 udisks2-2.9.4-11.el9_6.1.s390x.rpm a2701e0075f1f1a74b7447a2b98d07c83d3e73b9719d11929ff7146ea7e6d457 udisks2-lvm2-2.9.4-11.el9_6.1.s390x.rpm babc20eeca545aaf06b3eaca8328ab7a2359b6dc45dede33dc6ac56c85f2b989 ALSA-2025:15019 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python-unversioned-command-3.9.21-2.el9_6.2.noarch.rpm 0fdd1921530cc760298c2928f170a56765e57da35d0834b37b1669309dc7117e python3-tkinter-3.9.21-2.el9_6.2.s390x.rpm 6f2c04a812d73767de30c9a47f3cad58b486a00c0376c87d34cec2460b59508c python3-devel-3.9.21-2.el9_6.2.s390x.rpm 739400562b80980285c75b9a300646db0b9cf9eeeb50881e7a7d244d0588d298 ALSA-2025:15023 Copyright 2025 AlmaLinux OS 0 1 Moderate

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) * httpd: mod_ssl: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) * httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mod_proxy_html-2.4.62-4.el9_6.4.s390x.rpm 0f5a8c505888249213c36b3c63f020c517859aeb765dc06994c749ef90dfaadb httpd-tools-2.4.62-4.el9_6.4.s390x.rpm 16354127af3a7b447d5f2a658a5852d589e10c26096cb2ba01d73d09111e305a httpd-core-2.4.62-4.el9_6.4.s390x.rpm 710d3a57e6e36f1ea1ee0a6f94f26c91b674f1708e4847955e3d9f7dc387e3b7 httpd-filesystem-2.4.62-4.el9_6.4.noarch.rpm 8a61d14555bc458fa6ecf403c1ebda681a2579c804a35b06d1869023ceec8fea httpd-devel-2.4.62-4.el9_6.4.s390x.rpm c77d7a81660ae054da11bbe47a4013014ba18bce5874a6ea98ea87881b6ba0b8 mod_session-2.4.62-4.el9_6.4.s390x.rpm ca72c37b994d25f5bd6250088fb4581d6e47cedca98c290a41fc351b8c5b06e4 mod_lua-2.4.62-4.el9_6.4.s390x.rpm dbdaf26da2e48b8f5cb52c791d1341264db917bea230433a9a988124fc2c22ee mod_ssl-2.4.62-4.el9_6.4.s390x.rpm dcad365e17d694f49ce685e300d523f7e87004090524bec45209fb47dbf12ccd httpd-2.4.62-4.el9_6.4.s390x.rpm dcfb7e0c95e08d78a50fb69ed6b4e9b3c218fd277c244c6edaa586e112ef4c47 mod_ldap-2.4.62-4.el9_6.4.s390x.rpm f0f2d455cc008ba65dff62388b88dee738eb2493dfe79c4204d608c01c97b770 httpd-manual-2.4.62-4.el9_6.4.noarch.rpm fcee105be359c4724e4569d741834f7c7e9142cba4d0d18ccc9cb4bd8a440e92 ALSA-2025:15099 Copyright 2025 AlmaLinux OS 0 1 Important

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Linux-pam directory Traversal (CVE-2025-6020) * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default pam-devel-1.5.1-26.el9_6.s390x.rpm 1cd39f1f4ac5cd4eee96fd6cba685d1e4ee19cc77fae7d571dffa1710e2b4ee9 pam-docs-1.5.1-26.el9_6.s390x.rpm 6e16cb4d0da4efddb4f5c272de3ff3ed64bd9d41aeb56ffcc637681bd1d5b038 ALSA-2025:15429 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803) * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default perf-5.14.0-570.41.1.el9_6.s390x.rpm 02a5b1e6ba83593d413db660f986531aa4e315a14d411294ea5066f62245ea18 kernel-devel-matched-5.14.0-570.41.1.el9_6.s390x.rpm 04446edbdccaa785f19e9ed20dddadc58825cc1e2e2cd1a8b3b2e456dfeffb35 kernel-doc-5.14.0-570.41.1.el9_6.noarch.rpm 0592d6ae16bac11ae51c039811eef218331c115de259add72efb5cf2f042f973 kernel-debug-devel-5.14.0-570.41.1.el9_6.s390x.rpm 187e15c5ce87bf12aa89f8bfcf6ef9db2741ac78d457d91ec918b1d2b8ebc3d3 kernel-headers-5.14.0-570.41.1.el9_6.s390x.rpm 68e03bb78374d1363dcf0fdcf07d7ae87a860cd33623620e4e70086a0a6ba87d kernel-zfcpdump-devel-5.14.0-570.41.1.el9_6.s390x.rpm 7c6459d627701e69de4c4d457573f076655c06dff0f9ddc3de0eb72319e44d96 kernel-debug-devel-matched-5.14.0-570.41.1.el9_6.s390x.rpm a76de3e70b2251d15b1ae28e152fe60619ece9da22c3effbe53287fb5472f944 python3-perf-5.14.0-570.41.1.el9_6.s390x.rpm c5c7572e6657901e32951382df511d51560850e22d31b14ab12471dc57e999e1 kernel-zfcpdump-devel-matched-5.14.0-570.41.1.el9_6.s390x.rpm c6744dd5809ea2ffc9c42744117d54ac7b417ed382080b5b5940675d87403e69 rtla-5.14.0-570.41.1.el9_6.s390x.rpm c76ce6d6c674ac5c308856d5701a7b7cb96f2cf7c1532caa6a00a78e510d55d1 rv-5.14.0-570.41.1.el9_6.s390x.rpm d413f06832b5cbeac6782ed307f03dd0711c3a11e0afd49f90ed003397146728 kernel-devel-5.14.0-570.41.1.el9_6.s390x.rpm f47d74044240c3cf45366b210b034684436f57dcf7c8ff515927639bc0bf7ea6 ALSA-2025:15608 Copyright 2025 AlmaLinux OS 0 1 Important

python3.12-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVE-2024-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.12-cryptography-41.0.7-2.el9_6.1.s390x.rpm 066e0756192635e3ae821e7146ce4a709cb813f24a7b00714bbb0dff24b9ae1a ALSA-2025:15661 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097) * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352) * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-perf-5.14.0-570.42.2.el9_6.s390x.rpm 0ef89b10b8db3e4a14a3675b69fed8a779c0d688fff8f54fa3914f226f493b90 kernel-zfcpdump-devel-matched-5.14.0-570.42.2.el9_6.s390x.rpm 1712df898ca891a7f406f935de024e55c0ba10ffb91dc198b0fd45d8529e4fc7 kernel-zfcpdump-devel-5.14.0-570.42.2.el9_6.s390x.rpm 52d9a53baf9dc9ce0041a10b8c7c27b25f2ffdb3af332075217dd52e0571e63e rtla-5.14.0-570.42.2.el9_6.s390x.rpm 6fa74cae5016c75a7a0bf67ce8a134d3553b7ab9bbf0cc36c6cbca3cdb672e3f kernel-headers-5.14.0-570.42.2.el9_6.s390x.rpm 70a3ca4e3f6888f412a44a6be4b04a830b24fb6c4dae62f50ca6619e4932de8f kernel-debug-devel-matched-5.14.0-570.42.2.el9_6.s390x.rpm 73c32cf6a6c1ac35c8d7473b1c49fecdf157557a20d8945e1367f95e25c9d8fd rv-5.14.0-570.42.2.el9_6.s390x.rpm 8c144d8271d3c3c0db2f02a528d77be9c156fbeead56f424219960999d16db62 perf-5.14.0-570.42.2.el9_6.s390x.rpm 9b48b6631ead45705a4e07c7ce97b3ff103a27fe2a6548b734d081aafc390386 kernel-devel-5.14.0-570.42.2.el9_6.s390x.rpm a12d3a156b46ea3bf3c4d5298ff943e0d39f7a9e9fd1ccf820de99d76bb6603f kernel-debug-devel-5.14.0-570.42.2.el9_6.s390x.rpm b9cf37ea0bcc77c594ecdbc7d2bd4f3ec5d2dcc7a762e0caed86f1129c4962ce kernel-devel-matched-5.14.0-570.42.2.el9_6.s390x.rpm bfb70ce96c24c59eb0d04259b21f5423708a542984b93c6981558c8e4418b500 kernel-doc-5.14.0-570.42.2.el9_6.noarch.rpm f7bc78813a004899da727b4dd8be03626f975f3d67b0b16f2dd5d36687253eac ALSA-2025:15700 Copyright 2025 AlmaLinux OS 0 1 Important

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS (CVE-2025-58364) * cups: Authentication Bypass in CUPS Authorization Handling (CVE-2025-58060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default cups-printerapp-2.3.3op2-33.el9_6.1.s390x.rpm 3f235e88b9e7f36ed42a4393d12d5e698c35d052d547b82f24f192455a8dcb40 cups-client-2.3.3op2-33.el9_6.1.s390x.rpm 4cbe90ecf935d6b1c553b555f9db4d7fde63fedf4dbccc821fba6c9ba292c010 cups-devel-2.3.3op2-33.el9_6.1.s390x.rpm 5e7bc0e636d966f8848192e79ebbaa94be4ac9f88c792c542139207f97096bfa cups-ipptool-2.3.3op2-33.el9_6.1.s390x.rpm 936eace2a3ee14c20661b9a37fad9271047fa271089c0f75ea1b20f2917360b3 cups-2.3.3op2-33.el9_6.1.s390x.rpm 96f9781b4c0441a00762684075407f2d599cc569efe9b3b4981b16752638b9e7 cups-filesystem-2.3.3op2-33.el9_6.1.noarch.rpm a94d3e4941893f0cadac9947fff905cde01e36b131b04be71758ea8d10ad71e1 cups-lpd-2.3.3op2-33.el9_6.1.s390x.rpm e8bfe612ceda36d852938b7825676681f230aedbeb9e4dfe7f9108eab93fa1e4 ALSA-2025:15740 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CVE-2025-38550) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-devel-5.14.0-570.44.1.el9_6.s390x.rpm 2ef621fba906eea776079c5e5cccf7f333a1dbf7dc0d221621b6c2074b068c89 kernel-doc-5.14.0-570.44.1.el9_6.noarch.rpm 3c652ff640370fc0178ac170ce2118fde23d3b6baf99d3c8c51d0c5acb7bc98d rv-5.14.0-570.44.1.el9_6.s390x.rpm 4bb8d6d7a692b9dcb03f34ba507ea5f386ad263b35897ad0f77cfce2220f524a perf-5.14.0-570.44.1.el9_6.s390x.rpm 64a6748ef3623cc9bc8af8f578fe6c535c4f624399a2597a95baeafaa6488638 python3-perf-5.14.0-570.44.1.el9_6.s390x.rpm 6c1f70f5b88aad402395eb6edfd57e837729dc1a7633bdbed03d1dd6bb39caa8 kernel-devel-matched-5.14.0-570.44.1.el9_6.s390x.rpm 73393dc672d0e6cc14af87410fcc66f5da6a610edb26f8f758d121119f2dd599 kernel-zfcpdump-devel-matched-5.14.0-570.44.1.el9_6.s390x.rpm ad5257f5514cca0f80c44632576d64d3c5893813ea31c12e3cb084e1d8cdcea7 kernel-zfcpdump-devel-5.14.0-570.44.1.el9_6.s390x.rpm c19590f8248605c5f1865ac3031fef83747cf9cdb0a32b1685a1684709ead663 kernel-debug-devel-matched-5.14.0-570.44.1.el9_6.s390x.rpm e3429fbdd66ca4a261597bf0f8b235056afef81eb158d59cdeef294ba295164c kernel-headers-5.14.0-570.44.1.el9_6.s390x.rpm e4bc4f4df0493492f6d513a795af8101043af53c987c33d792646ac95a213300 rtla-5.14.0-570.44.1.el9_6.s390x.rpm f23f52364b3f6e617709f5ab12260bc793fe290899df3d5dbd196ac0b8e340e2 kernel-debug-devel-5.14.0-570.44.1.el9_6.s390x.rpm f8482137e2808ec5bf487707dcbc20376204df2cd19442c68bb448d37b0c377c ALSA-2025:15887 Copyright 2025 AlmaLinux OS 0 1 Moderate

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default opentelemetry-collector-0.127.0-2.el9_6.s390x.rpm 40953f10987d323965ebae113a509e66f7256b047ff3491579f43e26f7f5de9a ALSA-2025:15900 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default podman-docker-5.4.0-13.el9_6.noarch.rpm 00097c1b5ff2323445184634f46b33225ad2456dc40c04106a02f60e4c886536 podman-plugins-5.4.0-13.el9_6.s390x.rpm 777654f463baeb05db6703e81583b874a3e9c727a8868f3c71490c5dad3998c6 podman-remote-5.4.0-13.el9_6.s390x.rpm b286cb05c6479908bd6e1b561c7b46c707dfbfd6b8884ebee38fac88c127632b podman-5.4.0-13.el9_6.s390x.rpm c54464f881e646ed6979b0fc0093de0a17d8909367c6eefab0a6ab4f75ad45f5 podman-tests-5.4.0-13.el9_6.s390x.rpm d46a222aa94f88a04b068ffa868df893d0a2e48c96a748f0ed489e40e90e6ecf ALSA-2025:16046 Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * openssl: Timing side-channel in ECDSA signature computation (CVE-2024-13176) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688) * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699) * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585) * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21588) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687) * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580) * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696) * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575) * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684) * curl: libcurl: WebSocket endless loop (CVE-2025-5399) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092) * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077) * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085) * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082) * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087) * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084) * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mysql-devel-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm 1ea43775a7def6359265d4a82924b97d16fb422ea25dbf11205742cff3351250 mysql-errmsg-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm 321197f9d190ca05280a2668fd97836928925ecf0eea8c2688b8b3c68a7e8264 mysql-common-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm 4efc97279a47c73709b3d728fa707714260e15242037235fb0bd9ab6e05edb31 mysql-server-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm 63009b0195e8e3d09ac0294913423e86b7f803fb392f1460ddc140579be14252 mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm 69e976d54c4bc862ea946aa1957a4af06ba625136f6734651e78787b4180585a mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm 78610de9fc29fcf1fab0978ab5b6aedc6f7f3fac5e1160246fbcee062e886b90 mysql-test-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm 7fd3b032506e0eea88473c0619f11310cbd2b6800b1acd4422a4d4c5ee0af6c9 rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.s390x.rpm 8c0a757ea82924ecf340e621f29cb6d7322ebd996c0b7e05116c51486e2b6c37 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm a6a291c26e1b08f26ceec3afe3bb4650cb21e203ce04cff2350db34cbd12e24d mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm bad50cf06e6ea4327ddfa8063a98361e493a8fe7dcf921be55ba12177dac540e mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm ce7c078f962fd614387a5a86f7b229eb57758d44e95f0f1ad2cd522019019b61 mysql-libs-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm d4544f4f6c7cabe1b1a998be3e7a95910ead5f5f68bd046e20b23480d8f4cc69 mysql-test-data-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm e1e88dcf6959c62bf9ed1994a84293a3b5d0666380b0ceef5e23c91b3d085b85 rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 ALSA-2025:16086 Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688) * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699) * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687) * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580) * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696) * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575) * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092) * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077) * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085) * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082) * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087) * mysql: Replication unspecified vulnerability (CPU Jul 2025) (CVE-2025-53023) * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084) * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mysql-8.0.43-1.el9_6.s390x.rpm 657b36060e630dd83cc4c500e462d9bebfc5166d7c468c2693cabe4bf53c66b1 mysql-errmsg-8.0.43-1.el9_6.s390x.rpm 889b7c30939248d75d1ebc06835d96ad2bcc486ae236c0da20bd34d8235189ec mysql-server-8.0.43-1.el9_6.s390x.rpm aa58a3bdfbadc8c83528fba72a6a7b1d8969eb8c4394c26e74609288743f4ca9 mysql-common-8.0.43-1.el9_6.s390x.rpm abb166554bb5555468816ef42d89d31f3760755b434e7e392d813c109be8392a mysql-libs-8.0.43-1.el9_6.s390x.rpm ee6112407190b6205d66e06ac866fd0d96791be644dfa9cde586a609b5cee661 ALSA-2025:16108 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532) * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528) * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537) * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536) * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default firefox-x11-140.3.0-1.el9_6.alma.1.s390x.rpm 06b3b9a7421fdbf82fed2f5640b3809ff43dcb4a35707922ce4f2b7d244bb395 firefox-140.3.0-1.el9_6.alma.1.s390x.rpm e6c449c12533b8da74ca1e329415c0c72279302bc99e7c83df837d75dd324964 ALSA-2025:16116 Copyright 2025 AlmaLinux OS 0 1 Moderate

gnutls security, bug fix, and enhancement update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990) * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989) * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395) Bug Fix(es) and Enhancement(s): * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620) * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621) * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gnutls-dane-3.8.3-6.el9_6.2.s390x.rpm 0b2cae36a163bbba971aed531194ae79a9a799d2c701917190199b25e07df22e gnutls-c++-3.8.3-6.el9_6.2.s390x.rpm a61c1305420def423e09b261b743ac1976890a8c49e8d1e24ff1087531799071 gnutls-devel-3.8.3-6.el9_6.2.s390x.rpm aef80a336f54495c98097a0e4c14110c71efed2ceead3fff21cc2a1164098eaf gnutls-utils-3.8.3-6.el9_6.2.s390x.rpm ea4eac035958d263b76e1439d6525602bda9473fd7d516e4922035d283dcc4b3 ALSA-2025:1613 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150) * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083) * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default npm-10.9.2-1.22.13.1.1.module_el9.5.0+139+09296491.s390x.rpm 059dfeb132d92a36ef2e6e5d7726c32fc852850a711a17bb2386f872619ffada v8-12.4-devel-12.4.254.21-1.22.13.1.1.module_el9.5.0+139+09296491.s390x.rpm 21f02213f34e914316103f40d5db10b2feb329f3b9b8e24da31765d518eac615 nodejs-full-i18n-22.13.1-1.module_el9.5.0+139+09296491.s390x.rpm 2c9cdd3d7d8dd15a28977830c074e17b5768dffd50183328c10217a77ae0eb4d nodejs-devel-22.13.1-1.module_el9.5.0+139+09296491.s390x.rpm 2d85f0e4b2280370acfb41474e53982098f04d68401d7012769a04a97496b0a8 nodejs-22.13.1-1.module_el9.5.0+139+09296491.s390x.rpm 44a4b604666a6e8416ec658ba46004e52d90970154eca3c908f9a3edaf2d9429 nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662 nodejs-nodemon-3.0.1-1.module_el9.5.0+136+92f38f3c.noarch.rpm 9568f3f288eb90ba5d978da40785d16e3210b65e92276e8ca17b6d88a3339c1b nodejs-docs-22.13.1-1.module_el9.5.0+139+09296491.noarch.rpm 9ceb6b255ac8e0ab31086f29fe4215ec55497fa486c2df07985cdb83c7035025 nodejs-packaging-2021.06-4.module_el9.5.0+136+92f38f3c.noarch.rpm bfb954cf0a070014a29b11e53507cb0f05b992c7e1bf6cb568840bb815dca58e nodejs-libs-22.13.1-1.module_el9.5.0+139+09296491.s390x.rpm e3d8a3112674eafde2c96794429a8ad69745afeec292e5e767d2c3b919ed466c ALSA-2025:16156 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532) * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528) * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537) * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536) * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default thunderbird-140.3.0-1.el9_6.alma.1.s390x.rpm 7618b734fe29e1f04a380bcbf7f52e5f466ed3027cd889035dcaa0dc3d92fc02 ALSA-2025:16398 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: usb: smsc75xx: Limit packet length to skb->len (CVE-2023-53125) * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810) * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498) * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default perf-5.14.0-570.46.1.el9_6.s390x.rpm 0bffc271de5a1bd9d2b11f9c49b3239c9e2e5cec6e2db4411f1e98cceac47fac rtla-5.14.0-570.46.1.el9_6.s390x.rpm 1a673b4ecc80b3979a0b1fc7e35c6ae7be551edc7bc8959ba235ad169f1662b9 kernel-debug-devel-5.14.0-570.46.1.el9_6.s390x.rpm 1b0194ab72c8a2919aeb54472a42f5de5f0489e82a288f465c8404738b38723d kernel-devel-matched-5.14.0-570.46.1.el9_6.s390x.rpm 1c58eafdcef3a13e2e007104081dab32b885b5cace00f08ca19f907767e59f68 kernel-devel-5.14.0-570.46.1.el9_6.s390x.rpm 2d62e93d4eeaee440142c5ee9bffc377420d192f934d9706409ca41181942f1c kernel-debug-devel-matched-5.14.0-570.46.1.el9_6.s390x.rpm 38e28e0ba26d69824f0387b807cac20bcecfe02623c03e556553ae1a76ab624d kernel-zfcpdump-devel-5.14.0-570.46.1.el9_6.s390x.rpm 580d1dbfa43cb4c73719299d7184c9a3ddb912f621743d239df91ac10548c0c6 kernel-doc-5.14.0-570.46.1.el9_6.noarch.rpm 8840bc58e79eb03b7403d70c43e87b78b6960ef7e49d3a80f5aeb262bd741e6b kernel-zfcpdump-devel-matched-5.14.0-570.46.1.el9_6.s390x.rpm 952767fb1a88d5da6f3a51c8f96f1d7e49b6f2c0e54ab283202bd78ca99ee5d0 python3-perf-5.14.0-570.46.1.el9_6.s390x.rpm cbdb795a826b1ede378ec803c3393b4c6bfeabf85c4eeddcd2b0452b23f51d77 rv-5.14.0-570.46.1.el9_6.s390x.rpm fc84c5623d1b63e9241626c0aba350644b514c54f895ae1243b76f072febbdf8 kernel-headers-5.14.0-570.46.1.el9_6.s390x.rpm ff8519c7e951a9baf34d0f7e694cd604cb12021724e5be07bd49ed1fb3d30218 ALSA-2025:1659 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm: migrate: fix getting incorrect page mapping during page migration (CVE-2023-52490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default kernel-doc-5.14.0-503.26.1.el9_5.noarch.rpm 2479a43804e37810c0b80ca99b70fc4cc46568ba4ed0596b9ee36dd2a8503b2d kernel-debug-devel-5.14.0-503.26.1.el9_5.s390x.rpm 3c112adae627ebc7fafbcbb70dd29848c743a2995801a97d2392154dabe2ed46 kernel-zfcpdump-devel-matched-5.14.0-503.26.1.el9_5.s390x.rpm 42d470a2ec4fa9c2b765dc31d620bb2d825cf1446303c9991fbb41418379bc66 perf-5.14.0-503.26.1.el9_5.s390x.rpm 495dd1ad144c4edd6c0d48f34df6a558e9cbd81aa2d6d83f80c055850118eb07 rtla-5.14.0-503.26.1.el9_5.s390x.rpm 592b1d65a2036f933bef44dfe1bbf086605ab6b08af27d4bdd3f9aabec537b47 kernel-headers-5.14.0-503.26.1.el9_5.s390x.rpm b6b77e8bf003a12050aa90afdb3ddcbe87605e0d5163b0fc1e06cc4911631a38 kernel-zfcpdump-devel-5.14.0-503.26.1.el9_5.s390x.rpm b746f29d5c6e74f45d4008cf12c1437c0da27c829366eb250b9f41a557c85427 rv-5.14.0-503.26.1.el9_5.s390x.rpm bdca3aad897ca84c0bbdf6c44f9299a586d459555060e7afc0d6241efa174eb8 kernel-devel-matched-5.14.0-503.26.1.el9_5.s390x.rpm d4c1ccef4d66ca3780586c317c934ce19f85d8a723dede771f2a473814bb369b kernel-devel-5.14.0-503.26.1.el9_5.s390x.rpm d5c8dd979ba4392f84b5c32dcf22e5954a445e15f952d9d14ed5978cdbd998b8 kernel-debug-devel-matched-5.14.0-503.26.1.el9_5.s390x.rpm e6566c6f62d9c60751e112933d0929ca7efcace210b48449f601ec9602ad353b ALSA-2025:1670 Copyright 2025 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187) * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default bind9.18-9.18.29-1.el9_5.1.s390x.rpm 07513e060ffd5b27272cf189fcafcac05f1deb0607bd3a09e6dcaae0a94c8b60 bind9.18-libs-9.18.29-1.el9_5.1.s390x.rpm 18ec345f9acbd07fcb45efec6a85052008f1911deda7f079617bb4607bee6200 bind9.18-utils-9.18.29-1.el9_5.1.s390x.rpm a53ccc8018511d40a7202609e1963a01236ad3780ed95befb45a4fb8fea635bc bind9.18-dnssec-utils-9.18.29-1.el9_5.1.s390x.rpm dfbb494e3512b7cdc759a5a1a6ba75094973871fc0f118472728f16aacb7c343 bind9.18-chroot-9.18.29-1.el9_5.1.s390x.rpm e0834566c6866f03caf1563a89fdaddb68102d0764b118df0ed3d61a7f0ae5c1 ALSA-2025:1671 Copyright 2025 AlmaLinux OS 0 1 Important

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) * krb5: GSS message token handling (CVE-2024-37371) * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264) * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238) * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241) * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231) * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236) * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237) * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203) * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212) * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199) * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193) * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198) * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239) * curl: curl netrc password leak (CVE-2024-11053) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497) * mysql: MySQL Server Options Vulnerability (CVE-2025-21520) * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555) * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491) * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501) * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519) * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559) * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523) * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default mysql-common-8.0.41-2.el9_5.s390x.rpm 27eabf960f9fcfa6bf8140737114ff77b52be9b85a6a72c848a26c28b30fe31f mysql-errmsg-8.0.41-2.el9_5.s390x.rpm aee557800a51d9bd8265e786c70c69bd52270effaa2e9f6f03a594c520b67889 mysql-8.0.41-2.el9_5.s390x.rpm b14a385f5c243da0c0d2bbc4d7bb216ba5b2023b6d93438e768b7ec3ae84c13f mysql-server-8.0.41-2.el9_5.s390x.rpm fc0a8ed758e7d1e5e667210e126b03069136a89428bae118a591f937dd7a8714 ALSA-2025:1681 Copyright 2025 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3-bind-9.16.23-24.el9_5.3.noarch.rpm 22b0cbd581bd49c0429845d8d5d9acc2b73a6cea8279f486f9327cc876219b7e bind-9.16.23-24.el9_5.3.s390x.rpm 306d3dfd1bfd52be2c3b4ae266e0dc42ab0490eaef56ef12027c94d4c55cbda9 bind-libs-9.16.23-24.el9_5.3.s390x.rpm 67c69e140204e0a1b9173e5b8e6a951ed58c5ce655820f89dcfe0ec3cface008 bind-dnssec-doc-9.16.23-24.el9_5.3.noarch.rpm ada4e0082730024c4bab00aa45def50b8739ba0ddfe2a66b38c2d1627465ff4a bind-utils-9.16.23-24.el9_5.3.s390x.rpm aee7ca88cb8a5300baf9ae051f3f9f7636940a60130ca71795f247d7a4765281 bind-license-9.16.23-24.el9_5.3.noarch.rpm b9977269dfdce9d84806c58529dc87316284ce76fc8c7aa2c1b9f1c73d98cbc3 bind-chroot-9.16.23-24.el9_5.3.s390x.rpm c2e346dbf97938b6a506e1918483c94b6682dbe9d49328229f29fdc9db2dcd56 bind-dnssec-utils-9.16.23-24.el9_5.3.s390x.rpm cf7cebbe07950bb493810071819bc6f88bcbd6163b1dde846f14cc6730beb2ca ALSA-2025:16880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472) * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718) * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682) * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-zfcpdump-devel-5.14.0-570.49.1.el9_6.s390x.rpm 02d8e0d649248c1a930f3d548285f9f31beba62419a72a5ce7d7e934c3e62c1d kernel-headers-5.14.0-570.49.1.el9_6.s390x.rpm 2b6c3e916429aee38d10422f1c26425f1ffd896fdac8a3e86fe0bdbbcc1d2a69 kernel-debug-devel-5.14.0-570.49.1.el9_6.s390x.rpm 5d436bb57acd18d1afba9c89e95b4f2de0865e03fcba03c4940390c35544d7f0 perf-5.14.0-570.49.1.el9_6.s390x.rpm 8b0d65924c21e8f5c09e6aa170e0fedc3904c1a7b73b558013d148a1c63c16df rtla-5.14.0-570.49.1.el9_6.s390x.rpm b404507bd162c9dabdea370049eeda5a3000290914ce9f2098f498dbb7945dcb python3-perf-5.14.0-570.49.1.el9_6.s390x.rpm b7fee64c28e7bc5d47663a487517fefb26b1cd9973261bbca7e81c2d527de83b kernel-zfcpdump-devel-matched-5.14.0-570.49.1.el9_6.s390x.rpm cbae93374dedb8e5e1e5aa5ba23dd0f87169dddc29f3c3e2d722645218e622f1 kernel-devel-matched-5.14.0-570.49.1.el9_6.s390x.rpm e0f4bb1190487f7342e7fe5495d8475b2e7d1bffef6e92614a54df670dacf8f9 rv-5.14.0-570.49.1.el9_6.s390x.rpm ebd79996eeb3d68f35ee47f4b4b6b3a1e3397697acad8c66d7bda808136fc2f1 kernel-doc-5.14.0-570.49.1.el9_6.noarch.rpm ed724e5ade50fd211f8b767c7868337fe2053bcda9207bcb9195fef06c91bf1f kernel-debug-devel-matched-5.14.0-570.49.1.el9_6.s390x.rpm f07bc29c2d910bb2fba064d8229f480bd88e25bb58d43659b9f713f22c30ba2b kernel-devel-5.14.0-570.49.1.el9_6.s390x.rpm fcb137f485f911fb1b93594c1ee0d6c645b702e8157c5454b5aa1d6ae28d3496 ALSA-2025:17084 Copyright 2025 AlmaLinux OS 0 1 Important

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default ipa-client-epn-4.12.2-14.el9_6.5.s390x.rpm 061dc8939086c1886e21267dd8ecd9aab444e9ab3b12f079f16072e6f44fcca1 ipa-client-samba-4.12.2-14.el9_6.5.s390x.rpm 1480650b91160256d0cc908d957bc05c295926f187e5b59e3940e39358f185f5 ipa-server-4.12.2-14.el9_6.5.s390x.rpm 188af9174cd4c695aa195df4fbb737f381aa208c7454c7591ef18f957d22ea45 ipa-server-encrypted-dns-4.12.2-14.el9_6.5.s390x.rpm 1f72dd3c6edcd8288c0c8d38159a9fb992a84a93911ecd8ba77d804da283e849 ipa-server-trust-ad-4.12.2-14.el9_6.5.s390x.rpm 2b2f88899fcd5b2c5664d1b6be688269db7094e128f5497aeb2ee11317f13a3f python3-ipaclient-4.12.2-14.el9_6.5.noarch.rpm 4afec2a4ec1fee6ae153d58e0b1d5c9588a3256badbcb617dd16e407de04329d python3-ipaserver-4.12.2-14.el9_6.5.noarch.rpm 5b39ad672a08c50e968b4955b06ed2964b9e80c96036e5066363e5226eb6be49 ipa-server-common-4.12.2-14.el9_6.5.noarch.rpm 5c58a48f8a41415c6cebc0840e2406d3619fd765f4eba07a23cce17e575d28c1 ipa-selinux-luna-4.12.2-14.el9_6.5.noarch.rpm 606baa5844d826f8b3106cd79fdedcef2c7b91cd0515ff6e286c894ab6306f84 python3-ipalib-4.12.2-14.el9_6.5.noarch.rpm 6d956768cb64c563e64603ccad3adb8bead1a4738780c0f9eb160da8f4a8a7f9 ipa-selinux-nfast-4.12.2-14.el9_6.5.noarch.rpm 79c3d1d875df54c2a6299732351c91176579f9eb90fc2c99e291b8b83a175eb0 ipa-server-dns-4.12.2-14.el9_6.5.noarch.rpm 8e61a839b8627ef3f21b54e422d3338d5f35a5bbd6b6e615957420ebd29e099d ipa-client-encrypted-dns-4.12.2-14.el9_6.5.s390x.rpm 9459dc885d7622fc2724c657b46bd59789c3bd342db068e0a49ef69b237f5030 ipa-client-common-4.12.2-14.el9_6.5.noarch.rpm 9473590c63e11c3260d122c56fbc634f7ea33586dcf3cf48153d6049a754f89c ipa-common-4.12.2-14.el9_6.5.noarch.rpm b1a6eafa2ab6872b4f60368da4f243697aef6b8d880bc3a813c505f399426170 ipa-selinux-4.12.2-14.el9_6.5.noarch.rpm bfb103ee750a8e17294b8333f5d7468297d5cd673ef0c74b7998d349a2d0be94 ipa-client-4.12.2-14.el9_6.5.s390x.rpm e8c4a811e1b4665fc070c999b47c44038071926dd6d86a29d961d6500305db44 ALSA-2025:17377 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351) * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-doc-5.14.0-570.51.1.el9_6.noarch.rpm 047dbd5b878a0bd6d008b005924025001e2134e62442bd7800a2794fd51b187f kernel-devel-5.14.0-570.51.1.el9_6.s390x.rpm 113135495d025f534cc2e51b9aafbb4b63f935678d8d46540b95bf14e075dc98 kernel-headers-5.14.0-570.51.1.el9_6.s390x.rpm 23fddb108403b16e60c28f4e86503df4e0bc64ee737c4cfcec6adbe2d6d6e87f rtla-5.14.0-570.51.1.el9_6.s390x.rpm 3167effb7b5568ccb41fc3b933dcb7fd72b6dd959072445ef57a1218cd2e45f2 python3-perf-5.14.0-570.51.1.el9_6.s390x.rpm 36829b3033d61284fea2844b5d0018f05205d13df8b86defae8372c2aae907c9 kernel-devel-matched-5.14.0-570.51.1.el9_6.s390x.rpm 43b6de11d51454e3dff8d26207dad92f852832f395beef56f0261cf39b034a07 rv-5.14.0-570.51.1.el9_6.s390x.rpm 52aabd68a277cd2c71e11758315e54f4214577b7660d106c77239c25cde3096f kernel-zfcpdump-devel-matched-5.14.0-570.51.1.el9_6.s390x.rpm 5b4f98454428c2276bbf351b1be4b9f0489d455bc42cd30562f86430189f2dca kernel-debug-devel-matched-5.14.0-570.51.1.el9_6.s390x.rpm 6ac2c173c8cf3ccf5f7ec926d50d12f02fab269498787bf51ac2d82beea55885 perf-5.14.0-570.51.1.el9_6.s390x.rpm a38a180a18ab44c1bcfccd1b098872bb927e4c7d742d4ac76c5fe1bb292d1004 kernel-zfcpdump-devel-5.14.0-570.51.1.el9_6.s390x.rpm ad56140fa02f0fc749b9c26eeba4938ebcd89fe29f52103f6a624c639c784ce8 kernel-debug-devel-5.14.0-570.51.1.el9_6.s390x.rpm c755ad2580b7013b5959d8dae19cab0b13ff796ed7428a932a68bf36447f4c4a ALSA-2025:1738 Copyright 2025 AlmaLinux OS 0 1 Important

libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default libpq-devel-13.20-1.el9_5.s390x.rpm 3524c3f5989959680f3da352ece97da177115c140583b85f0c306788b982c604 libpq-13.20-1.el9_5.s390x.rpm dbd90fe4b4eafb436ab3b88755f1d7d4347538b97d8acc01f3bd0a74a95e60f2 ALSA-2025:1741 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89 postgresql-static-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm 2ea5c5aa476308b8eb8da39f77f6aeb4a73721d15754e045cad946aa0fab1256 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445 postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm 468ada373998d8f2379bd16603602ad15333c7d240981d9dd4cff4b86d95dfe9 postgresql-test-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm 4eb3d214fb5d7da134b5550f40fc20ec6cb57fa0ed84404727be513736dbb1f5 postgresql-docs-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm 593340244619c70bb0483836a7139fe555e7aa43d61f27bec45a026d2d2cc355 postgresql-server-devel-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm 5d84bfe7b52a9ae20c465ac5c78a64072e2cc0378b84a0a5d55528fa9c2cb329 postgresql-test-rpm-macros-15.12-1.module_el9.5.0+140+e3f03d9d.noarch.rpm 6e2b70d191a2a45071734aada3f59d6a36768a015b8ef7c332a2f7fb07002581 postgresql-private-devel-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm 74771aeb9c5d8e028fd47a75b17198f5ef4680dba8f5df2f2a99f152f36d8e0a postgresql-contrib-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm 9d8c2afe1b86b006086b691069e1ff50978aa6e360dee49ae3c690eec63791e0 postgresql-upgrade-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm a8d8d71d389991535313728484e6f37d2eb097ffff73691be220d09875f84423 postgresql-upgrade-devel-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm ab08c9c325283ad60ddd126048330f2e5c51e8f0437db067016579bf720cd882 postgresql-plperl-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm ad788390c96d7816870fe0da81ed0b717b39ffe504d5f14828769502bb5c4c5e postgresql-private-libs-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm b43b95d6159064b49855f12fd0889c1553827ac8ae0121dcb9194d5e8081b734 postgresql-server-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm c5cc855b56e9c1ed7455fdb5931882e778818476bab6ede416a85f9a90b23fc2 pg_repack-1.4.8-2.module_el9.5.0+120+4533eb20.s390x.rpm df1164222320af61b8334ca2db5460bf0aaee4337cfff3c51ce7ba90aa1e9b66 postgresql-plpython3-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm e72d46b3e111b8daf70767eb96de16c97d830f25800ba45fb47c9356d11ec9db postgresql-pltcl-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm f692f3d14889ff295d6b83b59bc6b35c5442b79f4262702fa62f545edb52e799 ALSA-2025:1742 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default postgresql-contrib-13.20-1.el9_5.s390x.rpm 1c119d3b7228bae321295b9b2de21bc1aae1567504a467a7e3fde10104863fc2 postgresql-13.20-1.el9_5.s390x.rpm 4317f9b1edbeebbddc044449892077fc5038e8e32a7279fa6d5c5240560f2b2a postgresql-private-libs-13.20-1.el9_5.s390x.rpm 560577e745deadd4f3ef36978f984922e8496cc1461b55f9efb8807f72e1d70a postgresql-plperl-13.20-1.el9_5.s390x.rpm 8a98baac3411d8c36dcede8e3890bc705014b9a57f0de203c30502d7898dccc2 postgresql-upgrade-13.20-1.el9_5.s390x.rpm 8d9f28e4413acf696cf270a15a5a6fc2f9660f7a618a0bec587b8eb09b43360d postgresql-plpython3-13.20-1.el9_5.s390x.rpm c1189263f5c24be1f854d131cd82a8bd1aafa0b360f67d784023b6828c5ad8a4 postgresql-pltcl-13.20-1.el9_5.s390x.rpm cd2b8031a032c49a4525ebd57a426301e1f81d36a301207545fc4728228b41d6 postgresql-server-13.20-1.el9_5.s390x.rpm ceb47209b64e4b76d1784ddf33528aa1bd5d7709baeb9d25bffcd501643ab8eb ALSA-2025:1743 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default postgresql-plpython3-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 027a18da8f109d77f15b9736427998fd95954abfb748844b7d1b16fabd38b26d postgresql-upgrade-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 063eb4ee77020da20e3dfe0e20b6c06450b781a3b96ea02a1380f7436ab87c7f postgresql-private-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 169742932cb9e8f8bbcbf2c8386d0be2e603f1e41810c7c12095172a96bce480 postgresql-test-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 169bccac1c5914c1750a6bb77f8a2a803540b7ac594f49af17db03690a33f1c7 postgresql-upgrade-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 1a069cd86abd0f1d0c452e3b33c3a6db8e6f9fae10a61ecd1ddcda1eb31ecc14 postgresql-server-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 3118deacf2252ca855bba828baf83e72ae2555dbafb623a4373bbb1963c70aa6 postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 3c3f6f9ae7db5900e17b0a36fe1d4a788bf07b68380c415b9bb91f1c3407f78e postgresql-contrib-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 7610737064caae3288d23307767ee08a779a201ec35688c02c1850b2209b1908 postgresql-static-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm 7ed217d64ad8bca0c9de43281ccd0e29b28ee741824145c6afa4009358332b7b pg_repack-1.5.1-1.module_el9.5.0+128+1095dce2.s390x.rpm 7f6298567f4c4c449fb6821c1b7f708373496b47a39e64274a57c0e48396e0fa postgresql-server-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm ac0751d4374c6dd6542a5de7f6a9961e3e3ad37f162bb19d638057dea2be49b0 postgresql-docs-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm ae376b9ff9c8118a0381962a8abeb3d86ae87690e25d15dabbf4dfd76f7adefd postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-plperl-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm ba4c2b3e4a97a5c34667b5126e1af554f75abc4d7bc1935b100cc8ef3df20974 postgresql-private-libs-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm c9cf1d82bae11cd4b2e5eb0f62602b632c5909fbd9a9d1b4a38b65b803731aeb pgvector-0.6.2-1.module_el9.5.0+120+4533eb20.s390x.rpm d9e5362a606cfeea735372eaed74bfcdf4f197951f254b8087bf4055677527ad pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 postgresql-pltcl-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm dcf12da3f85e46824b5b63e30d7914197c79c2a8b15195ae200ab18b0b0dce0f postgresql-test-rpm-macros-16.8-1.module_el9.5.0+141+f4b0f9b7.noarch.rpm f39818d93691a7091f8e51657c5513b5a3683a1dc11c81512372024cf8c691bd ALSA-2025:17558 Copyright 2025 AlmaLinux OS 0 1 Moderate

iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: iputils integer overflow (CVE-2025-48964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default iputils-ninfod-20210202-11.el9_6.3.s390x.rpm 2e08d1340d374be21aa4477522e87fce6c666f510c1172392c3abcb5df1687e7 ALSA-2025:17742 Copyright 2025 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim path traversal (CVE-2025-53906) * vim: Vim path traversial (CVE-2025-53905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default vim-common-8.2.2637-22.el9_6.1.s390x.rpm 002a9a9ce012dba92926381dddf4fc2ecf8ca310ff89ad12bb29d9853afa4bd1 vim-X11-8.2.2637-22.el9_6.1.s390x.rpm 2047be00bf5eaaf4e7b24fc70f48181bb0114afd43238080d56cc83666475cad vim-enhanced-8.2.2637-22.el9_6.1.s390x.rpm 93a654956324d36861c93fb560317fba5cf7e04d12df736eb1ddcfe1d7a95a3a ALSA-2025:17760 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614) * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757) * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-devel-matched-5.14.0-570.52.1.el9_6.s390x.rpm 0119f9468c3aadbddf13d7574f068c53b67b36cf6cd29f965b300df5c55f376d kernel-doc-5.14.0-570.52.1.el9_6.noarch.rpm 1bf06be1fa5936b44f785fc6d5d68e4964bffd2d50c1e6a80323dcc203d9bcf3 python3-perf-5.14.0-570.52.1.el9_6.s390x.rpm 1d5bc26370a95d2b10e5def202fc965ed59e99ace54dcf2edda275353c07ab3e kernel-debug-devel-matched-5.14.0-570.52.1.el9_6.s390x.rpm 271e640c527147b5137e8361ee47175264b4bf2e98c82837901f69aff2dd1f74 kernel-headers-5.14.0-570.52.1.el9_6.s390x.rpm 42ec2fe806a23ff266e5264b4647c039465787fd56a2e668551865f14c830a46 kernel-devel-5.14.0-570.52.1.el9_6.s390x.rpm 5203832c0837043844ba7657f654c9ac5efc16ea2dc7438f200b72e063999035 perf-5.14.0-570.52.1.el9_6.s390x.rpm 5adeb9c1798725d78db341af57edd1d14e1b7eadf3c87204201c3e3181cb4a23 kernel-zfcpdump-devel-matched-5.14.0-570.52.1.el9_6.s390x.rpm 667f2b3cab3ee69ae31f53a82b4ba9129cc6f59d1663403487e28721113dcee3 kernel-debug-devel-5.14.0-570.52.1.el9_6.s390x.rpm 6887efcd031e8ab1a3266a1ae25a505adf4a267e2d038ae413765fef706e9ef8 kernel-zfcpdump-devel-5.14.0-570.52.1.el9_6.s390x.rpm 8113b0d9a132966993ba89556176e520ec5398fc864a45825ff67ffa51717b16 rv-5.14.0-570.52.1.el9_6.s390x.rpm 92d9991f22d2dbe47ae65822f1ce4fa264fbcc1d969f8ab976c418c499750267 rtla-5.14.0-570.52.1.el9_6.s390x.rpm a149a4e96dfd53c2351de564a7148d009da67987f6806689c007f92ab881da49 ALSA-2025:18097 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342) * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default webkit2gtk3-jsc-2.50.1-0.el9_6.s390x.rpm 3131dc88ee1b226cba35a1f92799845c0e387e6515cda435f9845d94be44b0d4 webkit2gtk3-devel-2.50.1-0.el9_6.s390x.rpm 4430be468a902081441dd75c3439d66f932c221c83a43da3d1ce19f473714a0b webkit2gtk3-2.50.1-0.el9_6.s390x.rpm 4863f6eb0d1a822250719faa8b66eeb4b67a16226c3f2afa814b0ab2694baa70 webkit2gtk3-jsc-devel-2.50.1-0.el9_6.s390x.rpm d78778593ff1574bd7285b738dde65a142d2f843c61472e63fc3058443bb3a37 ALSA-2025:18149 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime 8.0.21.Security Fix(es): * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315) * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default aspnetcore-runtime-8.0-8.0.21-1.el9_6.s390x.rpm 31cd1568abfa2ba9a103f2598d51be05fa48c20f20f6fb32d64ee0ef9f60d546 dotnet-hostfxr-8.0-8.0.21-1.el9_6.s390x.rpm 3d580396a65fdc01e117ecf5743f61432bfcee4d26c882754cb7dd844d021bdc dotnet-sdk-8.0-8.0.121-1.el9_6.s390x.rpm 3da60e1b759ff754cc10810b84cb3935193c686cd5cddc90438f08c270e5e469 dotnet-sdk-dbg-8.0-8.0.121-1.el9_6.s390x.rpm 42619164a400f705022188f86cb35bd055539cd53bfe1fd82c7f0b2f4787db1c dotnet-templates-8.0-8.0.121-1.el9_6.s390x.rpm 6079ae70cf109782b564a18b699224d4fe4909a39d794f1148df4614b3af9b3e dotnet-targeting-pack-8.0-8.0.21-1.el9_6.s390x.rpm 6e10cb0a2e10dd33f6529472781a8ba5720e69665c75000b05b55d7ecac98ddf aspnetcore-targeting-pack-8.0-8.0.21-1.el9_6.s390x.rpm a61806a8e3c8c9dd20dd0c8c7d999105d8605f65be36cc8d181dd5ddc288da77 dotnet-runtime-8.0-8.0.21-1.el9_6.s390x.rpm aa14121f441e6ed6570a0e570401fb875651308f20b1ab457ba2c2b5b4b7f501 dotnet-runtime-dbg-8.0-8.0.21-1.el9_6.s390x.rpm c73c30f7684d2c4e8b7671a48a6df350ce021e275dcbf55c83afc01b7ba570a6 dotnet-apphost-pack-8.0-8.0.21-1.el9_6.s390x.rpm d509ebf9d8f5bb643a6b18a4d9eed7fd15432d59e950ad0bc82b47ef61c3ee1a aspnetcore-runtime-dbg-8.0-8.0.21-1.el9_6.s390x.rpm f5f53e4a89e3eb0acda3fe9252dcbe2e970c95423b8e51b9bc90ce95e523c72e ALSA-2025:18151 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime 9.0.10.Security Fix(es): * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315) * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default dotnet-templates-9.0-9.0.111-1.el9_6.s390x.rpm 01287e90b5803ea982863bc2be574acea7f4c9e16cb83381d393116d16dba368 aspnetcore-targeting-pack-9.0-9.0.10-1.el9_6.s390x.rpm 022ab69e93bf3ab2cbc789ff68f900c6d4d718de4ebebf9bceb06309d76ce71f dotnet-apphost-pack-9.0-9.0.10-1.el9_6.s390x.rpm 08a215da7f2d92d60dc2d1f4bfdef569510f97ecbebc0be36e5b82769507a4cc dotnet-host-9.0.10-1.el9_6.s390x.rpm 381e836b2aaaa8975f460c80653a775aca54e97b080094db899537d1c3527124 aspnetcore-runtime-dbg-9.0-9.0.10-1.el9_6.s390x.rpm 3f83873653750e4fb0fe6bb4809ce6eda6ed3e2af649bb2b3bb0b837594bbf16 netstandard-targeting-pack-2.1-9.0.111-1.el9_6.s390x.rpm 422e9bff28ed6982a87f623f83f8240f9586a5f2c3dfbc6337f692cd72de839f dotnet-runtime-9.0-9.0.10-1.el9_6.s390x.rpm 49db887192fe29de17af4095c4ba4701e6144271a2292387c61f21c48d6c19be aspnetcore-runtime-9.0-9.0.10-1.el9_6.s390x.rpm 8af85c7ee1ce4c34ca40ceb0ab0ac38a1c546f4d75bbed4e6be6ed043d2d0167 dotnet-hostfxr-9.0-9.0.10-1.el9_6.s390x.rpm 8db5e5060a4b818a77fadb3c37a1be6e09f274f6d0f9fcec5ce91f9c47b2792d dotnet-sdk-9.0-9.0.111-1.el9_6.s390x.rpm a0dcdd1478218afeedf4783fe624e43c1cb6b2e0fc99d124b4d38d187a7ca6de dotnet-runtime-dbg-9.0-9.0.10-1.el9_6.s390x.rpm c86fc7c25286c8850c4491fbb347b1d11b6d6a3a3df2daae1a1e4e0a0605851c dotnet-sdk-dbg-9.0-9.0.111-1.el9_6.s390x.rpm f9bbc1b5a0bb171455c438777aaef257b1395c3d499b69ccf3bc130a5ce671f2 dotnet-targeting-pack-9.0-9.0.10-1.el9_6.s390x.rpm fe58953ce46b3484b9afc76d17eec5dc1e854e11e1cb9699d4ee91a6c632ec7d ALSA-2025:18155 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * thunderbird: firefox: Memory safety bugs (CVE-2025-11714) * thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures (CVE-2025-11709) * thunderbird: firefox: Cross-process information leaked due to malicious IPC messages (CVE-2025-11710) * thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708) * thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type (CVE-2025-11712) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 (CVE-2025-11715) * thunderbird: firefox: Some non-writable Object properties could be modified (CVE-2025-11711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default firefox-140.4.0-3.el9_6.alma.1.s390x.rpm 27f946ec92125a0e0110dee484f5f7a4570a88cc07e8b321d9fa27642ddedb87 firefox-x11-140.4.0-3.el9_6.alma.1.s390x.rpm c9e6601b2cb9da93f7715432519d9d9d7b25103c6fd97a001da87fafd17029c4 ALSA-2025:18275 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libssh-devel-0.10.4-15.el9_6.s390x.rpm c68ac1762d421c605a76278cde4142df56fc387f36ca172c259006aef43c6942 ALSA-2025:18281 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026) * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087) * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571) * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566) * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817) * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849) * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-devel-matched-5.14.0-570.55.1.el9_6.s390x.rpm 2029a8f2e9cb714abe2e46c7960be1e0d34b50492e675512778741b25aa6eb4e rv-5.14.0-570.55.1.el9_6.s390x.rpm 2dc1e002beda9393017c057990cd81c36f93e6f99e7c3e234cb9eff01b058f6b kernel-zfcpdump-devel-5.14.0-570.55.1.el9_6.s390x.rpm 48b461788c255327fd7112699bb975e207b2f32dfcb8cf85264229f5f5a3392b kernel-doc-5.14.0-570.55.1.el9_6.noarch.rpm 4d9c6b35d3194124513ca452e19b2f7736f8bea1266f6c1b065374ff9a92ef9a kernel-devel-5.14.0-570.55.1.el9_6.s390x.rpm 61c787c3fe73b7b3042f11279c8815df9db53f05cbaf08c9c84cd21c60f6f456 kernel-headers-5.14.0-570.55.1.el9_6.s390x.rpm 75a3c90cb1ad5ebc88e52a79d8f6c17c6e2d68b63b50292f047ee8350b8f4a88 kernel-zfcpdump-devel-matched-5.14.0-570.55.1.el9_6.s390x.rpm 8147d8a28bc40bfb9521e65635e956a2bcee6a2f49acfd5c7b24f4be870c01ce kernel-debug-devel-5.14.0-570.55.1.el9_6.s390x.rpm ab5322a46b8f68863e9deb1408ff0e3d4091b9bb11b13b4d7beeb045b8b4800b kernel-debug-devel-matched-5.14.0-570.55.1.el9_6.s390x.rpm dcda907ae852ce6ec307dfcf490318031b68e0b021bcae568353746251ce4c7f perf-5.14.0-570.55.1.el9_6.s390x.rpm e5077502c5f3887bd00ded7a95f39c8e2edcd7a8a54c7247c2e9b51291513b09 python3-perf-5.14.0-570.55.1.el9_6.s390x.rpm ef55f6a13633538122d6c458530ed6d688ae033ad79ec2c0404aaffb15d420cf rtla-5.14.0-570.55.1.el9_6.s390x.rpm f37070ed65d1115f8877cfc56c9c047fc7597c7ec7e8e50e8fa11e85dbde2d68 ALSA-2025:18321 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: firefox: Memory safety bugs (CVE-2025-11714) * thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures (CVE-2025-11709) * thunderbird: firefox: Cross-process information leaked due to malicious IPC messages (CVE-2025-11710) * thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708) * thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type (CVE-2025-11712) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 (CVE-2025-11715) * thunderbird: firefox: Some non-writable Object properties could be modified (CVE-2025-11711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default thunderbird-140.4.0-2.el9_6.alma.1.s390x.rpm 6cf845fd3f53643eeec3c5503b77c4886fe8cc14fba8ea8c84fb6cfeca52dedb ALSA-2025:18815 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Enhance Path Factories (CVE-2025-53066) * JDK: Enhance Certificate Handling (CVE-2025-53057) Bug Fix(es): * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 8 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.2, 8.4, 8.6, and 9.0. On AlmaLinux systems, this means that OpenJDK's FIPS mode will now be enabled by default when the system is in FIPS mode. To revert to the previous behaviour, use -Dcom.AlmaLinux.fips=false (AlmaLinux-118777, AlmaLinux-118778, AlmaLinux-118779, AlmaLinux-118782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default java-1.8.0-openjdk-headless-1.8.0.472.b08-1.el9.alma.1.s390x.rpm 030e66b3fbb851d457464f840b04bebaa64069a0c0de04872af524f198a31161 java-1.8.0-openjdk-demo-1.8.0.472.b08-1.el9.alma.1.s390x.rpm 1f05a015be506f1bba79301d4ca020f957c5bbcf303abace96eef6ebff6af71c java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.s390x.rpm 312a8f6cb28c974a4db139522e4c035a601855d5484e13f7ae4965db0cd05868 java-1.8.0-openjdk-javadoc-zip-1.8.0.472.b08-1.el9.alma.1.noarch.rpm 7e289418594ddbd3e9f698ad094d485ec0f4489473314d18c07c6273122667da java-1.8.0-openjdk-src-1.8.0.472.b08-1.el9.alma.1.s390x.rpm 7f8406077667d22f40e1fd63272e087c33bd6eb1df412f0fedf92d35f1ea46df java-1.8.0-openjdk-devel-1.8.0.472.b08-1.el9.alma.1.s390x.rpm ae271d7d0b35b7b2e44692d01dd12e5d39f60832fa69412e5c4f14bcd32dd220 java-1.8.0-openjdk-javadoc-1.8.0.472.b08-1.el9.alma.1.noarch.rpm f42a0e0c86f8235e9c8edbcd28d33fa9773a58d54e7dc288e4f94399126ea955 ALSA-2025:18821 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance Path Factories (CVE-2025-53066) * JDK: Enhance Certificate Handling (CVE-2025-53057) Bug Fix(es): * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 17 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.4, 8.6 and 9.0 (AlmaLinux-118788, AlmaLinux-118789, AlmaLinux-118792) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default java-17-openjdk-src-17.0.17.0.10-1.el9.alma.1.s390x.rpm 593bd55a3dcbfd3b2a3e13037205417a2d326d91d443d260bcb04b878f465791 java-17-openjdk-javadoc-zip-17.0.17.0.10-1.el9.alma.1.s390x.rpm 5cf850737d76e4739e344b9202a6927830b164386ea9aa4442f0b10f0804fdfb java-17-openjdk-static-libs-17.0.17.0.10-1.el9.alma.1.s390x.rpm 81f3a4178c59ddb8c98256ffd092d4513144e39f46f9ad06aed1494fef421cad java-17-openjdk-jmods-17.0.17.0.10-1.el9.alma.1.s390x.rpm 87e500d96f26bff28c7b3c0cbaa51026f4044ebe8ff2216615895877bafdc7d4 java-17-openjdk-17.0.17.0.10-1.el9.alma.1.s390x.rpm 925bdf3471620ad7139d2708cbeb15a91f9057a3464c7be0e74555c2f050ab3a java-17-openjdk-demo-17.0.17.0.10-1.el9.alma.1.s390x.rpm b4e10b2dd432a89e3cf114eda088bc2ff6dbdd41e76123cd350f326846fc5b69 java-17-openjdk-javadoc-17.0.17.0.10-1.el9.alma.1.s390x.rpm b92460970d184f901d84fc5d2ce996099e06394fa6ce8475f51cf6c9592db7cd java-17-openjdk-devel-17.0.17.0.10-1.el9.alma.1.s390x.rpm bd27d69c5222a9a843fe13d5435ba2d6ca5435858e3e49cbd18c45ffbaf00baf java-17-openjdk-headless-17.0.17.0.10-1.el9.alma.1.s390x.rpm fb040f02165f808478eb674e921ee0f0fa160f6705c597e0df0180616e4e1768 ALSA-2025:18824 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance Path Factories (CVE-2025-53066) * JDK: Enhance Certificate Handling (CVE-2025-53057) * JDK: Enhance String Handling (CVE-2025-61748) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default java-21-openjdk-21.0.9.0.10-1.el9.alma.1.s390x.rpm 0c3a5c3c55026e908185a77784b624f5690412dd0b36ca96d2e9c803543fcf8f java-21-openjdk-src-21.0.9.0.10-1.el9.alma.1.s390x.rpm 1e4cb1b6cbf71feec469c0d68ab373d542ef899b71ea17b5444ceff26150bcaa java-21-openjdk-javadoc-zip-21.0.9.0.10-1.el9.alma.1.s390x.rpm 231724b556a055d74aa749319b14d2c16cc5b0354d1ca21afdae74a87a30a200 java-21-openjdk-static-libs-21.0.9.0.10-1.el9.alma.1.s390x.rpm 4bb546c2494d57c663e5c0e1c0fa931c94d8ad1d883a33dbc7e9028affd91dca java-21-openjdk-javadoc-21.0.9.0.10-1.el9.alma.1.s390x.rpm 580a7e7376f9ac6ee2cdf617e16894a3f77c07bf362955019230f44c730a8545 java-21-openjdk-jmods-21.0.9.0.10-1.el9.alma.1.s390x.rpm 6064861f6e8db17074aaf5b1916a5b5881380f15a47c37e6297b00fad0e48407 java-21-openjdk-devel-21.0.9.0.10-1.el9.alma.1.s390x.rpm 6199013b6d2765f696dd1be006c3824378121ca62bfeea6139f07f636605c223 java-21-openjdk-demo-21.0.9.0.10-1.el9.alma.1.s390x.rpm 9cf54f301e2290d015ef78360f1c061db5e0d3f54fcaaf3d255da944601128c6 java-21-openjdk-headless-21.0.9.0.10-1.el9.alma.1.s390x.rpm d9ad2bb96a1aacf6502f1c04d39ff8f829884824ddea31ec71c61637cab920d4 ALSA-2025:19113 Copyright 2025 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176) * libtiff: Libtiff Write-What-Where (CVE-2025-9900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libtiff-4.4.0-13.el9_6.2.s390x.rpm 540b5cf6ce1260e1c88f624edd99d2d2858ae98c39159286985d3a7149625673 libtiff-devel-4.4.0-13.el9_6.2.s390x.rpm dbbccb0699e75f11957024d1949ccdd3b2ca0b299aa044fe3e171984ee08a774 ALSA-2025:1915 Copyright 2025 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme (CVE-2025-1244) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default emacs-common-27.2-11.el9_5.1.s390x.rpm 272cf1b1fd56f01e8b38d89985e4c50fc0b111694862558a4aa5427bbc4bbcae emacs-filesystem-27.2-11.el9_5.1.noarch.rpm 57425fc8bd2c19350e0bfcfb88acd31691426f35eb27d61378c162a4f848fe7a emacs-lucid-27.2-11.el9_5.1.s390x.rpm 7282d4cd1e3077ffd812ca29a27600f27be24a2fb3ac79ea8acb7e9a8611f437 emacs-27.2-11.el9_5.1.s390x.rpm fafde1d6ce18ba1c3ac7503c3d69cc9744e26bb7380b72e075ab00f9fe356414 emacs-nox-27.2-11.el9_5.1.s390x.rpm fe558376b2ce8aefc556c05b25f2ad8f868478dc9af0503d346b6c468d04a3cf ALSA-2025:19237 Copyright 2025 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default redis-doc-6.2.20-1.el9_6.noarch.rpm 1e8b70ff7c429f4c9a4b2ceeb0700b5d771d0e49fd783385b99e72d840a97e99 redis-6.2.20-1.el9_6.s390x.rpm 5b43c4b7d3eb60cb891f5de031dc25594e84b8d8ffa06bc0e059addc50822540 redis-devel-6.2.20-1.el9_6.s390x.rpm e4dd3b299980bf7179914f2cdd3ad6ee456b4f874e308930d5c51a5dec6fa418 ALSA-2025:19345 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default redis-7.2.11-1.module_el9.6.0+188+92104ce8.s390x.rpm 0224c646e556c5d4ae9d33f72d7dd4d2cc38e87fda59245ad6b6f937b646a39d redis-devel-7.2.11-1.module_el9.6.0+188+92104ce8.s390x.rpm 5712cf06b3a42c187c13116b38a9ae8c2a72f01ece80177e6180b2617e1d495c redis-doc-7.2.11-1.module_el9.6.0+188+92104ce8.noarch.rpm e0e782684f21c859ef6e2be5a9e350696716b68b6e68ae9e6070eaae7a7881f2 ALSA-2025:19409 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702) * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367) * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-devel-5.14.0-570.60.1.el9_6.s390x.rpm 0b36e1af0be7778ab05140297ee38204e9d97afcd885c224ee641aae214aa516 rv-5.14.0-570.60.1.el9_6.s390x.rpm 0c11558809813a6041da7418b45ab0a9a662133cd780466c3f4faadb4a91cdfc kernel-debug-devel-5.14.0-570.60.1.el9_6.s390x.rpm 16d7d85170fbe430aac3d86740b26a47cc9ce5f777d29cf8523a3554e96f632e rtla-5.14.0-570.60.1.el9_6.s390x.rpm 348af100886bfbf5fd464e76b33936be76dd657cb4b4d0692c4fe35dcaefbf2e kernel-doc-5.14.0-570.60.1.el9_6.noarch.rpm 56d81918c6bf8cfe78aa7045fdf3a566b6bf060001ad9c292756177b92de89ca kernel-zfcpdump-devel-matched-5.14.0-570.60.1.el9_6.s390x.rpm 672e5da8ebd07b7370c7f5fbeec873811e0e3d256011de37ff7ce37ab4ded155 perf-5.14.0-570.60.1.el9_6.s390x.rpm 7169ace9779697c4848445cb7fc31673d7e76eeb407307af32dc154a66de3fc3 kernel-headers-5.14.0-570.60.1.el9_6.s390x.rpm 9933e2c9b8b9188d13dc6d27efdf01fa39e201987d1414e6b2fcd4e591d82661 python3-perf-5.14.0-570.60.1.el9_6.s390x.rpm e6d873f896ccee753cb9eca0bea94b271c33097e0bea92d9dbd44b2b1519d222 kernel-zfcpdump-devel-5.14.0-570.60.1.el9_6.s390x.rpm f1c3d9ada7a5c2f2c4fc9f74cfa70ab4bacd3380c5dcc8b804863c8a42ca2a76 kernel-debug-devel-matched-5.14.0-570.60.1.el9_6.s390x.rpm f20b183d3790d826521dda62e166c5932e8d115f6b3e6c29701b352a7fc4554b kernel-devel-matched-5.14.0-570.60.1.el9_6.s390x.rpm fff5f542311c467ce121c43962f3a29b41557ce7fa927bfd3d65e8bee4666dc7 ALSA-2025:19489 Copyright 2025 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default tigervnc-server-1.14.1-9.el9_6.s390x.rpm 18a120ab00fe561171300c13f4faf516471d7a8d556a4724854a3e2a2c0aa06b tigervnc-icons-1.14.1-9.el9_6.noarch.rpm a48af40b7b945104b762b3bee9b92d035d55472d983c8a5618b5e9955010c260 tigervnc-license-1.14.1-9.el9_6.noarch.rpm b0a4e8d4edae26e11f55b71f6894b5ac9fe20e6873ff20ca43ffe155a724cc41 tigervnc-server-module-1.14.1-9.el9_6.s390x.rpm b28cabf7cf6bc0ba391abaf9ff343bd3dac071bdb9638d8f2c0f22c410b52ccf tigervnc-selinux-1.14.1-9.el9_6.noarch.rpm cb396b6637c108f1a93ab3c4b6d5f8268f6ae61a68b5cca03d929802b332076f tigervnc-1.14.1-9.el9_6.s390x.rpm faa0b390cca71d478e6f035007080e40980b287b44f316438015e2e4942cc4e5 tigervnc-server-minimal-1.14.1-9.el9_6.s390x.rpm fbc74fc0ea608407ef85ec770de752c15efe09a563f421d40c6d34acff7acac1 ALSA-2025:19584 Copyright 2025 AlmaLinux OS 0 1 Moderate

galera and mariadb security update

Galera is a fast synchronous multimaster wsrep provider (replication engine) for transactional databases and similar applications. For more information about wsrep API see <https://github.com/codership/wsrep-API> repository. For a description of Galera replication engine see <https://www.galeracluster.com> web. Security Fix(es): * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969) * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mariadb-backup-10.5.29-2.el9_6.s390x.rpm 0009ecd30fcaa7ca6e40b646773be67bf566d40d77b4da7c47681d8c82bee137 mariadb-10.5.29-2.el9_6.s390x.rpm 00488badcd9ec9d7ffbffc0ccc6a5f39a8d01f17da833b6978bc4f63993fdb26 mariadb-embedded-10.5.29-2.el9_6.s390x.rpm 03b4301b106d5fda6322f315d527c7cf799d20e379f534f2eed4f2622cd0d57f mariadb-server-10.5.29-2.el9_6.s390x.rpm 116918cc91652c015a1c4f461c187d1bcf8446a0196255ccb5d2a86ba3845b78 mariadb-pam-10.5.29-2.el9_6.s390x.rpm 6c4083e4c6a3efe87421d7365b0647762c5ede93c47223f601896e323f156225 mariadb-server-galera-10.5.29-2.el9_6.s390x.rpm 782791fcd4bfafb29c3cca1119ed1d710fa916ab171673cf3034e2d84f91c2b4 mariadb-errmsg-10.5.29-2.el9_6.s390x.rpm 7839d10bb60368853146f3e29159f0ee574d541f1a614d713186cabcb47f9684 mariadb-gssapi-server-10.5.29-2.el9_6.s390x.rpm a8c59ccd20bc80f5dcff549839652fb761f3b7f45dc158661b44fad8b7f5176f mariadb-oqgraph-engine-10.5.29-2.el9_6.s390x.rpm b15e3072ed7c2469aa181ea9eb55a4cf5de4a76a49b859a03dc85c18805f1009 mariadb-server-utils-10.5.29-2.el9_6.s390x.rpm c550162458645f767636e556cd772a7dc5f1213e9668d15582e8ba01ee36a7ad mariadb-common-10.5.29-2.el9_6.s390x.rpm f799174add2aa10ce938b01079d8a3c9a7b159e337c0e1f2edee45e4c7e6e171 galera-26.4.22-1.el9_6.s390x.rpm fbea147068e69776b3ea32e01c9dae44a12ba615703063cc358164dce674d889 ALSA-2025:19927 Copyright 2025 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133) * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565) * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default runc-1.2.5-3.el9_6.s390x.rpm 1f81a90565da1d20e7b1b4d1141879bfc422bfe16b1538411040fcf8d2e3f245 ALSA-2025:19930 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default perf-5.14.0-570.62.1.el9_6.s390x.rpm 0275767235d939e36e18f217990079b2c02b4c2e9feb688ffbffba98fc65e2a5 rv-5.14.0-570.62.1.el9_6.s390x.rpm 05b88e416069c5e9dbe8fe7dcacd8fc024fc4fdc9ac915b43c43358053a1f740 python3-perf-5.14.0-570.62.1.el9_6.s390x.rpm 0dfb82bce610fa69b0fcce709d77222dbb7f58e9ef5705b7f70251ad687e404a kernel-headers-5.14.0-570.62.1.el9_6.s390x.rpm 36ddfa0671f25087e616c0c94d7263bb9e40cae3866d29851e0356fb972ea9ba kernel-zfcpdump-devel-matched-5.14.0-570.62.1.el9_6.s390x.rpm 46adc409d85d81167d647b96b2f8a20e7105edca5fbd7c2c98d4a3a573f8a3c5 kernel-debug-devel-matched-5.14.0-570.62.1.el9_6.s390x.rpm 519f3b3694ca08c31e9f96e0d7741dc97fd38f3734178026b5b06e613c49e510 kernel-devel-matched-5.14.0-570.62.1.el9_6.s390x.rpm 6f8756cd50540c0ba18e61d6e71482a22198afd19992669c90e8d0925a88344c kernel-doc-5.14.0-570.62.1.el9_6.noarch.rpm 7f01643d1b9c165c0f8e53b1b715f7bfea46f4aeb0c7ae6ae386ef645c2abcb4 kernel-debug-devel-5.14.0-570.62.1.el9_6.s390x.rpm 97a6bcbc311e5cd0b62e4b8c50a55cab058572e5a8ce572114ec9658519aed94 kernel-zfcpdump-devel-5.14.0-570.62.1.el9_6.s390x.rpm b2ea6a0d9f2feb26a1e1156d5bf35dc3c1cb4dc4512bc36621db01df0574294b kernel-devel-5.14.0-570.62.1.el9_6.s390x.rpm c6996be5cca479cbba69f76de2f2113937042a48c5756bfecd63b6db41b8906a rtla-5.14.0-570.62.1.el9_6.s390x.rpm e46cef5aa8cd2344c53285fa23e81bb3ee5f29cc275f3d9b9124cb967ccbd4dd ALSA-2025:19950 Copyright 2025 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778) * bind: Cache poisoning due to weak PRNG (CVE-2025-40780) * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default bind9.18-libs-9.18.29-4.el9_6.2.s390x.rpm 2d5423ac3a99092b25ad8b254f639ecc9ab5b521574beed313b7a5dd3090977d bind9.18-utils-9.18.29-4.el9_6.2.s390x.rpm 9aa267683c27b2d9259355f6552427f94ac0e37ee56f4a85fa0c3e0610694b4a bind9.18-9.18.29-4.el9_6.2.s390x.rpm 9cf81e3eb0eb75f39560365cc9d2d55894c19c58537a7882dfbcd011d991bba5 bind9.18-chroot-9.18.29-4.el9_6.2.s390x.rpm bf5e279508f29f0237a6d4961adf8ed7b12115a461accf93acf9b016d333814b bind9.18-dnssec-utils-9.18.29-4.el9_6.2.s390x.rpm db48aa6836da3ee0b0939cf6c8f4650d633cd15c9db2730adac170ff000304af ALSA-2025:2035 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54543) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2025-24143) * webkitgtk: Copying a URL from Web Inspector may lead to command injection (CVE-2025-24150) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-24158) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24162) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default webkit2gtk3-devel-2.46.6-1.el9_5.s390x.rpm 15035e2ef0908b953ea9fbde013dfe12377d6c4de191d28fb5e206e67a4ad469 webkit2gtk3-jsc-2.46.6-1.el9_5.s390x.rpm d19440f6527b5b037bb09cde2c60e68342ba8993d7cf75c8d9292cd1b413b5a6 webkit2gtk3-jsc-devel-2.46.6-1.el9_5.s390x.rpm dca2bbc6c9730aba45f1e1e63596569a26515d5bae2f05eb0db6afb66bfc979f webkit2gtk3-2.46.6-1.el9_5.s390x.rpm fb84256fd36d84cec117634baf7a6ef97d0d41f1fe33fa014ebb11eb5c1e75fb ALSA-2025:20518 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830) * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689) * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744) * kernel: vfs: fix race between evice_inodes() and find_inode()&#38;iput() (CVE-2024-47679) * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727) * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864) * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060) * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024) * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195) * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294) * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052) * kernel: afs: Fix lock recursion (CVE-2024-53090) * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119) * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135) * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241) * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229) * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170) * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216) * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672) * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662) * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675) * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690) * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709) * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739) * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786) * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332) * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680) * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648) * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647) * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631) * kernel: zram: fix potential UAF of zram table (CVE-2025-21671) * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672) * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693) * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691) * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696) * kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702) * kernel: usbnet: fix memory leak in error case (CVE-2022-49657) * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432) * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672) * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353) * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437) * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627) * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670) * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269) * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643) * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623) * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357) * kernel: list: fix a data-race around ep->rdllist (CVE-2022-49443) * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648) * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746) * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795) * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728) * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456) * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987) * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014) * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988) * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714) * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570) * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993) * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729) * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989) * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015) * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998) * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995) * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796) * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739) * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786) * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738) * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986) * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726) * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791) * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787) * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981) * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790) * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990) * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765) * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012) * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745) * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806) * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072) * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068) * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062) * kernel: idpf: convert workqueues to unbound (CVE-2024-58057) * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828) * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083) * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826) * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077) * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075) * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837) * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851) * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855) * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844) * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853) * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847) * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864) * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088) * kernel: acct: perform last write from workqueue (CVE-2025-21846) * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861) * kernel: io_uring: prevent opcode speculation (CVE-2025-21863) * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848) * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056) * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845) * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994) * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116) * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-zfcpdump-devel-5.14.0-611.5.1.el9_7.s390x.rpm 0970b641a549f2a54fe9f188e64598e0dda62f88f6ca24622ebdf7962a4d56c6 rv-5.14.0-611.5.1.el9_7.s390x.rpm 283e0b83d139e8fd964cf726f4e35451e27d673ead87236b8a32c743bec30974 kernel-zfcpdump-devel-matched-5.14.0-611.5.1.el9_7.s390x.rpm 6c70ec30327b93655b33b82f00eb8e8a12d5d52054057d15f271cd453fea58cf kernel-devel-matched-5.14.0-611.5.1.el9_7.s390x.rpm 87ce0a139bc763106cab6572a09e19058c776767ed4552e01f3a2136ed6c7fa4 kernel-debug-devel-5.14.0-611.5.1.el9_7.s390x.rpm 8b00479dd14c708c34e3ff54771c4ce596ad378c2512440c95177d2433e79a75 kernel-devel-5.14.0-611.5.1.el9_7.s390x.rpm 99a6fa6731e25f1a9bfb118882435bb769049f7879eba30a94ba42e2104ebb65 perf-5.14.0-611.5.1.el9_7.s390x.rpm a5d41791b95a8f6a58624dab52eb141b453a11cfd2271d22d7b277dc11760608 kernel-headers-5.14.0-611.5.1.el9_7.s390x.rpm b23e4333955565c04555d4f0ea18658417fd9e61e06296fa49b082ba66ded7d1 rtla-5.14.0-611.5.1.el9_7.s390x.rpm dc97f8d36f9ad4894f04f4f1ef09fa5d74251e2182b28cc93271d1a2f08f379d kernel-doc-5.14.0-611.5.1.el9_7.noarch.rpm e0ab78a8550bea90b76893646795a5e87e4bf3dc56ed958f8c803214d9f2ed81 python3-perf-5.14.0-611.5.1.el9_7.s390x.rpm e4271a2358474c0d160ff69c6eb44b0a955f09513967e754f934eea207c4e2df kernel-debug-devel-matched-5.14.0-611.5.1.el9_7.s390x.rpm f1694ecf8502e9fcf71750cc282b11b004b7889acc52a79c260a8e8e37f909cd ALSA-2025:20838 Copyright 2025 AlmaLinux OS 0 1 Moderate

zziplib security update

The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default zziplib-utils-0.13.71-12.el9.s390x.rpm 7c2e23f220b3b96e2d870fba1c3f5b40d946b0d9d051b9b3bf57f2dcde4c33bb zziplib-0.13.71-12.el9.s390x.rpm bd1f18fa6c34ca5f91c5d26a508b6967a611cf703a03cf714cc5efbe3effe033 ALSA-2025:20909 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * database/sql: Postgres Scan Race Condition (CVE-2025-47907) * podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default podman-5.6.0-6.el9_7.s390x.rpm 03f4c7c387302d9f2b4835734ef7c8d6ec04c142dad08999fd32a769b9d17699 podman-docker-5.6.0-6.el9_7.noarch.rpm 0dc69f001bfc0953d60bfffcd07c0eeced0ae9dfc3e237fb6b9959fdae5eb761 podman-tests-5.6.0-6.el9_7.s390x.rpm 2f43338f3bcd3687b55730a3837bd7cc5645444683a590ae4912a5fffc286283 podman-plugins-5.6.0-6.el9_7.s390x.rpm 5a378279d784f48e2aa9121bddacb29443fb2ea2c5614cbe8317604fbf9099e8 podman-remote-5.6.0-6.el9_7.s390x.rpm a39624f29c13516affef24b6823793d3a887fe4bba0558e037cc8eb5f0efe3fe ALSA-2025:20922 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342) * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default webkit2gtk3-devel-2.50.1-1.el9_7.s390x.rpm 06cd0bdac4107745a28dddf0155d4b7414d147a7481815f8a80da92a117df082 webkit2gtk3-jsc-devel-2.50.1-1.el9_7.s390x.rpm 6e8567cf8aeb2344df7b396502990e0a0a769cc7897a57c3cbfb9ae7a9c51bee webkit2gtk3-2.50.1-1.el9_7.s390x.rpm bde8e614b7d1a025f5ea001f69b47226cfc4b51e1034203266d792c322f35eb0 webkit2gtk3-jsc-2.50.1-1.el9_7.s390x.rpm e903401312f65511dc4edf2448f294b276046b9796d661077bfcb5acd8546c5f ALSA-2025:20926 Copyright 2025 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default redis-doc-6.2.20-2.el9_7.noarch.rpm 42232f3aecfa61e79d0025ac7cc0edb318fc05cf219e6b0404c9eedc8aaf5117 redis-devel-6.2.20-2.el9_7.s390x.rpm 47c268a5ec655057cc8e18ed24b20e7e1bc806688dbcb452abf346c5684c4d1f redis-6.2.20-2.el9_7.s390x.rpm 8f4a58c1610c22166890c0dee69c65063e419fd1df48431d418cc69f7a3e6176 ALSA-2025:20928 Copyright 2025 AlmaLinux OS 0 1 Important

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-ipaclient-4.12.2-22.el9_7.1.noarch.rpm 023ac0818f6d060a70c77956bd8ac835311b393eef88c8400b43d48a9d3e4d94 ipa-client-samba-4.12.2-22.el9_7.1.s390x.rpm 0430cfab6b7c16a8b2d295d3539fb17238d6c8755bd5d8174c81fafc9f4bd811 ipa-common-4.12.2-22.el9_7.1.noarch.rpm 09fee2c19da96fd3e2097f8d6f43f34ff093a9427d7b4693c1cad539920b82d3 ipa-server-dns-4.12.2-22.el9_7.1.noarch.rpm 34b4aad3b8138a4f5014ff60709ef7627eca3ac2b0b42e86df6c0b94431e574c ipa-selinux-luna-4.12.2-22.el9_7.1.noarch.rpm 3df260b9ce022fdaee1ddd9c42ea1feb17463f75e4b2afbf9cc455c8c9b4daf9 python3-ipalib-4.12.2-22.el9_7.1.noarch.rpm 50a1e2661bd2a523ebe11023e509896359521a5af77ecd35060cdf75d2c4543e ipa-server-4.12.2-22.el9_7.1.s390x.rpm 5ed5e7443a868da6f4b3e65ee5d711075faab61682448ddc8a2dd354cc47cb9a ipa-client-common-4.12.2-22.el9_7.1.noarch.rpm 6181ebdc401e594ea9f842731031548ce3d0552f6a91587ffcdf2aca37217a9d ipa-client-epn-4.12.2-22.el9_7.1.s390x.rpm 6f57d0d5701fbecd05c56572464e000df6951f390dc67a3306f7ce3723f8e82b ipa-selinux-4.12.2-22.el9_7.1.noarch.rpm 7b155f0c86a36d68c0b3bed0c5157afe056d23fc3df22ec6f31257ec957835d6 ipa-server-common-4.12.2-22.el9_7.1.noarch.rpm 988c777fb46e11f835b19d497070a6c61bc338ea0b4275aed4206668f0e9bb38 ipa-server-trust-ad-4.12.2-22.el9_7.1.s390x.rpm a2da593b97552011b198c5a2dc1e483680537d4d34754d50beb0f7bf42584aa5 ipa-selinux-nfast-4.12.2-22.el9_7.1.noarch.rpm b72932cb1ba38cfcbcde3cb0f3262cde848c6796030169e08d2bea75671ae3a9 ipa-server-encrypted-dns-4.12.2-22.el9_7.1.s390x.rpm b772f24790de9822a9b438b31524d8ccd8cfa5ef88bf255d423b831ecf7923b0 ipa-client-4.12.2-22.el9_7.1.s390x.rpm cce692baf0a0507495af20b5b3a3e868bcd708c7aca7d42e2387a7c680e0b709 python3-ipaserver-4.12.2-22.el9_7.1.noarch.rpm dfa31aad064c014fb03cb03084e0a51da7fada5fca5418221a15a584114ceee1 ipa-client-encrypted-dns-4.12.2-22.el9_7.1.s390x.rpm fdfff79347c1ac098ec0919b005d2d502226e8bfb624db3340e21047ff836011 ALSA-2025:20935 Copyright 2025 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fix(es): * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default squid-5.5-22.el9_7.1.s390x.rpm 69cc6023a7c9426708c85b05c04d73c4831c1155f7512e6b0abca90903c1829b ALSA-2025:20936 Copyright 2025 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: Integer Truncation in SQLite (CVE-2025-6965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default sqlite-3.34.1-9.el9_7.s390x.rpm 86196d084f23ff4d3ed135d4a18d25b47242435e4f88316ea0805aa1d6640860 sqlite-devel-3.34.1-9.el9_7.s390x.rpm cb78ed5dd6511940ab3090991952c41cf2a43d714413d6b4c33b2ac2a9a3de3a ALSA-2025:20943 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libssh-devel-0.10.4-15.el9_7.s390x.rpm 0387728c7467aa854bb415e49bb15aa17cd4d10577cde1bb9dcf744f7193d072 ALSA-2025:20945 Copyright 2025 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim path traversal (CVE-2025-53906) * vim: Vim path traversial (CVE-2025-53905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default vim-enhanced-8.2.2637-23.el9_7.s390x.rpm 7fe6c9e6a5e7281ecbc031754d8aad65c94879bf7fc6b49ce64e88a70532495c vim-X11-8.2.2637-23.el9_7.s390x.rpm d4d197d7fc8dec4eb6ca04b9fa4363f9953396c00906a64a39908e23f203246a vim-common-8.2.2637-23.el9_7.s390x.rpm f0bb41d2c4c2081f2b30c317e5424303f5d5257ffc081967083a15b8a8ab92be ALSA-2025:20954 Copyright 2025 AlmaLinux OS 0 1 Important

sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default sssd-idp-2.9.7-4.el9_7.1.s390x.rpm 2c0c8a7493261a072965f1a3e6e3f4167f4a52ad77b3a5e41b675794b02c7aa7 ALSA-2025:20955 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default redis-7.2.11-1.module_el9.6.0+188+92104ce8.s390x.rpm 0224c646e556c5d4ae9d33f72d7dd4d2cc38e87fda59245ad6b6f937b646a39d redis-devel-7.2.11-1.module_el9.6.0+188+92104ce8.s390x.rpm 5712cf06b3a42c187c13116b38a9ae8c2a72f01ece80177e6180b2617e1d495c redis-doc-7.2.11-1.module_el9.6.0+188+92104ce8.noarch.rpm e0e782684f21c859ef6e2be5a9e350696716b68b6e68ae9e6070eaae7a7881f2 ALSA-2025:20956 Copyright 2025 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176) * libtiff: Libtiff Write-What-Where (CVE-2025-9900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libtiff-devel-4.4.0-15.el9_7.2.s390x.rpm 8bf9dfce146e5a7fd2bc955fb2d0471b337131bf11af79823f482fe3f91f19b7 libtiff-4.4.0-15.el9_7.2.s390x.rpm b1548cbc448da17ebe6e5b10a5c7b24cb103d6a4b14d6d413fc80c964e29a30c ALSA-2025:20957 Copyright 2025 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133) * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565) * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default runc-1.3.0-4.el9_7.s390x.rpm 0904a896fa1c91bc77fefe70ddc7f615af685cc1a0bd0b5dc0f79a97fd2d2a8f ALSA-2025:20958 Copyright 2025 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default tigervnc-server-module-1.15.0-6.el9_7.s390x.rpm 07061fa108749a2ec5b712b7cbd1e093096928b390abe0d9509832ec286800bc tigervnc-1.15.0-6.el9_7.s390x.rpm 0d9c2924fca8ea5bc4337c2c0a9c83bbfbca28cfc29b6c1bab7473260d8995ed tigervnc-server-1.15.0-6.el9_7.s390x.rpm 2f47dc395b95cb60a7fc375bc52a58fd0c0aa97c37829864c5e76013f08db02e tigervnc-icons-1.15.0-6.el9_7.noarch.rpm 333e5482a205d8828f969fd977ba876027c9287c32583387abe4e1afe2e10988 tigervnc-license-1.15.0-6.el9_7.noarch.rpm 6a077ef5a28e02370391b2ec36e908423de2be14111b20041afd23a52841bb48 tigervnc-selinux-1.15.0-6.el9_7.noarch.rpm c52e4f99f0d4b4fb6120119a5e00ddca550bcdd994420eff7b665b995582fa44 tigervnc-server-minimal-1.15.0-6.el9_7.s390x.rpm d4276b47cec7f01bb8ac59a4e66bc5d59c30d94d4ecc3941706f2342af05172f ALSA-2025:20959 Copyright 2025 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945) * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libsoup-2.72.0-12.el9_7.1.s390x.rpm bf7b69aeaf7aedfda372130c6de4100a22ca0c23d903bdf035d59343b1c8cf66 libsoup-devel-2.72.0-12.el9_7.1.s390x.rpm f77b8a5c14e3139c86cadd263a0e50933c1b94cdb45493a0e3e7ff72e0744c48 ALSA-2025:20960 Copyright 2025 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default xorg-x11-server-Xwayland-23.2.7-5.el9_7.s390x.rpm 534a9a9e01660868e998cd4bf71a35f28f32f881e6de946bb3904f948c782b01 ALSA-2025:20961 Copyright 2025 AlmaLinux OS 0 1 Moderate

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default xorg-x11-server-Xvfb-1.20.11-32.el9_7.s390x.rpm 18264e8e2efb5651f5f6a33ede83a73410c9214723273dd86b8ceba512316f15 xorg-x11-server-Xephyr-1.20.11-32.el9_7.s390x.rpm 1cfbf6379f4e62a3d5bd81e6337901edecc5b3d5b82d6b6eb7d7e3aa5e08e837 xorg-x11-server-common-1.20.11-32.el9_7.s390x.rpm 79f31d8fc49f16d1454bf8cdfc4204cdabf5cb08e3c472477af10313c1b028b4 xorg-x11-server-Xnest-1.20.11-32.el9_7.s390x.rpm c4c4d4e8616b9fa0ba2ddfff23be701d578f7922d835fecded2c2ea638374561 xorg-x11-server-Xorg-1.20.11-32.el9_7.s390x.rpm c650b8f46984d410e2709d01156143148bffb5a587801a0a3365a8c3427f535b xorg-x11-server-Xdmx-1.20.11-32.el9_7.s390x.rpm e1548d7b4e16845a3d3570e16f0783a8b5f559783e0d5ae6b983061965a94c56 ALSA-2025:20963 Copyright 2025 AlmaLinux OS 0 1 Moderate

qt5-qt3d security update

Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications). Security Fix(es): * assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow (CVE-2025-11277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default qt5-qt3d-examples-5.15.9-2.el9_7.1.s390x.rpm 26031f5518d19e204161574d58c1a84fcce64ce78a01b8b82048a4a227fcdb8d qt5-qt3d-devel-5.15.9-2.el9_7.1.s390x.rpm 93b7ff477c60fffcff2e0a0de6770ac860f7e9d3351c88fa3f9429bb993677d4 qt5-qt3d-5.15.9-2.el9_7.1.s390x.rpm e7cc006ed07b73f9096ea2926dbc3d3b72792b9805d7cf6a6b95d7aae8f346f0 ALSA-2025:21110 Copyright 2025 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778) * bind: Cache poisoning due to weak PRNG (CVE-2025-40780) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default bind-dnssec-doc-9.16.23-34.el9_7.1.noarch.rpm 01202e152d255eb11f041616ddc8bf4a92beb4878e8d813cdac5dd73bda4879c bind-chroot-9.16.23-34.el9_7.1.s390x.rpm 23c49b05854679b2c0d28f955dc11dab3bb7ae57361d5d05345d0603408297c7 bind-utils-9.16.23-34.el9_7.1.s390x.rpm 7a9717fae1e6b5d6f21014389dc33109f93cd3eab4ae471853c57e1d93b69109 bind-license-9.16.23-34.el9_7.1.noarch.rpm 8b79c2a0da87e5408f01dc70ce99df4db338803b1bb3399cc8f02cfcec16d2c6 bind-dnssec-utils-9.16.23-34.el9_7.1.s390x.rpm a9ebba4ead308310c23a3e83ade23c9dd2398561960d75a903070d18c27b53d3 bind-libs-9.16.23-34.el9_7.1.s390x.rpm bba5dfcdd584d4bf690929f3b3a67d99a67c5ff2c43ad57b26ade76ce1dfaf42 bind-9.16.23-34.el9_7.1.s390x.rpm e4d2e10d9d602c3147b3a13fb7a7c6c8898c04c489e3e51d6b8945e786109664 python3-bind-9.16.23-34.el9_7.1.noarch.rpm f54c8d1c3f0185e2016e2ebc757362ec803f466533c6fc01423a2e3b783f8c30 ALSA-2025:21111 Copyright 2025 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778) * bind: Cache poisoning due to weak PRNG (CVE-2025-40780) * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default bind9.18-chroot-9.18.29-5.el9_7.2.s390x.rpm 24ef0fab894466f48c42d8cd01b660e3f8e5b5d076856d864df68fb5303361c6 bind9.18-utils-9.18.29-5.el9_7.2.s390x.rpm 3a9aacf252c4b2cbdef60601ba7081ad139c9352de15e721b1a6c964832935df bind9.18-libs-9.18.29-5.el9_7.2.s390x.rpm 4be2a5c9fbc4791ab0e36ad1fce73d05f8d2f93dda840f6ef84672435763f9c7 bind9.18-dnssec-utils-9.18.29-5.el9_7.2.s390x.rpm e285b63704ca10b113a55547892fff0de0623da5ac5178aec88741beff903749 bind9.18-9.18.29-5.el9_7.2.s390x.rpm ec6a2b0befe15257ced0422e1804c178afdd97e1fd755e594861f280ae242aef ALSA-2025:21139 Copyright 2025 AlmaLinux OS 0 1 Important

python-kdcproxy security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088) * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-kdcproxy-1.0.0-9.el9_7.noarch.rpm a5240be876da3db142c1b8feb2c4ad0a98c79ec8dffdf4295e4747f75df84f12 ALSA-2025:21255 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default openssl-perl-3.5.1-4.el9_7.s390x.rpm 0856453e7ac72bb66adcbc4bdd4d18d4f2309a1b9ae2aaa630211d7b5eea66d9 openssl-devel-3.5.1-4.el9_7.s390x.rpm df2fad1d4f8389149b542482d4ffb49d76ea1295a0fd9e5943d84ec06ab40e7a ALSA-2025:21280 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018) * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014) * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016) * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019) * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020) * firefox: Race condition in the Graphics component (CVE-2025-13012) * firefox: Spoofing issue in Firefox (CVE-2025-13015) * firefox: Mitigation bypass in the DOM: Core & HTML component (CVE-2025-13013) * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default firefox-140.5.0-1.el9_7.alma.1.s390x.rpm 085cd1d3dfcddc2349da2bf0c568d4c63dc26f9e6415ce1a03125dce9fca07dc firefox-x11-140.5.0-1.el9_7.alma.1.s390x.rpm c3397b2cbc2c2ba14de2a25debd940738af2eb4b015c227fee560dd4ee432aaf ALSA-2025:21462 Copyright 2025 AlmaLinux OS 0 1 Critical

lasso security update

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages. Security Fix(es): * lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-lasso-2.7.0-11.el9_7.3.s390x.rpm 1462c2d662947c86c379aa3d1a22e37455ebbe1fff53c660d65c08d770cc770b lasso-2.7.0-11.el9_7.3.s390x.rpm 3860b5fca2bff0ee4ac3f61f981d6d417c2a8f5f6a300135b452fd1e32a8ba3b ALSA-2025:21693 Copyright 2025 AlmaLinux OS 0 1 Important

haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: denial of service vulnerability in HAProxy mjson library (CVE-2025-11230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default haproxy-2.8.14-1.el9_7.1.s390x.rpm 911206ffc56495c0c4aa9db0c362162194289ba8616ffa0d4b81898326abfd96 ALSA-2025:21702 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default podman-docker-5.6.0-7.el9_7.noarch.rpm 5ffaa4b5065f4581a201082263dba24dcf7721b66b01e4b26013a6002c9ff0ac podman-tests-5.6.0-7.el9_7.s390x.rpm 84d36f150aa8db9ccb2bcb6fd698b1f34cceb2d10962d9a769a69e18eb0ba2dd podman-plugins-5.6.0-7.el9_7.s390x.rpm 8720ccb2f68e1ad6222498a09907216e7fd2571c8c77da462a5596d0f992062c podman-5.6.0-7.el9_7.s390x.rpm c578bb63fbadf75c09f2e4f5ceb5b0a2f705eb0835d35eadbd91239229492341 podman-remote-5.6.0-7.el9_7.s390x.rpm f4c65c889f6ebcdc2d05f1deb910dcc51287778113bfa571aae49375c8125132 ALSA-2025:21815 Copyright 2025 AlmaLinux OS 0 1 Moderate

delve and golang security update

The Go Programming Language. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default go-toolset-1.25.3-1.el9_7.s390x.rpm 2475e49248d2887f858c9eeeee5e80c33fe8e18d04d117e459dfed22139c7079 golang-misc-1.25.3-1.el9_7.noarch.rpm 29dc87ada9847e965337c7d04c5912ce35737fa694be7a8d712294d52cbc68d4 golang-docs-1.25.3-1.el9_7.noarch.rpm 466316b7b9d8f2ccd3b3f368d520adaf50fc1224d8c3321018587e8779415ef8 golang-src-1.25.3-1.el9_7.noarch.rpm 6f31240e6b2dde0527af7d6993e4beb7bb946941c9abb03ecbcced59bd1e6cba golang-1.25.3-1.el9_7.s390x.rpm 759cdded914e306b40d1d1b9c2960f3ce4e45b49edab93654313984246b51b87 golang-bin-1.25.3-1.el9_7.s390x.rpm b5449dfa6dff203e0785a70000c027a23dd2eb2ff55c63121ae30b5d8dd27245 golang-tests-1.25.3-1.el9_7.noarch.rpm e4397826207622fc908c1ef7c2da0ab2cb58e830e8c48e13eff9af88576a56aa golang-race-1.25.3-1.el9_7.s390x.rpm fc7a9acaa8430b66166fc9888fa4538b30bf39d35e578b2c53df25aab07d506a ALSA-2025:21916 Copyright 2025 AlmaLinux OS 0 1 Important

valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default valkey-8.0.6-2.el9_7.s390x.rpm 8b4306c739bf562898bbf3ba445087761574fbd43bca897845cd9026b4f72433 valkey-devel-8.0.6-2.el9_7.s390x.rpm b0455464ba489f132cf0796cc81a64c3688c110a64087c3516f10b35ed71880a ALSA-2025:21926 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default perf-5.14.0-611.9.1.el9_7.s390x.rpm 0152e54ba33fb742f22a9522cba97c4b686ece0dbf72ceec08c17bfe4d835d36 kernel-devel-matched-5.14.0-611.9.1.el9_7.s390x.rpm 042f80d90aef8eb19779291b63076ce025a5c3a79934200c6d4425f7a2673b39 kernel-headers-5.14.0-611.9.1.el9_7.s390x.rpm 0e012d61194b17708665c91385434a68015976c5432d7e63885f7f7fb4a4f49f kernel-zfcpdump-devel-5.14.0-611.9.1.el9_7.s390x.rpm 2ffb71b03066b0b0444854f6504a311fbe41923fbff9c871085907619334e9a4 rv-5.14.0-611.9.1.el9_7.s390x.rpm 36186011178ee25a3950a5a6536bb7fecfc83fcf3ae4cee74082e294ccd30d2f kernel-doc-5.14.0-611.9.1.el9_7.noarch.rpm 3f1dfa1427aa39d094ad37ee1b6725424a9137cc36ce2e3f9e49f1697b596ad1 kernel-debug-devel-matched-5.14.0-611.9.1.el9_7.s390x.rpm 4162e418e5976532d121e1ecb37ac2d4d67b11f595ffae7a1afe6e769e0da7c8 rtla-5.14.0-611.9.1.el9_7.s390x.rpm 4e44e4cc01587e7bfa52fa54b5f5835fa38410c6168865dc8e5542af2d375665 kernel-devel-5.14.0-611.9.1.el9_7.s390x.rpm 8eb478bfa451dffecde01328c0e858ea55e4559b6580f0a2953d59f577645ef6 kernel-debug-devel-5.14.0-611.9.1.el9_7.s390x.rpm b5597dd3868285314008e5c174f039e9e8863f40e60f192db8e9a652e4fb3971 kernel-zfcpdump-devel-matched-5.14.0-611.9.1.el9_7.s390x.rpm bd6fecee07a0ea981bd10737696dbc6a146aeca1272d47d3feb110e5716d9a06 python3-perf-5.14.0-611.9.1.el9_7.s390x.rpm bed903fa32082f1cbda49733e90e81f0df8b86fe3e5dd62e97d435087272fb94 ALSA-2025:22005 Copyright 2025 AlmaLinux OS 0 1 Moderate

go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fix(es): * os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default go-rpm-templates-3.6.0-12.el9_7.noarch.rpm 5df16bf1a95fd8dec209732a313a1928038f1421239bc3836023d10e3b70dddb go-srpm-macros-3.6.0-12.el9_7.noarch.rpm 71a78aefe4eda55b51e42c5913d78d3da0a21013a367f506725518b235a131c3 go-rpm-macros-3.6.0-12.el9_7.s390x.rpm 8b2d02e0df8330c30231c6ee810a4b37138ce57c51e9081e5f6e5d7475f760c9 go-filesystem-3.6.0-12.el9_7.s390x.rpm b5463a4b8f35e7cc256266c413ea67d8b12878380bbcecd5e8d54fe272a9ef65 ALSA-2025:22011 Copyright 2025 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default buildah-tests-1.41.6-1.el9_7.s390x.rpm 5a435807c6c8154157d908e4a598172691b307a6f87ac86cfb80ca90f6861c2a buildah-1.41.6-1.el9_7.s390x.rpm 8aeede3fe23558e31dda979f7bd61d50e2fd9a58e60c2bcb77468f299d99599a ALSA-2025:22175 Copyright 2025 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default expat-devel-2.5.0-5.el9_7.1.s390x.rpm 424f59a8df256cf2e8fa62350633f1297674714955be52f763dd4585ff8b88fd ALSA-2025:22376 Copyright 2025 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libxml2-devel-2.9.13-14.el9_7.s390x.rpm bbfc0f033911832a88fe5383727d9f93149a4d8ccb6d201d848c55f977db5ae5 ALSA-2025:22405 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724) * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864) * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898) * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918) * kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955) * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981) * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058) * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-debug-devel-5.14.0-611.11.1.el9_7.s390x.rpm 25be8c7de68be629e6eaac85abb5b8060bfe14c3cbd7fa799549003326f395d9 python3-perf-5.14.0-611.11.1.el9_7.s390x.rpm 25ed839295694a557f9dfcdc33b0cf462f1c59d1cb03d504846438039d2d5ea7 kernel-zfcpdump-devel-matched-5.14.0-611.11.1.el9_7.s390x.rpm 33894f8f2bcfdf06aec61215951559115a5bee01b03e9c65f6371003e36e9cc6 kernel-debug-devel-matched-5.14.0-611.11.1.el9_7.s390x.rpm 53190fbc50e9939dedf42d4f04a3377d47268c35c3e0c041e7b220fe0b98e376 rv-5.14.0-611.11.1.el9_7.s390x.rpm 55f90da3aac2928efb2b2a037468b311b15842e3d5c5994ebde750d04d83dcb1 perf-5.14.0-611.11.1.el9_7.s390x.rpm 5c5405089f5fd38b28c1dbdcd81d2d372cad9ad38f8a39b2eba50c93a69f8158 kernel-headers-5.14.0-611.11.1.el9_7.s390x.rpm 5f597c2249667b6b6cf8a6ca41a881e2ec2044732c8580ddd5a591c98678c47e kernel-devel-5.14.0-611.11.1.el9_7.s390x.rpm 6409b567d72d011de801e68d85cdbd10d0f573f39b2c6e31f1bded746a70b12a rtla-5.14.0-611.11.1.el9_7.s390x.rpm cf0c7bb8779d0ff270e7697e36120ffc9c1a0b8e52aeffb6f06df97c8f50d4e3 kernel-doc-5.14.0-611.11.1.el9_7.noarch.rpm e27f17ac62eba4c511084447e99ca315c942049d90340b94d4f7f70d301cf793 kernel-zfcpdump-devel-5.14.0-611.11.1.el9_7.s390x.rpm e49c03092e154cbfc2e1e72a46a399b1616c8841d0a56943a0fcb1f4ab053777 kernel-devel-matched-5.14.0-611.11.1.el9_7.s390x.rpm faad28f1a11395dd618720af2dbae4bd02797a28aa23331fb7edd031b31f74e2 ALSA-2025:22660 Copyright 2025 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (CVE-2025-4598) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default systemd-devel-252-55.el9_7.7.alma.1.s390x.rpm 0ce352f5f1e3b932aba5c450b59d6505c0e6aeb82aacf3a09cc0144a7a8c526f systemd-journal-remote-252-55.el9_7.7.alma.1.s390x.rpm 852edbdf9512525a4da01e3a00ac9e9cba26f07f93994e8fa1e4508276d0cac9 systemd-ukify-252-55.el9_7.7.alma.1.noarch.rpm d0bbd8f92a0ece392027ad9c47865654ea3554926aed9ed76c1d85cf4f6a303e ALSA-2025:22790 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000) * webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421) * webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default webkit2gtk3-jsc-2.50.3-1.el9_7.s390x.rpm 2f48914e021a2a2ed16f7fcdf9deb5d31e92b338891868282ac8cbf1f90b96d0 webkit2gtk3-devel-2.50.3-1.el9_7.s390x.rpm 4bfe88fcf88ef33ef4ba66b2e955ddc0156cbe80e81efa3d53f0d30a45300302 webkit2gtk3-2.50.3-1.el9_7.s390x.rpm b5e2b3d16438ddbb7e3174b2b137c82120ab13379635bebff640d6c459df8351 webkit2gtk3-jsc-devel-2.50.3-1.el9_7.s390x.rpm f52bee46f33a08b2ccef9a383f0f9c783b5c60d3e1724e7240790c78f2d32c99 ALSA-2025:22865 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925) * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default perf-5.14.0-611.13.1.el9_7.s390x.rpm 00a041646b50b0db0d746fa65cef41cef26ab352968ee4a5015f09cea1d54ce8 rtla-5.14.0-611.13.1.el9_7.s390x.rpm 1d4245c50d3c05922045d4cacaf2ab0ee64b81f7f36088892626d15e2f5293b4 kernel-zfcpdump-devel-matched-5.14.0-611.13.1.el9_7.s390x.rpm 1f11ae59b528372967f6d2111c1b1c92fc2c40a4e7d12116854dd2ce01e714d9 kernel-devel-5.14.0-611.13.1.el9_7.s390x.rpm 242a04f72583363b1fbf5cb0e5d7113dae4e1cb3fca5d80d0c707b96a08a1eab rv-5.14.0-611.13.1.el9_7.s390x.rpm 2f07c06aa6b502375bdbf1390635924c3d12b182e571b9cf8f743ea7f247432d kernel-doc-5.14.0-611.13.1.el9_7.noarch.rpm 3077453230b56a9024c6386e3a382237cfd64a275450898b612c5739bdb21c8d kernel-debug-devel-5.14.0-611.13.1.el9_7.s390x.rpm 5f0bd58d2eecbca32109a837e95188f4d4ad3745d40f2097a00a7ac60efb95cc kernel-devel-matched-5.14.0-611.13.1.el9_7.s390x.rpm 5f1ef34cbfcf578a94bc0cf88bbe75e666315c9cd3bfc0d3fd8c86ee4732dcad kernel-debug-devel-matched-5.14.0-611.13.1.el9_7.s390x.rpm a4d19822b3f05e550787d3d44bf91982258b0b799dd64049578e4dc899a08ac7 kernel-zfcpdump-devel-5.14.0-611.13.1.el9_7.s390x.rpm a5645cf2f12d83dc7cf5d54eaf71e8f7fe73877f9707a09ab1d1b21e1942773b kernel-headers-5.14.0-611.13.1.el9_7.s390x.rpm acb331567540d3a14f07567fa8f5e8aab335e4d00e52200346866b4a3925972e python3-perf-5.14.0-611.13.1.el9_7.s390x.rpm eb7081dc491e3317594eb597fc2b47a5351879b1b825fd5941797a1ef22a706c ALSA-2025:23034 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333) * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329) * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331) * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default firefox-140.6.0-1.el9_7.alma.1.s390x.rpm 3756e3cd2834f4abb4ab1b345b40832fcd21082371c5e4ecf3215f6f9011559b firefox-x11-140.6.0-1.el9_7.alma.1.s390x.rpm 967084870f398dc3defa2f6a6b0ce155670feb273ff80a5890a86418d28e5c49 ALSA-2025:23049 Copyright 2025 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default tomcat-webapps-9.0.87-6.el9_7.1.noarch.rpm 042554fe7afabe09276b1305abf50e78f75a9609f790479647d629d727a576dc tomcat-9.0.87-6.el9_7.1.noarch.rpm 743c7841f36b95beb9dbcde26837da06819a5019f6670219fc7a646489448e11 tomcat-jsp-2.3-api-9.0.87-6.el9_7.1.noarch.rpm 76cb4ffb4eb97a09c9cef86ca036e2b88d29aa94ada18ce6635fffda4ecaa81c tomcat-lib-9.0.87-6.el9_7.1.noarch.rpm 942047935da08addb54d45219557320d0cd24f1482b6925cbdda4a2b046e6a90 tomcat-docs-webapp-9.0.87-6.el9_7.1.noarch.rpm c5697771592ec914240d11f052f4c535546182c352a02e37d58cba7c4ba44b4f tomcat-el-3.0-api-9.0.87-6.el9_7.1.noarch.rpm de3401154ba76a426408986737cced54f5d01cabf3f2f49fa8bde03b7b4ef6a0 tomcat-admin-webapps-9.0.87-6.el9_7.1.noarch.rpm e54e22787bbfa9c1bc1183daf0620641e601542ab4e10dd85c4c2209a923f831 tomcat-servlet-4.0-api-9.0.87-6.el9_7.1.noarch.rpm ed13f327020324dcc7aaef5dd4512d55cbf108e9c69b959a3aa63f1de6fb189b ALSA-2025:23063 Copyright 2026 AlmaLinux OS 0 1 Moderate

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: Denial of Service in resolv gem (CVE-2025-24294) * rexml: REXML denial of service (CVE-2025-58767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default rubygem-typeprof-0.21.9-5.module_el9.7.0+193+58179166.noarch.rpm 1e76d470f5e813888cc11c835f5e419f511c7ac78693e9b3c08858c596f2ea07 rubygem-minitest-5.20.0-5.module_el9.7.0+193+58179166.noarch.rpm 2052f90946637d56bd57f83b078bd2341398c9a763d7524f0b90a24e2f9829ed rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 rubygem-bigdecimal-3.1.5-5.module_el9.7.0+193+58179166.s390x.rpm 335bbd931f6475e6bc6ab78824eb66a5b2739c14c2854c771a09f58ee4e353c1 rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm 37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58 rubygem-rake-13.1.0-5.module_el9.7.0+193+58179166.noarch.rpm 3938cce7107976d8cbe1413d03d0e737bd5ca448616dd660afe7813c6691195a rubygem-json-2.7.2-5.module_el9.7.0+193+58179166.s390x.rpm 443618a515f91f165caf673b4e3db60e6ada2bc2c46652a207ec0da8ec05ef78 rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.s390x.rpm 4866939ab52aa8d02863557cdaf8e3af45c043a8c7136082318eabfec4ab8150 ruby-doc-3.3.10-5.module_el9.7.0+193+58179166.noarch.rpm 610e56f3b59c67e8a1178ee3ad905ebadd573336f958888a908bbce106bc09fa rubygem-rdoc-6.6.3.1-5.module_el9.7.0+193+58179166.noarch.rpm 7074e1adb6c6faf5bab68fc5c16bbe5c111202286c60288f85487369b87c2cb5 rubygem-power_assert-2.0.3-5.module_el9.7.0+193+58179166.noarch.rpm 79cbcd945ae37bfa66d064c77f72a6df45999b4f652ced8c6a16c366355e0d43 rubygems-3.5.22-5.module_el9.7.0+193+58179166.noarch.rpm 812ca5c06c6b0d1175ebf4c20f101a63513a6812ecae5091376de5647439fabd ruby-3.3.10-5.module_el9.7.0+193+58179166.s390x.rpm 90da80bf75b2cf20d3a434e30a2166071a1b4d38190ae7263eed5a9ce1536d16 rubygem-bundler-2.5.22-5.module_el9.7.0+193+58179166.noarch.rpm 9782600a3b69a18d97c2fb7acf77f6a210286d7e5122c532164cdaafca096f10 rubygem-rbs-3.4.0-5.module_el9.7.0+193+58179166.s390x.rpm 995e8f0b4c2b19b9fbb27352ab3a74f8665828dd6c1ab93007c49a5318d7f252 ruby-libs-3.3.10-5.module_el9.7.0+193+58179166.s390x.rpm a212d076a41228be262b1a8969fa89e43faa175b486cef067856f430275626b9 rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.s390x.rpm a81354cf449ea715f53abe583ed241f40275e30991a4a7bafc454729c2c75cc0 rubygem-irb-1.13.1-5.module_el9.7.0+193+58179166.noarch.rpm b1c8d93726b425d9ad2ddeeeba96dc077bbbbb37ae080a7f6041f30aab2651a2 rubygem-rss-0.3.1-5.module_el9.7.0+193+58179166.noarch.rpm b74756b8a04eab9e7df55084a0f6b6bb79a6e186e381983069d8189293eaeb8e rubygem-racc-1.7.3-5.module_el9.7.0+193+58179166.s390x.rpm b7d193e8db3f8535a66c4e12e5ee8eeaadd66b8fdfff757df601c22757eb0577 rubygems-devel-3.5.22-5.module_el9.7.0+193+58179166.noarch.rpm bcb8bc87ed9dd4970b9742da89a2b03d27cb84ac9f5da6a5979ab6250035ea24 ruby-devel-3.3.10-5.module_el9.7.0+193+58179166.s390x.rpm d0274a9d24b85a282f12bf059ddaf4072db195ea6b87596b377fcda0a36af3a3 ruby-bundled-gems-3.3.10-5.module_el9.7.0+193+58179166.s390x.rpm e5075f25a26221b6ae3da5bd99e3d8a064292d93ae21cded1eaaed4240a41e1e rubygem-psych-5.1.2-5.module_el9.7.0+193+58179166.s390x.rpm e52023054954e3106e3542b13425ba4ace9447f0f7685ddb6c2d6b2825f507ab ruby-default-gems-3.3.10-5.module_el9.7.0+193+58179166.noarch.rpm e6cd1a0e3eb42817f1358cd42bde2590af86393d2ce25e72a45530f6ec03bf11 rubygem-io-console-0.7.1-5.module_el9.7.0+193+58179166.s390x.rpm eb8cf54bd8beacc2a5e3eb81a5c5a5167c650fc3c7ae53832a1e93bb61f77891 rubygem-rexml-3.4.4-5.module_el9.7.0+193+58179166.noarch.rpm f01bed34c9e3e79763cf8bbb096c8d80c29d92e5ae03c20b4114aff309a11a5a rubygem-test-unit-3.6.1-5.module_el9.7.0+193+58179166.noarch.rpm f1dd25f4182864b03b7f5f27a736a87f19132bdd9c1e662564c09a8349d05bf9 ALSA-2025:23087 Copyright 2025 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default grafana-selinux-10.2.6-17.el9_7.s390x.rpm 3e76418cb62ac760283b1c593ae3f22aaa40397a080bd566fd5493bd223c558b grafana-10.2.6-17.el9_7.s390x.rpm 55052147ef4c9bb8837a5e120d9e2bb6244e8196c2732edf468456626fb9f9cc ALSA-2025:23109 Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040) * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default mysql-errmsg-8.0.44-1.el9_7.s390x.rpm 01041aa3650686e6ba2f4513b1ea71d224f4264a6a388e17eded482b7cc1d552 mysql-libs-8.0.44-1.el9_7.s390x.rpm 67aaf2f6ab2f26fbe15240fbf14970a969eeca79d6d08d67e00f29a01c31a052 mysql-server-8.0.44-1.el9_7.s390x.rpm 8473094c0aa9873e82e79c5df76d28b8b1ab7631cb11ff3e89de82182ea96c7f mysql-common-8.0.44-1.el9_7.s390x.rpm f29b60721d211ee5a24f90457d011b532b4decfca6123eeb50f1069675c957c4 mysql-8.0.44-1.el9_7.s390x.rpm f2ec42003dfccbde1980c1b5ff25e6343248f15ca79f8c0bcef7c9ac2389d704 ALSA-2025:23111 Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040) * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default mysql-devel-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm 14fe8af05fb774a5950c43cc7d1cc161c618eadb969c58c363f1a7caf442571b mysql-libs-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm 3a0d08e53077d020665073c56a28fe7a2bc438f38477dff65365c0ff9234cfbe mysql-errmsg-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm 3ad51682b9f603e97ed5a3aa480c7158bc9cabfe52683821efe134f777c4ace8 mysql-server-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm 5b4aa9b9a660c20c1696a1aa9d36ace239c86706c7814e66223c47328466e693 mysql-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm 5eddbf895a1a11434d37f15d5f1890d25193ec5165d774a7a145e61dee2e288e mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm 69e976d54c4bc862ea946aa1957a4af06ba625136f6734651e78787b4180585a rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.s390x.rpm 8c0a757ea82924ecf340e621f29cb6d7322ebd996c0b7e05116c51486e2b6c37 mysql-test-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm 9df718e5482a642abcaf17f219ade551c7f09b177ff0c4db4dd2eafeb1968e46 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm a6a291c26e1b08f26ceec3afe3bb4650cb21e203ce04cff2350db34cbd12e24d mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm bad50cf06e6ea4327ddfa8063a98361e493a8fe7dcf921be55ba12177dac540e mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm ce7c078f962fd614387a5a86f7b229eb57758d44e95f0f1ad2cd522019019b61 mysql-common-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm ea7bda08f9b88e34fcd82a2d963e392746bbb510fc8ff007779208a1d35ba1c5 mysql-test-data-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm ec4fa0f0561aa7f6a57fe7d16c58c6d9049765f2d3c2b178c8ae8e956895d960 rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 ALSA-2025:23142 Copyright 2025 AlmaLinux OS 0 1 Important

wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default wireshark-3.4.10-8.el9_7.1.s390x.rpm bae359f48d35c6c1ff8b4ff63678537f51e023bc974ae7b87f759fe3a9f68876 wireshark-cli-3.4.10-8.el9_7.1.s390x.rpm c0abb018d5e009c49adbed34f0df2d0cb04f2b45f0c098605c467a63389e907d ALSA-2025:23210 Copyright 2025 AlmaLinux OS 0 1 Important

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration (CVE-2025-13609) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default keylime-tenant-7.12.1-11.el9_7.3.s390x.rpm 4772069bfecc6aff83aebc8289f3c64cb690b219d2ce6facf287cc273c91328e keylime-7.12.1-11.el9_7.3.s390x.rpm 6c2b4d357a9941348b8e79d8f784f2388d9da395d298d6f1b4e72f40f2efa02f keylime-verifier-7.12.1-11.el9_7.3.s390x.rpm 6c7bba3bc359415763663e9f222d7d53701c3899e369c8d3f49e216359642084 keylime-registrar-7.12.1-11.el9_7.3.s390x.rpm 73452d4cf05c6b425761651b6709fd011cd287007f8783d70851d2336ece2461 keylime-base-7.12.1-11.el9_7.3.s390x.rpm 8cdb5b6bdf3adf980bffca7749f4a2df8fd4dae26132997012d60acb4b8f463d keylime-selinux-7.12.1-11.el9_7.3.noarch.rpm dcd62073eeca23c4ecae679315d947a18542766de1fa33068f399f691fe3f626 python3-keylime-7.12.1-11.el9_7.3.s390x.rpm ff852aef816f30299209ed889b74d2137362b36df286fd63a818954d23677ba0 ALSA-2025:23241 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499) * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966) * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-debug-devel-5.14.0-611.16.1.el9_7.s390x.rpm 1df4af2974c1b44162750809be5cbf60901a769f4de6d617bbcdb2d79fcbf46a kernel-headers-5.14.0-611.16.1.el9_7.s390x.rpm 203925d1a5160877fdd41837dedf38ff8a76297a8c73da44fb2aaf2cbd4b780b kernel-devel-5.14.0-611.16.1.el9_7.s390x.rpm 47ad33d74698c9cf7358fcd43e32b7463417b4f640d51c3b2cdfc38e6a68e7cd kernel-zfcpdump-devel-5.14.0-611.16.1.el9_7.s390x.rpm 5a3ee891156dd875252bc0abfc58ee0f4f874fea858d2fb7aa4599efa09e9937 kernel-debug-devel-matched-5.14.0-611.16.1.el9_7.s390x.rpm 74d85b4b9179cbb5dd2d17e1554ed477861ced8dcd30f9a48f12ef4699c44f51 rv-5.14.0-611.16.1.el9_7.s390x.rpm 77d3f0aa9824d277d96e5aa405147cf73493666b3aed16e845ffbc0694e4c5db kernel-zfcpdump-devel-matched-5.14.0-611.16.1.el9_7.s390x.rpm 89740db1aa9f0bb9ce092cbfce6e221d3e0ba7bea8a0af586cc0c58fcadb4cce kernel-doc-5.14.0-611.16.1.el9_7.noarch.rpm a90ac19d238b5f645c1f88b935ebe8457079617f74bd25a0d5a4b5cb4d5e3d96 python3-perf-5.14.0-611.16.1.el9_7.s390x.rpm daee9eae01b47868a7716192a1df5af0369a0d71198aa306471aff54fb838879 perf-5.14.0-611.16.1.el9_7.s390x.rpm dfd770da851feaefe7bafbce3fa97b7a478377c33398b95f940ee926342abf7b rtla-5.14.0-611.16.1.el9_7.s390x.rpm f6a2a3a0ae148ae161fc330ee02e5f5f3566f21b928d9cd217d8b3f7cac9f750 kernel-devel-matched-5.14.0-611.16.1.el9_7.s390x.rpm fde31bf59fc5a39ed7741f5e2b53dbda51319cf44f7d34c52d0047b8e1e471d8 ALSA-2025:23309 Copyright 2025 AlmaLinux OS 0 1 Moderate

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: pgsql extension does not check for errors during escaping (CVE-2025-1735) * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491) * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default php-cli-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 000bd4d06a764adb8a61b40124b826172f27c1f8d1bf5dfec88bb091da38694c php-opcache-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 0d6312c48400c8c34b9a34aef6ecfa610b2eac63f89ffee416bafcf4b4d90d8d php-ffi-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 0ec8f1fe5a504162d826e687075d03a36d62a1146cc0688125508bccfcfbf862 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm 2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552 php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm 2d91df18463f7e5cd5a771f760d2dae331ad870672e519b72976b7b1e308de4b php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm 2e6d69933e316fd47fb94a2c937bbdd1aa9468b2ff581671b71042a7b07a002f php-ldap-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 320986993313f88d7957c9dc969c151d34c8270c97a626c3a68aa2b16bd78583 php-dba-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 3c4312e28e3c5b5af450fd11ab514a760adc73d02ce90cf854add6712f6f406a php-common-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 4035205db136f9265507e961f84a8bd4c2d46284ed89eac23f156a813529a7a4 apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-odbc-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 447139eec2eba0718ab2c4d34292c92e94092a8938e669d219ab2679f2862ab8 php-process-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 54bea720f81d7265858df5a6251e8e88a2bac81a951ff77a5c078b847ced72ec php-mbstring-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 587b5a4aa9b83701f0624cfc2f323a9e735b22324863f26ba33e3097e441f922 php-gmp-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 6219878f28c63e0c523e808c43e1bb862d77bface5fab031f15f4e6243e7978a php-bcmath-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 63c856667b8d6edc22f91f4bb86af81efc639a68d2bfe63106d59e149abe9d03 php-fpm-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 70db76052fa97f9f86ea766c0c3e1da1f9364a5a73d2a56dd9fae14fada969d9 php-enchant-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 72aa1cd56aa5d36b933ef1f7a8f9db07fa5532e419e7056e2f309c7ee405ec77 php-pgsql-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 78a960cd1d8f125fa70097ef012ab417f545e1d64a191c7f72dde2343417f114 php-gd-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 82b64639716b8e209f7d177105b328ecb4c64e5904ac8bb79d234c69fde01083 php-devel-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 8dca559a6a51f5204d9932cdf05626a70d640e40066debfd5bae6beac5f90f46 php-xml-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 955b026fbf1bf475ba579ae730c5fce001fc323b81aae13ead55b2c990528c86 php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm 9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2 php-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm 96a3dc526427c85c3147c2ad000d1caf24ea0ce1747ad12c6e52113ffa9c85ee php-mysqlnd-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm a790c6b2cf48e656b0a6d0fd584e3c9f1edd0d641d09f317bf8c03251cae9063 php-embedded-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm ac8f65a6fc923c38b684303750d517cc65b4580dc06fb4f137cb574a8b9a629e php-pdo-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm aecfddcd1673b642335acac892115ad8b7109286aa89dbdc6c4008ce56dca008 php-intl-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm b98068fea808e436c63f8ed79c14ea09c7b27c1260c6c57dc2b1f00f75424df5 php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22 php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.s390x.rpm daddebb79dcabf2b21e7db723448b62a2c6d9941272af21949a665d7b0e9e11e php-snmp-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm dc3f06cf80cdeef70d8d007320201019f62044862234a3ed2fbfe58e04e9797f php-dbg-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm e449c5ee09ee2cc4c2b39ffaabe8715654e0e92d36bbb54e9f6fd0a7b132f281 php-soap-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm ed5639ffa59c9b1eb2f2650745bb61b026833c49624f44199a68f006c04cb61d ALSA-2025:23323 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.12-3.12.12-1.el9_7.s390x.rpm 1eb8f5f50eadb07aec538b76e09bc4d00eec502f08e5f5c21c90ea2ca2c84aa6 python3.12-libs-3.12.12-1.el9_7.s390x.rpm 2f3cfc75172ab951b83c4fe4a073de51ba4fb685a39fe328b10cfdf584988e73 python3.12-tkinter-3.12.12-1.el9_7.s390x.rpm 45926440dfdd6c502195d584d229d07e597b14a3e932ae986933cfa08d128dd9 python3.12-devel-3.12.12-1.el9_7.s390x.rpm d3779be3f46eb8a76a7e7cd1ff1c0ff21bab1176a2202fc733f5e1fbdbe11924 ALSA-2025:23325 Copyright 2025 AlmaLinux OS 0 1 Moderate

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default podman-5.6.0-9.el9_7.s390x.rpm 420c8dd312a938fdc2055f5e3068abf429c823f91f359cb15ddb4effed640c7d podman-tests-5.6.0-9.el9_7.s390x.rpm 4e4fc87adab2c6d66c3eb9454001a9e521cf1583298eca4f6ba103306aa2df29 podman-remote-5.6.0-9.el9_7.s390x.rpm 5b40520dfd581f430dd1fcf6a5a816589cd742449d8b3fab8f4e38fe3ae7584a podman-plugins-5.6.0-9.el9_7.s390x.rpm 5fb895c028f9cfaf1f3ceee0204a9a573a6d0513e99052762f86fd4a33a5b171 podman-docker-5.6.0-9.el9_7.noarch.rpm 95acb44516014fa7cb6e321e1aa10afa1e39fdd85dc4578f6aab3e7d0059ec7c ALSA-2025:23326 Copyright 2025 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default skopeo-1.20.0-2.el9_7.s390x.rpm 50642c325e96bfb68e2d684030d2eeaacaf101370e1f2bd91506bdc2b21e00d4 skopeo-tests-1.20.0-2.el9_7.s390x.rpm 68db768357917f6f741fab43429562bb28307661698c8b17b4b00c2f85549622 ALSA-2025:23336 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc-toolset-13-binutils security update

Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default gcc-toolset-13-binutils-devel-2.40-21.el9_7.1.s390x.rpm 3cf24a1e656e3904c6159fbb5f59f76026b6e9da4c7afda2275e86dcb156119b gcc-toolset-13-binutils-2.40-21.el9_7.1.s390x.rpm 8cb1c3ca7a4eebc154746cc709b474ce9aea1a1f7d5ab3b866fb3dd4727b4bab gcc-toolset-13-binutils-gold-2.40-21.el9_7.1.s390x.rpm a5cfbbce3ce0bb8e7980f1cd710e1a9e54a8a2216f64120c5cc569d4a990633e ALSA-2025:23342 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642) * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069) * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291) * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-devel-3.9.25-2.el9_7.s390x.rpm 75d5ca79186ed6867c31e221405664dba9db530141664eb1ee59e5b83f76ff79 python-unversioned-command-3.9.25-2.el9_7.noarch.rpm 9cd4004b4ee5d78dced922fbddc7341790a38a8869cf3252a6585ed620f412d8 python3-tkinter-3.9.25-2.el9_7.s390x.rpm f363a3a3fa95fdd22a5c5b6925d8f950446a0df7603dee4f019bc727097b6473 ALSA-2025:23343 Copyright 2025 AlmaLinux OS 0 1 Moderate

binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default binutils-devel-2.35.2-67.el9_7.1.s390x.rpm 548e1f222bfeb1516bf79ab9db4c36c0d505260c44a54be90e850956824beb85 ALSA-2025:23480 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984) * openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default pam_ssh_agent_auth-0.10.4-5.47.el9_7.alma.1.s390x.rpm aa4433f46d9e31efcd7df4a6f3678a4b64d6ee74f95d7b8108e7af7849428c75 openssh-askpass-8.7p1-47.el9_7.alma.1.s390x.rpm c44c256238f81b8585231fc3e031b3d9da8c66c7e22f2af70a1e51a94fcccd66 ALSA-2025:23483 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libssh-devel-0.10.4-17.el9_7.s390x.rpm 5f26fa71d6e03936f3754f96576726d9747c35fd7aedf0b3c4f295b3abda4c3f ALSA-2025:2359 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Use-after-free in WebTransportChild (CVE-2025-1931) * firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process (CVE-2025-1930) * firefox: Unexpected GC during RegExp bailout processing (CVE-2025-1934) * firefox: Clickjacking the registerProtocolHandler info-bar Reporter (CVE-2025-1935) * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1938) * firefox: JIT corruption of WASM i32 return values on 64-bit CPUs (CVE-2025-1933) * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1937) * firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access (CVE-2025-1932) * firefox: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents (CVE-2025-1936) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default firefox-x11-128.8.0-1.el9_5.s390x.rpm 594fde7f1473c457085d4c7eac138d5eb38ac868abe9b5526fee2cf18af3d4fa firefox-128.8.0-1.el9_5.s390x.rpm 8a4168b4bcbfafbe8a9be0d3dd2fa39811bce51dfaf43829c88feaeb6d627a4e ALSA-2025:23700 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: webkitgtk: Use-after-free due to improper memory management (CVE-2025-43529) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43501) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43531) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43535) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43536) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default webkit2gtk3-2.50.4-1.el9_7.s390x.rpm 05a1fd6d3385f9a6a089c44ed60d87af7db8912a95a3b946ce0b3bc368079a15 webkit2gtk3-jsc-2.50.4-1.el9_7.s390x.rpm 1d2a4c68a7494cf5d5bd653f81b89df274172478045f1c4398689b2f4b245321 webkit2gtk3-jsc-devel-2.50.4-1.el9_7.s390x.rpm 664775c94a93a556aca88aff5c3cf81e979668198e8780a6ec134243a8935498 webkit2gtk3-devel-2.50.4-1.el9_7.s390x.rpm e358948a972c9985c91bc5a5d1620baa4f89c6828f76438fd3342e4905b7ec6e ALSA-2025:23729 Copyright 2025 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation (CVE-2025-68156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default opentelemetry-collector-0.135.0-2.el9_7.s390x.rpm 26e589f29ce990263b1d71c8cfc0f1f4018d6bc1ee5ff4bb4ca8d8b8ed509737 ALSA-2025:23739 Copyright 2025 AlmaLinux OS 0 1 Important

mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fix(es): * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default mod_md-2.4.26-1.el9_7.1.s390x.rpm 00fe8ff6623dfd2b0349eb07fd7c5eb45167616dabd1efcfc42d77d75e43ccb8 ALSA-2025:23744 Copyright 2025 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * git-lfs: Git LFS may write to arbitrary files via crafted symlinks (CVE-2025-26625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default git-lfs-3.6.1-4.el9_7.s390x.rpm 4f8b70c9215326cd3130866fa2105ed6adad87ec7d0f6129a0a1d4378123defd ALSA-2025:23856 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333) * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329) * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331) * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default thunderbird-140.6.0-1.el9_7.alma.1.s390x.rpm 32f5df1a9d1e5d3184c5506504c92aa70a7ef727c203da7a50139398cbfb5549 ALSA-2025:23919 Copyright 2025 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default httpd-filesystem-2.4.62-7.el9_7.3.noarch.rpm 010cb3fee1896ff672703724018ae6fe479ebeef8cfe3509d6ed63c9552b2de5 mod_ssl-2.4.62-7.el9_7.3.s390x.rpm 126b0b83b302973a885b1578a11f0ac4eedffdb61d76616a9c133b8dfba8bfcd mod_proxy_html-2.4.62-7.el9_7.3.s390x.rpm 463368368bda616e04c4d0d890b2bbfe7324bd5aea4c4e9d9e2db910b6dea32a mod_session-2.4.62-7.el9_7.3.s390x.rpm 5990fbc1e53a8c399552f3a55dd929ff1ada2e3aa84c2c806a397b7159cbf7ac httpd-manual-2.4.62-7.el9_7.3.noarch.rpm 8e21f57b8d986cfef0ebc680e4d3a7b6ecf794d2a233dbcc47db3fbf25cb6534 mod_ldap-2.4.62-7.el9_7.3.s390x.rpm 9247af13014ca1062627ad9990e7fa17f8fcb661bb112797715223e1b4d00164 mod_lua-2.4.62-7.el9_7.3.s390x.rpm a5d9f3b824d61e96e49da67624567cd0d3bcafec647f359b537c16cc0a62a5b7 httpd-core-2.4.62-7.el9_7.3.s390x.rpm aba3e98003994a5950032293e64c6aa10627782e77a75d4400a0e3c5a91b317c httpd-2.4.62-7.el9_7.3.s390x.rpm caf742edefccb5461b26d3177955224e9412042c1eac2f888326fbfc0551de95 httpd-tools-2.4.62-7.el9_7.3.s390x.rpm ec287e212f067845017da7f4e9a08c3d513bdc5ff28fd54dcfa703a351131c70 httpd-devel-2.4.62-7.el9_7.3.s390x.rpm ed5d0b92d8eeaa5cf975790f2bc35fd7f75fe8c52198d6a6b1fd54540f94aa58 ALSA-2025:2500 Copyright 2025 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601) * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600) * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599) * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598) * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597) * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596) * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default tigervnc-icons-1.14.1-1.el9_5.1.noarch.rpm 08eb0fe289f4792b3cb6f77177d607bba5e069938e4aad36532be1b959990086 tigervnc-license-1.14.1-1.el9_5.1.noarch.rpm 1c41e5a2911fdde16998225f599853ddd6c07baed42fcd070e0fbaa87ada968d tigervnc-server-1.14.1-1.el9_5.1.s390x.rpm 38428f2f53d6666e0a04858ed55af545239fb111521c7fd114b9771813b8b04e tigervnc-selinux-1.14.1-1.el9_5.1.noarch.rpm 8bbb425e9a5ea9fa0d133059e86420caee8ee3378b90ee9bf2a485fa73e92aee tigervnc-server-module-1.14.1-1.el9_5.1.s390x.rpm bb1676c53e612eaffd89293e3c5d6bce5e28c2c27a8feb0271521c48b339b138 tigervnc-server-minimal-1.14.1-1.el9_5.1.s390x.rpm d6523d21bc612a54801c01d486fa2986d0bb5b5f479fc77f7a1fb681add83119 tigervnc-1.14.1-1.el9_5.1.s390x.rpm fff60b2b77756540bf7ae6345b8988448ef4324a5f7ac4ed49f66e454025cbd5 ALSA-2025:2627 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605) * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264) * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302) * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922) * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113) * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default kernel-debug-devel-matched-5.14.0-503.31.1.el9_5.s390x.rpm 2f4b034f60e9281a51b58b30033aeae21c094354783b5dd732cc623e60d4102f kernel-zfcpdump-devel-matched-5.14.0-503.31.1.el9_5.s390x.rpm 30cf4460c4bca7b473a7b2d0ce1160ebd5394a8a6f38ebdf8054761fb5bda901 rtla-5.14.0-503.31.1.el9_5.s390x.rpm 4619e835bf087770e7a48ed71275d173705330bf3b1a06d7cd0d1a3cef08d96b kernel-devel-matched-5.14.0-503.31.1.el9_5.s390x.rpm 4e9a3d0d959490f6fe5c42ff68cb19b77433c677bdd7185d5ebcb897c2e29940 rv-5.14.0-503.31.1.el9_5.s390x.rpm 5444d59298c8a59d0e41da50863d17b953972dde7a1be87667c61f878bdb8f74 kernel-debug-devel-5.14.0-503.31.1.el9_5.s390x.rpm 710391498f9a767e7999ff73493a62a932a86825479da54782ab29c3029ef3fd kernel-headers-5.14.0-503.31.1.el9_5.s390x.rpm 81e15b999c9ae8cfd2ce20d6e78c4073d321ae7e0972067304783d79a2337b3b kernel-doc-5.14.0-503.31.1.el9_5.noarch.rpm 8a1eaf2fefbe6ada09b979433a0adbbda098053bfdde0ca648b04202d3d9faf8 kernel-devel-5.14.0-503.31.1.el9_5.s390x.rpm af3f4083b1129d69743aba72377ec5e33557b1e5f656acc993a86a184589901c perf-5.14.0-503.31.1.el9_5.s390x.rpm b966b32c1c1600b291810f349c0fe241c555020b25e00bafb3e138a5f0a20ded kernel-zfcpdump-devel-5.14.0-503.31.1.el9_5.s390x.rpm e8479549fbf8872cd8ae988e98fef02feff5a1f507a9f0cc70cc75e79ada46f1 ALSA-2025:2668 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070) Bug Fix(es) and Enhancement(s): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default dotnet-apphost-pack-9.0-9.0.3-1.el9_5.s390x.rpm 13c50a42faeb348bfd11bfaf435843443098fb9babcdd3bcf6fff0cb1bf0a346 dotnet-targeting-pack-9.0-9.0.3-1.el9_5.s390x.rpm 44020a5dd72308512bfbf0d346df6664c887a7eaf9bf38611caf7916e8847d49 netstandard-targeting-pack-2.1-9.0.104-1.el9_5.s390x.rpm 57d6fb527a67bd78727d3d22720008bc688ac56f9498ab9b9c96f62561eaf824 dotnet-runtime-9.0-9.0.3-1.el9_5.s390x.rpm 659b51ad9a54204b342348f117ac256e8d76c223a7b893548fbd9bc0530833bc aspnetcore-runtime-dbg-9.0-9.0.3-1.el9_5.s390x.rpm 861eb4eb68f2a04d91aaf94740c0a4b19a5f4235f3beec27de0a9b7274c09bd0 aspnetcore-runtime-9.0-9.0.3-1.el9_5.s390x.rpm 8de208938808113763db6e8a3f0f11061ef7b29a8c6d08bddb1ed4fe31e86d29 dotnet-sdk-dbg-9.0-9.0.104-1.el9_5.s390x.rpm 91a0a89ff6d65b3b3ca9778bd66b37ed0dfb35def554c7840a1e0d0254090c29 dotnet-hostfxr-9.0-9.0.3-1.el9_5.s390x.rpm 9bc8439ae041c7d7a3d8c0e7762b78ad66c1c61796cfc5ad1b364371ee2dffc8 dotnet-runtime-dbg-9.0-9.0.3-1.el9_5.s390x.rpm ac789c43903655ee0276e11c0a71843c32fc573b408f3213a8bfcfda4e82fd9a dotnet-host-9.0.3-1.el9_5.s390x.rpm acdb8de0dedc222219fc6318ac600237987d3f53638a102e830135931f24b32a aspnetcore-targeting-pack-9.0-9.0.3-1.el9_5.s390x.rpm b571f9b9c0a7246e97bf3a4d4d8380bd5a4749b4ed4618d59de0fa33759cc8b1 dotnet-sdk-9.0-9.0.104-1.el9_5.s390x.rpm bac29f1214c70cae1daa6ff72bdc94b19f16d7d6a114fbc90b7d433b72950c5e dotnet-templates-9.0-9.0.104-1.el9_5.s390x.rpm cd5db8b9f6fe0c78ce2bcc348962ec0504e7b942d1533815c6bb5dacd52bc764 ALSA-2025:2669 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070) Bug Fix(es) and Enhancement(s): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default dotnet-templates-8.0-8.0.114-1.el9_5.s390x.rpm 044da777c075205b586aa4f2d4f5d35fe9340204df2dd8869832fd9535106f39 dotnet-sdk-8.0-8.0.114-1.el9_5.s390x.rpm 162727fb0d19c83bfcd5617a20137669242878a9eeb68e217d6a598fb5533dfc dotnet-hostfxr-8.0-8.0.14-1.el9_5.s390x.rpm 2eef41c43c2177b0d36a72233c89f2f5ad79bca81b6548488e0d6dfe857d7067 dotnet-runtime-dbg-8.0-8.0.14-1.el9_5.s390x.rpm 2fd44c7f5b2117da3a86b7bad627d0b4fba50c8c90edf75db6776ae86b994ab0 dotnet-apphost-pack-8.0-8.0.14-1.el9_5.s390x.rpm 4282adfc4112090b284bc6dfc8bd95d989d213a29674d9a51637559b5803edb6 dotnet-runtime-8.0-8.0.14-1.el9_5.s390x.rpm 450e21162d124643650b5c3f5557064da4dca3eff70ce8c865ed45f92bc193ce aspnetcore-runtime-8.0-8.0.14-1.el9_5.s390x.rpm 45c4023269fb13f5b3f7a86e984346da4384ca7ffdcba656ce49d7537206d5b8 dotnet-sdk-dbg-8.0-8.0.114-1.el9_5.s390x.rpm 8d48eeca79f5da4ca66ab0cb01666d2382155785a04c9ef39497c9f924f43ae9 aspnetcore-targeting-pack-8.0-8.0.14-1.el9_5.s390x.rpm b343774842bcedf4a0c9b9c789eb494e4c6381880cb16c8f967e7f21f9feb561 dotnet-targeting-pack-8.0-8.0.14-1.el9_5.s390x.rpm ec18a88335e972a4abb5ced167318db6450ee4ad75d369978f176f5e5ea5e4cd aspnetcore-runtime-dbg-8.0-8.0.14-1.el9_5.s390x.rpm f8b2247b942cd1c024930302977f7291bc11b14a8363e9ae219dfb02ae755b40 ALSA-2025:2679 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Use-After-Free in libxml2 (CVE-2024-56171) * libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default libxml2-devel-2.9.13-6.el9_5.2.s390x.rpm 3c1f7c3ce01d4a556e8f059e9cc52556b2ee428cfd7efc2799f892005d089961 ALSA-2025:2864 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: out-of-bounds write vulnerability (CVE-2025-24201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default webkit2gtk3-devel-2.46.6-2.el9_5.s390x.rpm 75a752ed90cb10a77d0aba6b8ac5cc5062dc2914b2e7d0554cf7f770d8a65f21 webkit2gtk3-jsc-2.46.6-2.el9_5.s390x.rpm cc2fc0869074433c1d3a4e4d514225af67072d548ae4cb45219a50887bfb707e webkit2gtk3-jsc-devel-2.46.6-2.el9_5.s390x.rpm d29084f1f2485e48a7d19b4eb0e1db6da0e11dd002e96bd95b0a3bc1543af745 webkit2gtk3-2.46.6-2.el9_5.s390x.rpm d8b03e8d159e1b7a81ec0a132b0a41a824bc2ef756739345fe2e06a8c96f0ce5 ALSA-2025:2899 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1938) * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1937) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default thunderbird-128.8.0-2.el9_5.alma.1.s390x.rpm 27cb131404d0c7415e739b8eeaea9967eeb95b3efc8b0050400acfdcb2382d35 ALSA-2025:3107 Copyright 2025 AlmaLinux OS 0 1 Important

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default libxslt-devel-1.1.34-9.el9_5.1.s390x.rpm 1982789b03f0d216afd761bbd65dc199ccd52fbf9f519a5aacfb23c56fc0ea71 libxslt-1.1.34-9.el9_5.1.s390x.rpm efa882dfa3c90830e83964166d128a82d8faf1877601d2d2be6cbcb97b468bd7 ALSA-2025:3261 Copyright 2025 AlmaLinux OS 0 1 Moderate

nginx:1.22 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default nginx-mod-http-xslt-filter-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm 03ba89365b528c50d160bbbfc24ebea820b014bf938110ca43f5151c414a7f3c nginx-filesystem-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.noarch.rpm 20fecffac0847e519512ba8cd591edeba05bc8f264ca32b07bd073504cb74071 nginx-mod-mail-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm 31c3d24d23fd52e20c16e165808c4f489633270c1249fb0b1d664add77d9c520 nginx-mod-http-perl-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm 4030b059ed7f5536b33a2436d3f79a8d2b336a52f9f15aa41d04183a220a4b99 nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm 7b7833d5c19c7512c7d920f4b6284d2ce0880d99fe57b45538d50aca745caca2 nginx-core-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm 7f290000957a51236ca5d6df9adb1325ada2558f18b1eb47846be01f4032f777 nginx-mod-devel-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm 8155e28ff674d744baecfed9998119d0f64a06dd297f20c040e3f49aefeb462c nginx-mod-http-image-filter-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm ac73a6425ad8dc4d79428d5dd63dac5e50ad64b4629d00d3ef77e2416d3f679a nginx-all-modules-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.noarch.rpm c35220600225a92c23b7364c22f0379078c76d410cf5f796f65ab44d08d8d20c nginx-mod-stream-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm ea184baf0a879556fe89cdac1b952c5e7689497e9e97f547515347ccc745c70b ALSA-2025:3262 Copyright 2025 AlmaLinux OS 0 1 Moderate

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default nginx-mod-devel-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm 3277c5ab82b457680bde4d0569cb2aff353073a29400d0ea3dd64e1e3604bd88 nginx-core-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm 380c6d3dc74670cf5c916235dc57bbd4ec52d83f3a3c20ce6d432a53e14e2dcb nginx-mod-http-image-filter-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm 3ad2d22ed02dc47165009469a5077556389bf08dd2dea13ba0419eabd95d3e9c nginx-filesystem-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.noarch.rpm 46aa379ab6b7efb4afe049d48dfc01743a009efbee327e06e2d394ecc2203a30 nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm 4e758675c78016c81731aa14df67a67f26938e58a4088f8c92890be5a7b6bbc1 nginx-mod-stream-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm 7f1ed00e4f780670d69e5491da08fd39610db0ccba7a7d78c79e53803bc652a3 nginx-mod-http-perl-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm 8857aa3c85356de2225e581c373bb209ceac5ee4478f1d7b01347d1dd7ed8222 nginx-mod-mail-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm b8a8ba422a38b0333d8507640117d5b956839d5a9d01f7b4091fbcbd8b424f40 nginx-mod-http-xslt-filter-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm c17d41492298d9f0d3188b7af5449d70a7e8ba86bf70156a29d8679cf2cc7294 nginx-all-modules-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.noarch.rpm e5cb23709dc9450f3ab02e90d789ebaf48751c3726076dced63da2bd50d68f72 ALSA-2025:3344 Copyright 2025 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default grafana-10.2.6-9.el9_5.s390x.rpm 03c7a983550314707595946cc978aebe63827673c768a01f5af8436567835688 grafana-selinux-10.2.6-9.el9_5.s390x.rpm a85290b7b0ab9ec29e931ee26785481374a534539476145e3f49500d39600924 ALSA-2025:3406 Copyright 2025 AlmaLinux OS 0 1 Important

python-jinja2 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * jinja2: Jinja sandbox breakout through attr filter selecting format method (CVE-2025-27516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3-jinja2-2.11.3-8.el9_5.noarch.rpm a1b063cfea59ae64cb44cf1fc0947b580d536a6a00da53384b132339c0dcf69b ALSA-2025:3531 Copyright 2025 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default expat-devel-2.5.0-3.el9_5.3.s390x.rpm 57c8a407369a516723ac3790641c002bb487dd08005b0086b74c9b00f8256255 ALSA-2025:3556 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029) * firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028) * firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default firefox-128.9.0-2.el9_5.s390x.rpm 4f40cdfacff5e28ce711ba1f326891dcb3ee12ec7d4495325c34aaffdfe6a3d6 firefox-x11-128.9.0-2.el9_5.s390x.rpm e6431081994794e536dd549216ff4bd410e5217368565b8d8b22879f33801ab4 ALSA-2025:3617 Copyright 2025 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: dds buffer overflow RCE (CVE-2023-44441) * gimp: PSD buffer overflow RCE (CVE-2023-44442) * gimp: psp integer overflow RCE (CVE-2023-44443) * gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default gimp-2.99.8-4.el9_5.s390x.rpm 49686d8f3cd96eabba6e2a70edea1f6a8a94d6ab812a2362bd1200e10eb2e87b gimp-libs-2.99.8-4.el9_5.s390x.rpm a9065f4182c54adb55c5a348f1a5e33d22de833ab20476e56d5b1b6dd35c2515 ALSA-2025:3631 Copyright 2025 AlmaLinux OS 0 1 Low

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3.12-libs-3.12.5-2.el9_5.3.s390x.rpm 457c6dac0e6fd2c19d953c70b62af9b950b5c097f5d3717803c4633f964e4a80 python3.12-3.12.5-2.el9_5.3.s390x.rpm 658bf4a3bbf2e2db90becdde282cdd531f32663d78c58c4d637cc6cf011fbc40 python3.12-devel-3.12.5-2.el9_5.3.s390x.rpm 6732b6892b11727821c631a456893946c931bd9d44e349813215569d30eb56a6 python3.12-tkinter-3.12.5-2.el9_5.3.s390x.rpm e0e02eab203569d96ce9490b155e87a8ed3c5110ef0e83a39c8b19cf830aa3bc ALSA-2025:3634 Copyright 2025 AlmaLinux OS 0 1 Low

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3.11-3.11.9-7.el9_5.3.s390x.rpm 22f801946fb0be92004a74520d5dfbac4c4d0d217441f0f216952f15c6673bbd python3.11-libs-3.11.9-7.el9_5.3.s390x.rpm 4a1c1df6ad825043f12046bf97aca33af6fcbaa80fedc92b6c318918389cc1d1 python3.11-tkinter-3.11.9-7.el9_5.3.s390x.rpm d9c95cd61dc9fb6d84639aa286bccaed120389b8313d06638bf565a075b80584 python3.11-devel-3.11.9-7.el9_5.3.s390x.rpm db356c177aa1893218701b8da6c8ce1b54f732d8067872aa83637f0392c8d1ac ALSA-2025:3645 Copyright 2025 AlmaLinux OS 0 1 Moderate

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) * tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default tomcat-servlet-4.0-api-9.0.87-2.el9_5.1.noarch.rpm 729d9fbc08b043b7f408495a8c4e31143cddcef86f382900b746df29b1e93845 tomcat-jsp-2.3-api-9.0.87-2.el9_5.1.noarch.rpm 79d5f8c42f520617044e5773b6665f862b66ebc476d0ab58f05c4056c355ca55 tomcat-admin-webapps-9.0.87-2.el9_5.1.noarch.rpm 8bb0639695bcd28987ad4137f5570be96942f2e9497acac6ed14dc1dbc1bac09 tomcat-el-3.0-api-9.0.87-2.el9_5.1.noarch.rpm 95aa1c5351ece31f53442ce78dac002564770fd9748249534c060bb3669d79f8 tomcat-lib-9.0.87-2.el9_5.1.noarch.rpm bf01263d71e29a5ed32248056bfd6293c60a73fda5a9393f9cb38bf18aa984ae tomcat-9.0.87-2.el9_5.1.noarch.rpm ddd3e00b02bdd79ec60ddf015bc84916ca70641171ef7c77cd97b03484cbcb82 tomcat-docs-webapp-9.0.87-2.el9_5.1.noarch.rpm f03f7aceb10d8eb675f094f375d2c231842873446c783170df1e3699c4f0b49d tomcat-webapps-9.0.87-2.el9_5.1.noarch.rpm fdb83b9e6370a484eba526ff08b0b8384e11c8654e28006300a8ba219191d33a ALSA-2025:3713 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551) * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default webkit2gtk3-2.48.1-1.el9_5.s390x.rpm 1f33e2bd796aabf0ecb84249ffb063ca2ac256c03f4e953592a51946d39ad29d webkit2gtk3-devel-2.48.1-1.el9_5.s390x.rpm 236f433ba9ab86ed1a7ad85a97b9f87272bfd7052b6b986be4fc7b814220b64a webkit2gtk3-jsc-devel-2.48.1-1.el9_5.s390x.rpm 4625c145b3e114d29864895f1dda3ae6903591dd8e4c9df95daf1f7d3fb9b83c webkit2gtk3-jsc-2.48.1-1.el9_5.s390x.rpm e7ff8f567b1f90999cf97459be849d5299ea4d558a903afaf7b7e0f3d7267a19 ALSA-2025:3773 Copyright 2025 AlmaLinux OS 0 1 Important

delve and golang security update

The Go Programming Language. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default golang-misc-1.23.6-2.el9_5.noarch.rpm 15994156d65e498b48edce0a83f6fa539fd964b8c17c6bbd189dc36cf14a0f4b golang-1.23.6-2.el9_5.s390x.rpm 3120dd9f68a13af1df981fda80c17d4abb934aaa444b2bccb91a3cb2add2433d golang-tests-1.23.6-2.el9_5.noarch.rpm 8efc93285b11531f1481cc5986e5b4cd892a01b7595c1fb7d21198bd5bf388b2 golang-race-1.23.6-2.el9_5.s390x.rpm 9e9037ba5e6d86bd44f3ae2b1aced235fffaf771f599b9db70332927f41aa6d1 golang-bin-1.23.6-2.el9_5.s390x.rpm c6500db32b5f8c49efbf1bfdd1c41692dae8d6a52f4db60e70571c8d3292a14f go-toolset-1.23.6-2.el9_5.s390x.rpm cf35be01e83a6f4e9a3b233bcb578e5525cce16f3814158a98fee05114542583 golang-src-1.23.6-2.el9_5.noarch.rpm e871ca30ed3abf4af1f8574f5b92738a5878ad2e8b54dffdbc9715a2ba9a7dd4 golang-docs-1.23.6-2.el9_5.noarch.rpm ea7cc52ebdb704fd6d1a71b8bef45cb23b3c1d89c6b3a218fb425aa85a555057 ALSA-2025:3833 Copyright 2025 AlmaLinux OS 0 1 Important

gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default gvisor-tap-vsock-0.8.5-1.el9_5.s390x.rpm 9b2efd82d857b25fd7b1e4fcc78fdf4eb2a079a55679e86bbeaf4a5703c89659 ALSA-2025:3845 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Better TLS connection support (CVE-2025-21587) * JDK: Improve compiler transformations (CVE-2025-30691) * JDK: Enhance Buffered Image handling (CVE-2025-30698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default java-1.8.0-openjdk-demo-1.8.0.452.b09-2.el9.s390x.rpm 2bd5412bc0dd80aad645d2311d4343ed27af2cb198d868274115a105d6e54a70 java-1.8.0-openjdk-devel-1.8.0.452.b09-2.el9.s390x.rpm 596b3687374d4d79faa0c44d8685d8fefd8b7648ab31d0476788b6fdbab48554 java-1.8.0-openjdk-javadoc-1.8.0.452.b09-2.el9.noarch.rpm 5aae70336b95a3ce2b62fd90070d313f77ec051673846762fcbee3a435da2e3f java-1.8.0-openjdk-javadoc-zip-1.8.0.452.b09-2.el9.noarch.rpm 719d195031b98c6f1bf0113a57dbf7ecc25b912db67a3197174403bd3e9bd834 java-1.8.0-openjdk-headless-1.8.0.452.b09-2.el9.s390x.rpm 7ae43602d580dfd1065bca97a1ba4bd8b14668563a5c02454619b64695910365 java-1.8.0-openjdk-src-1.8.0.452.b09-2.el9.s390x.rpm 8b669af870267ae5baac44208a211003650885a1a33b3c5553a5e327abeec282 java-1.8.0-openjdk-1.8.0.452.b09-2.el9.s390x.rpm cbda8fdf25554b0c469939fe2e9b661ab69035aff38dcf0d849a23f60102124d ALSA-2025:3852 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Better TLS connection support (CVE-2025-21587) * JDK: Improve compiler transformations (CVE-2025-30691) * JDK: Enhance Buffered Image handling (CVE-2025-30698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default java-17-openjdk-javadoc-zip-17.0.15.0.6-2.el9.alma.1.s390x.rpm 1b833734e165c9a296e41ce2b991435963dfaa8e88c9911e2228a921190c7b50 java-17-openjdk-demo-17.0.15.0.6-2.el9.alma.1.s390x.rpm 348369ae6582f481e290a12addb9f436e7d5be0f92714e59db07637348494481 java-17-openjdk-javadoc-17.0.15.0.6-2.el9.alma.1.s390x.rpm 3f367450cd29f3069dd482fe104073d3cbde7766a00e5b6c4c18811d4dc4ad84 java-17-openjdk-jmods-17.0.15.0.6-2.el9.alma.1.s390x.rpm 48c3cdd3c7fae05bc0b459c677651dfcde85ca1595c49c81629b59f7df00d71b java-17-openjdk-headless-17.0.15.0.6-2.el9.alma.1.s390x.rpm 90a6c53f110b77bad7fd3d23b721fab3f5789c33f69f5899bf68c4f340046a19 java-17-openjdk-17.0.15.0.6-2.el9.alma.1.s390x.rpm 94c4917be95b785e6a74ce49e9a86a01baf8d89b8c779135f6246ba699356bba java-17-openjdk-src-17.0.15.0.6-2.el9.alma.1.s390x.rpm bd3a5159d6010168d6b195938668255ab7df5615206c068fc978f70500e24c08 java-17-openjdk-devel-17.0.15.0.6-2.el9.alma.1.s390x.rpm da94e35ce3786b7bed35364af918d0f7b8c6121763d5d6666007473f8b770bbc java-17-openjdk-static-libs-17.0.15.0.6-2.el9.alma.1.s390x.rpm ee1e42ccca5d712f92f4d582fd0d4e2e1d569ba0492bfe436b37ece663ed1073 ALSA-2025:3855 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Better TLS connection support (CVE-2025-21587) * JDK: Improve compiler transformations (CVE-2025-30691) * JDK: Enhance Buffered Image handling (CVE-2025-30698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default java-21-openjdk-javadoc-zip-21.0.7.0.6-1.el9.alma.1.s390x.rpm 24d3dc068a84572910ae53eff6aa0156adb34795bcf50a81b60f8f31d9f8e157 java-21-openjdk-javadoc-21.0.7.0.6-1.el9.alma.1.s390x.rpm 2cbc2aaf1bf569c21ac1ed789f416317d59131eb0192ae2bcbb55f1b19981ff6 java-21-openjdk-jmods-21.0.7.0.6-1.el9.alma.1.s390x.rpm 619fe290796de25af20d7aa7ba519d1537b65dd2eed2b6b6af1072da5c54e006 java-21-openjdk-21.0.7.0.6-1.el9.alma.1.s390x.rpm 775ed5458cf04c0d2af8cdce8eabe3890de0ea1f64ab48b93fdad5e7b2855157 java-21-openjdk-devel-21.0.7.0.6-1.el9.alma.1.s390x.rpm a051bf78a1fd37916f2649683ec7555f24e25f6a2e49996bfb699a403ff5485d java-21-openjdk-static-libs-21.0.7.0.6-1.el9.alma.1.s390x.rpm ac24aac635e17c81b730fc141c99942435896498fbc670dcc562f6bb9121f3a7 java-21-openjdk-headless-21.0.7.0.6-1.el9.alma.1.s390x.rpm c089b627750b0abcd8963f3a181f3eb3224334942c12788c1d1b652d23a8d5c6 java-21-openjdk-demo-21.0.7.0.6-1.el9.alma.1.s390x.rpm d7e55fdec28a9635ddb31c1828848ff5c3efd7afad86115b2916fba36b0b0b66 java-21-openjdk-src-21.0.7.0.6-1.el9.alma.1.s390x.rpm eaabda6311a7715912600bf5fefad96681806a3f2e7287fac72c51470970357a ALSA-2025:3937 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default perf-5.14.0-503.38.1.el9_5.s390x.rpm 19ad65e2a4a4303daa2213b1d81ab838a3bef8cf5e5e053237c10f1b27777688 rv-5.14.0-503.38.1.el9_5.s390x.rpm 38e4450724c86a1cd0121674aabef9020ab445f64fa78c386fa72d67b9fe6474 kernel-doc-5.14.0-503.38.1.el9_5.noarch.rpm 426c12cb974a438d7ac3658c96a747eb7de56945b6f0936dd8c3e1b1e1654462 python3-perf-5.14.0-503.38.1.el9_5.s390x.rpm 5b5e4602dc0ef30b79e66ee672c440c9db5756b9e1eff815f5732289b1e3253b kernel-zfcpdump-devel-matched-5.14.0-503.38.1.el9_5.s390x.rpm 6449e5b38f34bf0653874c7c2f959da2ddb6d68f420b7a259c26f1699f331efb kernel-devel-matched-5.14.0-503.38.1.el9_5.s390x.rpm 65d1132ff05cebeeb7edd0a7e21c100b4859ecae02588aaade1c294b1192f35a kernel-debug-devel-5.14.0-503.38.1.el9_5.s390x.rpm 8886b72b6df3f769d05ca8d2a65f34b8f323ec412d1cb8284a38d3a3b0dc451f kernel-headers-5.14.0-503.38.1.el9_5.s390x.rpm 8b9c04c2d046d93f19690be0555d9584ceb162a6534e9e1ea9fdef81a57de015 kernel-zfcpdump-devel-5.14.0-503.38.1.el9_5.s390x.rpm 940b4746db1249926fb2bd6b33fa0f33a123718c6b72a86ad64e6bf251d7ad4a kernel-devel-5.14.0-503.38.1.el9_5.s390x.rpm a4d1fdadaf25ed5f7ff994b2c9cc0ff6a763f1514953f2c847aba908540cccbd kernel-debug-devel-matched-5.14.0-503.38.1.el9_5.s390x.rpm a65dec4fce0af17030f0f09771f4251aed01903b446d23aa2ca32fd805ec5918 rtla-5.14.0-503.38.1.el9_5.s390x.rpm e072c84ad633b7f51eda0f8a18be2f5e99439a334e138e180ead405db4982d01 ALSA-2025:4025 Copyright 2025 AlmaLinux OS 0 1 Important

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default libxslt-devel-1.1.34-9.el9_5.2.s390x.rpm 2d04f40f2d18be8e55a82cf61018c3f9e16072770179399c7d87b437dac7c50b libxslt-1.1.34-9.el9_5.2.s390x.rpm 7dc3ccd3226c98f5e78da81f1859c5d3ade84ff2af8a8b9e3046e34c38b58a0e ALSA-2025:4169 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029) * firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028) * firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default thunderbird-128.9.0-2.el9_5.alma.1.s390x.rpm 0033c6987dda85cfbf01d63a7e74a19c873097db2e50d353ad1b6b8c9aa47edb ALSA-2025:4229 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523) * thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830) * thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default thunderbird-128.9.2-1.el9_5.alma.1.s390x.rpm 136275cfbc69317abf03f9380c0f3e726c174086a4bae97c02f6028e40e85807 ALSA-2025:4244 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default glibc-doc-2.34-125.el9_5.8.alma.1.noarch.rpm 1f92177ee44e90eb47d1eb972273179aa8c388f9b77d0f3ce3eed51f72b7562c glibc-locale-source-2.34-125.el9_5.8.alma.1.s390x.rpm a8bd4e47c6e1a5aea0788df99a622377bedfe77fb261ccb2c3dfb05bb0764b4b glibc-devel-2.34-125.el9_5.8.alma.1.s390x.rpm b50fe1ffc31801e732afabad2f7a3630147306721d308a51dee4354ee907bda3 glibc-headers-2.34-125.el9_5.8.alma.1.s390x.rpm d2188c627c579568192af0c25583b1bd442c39182a08c94391ccab2f727ecdf4 glibc-utils-2.34-125.el9_5.8.alma.1.s390x.rpm d7096ab5e69a041ac76ef173f4cffdf92475e38886ecb348215c4d567c4c5997 ALSA-2025:4263 Copyright 2025 AlmaLinux OS 0 1 Moderate

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929) * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233) * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234) * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default php-devel-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 10c4bd4736a8560347925ca5a89e10f1d353a6e1b74f5bc26499aca4af292377 php-intl-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 1afb5eb6cc9bad833a66896e23aceec1b068248490353ddc760c4407fc3e549a php-mbstring-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 1f0cbd4c87d3df6928afdfb4099172344f9c7860c28fe36c06f795b1fd34b59a php-bcmath-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 34b66f3cc49c998b3a51bd10a9e038735cdf6331c3ff5e7e45d963a4080fbcab php-mysqlnd-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 475d241486c15415492f9d66a66f05fefc4b6668bb1c8aa5ce0dc8bcddf7e0fa php-pdo-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 4f10ec9792ab052e135e1545ab3f8b12a7228dd552555d9fa9cad37e26aae9c7 php-snmp-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 5f7ffe61fd55d72e914ccb879dff6d6d5aed74a4391e533fee30dbeff056a390 php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.s390x.rpm 6c89933d8e8153ed39764877e9c07501f556ba5057a9695bfefcfc75649f5734 php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm 74c41c08148fce005bb18c75bcfafc1e739cc84b6cac297b5ef955172eff0b69 php-common-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 839402ed14c8189e75f6f9de5bd3679be7e34980da2c8e7f78a9b8331481acfd php-ldap-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 907326429f4d360088f7bf5fdc21f1ab5c23423bf062b627f1c8314655edfd35 php-ffi-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm 93dc4ba9f6c417d87f6e4546b4d92abaa87b2fb80ad34e6a6feaa862571a6140 php-soap-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm a23260fdceb7c8620d28e067a3ba4bf84dcd841018bcd3385f767f924bb45054 php-enchant-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm a27f33a1452ae6f17099e029e039529ce2f2c1cc5249faa15941c75e82ef82dc php-odbc-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm a6d2cd404047887358b184a8f3d2ca535c9f39401b2d3662adc444b4696d7e2e php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm bd0093fac304470cea776e43f28256fbfa317c192bb6bd8762cc1ec00db6f9e1 php-process-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm bd1a09c588816a6afc1cc753d4d1fa2f28eb0f3770c0e70ca2f3a21a0467f19e php-cli-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm bfcc949a2aa4755ca5bd9f6e6edfd8590d2a6dfab218354fd57e1a0d60bf0c1d php-dba-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm c1d25ee914749cf83cb8703b40056f7bf0ba6ef1d394ada3526677b77c5581ce php-pgsql-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm d461ac7c0dcc9373552208df5f9d46d3a0cf0b642282946e4afee96cc26044fc php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm d6e184127425a1dda60bf0b726cf76ab5f35927aaebeba2515030177622f47b9 php-xml-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm dd328c81f2d9262b0448fb080885c03147b8dcce1f510adda7011e49b6aecf8a php-embedded-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm ddd00637255eae0d06650169d30bf080048bb1e71b4b1a4a5190010433992c43 php-gd-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm e190567904117d91e7a444f262f17877a6c8197ba67320238065fb9e66aa1aaa apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf php-opcache-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm e42796bb91e1a8ea6700310e1f5d0c5b2615d36f84186967a99189f94f7b9619 php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.s390x.rpm e97fdc0e54c4a5d2084a375f0ff31f551c9dc8c1f4c2012f2e453b1a031a1328 php-dbg-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm f86f55b9c0430d668c6d7f42a8f00c553ba7d9300ba28ceaa0393a33379a6f27 php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.s390x.rpm fa41ac765cb61c3ac39608e29ace6064489a59257504df4cac926a261c7d392b php-fpm-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm fb30ce4e4ad82811f2d4306058940a7a7260251b1db9e800352311242241bd3f php-gmp-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm fe4c703d5f3e66e44a58bd46ae094bb129fcfd6850f53b7e886ffbb14614f73e ALSA-2025:4443 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817) * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087) * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083) * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default firefox-128.10.0-1.el9_5.alma.1.s390x.rpm 4e8a8c19047a2d4f377a5a7f55afee2f09f5a2a9ee6d75f69eb49e1a96906744 firefox-x11-128.10.0-1.el9_5.alma.1.s390x.rpm 681433102f47df91e5e7a8e4840e74e3a1f53a33d2d478d6e24356c23069f30b ALSA-2025:4460 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817) * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087) * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083) * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default thunderbird-128.10.0-1.el9_5.alma.1.s390x.rpm 729b08a993ebd1bc5048caa85f941793542a1fdbb0013d1713fbb6fcb7e1614c ALSA-2025:4488 Copyright 2025 AlmaLinux OS 0 1 Moderate

ruby:3.1 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: DoS vulnerability in REXML (CVE-2024-39908) * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> (CVE-2024-41123) * rexml: DoS vulnerability in REXML (CVE-2024-41946) * rexml: DoS vulnerability in REXML (CVE-2024-43398) * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220) * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219) * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm 47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8 rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.s390x.rpm 49b1f8d15c4626c94dbdf369d69aa871b2e1b4909ae4718089f41d7de50396ee rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.s390x.rpm 81af584c5f98cbff30e7733f802c0711cdfb921b4fc268dc21e6e002f4c9a292 rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4 ALSA-2025:4491 Copyright 2025 AlmaLinux OS 0 1 Moderate

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default python3-lib389-2.5.2-9.el9_5.noarch.rpm 19122786eab2f4bca09f45e362f1a09a08f2449a984d02e9a70607691dd520c6 389-ds-base-2.5.2-9.el9_5.s390x.rpm 552e294e1881fd6fecfc0842b89634e4db2103c1cba9893ca07cc075d112a0ac 389-ds-base-snmp-2.5.2-9.el9_5.s390x.rpm 584e6fd6b418bf51f240ca2e1b1d0fe62ebadb38d8eeff6d6c962615194879bf 389-ds-base-libs-2.5.2-9.el9_5.s390x.rpm efb41bebf1f1582fb0a92b5dd6c89c80e05e2c1af5f57ade734630ad8755ff18 ALSA-2025:4669 Copyright 2025 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default osbuild-composer-118.2-1.el9_5.alma.1.s390x.rpm 2f24325cee471b9a417a98d5470cc8f7fa30cf940c1d149d7d5e8913fd08c494 osbuild-composer-core-118.2-1.el9_5.alma.1.s390x.rpm a0220e1f7a98a9f09cbb4dd2d1399cc74104548c887c1d611d80c9174c01c510 osbuild-composer-worker-118.2-1.el9_5.alma.1.s390x.rpm ee673c3d365bce22bdfa4b6d96b6a21a9b2f551f43b219e6cc02d55796c649aa ALSA-2025:4787 Copyright 2025 AlmaLinux OS 0 1 Moderate

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_5_default emacs-common-27.2-11.el9_5.2.s390x.rpm 57abcd8a8d1e3480f88af6e6bbd8ecfa8e24081089d22b8f97aa871e3ad81723 emacs-lucid-27.2-11.el9_5.2.s390x.rpm 65d2823a42b488fe27b0edbfd5c89a38d8935eb174bb355720a5bf896d68642f emacs-27.2-11.el9_5.2.s390x.rpm a2c93138dfc8fc4dc61b3896ce031146be2a7d32c3a2e7a43af202e889f5f5ef emacs-filesystem-27.2-11.el9_5.2.noarch.rpm c66aec7a35f086f4f8935f52262d21e1479526dc760c4bef3eaff0476b4ea81a emacs-nox-27.2-11.el9_5.2.s390x.rpm e7ef24d327cd15df48468cd058bfb9236ec458ec106594d17b2ada7402e29ce7 ALSA-2025:6977 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python-unversioned-command-3.9.21-2.el9.noarch.rpm 16f608eb291f8dad2090c7c90b4e9aaaac867afdf3aac0b96e425b4be24c9368 python3-tkinter-3.9.21-2.el9.s390x.rpm 4fa26c158cc3a79e3025f10211eaa942245910151b849b6a9f1518c743822b39 python3-devel-3.9.21-2.el9.s390x.rpm 89bb8725f0d7df69f9b79f38b0173a8a6f738591e2ef77b5b51689d2d55e3782 ALSA-2025:6993 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled (CVE-2025-26465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default openssh-askpass-8.7p1-45.el9.s390x.rpm 04251f93248498b52ad23997c42efc88b7462bf76fc143ec504e75c87c70c4b2 pam_ssh_agent_auth-0.10.4-5.45.el9.s390x.rpm bda81030ed6b55b6ca8cc88243fb477eda9d3a5bd3a2d861d20e77b146425a12 ALSA-2025:7049 Copyright 2025 AlmaLinux OS 0 1 Moderate

python-requests security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * requests: subsequent requests to the same host ignore cert verification (CVE-2024-35195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-requests+security-2.25.1-9.el9.noarch.rpm 39fdf07a55cb1155bff376088e22972d43c1fe701ed60ad845a799f7c9675768 python3-requests+socks-2.25.1-9.el9.noarch.rpm b63ae6449bd0d7789b885759466579381430772b987ded7c7423ddcc830c333b ALSA-2025:7050 Copyright 2025 AlmaLinux OS 0 1 Moderate

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Path traversal vulnerability in rsync (CVE-2024-12087) * rsync: --safe-links option bypass leads to path traversal (CVE-2024-12088) * rsync: Race Condition in rsync Handling Symbolic Links (CVE-2024-12747) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default rsync-daemon-3.2.5-3.el9.noarch.rpm 2fd37e5ea7af580d528c37cf5f398bcb366a912424c5a39416bfd18707881111 rsync-rrsync-3.2.5-3.el9.noarch.rpm cbe2d5773743f194e3fb7118ac001560fb1c18e7bb2f3058c13086b829e9375b ALSA-2025:7067 Copyright 2025 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: overflow when calculating ulog block size (CVE-2025-24528) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default krb5-devel-1.21.1-6.el9.s390x.rpm 916b7958535976690f50232077ce0b8b8961c627f64e7603063d6edd720d3a49 ALSA-2025:7076 Copyright 2025 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS (CVE-2024-12243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gnutls-utils-3.8.3-6.el9.s390x.rpm 3183b336fbc51272251235c517a1f15a93f518757f791e455530963447619f42 gnutls-dane-3.8.3-6.el9.s390x.rpm 454def30075641f4d0e0afcd087c927f445abbacf1c119b8092ba8a5c38a8a4d gnutls-c++-3.8.3-6.el9.s390x.rpm 969840d5eeb1ce22f5285f06816ff4b2f23e495394f1b0adac8eaa3fb755bffc gnutls-devel-3.8.3-6.el9.s390x.rpm ad63b8ca4b85c3e1a421e9cdadfa1dd6525c3f89b211af7cff3c840adeeabcb0 ALSA-2025:7077 Copyright 2025 AlmaLinux OS 0 1 Moderate

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libtasn1-devel-4.16.0-9.el9.s390x.rpm 231f8bce32557c76f057a60d9896dbd479d6b3b78d6b65f06e46d17127a202d4 libtasn1-tools-4.16.0-9.el9.s390x.rpm 741ade8a4fe72e840aa4a736037230db7fdc8ca9cef71960f54ec3b54af17e06 ALSA-2025:7094 Copyright 2025 AlmaLinux OS 0 1 Moderate

aardvark-dns security update

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`. Security Fix(es): * containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service (CVE-2024-8418) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default aardvark-dns-1.14.0-1.el9.s390x.rpm d245444a7d9b98d46ec647a764b738c0c25a2ff4c6df0ca82dddc9ec260561b8 ALSA-2025:7107 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.12-tkinter-3.12.9-1.el9.s390x.rpm 18dd0a9c78ed9831c5377f1c8d8a2989d589d9632cbe752a11c3d492945e5973 python3.12-devel-3.12.9-1.el9.s390x.rpm a144a1ac11cffee90e0c00cf5ea9d6ffaff957cafe985d653b8e84c6b093a9b9 python3.12-libs-3.12.9-1.el9.s390x.rpm eaa2a09b0b5cb3f01f1da5695d9260295cdf6f739e4c48ec2dfb0950233800e5 python3.12-3.12.9-1.el9.s390x.rpm ef9a395ecf8eded4eba9c887bba8470b6672ceeface2a94a09f341befa4257a5 ALSA-2025:7109 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.11-3.11.11-2.el9.s390x.rpm 5fd238c20cafeedb9da56759b7d56fdcc12c930caee0c8e5d0b0fc8034f75c10 python3.11-tkinter-3.11.11-2.el9.s390x.rpm 8808199a3571a81c4c8babc7d91fc917bccae2a4f3ea1408206fcb265da44885 python3.11-devel-3.11.11-2.el9.s390x.rpm c4fdd7715fe7c9fe92b0dcb0a2df8fd48d7983ff0dc8e7eb1e399691114d6bee python3.11-libs-3.11.11-2.el9.s390x.rpm fa1f77e5180de170f4db70d5be598fd9785909fede9de0b6654b639d4c7d7381 ALSA-2025:7118 Copyright 2025 AlmaLinux OS 0 1 Important

osbuild and osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default osbuild-luks2-141-1.el9.alma.1.noarch.rpm 52b194f8df542ea8e88d1c60f5180d5d1e5cc9f935cbfb1d8f366c46f8fe3034 python3-osbuild-141-1.el9.alma.1.noarch.rpm 562af1b3dc20c3bb6f488844c8137259d770f84759567a31b4c8ea44462b0631 osbuild-ostree-141-1.el9.alma.1.noarch.rpm 667e2ba8623ecb6582030899218616f3a903550c995a74c5c0d0fbc7ce17c9c5 osbuild-selinux-141-1.el9.alma.1.noarch.rpm 7f5f30a05337341ac51825f404817af2e475b38e13fb5279a136cfc095fa061e osbuild-depsolve-dnf-141-1.el9.alma.1.noarch.rpm 8b6be495c04b1c26b03b62c5ab2f16357f1d462466d6658744a8a2f999e397b8 osbuild-composer-core-132-1.el9.alma.1.s390x.rpm a9bb9b5e18f9963e73ff08d6e5a11469eeb6ed86ec6397ae4fd880e5ecfb797b osbuild-lvm2-141-1.el9.alma.1.noarch.rpm b115c78ab66aa5e77d4eaf1db651cdaf37cc01a7612e684e4df22b6ca2efda7c osbuild-composer-132-1.el9.alma.1.s390x.rpm be3dcd55327927f399a29d49dbd9eaf586cecc73cf780cff4b9837f06fab1057 osbuild-141-1.el9.alma.1.noarch.rpm c19104b6eb5c3ac9fc89dc773f6b18ef258db17759a95ea3ff466ede30fc5205 osbuild-composer-worker-132-1.el9.alma.1.s390x.rpm e575c10aa47c772bb2821986a0dd0c01238f00c4e9f3bc6f30986e79bfc602df ALSA-2025:7138 Copyright 2025 AlmaLinux OS 0 1 Moderate

protobuf security update

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data. Security Fix(es): * protobuf: message parsing vulnerability in ProtocolBuffers (CVE-2022-1941) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default protobuf-lite-3.14.0-16.el9.s390x.rpm 9f930173cdde22d5bf63d5d7aa53d5c3499e0e38617c71678e14cf16c2177e93 python3-protobuf-3.14.0-16.el9.noarch.rpm c546a57850e4e03a42870602b2c4592d121475806e64ce282d08fb0f8d66cd37 protobuf-3.14.0-16.el9.s390x.rpm d74fe35d578417b32b94560ae854e9fb99fea30e7643e8addfe9f792423b607f ALSA-2025:7147 Copyright 2025 AlmaLinux OS 0 1 Moderate

rpm-ostree security update

The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and rollbacks. Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default rpm-ostree-libs-2025.5-1.el9.s390x.rpm 8530fc55466f88b63c1857b89f7223ecd7a33375624a50a26944be755b8fca14 rpm-ostree-2025.5-1.el9.s390x.rpm a416fbf9992fe72c382a04adb5265f6031a54f456e01f8c396ac2b9b0cdc4005 ALSA-2025:7160 Copyright 2025 AlmaLinux OS 0 1 Moderate

bootc security update

Bootable container system Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default bootc-1.1.6-3.el9_6.s390x.rpm 902757d0418b8c4987e6cbe0c605d531f9e43c82a5633bfeeb88ee96df6af91b system-reinstall-bootc-1.1.6-3.el9_6.s390x.rpm e5ea94a22a117d1551af58077ef57482b3ce2c6ec44209b3b6fab6775dfc481d ALSA-2025:7163 Copyright 2025 AlmaLinux OS 0 1 Moderate

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632) * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601) * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600) * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599) * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598) * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597) * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596) * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default xorg-x11-server-Xephyr-1.20.11-28.el9_6.s390x.rpm 426c838eefb83c5c728a1edfe194464c760c1d74ae16398c1c18036cbe7a83db xorg-x11-server-Xvfb-1.20.11-28.el9_6.s390x.rpm 6faa877baf85c2aa6a85a6f170ae0c1c0e5daa480769f4ee7a23c198ba3c108e xorg-x11-server-Xdmx-1.20.11-28.el9_6.s390x.rpm 83472d809bd911556fd2055d3418a249f3866892dcc6bda6c0f41d5ae3e35a74 xorg-x11-server-Xnest-1.20.11-28.el9_6.s390x.rpm 8c3b763fef14a7a20b11b257e71f87599a215471937a63bdea6aff59d2f6a0bb xorg-x11-server-Xorg-1.20.11-28.el9_6.s390x.rpm ad98230f49115ac9cea46e1208dc21ee355cd049f6d7151e055301c9283c2e1f xorg-x11-server-common-1.20.11-28.el9_6.s390x.rpm efeb61fe215b9bf6ac089c56b34286061fc008d2779d4d7689fed7c0ee3c299f ALSA-2025:7165 Copyright 2025 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632) * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601) * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600) * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599) * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598) * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597) * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596) * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default xorg-x11-server-Xwayland-23.2.7-3.el9_6.s390x.rpm 301a19fc57083686802d74176ec0953ad573ddf5a35a862ee1778c6550db2da9 ALSA-2025:7178 Copyright 2025 AlmaLinux OS 0 1 Moderate

gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update

The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fix(es): * gstreamer: EXIF Metadata Parsing Integer Overflow (CVE-2024-4453) * gstreamer: AV1 Video Parsing Stack-based Buffer Overflow (CVE-2024-0444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gstreamer1-devel-1.22.12-3.el9.s390x.rpm 0888ab1eda4e26368c44656bc5aada385b51e09bd21007031355e89e2c139902 gstreamer1-1.22.12-3.el9.s390x.rpm bee52b5d48c5df8330b47625c67c5b29fbcdcefbca06d1066edcb8903bfb04bb gstreamer1-plugins-bad-free-libs-1.22.12-3.el9.s390x.rpm c081a9abe3e884f459852cf55e556ecb035d3be2d5f9c1ff65048f017bd9783b gstreamer1-plugins-bad-free-1.22.12-3.el9.s390x.rpm c95d2e93f19de0085e6c8478a123c6583611a25b4874b09e1080f08a797fcfd5 gstreamer1-rtsp-server-1.22.12-3.el9.s390x.rpm e73d2c72803bd5a4103170f78b3eb99292e70cf250a5df75dde979155780b129 ALSA-2025:7241 Copyright 2025 AlmaLinux OS 0 1 Moderate

rust-bootupd security update

Bootloader updater Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default bootupd-0.2.27-3.el9.s390x.rpm 4f03bd3466b4bcb04797b33ee5c90a87000e834f95a7f264ae224b967b354a8a ALSA-2025:7242 Copyright 2025 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: OOB-read in qtdemux_parse_container (CVE-2024-47543) * gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk (CVE-2024-47774) * gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk (CVE-2024-47777) * gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk (CVE-2024-47778) * gstreamer1-plugins-good: OOB-read in parse_ds64 (CVE-2024-47775) * gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing (CVE-2024-47596) * gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences (CVE-2024-47599) * gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate (CVE-2024-47834) * gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk (CVE-2024-47776) * gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling (CVE-2024-47544) * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47601) * gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples (CVE-2024-47597) * gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read (CVE-2024-47546) * gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer (CVE-2024-47602) * gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table (CVE-2024-47598) * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47603) * gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read (CVE-2024-47545) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gstreamer1-plugins-good-1.22.12-4.el9.s390x.rpm 483ea0d23fc8068cf646abb3ac44f2ca1dec14c2b4cdb23ed518a7f8cf5af234 gstreamer1-plugins-good-gtk-1.22.12-4.el9.s390x.rpm b9942d62d3ec3501c7ad518366268f2748b94bd297dacd956df0248316efea95 ALSA-2025:7243 Copyright 2025 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer1-plugins-base: ID3v2 parser out-of-bounds read and NULL-pointer dereference (CVE-2024-47542) * gstreamer1-plugins-base: GStreamer has an out-of-bounds write in SSA subtitle parser (CVE-2024-47541) * gstreamer1-plugins-base: GStreamer has an OOB-read in format_channel_mask (CVE-2024-47600) * gstreamer1-plugins-base: NULL-pointer dereference in LRC subtitle parser (CVE-2024-47835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gstreamer1-plugins-base-1.22.12-4.el9.s390x.rpm 1d384ed111f0f6db6768d73902a11b83b1fbfa646fa80cd25ed9c579be4199a1 gstreamer1-plugins-base-tools-1.22.12-4.el9.s390x.rpm 411ad6e69d07db5b54f42dfd82dd24026dab308393c0e2fa5709030f71f3f71d gstreamer1-plugins-base-devel-1.22.12-4.el9.s390x.rpm e262846cd1490a19555853636afbb39e52342edb1907120f151d0f31b2657e88 ALSA-2025:7256 Copyright 2025 AlmaLinux OS 0 1 Moderate

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default git-lfs-3.6.1-1.el9.s390x.rpm 1d281154b5255de4e093323d5e7826459fae3fa867407baac6e81af109493c00 ALSA-2025:7309 Copyright 2025 AlmaLinux OS 0 1 Moderate

openjpeg2 security update

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. Security Fix(es): * openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826) * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default openjpeg2-2.4.0-8.el9.s390x.rpm c14a86cfdfa92dbcb4e31cd74639cef0bc001115df4359220479464d02b7d579 ALSA-2025:7313 Copyright 2025 AlmaLinux OS 0 1 Moderate

keylime-agent-rust security update

Rust agent for Keylime Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default keylime-agent-rust-0.2.2-2.el9.s390x.rpm c18dec78d6aff40057befb680058fd0a9ec1456815449dc93acb33c6b6d3ffca ALSA-2025:7317 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3.12-cryptography-41.0.7-2.el9.s390x.rpm 0f6be44dffb580e5d59917f928278ad30dd2ba4b3c3e5f367af40a045b852d5e ALSA-2025:7387 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551) * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default webkit2gtk3-jsc-devel-2.48.1-1.el9_6.s390x.rpm 10899291474e53cfbe533c579f22c6f4e253005ebbfe16a981ddf5bc7d7efca5 webkit2gtk3-devel-2.48.1-1.el9_6.s390x.rpm 57e704ca044ace9cfe4f384ac1d35394eba55ac4bce50a1fc2fe78121071fe05 webkit2gtk3-2.48.1-1.el9_6.s390x.rpm 641a73d6c9cfaf30073c6902165b73d8fdea293a1ece87c38ba713833cedceb0 webkit2gtk3-jsc-2.48.1-1.el9_6.s390x.rpm f56e4a1a4e16ba8f8539067362cd01cd62d8c86dd6c50a8b81622d29fa453ea8 ALSA-2025:7389 Copyright 2025 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default buildah-1.39.4-1.el9_6.s390x.rpm 4501dcbd13fca075452eb78c310a4fecf921873c6b0302ac36f39365b56ef797 buildah-tests-1.39.4-1.el9_6.s390x.rpm 6bcee7db6b0caf7401d08e646103ee68a4793d8b01fbebe045567a90c0b6d4c2 ALSA-2025:7395 Copyright 2025 AlmaLinux OS 0 1 Moderate

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default 389-ds-base-libs-2.6.1-8.el9_6.s390x.rpm 1b5ecaa1a9f8a046ddb8aa60929c7663028764b5ad39f425b0026e03f52b6694 389-ds-base-2.6.1-8.el9_6.s390x.rpm 2280764b43f4a6b536563a3f3c21b4e735ddeb19d4f64243f0c3b81e362de2f8 389-ds-base-snmp-2.6.1-8.el9_6.s390x.rpm 644312182abf0e5c35e129cbb030111872f8a51827a7a26badd79db8dcbe50c7 python3-lib389-2.6.1-8.el9_6.noarch.rpm 7b151073db62fe5f40927e6dbc9093ddcda9e24f71e58f48433da0a542c08ae9 ALSA-2025:7397 Copyright 2025 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default skopeo-tests-1.18.1-1.el9_6.s390x.rpm 7ffcd032e298db84aa7470c0a3919bddbad289045c414541a88e31e0d59c82a4 skopeo-1.18.1-1.el9_6.s390x.rpm ec34703abdf5a0854aa967d7aa6bf3df47e62b803150c71684af0175e502130f ALSA-2025:7402 Copyright 2025 AlmaLinux OS 0 1 Moderate

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) * nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default nginx-all-modules-1.20.1-22.el9_6.2.alma.1.noarch.rpm 0a62efcf0ca9e93b6e836b834c53a731066049d98841218ddf7762b068764e90 nginx-mod-http-image-filter-1.20.1-22.el9_6.2.alma.1.s390x.rpm 28f485aa4893af4e680b2ce2eb64816cb4efe7d3b91d4c939e64672521d2327b nginx-mod-http-xslt-filter-1.20.1-22.el9_6.2.alma.1.s390x.rpm 3769338c04546782fd62f202f6b48250d0d9fa6bd700706680ec33f013fd9c38 nginx-mod-http-perl-1.20.1-22.el9_6.2.alma.1.s390x.rpm 391fa4c6c4fc681f2fbb77c4e4a609eb6beebcf36af931c3b0044f459be50511 nginx-mod-stream-1.20.1-22.el9_6.2.alma.1.s390x.rpm 47a3cf923d67e3dbdcc2f87f67356c4038941b44d98805bed0865aea9827ba07 nginx-filesystem-1.20.1-22.el9_6.2.alma.1.noarch.rpm 51eab6d828519b14e8288279e73102654443d8d4b2ee143de72af4d4ef4f0613 nginx-mod-mail-1.20.1-22.el9_6.2.alma.1.s390x.rpm 8911cd615279dd2eeb7c70fe87e623b70b390686acac76364d07069c52e51780 nginx-core-1.20.1-22.el9_6.2.alma.1.s390x.rpm a72cdf02fa1afd2e8cbbe38bb296466bfac3db4d369070bf4467a0f7edb1adae nginx-1.20.1-22.el9_6.2.alma.1.s390x.rpm a92d34098840a7c31a770475c3425b38eb2f4af884d85c72dcb1d9af3a5cadbb ALSA-2025:7404 Copyright 2025 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default grafana-10.2.6-11.el9_6.s390x.rpm 5aed21a0fb7622ef9989fc25bf5ca01c6f52648fb50ac1d99d67f75109484d04 grafana-selinux-10.2.6-11.el9_6.s390x.rpm 9b8eff2aa29c6990b717ec9b95b854e8dd36aeff83260eafd9423f3f537f521f ALSA-2025:7409 Copyright 2025 AlmaLinux OS 0 1 Moderate

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: The sideband payload is passed unfiltered to the terminal in git (CVE-2024-52005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default git-daemon-2.47.1-2.el9_6.s390x.rpm 0e329720d0bd77378c3cee3e979b21f142a78c88e9c88474b9fe646fac838357 perl-Git-SVN-2.47.1-2.el9_6.noarch.rpm 1a4df63ad4653c2eac127fbe96b4152d459b75c00b7e203f6ce8e15e91e5b8fd git-gui-2.47.1-2.el9_6.noarch.rpm 2fe23070dd7a7fbf738126307b89c621fbef33816281f9d8adc70b9836ab315d perl-Git-2.47.1-2.el9_6.noarch.rpm 4807317f0fadf25a4801e27e4bb1deb3cfff031549c7a0f54ac8d3708b4ffb48 git-all-2.47.1-2.el9_6.noarch.rpm 523e668620f2c72882421a02de14459b5631b44aa38c911d0863abc9d2b0a0eb git-core-doc-2.47.1-2.el9_6.noarch.rpm 61851157149a3df8cfb435f93616170279ae62bc20805007af3ad2e42dcefdf2 git-2.47.1-2.el9_6.s390x.rpm 62b8d91b32d2ffb07a395d0495c8a4cfec8a780d781347fb2ca2e386d921cd3d gitweb-2.47.1-2.el9_6.noarch.rpm 7027ee29072bae38696a10218b2fc35498ea62a20f825d0bee4caca48f7f7577 gitk-2.47.1-2.el9_6.noarch.rpm 70d038b486086465a9ee329088b541821a2c9599094e0b63b6579ee0e899adc7 git-email-2.47.1-2.el9_6.noarch.rpm 83c4ad8276f7c92f2658704f136230b24c1f2708e67480d6e183cec8da5dbe29 git-credential-libsecret-2.47.1-2.el9_6.s390x.rpm ab6b36fe01ca80e67efeebaf3e9eb1261430510ad9d2c7d0ab3888cecf7778f0 git-svn-2.47.1-2.el9_6.noarch.rpm be421324905b15184565a0e2e2dfeb1e360c60d2d79d965c6ea0197a5e34391c git-core-2.47.1-2.el9_6.s390x.rpm bff314e800b0ef676949f7c4f2af731a9435a0dc9a6ef2a4dbba65d5f8fbaced git-subtree-2.47.1-2.el9_6.s390x.rpm e256d21e732f8ece312c209b351a04779a141d93185f5efbb44865b5f2365d3f git-instaweb-2.47.1-2.el9_6.noarch.rpm f2ac542a892f4ccf878441428540d22c76b2576e83e59d1a70403ef33aa3d56c ALSA-2025:7410 Copyright 2025 AlmaLinux OS 0 1 Important

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libxslt-devel-1.1.34-13.el9_6.s390x.rpm 275a2031a2bad8b196158dd0055a9d4bb914b89f95215098a0f88cd2e31233c8 libxslt-1.1.34-13.el9_6.s390x.rpm e8a73fe0b5fc714020eeb6f2231e04f8f9fe04444089c0213bc0b21290c73db3 ALSA-2025:7417 Copyright 2025 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: dds buffer overflow RCE (CVE-2023-44441) * gimp: PSD buffer overflow RCE (CVE-2023-44442) * gimp: psp integer overflow RCE (CVE-2023-44443) * gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gimp-libs-2.99.8-4.el9_6.s390x.rpm 48edf71696eb4eb4fa0e9ce080045b5c285e8e4c8d39f0c2006d58c6fafc963d gimp-2.99.8-4.el9_6.s390x.rpm a6fb4af2825307f586b99d1399b213bd88ad17d863a5b8cbf9680e63225c6131 ALSA-2025:7418 Copyright 2025 AlmaLinux OS 0 1 Important

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default php-mysqlnd-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 0136639559b4cdde4c6c547db2f47b315913dc102a2f2bc4287df19d3976e2d9 php-gmp-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 0c8007d68adb15bdf95c1876a0f712329217a9327cfbaa06d434d63b6818b167 php-snmp-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 1442355b4e77e4914757ad2f6a8a9f56d74b54112acd96231d33b716a26c2204 php-ffi-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 1a6b81e95f59adb661bdfbab2bb404a8affabb233afc9fef0bd8662b505e88b8 php-opcache-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 23a0f2e6e72b54a31298defaa190b08bdbd05351b5b7a268015cc4ee036ce44d php-dba-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 250ee7dc3fa6f142aebe840f05e0ce880b3b7844b3fe71e684b7faaf5a841c4d php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm 2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552 php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm 2d91df18463f7e5cd5a771f760d2dae331ad870672e519b72976b7b1e308de4b php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm 2e6d69933e316fd47fb94a2c937bbdd1aa9468b2ff581671b71042a7b07a002f php-dbg-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 346c8aca8f00c2699b179cb70b164caea3fb412af87036dc4cd7a161a754c25a php-common-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 39414ae674f78e373acf7bf40716ea5b7608efde07f0f343991b266b4992cc5c php-devel-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 4005f71fdb76f87320f88a757521ced2b6f456f9e9b4c55cbfc3cfaa5c8fa2bc apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-bcmath-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 4e164947adb61f902820c111a69227e17153e0c8f412963048d6de06ae9e1542 php-cli-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 561aa0347e5d41fd06233ef87094053a6e96ba0d2466e4301d514d60d82f0ad1 php-soap-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 567d55fbcba534f3fa47d4ed1e0fb5b380ae0879b1b49e3b66bb26c1b411cc18 php-ldap-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 6ee3bb60a2c5a7efb0848ea9bf7e4db9fb33ba16fb0ee283a94e8ff2481ea273 php-odbc-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 7302a2e4f87f8385234c053f9a4f90e7b1c632992a0b1b57e13a5d925fc37b47 php-pgsql-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 809115bbe6ba5e191806e992954acaf5fbc6d5440b84c878d3cc89947c17d758 php-enchant-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 8a2009b75fbe336a6f8c3fcf9afd3363313c08d6fbee8550af0630eca814ed81 php-process-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 8d1ad1643df462381446a4e058aedd2b54a488b88e98bbf3998975f2e94e62aa php-pdo-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm 8fda7e34dd23ec9ec26e097f7b410bcfd5b45672c507f93415f7a88ab65a277f php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm 9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2 php-gd-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm a2448ae5acd95fc6726edbf5d870f97d5c492dcc998201dedf3cb22c74f5337d php-mbstring-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm b371e3a359314e79782a17eb72f3d4d6c1e531b2cafa5d5b394d31c122d0d0ed php-intl-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm bcc463f91e2209bd4bd6291e61d90db20c92984e324e8fdf63421f5ab84cd408 php-embedded-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm be6b4550b2850c2936f3041a02ece7d38f5f1a1b04b4326e779fe110ba119dc5 php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22 php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.s390x.rpm daddebb79dcabf2b21e7db723448b62a2c6d9941272af21949a665d7b0e9e11e php-xml-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm e1247834ce8c008245401e822987fd9428c40f04df0f3b143c1b13c3a3a09bb2 php-fpm-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm e893a96806d1f3cbe5b20efbf0073c4e56fd31bab7ee0f4d6917559e1f3906c0 php-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm f564b511c46ec733005f36ea567190842dd1ffa78ff0f48c87ad6cb9fa9382af ALSA-2025:7419 Copyright 2025 AlmaLinux OS 0 1 Important

mod_auth_openidc security update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data (CVE-2025-31492) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mod_auth_openidc-2.4.10-1.el9_6.1.s390x.rpm 12ac2120ecbb11d210b5523ccdca63cd5ed6c17702f3eea7a308399a13e70457 ALSA-2025:7422 Copyright 2025 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751) * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952) * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951) * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954) * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953) * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default ghostscript-tools-dvipdf-9.54.0-18.el9_6.s390x.rpm 0c94d93742b401cae1c74a520a5e9a953b0af505831cd4b06219d79f5a7d9636 ghostscript-tools-printing-9.54.0-18.el9_6.s390x.rpm 46500ff0e60e9f63c25e00b17b1717ff6b38b0558ffacc66e3d72c00abcf1846 ghostscript-9.54.0-18.el9_6.s390x.rpm 47144d293ba466cf08c6a50221920e848379edeaf54b642cf1f991e7d7d96b46 ghostscript-doc-9.54.0-18.el9_6.noarch.rpm 5edef33c87504997d21f47ab6ccc07c2f369b7b31ced642fd40b07a2cb2e214f ghostscript-x11-9.54.0-18.el9_6.s390x.rpm aa8401adabcab2651bc1ebe8d9166d128dc0df1e3f1790d9e374a79dc6cb34d5 libgs-9.54.0-18.el9_6.s390x.rpm bdad96a8ff3173d1f5f77fdf09b5359fedf3b7b76e09c653807a30ae839e16b0 ghostscript-tools-fonts-9.54.0-18.el9_6.s390x.rpm fe9e9b0393c0e558f42d73946e06e0161710d79e9287520cd799301572a1b6b4 ALSA-2025:7423 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633) * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005) * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069) * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927) * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-zfcpdump-devel-matched-5.14.0-570.16.1.el9_6.s390x.rpm 18cb929155e2a9bfdc2f19b89b2c74ccea98b073c13377c130a807cf8b46b43d rtla-5.14.0-570.16.1.el9_6.s390x.rpm 24a87fa7c8d72c67881cd1857affd8133029b910c45135f41e27e43d1f6177d0 perf-5.14.0-570.16.1.el9_6.s390x.rpm 3ae2f8d0f0214a2c7d3f0a3110e9b383d2d392eaf1e0b442229ba5537d4bb3bc kernel-devel-matched-5.14.0-570.16.1.el9_6.s390x.rpm 3c516031205127ab5b19a7286e9f792741a68e6ec84f52dc838e53ed6de6903f kernel-doc-5.14.0-570.16.1.el9_6.noarch.rpm 42e734a4d0c6649dc443259e884203c0a4cc715675dcfa4eab65607c13056434 python3-perf-5.14.0-570.16.1.el9_6.s390x.rpm 432b33a2a743a1c8bf1b3bc8dd12eb0b00353598557a257e1ec2c8d09258a6b2 kernel-zfcpdump-devel-5.14.0-570.16.1.el9_6.s390x.rpm 6542a2c8a5b798041233db1f83258c268afb572828cd3fb54ecee5eb8441be9d rv-5.14.0-570.16.1.el9_6.s390x.rpm 7299f1585c5abce669450a9ce7042328525f176b1e1c76949b8a545afaa44a7d kernel-devel-5.14.0-570.16.1.el9_6.s390x.rpm 9c0f4b4f09278bb22febf823a351b3ba5e2bd4882ced48a30022e7fa5de5526b kernel-debug-devel-5.14.0-570.16.1.el9_6.s390x.rpm b815ec50347f9829d5c3165de51b988636b7adad214250ba02e15f253b0c75fb kernel-headers-5.14.0-570.16.1.el9_6.s390x.rpm f344a00a0be3251e850968d6d27919b5d7468ff7b389e41051f4ba31bd3cb129 kernel-debug-devel-matched-5.14.0-570.16.1.el9_6.s390x.rpm f9287b6ed3cbd3a9a58285792387227252f8a296ef601ee11384781fb376d5df ALSA-2025:7425 Copyright 2025 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default osbuild-composer-worker-132.2-1.el9_6.alma.1.s390x.rpm 1b82f9544dfe8257184f5368cec49cfb6978550883080e5a3bdc579b878efc6e osbuild-composer-core-132.2-1.el9_6.alma.1.s390x.rpm 3e1dbd9e0bea2eeb117235a82a9094ed696c958e70b97fa1d69e18512563da64 osbuild-composer-132.2-1.el9_6.alma.1.s390x.rpm a27cec4478b081337f4dc2b8f36c5f456c3a4a79adce55a7c7ef0b7577d131b3 ALSA-2025:7426 Copyright 2025 AlmaLinux OS 0 1 Moderate

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default nodejs-devel-20.19.1-1.module_el9.6.0+163+d268fe53.s390x.rpm 1c9068375f3fb612d6f7631e1fad66cfc9af7d4a3dda32bc5483c804324f4c6c nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm 572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648 nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm 6197cdbcfccc2266f0d5e47e8b739375ef169fae31d46948b204964782b971f1 nodejs-docs-20.19.1-1.module_el9.6.0+163+d268fe53.noarch.rpm 65089a5aa3fab3affc41821e4dce9ae1e28d5b1f0b194fd80e7e08982e057ff0 nodejs-packaging-bundler-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm 8672933a8a01356064a9acc4450fbb8322915abb9f7a09bb4979cc9c3695dfcf nodejs-full-i18n-20.19.1-1.module_el9.6.0+163+d268fe53.s390x.rpm b7e2e337413d32d8d8a4d4e08919225429ebd8f16fbbd18ab9a1ae7e707553b5 npm-10.8.2-1.20.19.1.1.module_el9.6.0+163+d268fe53.s390x.rpm e2876bb2948122b9c56a61ab827987a43f3e84a148195ea97d5ab2068da3eb18 nodejs-20.19.1-1.module_el9.6.0+163+d268fe53.s390x.rpm e9db8c4600922b0f1fac0fbcd779bdde3b7479a6a455fb12f2928f1cd88bcf30 ALSA-2025:7427 Copyright 2025 AlmaLinux OS 0 1 Low

xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. Security Fix(es): * xterm: code execution via OSC 50 input sequences (CVE-2022-45063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default xterm-366-10.el9_6.s390x.rpm 204c7b4bddd095242c99f09f558abd3ed8e35eeadcfe1c66e7e94b8091eff9a1 xterm-resize-366-10.el9_6.s390x.rpm bd7d471c40f819b295a2f437cbabe7325a06ad40f597e8eed50012a691fa6ee7 ALSA-2025:7428 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817) * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087) * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083) * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default firefox-128.10.0-1.el9_6.alma.1.s390x.rpm 5f4d7d4f5cee5ea9fe4ea404e28672d99a7537ab2e2e9747c9f49cf8662bb61c firefox-x11-128.10.0-1.el9_6.alma.1.s390x.rpm bf73e4c87ab1d1e537766026e7d3270ecd2f07cf1ed9ff7f19b672b08f4e391c ALSA-2025:7429 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVE-2025-21605) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default redis-devel-7.2.8-1.module_el9.6.0+168+b8d8e900.s390x.rpm 7bd40a979abf54ea58247a015835d658b8f11be409cb2ea9335613acea9fec24 redis-7.2.8-1.module_el9.6.0+168+b8d8e900.s390x.rpm 85229fd47ee2355f45f52d9f854784b13caf168d33bb60764158c426c33df4fe redis-doc-7.2.8-1.module_el9.6.0+168+b8d8e900.noarch.rpm 85258f80ee5fce874b978c6ba6d16bc5341167a148e6bdb4ea5186e05c6d2623 ALSA-2025:7430 Copyright 2025 AlmaLinux OS 0 1 Important

yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fix(es): * yelp: Arbitrary file read (CVE-2025-3155) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default yelp-libs-40.3-2.el9_6.1.s390x.rpm 06e0b94b920465e79f384ea6a15c0737355547594b0cb1221111393c3446327f yelp-40.3-2.el9_6.1.s390x.rpm 74cbbbc803d467a32e90bf5ef65811dfdf79ad2801314395fdb9204dff25bdd8 ALSA-2025:7431 Copyright 2025 AlmaLinux OS 0 1 Moderate

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default php-pdo-8.0.30-3.el9_6.s390x.rpm 1c0ef7720a26e330f35803b5b8bbef05d5ea3e03a8a6c789a6bcf6bd51a575e5 php-enchant-8.0.30-3.el9_6.s390x.rpm 261f8c0935edb320be8c2d23a973d8589e04f3c8b6d757b6ac9e5b77a805fbed php-xml-8.0.30-3.el9_6.s390x.rpm 306a960f10c072e4e007237025a757c34cac96ebf3841108a7e69850e4c75e7c php-cli-8.0.30-3.el9_6.s390x.rpm 33e60022f2a6915837327827bd3baffef075c8278eb4152fde94b3e4853a5f74 php-mbstring-8.0.30-3.el9_6.s390x.rpm 3ab085f98f5f1236e399e7ddf2000022ce2751167df93f90979e421e1c7ca6ab php-devel-8.0.30-3.el9_6.s390x.rpm 3e27856f685d426667eb2bb466311807811f9ab8f5ead54baa96d7e342eb7010 php-8.0.30-3.el9_6.s390x.rpm 41db6a1f0998bd94ff73b87fb918ea1d646b662345a519ee9711545f351e7044 php-dbg-8.0.30-3.el9_6.s390x.rpm 5e4014d0ef98156d250c066ba5351b5e60d5be135c004b67204e147f227b456b php-odbc-8.0.30-3.el9_6.s390x.rpm 5f77a1cc9e4523e11393a07108d5de38cb98c7cb6bc8980526bef79292a81fd1 php-bcmath-8.0.30-3.el9_6.s390x.rpm 678652ac6873a016213560efcefe8263947e6f9561be614da284517e874c008b php-process-8.0.30-3.el9_6.s390x.rpm b51bbc7bb77bd1ea1f02831446d7580d3488080ba5e2326e5b37680d984dbf67 php-common-8.0.30-3.el9_6.s390x.rpm b56fff4f8f2830509154bdb47fce09a1820e12577efb0351561478ef8b893482 php-intl-8.0.30-3.el9_6.s390x.rpm b63b75d390585f079b0e7cab3bbdf1f80feda4f8be3a1d14cb02e3ef5a3ccd63 php-opcache-8.0.30-3.el9_6.s390x.rpm bd63e51106117de0d828c6398963068b61a78b1631735702ae69feafe54308db php-ldap-8.0.30-3.el9_6.s390x.rpm be77bb45742aef6ea4491a00ce7d886a1a09a95ad130122998bb7e427bf3731a php-ffi-8.0.30-3.el9_6.s390x.rpm bf06abbdc5e369f08d1340c46c2e0c78574cecc955ad5e6bd1550b7dfb05c52a php-soap-8.0.30-3.el9_6.s390x.rpm c1fc00e38b0f0a0c230579e2222d0e9665114428bc69ab696d772e0cc6fc085e php-mysqlnd-8.0.30-3.el9_6.s390x.rpm c20d2168fcf1cec41c90194f7da2dd1dfdeb68eee016d5f2e63ca020eed7249f php-snmp-8.0.30-3.el9_6.s390x.rpm c262daef33a384d1263650214fd9736b24dcafe069f7d71be6dfc3ce93e6e765 php-gd-8.0.30-3.el9_6.s390x.rpm ccf106ef9f2bb14d7714c13d9c033864acd7533a5fd46da0825850f4ad6585f0 php-gmp-8.0.30-3.el9_6.s390x.rpm cdb505d42d289fab3275c6862bd4c68723999791d862111dd7cd90021c108e31 php-dba-8.0.30-3.el9_6.s390x.rpm e56ff3d503ec12163371c6972a3f5d382f52137de6ce7652ad6202830167d7a8 php-fpm-8.0.30-3.el9_6.s390x.rpm eab280c80c95ccf7ca534c3dca248f2b7ce36dc37f50e800b70ff1cabf540aff php-pgsql-8.0.30-3.el9_6.s390x.rpm f9472599bde4257a8c39b06ffa85fa7e74b296d40133446313047104e175adca php-embedded-8.0.30-3.el9_6.s390x.rpm fffafdda85b9ac34958c9cd6ec34a5d92fa606f2b0410be4118445e9661be548 ALSA-2025:7432 Copyright 2025 AlmaLinux OS 0 1 Moderate

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929) * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233) * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234) * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default php-snmp-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 04b708db50c8cb238948cc6d5ae86affe31a0395a66537205a450c7e3013d2b4 php-soap-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 08c08b79db71447d6c3da9bbc828577a5db6c29ec97e82beec35f1017d3db23e php-mysqlnd-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 193dd66f89a5a0beaefa80a683a70e0216adb290f3ba29f7de191813127aa948 php-enchant-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 20168327d65f049238f51e63ac246ba9ed8c5f4f0dab98b737f0b6077c8ca84e php-fpm-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 2f6035d69bbc2081f66bfc0d17cc82f7749c9e047863e8a961e2bede4a58f2c5 php-common-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 3568865110ed749e7de5d990fb7680025686df81ed7543a103e4dcce04630e46 php-cli-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 376366cec63af1df2cd79a05fbe46ee64d85c3e65310a5ae9909a28d214e83bd php-dbg-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 494e6841bfffae77cf0f676028337a5b0c621992323c58aa75c1d5dac5562ef1 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-gmp-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 4f6980225ebc63137ba1f6255089321dd0067eed6b9333f0fb1cb743357d38a6 php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683 php-opcache-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 6492791993f30a60f7f84a681d34782fbf5a6fced4f9a25e7ba8b5cdd66d01de php-mbstring-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 6cf1e498fbe13e7c408e96b606bcb79555c1e23e85ba5f75f54b3b995d45f379 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm 7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a php-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 833087dbb9c0ff410acca4459b3316ed1aabc8c33d0ddcb03a8b3f2b7cda33dd php-devel-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 8a89c099bfa468e7ef369bd52f25a23812229ae2561fd1e59a5240ffc9fab6ed php-embedded-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 99a5d9278bd0a619c28ac165802f2a31a37bef735e38111d98d4ec32ddfbbcfd php-dba-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm 9f385267189910cd2fab7d35feaba24b1098a2924c03ae112560c42e7d409c45 php-xml-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm a2812b5c1612db18a3eae75b7167a6c507f22ac02b4bac2e44384c58aaa5fa31 php-intl-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm a365eed127eeb079e6f6b0d46136f98d40052c901685260aa46576c8a26f7a61 php-gd-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm a6d9584f534589e8e34ee5d25e71c6b27435d443052038213376ce92df373d3a php-ffi-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm ae3651bb4f9491e47ba770bf1b7e70243eb7f4636786f0795d2ad4a9c8cea46b php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c php-odbc-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm b6523e84c3e389a260c253abfa865f5a06eb05ebda8cb919802229c0bd09a527 php-pgsql-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm ba2171c5a6848bf5f2d7ac3b071dcaf24739e817ad1e7f5ecc131368dd7331ff php-pdo-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm cb6e0d5d1f10db09e40f7d3d07b884b474fe735d61907f9b8ea09a94ad8d467c php-bcmath-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm cd6d318d1ad3a07b3ddd065354fdad522a2c5b9a2f6b1e441e0a1cfede3e7e2a php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d php-process-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm eb1d8f528b6f688fc3ee420d1a6b51bfeb49a608c8c4cf04f35734d31da65772 php-ldap-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm fb227ca5c98ca71812d4ae698962818a6f7edf9d33afa5686bd8dcd483078ccb ALSA-2025:7433 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498) * SQLite: integer overflow in SQLite (CVE-2025-3277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default v8-12.4-devel-12.4.254.21-1.22.15.0.1.module_el9.6.0+164+2d89b8ed.s390x.rpm 065fa19c0775665be55d593c08c5cf10467b6cc55d72d34dbd97aeb4de98e12b nodejs-full-i18n-22.15.0-1.module_el9.6.0+164+2d89b8ed.s390x.rpm 15d009b345f8f046ccc3a29b49755fca8bf5c1b756a2751f5e7fdb22d0f1e2c4 nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.s390x.rpm 16a5e40a03c942f1ca5ad22237d873cf9f8999676a11d171678b93adbadcbe67 nodejs-docs-22.15.0-1.module_el9.6.0+164+2d89b8ed.noarch.rpm 1880c5472b26a1ac86d5040c678e1769947bbbf50632e14d88ece1340af55821 nodejs-nodemon-3.0.1-1.module_el9.5.0+139+09296491.noarch.rpm 6e5d4948e23b3a31194068e1ab1968e235602adad4a5d271b6287c52aa829d20 nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 6e5dbe8d2424ac728aebdaf575e4c092cf200795835ba3f46a27b4be8e757a2a nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662 nodejs-libs-22.15.0-1.module_el9.6.0+164+2d89b8ed.s390x.rpm a08ff832159b147881592da6647013f5f801699a9fde6373fa9d97f27c84d482 npm-10.9.2-1.22.15.0.1.module_el9.6.0+164+2d89b8ed.s390x.rpm cc418dd3a4673313941b5e36e40576b80c034af6aa8f0c0dd537e3ddd24859b0 nodejs-devel-22.15.0-1.module_el9.6.0+164+2d89b8ed.s390x.rpm efb13421165b83f09c7799662e95b50f2bf43852ff7d61760e53bcaa06504aa0 ALSA-2025:7435 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523) * thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830) * thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default thunderbird-128.10.0-1.el9_6.alma.1.s390x.rpm fab03adecc992a122d25a4943ca5b6382761847e39f1d8ec61bd8c32eb7dbbcb ALSA-2025:7436 Copyright 2025 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050) * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052) * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053) * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906) * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907) * libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value (CVE-2025-32911) * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913) * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421) * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libsoup-2.72.0-10.el9_6.1.s390x.rpm a71c9c626bb96f1502b5358cb212db3ea6a0ee416fe0e4a25795867b5fcb89a0 libsoup-devel-2.72.0-10.el9_6.1.s390x.rpm f66219d4cdd315b9265f2451ff75c4120514939c869eb441c3be576e37660fc6 ALSA-2025:7437 Copyright 2025 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default avahi-autoipd-0.8-22.el9_6.s390x.rpm 2b8f4c48c0bac58a063b9b7eb39abee37be2d0184bb1517b473ef3b97cf1565e avahi-glib-0.8-22.el9_6.s390x.rpm 37b8139d8a7bb62c8f228bc43919eaaebe859e52ad788eec11b91a8affce57d1 avahi-tools-0.8-22.el9_6.s390x.rpm a247aed3dcbeb609924b15b53c8390151b3265a5f551ae1c376fd0dd5d12fa77 ALSA-2025:7438 Copyright 2025 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVE-2025-21605) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default redis-devel-6.2.18-1.el9_6.s390x.rpm 2cd19bd82599572b0b9a265e05d5cf02a7c7782a37743647165d61dc534db24f redis-doc-6.2.18-1.el9_6.noarch.rpm 93eba1abf4201f69279dacf970ad71d66d6f2b0a01c67c11612070a57824abb7 redis-6.2.18-1.el9_6.s390x.rpm d0feee595cd54500a2984799be626ac63178b848a343c68a72f559b7fbca5243 ALSA-2025:7440 Copyright 2025 AlmaLinux OS 0 1 Low

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: use-after-free in function ins_compl_get_exp in vim/vim (CVE-2023-4752) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default vim-X11-8.2.2637-22.el9_6.s390x.rpm 195797413b5c752659d2dc594473d7cc5355034f99d4ff3e93edb52f1415b2b7 vim-enhanced-8.2.2637-22.el9_6.s390x.rpm 4c4434bb43f74ff5623f2af72e552d588e311497b4d895dbd235c9c06d53e7ee vim-common-8.2.2637-22.el9_6.s390x.rpm 6310f683078083e4b7dcbe1b4ac980f81676340b98a5b585c2229c8adef51f92 ALSA-2025:7444 Copyright 2025 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default expat-devel-2.5.0-5.el9_6.s390x.rpm 17d95f7c57caec3961bd9e41412dc31ce20e82f28550e9bc4f6ab221a5e8100d ALSA-2025:7586 Copyright 2025 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libgs-9.54.0-19.el9_6.s390x.rpm 52b4f744f577f8f134cfa0a38fac0f379738d76a6475bc289775d27604f606f3 ghostscript-doc-9.54.0-19.el9_6.noarch.rpm 551d86602a2f8eb57ad2d61c751a476604b9b177c0b8b70b558e0cc48af02691 ghostscript-tools-fonts-9.54.0-19.el9_6.s390x.rpm 57b3fda46d02e58e9d0e788946851d849fe5d4801473a2d4f1060f574c289064 ghostscript-tools-printing-9.54.0-19.el9_6.s390x.rpm 7328feb5a78fb2f18adac494375487ec9c0771a3f6f582db723acba5a39b8efd ghostscript-tools-dvipdf-9.54.0-19.el9_6.s390x.rpm 98d27b6698aa0644d8b6b17e9090abd3af2fa54210bea1b421e756c77f7f49ff ghostscript-x11-9.54.0-19.el9_6.s390x.rpm e4ebb879cb0f7d088459af7b571cf21378b4365ceeeba9eead69cf60a5d7076b ghostscript-9.54.0-19.el9_6.s390x.rpm eabdf7f16430721fc26112f9159844684e0c9b46aa72182e357e3cd85453a8cc ALSA-2025:7598 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.Security Fix(es): * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default aspnetcore-targeting-pack-8.0-8.0.16-1.el9_6.s390x.rpm 24a25072218d4de5f36239c66d4badb83a653f93797f67b035389a72dda4bfa2 dotnet-runtime-8.0-8.0.16-1.el9_6.s390x.rpm 2c3776172314ab4c98b1477f22eba6303b29b0d671dee8770e82afeb5c975cfc dotnet-sdk-dbg-8.0-8.0.116-1.el9_6.s390x.rpm 37850179d1a3dba805878b6075a76eb6613c2ee5e8fcd137e499383b9b64d350 aspnetcore-runtime-8.0-8.0.16-1.el9_6.s390x.rpm 3b3060a15a20ee501de7bf2e98fb049f850d4d05f1f2531a3b5f1be41781180f aspnetcore-runtime-dbg-8.0-8.0.16-1.el9_6.s390x.rpm 424a8f701bba891343eb4ee138e8a017c4a12da7c0f2d3e5cf6f59f7fc5a33f6 dotnet-apphost-pack-8.0-8.0.16-1.el9_6.s390x.rpm 476cd61df28ae1b7efe7822a6584bbc55ea11617b584602f6b2253fb46f6454d dotnet-runtime-dbg-8.0-8.0.16-1.el9_6.s390x.rpm 4fec65b28a9ed2b3ad4b7206b58383146d36258f61845c8946a416df178c0d5c dotnet-sdk-8.0-8.0.116-1.el9_6.s390x.rpm 570e5bd9c61039d54d30d8e79cccaf6054c05a64c569101dacb270ce1f6c9557 dotnet-templates-8.0-8.0.116-1.el9_6.s390x.rpm 7df260edae3b802801f471857d3ed4869c184b13aaf6fc33fc22b7ba0f63551e dotnet-hostfxr-8.0-8.0.16-1.el9_6.s390x.rpm 893e7a1c6d42a331beeb436be7dd4b416cb210004bd72f5436f2a9a48efb7aab dotnet-targeting-pack-8.0-8.0.16-1.el9_6.s390x.rpm eac4d969277e04c39397b012ee1f5dec6f371f76350b069a35b57e897d4bb503 ALSA-2025:7600 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Security Fix(es): * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default aspnetcore-runtime-9.0-9.0.5-1.el9_6.s390x.rpm 20a5a7a8531cdc3a91287b34b46ee09abb2eeb00abd3465a3c347a2ac992080e netstandard-targeting-pack-2.1-9.0.106-1.el9_6.s390x.rpm 347aa65af2156f8517dc76a729ce1125edceb146b43ef233c792167da1203c91 dotnet-sdk-9.0-9.0.106-1.el9_6.s390x.rpm 400f9063427a8281b80ebc566d5eda5dc6ba1a4a320ad340a6f28ae01087aa2e aspnetcore-targeting-pack-9.0-9.0.5-1.el9_6.s390x.rpm 529baf933343e4d1248366b52cfc0d0b84bf2a5ed3564e1e0c2b655b9e8c1abb dotnet-runtime-9.0-9.0.5-1.el9_6.s390x.rpm 598e9da9ceaf3fb79a5900869c01b3444b7ca438494f59dc2c71933b71a90a5d dotnet-sdk-dbg-9.0-9.0.106-1.el9_6.s390x.rpm 606e65f4a5d539686f34d05e36c808ad8dab743aeb7caeb87f2c23ce810eeb0e dotnet-targeting-pack-9.0-9.0.5-1.el9_6.s390x.rpm 91c1e0f8519df5d164233d3e8707df486c819cc30fa51a47c2a08aa8d24d7f96 dotnet-runtime-dbg-9.0-9.0.5-1.el9_6.s390x.rpm 95face334af04204127ed95531eb19bc52fea4b23e329954a7661f880482af7f dotnet-apphost-pack-9.0-9.0.5-1.el9_6.s390x.rpm 97a875c54dbcd7a75ddac3c2f95a3da5446ac66ea2c61d2174e04c8ad4dcd7c7 dotnet-hostfxr-9.0-9.0.5-1.el9_6.s390x.rpm c3dea2b93200bc26762971f0290815eae14abda8dc9d2f0e048d2e4b2880b935 dotnet-templates-9.0-9.0.106-1.el9_6.s390x.rpm db7b57a79c0b57658ab6ff84397d16ea31f3277ca80287b78f5bda127d920a2c aspnetcore-runtime-dbg-9.0-9.0.5-1.el9_6.s390x.rpm dd11eb9329bd2d9bc3268e9f69af2e6ec0fea347834a650a88335813fd2f241a dotnet-host-9.0.5-1.el9_6.s390x.rpm e6c140b09dae98442ccde201e74d4344df7802443f55aeacf06a61338d69e9c4 ALSA-2025:7672 Copyright 2025 AlmaLinux OS 0 1 Moderate

xdg-utils security update

The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop. Security Fix(es): * xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments (CVE-2022-4055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default xdg-utils-1.1.3-13.el9_6.noarch.rpm 669fca3eba2910b6520236d569ff2529ba37d645ce73502fc68b69d720419342 ALSA-2025:7893 Copyright 2025 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect (CVE-2025-4123) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default grafana-10.2.6-13.el9_6.s390x.rpm b154693acc522efe72503b635d0683df3c15a35553411e27e8769288aad8a33c grafana-selinux-10.2.6-13.el9_6.s390x.rpm b5ea7f5d7584d622c9306b8c2509d1d399e0aac5c7bf24bcbb436f107c0cd32e ALSA-2025:7903 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756) * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966) * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default rtla-5.14.0-570.17.1.el9_6.s390x.rpm 0831a1aa30a3ca8d7da50a4f9c71b03eb16f1c686c6b26301fc714bddec259bd kernel-devel-5.14.0-570.17.1.el9_6.s390x.rpm 0b3fa25fa4c9610056f1eb1f61ec5f568e0880e8cc311478b713da2ed65e55d8 kernel-debug-devel-matched-5.14.0-570.17.1.el9_6.s390x.rpm 109c8966d8c4a1907d2e88ef47a4a4320f3a414299e223416c4de0ea73133ad8 kernel-headers-5.14.0-570.17.1.el9_6.s390x.rpm 129318947baf8a27aa976d9c22bdc5fc5b59024a6ebf1026a166f55cf70b1264 kernel-zfcpdump-devel-5.14.0-570.17.1.el9_6.s390x.rpm 78bcaaf8508fb08ae6cafd63a87773a0af73b0374dab799058b5d76d6c3e6342 rv-5.14.0-570.17.1.el9_6.s390x.rpm 85ba475b7c1c187cec08b07aa29424f1ff22cea66e7a89f225779435cd0c5dfd python3-perf-5.14.0-570.17.1.el9_6.s390x.rpm a3f9d413637203425e9547c05ebf8c906bcd836c07c2b23f7cb53d6191d70416 perf-5.14.0-570.17.1.el9_6.s390x.rpm ad332920cf4141a33eb97bf18f600f3a25af954d3292aa7b5954e6cfcbdbc2ce kernel-doc-5.14.0-570.17.1.el9_6.noarch.rpm d47c606ba32563b48d6a7325fb5932ad9ace8a6d7ead35993a6bfdd857796bca kernel-debug-devel-5.14.0-570.17.1.el9_6.s390x.rpm d4bd2736b03bc055b619d64825a6eb2989c1735188e4c0af340dcdbc992343a2 kernel-devel-matched-5.14.0-570.17.1.el9_6.s390x.rpm dd002b7692516f42461a359df8fafb60904531eceb750fb502333a801436d8f6 kernel-zfcpdump-devel-matched-5.14.0-570.17.1.el9_6.s390x.rpm ed0f0e4324fca481e1277efd1369b4b6947d0da7adf26b03a2186fe99b787834 ALSA-2025:7937 Copyright 2025 AlmaLinux OS 0 1 Important

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default compat-openssl11-1.1.1k-5.el9_6.1.s390x.rpm efcdf26ec4d2feae8f32911c0ec3ba5e718568daf8d4abc52d593bab0c3e098b ALSA-2025:7995 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-31257) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default webkit2gtk3-devel-2.48.2-1.el9_6.s390x.rpm 52539d2d6a26c801436274ade6d804fe2922e63cb1db878d802466fd370aef3c webkit2gtk3-2.48.2-1.el9_6.s390x.rpm a5a5141f864699b7bb8ce9e8dc1d2216642416237f2844fa49737e31be826279 webkit2gtk3-jsc-2.48.2-1.el9_6.s390x.rpm e2d22abd4b457d5fb830e9322959f5429e544a88e104e0b9c2790148e340f742 webkit2gtk3-jsc-devel-2.48.2-1.el9_6.s390x.rpm fb53fda54e06f71ede2559c3e24c56968a35511744fab08341dd3510b4d6d4d7 ALSA-2025:8049 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Out-of-bounds access when resolving Promise objects (CVE-2025-4918) * firefox: Out-of-bounds access when optimizing linear sums (CVE-2025-4919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default firefox-128.10.1-1.el9_6.alma.1.s390x.rpm 5847c50edb5d0058c5c52a3033ff1e0c18ada525f5ce71cee59b5af4a1584f13 firefox-x11-128.10.1-1.el9_6.alma.1.s390x.rpm 9c68349caadb56a0d2ea825f244e92ade1f008b6b7675e78ea49556f2d17fa5a ALSA-2025:8126 Copyright 2025 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content (CVE-2025-2784) * libsoup: Denial of Service attack to websocket server (CVE-2025-32049) * libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process (CVE-2025-32914) * libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup (CVE-2025-4948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libsoup-2.72.0-10.el9_6.2.s390x.rpm 3e238cee2087823070e19f9dfccebe438434845383cff19c7566c4e0a78e812b libsoup-devel-2.72.0-10.el9_6.2.s390x.rpm 8a8221fcfb74d1381ff9983fedda122133a876c87fadca845be2b8504eccfbf3 ALSA-2025:8136 Copyright 2025 AlmaLinux OS 0 1 Important

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado: Tornado Multipart Form-Data Denial of Service (CVE-2025-47287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-tornado-6.4.2-2.el9_6.2.s390x.rpm 0e77697cd12b37286f0ea7e6636122fdf188b1ecc816577ccaa2721b07f527fa ALSA-2025:8142 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-perf-5.14.0-570.18.1.el9_6.s390x.rpm 13ac4f5edcedacfbafb258da5d76cf6b0d247323f3096db042b096ad2a0456b9 kernel-debug-devel-5.14.0-570.18.1.el9_6.s390x.rpm 1e398a143fc3f7e388a92c2640ae2ca333ede5ca12d0533759b0b300d08f8164 kernel-doc-5.14.0-570.18.1.el9_6.noarch.rpm 3a32577bf62ab56a7c94bf41f4df7d431f76ed060e6affb958794157b96f3e13 kernel-devel-matched-5.14.0-570.18.1.el9_6.s390x.rpm 83a1434259dcbc382863c51098870cd29a29a794cf629084ed9bc0c068786ec1 perf-5.14.0-570.18.1.el9_6.s390x.rpm 8a38677271435ec0221d9857809b96cdd5e30afd0a674751fc2a74ef8b56d006 kernel-devel-5.14.0-570.18.1.el9_6.s390x.rpm 932bc6cac2a63f86837dc9e306e1d93d9300a5f3a1ea76ca4f5687cf0a631e0d kernel-debug-devel-matched-5.14.0-570.18.1.el9_6.s390x.rpm 9bdbb6a6712e1ec3ffe43d9ff87c01673496cfa303d328b05541ca8f7074423f kernel-zfcpdump-devel-5.14.0-570.18.1.el9_6.s390x.rpm c1788a04d1e91173ca7b017b78c499fde4a91f67221b7c8518d829f03ca42ec1 rtla-5.14.0-570.18.1.el9_6.s390x.rpm c64de20e5e06935d3f2fba1e05989311d063ab796034d23a9dc7edb4a5d91191 rv-5.14.0-570.18.1.el9_6.s390x.rpm cd212486dd517cdb3c65c06d735844d550db9204ae5c8e20b84c1f30d3260dd7 kernel-zfcpdump-devel-matched-5.14.0-570.18.1.el9_6.s390x.rpm ea6571124c481424e9dbae65636b5d9c00717a74a61c0cbea5db33424b3bcfa1 kernel-headers-5.14.0-570.18.1.el9_6.s390x.rpm eb7a9731b92f60ed287860ba768eb81f905de922844b2dcef42422dbd8748332 ALSA-2025:8183 Copyright 2025 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-3887) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gstreamer1-plugins-bad-free-libs-1.22.12-4.el9_6.s390x.rpm 04489ead060c44f621e7817ceac676341f7b21412934ba86b14d5dc054f6308f gstreamer1-plugins-bad-free-1.22.12-4.el9_6.s390x.rpm ae269819c5b71b828f9cc7a7bc4a7017cc08c3bc25a8e745994fb3b5075b0c83 ALSA-2025:8293 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267) * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264) * firefox: thunderbird: Memory safety bugs (CVE-2025-5268) * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266) * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263) * firefox: thunderbird: Memory safety bug (CVE-2025-5269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default firefox-128.11.0-1.el9_6.alma.1.s390x.rpm 6a0659cbe2f4b9ceaa766cbdc8a38386cf99890c0e3f0ed27292ae4e299d068f firefox-x11-128.11.0-1.el9_6.alma.1.s390x.rpm 7803e9b34190a3a34a15829bdcb5c2874c49aee40088900c27239ea3259d958d ALSA-2025:8333 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default rv-5.14.0-570.19.1.el9_6.s390x.rpm 0b1fcbe79b0a03cbb853dfe48aace958c845336b2f99da7a556e6529edf17827 kernel-devel-5.14.0-570.19.1.el9_6.s390x.rpm 0bd0513b029ef52abffed4ae37cac993d30f819bf5e640f4cd06fa8d1c705304 kernel-debug-devel-5.14.0-570.19.1.el9_6.s390x.rpm 1068eb042d037ee9033cce949997f7d8f89e390653c79bf941e935a36345613e kernel-headers-5.14.0-570.19.1.el9_6.s390x.rpm 1575fd22e981eec47beae9195c97160639fdece89f813474c347e940a41396f7 python3-perf-5.14.0-570.19.1.el9_6.s390x.rpm 3a30330180008a85f93c184d9d0eed4f784f9911c8339b69583f688a83cf217f perf-5.14.0-570.19.1.el9_6.s390x.rpm 48a2fab3ce8002330603b7f6086946084e9323cf2626433349901b5e3554dd32 kernel-zfcpdump-devel-5.14.0-570.19.1.el9_6.s390x.rpm 4d25848205bd0a938214d178a8d99e1740e380f5acb2dda04ae0774dedcd57d1 kernel-zfcpdump-devel-matched-5.14.0-570.19.1.el9_6.s390x.rpm 6748b4152b622a63281a362cb71a110c015c85d607eec5482296c3540f1efb16 rtla-5.14.0-570.19.1.el9_6.s390x.rpm 75289aae2cf1b22820d34eb2171bc83627648f61d330ec332efa80e488d93abc kernel-debug-devel-matched-5.14.0-570.19.1.el9_6.s390x.rpm c15cbb883173834cab10c7a25380834b8c21154d7722a703bafc75dc6f6a343c kernel-devel-matched-5.14.0-570.19.1.el9_6.s390x.rpm c3cdf0160779e8185df78d08a2b55b97924ae32dcba046d159721127a66dd49d kernel-doc-5.14.0-570.19.1.el9_6.noarch.rpm eb801210dcbf4a66ae9de54452ffd3c2a0711c45618a84fbbbb6281f55e8c4a8 ALSA-2025:8337 Copyright 2025 AlmaLinux OS 0 1 Important

varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: request smuggling attacks (CVE-2025-47905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default varnish-6.6.2-6.el9_6.1.s390x.rpm 176864643f14d6803dc1ebcd1e69819e103ef1bb41e56bf3af347deb79284690 varnish-docs-6.6.2-6.el9_6.1.s390x.rpm 9566eb52762171c325a5a95df91dd62c19b3e82be528d756c868401f09f43fc8 ALSA-2025:8467 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default nodejs-libs-22.16.0-1.module_el9.6.0+170+f035de78.s390x.rpm 282827e7e889952e0274227971772008e307f1e70b112be3883cc87ed17a7615 nodejs-22.16.0-1.module_el9.6.0+170+f035de78.s390x.rpm 2aa6a2c6f7840d16e90e33e9754b5c37ca8a411a596b969778caa2b73f61472d nodejs-devel-22.16.0-1.module_el9.6.0+170+f035de78.s390x.rpm 48d9422c61ea09ec08d69961d85c46b7b73aaebb9f199adbea4b53605aec10a2 nodejs-docs-22.16.0-1.module_el9.6.0+170+f035de78.noarch.rpm 6da870e66186d9844f20cf11d6ab90c3c3ec2911c071dfe66bbc9dee34cbf1c3 nodejs-nodemon-3.0.1-1.module_el9.5.0+139+09296491.noarch.rpm 6e5d4948e23b3a31194068e1ab1968e235602adad4a5d271b6287c52aa829d20 nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 6e5dbe8d2424ac728aebdaf575e4c092cf200795835ba3f46a27b4be8e757a2a nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662 nodejs-full-i18n-22.16.0-1.module_el9.6.0+170+f035de78.s390x.rpm e6d5ac0d73bef3fb3afdec26c835b7d2f4df3c551400f9d5de6381ea3405199e v8-12.4-devel-12.4.254.21-1.22.16.0.1.module_el9.6.0+170+f035de78.s390x.rpm f9b49c0fb213af5913fe7fc359679fa9168bc385f8f79b851b83e6fb86ecab3e npm-10.9.2-1.22.16.0.1.module_el9.6.0+170+f035de78.s390x.rpm fdbeea4043d5924bed2a906c392fac596a22b560d4169d02eac6d1d6790cbaeb ALSA-2025:8468 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default nodejs-full-i18n-20.19.2-1.module_el9.6.0+169+c9cb05c2.s390x.rpm 0c5a093ea5de4ca0f122958e4ca12efb2ee41cd3737b83c1807e75763f2d6af3 nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm 572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648 nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm 6197cdbcfccc2266f0d5e47e8b739375ef169fae31d46948b204964782b971f1 nodejs-docs-20.19.2-1.module_el9.6.0+169+c9cb05c2.noarch.rpm 7cb015453402ce4793c1f94bf1a42248f44f3b10d6c18bd510973bc44ef767eb nodejs-packaging-bundler-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm 8672933a8a01356064a9acc4450fbb8322915abb9f7a09bb4979cc9c3695dfcf npm-10.8.2-1.20.19.2.1.module_el9.6.0+169+c9cb05c2.s390x.rpm bde135bfa9b587c83d9e5895b032be4c5514e39d82f072fab689ef27d20f4807 nodejs-devel-20.19.2-1.module_el9.6.0+169+c9cb05c2.s390x.rpm c1fef6e38abf7c3ecf3f73985f43d63e2b9b54ecc44a187b02ddd2c3d85cb9b2 nodejs-20.19.2-1.module_el9.6.0+169+c9cb05c2.s390x.rpm e7affedcc657bead6f44fe78f61b2d63e248c5dde656bd0701cc91fb7130b352 ALSA-2025:8476 Copyright 2025 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default golang-race-1.23.9-1.el9_6.s390x.rpm 1aa2b47f415c0b0ea21766867e9a1e5f184a5372fda569a8dd20cc7a30831fa7 golang-1.23.9-1.el9_6.s390x.rpm 1ed1b5c4ff37f079b460e7c066f3bd7e0f2c87e81814c2253eeedf23dca977f2 golang-misc-1.23.9-1.el9_6.noarch.rpm 3b6b59952001d719c0acf1a55f35b77f8487086be734e1a406d919819a30f69b golang-src-1.23.9-1.el9_6.noarch.rpm 7ba826ac99805837764362226fd1f95ee0512981200ff49b5aef45b71a95b35a go-toolset-1.23.9-1.el9_6.s390x.rpm 95f409fbd4e6912b777bd0b0f5667a61d25f105710f35938078691f395bb6bf2 golang-bin-1.23.9-1.el9_6.s390x.rpm a1aa8b3c6e475b0969629b6bc7fa349f02ef876b46652f92a8ab0b5f75a8c2b6 golang-tests-1.23.9-1.el9_6.noarch.rpm a3c86d76cc668699bf31a417bd4ce5f4f40adbc3f9a3f91cc7aab4d1c5f43c27 golang-docs-1.23.9-1.el9_6.noarch.rpm c45b6b351e35765ff179b93d2feec84907483b37c81cff4d7416944e3407c759 ALSA-2025:8607 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918) * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919) * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267) * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264) * firefox: thunderbird: Memory safety bugs (CVE-2025-5268) * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266) * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263) * firefox: thunderbird: Memory safety bug (CVE-2025-5269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default thunderbird-128.11.0-1.el9_6.alma.1.s390x.rpm 0cac948300ccbfa215b26d1bafec42656e8d641c17e150ed8f11e9d0841213d3 ALSA-2025:8635 Copyright 2025 AlmaLinux OS 0 1 Important

perl-FCGI security update

FastCGI Perl bindings. Security Fix(es): * perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default perl-FCGI-0.79-8.1.el9_6.s390x.rpm 54f74d0ae002196c5d31dff6c5b18c4e8dd21fa393fdc0fa95d95d26ac84fd85 ALSA-2025:8643 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926) * kernel: vlan: enforce underlying device type (CVE-2025-21920) * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997) * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055) * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785) * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default kernel-doc-5.14.0-570.21.1.el9_6.noarch.rpm 17b89c8b590f418da4bbe356d61ba0203bcc3b21eb10757cc894e5c77b5e406e kernel-debug-devel-5.14.0-570.21.1.el9_6.s390x.rpm 1f78fc052bbba146285de4ae9c6c77e330fbc23eb0a10b007c4bc89eca05c7ff rtla-5.14.0-570.21.1.el9_6.s390x.rpm 3645956791aba5b3a3820511d54c8e29c16837afa33cdd846e41abb9e8314a81 python3-perf-5.14.0-570.21.1.el9_6.s390x.rpm 39118de19cf20910016171e19587c5d911e501b6f9436bf6f2b956be3492abbd rv-5.14.0-570.21.1.el9_6.s390x.rpm 3fca71cb43185492f45f5045320b168ec2617f3a0652ae747db6b480f39c5a13 kernel-devel-5.14.0-570.21.1.el9_6.s390x.rpm 672661671935d687fb583f062e3cf585f963589652f6839f7858c7bdc2782dcf kernel-headers-5.14.0-570.21.1.el9_6.s390x.rpm 6dbb980dfcfb30182bc58816aee96bdab32710520815114dc35bc7e18d8e5456 kernel-devel-matched-5.14.0-570.21.1.el9_6.s390x.rpm 6e1736e37462445b40e454893f20acf5dc85233a6b48844a55862ad2a8da34bb kernel-debug-devel-matched-5.14.0-570.21.1.el9_6.s390x.rpm 82a941f013c462e02261b2b89fc308e577e3be94732f537dc40cb2d9eb7145e7 kernel-zfcpdump-devel-matched-5.14.0-570.21.1.el9_6.s390x.rpm bbe6c3500d14b7d33f33f8da7a35d0288e17f30b973ecd0034d0edb15cef26c8 kernel-zfcpdump-devel-5.14.0-570.21.1.el9_6.s390x.rpm cbc0bd53be204ace628e01da3ce7c576b567ce173fcb066ff11009d2ac374afd perf-5.14.0-570.21.1.el9_6.s390x.rpm cf2516f6eac0c624e061fdb1723d47bcd715870c0221b8ad0b36ad43670b2094 ALSA-2025:8655 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default glibc-devel-2.34-168.el9_6.19.s390x.rpm 6b04f1ea31d257e4e8d6b738f83b0c536da9fecd44a61bba7957c26acd8d89f6 glibc-utils-2.34-168.el9_6.19.s390x.rpm 72bf644014128b4b03ca7b84752a147ef27a751d548a2227d7fb81e4101a3ab8 glibc-headers-2.34-168.el9_6.19.s390x.rpm 914f831760484d1f5baf545e96b58cf22c8fca6a9fe63e185e1cf2852b8059b2 glibc-doc-2.34-168.el9_6.19.noarch.rpm cb324066e111baedd743ca2d7e80fbe5b5aa5005be90c6dfa303ed32a995b99e glibc-locale-source-2.34-168.el9_6.19.s390x.rpm cf70634cf83654a480ec7f93ad29547b870d99fc2316c906abe00698886aaac2 ALSA-2025:8682 Copyright 2025 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default grafana-selinux-10.2.6-14.el9_6.s390x.rpm 6a50a79d163e51596d58ee67f303eac97f7f698d22b42dfe1b2a94715a63178e grafana-10.2.6-14.el9_6.s390x.rpm a50261e6a92fb3ef29211d6f76ead74343aebfa5dc24ca45b87c2fa788c8ec83 ALSA-2025:8813 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.Security Fix(es): * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default dotnet-templates-8.0-8.0.117-1.el9_6.s390x.rpm 0fdfba501b50643c4eafc31aef51f33093955049775e7e957653b5efe4bb4cf3 dotnet-runtime-8.0-8.0.17-1.el9_6.s390x.rpm 2c8da5faa38af35fcc09df08f299182802d1ca3d59a4e83c10f8fb5d1d407862 dotnet-apphost-pack-8.0-8.0.17-1.el9_6.s390x.rpm 38012c1d62cc3baeb76e3ca07fdf629efcd76102db61a47c3c471756958ec9bc dotnet-targeting-pack-8.0-8.0.17-1.el9_6.s390x.rpm 40b401525fc3885f4e302fd3cb926aaa3d6b1dcd71bbb0c2e04bc5d26bb8e86d aspnetcore-runtime-dbg-8.0-8.0.17-1.el9_6.s390x.rpm 43403602756864e7f343405d97a333ad862323ded8227d44c276d8a57bcede25 dotnet-sdk-dbg-8.0-8.0.117-1.el9_6.s390x.rpm 534861aae8a629a5123155c017192b3782a662a95668df1a53415ef2bad39798 dotnet-sdk-8.0-8.0.117-1.el9_6.s390x.rpm 5926e0e56b3fea055273fffacddd10ceae9adb22f97f17ebdc137997109b995c dotnet-hostfxr-8.0-8.0.17-1.el9_6.s390x.rpm 74c75d7b847e99bb10c06664edd051764f21098b45f615c0257742065a7e53ea aspnetcore-targeting-pack-8.0-8.0.17-1.el9_6.s390x.rpm 8449bb43e7ecafe0390c1994343677e75c141a14281442d6a81bd910e1fad9f7 aspnetcore-runtime-8.0-8.0.17-1.el9_6.s390x.rpm 8a5a5c97d42c8b2c8a491ee59fb67d836987f3712c18f89aef13c5098e67b05e dotnet-runtime-dbg-8.0-8.0.17-1.el9_6.s390x.rpm ae60bc72207c2c3ddcc1749fc4434994ea2595a481afb1307330b68adffb1980 ALSA-2025:8817 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Security Fix(es): * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default dotnet-targeting-pack-9.0-9.0.6-1.el9_6.s390x.rpm 035d205d467504010549b938108c32cdaa9d1435a2a333386df5df28090259e3 aspnetcore-runtime-dbg-9.0-9.0.6-1.el9_6.s390x.rpm 03cdc0548a2dc876d7883390931e5cfaa7e9fb1d03a609fda3d4f84e781212d5 dotnet-runtime-dbg-9.0-9.0.6-1.el9_6.s390x.rpm 13cc2dac61ba7a474c353eb3c6dfe7eace09d16089154c40464eb0a97375d460 aspnetcore-targeting-pack-9.0-9.0.6-1.el9_6.s390x.rpm 77e2e72b4f2283b0f75e70673e6745eff5d5d655bb06c8bc7bfbf1e92c7ea0b1 aspnetcore-runtime-9.0-9.0.6-1.el9_6.s390x.rpm 7e7003d5938cfcefe8b107837cc2c05f4e143b9d6c0b6e6ff37043d52bea65ad dotnet-runtime-9.0-9.0.6-1.el9_6.s390x.rpm 8d31c41c229cbff4a53631586b937f47d5c69b80ea5c7921752dfc3ddca1de1c dotnet-hostfxr-9.0-9.0.6-1.el9_6.s390x.rpm 8fae9e3efbdc8bf0e6ae5d3e766427692a019fbb426e953e63802d33a3346ee8 dotnet-templates-9.0-9.0.107-1.el9_6.s390x.rpm aa8033a3c8a243ddb8d0806a4d960bb8df08ec018400e87aac10bdc450b96b90 dotnet-sdk-9.0-9.0.107-1.el9_6.s390x.rpm ad705b7e01593e692408ef7af7e4105b9940d5233b725ea1ac2d8f8a24df5977 dotnet-apphost-pack-9.0-9.0.6-1.el9_6.s390x.rpm b8d7e180d8fca45d17d040663b499e0020ed3433829e9b1f9d871eceb1787edf dotnet-host-9.0.6-1.el9_6.s390x.rpm d129f96785325045c19f13d4599c4278fefd8aa44031175486aabc1923ef2576 dotnet-sdk-dbg-9.0-9.0.107-1.el9_6.s390x.rpm eb5114d1484f0c1b2dee46bf4bab50b2a473773b7d0172816d38f60906ff6c54 netstandard-targeting-pack-2.1-9.0.107-1.el9_6.s390x.rpm ff6a0b7a9b8d1f685fb39aabbc82092273b56bc7d7046af220a5fad5afcc3fd4 ALSA-2025:8837 Copyright 2025 AlmaLinux OS 0 1 Important

mod_security security update

ModSecurity is an open source intrusion detection and prevention engine for web applications. Security Fix(es): * modsecurity: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mod_security-2.9.6-2.el9_6.s390x.rpm 150c5a4a6b988c2cc609aafd4e4b91b493b18937cdba8aebbff8bea74719bf98 mod_security-mlogc-2.9.6-2.el9_6.s390x.rpm 3ba148dc0c7d5ee8d5247471de703ccf26c65889e66bb199535e06fc5bea37d4 ALSA-2025:8916 Copyright 2025 AlmaLinux OS 0 1 Moderate

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default grafana-pcp-5.1.1-11.el9_6.s390x.rpm 0beac1f59603a59981764882a9f7e2951f96f00b94192b18e333f354457574d7 ALSA-2025:9080 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961) * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969) * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963) * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979) * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999) * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126) * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default rtla-5.14.0-570.22.1.el9_6.s390x.rpm 0216f18613c25175d4551a74eee59c0662c58ec1086527989280fc881461c595 kernel-debug-devel-5.14.0-570.22.1.el9_6.s390x.rpm 068b8c90553d43cdf14bc59625bdf37bd15ab747e9872a52d4cd62494cc93f43 kernel-zfcpdump-devel-matched-5.14.0-570.22.1.el9_6.s390x.rpm 2bf340e1cc4dbbae34a2e2f547c84a22ad102208c060bca87edb2b87060ffe55 rv-5.14.0-570.22.1.el9_6.s390x.rpm 5b955e03c51cd08575a170f7523e49989b0258e20c591f3afecbcaef6e80710a kernel-zfcpdump-devel-5.14.0-570.22.1.el9_6.s390x.rpm 79ee90563ec601e00213246d400d8bb65765550f34113f49a6d1a298eaedc43f kernel-devel-5.14.0-570.22.1.el9_6.s390x.rpm 841315df402c9099e046a3566249628c3d2c405bdfe3cca08f56199b9dd0470e kernel-doc-5.14.0-570.22.1.el9_6.noarch.rpm c857d45652a136c40ec9e3de73282b60ee49322a50a4c864d0c5071854140ea2 perf-5.14.0-570.22.1.el9_6.s390x.rpm e0dc1879553926fe76d1f8d4d677471203479f1ba56c8ba7fc35295266fcf233 kernel-debug-devel-matched-5.14.0-570.22.1.el9_6.s390x.rpm e9b56754004e950c648004889c9fd1d406ca231fd5d7bcb342accd984a700131 kernel-devel-matched-5.14.0-570.22.1.el9_6.s390x.rpm eb01239695fe9aaebca67d71c703747305d6ed5e54ac540c5e3384aa0ae2a258 python3-perf-5.14.0-570.22.1.el9_6.s390x.rpm ebd2ea6d52e3349b2bf5d9f3f32b50f82e149d3cd8bc52ea708bbfa238564c34 kernel-headers-5.14.0-570.22.1.el9_6.s390x.rpm f936052f7b4e0118e871bc6aedefb71ea3c0a4f1bf3b53861e5e088d96ded20b ALSA-2025:9106 Copyright 2025 AlmaLinux OS 0 1 Moderate

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default git-lfs-3.6.1-2.el9_6.s390x.rpm ad4f86d32773f871d7079f468bfcdfc391737bdba416dfc79f4ad9c2b3eec9fb ALSA-2025:9118 Copyright 2025 AlmaLinux OS 0 1 Important

libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Double-free in libvpx encoder (CVE-2025-5283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libvpx-1.9.0-9.el9_6.s390x.rpm f671eb408ecde9e1a32b0add6ea6d8ee0af610516608ce0101e4bf9dfa4cd75d ALSA-2025:9143 Copyright 2025 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default containernetworking-plugins-1.6.2-2.el9_6.s390x.rpm 9d398e432a8b99e3a0c5d6e1c06efeedcbeb2118611dda9a72dbfa1be2ff4d20 ALSA-2025:9144 Copyright 2025 AlmaLinux OS 0 1 Moderate

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default podman-tests-5.4.0-10.el9_6.s390x.rpm 0a506902b6c59fcaebab5763b87eb05b81ba641dd000ef6c1202d6f75f0049d7 podman-plugins-5.4.0-10.el9_6.s390x.rpm 176b0a64bee041938509113ef16e2586e25bc07ff95b62f839d8081297bbb806 podman-remote-5.4.0-10.el9_6.s390x.rpm 30461fc2725ef2678258961cdecdc8b03fadc7454b03bdbe5933204ecaf1acb3 podman-5.4.0-10.el9_6.s390x.rpm ab1cece635b2d0ca6bc8970f1f03772b3a820eae8d0078224da9a030074d1e65 podman-docker-5.4.0-10.el9_6.noarch.rpm f49149de86ea7bf4625e1a1e5d2360a5b5d0e642c4a1309016f13fcd5afa681c ALSA-2025:9145 Copyright 2025 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default skopeo-tests-1.18.1-2.el9_6.s390x.rpm 1a0710ff0d5ade754debf722499242345a9ec13fe810e97ebff3fbf0ffaa837b skopeo-1.18.1-2.el9_6.s390x.rpm 449dc720dbc55a226d3a167e4f5f58b80465c4b67ff515100a15a546ea9bf87d ALSA-2025:9147 Copyright 2025 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default buildah-1.39.4-2.el9_6.s390x.rpm 3c2c4b32317e1810111c4165fc34ab4c5b75cdf6bcd4082c552434d576319840 buildah-tests-1.39.4-2.el9_6.s390x.rpm 953a33da2053000c3c68b1059c6905ae5265980e98e22de767567e6669ec4d23 ALSA-2025:9150 Copyright 2025 AlmaLinux OS 0 1 Moderate

gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gvisor-tap-vsock-0.8.5-2.el9_6.s390x.rpm 0b308b3657ef88e07325d447070e7f048d1a5174302b05488f09c1976b06617f gvisor-tap-vsock-gvforwarder-0.8.5-2.el9_6.s390x.rpm fb204571f4b629e9b7aa3b26566ff2f2d0bafe02187181ce53b83b70fd9f5ea8 ALSA-2025:9162 Copyright 2025 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: Multiple use after free in XCF parser (CVE-2025-48798) * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797) * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default gimp-2.99.8-4.el9_6.2.s390x.rpm 34c8d8a53d3f57cacd5f3f7cf8cdd6d6e41ae7d2b49f40b4595f0e3d455f430a gimp-libs-2.99.8-4.el9_6.2.s390x.rpm 8e635e093a689b62987e813c4f72375af8edda41aecfe0fc5a8eea4b40becc87 ALSA-2025:9184 Copyright 2025 AlmaLinux OS 0 1 Important

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default ipa-selinux-luna-4.12.2-14.el9_6.1.noarch.rpm 100dbe8a0a540a4ad40115e81f980f755c1bb872e5f933909d9802cc395385f3 python3-ipaclient-4.12.2-14.el9_6.1.noarch.rpm 150b252c993fd3c31195eb0d2df95482145f91fa1cdff136b90da13af14848c0 ipa-server-dns-4.12.2-14.el9_6.1.noarch.rpm 171eea3f9743163621ed2872dee699d7f48acafc9e7252c6ea6e006b01436fb0 ipa-client-4.12.2-14.el9_6.1.s390x.rpm 499b13c5d2be0d986764c819023e89fcfb05fd35b30184de1ceaeb7447ecc831 ipa-client-epn-4.12.2-14.el9_6.1.s390x.rpm 53e014fa30f0fb707e3c21d84374eb2335ec7dbca43120df5a6353fe31dbaba7 ipa-server-encrypted-dns-4.12.2-14.el9_6.1.s390x.rpm 54601582148138e8098c14ab7f0e261b2b395051e8f32d97310a829f864ddae1 python3-ipaserver-4.12.2-14.el9_6.1.noarch.rpm 557390d20bd31922e8996b60b8f4416e86285c3e67dd11804baff24000c7da3d ipa-server-common-4.12.2-14.el9_6.1.noarch.rpm 6450928a28711b7b21d127990d41e58dfbc98657728b6eae2d3f9472fcae4581 ipa-common-4.12.2-14.el9_6.1.noarch.rpm 6a1ef8872e035f7204279bd6c76c40fa9efa58912413abd29cede5b1f63e4f20 ipa-client-common-4.12.2-14.el9_6.1.noarch.rpm 8347d875a59f69572fac6696612b2938947c28b3b8e39c05ab6c9cd9c9f581eb ipa-client-samba-4.12.2-14.el9_6.1.s390x.rpm 9a719957d1aaeb8cefbc2c5013d6f76aee4a791fd380e6bab1d683b77ad04164 ipa-server-trust-ad-4.12.2-14.el9_6.1.s390x.rpm a0939ed7514b33f013e63ff5a3adc6e7aed5f8a8aaa7e99e3107240c89fd2a7a ipa-selinux-4.12.2-14.el9_6.1.noarch.rpm b322b523d6f9d7bf77384ec3b55242ea8dfc60c46339eacc7dabdec80b9209ff ipa-client-encrypted-dns-4.12.2-14.el9_6.1.s390x.rpm b6151dfa791bb7aa7254524700c2e345bda34049d9949894674eb79547cb46dd ipa-server-4.12.2-14.el9_6.1.s390x.rpm cac03c7881919ab4ab67eebca904f65e393ba8fd697c2ec53045598771ccf3cf python3-ipalib-4.12.2-14.el9_6.1.noarch.rpm da414aa448fd3060bacb74b896fe3766bbd2eb95a3a2882819e72b2f5c063863 ipa-selinux-nfast-4.12.2-14.el9_6.1.noarch.rpm e32c59ae04a14234bd05db577bb44f34c1f54a69ed4dc2f962397ea201186a8c ALSA-2025:9302 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883) * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919) * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104) * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150) * kernel: ext4: ignore xattrs past end (CVE-2025-37738) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default python3-perf-5.14.0-570.23.1.el9_6.s390x.rpm 175392a558e27548c41b968be1e3f2b4561cc0047efe6e60904b1402b6787f50 kernel-debug-devel-5.14.0-570.23.1.el9_6.s390x.rpm 2860e7d53fb5ff0095064e6176fb00d98afef1913d83912866b3a677a87a0b8e rv-5.14.0-570.23.1.el9_6.s390x.rpm 28e819dbe4bebc6e832f4088f243c57e3c44d9b3996ee059803e0da2dfeb0e21 kernel-zfcpdump-devel-5.14.0-570.23.1.el9_6.s390x.rpm 2bd9713981d9f7011115d040a5d3c7a10c9eef294ad8fa892fc2dea543477c8b kernel-devel-5.14.0-570.23.1.el9_6.s390x.rpm 46354e6cbb06d23236c113a50ce04b9d2abfd30bd6dbd667611bdcf818dfd855 perf-5.14.0-570.23.1.el9_6.s390x.rpm 53ac92ca367bb81aa29a710de0e6375a4e68171f87f619255d7552491538b4c4 kernel-zfcpdump-devel-matched-5.14.0-570.23.1.el9_6.s390x.rpm 5c15070e132ae9597b9eff8d2c3bc3c3850eac569321474a294757a1f8e543da kernel-debug-devel-matched-5.14.0-570.23.1.el9_6.s390x.rpm 79d7d478531e704b502fd3dfbb27bd26c976b207afe1c5acb2bf4e7f935d69df kernel-headers-5.14.0-570.23.1.el9_6.s390x.rpm 87865478a8b348bacfb32d94df9bf571390ede6b2965f6f594c2bdd59f7c6d8f kernel-doc-5.14.0-570.23.1.el9_6.noarch.rpm b8b67a6418518b8d7a113d2f3199b670fbff4ebb0ed294fcc108bb41edfe1bf0 kernel-devel-matched-5.14.0-570.23.1.el9_6.s390x.rpm cb276a1a235f63979fadcd66b5436468e6edc823519307bd087e7aa51e569c5c rtla-5.14.0-570.23.1.el9_6.s390x.rpm ced88f36a8d81fe1918ec4188a414731fa9491532764567368d26ac53a33d4b9 ALSA-2025:9303 Copyright 2025 AlmaLinux OS 0 1 Important

xorg-x11-server and xorg-x11-server-Xwayland security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default xorg-x11-server-Xvfb-1.20.11-31.el9_6.s390x.rpm 0308ef0a175586043ebd968d4c93f9e940bdd6def30670761502fb8f15aa0d5e xorg-x11-server-Xorg-1.20.11-31.el9_6.s390x.rpm 0e7ea1b43acb02262ce1d08cc28a4593477fb6a9bf99f4b951e436a652dcf7da xorg-x11-server-Xdmx-1.20.11-31.el9_6.s390x.rpm 192ea6e8a115571d7fab205f238a729824168fe6e1ccc8a7b256064bb3d04d31 xorg-x11-server-Xnest-1.20.11-31.el9_6.s390x.rpm 68b6bac964b58eb43573ac253c9838d1f6638d5c0e21c9e1c7cf38fdbe162afc xorg-x11-server-Xwayland-23.2.7-4.el9_6.s390x.rpm a55ad8fb519e26024a543279221ff7d76b7458d968b7813e71b810330601b2c2 xorg-x11-server-common-1.20.11-31.el9_6.s390x.rpm d6f897703adf0c5c77633cee7750321db0edd5e72086b88511964b2165456690 xorg-x11-server-Xephyr-1.20.11-31.el9_6.s390x.rpm d705d35b417b3de1d785919f35636b02799a9a341fd8d4bce5a752423fa48948 ALSA-2025:9306 Copyright 2025 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default tigervnc-selinux-1.14.1-8.el9_6.noarch.rpm 039326d5ebb4a47a17c6fdc8eeeaca51ee86bbc98affca4ffe8417c429d1c96b tigervnc-icons-1.14.1-8.el9_6.noarch.rpm 03f28159cba9a5972244944cb5ed1ba33362e120a279fb44bd86b94babfedb7c tigervnc-server-1.14.1-8.el9_6.s390x.rpm 098ba2b3827e3df81a2518a976d59d648a5d71fea7471def6e0edfa89549f809 tigervnc-1.14.1-8.el9_6.s390x.rpm 386ef660f66615472b7c6993ddde52272a62b768afeb8b2da7f774840f0dacda tigervnc-server-module-1.14.1-8.el9_6.s390x.rpm 79a85fcae2cdcebf5e3cb2e178f9d782dccb627afcfe9f84ddfd9e8508973e70 tigervnc-server-minimal-1.14.1-8.el9_6.s390x.rpm c85f59a32e3d0a7496976b4b00e9488bf2a7d1e393ce62550a04b38b976dd6d5 tigervnc-license-1.14.1-8.el9_6.noarch.rpm f626d756050528a683217a3547fec95fbb422dca31be312a009bf2447f6258e2 ALSA-2025:9327 Copyright 2025 AlmaLinux OS 0 1 Important

libblockdev security update

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Security Fix(es): * libblockdev: LPE from allow_active to root in libblockdev via udisks (CVE-2025-6019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libblockdev-tools-2.28-14.el9_6.s390x.rpm 01722e17584f93358b1c2f5dface8b1d5b6e7ccaa3349b623dc03bca9407c71e libblockdev-dm-2.28-14.el9_6.s390x.rpm 0de35b0c97fe616433d967718a485cafc2304d942c3092e30480a9de736c028a libblockdev-2.28-14.el9_6.s390x.rpm 172c518b16a03f9c9eeaa579719fe59cead5abcaaf7fb1c2d4f836a8d72c7793 libblockdev-lvm-2.28-14.el9_6.s390x.rpm 2609bab5e7b71ea3afb834b9ae976d09727eaa708f2e9eacd9a3fd898d23364b libblockdev-loop-2.28-14.el9_6.s390x.rpm 2a01ad458c6bd6d2a2d3ea5805ff72e44876a160cce6e84c2e8f15c48c3e7f2a libblockdev-part-2.28-14.el9_6.s390x.rpm 2fdadf534876784bfec88dc3a84ed8ba4a3d5418af284320d0ae075301e7497d libblockdev-crypto-2.28-14.el9_6.s390x.rpm 341556b8cb9d0303105a1719c25d69a71a077b2a972398010b3c0de15dca1a37 libblockdev-lvm-dbus-2.28-14.el9_6.s390x.rpm 56bb528e745cc26990f7236488caf1f7190b1f84de6a85cdd073563c63c40cc6 libblockdev-kbd-2.28-14.el9_6.s390x.rpm 68f6c2178754307347ed5913d807d056fb0b57192a697859a95f7a6d2c699868 libblockdev-utils-2.28-14.el9_6.s390x.rpm 82feb7c5a0d43dba6155cac0178561ad3d084df5e9b29e693a4ef94db1295c51 libblockdev-s390-2.28-14.el9_6.s390x.rpm 8c53538dc31bf33b87e9320f4f1dca92ce9eafc10de302f8483503b87897faed libblockdev-mdraid-2.28-14.el9_6.s390x.rpm 925ba979211cb48eeecc67bede2b68a1c1fa87aeb5bb02d8c4ece8d38addd4b8 python3-blockdev-2.28-14.el9_6.s390x.rpm b4758cf5f685a6bf95035459d4b637da684c31aa1acc10c6f28b19c39a786a24 libblockdev-fs-2.28-14.el9_6.s390x.rpm c496567ea47386fd457c9914ba1959aa86cf2b856bfdc4e57f20aeb31e87fbf1 libblockdev-mpath-2.28-14.el9_6.s390x.rpm d2cdf595d362701ee96973d9c69d5e4facab361d7d5b88735e818df29277f089 libblockdev-nvme-2.28-14.el9_6.s390x.rpm de949e1ad14660e01ea0894065bdb6473628457c8bbdd148559f2abb41cd5239 libblockdev-swap-2.28-14.el9_6.s390x.rpm deb5b772cc5a7da973afcb0b6b3a0718e5f22404a433dc06428161475777efc8 libblockdev-plugins-all-2.28-14.el9_6.s390x.rpm e9fa862c86ba28c205739d43345615cff7083b7e5a906c9725935cbcb67ee1d5 libblockdev-nvdimm-2.28-14.el9_6.s390x.rpm f204609e1fe93c7491f460a16556200ac026995229e8f61756adfdf1c36ef905 ALSA-2025:9396 Copyright 2025 AlmaLinux OS 0 1 Important

mod_auth_openidc security update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled (CVE-2025-3891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mod_auth_openidc-2.4.10-1.el9_6.2.s390x.rpm 677edae81c8920fd0380c013566631a2a6ad5ebbc235cd7a946e4b11b078da88 ALSA-2025:9430 Copyright 2025 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions (CVE-2025-3576) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default krb5-devel-1.21.1-8.el9_6.s390x.rpm b7e73b332ac4ff7bb0711616e4cef5d78ae27843964fdedb1dc235e7971caf21 ALSA-2025:9431 Copyright 2025 AlmaLinux OS 0 1 Moderate

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libarchive-devel-3.5.3-5.el9_6.s390x.rpm 20bb61a1f9e835fdb255768d30bce586d47ddd83ea427fe77f53441000b0bf93 bsdtar-3.5.3-5.el9_6.s390x.rpm 611ad0f6f0ba4aa8dd76d8dfcd17c8061b71f19d2f605730419fa111eebdd107 ALSA-2025:9432 Copyright 2025 AlmaLinux OS 0 1 Moderate

iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default iputils-ninfod-20210202-11.el9_6.1.s390x.rpm 8ebae4f89a40691a38e84411113c2e9bbfb0e39179619ee493fa2220f478d6ff ALSA-2025:9434 Copyright 2025 AlmaLinux OS 0 1 Moderate

mod_proxy_cluster security update

The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Security Fix(es): * mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests (CVE-2024-10306) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default mod_proxy_cluster-1.3.22-1.el9_6.1.s390x.rpm c802bb01b45101933a3885172eb401ab397349a23e11bca5261bc9c944b614aa ALSA-2025:9448 Copyright 2025 AlmaLinux OS 0 1 Moderate

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default emacs-nox-27.2-14.el9_6.2.s390x.rpm 0c27d23070a47358f8cdcf3f1fea198293bf99f200c4deed03032f3fcee50679 emacs-27.2-14.el9_6.2.s390x.rpm 18d93fa2732d3f65111f1e966e0575fdfe7498703dc07ffbb5c803ec77d9781b emacs-filesystem-27.2-14.el9_6.2.noarch.rpm 25ec94f5d43ce53631d005dd315e24144fba0abf0c8295b2f6396d279c82ab92 emacs-common-27.2-14.el9_6.2.s390x.rpm 7dd16c625b561454ed141411005e6162a38ddb523b40831d6a92d2caeed98f79 emacs-lucid-27.2-14.el9_6.2.s390x.rpm d2ada47badd89592b3b652fc2742adcb5b172e34d5a9275eaaadae7175e92eb9 ALSA-2025:9462 Copyright 2025 AlmaLinux OS 0 1 Moderate

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default qt5-qtbase-gui-5.15.9-11.el9_6.s390x.rpm 021fe2c7de882d229bc89b38cdabe5289cf1aded852731329ab08ef31f5d3ee6 qt5-qtbase-examples-5.15.9-11.el9_6.s390x.rpm 4c92a9b518262cc21955f32427d3c367a10fb4daf79726a1b597b8b9f833f656 qt5-qtbase-odbc-5.15.9-11.el9_6.s390x.rpm 66f85eb875a002a31c6f0b8ea41c8020974cbb893592aef2f9f7ea376fa6ad3a qt5-qtbase-mysql-5.15.9-11.el9_6.s390x.rpm 6ee1651ae4b3abf55027bbf62a8af80c768d370b55b79ffc0013153592fa0679 qt5-qtbase-5.15.9-11.el9_6.s390x.rpm 78bd612f78799016ba1b609b2126b6aaf81fee446a29c7e23982dc4d0359a656 qt5-qtbase-private-devel-5.15.9-11.el9_6.s390x.rpm 887305a05a232303ac956baf2661fd0bacf327827fec6693ab4d203952d92384 qt5-qtbase-postgresql-5.15.9-11.el9_6.s390x.rpm a8d96ff7e69ad534b50ef93f74c739680bf892a1c15dfec1f11b6dd65e9c50dc qt5-qtbase-devel-5.15.9-11.el9_6.s390x.rpm ee0a83eb8ca3201da0073358cd9bdf07d35d0cdc9abb3c86e567e9122a36dd2f qt5-qtbase-common-5.15.9-11.el9_6.noarch.rpm f1e99bd27dbbe60dc66c8efc0ec30a513fe14a1cb68f79b90f8117ce2672582b ALSA-2025:9526 Copyright 2025 AlmaLinux OS 0 1 Important

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Linux-pam directory Traversal (CVE-2025-6020) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default pam-devel-1.5.1-25.el9_6.s390x.rpm 6c26fe4569692a054a24d9487616e058680ebcd8fbb2d1daa56b86d25d55da42 pam-docs-1.5.1-25.el9_6.s390x.rpm e312d61652c9542c4fd16dcfa71c821fb1f3b7d485e70bc5ee4e06b37d265b02 ALSA-2025:9634 Copyright 2025 AlmaLinux OS 0 1 Moderate

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default osbuild-composer-core-132.2-2.el9_6.alma.1.s390x.rpm 3b05b90bc2707b6e01cb4ecc08b5a8f625996d47b2de7d8b3c8f32b28ef0493a osbuild-composer-132.2-2.el9_6.alma.1.s390x.rpm 869b997fc1df1929ae71a1beb5fdbeb6021801f770746ea20ed65b76536cc8f0 osbuild-composer-worker-132.2-2.el9_6.alma.1.s390x.rpm e44574577428d779ee60bce97ff97381a78f60a58061e518dee16b6d6853a8ec ALSA-2025:9635 Copyright 2025 AlmaLinux OS 0 1 Moderate

weldr-client security update

Command line utility to control osbuild-composer Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default weldr-client-35.12-4.el9_6.s390x.rpm 9902c9cb963540277ed0137d79924fde4c2686564bd34cd0592d7827dac69cc6 ALSA-2025:9877 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Vector register overwrite bug in glibc (CVE-2025-5702) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default glibc-locale-source-2.34-168.el9_6.20.s390x.rpm 0dda6054dcf4db7e11b1f9c8caa5f0c3a076238fc117b676a7a266786453975f glibc-headers-2.34-168.el9_6.20.s390x.rpm 24572c3b45f446cc0baadb9645295953ab52212728cfdf65c5b57a56d02b44f9 glibc-doc-2.34-168.el9_6.20.noarch.rpm 28b3f946a5262828d8eb862e354c724ef9b3d94e4f67b478d0143d1e9602f990 glibc-devel-2.34-168.el9_6.20.s390x.rpm b48f46059c5ba45110050276ac8edb279e67fbee7c73367a4f4484a01100ea27 glibc-utils-2.34-168.el9_6.20.s390x.rpm cb3f805ce4f8dd8ac22a068d594318cb6beffb458cdde689a140fa985850bf27 ALSA-2025:9880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default rv-5.14.0-570.24.1.el9_6.s390x.rpm 321d36b015fed607769814a634b77e5fa424d74d3d639e05c49cb7262b815049 kernel-zfcpdump-devel-5.14.0-570.24.1.el9_6.s390x.rpm 3348582fc90bd28dbc6f1106285e45ac2a512875ff5a5fc2f66a7a36c49883cc rtla-5.14.0-570.24.1.el9_6.s390x.rpm 45cb4395eb5a51cb2e588e26c912502f687ae40e510f2b457f507175928a9fa4 kernel-doc-5.14.0-570.24.1.el9_6.noarch.rpm 5247c5cbc83482e14a931d052280abf572fb4c0d7cd104e4836c7a757549193b kernel-debug-devel-5.14.0-570.24.1.el9_6.s390x.rpm 5bc034a1c80d8f520269c8a341c46330efa32b86fe54f5d9105e0231dd894e68 kernel-zfcpdump-devel-matched-5.14.0-570.24.1.el9_6.s390x.rpm 842fcc04b70b92b7ad709b174c9625cd66c3bc50ead17436bb0cdc0853ab990e kernel-devel-matched-5.14.0-570.24.1.el9_6.s390x.rpm 8bb80de63728a423ecf09d627dd3bdfb836ac2008b863429424423a63e4053f3 kernel-headers-5.14.0-570.24.1.el9_6.s390x.rpm 9a2f004f3972794b6c8cf8183043485af865450fbac016404fe65dd45a1b0e2b perf-5.14.0-570.24.1.el9_6.s390x.rpm be359f91de58fd9d4daa223e3e142248a2870e5ba6813410fd5dca0faf6fa7ca kernel-debug-devel-matched-5.14.0-570.24.1.el9_6.s390x.rpm d4b8e2307ed5928bcda476da2f3de015b98e94742ca96b216a9a4554ee72ffee kernel-devel-5.14.0-570.24.1.el9_6.s390x.rpm fa5b1b2683f3be7510b3f727f346f0227947284683a541d9cdeba373e465ab41 python3-perf-5.14.0-570.24.1.el9_6.s390x.rpm ff5a30480603bf75d735591e193c8e655d2371319b3c7bd04b508d1ff280b7fe ALSA-2025:9978 Copyright 2025 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: LPE via host option (CVE-2025-32462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default sudo-python-plugin-1.9.5p2-10.el9_6.1.s390x.rpm 0e97d85c7653a57607f12ac2aa2009df01e5a7607ab10ac13cbf729fe3c304b5 ALSA-2025:A005 Copyright 2025 AlmaLinux OS 0 1 Important

libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API). Security Fix(es): * libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_6_default libblockdev-part-2.28-13.el9_6.alma.1.s390x.rpm 0f74a5052530a8c8ede4e1dc006e9844a0382ab40eb9a3b42b813fd39f45b40b libblockdev-tools-2.28-13.el9_6.alma.1.s390x.rpm 1017be66e501eb59492f4d1db17d5ef13c0e5749fbd5ac64e1a2ca5e618a5fc1 libblockdev-swap-2.28-13.el9_6.alma.1.s390x.rpm 180f7429ec3b05e6b9aabe9439a0530c30dcf733a47f215efbcc45bf2227331c libblockdev-dm-2.28-13.el9_6.alma.1.s390x.rpm 1b06e62262bdbd80efad1bef90c0951aff19d18cfdd1a9c6a064f15a6df2f694 libblockdev-lvm-dbus-2.28-13.el9_6.alma.1.s390x.rpm 3f7469256fa3cad2b43e63484dd2d04c09d5bd9dec46d9f602b264ebd70a3353 libblockdev-plugins-all-2.28-13.el9_6.alma.1.s390x.rpm 43c4a344c9e50a9784722004d0f8ac1d4a5df4570fc1093045eb18d293e6506d libblockdev-nvme-2.28-13.el9_6.alma.1.s390x.rpm 4f721678de0471c403f53256503effecd8fc889d39bcbba75ffe53d00364f5c4 libblockdev-2.28-13.el9_6.alma.1.s390x.rpm 53af1f19907de7619eba74b9c00a6c674ea994179fea6423c65467c576c4fac9 libblockdev-kbd-2.28-13.el9_6.alma.1.s390x.rpm 5d4563be5bef3fd6f174654c442e2559a5a366048968b1779d6ac449e1735510 libblockdev-utils-2.28-13.el9_6.alma.1.s390x.rpm 61a51947219b5cbf13d6ca8cef9d8a8392b8a36ea8fd2bc4546aa17b2037a8b8 libblockdev-mpath-2.28-13.el9_6.alma.1.s390x.rpm 674072cf9a9d6567a9119560d29ae754c56e6167496eebaeb59d22b4a7764e5e libblockdev-lvm-2.28-13.el9_6.alma.1.s390x.rpm 79432109b06e4798c809085defec33bd88f53c1106e31aa5cc8dadee7a17c7ab python3-blockdev-2.28-13.el9_6.alma.1.s390x.rpm 9421e34ced6db97eda1a66cf84150a251863bf2f267a6e97452804abf81f9664 libblockdev-loop-2.28-13.el9_6.alma.1.s390x.rpm a32194b44dcb885719be45041ad88dab52cc74ec78e0abb415217a27c0119ea2 libblockdev-s390-2.28-13.el9_6.alma.1.s390x.rpm b501e01a12c492e05cb4d1c77d81e9db99cbfa73a94b13b7654d0158f28a9991 libblockdev-nvdimm-2.28-13.el9_6.alma.1.s390x.rpm b89a1af997ef6de18bba3fe2ebfa57ca816eeec27daf93c89a8d7b01e702be63 libblockdev-crypto-2.28-13.el9_6.alma.1.s390x.rpm dfd94bd25f9a42e7354a210fb760612cd0d32fecd7e2d2918ac38faf07fde0c7 libblockdev-fs-2.28-13.el9_6.alma.1.s390x.rpm e80a43372df9cb881c896361031babb94e28157cd55f03471020c312b02dbd79 libblockdev-mdraid-2.28-13.el9_6.alma.1.s390x.rpm fab9551c48b4e9016db7a6227a5d6c4a202c871d58bb3b19416f89b260fdd08e ALSA-2026:0052 Copyright 2026 AlmaLinux OS 0 1 Moderate

gcc-toolset-14-binutils security update

Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default gcc-toolset-14-binutils-gold-2.41-5.el9_7.1.s390x.rpm 1d1b1aa0ecd28a16c31de2b2e335ad59e7b839944f4ff03a0e28b657e149b975 gcc-toolset-14-binutils-devel-2.41-5.el9_7.1.s390x.rpm 6a44449ae328c83417859808646fa5f24f4dfee96ec48d16db1d4f6e310c1389 gcc-toolset-14-binutils-2.41-5.el9_7.1.s390x.rpm 98f9327198862bb5d835134c9c77a0a94f434189c68cde86893bb17f90e69247 ALSA-2026:0126 Copyright 2026 AlmaLinux OS 0 1 Moderate

poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default poppler-21.01.0-23.el9_7.s390x.rpm 2c6a09f83f64d50938aed7054149e806c9a2cd431c271c76084f0dad782d25ea poppler-glib-21.01.0-23.el9_7.s390x.rpm 30cc1f7b7eb60617c4a1fdae0f5e94c966b0c529a224341edf89db3c57cd713b poppler-qt5-21.01.0-23.el9_7.s390x.rpm 346092176cee6650e70b340c6b63df770e65ed6629e43562acf88f4587cd8adf poppler-utils-21.01.0-23.el9_7.s390x.rpm 955952f8774d2cc0e45a332381f78048680521c3e49a0ecbf045873c54c9f66d poppler-cpp-21.01.0-23.el9_7.s390x.rpm d8c2de81251b5e20859949b4f39c5b39567ad044a9b9cd31d4d3a6195e816e1b ALSA-2026:0137 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default mariadb-server-utils-10.5.29-3.el9_7.s390x.rpm 12b92cc8f905ce9f18804a466e76f11ee8bdb3ac3b43c5af95d62680e400c815 mariadb-server-galera-10.5.29-3.el9_7.s390x.rpm 769ef66b913f79c2a19e6513752e9a4f7787db97759c3dc661cd34ebff3be446 mariadb-pam-10.5.29-3.el9_7.s390x.rpm 7d6dffc8812db4eb52eb28f01c8dc6fee2531ae4c4f136f60195bbe45ab7ac15 mariadb-common-10.5.29-3.el9_7.s390x.rpm 8025e60ed4308dec23c8144ee4b3b0ee758de7d2f7ace66cfa7ceb9d72bd700e mariadb-server-10.5.29-3.el9_7.s390x.rpm 8c7798cb06acecc86fa7fad90bc180d1f8cfa7cb4d88cd5c563f273cac964e7e mariadb-gssapi-server-10.5.29-3.el9_7.s390x.rpm b31130744791cef0ec499acad3de1518bc6cc7c3ae640ba91df815d7d6f80638 mariadb-10.5.29-3.el9_7.s390x.rpm bfa5b054b2d4a027d8808b96788d376236e7e253455908057d08db96a883939f mariadb-embedded-10.5.29-3.el9_7.s390x.rpm c1890b0de1c844b8761c7d2fcd8f33c0ab15115f2008e04f12a445db33a193f2 mariadb-oqgraph-engine-10.5.29-3.el9_7.s390x.rpm c51a5742b9aec42920a5ee1dd0dcfd396744d9b7b3c7db5903903b2c7d3d4094 mariadb-backup-10.5.29-3.el9_7.s390x.rpm e97e890722d776dee0da109d8fbd3b0d073dd9f034e263bcda02755821e39ec3 mariadb-errmsg-10.5.29-3.el9_7.s390x.rpm f08be1feb5c3fa2e026674c69b9e067e13f2ec699ba0bc1447d70dbad552e871 ALSA-2026:0238 Copyright 2026 AlmaLinux OS 0 1 Important

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libpng-1.6.37-12.el9_7.1.s390x.rpm 3dc590a0737fa20bc210653f9e6161e28d3cf432f69ab1f0d5d95e6b0c864143 libpng-devel-1.6.37-12.el9_7.1.s390x.rpm 4e2e19716a709f29c96094afbf47aeffc5762aebfe3f34bd3be6dc580defe6d3 ALSA-2026:0247 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb:10.11 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969) * mariadb: MariaDB Server Crash (CVE-2023-52971) * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default mariadb-common-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 1835d2cbc63607ebc1c0fc8ba2a9ebb2bd00a5ec0b8062651fddb911c63ddfde mariadb-errmsg-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 2030c66040cc9f394c0e8e8a7f346a5dc6027e1db815239d1f1e647dea884e9e mariadb-embedded-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 270bdb7967cfcdea53440f7df79599ba76c73d6ff1591b7a604e057bf2eb9e24 mariadb-test-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 2a8497610740767788bfa6cabbd329272a1e670503c280f0b5e6edf219bbef14 mariadb-server-utils-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 30dcb100b186adc6c9524bf93d09e0ddb3bbffeffde0b8ef7393e46b3791b39e mariadb-devel-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 3dca2fa09024dc4003ea478a0347f9027c146cbd8999501c17597b01c6a7f3bc mariadb-oqgraph-engine-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 51fc391f6f20592268ad00b70b262c193d49f5a1af3ffcde9f04e20d7756bced mariadb-server-galera-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 662ab26f43f471a13ff132212770a93d06c39fddfe4c29aad22e6834ae5f6b39 mariadb-pam-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 6a5efccc910a34e180e1c1ae43dbe2feb667df2b62bd09eb98625414ce5917eb mariadb-embedded-devel-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm 6bc54f07d81e668e0cd6204a6fe71242bf430c44282e94db9ab9eea9a686c55a mariadb-gssapi-server-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm a8dd40c445352141287aa9d5a536536057f90d61f403df724e1c99b5ffccc907 galera-26.4.20-1.module_el9.5.0+135+c9657a87.s390x.rpm b1736be01bc8575b37793302af46791604d60ec5c5eb0f7a3320a2d92b27eef4 mariadb-backup-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm bc01c668b7e91e43b4920ae43947faf8aadd3e0e5ca07e332447f4c4d46e8881 mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm c5c2629f2af46f28ca9382dca01a18441130d155c9972bc336508dfb7aa3296a mariadb-server-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm e95ae00d0ffab94135ed138378949470102c4e4381ad2786fea11c09cace4ba7 ALSA-2026:0312 Copyright 2026 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915) * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default cups-lpd-2.3.3op2-34.el9_7.2.s390x.rpm 00f8feb4621f56cfae3567a7bea3758fe3282e1f8195be2c3692861c8ddd0348 cups-devel-2.3.3op2-34.el9_7.2.s390x.rpm 0d20a8ed5cd53def3a075d30b18786da60140da2dfd64cd11b6d693a3543dd62 cups-ipptool-2.3.3op2-34.el9_7.2.s390x.rpm 4cfbf74c7be34511e8369c865c4a031ae6b18c8243dd262c51dc47f34fb9624f cups-filesystem-2.3.3op2-34.el9_7.2.noarch.rpm 73a56973f3c00f25c9e386d2cbfeb2233ef6c766c8ad30acd4e13b7c6533b6db cups-2.3.3op2-34.el9_7.2.s390x.rpm 864eb48dc14709500c359a799b5aa6abd4b181304b0f9d1346d746ef7132c054 cups-client-2.3.3op2-34.el9_7.2.s390x.rpm a7a1c51dff5117f00239456ea48855ed61ff166b338de21cde13450d0596d245 cups-printerapp-2.3.3op2-34.el9_7.2.s390x.rpm c555ca09f6321b978088fcf12794d9a58552329a9a341393c816a5c474b410c4 ALSA-2026:0422 Copyright 2026 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins) (CVE-2025-14523) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libsoup-devel-2.72.0-12.el9_7.3.s390x.rpm a2d89deffadee3a05e7be1064db6d0e862e6b314ece85c840dd5de21a5e9a2c4 libsoup-2.72.0-12.el9_7.3.s390x.rpm fd366e82c74f52cf8d6d519812e70f33acbb2365770258f0b802e12348369870 ALSA-2026:0437 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default buildah-tests-1.41.8-1.el9_7.s390x.rpm 8bc70fa8bfa6cada47dd3a82f120984ff5fc5df452a8c5c51dbfc686fefaea30 buildah-1.41.8-1.el9_7.s390x.rpm 9b9e194be0749dd9a0378bbdc8dc36953e89ec42f47ca3d4f4b8f0f6be2ccd65 ALSA-2026:0445 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806) * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840) * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883) * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-perf-5.14.0-611.20.1.el9_7.s390x.rpm 0e650ac12532d196eeea89a2d10480e67535381ffebae8857a87cb58470b6412 kernel-doc-5.14.0-611.20.1.el9_7.noarch.rpm 19f5e32a89986b4cc831ce2d012ab03be8347212686369b676f8817537ce093f kernel-zfcpdump-devel-5.14.0-611.20.1.el9_7.s390x.rpm 3fb239e4cd46c2aff5ab01ddf437b417dd805a01093fcfc5db2428b356b5b441 kernel-zfcpdump-devel-matched-5.14.0-611.20.1.el9_7.s390x.rpm 44458d42b0f759ebc41f503a5d4bb5c879729ab15661ae9a8d1c8b938fa1e528 rv-5.14.0-611.20.1.el9_7.s390x.rpm 51fa12974fdf9063f5a13fe150584a918ef8d855c9fd30b7786eba51d132a04c perf-5.14.0-611.20.1.el9_7.s390x.rpm 5bd14aa035ad9fbcebaf273ee263a2d36923e6aaa29461784b2984577f0929ea kernel-devel-5.14.0-611.20.1.el9_7.s390x.rpm 891e6af8b7f7639b6585e5f0392ab4b755e9599cde75993cc821fa9dccdec4e3 rtla-5.14.0-611.20.1.el9_7.s390x.rpm ac87c6b9734d95d6cb85baa1e56ed8ab8d4fc4ee59944d6f694fd1f49c6dcc24 kernel-debug-devel-matched-5.14.0-611.20.1.el9_7.s390x.rpm c4746ac8e2a67b931027d2764a050a759fc57058dc65384853bffb64b271a53f kernel-debug-devel-5.14.0-611.20.1.el9_7.s390x.rpm cd00ded33367979fd01eb36fd7430439a7b503324f3aa2a80ba4ca5f1aef8ad7 kernel-headers-5.14.0-611.20.1.el9_7.s390x.rpm d6b2e4eedb75daece07fad6576066b2776cb7260bcfa2f46aaca74eade6d029d kernel-devel-matched-5.14.0-611.20.1.el9_7.s390x.rpm fdb76002940c9e01d1cf1538cb92f285b29a1ac6ca206264e0bfed7ef7b1c92c ALSA-2026:0458 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libpq-13.23-1.el9_7.s390x.rpm 173636baa568681401213cb96157373bbca8aa6f2dabb05fac004332e488154f libpq-devel-13.23-1.el9_7.s390x.rpm 447e719f9c610027b6c5b70ed8956951ce685fb01e14f596942f66f27c71c0d5 ALSA-2026:0470 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default podman-5.6.0-11.el9_7.s390x.rpm 4c73a85936aeb0b8f354d6664037278a4fc883b4495e473a0cc32acb315ec1a1 podman-remote-5.6.0-11.el9_7.s390x.rpm 5920622e8af7a63b9f638a1a81ae9efa2ae1065065e448c7c69153c29992d8f4 podman-plugins-5.6.0-11.el9_7.s390x.rpm 5d8b3af0cf45ebd74dfcb7f94c99e931ac6f08d2d72a18c18fd568cb9638a052 podman-tests-5.6.0-11.el9_7.s390x.rpm 6fc78571e8eb8ce13a894c0e478e6f3baf80c0e804b5b7f171d5eaa1d8d39b7b podman-docker-5.6.0-11.el9_7.noarch.rpm fe388f5da95af53e2b93750e8ad166315cfc9110e62c0b4194048f6e5a01a136 ALSA-2026:0491 Copyright 2026 AlmaLinux OS 0 1 Moderate

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default postgresql-server-13.23-1.el9_7.s390x.rpm 0c016b536a7196f7eb40a8be5317cd73a87ffa401ce2fc65ca9ebe53678ad7ed postgresql-plperl-13.23-1.el9_7.s390x.rpm 0d7f92c20cda2ddae279a05ac3f071069a935da6d98ce1984ffe28619847ddf1 postgresql-plpython3-13.23-1.el9_7.s390x.rpm 40c7118c944687dfd45e8f128459ff352359f25da222fe3cf4ff4a1d3b1cae64 postgresql-upgrade-13.23-1.el9_7.s390x.rpm 4728d00e4de73963baa73d837b4a0dd6a36054ed97c20e1a1fc7fa720c80247d postgresql-pltcl-13.23-1.el9_7.s390x.rpm a27dbb056fe9d4b860403b239ede7021de2541f7e2f19732e5d39578eaf3a5e0 postgresql-contrib-13.23-1.el9_7.s390x.rpm bb377ffafd3b0a61cc4e482b0174edcce4505f045d6cfebdd40955ffdc42508c postgresql-13.23-1.el9_7.s390x.rpm bce877845aa1c84fb675372e98b0d6ba091c64d28cf32981433904915f451e47 postgresql-private-libs-13.23-1.el9_7.s390x.rpm efb386035faa0d8aee75b8a0fd55119a764f5995cacd633ba331cc47dc3e5243 ALSA-2026:0492 Copyright 2026 AlmaLinux OS 0 1 Moderate

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89 postgresql-contrib-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm 136a159d6b2f4fd85b0ae47be789e992a2bd13b96023ecb1b0b8bd6085a1603b postgresql-plpython3-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm 25f9d6834894296066d1fca80af6911dbea32c68e7a64ac9e253619cc13d8d63 postgresql-server-devel-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm 2f9eab42901f16c59e75d52e77be960a40b38e234b0d3df282b72755b4c1e05f postgresql-test-rpm-macros-15.15-2.module_el9.7.0+203+960b74c0.noarch.rpm 330684e3e7b8642ae37e872a613159ce42281f3d78c2649c0e26b56c1c939197 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445 postgresql-docs-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm 483acb9d7f9c6044bee3c4d776bb410920c90666477ad482343c87e43ccb3fc2 postgresql-private-devel-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm 489662f7fddc169fcc32ffb6f0da0477fafc7c8c66e0f5c477cbb762a781ad0a pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm 565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f postgresql-pltcl-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm 7de33f0887204f846f2335016403d0921fb5f7a1329f296e22e423d93a93086e postgresql-static-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm 8f00378fb1f172fb102373d8acc537740bf7d55f5d828dbdfac7da8f69c428d2 postgresql-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm 94d69e80a718fa28b530c4fb2df4ded9f56448ba22291be86f8b1f70428f8e9c postgresql-upgrade-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm a3f67547d7ca4fdd92f3c2fa837c80446146669aeb29e80f5aa0743764be8831 postgresql-upgrade-devel-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm af194c47d033d3f88098636f02304e351cab43c2717ca2fd517cbdeb8a495553 postgresql-server-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm b828d332d6107ef3a76338fb3f66932431a823ce06ff401553cc5895701e6f30 postgresql-test-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm c2640ee3705ec50e9b958146a1022909bea8798bfcd18100dbdef3ddbe319159 postgresql-plperl-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm db20f43fba0d1cc78ade1106a40296aa6801d84afea4173410ffc7d69029420f postgresql-private-libs-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm e6d546b113ddef885949fd03f760da06e17d055b8f39f47269ce7267fc03db3e ALSA-2026:0493 Copyright 2026 AlmaLinux OS 0 1 Moderate

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm 0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906 postgresql-contrib-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm 0bab335fa28612069b4676472e9afbe39486408db19a22482474cd8f5b648d42 postgresql-private-devel-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm 28ce8ff44ba64c091377fe4f8d0b26b8619a5d4509b557f95472e3fa4bebe6e4 postgis-client-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm 3e3c27086d65ab7f69141c813b7afdff70bd3074e3f2e8149c2c95b454a7066a postgis-docs-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm 3ea30af2681c7b274e13cfbc4196f9f05c7bdb2be71edb1a25341dc766227d60 postgresql-private-libs-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm 4437185bbb6bfcc4039994eca94e481a90d064ea79c66c6e727df8bf3067642d postgresql-pltcl-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm 4c8e9867a148a4412ed204a9b807bd4e0a78a70989232230685d17a98ea37aa2 postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm 5350562fab47f66524d7dbda44510b5a76ba5301664983bb3bd6392d6ec91740 postgresql-upgrade-devel-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm 86815bde16238a6762ae3ec6407960660a6005be52aefe10f3103879cac51718 postgis-upgrade-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm 902fb1ceb74b0812bb672b8ed413fda3b5af06ce924da22ca89bc31b3da262ee postgresql-test-rpm-macros-16.11-1.module_el9.7.0+202+21427d8a.noarch.rpm 940c8264e2782e3c00d22deefd96195ab5ac1c317555d15c38115f2ca94b6bda postgis-utils-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm a3245da7fd72a14cb42d07e048ccae6530d0f4233e1cf691eb2a1d7d31d7e26e postgresql-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm a430c03007f86d170c3915c0a6c5e168677e750873f1cb0bb309fc3b75e78af0 postgresql-upgrade-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm a4601e53be6438cd62172dce7289f6ce70f3a8bcf4a712dbb7e46c4bb47fdad7 pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360 postgresql-server-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm aac05c3d7fd2725e6339adb920ab06a80712aea169d6dfce64334e3c72ae51c8 postgresql-static-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm b11a9d5e9510f148d882e2f69841095038d720cabe556a45603e125303e8fba2 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-test-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm b93aae42f3726656aa1b94a913ad2a2d5c426ea73f4dc091ebc21da888b4b1ab postgresql-plperl-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm b9568c59aedbde65ac6edfd76b56d5237026dbf26f7db3213f8306e617127637 postgresql-server-devel-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm cdc07c0a30c4ab79757919f459b295666875cc7f834a0bc86e338c50704212f4 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 postgresql-docs-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm e440c521e802aa52ff804ba5d016d513ae36516467159d9e6f375a339d66831e postgresql-plpython3-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm f93d1ad0b2b36a065b2ca80140abcedf6b403df470e33be13442c2f64d8d398f ALSA-2026:0605 Copyright 2026 AlmaLinux OS 0 1 Moderate

vsftpd security update

The vsftpd packages include a Very Secure File Transfer Protocol (FTP) daemon, which is used to serve files over a network. Security Fix(es): * vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing (CVE-2025-14242) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default vsftpd-3.0.5-6.el9_7.2.s390x.rpm 6de167b6f495ad6e44c257116680c3a18c6f598ca63d8899e4007f6ebea1a1a8 ALSA-2026:0694 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878) * firefox: Use-after-free in the IPC component (CVE-2026-0882) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884) * firefox: Information disclosure in the Networking component (CVE-2026-0883) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877) * firefox: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-0890) * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879) * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880) * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default firefox-140.7.0-1.el9_7.alma.1.s390x.rpm 17c239680542a67170e75e25a3b1f91da699dfe7237fe20fab2aad93e356e260 firefox-x11-140.7.0-1.el9_7.alma.1.s390x.rpm b6d051017e5000e64db2936637daa438734b7e8ff89726228874f6a66bbd70d8 ALSA-2026:0696 Copyright 2026 AlmaLinux OS 0 1 Important

net-snmp security update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. Security Fix(es): * net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd (CVE-2025-68615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default net-snmp-devel-5.9.1-17.el9_7.1.s390x.rpm 04f83934ce72aa296602538d9f35124c6bf1831e066a688fae6160a6058ba53c net-snmp-5.9.1-17.el9_7.1.s390x.rpm 24725f53fec041962e68bb81296c0c16fc1a9da96cf21114e64be9cfe6cde89e net-snmp-libs-5.9.1-17.el9_7.1.s390x.rpm 3dcd35b8c8b7f9ad37d7358b3006ebfe2f4f045cd01f786922ae4dba335d7800 python3-net-snmp-5.9.1-17.el9_7.1.s390x.rpm 63acc73cf9a69248c66313d48bea2b3cff67aebfbaabfc6d99d34c56c369f42f net-snmp-utils-5.9.1-17.el9_7.1.s390x.rpm 70a057f3031f04e36bd78aafd7751c8d2f148f8874a7fdab195feb3504e5c5d6 net-snmp-agent-libs-5.9.1-17.el9_7.1.s390x.rpm 92b26f0899bb907ac1a31e5bb58f6e34ff341e9fa0fb184a2da2bd0b2603d79d net-snmp-perl-5.9.1-17.el9_7.1.s390x.rpm b789510362a31a556743de473baf1613d82d895e8f377f317ebcff5af3a99ad2 ALSA-2026:0719 Copyright 2026 AlmaLinux OS 0 1 Important

gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fix(es): * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default gnupg2-smime-2.3.3-5.el9_7.s390x.rpm c2b485d5a1bc174db7852f78b3d236dc42c6e515c15b41c86fa51e62706e6768 ALSA-2026:0771 Copyright 2026 AlmaLinux OS 0 1 Important

gpsd-minimal security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The AlmaLinux support for this package is limited. See <https://access.AlmaLinux.com/support/policy/gpsd-support> for more details. Security Fix(es): * gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing (CVE-2025-67269) * gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling (CVE-2025-67268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default gpsd-minimal-3.26.1-1.el9_7.1.s390x.rpm 2eecd839576ef40dd99b20427c25c70ffcb3e541707b5cd73e426775be0fe982 gpsd-minimal-clients-3.26.1-1.el9_7.1.s390x.rpm bb2d4099fd12096fb3703c012eb6a09c99d1e7011962c2ab85ace64ea767b034 ALSA-2026:0793 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703) * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933) * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277) * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-perf-5.14.0-611.24.1.el9_7.s390x.rpm 09e42c6e5fed02772987845db9888d342511f87ec468fbfd1e186a198ec1758a perf-5.14.0-611.24.1.el9_7.s390x.rpm 1fd5ab52faa89ada656f1e1078515035d1ce98ed29a6627a683ea76cf3995997 kernel-zfcpdump-devel-matched-5.14.0-611.24.1.el9_7.s390x.rpm 30cd510192c022a6a10174325fba72dcebd87a6012fbece7d4353fc2c2eef025 kernel-doc-5.14.0-611.24.1.el9_7.noarch.rpm 3e3566544ffcc913d62e40889e68ef64a6dbd2d44e1a21c1066a79a117f654a4 kernel-devel-matched-5.14.0-611.24.1.el9_7.s390x.rpm 3f35d54970ac8d753b6a3ebf8ffa9d4b4fb5978ab7022e9ec98cb8eefc90fe47 kernel-zfcpdump-devel-5.14.0-611.24.1.el9_7.s390x.rpm 4ca2e0f88f5edc6471bb52e7c306465d2cae9d9c949354b2f82e5455dc044de9 kernel-devel-5.14.0-611.24.1.el9_7.s390x.rpm 5a052a3c25868dfc79c9b5821f00e8e184b1325376262820023a72da82ce2dc1 kernel-debug-devel-matched-5.14.0-611.24.1.el9_7.s390x.rpm 608142f9673de3c091e0b48cb78e9ec906d9cea7c51d001185b19b64f8bc48f2 kernel-debug-devel-5.14.0-611.24.1.el9_7.s390x.rpm 85742b854399afbf7b46d5e8f4493979525063b8c7dfc030eca6ec72c16f59e1 kernel-headers-5.14.0-611.24.1.el9_7.s390x.rpm a13cc62ba65baa62b2b46cdd079e6b75439e0305c922e66281a008f42edcdcac rtla-5.14.0-611.24.1.el9_7.s390x.rpm c52f6892441f0e19552b4672fa132ea11045ba4017d3145ef3148f283efa65c5 rv-5.14.0-611.24.1.el9_7.s390x.rpm ed4aa5d17394b63b5e4e83188493dd59d70024809a6c1a88a4cd4a639d92fa91 ALSA-2026:0923 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default golang-docs-1.25.5-2.el9_7.noarch.rpm 017697f71acf4d64b058879907fa309ac1e13d27452eba8eac1a23e4d54acb67 golang-1.25.5-2.el9_7.s390x.rpm 0f116af74ff4e77bb94e466d2a9828252dbf4b1cc65b8189e626c8efc9c10741 golang-bin-1.25.5-2.el9_7.s390x.rpm 17eb3d08bb68d1e4b1fbcf2e5d1fa2be4905a4fb0ae088ee647a5afbb018c34d golang-misc-1.25.5-2.el9_7.noarch.rpm 4ac06a4a09988615efa6f169678a08486a491e66c064483e6b2e7455d1ff8925 golang-tests-1.25.5-2.el9_7.noarch.rpm 55d6d6285f19148b604e70e01e03b893ba654ea41093344e35b5ab2642db501c golang-race-1.25.5-2.el9_7.s390x.rpm a4bfa1cfb52e3cec9004def6db38001621bc81fa38b63e961bfe97d5ae1622b9 go-toolset-1.25.5-2.el9_7.s390x.rpm ae4189d82107a7fa95b0978d5892d9bbe92e6eb1c6bd96b033934fdbe0a3a0e5 golang-src-1.25.5-2.el9_7.noarch.rpm bc52f91659c22e783be8b4ce726ce162e9e98ad2e1699408e3ef87111736c50b ALSA-2026:0924 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878) * firefox: Use-after-free in the IPC component (CVE-2026-0882) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884) * firefox: Information disclosure in the Networking component (CVE-2026-0883) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877) * firefox: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-0890) * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879) * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880) * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default thunderbird-140.7.0-1.el9_7.alma.1.s390x.rpm fef31c00c698f8d7270c8a68f3f9d9bfea32fe76da86dad31f050801f7d9be7d ALSA-2026:0927 Copyright 2026 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142862, AlmaLinux-142881, AlmaLinux-142882, AlmaLinux-142883, AlmaLinux-142884, AlmaLinux-142885, AlmaLinux-142886, AlmaLinux-142887, AlmaLinux-142888) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default java-17-openjdk-javadoc-zip-17.0.18.0.8-1.el9.alma.1.s390x.rpm 096f7a42c9333897faa587e1079b8ca960ebba9eb25836fa75a950824bf066aa java-17-openjdk-demo-17.0.18.0.8-1.el9.alma.1.s390x.rpm 1fd114c63944d23badfda235e77a3f58754a1a728a94a3c05f84af8d5363859a java-17-openjdk-devel-17.0.18.0.8-1.el9.alma.1.s390x.rpm 3168a972db501242a91dc421507042676ee47b72ed940b6aef5156b038b844c3 java-17-openjdk-javadoc-17.0.18.0.8-1.el9.alma.1.s390x.rpm 4de822b42c08088d0a46bd45c588513573271e810f9932381b3cdc0e32afde94 java-17-openjdk-headless-17.0.18.0.8-1.el9.alma.1.s390x.rpm d4049cfdacb7cf056b7d64bfde9ad19cd29b9a6ea3ba0bdd7891aec1eba4f2a4 java-17-openjdk-jmods-17.0.18.0.8-1.el9.alma.1.s390x.rpm ed87758ef7367fc94e1b70d69d1fd10e26171a217d167535250f26ae3f3534f9 java-17-openjdk-17.0.18.0.8-1.el9.alma.1.s390x.rpm f212693a226c50cd38d88171a41086f927fa1247b15efdc649f02306557b2002 java-17-openjdk-static-libs-17.0.18.0.8-1.el9.alma.1.s390x.rpm f4047e158608df8e3f8eb5198a36a28ab7f9183be85bfe3ebddcea0a21d601fc java-17-openjdk-src-17.0.18.0.8-1.el9.alma.1.s390x.rpm f820dba301668f262bf0703416211fc92b218169f9b18b724db614bebda86f70 ALSA-2026:0928 Copyright 2026 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default java-21-openjdk-jmods-21.0.10.0.7-1.el9.alma.1.s390x.rpm 12cbc42f31a374f59af416fa43f179e8ea0788535ee5c69b79691f9f9ca4ce85 java-21-openjdk-demo-21.0.10.0.7-1.el9.alma.1.s390x.rpm 4ef7a3bca22d191c211792d36f1822dfa4106375e0bdc8a6712c080ac2ad31ba java-21-openjdk-javadoc-21.0.10.0.7-1.el9.alma.1.s390x.rpm 673f036cf41c416d3384421551fdb825f584ceb6a2a9f7ec527cf1db91b1b1d5 java-21-openjdk-static-libs-21.0.10.0.7-1.el9.alma.1.s390x.rpm af3a88e0ce4a285839e0e0bb8b87994ddb5f21ca6484e42fa10d95a153b73960 java-21-openjdk-21.0.10.0.7-1.el9.alma.1.s390x.rpm b830ed8bb48184bd922b0dd79297cef8bbe5335d2423bccf5a2c1e80c388c8a8 java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el9.alma.1.s390x.rpm befb834bc89bea3819fa93bea42e0fe9996a8feb5e8403a7db450e347d36cda7 java-21-openjdk-devel-21.0.10.0.7-1.el9.alma.1.s390x.rpm c54a7ba696c9f16168bb190fd22d3e99d7e211df06d2752d2d4c1e4cd498ed9e java-21-openjdk-src-21.0.10.0.7-1.el9.alma.1.s390x.rpm d22dfa66f5ac9066fc45f6c5b0ee9bd95c574fd074ddb6a62c42f8a9af3894b3 java-21-openjdk-headless-21.0.10.0.7-1.el9.alma.1.s390x.rpm e6ecc16ce105bf6f7c7c09590fb5b7daed6807aea8079804f4510a7d0a46d1c0 ALSA-2026:0932 Copyright 2026 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142865, AlmaLinux-142866, AlmaLinux-142867, AlmaLinux-142868, AlmaLinux-142869, AlmaLinux-142870, AlmaLinux-142871, AlmaLinux-142872, AlmaLinux-142873, AlmaLinux-142874) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default java-1.8.0-openjdk-headless-1.8.0.482.b08-1.el9.alma.1.s390x.rpm 015fd29a9acd29319ef4b55b801c3d7278ab689eb6752d3074efe4844db8a436 java-1.8.0-openjdk-devel-1.8.0.482.b08-1.el9.alma.1.s390x.rpm 09550a37115eeca68d31ba825ef67b3a17c983461dd9bb8827ca8144c884d157 java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.s390x.rpm 4dcd2ad740f51e391e423576078bd04f1c72792df6a46054e3e0787bcdd61b6d java-1.8.0-openjdk-demo-1.8.0.482.b08-1.el9.alma.1.s390x.rpm 8cae677402e07b118cf99fb08b7cdf1295386616d638006c3885229630498fdf java-1.8.0-openjdk-src-1.8.0.482.b08-1.el9.alma.1.s390x.rpm b67d6ac534e471c037e6ad83b47a0cd3e97923b5ebae1fc5ea9c5bb4f549f993 java-1.8.0-openjdk-javadoc-zip-1.8.0.482.b08-1.el9.alma.1.noarch.rpm d1665a0e2c7d7440ada16a71ba16415ea2ae7ad001de712c7619cb874af50054 java-1.8.0-openjdk-javadoc-1.8.0.482.b08-1.el9.alma.1.noarch.rpm fb04d6b0265ca8491c2b7ba3eef588a6f893083aebbbdbf01172e6e6e12db50f ALSA-2026:0933 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default java-25-openjdk-javadoc-zip-25.0.2.0.10-1.el9.alma.1.s390x.rpm 16e6bdf30005caeeee894edd26d2ef76f8e6a573a8e73f63672094b9a5b6857a java-25-openjdk-crypto-adapter-25.0.2.0.10-1.el9.alma.1.s390x.rpm 2e84bc3d52263b5fca890d697b28ab60139af3acec5513e2094f3e7984724e07 java-25-openjdk-headless-25.0.2.0.10-1.el9.alma.1.s390x.rpm 6023ddded9327485e2bb658bd7554e4bbee3daa9f1c78f4796ba0a0cfb4ff882 java-25-openjdk-javadoc-25.0.2.0.10-1.el9.alma.1.s390x.rpm 82fd73944eb2e9ba20cc7e2e7e9e2a1e8a1e76705aa58aad4e7eb905901b0d33 java-25-openjdk-src-25.0.2.0.10-1.el9.alma.1.s390x.rpm 9d8f9a00bc34270887184a2b16935ab5a08b92279d96331e37ca8a288c01a08a java-25-openjdk-jmods-25.0.2.0.10-1.el9.alma.1.s390x.rpm ab5d6634bac92fb13004332625aed73ab71a205a5a62424cfd4cb4442102b796 java-25-openjdk-static-libs-25.0.2.0.10-1.el9.alma.1.s390x.rpm b4ec2f9e7f5668f19909a3eb86e6a33c3cdbe5bd8ea7b00dc09be7d1a48eb741 java-25-openjdk-25.0.2.0.10-1.el9.alma.1.s390x.rpm d8c13411b09d4833e438018083d0639e811f6ff99b5b106dcc3e45489f57120c java-25-openjdk-demo-25.0.2.0.10-1.el9.alma.1.s390x.rpm dcb6f1e1114d001c2fd40122db197fab0232f81923af74bc21761641cf42d0af java-25-openjdk-devel-25.0.2.0.10-1.el9.alma.1.s390x.rpm de6c1ec8006703736880c9e98f3785c94e7ab79aabd0274d2d492ce880ee83c6 ALSA-2026:0936 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default glib2-doc-2.68.4-18.el9_7.1.noarch.rpm 6c6a2d7e6276ee535a450ca9a72cd6b2b72f16a015e765b04ca6a049a1e9a5b1 glib2-devel-2.68.4-18.el9_7.1.s390x.rpm c8fb65a53c0b73a286575ef9f99c27be5dbade436762656057fefd8ec76d8116 glib2-tests-2.68.4-18.el9_7.1.s390x.rpm e8bf7558f7af071382d5c35af0743b93b00a05dd30ed636964aafb4561b8894a ALSA-2026:10135 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default buildah-tests-1.41.8-3.el9_7.s390x.rpm a379b3e00edb1d0b1bd1c0dbcc2ce363b2952e962795ef952f3c2d39755e5d6c buildah-1.41.8-3.el9_7.s390x.rpm f9f90fb9abc1d34d82864e3fc270f4c97f5c61bfb980f7cdd8bd0dd986d17b0a ALSA-2026:10226 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Information disclosure of data-source passwords via public dashboards (CVE-2026-27877) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default grafana-selinux-10.2.6-20.el9_7.s390x.rpm 0f482eee6baaca460d1f513bb323a2cb10ab601465d968a5aeb79fa9282f7677 grafana-10.2.6-20.el9_7.s390x.rpm 6db3910a15e1e06a42e697971882af9ef7c27a8d6fa0bd02c4ef5c8150c0b858 ALSA-2026:10708 Copyright 2026 AlmaLinux OS 0 1 Important

gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default gdk-pixbuf2-devel-2.42.6-6.el9_7.1.s390x.rpm 132cbadd2d355983913c6ef65766dab551ac0bff3de77e4fab9a3e8ce536dedd gdk-pixbuf2-modules-2.42.6-6.el9_7.1.s390x.rpm 62d5a1fe675a60a2bc392e5f5735eae28d771668e93b27d3664303e94037ed9f gdk-pixbuf2-2.42.6-6.el9_7.1.s390x.rpm ef690270b56df548dd95a4a2a093430881d397eb24ecb87bfc995eef6033fe77 ALSA-2026:10739 Copyright 2026 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default tigervnc-license-1.15.0-6.el9_7.1.noarch.rpm 005a38e72a0b9894aa19c3c034f42447a4073f5f9b3ad8b87841ded9c8de8647 tigervnc-server-minimal-1.15.0-6.el9_7.1.s390x.rpm 0705800e655a88b594eebe36817a0ee6012103909cafb7db3b1201c2f402e857 tigervnc-selinux-1.15.0-6.el9_7.1.noarch.rpm 1fd83a9aeafe3d2b0e2ce13bf6ec681a0ee8cfc847001cc628bd8105138c5560 tigervnc-1.15.0-6.el9_7.1.s390x.rpm 2d186bc988931bca171ee59be1a0a580a2fe72301503930bfaeb7db1c423fa48 tigervnc-icons-1.15.0-6.el9_7.1.noarch.rpm 40aef8541922e405fe3a7aab99933f17fc446a5e1226353e25fe1f359bd5f760 tigervnc-server-module-1.15.0-6.el9_7.1.s390x.rpm 5ab63f3cc292e066c7c032dec56717f8e0f13fc76e2761146e46bf8fd1487b65 tigervnc-server-1.15.0-6.el9_7.1.s390x.rpm c1e7d0e50660f3ec312bbb6472dcaea4ee21984584f15d804868f88149ed78b4 ALSA-2026:10745 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.12-devel-3.12.12-4.el9_7.3.s390x.rpm 0f6c645e158b51a0689859eccc84ff14fef24125b5d82f39ebbeea64da07581a python3.12-tkinter-3.12.12-4.el9_7.3.s390x.rpm 1da3a4a318e70fd220149aa318a5a1e9519249f59bc5b507d0c20edc3a3cfe74 python3.12-libs-3.12.12-4.el9_7.3.s390x.rpm 98919714a2b3ef41ce42169250b0ecea28aaeb79628ca83475bb736c2e2b2e32 python3.12-3.12.12-4.el9_7.3.s390x.rpm 9e8cc2316b30b3a605009166610a3a16a9dbcf935b429f549a46e9c4e1a2a7ac ALSA-2026:10757 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754) * firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752) * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757) * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759) * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747) * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749) * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766) * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761) * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771) * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764) * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765) * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default firefox-x11-140.10.0-1.el9_7.alma.1.s390x.rpm 779d0dee470d509881b95c8391186bf333398d81320bfe256af597f05e531080 firefox-140.10.0-1.el9_7.alma.1.s390x.rpm b859822c866139a2542ffbf2735edc8fbe8908c5cb7034b242deae198c9ffbe8 ALSA-2026:10774 Copyright 2026 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.11-tkinter-3.11.13-5.3.el9_7.s390x.rpm 3809c5787cb37bef156e5caec425de855ae843c2bd1363fc00390b7d194d93ca python3.11-libs-3.11.13-5.3.el9_7.s390x.rpm 4ec24dff8de939db7573c0d06e9d6cf4ba0d4818ccbcda4c92952f15e3ec28a7 python3.11-3.11.13-5.3.el9_7.s390x.rpm b3e0167d66f8cfe429f086845b3c2b3d0a88813e0a8a0cdf43c4d1f8ce8f7e95 python3.11-devel-3.11.13-5.3.el9_7.s390x.rpm def42b2fc199b003398fa134c78b6520b35018ed390cfb2040d42fd42a61905b ALSA-2026:1088 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.12-urllib3-1.26.19-1.el9_7.1.noarch.rpm f2dfa0dfa555bd4576f1b672fa74ac00b98f720279157f2b1757be876c17e56d ALSA-2026:1089 Copyright 2026 AlmaLinux OS 0 1 Important

python3.11-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.11-urllib3-1.26.12-5.el9_7.1.noarch.rpm 6e373f5afd2a4649c04095e7c6eaa3f5e8fc5ff00f5ca28f18cbac8c0431ba56 ALSA-2026:10949 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-tkinter-3.9.25-3.el9_7.3.s390x.rpm 4f77ac1b5eafa80fc786ef6fcbefbc322fc9e01f83d84ab7baf6237d6d1e2f5b python3-devel-3.9.25-3.el9_7.3.s390x.rpm b92f6aa6f77b3a9c5cfb553f0c5d405e4a5dddd7c01bfa42a15c084441883413 python-unversioned-command-3.9.25-3.el9_7.3.noarch.rpm c5541934c80761357f3dfe9a92939bf309fbe7532439c6f05a4499c6d71150a6 ALSA-2026:11360 Copyright 2026 AlmaLinux OS 0 1 Important

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450) * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default LibRaw-0.21.1-2.el9_7.s390x.rpm bdd065fcdec02ce29640fc41558cc75ee226932dc1c06cc8d9a901db010a3bd2 ALSA-2026:11369 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default xorg-x11-server-Xwayland-23.2.7-6.el9_7.s390x.rpm b1c0cec7413f1b18b834394ae6ead17fd99d55db4b0e6b68c33bcc6c847b8d06 ALSA-2026:11388 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default xorg-x11-server-Xephyr-1.20.11-33.el9_7.s390x.rpm 570c1b8b9d3c59b2f2d3748a7df4cf3d3625faacf1ae2aa4ac585c16dd5d45de xorg-x11-server-Xorg-1.20.11-33.el9_7.s390x.rpm 66f79f5ef9e6bf5c6f8985c9576eb8f783416d10dd0010cc7fa356d14a640a7c xorg-x11-server-common-1.20.11-33.el9_7.s390x.rpm 8596762e74b1c6395d3feb5b244ce6aee8462347093ea3043f723906099be11d xorg-x11-server-Xdmx-1.20.11-33.el9_7.s390x.rpm 999fec57d919270c56b8cbc4af121e57e967d51696ad0b4c3be3eee15faacacb xorg-x11-server-Xnest-1.20.11-33.el9_7.s390x.rpm e483a2af7e86fab8bea605ed0cd4636e725a3fc75a08de42f3cde6376e63a6f0 xorg-x11-server-Xvfb-1.20.11-33.el9_7.s390x.rpm f1f7ff2b84786e4d7d23214221d45964f4b26533e6a1f6280d14f7587291668c ALSA-2026:1143 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141) * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349) * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731) * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248) * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258) * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294) * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301) * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-zfcpdump-devel-matched-5.14.0-611.26.1.el9_7.s390x.rpm 1efbe2c2e199e846cb8a22f4d141888e47c5f91b4b76f89d919932f58ae57dfb python3-perf-5.14.0-611.26.1.el9_7.s390x.rpm 30b49176c89c272658f9a9372db7e6be5a86d51115c79404dcb877a84a40b681 kernel-zfcpdump-devel-5.14.0-611.26.1.el9_7.s390x.rpm 4c337b7f17333020988d37a5f481d3f4ca6b0c4fefb6fe8d97d42d201d1ee364 kernel-doc-5.14.0-611.26.1.el9_7.noarch.rpm 51197843401d1693a4f14257ce0b8959c5be5992f2aafac0a299c9ba1f4ec927 kernel-devel-5.14.0-611.26.1.el9_7.s390x.rpm 5fe2108e1210a9140897b34b77eeb4b87252e31a387c6de711d6e27e5cc2e8a2 rtla-5.14.0-611.26.1.el9_7.s390x.rpm 68da28324ce6deab42d932ee5c01853b8897cda57c3c2c08b71936136aae462e perf-5.14.0-611.26.1.el9_7.s390x.rpm 88c20012f0fe023c8a0252a797b6fee657bfe1e14f106b6f8cc12863ab79940b kernel-debug-devel-5.14.0-611.26.1.el9_7.s390x.rpm 89678f73e81776f6b7bc8a8dd3d28ec38d19c5d10921703845f75f3e3d3d899a rv-5.14.0-611.26.1.el9_7.s390x.rpm 9fe209ed8ac3d91c9cee2a8aa837649a81ba564cc3b3aa8f15db7cc55fca0a72 kernel-devel-matched-5.14.0-611.26.1.el9_7.s390x.rpm cc99659e10ec83875572851ca770d537b242a91cc866058447832a308107a136 kernel-debug-devel-matched-5.14.0-611.26.1.el9_7.s390x.rpm d46534d3b30136c82ec4a181bda0be0dab062fed081c3fd12923a6ea11ed98e7 kernel-headers-5.14.0-611.26.1.el9_7.s390x.rpm eb31e8b6f9688d14cd2ee61936b8d1729cfb3517e22d70f64448e3c7fd96ae81 ALSA-2026:11504 Copyright 2026 AlmaLinux OS 0 1 Important

PackageKit security update

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default PackageKit-gtk3-module-1.2.6-2.el9_7.s390x.rpm 5bb0af8909ea078bc36f28ddd8e209fe3f45be04eace63137d513de2c74ed714 PackageKit-glib-1.2.6-2.el9_7.s390x.rpm bde63a87653da8ff3adba4e7b240c811b6b5a2517bbaf0ae6a1673d951926d32 PackageKit-command-not-found-1.2.6-2.el9_7.s390x.rpm cc7087c37812104cbc11fa57b94393957b46fd815b8ca5f64b71fbdef6388dc9 PackageKit-1.2.6-2.el9_7.s390x.rpm ecda81200b47115411a279297a05afd4174e380ee1c9567dce3d3f0b7058cb61 ALSA-2026:11510 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default vim-enhanced-8.2.2637-23.el9_7.3.s390x.rpm 17b8ef0cb8167a5aca1a2b96b344d07f78177480e179e7f8c645d75453c67322 vim-X11-8.2.2637-23.el9_7.3.s390x.rpm 74be5eabe2c1234af19d58ad68be80c5afa36cb7e8a2bae46ead4c20348321b3 vim-common-8.2.2637-23.el9_7.3.s390x.rpm fcbf9debe9e59c55de91c84e8d587da64ccd6e97177bef010c748acc440eefcc ALSA-2026:12271 Copyright 2026 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libtiff-devel-4.4.0-15.el9_7.3.s390x.rpm 6b7539d952342655c4ab2e3223033723d1975af1e65444baef20475a5f9927e4 libtiff-4.4.0-15.el9_7.3.s390x.rpm 94fbf7c2f8e6d51d1eb8948a264c36a93d8fd406b3375cf743cee8911ca22dbd ALSA-2026:12310 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default sudo-python-plugin-1.9.5p2-15.el9_7.s390x.rpm 1134634d8c0e787f66f60a7a8cf4225cebdaadf15d4f1932363d3e677661fc7b ALSA-2026:1239 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default fence-agents-virsh-4.10.0-98.el9_7.4.noarch.rpm 0d610e37f5246d244b19b964a955fd204c908a418f3c1f2536b92147daf6e864 fence-agents-rhevm-4.10.0-98.el9_7.4.noarch.rpm 0db1baf79ebb2be2de9c5629ed4d35cfc743e3c11e90d4b9a2da1e15046bb8cd fence-agents-cisco-mds-4.10.0-98.el9_7.4.noarch.rpm 138f15e7b85701caa33bd10c03423a63b8019988506e977690f03a5bac79d008 fence-agents-bladecenter-4.10.0-98.el9_7.4.noarch.rpm 15732f541480add65f90255d2302497c4aaa4db28b51a7bb2631c1e743c4c300 fence-agents-ilo-moonshot-4.10.0-98.el9_7.4.noarch.rpm 161cfb14fea2f2aed70eff32076bcb07d62f7b0c8f7d97240d67b42bef3601da fence-agents-ibm-vpc-4.10.0-98.el9_7.4.noarch.rpm 1af8e6832deef48393b1409b2db5f4876ca3c78cca053cdfb304e386b7b7e669 fence-agents-apc-4.10.0-98.el9_7.4.noarch.rpm 1d76f9c447286267739762f7612088d49bdbbbda997ac040104307ad1710becf fence-agents-ilo2-4.10.0-98.el9_7.4.noarch.rpm 1db2a26c923c8a8f384ca86d8877e753897d53b662bf9cda7811d436718672ed fence-agents-ipdu-4.10.0-98.el9_7.4.noarch.rpm 248bc6380a6e11a7bb95b53ee7b2f5d97c4a4100a8f3661978cfb4fe80623f21 fence-agents-kubevirt-4.10.0-98.el9_7.4.s390x.rpm 2ad04c4918de49b862b067cce51fe77e94721440208183dfaf70b56193caf9ef fence-agents-eaton-snmp-4.10.0-98.el9_7.4.noarch.rpm 2df1dc85dd928062fb8526e3fcb6702eb26d471cdc964d20c48c057cc6c1a3c2 fence-agents-ibmblade-4.10.0-98.el9_7.4.noarch.rpm 2e9c11a01af961daac3dffb5019138d05524992221548997843fd4ca87f2a021 fence-agents-zvm-4.10.0-98.el9_7.4.s390x.rpm 3430a3c44348d11f94ecd9cf4a73005f85e48815a6dc75f3bf1a210b7b7904c8 fence-agents-nutanix-ahv-4.10.0-98.el9_7.4.noarch.rpm 35a5b8f4e58c100db4d18c2abf025c5df05835ae62c328a35c3267cd162198f1 fence-agents-sbd-4.10.0-98.el9_7.4.noarch.rpm 4ad7a464a4aa963a7f661ae36c98566f15e462fcb3b617bf82810f7cc3b0c2dc fence-agents-mpath-4.10.0-98.el9_7.4.noarch.rpm 5ef29a003c601fc5a6433efd6a69f7dd36d9062edafcc5106f7bd68c0bfd7ff8 fence-agents-emerson-4.10.0-98.el9_7.4.noarch.rpm 5fa9769156f3e6e84604cb82f1c305733cbcc70bca5832efa03b84f4fda7f7ff fence-agents-wti-4.10.0-98.el9_7.4.noarch.rpm 65c08d857e44b117c1af02f73420937807f9e296d2eb54b48cda5a65e35a6bee fence-agents-scsi-4.10.0-98.el9_7.4.noarch.rpm 6c637a686491d56ddeabee447596f3c9e4f88d460084ed0b29d7d9fce2256084 fence-agents-drac5-4.10.0-98.el9_7.4.noarch.rpm 7b7f3ef958a387a25f05ccf0e8588049fd8c21ee8cb4c758f984f23bc8f28095 fence-agents-lpar-4.10.0-98.el9_7.4.noarch.rpm 81c2e55c3a81389b8bf84c689516d902115215f984aea5df9f7182e7cb81c80d fence-agents-rsa-4.10.0-98.el9_7.4.noarch.rpm 84b0abaeabd4e2abf041f9e3a392f0b68816c9124b9fc77d69b334ea8a7a1c8b fence-agents-redfish-4.10.0-98.el9_7.4.s390x.rpm 8f0302ea279df7f053038dfd928e0d28384e3d06d4aca58ef48dccd8f50d8622 fence-agents-ilo-mp-4.10.0-98.el9_7.4.noarch.rpm 91f77135bdeb78abb48be05ca6b92a3198003c2cf2bd151683465e5fde87df07 fence-agents-hpblade-4.10.0-98.el9_7.4.noarch.rpm 929eae774ce4309db511bebe9b9bdcb417c23b5f234075a0a99335937ceb893c fence-agents-cisco-ucs-4.10.0-98.el9_7.4.noarch.rpm a51e6aaa970c97d56e2f77832b2726c1b099f927b1625c11a0b2b067d5b58320 fence-agents-kdump-4.10.0-98.el9_7.4.s390x.rpm a6c55ebfb188a8c72bcc8ba938857e39dfa0bef1d3f39db91c9bfd263493c1d3 fence-agents-eps-4.10.0-98.el9_7.4.noarch.rpm ac139153f7f3e3d9b6db9113bf74dcb4d628083c0923bfd97a195b9bf9c1e6cc fence-agents-vmware-rest-4.10.0-98.el9_7.4.noarch.rpm b2f95060d4c89c0cffb8afea8b5896a680f85c69f2c084c707fc68e362229b20 fence-agents-ibm-powervs-4.10.0-98.el9_7.4.noarch.rpm b6b52bc2673ea6f29d767a04d05023d71b94a86503e3d83e1b9560feb925d784 fence-agents-heuristics-ping-4.10.0-98.el9_7.4.noarch.rpm bfe4bd12ee15ef6acacd8a2b7884ab2866f6fc54865798db118e029c9802ceb9 fence-agents-brocade-4.10.0-98.el9_7.4.noarch.rpm cbf8f508c639699281b4f259ddd4ab1ebdd78b960bd0e3601e26204a332112a2 fence-agents-ilo-ssh-4.10.0-98.el9_7.4.noarch.rpm cd92a1ba43deda5065815657e7b779a1b690407d2148739dc98e5f0ea4ab4a67 fence-agents-rsb-4.10.0-98.el9_7.4.noarch.rpm d0e454e0fbd0ce0dd6cdadab555dd2e295eecea15b765da92502b2924949f6e3 fence-agents-apc-snmp-4.10.0-98.el9_7.4.noarch.rpm d493b61707a277cd9449c39dedf737343f703984fedef60432da77905fce9935 fence-agents-intelmodular-4.10.0-98.el9_7.4.noarch.rpm e2c6f75415feb280636a2f193880cb5d8321c585ebe6234914167834cf9f3e03 fence-agents-all-4.10.0-98.el9_7.4.s390x.rpm e73fb60f38eb356c1119e3c0738e832654f287d1b8e1f3f72a8fd26a89cd00cb fence-agents-amt-ws-4.10.0-98.el9_7.4.noarch.rpm f0008dfc354d3719ba8d6fb2582af93d6178de9472f214efa2cad397e217d5c1 fence-agents-ipmilan-4.10.0-98.el9_7.4.noarch.rpm f25fe64093983d35c93af92b65f1a5cf3b400a6497864d649b66c1b81f783cb5 fence-agents-ifmib-4.10.0-98.el9_7.4.noarch.rpm f4bdca6681831d57531894ce067ea312806e127fe4ffdfdee2c930c6f10c24bb fence-agents-common-4.10.0-98.el9_7.4.noarch.rpm fcf6e0bb5baacc7b57ba77267159a07e5082b456e81e0047fca0436197da7391 fence-agents-vmware-soap-4.10.0-98.el9_7.4.noarch.rpm ffc483c10f2741ed9dec2c88dac50a33b92bbd649523e2af48ff215225bbed57 ALSA-2026:12441 Copyright 2026 AlmaLinux OS 0 1 Important

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libcap-devel-2.48-10.el9_7.1.s390x.rpm d55af28a371c0d80f5cfd9f92dd1395c4f210717a3d870ad770e19a945a60944 ALSA-2026:13381 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385) * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414) * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387) * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388) * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default pam_ssh_agent_auth-0.10.4-5.49.el9_7.alma.1.s390x.rpm 8492c1fde9b7ef801dd9b38d7fac824cc298f1bc334a10f468a9943e7f3d6a01 openssh-askpass-8.7p1-49.el9_7.alma.1.s390x.rpm fdee42bf07d53c19186b721294ad88ea1737f5241b2a8314c43b25464400a00b ALSA-2026:1350 Copyright 2026 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: libcurl: Curl out of bounds read for cookie path (CVE-2025-9086) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libcurl-devel-7.76.1-35.el9_7.3.s390x.rpm 37072e61d192d6955427ccdc9edfceab5b75ba749a5fadbb8ac0818f1da6d141 ALSA-2026:13565 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-zfcpdump-devel-matched-5.14.0-611.54.1.el9_7.s390x.rpm 1bf087dd43ad3e725ea020d501b8c6386f9983633d246d9a419689c3516ee1fe kernel-zfcpdump-devel-5.14.0-611.54.1.el9_7.s390x.rpm 47a017ad0b4790d1dab4b05fdee3969c73f783df81a76e2be44345c3e9deee28 perf-5.14.0-611.54.1.el9_7.s390x.rpm 6d5971acd1d202f2b977f67c0df14494c258a384868c41cbdb6f43e03f27d7ae kernel-devel-matched-5.14.0-611.54.1.el9_7.s390x.rpm 6f796401b22c7ebf1709f12a33784a96259bb301638db3ab1689395b89da0890 kernel-debug-devel-matched-5.14.0-611.54.1.el9_7.s390x.rpm 706283d34cd91adaeb9983ceb6ce3a6887811b18f0b417a9f1f0718c9fd45ce2 rv-5.14.0-611.54.1.el9_7.s390x.rpm 7410ce45c764c3a085da5dbdb7d36b46394f75191737e6b500428423ab1c3a29 kernel-debug-devel-5.14.0-611.54.1.el9_7.s390x.rpm 78e1b71b5a894569bbb1a4ff77120ab1a35353e68be03b4b53470c53eb471b38 rtla-5.14.0-611.54.1.el9_7.s390x.rpm a42f88310ce549e10e47123f83b7303df31e4b87be78fc89982ba28b1c4a04ba kernel-doc-5.14.0-611.54.1.el9_7.noarch.rpm a47f1fe87fcb370c626b0ced74419df26af2133d618e5ed0ea026f11b0c55b7f kernel-headers-5.14.0-611.54.1.el9_7.s390x.rpm ce6894e5ffbc956446b17ce1b311ed65a81baabd0482505d151a9ae191da988f kernel-devel-5.14.0-611.54.1.el9_7.s390x.rpm ebf13f2c252ea9fd65a95e55a0aaf819ee5b738b434601e497c5d6a1f0a82616 python3-perf-5.14.0-611.54.1.el9_7.s390x.rpm f93f2d6be53476c6ae8862005210b0d0cc9c7d56ef7feed1b2ad09061c69a3de ALSA-2026:1359 Copyright 2026 AlmaLinux OS 0 1 Moderate

gcc-toolset-15-binutils security update

Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default gcc-toolset-15-binutils-2.44-3.el9_7.1.s390x.rpm 65de10846791671cd9da112a6be0825a5ae569020debdce75f547617906e7693 gcc-toolset-15-binutils-gold-2.44-3.el9_7.1.s390x.rpm d79598181305febf328a5efb6d316bb44941fdb231cde5fcb4c88a1fd472650b gcc-toolset-15-binutils-devel-2.44-3.el9_7.1.s390x.rpm fc6618511a7eaa5506a10f136b5bde999d6f997bcc4d81b03053435b95da583f ALSA-2026:13670 Copyright 2026 AlmaLinux OS 0 1 Moderate

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado-python: Tornado: Denial of Service via large multipart bodies (CVE-2026-31958) * tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments (CVE-2026-35536) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-tornado-6.5.5-1.el9_7.1.s390x.rpm 6fefe08bb5ca1ce6434f53a7cd1cd3c8dccab97b45546016274a891e06504ed5 ALSA-2026:13671 Copyright 2026 AlmaLinux OS 0 1 Important

image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default image-builder-31-4.el9_7.s390x.rpm cd1b547e7ad7a069339fdd39d87a6e70f31a2afcd02bab79f7b5772f524605a9 ALSA-2026:13673 Copyright 2026 AlmaLinux OS 0 1 Moderate

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default corosynclib-3.1.9-2.el9_7.1.s390x.rpm e803d9f40f39bd8a941311b8e219b6102497f24ce281b46fc71ff92d7bdbd286 ALSA-2026:13677 Copyright 2026 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data (CVE-2026-29111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default systemd-devel-252-55.el9_7.9.alma.1.s390x.rpm 29b7f89fc8349b995dfd8935ce82041becd6f3ccf624c0483762fcddaf3c8bec systemd-ukify-252-55.el9_7.9.alma.1.noarch.rpm eb0c56d9e5f50d2d4c4af3aa464932d68bbb03711959541a90250d3678a0578c systemd-journal-remote-252-55.el9_7.9.alma.1.s390x.rpm f92a392ec4ee16410d2cab667352485055039a50e44f03774aeb861f2a7870a8 ALSA-2026:1377 Copyright 2026 AlmaLinux OS 0 1 Moderate

image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default image-builder-31-2.el9_7.s390x.rpm 8d746f3ae721f77d89e09c4247f0e9dfa519e5a080d6d78f6504a8e33621e041 ALSA-2026:1381 Copyright 2026 AlmaLinux OS 0 1 Moderate

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default osbuild-composer-worker-149-3.el9_7.alma.3.s390x.rpm 570709aea588b35e459dd24f687beb6053f7305dc87274bb7108354bce4e1de0 osbuild-composer-149-3.el9_7.alma.3.s390x.rpm 5fa61fc4dd29dbd5d2197bdade84216ba0ccb2db5b0673be89acdba189658203 osbuild-composer-core-149-3.el9_7.alma.3.s390x.rpm 9f78e63d2869f21e965195ee9ff83d80462ef2667da9ad0c995ff7e4f3d43bbf ALSA-2026:13857 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032) * dovecot: denial of service via crafted message before authentication (CVE-2026-27858) * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default dovecot-mysql-2.3.16-15.el9_7.1.s390x.rpm 0863baf3d1cc637c353288d22daf9ccdfd1eadbced2905724ed13a37a1bd10cf dovecot-pigeonhole-2.3.16-15.el9_7.1.s390x.rpm 406fbee776ab23965ce831e1fff212f3e9a7a149971ad2c7a894cc23a706a89c dovecot-pgsql-2.3.16-15.el9_7.1.s390x.rpm 69d39e94364c32ba73f35828d854e2a0107038310c8d92d85f37a20af558f670 dovecot-2.3.16-15.el9_7.1.s390x.rpm 9b1057f5efb070231effca12deacb66da76930057a47d9d23b8f58a3c0974431 ALSA-2026:13917 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default fence-agents-lpar-4.10.0-98.el9_7.13.noarch.rpm 0519341423bd54e50d7d9f1cf8d1290635ca6a8fc8bfbb8396827b1b13a22883 fence-agents-sbd-4.10.0-98.el9_7.13.noarch.rpm 1006b2f604db3e736ac80c60cca1583f69cd1f2d6816183db5113b34036a5c11 fence-agents-emerson-4.10.0-98.el9_7.13.noarch.rpm 14d2737b0a2b6862afcbc75fed0f1683862ddb264a24e1b512797e4313c022d6 fence-agents-ibmblade-4.10.0-98.el9_7.13.noarch.rpm 15820041105e708b74d2c5328dc412bbd1382d53e172e5c3847a5a9680b85142 fence-agents-ilo-mp-4.10.0-98.el9_7.13.noarch.rpm 15f2bbc8651f16903d0d9a5b3b7b79f82a2faac3b3b60fd8f8cbd96e0b9cca14 fence-agents-apc-snmp-4.10.0-98.el9_7.13.noarch.rpm 17a1caa47085fe26e4e2808c40b7c984242909e1fb9935fc3b04d2c739266fc3 fence-agents-brocade-4.10.0-98.el9_7.13.noarch.rpm 19ddb9dc5cb6a82fcb9af6e73ceedba12e93e47371734ada9703f9ae63fa8822 fence-agents-apc-4.10.0-98.el9_7.13.noarch.rpm 1cb956ecb963c872f18ac872e7070f4eb373f181fcdea3e2899ddefe2b6fd6bc fence-agents-drac5-4.10.0-98.el9_7.13.noarch.rpm 21f8ab091340e3b7a7b2adef32f04097336574979b4b4640b663e490ffa93615 fence-agents-zvm-4.10.0-98.el9_7.13.s390x.rpm 36c42304c062da03cc7483f179f7d288a231fedde8beb91d256c48d57521aecf fence-agents-cisco-ucs-4.10.0-98.el9_7.13.noarch.rpm 3a8e0d5394bd53da1054905fb43b386e1960370f1400edfe183c3d03239703c0 fence-agents-ibm-vpc-4.10.0-98.el9_7.13.noarch.rpm 41f7b096b4b3f07c1f00bd93d4c38c36a5b59c5da2fcfc51032369f80a6018ca fence-agents-eaton-snmp-4.10.0-98.el9_7.13.noarch.rpm 472971420b4fd2ffb16f5cf94f84f169b1c203f90e1d30cfedad7485cafbf3ec fence-agents-vmware-rest-4.10.0-98.el9_7.13.noarch.rpm 514874272753bb7d471cb1d6f7d972402f2500bad2e0864841249a2aa7112368 fence-agents-ibm-powervs-4.10.0-98.el9_7.13.noarch.rpm 53c19ec6593e6a49a12b88627fb2e4662d93f710fda4ca7607049adde2d2bbc6 fence-agents-ipmilan-4.10.0-98.el9_7.13.noarch.rpm 588379f7ffa02a9a5415e7bd565032c0e1a7503a5d8850a1ada195cbf049e3ba fence-agents-ilo-ssh-4.10.0-98.el9_7.13.noarch.rpm 58fb9408a734dbfef9ade8ced8dddc9fa6b335ddba0ff987cc0fe3e1cd26872c fence-agents-cisco-mds-4.10.0-98.el9_7.13.noarch.rpm 5929ed9011ebcdfcd0193318beeab6efd99e6668cc74db2ddc9a22aeb60cf5d6 fence-agents-bladecenter-4.10.0-98.el9_7.13.noarch.rpm 5f1740d1e3182b6d0940f4237bfa37ff6a9512f39ada84661cef40abf7e26647 fence-agents-all-4.10.0-98.el9_7.13.s390x.rpm 61fa7a9acc2a93353bc982de62fbf3f55bd957c6971aef3d65fcab67a58881b8 fence-agents-rhevm-4.10.0-98.el9_7.13.noarch.rpm 6c9e4fca99f3693041cec59a712e8dee57832c14f6744ccae48f4d60fbe184d6 fence-agents-kdump-4.10.0-98.el9_7.13.s390x.rpm 702b98aeaa69b340c9d619969782d50d651d17a23b5e817914ce261bc5ef7c0e fence-agents-mpath-4.10.0-98.el9_7.13.noarch.rpm 7ac42a2ef1095405d2c439a31cd72b0e2ee686cd35e9a2fa20fb41c5981454fa fence-agents-virsh-4.10.0-98.el9_7.13.noarch.rpm 7d5cd68fae30b6ca4f6562102b29a46e723299ba0c7ec77d25af7ca333576762 fence-agents-rsa-4.10.0-98.el9_7.13.noarch.rpm 803b2c9a8f70a58cbdf18b2647e85608ea55d6e964e8ac31fa2ce970db76619c fence-agents-kubevirt-4.10.0-98.el9_7.13.s390x.rpm 85ea50c43af3a984173cdd7cb98146204b8bd0de10572383d769471b7c14079e fence-agents-rsb-4.10.0-98.el9_7.13.noarch.rpm 8cc74c41cab822a3cbb3502927721123f1d4b6913690d69a33cc6dae21ee84e7 fence-agents-wti-4.10.0-98.el9_7.13.noarch.rpm 951e5068d4dda21798229794777398178ffa4d06fb19409b322b5c876f84391a fence-agents-intelmodular-4.10.0-98.el9_7.13.noarch.rpm 9f1f11517c75580b929f7bec26ee9251fe6b783fb9af5b7370a831170596cf1c fence-agents-scsi-4.10.0-98.el9_7.13.noarch.rpm a9331372668be69b5c14349d988bb229db6097f36bbc60e7ffd4b0d60b2d047b fence-agents-amt-ws-4.10.0-98.el9_7.13.noarch.rpm b67705002ee1607aff425a381a976f474e27174787771cf1246aecf3de033003 fence-agents-ifmib-4.10.0-98.el9_7.13.noarch.rpm b7a5835e6df1631853e063a32755510fb6a51f8731227cb348133bd4c3f31f05 fence-agents-common-4.10.0-98.el9_7.13.noarch.rpm bc0bc285791f3ab5c13f9b7dfde0d0e46fc03ace2eb03b5a594725fe2c66912c fence-agents-ilo2-4.10.0-98.el9_7.13.noarch.rpm be0200c439b6dc6e4042a6a41c9041491e9be10ae248caedab103f62f62707c4 fence-agents-heuristics-ping-4.10.0-98.el9_7.13.noarch.rpm bf9b98be119b58ba74e89376c86e6976367c18108087f02353d2d24abf13a6d1 fence-agents-vmware-soap-4.10.0-98.el9_7.13.noarch.rpm ccc716496fcc3bf8e5aa784e399b213e8a30b092869e658dc1b2054842767557 fence-agents-redfish-4.10.0-98.el9_7.13.s390x.rpm dbd170d93848cf01407d54b5554b9379c6cb140f344c191493539928d62a3d1a fence-agents-ilo-moonshot-4.10.0-98.el9_7.13.noarch.rpm de95d74a88bc3023389bf160f3013227682d84d218d3587e59f3762dce55ce2d fence-agents-eps-4.10.0-98.el9_7.13.noarch.rpm e0ae9f5ed3e374fe2ff4fe53efdc75fd7c8021f1395dfc67653f47592916e486 fence-agents-hpblade-4.10.0-98.el9_7.13.noarch.rpm e79b2c3e3e073d96d868016a8141d855179e565f3c139e6698dfffb03e647d32 fence-agents-nutanix-ahv-4.10.0-98.el9_7.13.noarch.rpm f5cfd39dbe3dc9289fbf906accc85edfe33a23486c6e474daff088d34a36f277 fence-agents-ipdu-4.10.0-98.el9_7.13.noarch.rpm f955905b08c233f57eb9dab3797b722bd5a54554e073a332d56a0e58fd777825 ALSA-2026:13978 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libsoup-devel-2.72.0-12.el9_7.6.s390x.rpm 78fd49f75fe1f0f0cddf7d27e34a5f28e5c22e48134770b816882e0efea3837c libsoup-2.72.0-12.el9_7.6.s390x.rpm 8c7ab531df4cfa4dbf85d1f02ceb5d1ab89f61358beefa40c1f4ce00e706cc1d ALSA-2026:1408 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836) * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.12-devel-3.12.12-4.el9_7.s390x.rpm 050f0be6ee7f14a23f76775251accfbb7b8ec3f24fd7a148edf622cd1b27c14e python3.12-3.12.12-4.el9_7.s390x.rpm 0dd1e27ec7f6b2bdc4fc624a49b321edc47cc24df44978a185b83430f76d1094 python3.12-libs-3.12.12-4.el9_7.s390x.rpm 1f346e83e6b09901590b2feaecbed0f1134caa0a54f31c3413155e3563157acc python3.12-tkinter-3.12.12-4.el9_7.s390x.rpm b70321c96a28ab15a8c19f606b54a2a62ae491015c3b097842256a30fd7ae320 ALSA-2026:1409 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: pgsql extension does not check for errors during escaping (CVE-2025-1735) * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491) * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220) * php: heap-based buffer overflow in array_merge() (CVE-2025-14178) * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177) * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default php-ffi-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 076af8b638880f9df21826da1504c498eb0fee0a749993aba5c7785a7eca31a5 php-mbstring-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 1748493c9bc8a10b2eceecb5e39fbc26d13eeda214d1784201934ef9ff8c6099 php-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 187b0c5808b9c2e6655ce4a2e853057e233b8c19c6862a117e3ffc72a412788e php-embedded-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 1c981ec125969eff618dac50085314d688f7f1d1e48134fdd26a63098d0b9a1c php-soap-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 247b8b23cbb0bce6a561f9ed1cff76381672bed7daeaee2ce14f5f8ede841bd6 php-pgsql-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 25be822e19181408b66829d1499f7f9e291e63c06b7e716344eed221ee811913 php-process-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 3d5adbe781bb4ab9bc977fa0c7d8b37603d6125d482127313b407c768873a542 php-common-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 4ace36e09bcec0f38b2542e1ba41e23909654e74297a11a9a687a6766331a6cb apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-intl-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 4f51a4f3354de53a42138c82999d9d3fc62af034b6710d530750dff2d267e9f1 php-gmp-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 55af1766691dca8399790e614696b9f33fc9f4c494222d6bb17376003bfc966b php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683 php-gd-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 69280a0da76bc7475f94c28b50fd214cd1194fb3312c4ca282f792f5b9c2000b php-dba-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 69be1c86018977f143ba1ef917156ddd4da14f80046ccf8d3756d363a6472ecd php-bcmath-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 77f47cdd6c33b5a2f99d19f624e61256eb0dcea5c3333d8cfbe93c138cd76b90 php-ldap-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 78fdce413629ea00fa6baecd51f3371bdb4c260524a139c4c56e59cfdc7da4a2 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm 7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a php-snmp-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm 83511ffc90bf12fc13f9e99658593a695bea190520d968fdab982973bc88b5cb php-enchant-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm a6dfe9757cfa71a890ec76f772b74ab2aac82865e1f6997f5b664407c790e296 php-cli-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm a897b971c96809be1dbbfa637ce5066ac22364b295ac7cddc927b8e5cfb6ba29 php-fpm-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm aedcd44edfac78f2280f3e5d7ffdda6918069d0e3394c9c97daf0221afc715f6 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c php-xml-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm c60310d30980a365a80a1140ea2afb441266943f7a22519c61a9d65c8a8cbd85 php-opcache-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm caee38c210343f7addef0f9a295862924bdd111c51fce24753890a449b013803 php-pdo-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm cdd015f43b3c95f296ba90d878fe31657419592923077f58205d2b22c59f0452 php-odbc-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm d50606fa85c3a9ff2867d25c3b99f1ad59a86a8db113dd13e5c2bcebc32f5adc php-mysqlnd-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm de3748550d1b3cc77a37f85210ed89746f6dba053af685dd8ee8844ca3e60450 php-devel-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm e12599949904d4789ddfad7ae93c72172f151ae8e2965b555eeec6a223276459 php-dbg-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm e638f8b5af1ac091ded49bcf5d947639f3a736238709310c3a204710da7fe847 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d ALSA-2026:1410 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836) * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.11-devel-3.11.13-5.el9_7.s390x.rpm a165efba88633fc22cb1001cc8409bdb139e03058d69afef7669361d8cb4c230 python3.11-3.11.13-5.el9_7.s390x.rpm a692248dc876079977745a4afe500e327538c26aa37132ec5858ffbac8c73ae3 python3.11-libs-3.11.13-5.el9_7.s390x.rpm c30198b9f467af8f3026535d7843812890c921c4fbcd8b382b9d3ff55d567712 python3.11-tkinter-3.11.13-5.el9_7.s390x.rpm fc3578b75525ee0c136d11724a9fd9c360145c722d990a3e7dfde393329da3b9 ALSA-2026:14200 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default git-lfs-3.6.1-8.el9_7.1.s390x.rpm e9d7cf96751db2be644595a4c1b19614e7f19823192b3ff8b30140dbccc3fe73 ALSA-2026:1429 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: heap-based buffer overflow in array_merge() (CVE-2025-14178) * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177) * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default php-process-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 119b0b6b061cc880e713fff400ccba8ca7a2b0290acd23de5f26f9e28555d80b php-gd-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 135add8a53d1aef7335650021848239709234a0aed562bb6febc0d120c9145b8 php-odbc-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 20641d74a0430b2b317ed0b3469d5c2fd561e37ee97c67e5b3891878d5d9b525 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm 2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552 php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm 2d91df18463f7e5cd5a771f760d2dae331ad870672e519b72976b7b1e308de4b php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm 2e6d69933e316fd47fb94a2c937bbdd1aa9468b2ff581671b71042a7b07a002f php-fpm-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 35943d9fb3b2c9f754dbfec0d6814b9693c1375dc21e6ddd1617f0e463765c0c php-cli-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 3acae6534182804220022c9d7726f2437e02b46c47dffa105d67981c59c85c80 apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-dba-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 4e95ffc95651ceeabbda7c545e64543cee14282063b6a5f381f289625924989b php-pgsql-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 54b8b2e6e2180948d5bb672dd91729a5bb3f6ea29ed968842f26576d3481b407 php-xml-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 5bc8ba392def9fa0f9e274ff71e9329f9fb7c40b30c9fba85446bf26a7b5a7db php-gmp-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 7c997d78293f610a3d269ff99651cfc662d09fdaf8698bcb6ca0f479a55cb416 php-soap-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 8640718d42d75f39e7fda83e43f2f98a6b98c8f2c3f642e282746c5ed76456d0 php-opcache-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 89be2de0b7b3bdbdedb7f85add1aa41b5dfe97d6b20e32562ac38e27161d9e7d php-ffi-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 8c00b5bf24636d80f01cec8483ff712ac5845bcb22bc7f71746f0543ef220994 php-common-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 8df29287a69e91a853058938f2277d61fc14cfeac3e1b0ff602fa09d46e63010 php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm 9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2 php-dbg-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm 9e45bca4e92d7dd4be9fd72eafa8ddb4799a0c33e3d9bef348106b88dacffe85 php-intl-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm ad4c7e16123d84fcae7ff6c0ddb56ef88565d3f15f44306faefc3e6bcb2a4bed php-snmp-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm bbb3958fc5c3e0d31baf8e18f17e0247324f2ced45318a39c6f82ad5686e5a4c php-devel-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm bd5a72358e32a0fe75579d32ae02bf2ff3711486ac51e0c1e3d9c1a9397bf58d php-mysqlnd-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm c67b82145dbbfc48f54e47277cfe0be6390d6f9f26cc268e6be3f983107b05c5 php-enchant-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm cc58a529b9c0cf8aec598b44a264be5e04d3b97e30e35ec9940a6fe9f6c11b43 php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22 php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.s390x.rpm daddebb79dcabf2b21e7db723448b62a2c6d9941272af21949a665d7b0e9e11e php-pdo-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm dba6a560448c0b687f508141e91a467db5c19ba3a0bd42a6cd00c130af1b11a0 php-embedded-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm ddd4de159a93f319eb66002639cef39034836b3fc930124c7de84f9c436a854f php-bcmath-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm e071cec137c4da85da4cb2cea4b207ad06802eb8088a9408cc44e24cd6aff47c php-ldap-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm e458ef7444c75b44262fd544ef65831d28ed0a20f821bed143288fe829e2d7c7 php-mbstring-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm e88466ae7fab204a8c6b950b62e7e5ab624b5e8f3a439bea2f92cb3404a32c8b php-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm f32d2f9e05bbf1c4c07b8deae77df3ac754142cfebd138e7f55d419adaa00cbb ALSA-2026:1473 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file (CVE-2025-11187) * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing (CVE-2025-15467) * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling (CVE-2025-15468) * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation (CVE-2025-15469) * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression (CVE-2025-66199) * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160) * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls (CVE-2025-69418) * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419) * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421) * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420) * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795) * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default openssl-perl-3.5.1-7.el9_7.s390x.rpm 3da95650b105c12757ad0f57ea05fd670721b359acd101d49e93f7dc8bc51e32 openssl-devel-3.5.1-7.el9_7.s390x.rpm 497681db6ed9c2e4920882825568a4ef26261a8c9be105bba2d93af180db6cbd ALSA-2026:1478 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-devel-3.9.25-3.el9_7.s390x.rpm 13551f94be2674a9c79c23059aeb2dbdf56db079ce904ef6ed4934b3c4b34b79 python-unversioned-command-3.9.25-3.el9_7.noarch.rpm 2f814b9350bbf5a449547530ceb346b389da066c1405c62ab4c23805b6fe5532 python3-tkinter-3.9.25-3.el9_7.s390x.rpm 6eabdb3f5d396f4b402fa6c4b4bfe9f8ffbc4f18d06c9a3adf810efefc034ee8 ALSA-2026:14791 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libpng-1.6.37-12.el9_7.3.s390x.rpm 6b03a971315bf741840c4c0dfd9bed6d596a37da986c1560427fe3a7489433e7 libpng-devel-1.6.37-12.el9_7.3.s390x.rpm d632d91724882676b646c90596acac9f0530916c93799aa552ab0aa6e41cb294 ALSA-2026:14819 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default freeipmi-1.6.17-1.el9_7.s390x.rpm 143e56bad92b9984dbb182cfed21561e22dcabc9b9d0c804ad520e7ddacab00e freeipmi-ipmiseld-1.6.17-1.el9_7.s390x.rpm 4bcfd3d53d0d6ff5ef0fa56817b13a2cfdf2558af1d16c50b33bb38b6c9588c2 freeipmi-ipmidetectd-1.6.17-1.el9_7.s390x.rpm 4c7570028895068240a14c2a9417775887d1d695d9d571c004f5f9abd1da47f7 freeipmi-bmc-watchdog-1.6.17-1.el9_7.s390x.rpm c3c1548aaaee24e83cd23ec614b5285a5c87257d752f95b155d24a09145123fd ALSA-2026:15887 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default openexr-3.1.1-3.el9_7.2.s390x.rpm 7efbf01938101d4f4f1b49b8c3d6722656ac9e7b12c26ce342c34e7706b9d292 openexr-libs-3.1.1-3.el9_7.2.s390x.rpm 811d1260de0b98ecccfdb83319ca093bdad488e7e00d5dd31659e1539422c51e ALSA-2026:15892 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754) * firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752) * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757) * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759) * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747) * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749) * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766) * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761) * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771) * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764) * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765) * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default thunderbird-140.10.0-1.el9_7.alma.1.s390x.rpm 76124878c5b440e5b710730662bc55604f3bfaa96ee6504463096ab324420c72 ALSA-2026:1595 Copyright 2026 AlmaLinux OS 0 1 Moderate

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default iperf3-3.9-14.el9_7.1.s390x.rpm d5ce1c1afc3749bc553e5edd13c1588e8d48255018af52409fe331a3d99d912a ALSA-2026:15971 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default glib2-doc-2.68.4-18.el9_7.2.noarch.rpm 25eeed2fa0bcc8f40954f99c404140152cc4b6aff601901836843e1aa348584e glib2-tests-2.68.4-18.el9_7.2.s390x.rpm 5081fc7de581c55c912c4ec6eda0252f64d6fa4df782808381bac440b2960d95 glib2-devel-2.68.4-18.el9_7.2.s390x.rpm cb161bb68c92f9e728d60ff9949c7a33b349cfd900573c5179cd1b3a5ad6d2b2 ALSA-2026:1617 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568) * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154) * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-zfcpdump-devel-5.14.0-611.27.1.el9_7.s390x.rpm 29cc9abb1b626b20b6caf62768f766c5e321582f64925ef9647d8be0a09aa8ea python3-perf-5.14.0-611.27.1.el9_7.s390x.rpm 317da55b8d170261f4f495ed5a3fe2fae2ea0090208222ad15549637913324a7 kernel-doc-5.14.0-611.27.1.el9_7.noarch.rpm 65a91727cc792fd9c201b43110d305b9d194aa95e8b372b07f7a68881cd6abe5 rtla-5.14.0-611.27.1.el9_7.s390x.rpm 6b6940deead03027cce251dfc5509b2acc9550ba95b2cdbbaf8c94d109a5c1f6 perf-5.14.0-611.27.1.el9_7.s390x.rpm 709c799a225451028742fdfc6d2898750301139a5677ce6778b0fe1af947fc2a rv-5.14.0-611.27.1.el9_7.s390x.rpm 75630613402998189a7608bc285f6f6c98f28ab4fa2c961ac84ce52a9a644142 kernel-headers-5.14.0-611.27.1.el9_7.s390x.rpm 7ec24dd53d459572947cddf92680eb823f6054fb27a4355505bf1a80eeff0e99 kernel-debug-devel-5.14.0-611.27.1.el9_7.s390x.rpm 8384b031232dbb24ac98f1480c49d0f33719f09864e31e996dc157c6875631df kernel-devel-matched-5.14.0-611.27.1.el9_7.s390x.rpm aefc567c6baafc31c7ad0274eec59be08f8b27adcc53943064ee7d083678ce52 kernel-devel-5.14.0-611.27.1.el9_7.s390x.rpm cdf47cbbe1bbc909d8031df9ea3f0b11c7e3949dc57e60a2324fed30059c48db kernel-zfcpdump-devel-matched-5.14.0-611.27.1.el9_7.s390x.rpm d32cd89d73db4e83af313bb228b86d3d2c9b581911867b7bfef2285cd554af87 kernel-debug-devel-matched-5.14.0-611.27.1.el9_7.s390x.rpm d64e973631d12e0d49d13302f53bf500a1d5b96f71d4cc7219838cf18a6941bb ALSA-2026:16206 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rv-5.14.0-611.55.1.el9_7.s390x.rpm 2cd326447cc310e542611b9e2758928faea0739c6c98809e7e0f7e8b1ca7a1da kernel-debug-devel-matched-5.14.0-611.55.1.el9_7.s390x.rpm 2d84620f813a46d24c4405a2e19fd51c19bf59ef3809581cbe1051fbfa1e37cf kernel-devel-matched-5.14.0-611.55.1.el9_7.s390x.rpm 51c3467bb60bd7deb13c2aa190af989cb103271eebf7e69b78e972676dce1ec7 rtla-5.14.0-611.55.1.el9_7.s390x.rpm 644e621279522f32d8d54a4bd1940e9b91c21f1ecedfa882e163536a5765ab20 python3-perf-5.14.0-611.55.1.el9_7.s390x.rpm 6d361fe0e4602b3e8a1f0958b02a456a8b13b055f06e24444d59105385bbf7c6 kernel-debug-devel-5.14.0-611.55.1.el9_7.s390x.rpm 8d31700a8f79d2e203c1ba68ba5d3805f9b4b59414304282691133f0dc9948df kernel-zfcpdump-devel-matched-5.14.0-611.55.1.el9_7.s390x.rpm b0402146a5dc43eadd8d3533c1eb89ad1dd03105ba4c053eb383c236f25585b7 perf-5.14.0-611.55.1.el9_7.s390x.rpm c53be2f47be4f462aee5342ccd9699071420079a90f1606fa922ade39a8c3975 kernel-devel-5.14.0-611.55.1.el9_7.s390x.rpm cba599cd4130492d2d001c1e34d0de4e650c97264ec53f4a2ac3356376a8d684 kernel-zfcpdump-devel-5.14.0-611.55.1.el9_7.s390x.rpm d2b276d30ca93f1b46c0bc7dff1efd0e832b2ee4d639c686224b1ab11221eb40 kernel-headers-5.14.0-611.55.1.el9_7.s390x.rpm f154203ad88c1dad2ccb5c73c2304d19f9255f8b9832f593ebaa91cb814db629 kernel-doc-5.14.0-611.55.1.el9_7.noarch.rpm f4dfed677e7f51b89919b1edb476f21a52a26c7a40b86808d047fb16b6a8591a ALSA-2026:16482 Copyright 2026 AlmaLinux OS 0 1 Moderate

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952) * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986) * freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951) * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775) * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885) * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884) * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883) * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libwinpr-2.11.7-1.el9_7.7.s390x.rpm 1381a88d375f5e62e443ebb0ef10d72952acc9501149253de3f1dc9a57829206 freerdp-2.11.7-1.el9_7.7.s390x.rpm 4ded3a7724f16454f94bdb1b617caf5da7f3def6fdf06c8ac93dafda9af31446 freerdp-libs-2.11.7-1.el9_7.7.s390x.rpm 6aea30b311237768e6628fd1aedd8fed5c0bfcd9b8c087793e25b1d0d9bbf250 ALSA-2026:18028 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libpng-devel-1.6.37-12.el9_7.4.s390x.rpm 2a8c762b5c4293058cdbf9a36af28ed693a25778eaf9397693010156f571d120 libpng-1.6.37-12.el9_7.4.s390x.rpm e062ad2470527822e2c5fe0bfa011d029701bfca99465123a454c998eaf2e363 ALSA-2026:18029 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nginx-mod-http-xslt-filter-1.20.1-24.el9_7.3.alma.1.s390x.rpm 1ea71ddaae1266f9e81dbfa5b3e976ec34aa15ce4508adf471db6c708d552944 nginx-all-modules-1.20.1-24.el9_7.3.alma.1.noarch.rpm 38a4515e74d4728c24577c55b05d5c004de5e25004dde1febcad35a0973da542 nginx-mod-http-image-filter-1.20.1-24.el9_7.3.alma.1.s390x.rpm 57baf1a7ee8c58e07d7a8ef1a3bc2159fe8124811481c546234d1e998abe5348 nginx-mod-mail-1.20.1-24.el9_7.3.alma.1.s390x.rpm 60108489f02a72b03eae034068a5646e0826535ecca424b104a2d514ae23189c nginx-filesystem-1.20.1-24.el9_7.3.alma.1.noarch.rpm 60a03a3eb1b58355a1274749d9d3db9e8fc70ce84b93a1d5f13e67a8ccfe86bc nginx-1.20.1-24.el9_7.3.alma.1.s390x.rpm 661b9ad018a2bb6bd19f5f93a5f78c877766cac2e324060b693a57228b3671d8 nginx-core-1.20.1-24.el9_7.3.alma.1.s390x.rpm 773e945a5b579b9416c6afb5a73066fd5eb40863c9b8664a149c5cc581b4715a nginx-mod-http-perl-1.20.1-24.el9_7.3.alma.1.s390x.rpm 886b6aadc29a1a48582903da41da3feede4c2cb40ce7f98863086a0503e94960 ALSA-2026:18030 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 rubygem-rake-13.1.0-6.module_el9.7.0+245+447713a2.noarch.rpm 29f83cf57a8e54cfb879d5e2cabada9aa1d5b873000a917602a640566f6bc319 rubygem-bundler-2.5.22-6.module_el9.7.0+245+447713a2.noarch.rpm 2b63b3420daef02533f8ce0d80e230a7e5a1d65cedf81444b2ecb33bba9290f8 rubygem-power_assert-2.0.3-6.module_el9.7.0+245+447713a2.noarch.rpm 2cf9aa498f7c21261b123d8df83420973d406655e185f2b0ddfb6779b0ce06c1 rubygem-pg-1.5.4-2.module_el9.7.0+245+447713a2.s390x.rpm 37933771eaf80f507c99dab2a888edfd251e524975ea35ca2f70ce5f9b0badeb rubygem-irb-1.13.1-6.module_el9.7.0+245+447713a2.noarch.rpm 405f23c3742c103973fc71e16a71a73200b587179ac88a5dd3c5c3c21a2e7126 rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.s390x.rpm 4866939ab52aa8d02863557cdaf8e3af45c043a8c7136082318eabfec4ab8150 ruby-default-gems-3.3.10-6.module_el9.7.0+245+447713a2.noarch.rpm 5b4c471ef56a088eccc54904674aa3c8cb24dd5a5f294cdc5fc6fb236fcaf957 rubygem-json-2.7.2-6.module_el9.7.0+245+447713a2.s390x.rpm 622c096b1af62649ee229d8976165ac4032b983d75f17e3b140dd2e857c26c77 rubygems-devel-3.5.22-6.module_el9.7.0+245+447713a2.noarch.rpm 7344931c790ba8cd1920edb78a83917b3a206ca173a6f94acfc62946f70bdaf8 ruby-3.3.10-6.module_el9.7.0+245+447713a2.s390x.rpm 73f07e8b6ac60c6296decc6485e6098f65b9eb0e56fc13c0dc65bb87b64b064d ruby-libs-3.3.10-6.module_el9.7.0+245+447713a2.s390x.rpm 779ed6c1da75d14d9b9baa43e4b94c8b370aa83702455496fd2a927906f4e623 rubygems-3.5.22-6.module_el9.7.0+245+447713a2.noarch.rpm 78b902511760bd5597f944666980219786fbeba2bd03d9ee0f8c5868d6f2111d rubygem-typeprof-0.21.9-6.module_el9.7.0+245+447713a2.noarch.rpm 7a531e2a991483f7ae81b9a84febcf945c5257f1b1253c88e47d3b68622ddcea rubygem-racc-1.7.3-6.module_el9.7.0+245+447713a2.s390x.rpm 82183c60e781a9863a157666b4c934b190c866de25ad79b3316ee7f0d09f41a7 rubygem-rexml-3.4.4-6.module_el9.7.0+245+447713a2.noarch.rpm 8594cf74ea2a221d9328f771e23e4a22f592308d8d7413e93689c7b0e7dae2e1 rubygem-psych-5.1.2-6.module_el9.7.0+245+447713a2.s390x.rpm 90857afdeb980d94d8ee6de0940308e56005a56baca7fad5459bcaac24fec84e ruby-doc-3.3.10-6.module_el9.7.0+245+447713a2.noarch.rpm 9657370a186549dcb06370d5ef6030626c2e91d8e06c1987044495cfcfc307ac rubygem-minitest-5.20.0-6.module_el9.7.0+245+447713a2.noarch.rpm 9a37fccce8aaff24967509f37e4b78256968a756e6938cfefaef821a6f7ae4c4 rubygem-test-unit-3.6.1-6.module_el9.7.0+245+447713a2.noarch.rpm 9d00a253bd956ca69d386458540220888d18bf8fd57be260051a620ba6deed56 ruby-devel-3.3.10-6.module_el9.7.0+245+447713a2.s390x.rpm a9fdaeb0a824120bab3a3fee3db0c9ff89fd3e13b61ab54bb43921ac67c4e025 rubygem-bigdecimal-3.1.5-6.module_el9.7.0+245+447713a2.s390x.rpm b4e1531890a1e256128ce7a95553acccaf2f6816c01e48588ed986f1ed6365c3 ruby-bundled-gems-3.3.10-6.module_el9.7.0+245+447713a2.s390x.rpm c606f9c0ca49716e50fc44edc219b6d0f22c25c92d271a5f70d6aa1ce2bf1ca5 rubygem-io-console-0.7.1-6.module_el9.7.0+245+447713a2.s390x.rpm c93c9af275e049b539ba9189dee594c9997fc32f361fbf03f1907d2f92a93d81 rubygem-pg-doc-1.5.4-2.module_el9.7.0+245+447713a2.noarch.rpm c96338e6d5222b04fcb018874d6c36073340306f6f05aad2761a5a9b3a5b180a rubygem-rbs-3.4.0-6.module_el9.7.0+245+447713a2.s390x.rpm d86258d62987892f8ada1cf32a052356cba87e0a347d1f8dc1266e806e1b6df8 rubygem-rdoc-6.6.3.1-6.module_el9.7.0+245+447713a2.noarch.rpm f27c9536fe103f69a6ca27f12139a22b69111c96831f3f37539974d6a093c068 rubygem-rss-0.3.1-6.module_el9.7.0+245+447713a2.noarch.rpm faacefab2813521921c9dd6d388f6947ce9f343a2837d0ea0a7a3ee4b34fb8b3 ALSA-2026:18039 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-bundler-2.2.33-166.el9_7.noarch.rpm 0bad7e94500c71e6f2c11ec476c339f0ddafcd02bc77bb0891e3eb404d39b9d5 rubygem-typeprof-0.15.2-166.el9_7.noarch.rpm 0f6f6adce4e4803fde9cf84205be92ce6919cc8dbd724024d3aa876a5f35cdf8 rubygem-io-console-0.5.7-166.el9_7.s390x.rpm 1068b14d551aab287b4717c21829eb76487f1f9ad652ebce60d728ee5f4da6d5 rubygem-psych-3.3.2-166.el9_7.s390x.rpm 113d36aa86be79c041823fe0d955e5a11b9946e287909dc757c8346b2a1e1c47 rubygem-rss-0.2.9-166.el9_7.noarch.rpm 1cf0717648f5441f49fc6c2598299ac275537634defac4d7943276ee566b861a ruby-libs-3.0.7-166.el9_7.s390x.rpm 33d5285a82e428c678b37029b19c30f08351da128096c4ad326c29e97d5ffb30 rubygem-rexml-3.2.5-166.el9_7.noarch.rpm 3989e6c4555a4385593f94d4fae489f9d6ae3515be7ef06afafbde114588b7a1 rubygem-minitest-5.14.2-166.el9_7.noarch.rpm 45d59869d26fcebf94fc2ade65cb64732bcc1b19468ee49b58e380342f2f39c6 ruby-devel-3.0.7-166.el9_7.s390x.rpm 50e029dc253bd2c4b9debac2cc0a319574c9629e9c5323508a32c14bab9cbd71 rubygems-3.2.33-166.el9_7.noarch.rpm 5b24cefbeb265e4b8621ba6127afbd64590fb0ba3e41f5c429ba47ba136a3de2 rubygem-rbs-1.4.0-166.el9_7.noarch.rpm 61b1fcbffa33d6ed20973cb8bbd7a202ce2ffa6a1c43d1ccb03d3cc84909b241 rubygem-power_assert-1.2.1-166.el9_7.noarch.rpm 73e8ba3232340a72fb3ae8bac01abe87dfc1ed66c3b3fe693c1682bc1903c553 ruby-3.0.7-166.el9_7.s390x.rpm 8972cf29cb3d54411035a643fe29abf0510637f8acb6dbfab759f7c3c9467bbd rubygem-irb-1.3.5-166.el9_7.noarch.rpm a20166c49d0d0cfa0895dc179a76debef1739f348a0ba7f79ad60107584f4781 rubygem-test-unit-3.3.7-166.el9_7.noarch.rpm ad09b55e91cd3e6cf722b41ba82f0626fd20194681a72e4da8035ae7b0f65bb1 ruby-default-gems-3.0.7-166.el9_7.noarch.rpm b678874533eaf1ade4c0f4977833dd1cda16fe48195474c53222a156f61724c1 rubygem-bigdecimal-3.0.0-166.el9_7.s390x.rpm b7f75e7dd5085ed5e2d825c5981a1e5b88dc6f15a18ccf21506f7c8161a98018 rubygem-rdoc-6.3.4.1-166.el9_7.noarch.rpm cefe8f2699ba0797215393620138f5d577562fa81087857e2fb32c300d219837 rubygems-devel-3.2.33-166.el9_7.noarch.rpm e5fc18ba3cf07e01ab7c8afacdea1e9d131feb18ba7325a66c2cbc504f61a03f rubygem-json-2.5.1-166.el9_7.s390x.rpm f2e2edc1b39bc56295a8866d21a0b5d2cd7b7cf09d0108c4f06a8e0116e8cd92 rubygem-rake-13.0.3-166.el9_7.noarch.rpm fac2f0a3f5c89d96bb269e263a4e6685a190cd8f2f3115ea231d878640464a53 ALSA-2026:18587 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rv-5.14.0-687.5.1.el9_8.s390x.rpm 244587cb1f09dfb7bf697f7cffa8c8685b7f57f2e7fd187f6c62499e47ed1fac kernel-devel-5.14.0-687.5.1.el9_8.s390x.rpm 38e5bf40ad702006111598a994ac00d4949aed7f52533bfe24095f139b8af925 kernel-headers-5.14.0-687.5.1.el9_8.s390x.rpm 42fbb21434a10b84b0cd6a9d4024a77f6166f2094cae5aecd6367fdc8a6a02fb perf-5.14.0-687.5.1.el9_8.s390x.rpm 74ce0e2ea9041d0622817fd0172a9ee0f929ef0b57fa21cadf75e3b167384327 kernel-devel-matched-5.14.0-687.5.1.el9_8.s390x.rpm 77d20db90e0b6c984fc751b2d0458d2464fe3ef3b7a30c8b5a186f6b6b97a6af kernel-debug-devel-5.14.0-687.5.1.el9_8.s390x.rpm 8eebf45ff14c7f29d10d6469f055308f2277adadfcfdbf5d5be870a80429e876 kernel-debug-devel-matched-5.14.0-687.5.1.el9_8.s390x.rpm 9a27e9c32624664943d6429d49a5a8da85b9cfe39826c52333c356533f5a4be1 rtla-5.14.0-687.5.1.el9_8.s390x.rpm a0d1e74ac072e855cd05cc643ab7dd18b8ed1f56744946e3f41edc6cc088088b kernel-zfcpdump-devel-matched-5.14.0-687.5.1.el9_8.s390x.rpm be5f8818dae4fa63c9c84d8cdab33ff59aa54c3c1c88c09378d834ddd4b6af47 kernel-doc-5.14.0-687.5.1.el9_8.noarch.rpm f4e680a298e381dcaa4be5f6443e6856c12f0f9127e6d1581b8c2a2d471c05fb python3-perf-5.14.0-687.5.1.el9_8.s390x.rpm f939ad2544c14c5ecfb9b1244a90db63c34f1c6ac8bada9f16229f562e7d471c kernel-zfcpdump-devel-5.14.0-687.5.1.el9_8.s390x.rpm f98c1b03ee3bc2e2e892853fcfba2a0acd001bab824be714c5e341bd64a3f239 ALSA-2026:18597 Copyright 2026 AlmaLinux OS 0 1 Low

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * networkmanagr: NetworkManager File Access (CVE-2025-9615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default NetworkManager-config-connectivity-redhat-1.54.3-2.el9.noarch.rpm 01f5c57c79bb6ffd3128517e20cd3eeff773bc2820f7cbd70529406b7a827c80 NetworkManager-dispatcher-routing-rules-1.54.3-2.el9.noarch.rpm 7864b48232b85fea459582304b07c20c72d8da86f46d384c41cb5920a2e183ee NetworkManager-cloud-setup-1.54.3-2.el9.s390x.rpm 9634e8876e4535c7e784117e75422a4dc230907b6882c488e06cc60a834a61f7 NetworkManager-ovs-1.54.3-2.el9.s390x.rpm c31f152ff85cf080d39ce7d14c860ee7bb39449da2f76b06feca160acf2da68f NetworkManager-ppp-1.54.3-2.el9.s390x.rpm c46382e0246684635f9a80dad71fbf3aac53e7543516339545c08e6b475fb849 ALSA-2026:18599 Copyright 2026 AlmaLinux OS 0 1 Moderate

p11-kit security update

The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): * p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default p11-kit-server-0.26.2-1.el9.s390x.rpm 36c8e1e162cd8e70c28e633d6c859c6d4b0bd4182637644ebb02d6503d73e0a4 p11-kit-devel-0.26.2-1.el9.s390x.rpm f6beb3e1530ee7a711100ac51f4bed7594781498559530d027e9d1ca11574a8d ALSA-2026:18683 Copyright 2026 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: Double Free Vulnerability in libssh Key Export Functions (CVE-2025-5351) * libssh: Use of uninitialized variable in privatekey_from_file() (CVE-2025-4878) * libssh: Write beyond bounds in binary to base64 conversion functions (CVE-2025-4877) * libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation (CVE-2025-8114) * libssh: Memory Exhaustion via Repeated Key Exchange in libssh (CVE-2025-8277) * libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966) * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964) * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965) * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967) * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libssh-devel-0.10.4-18.el9.s390x.rpm bce951983a08a23ae8cf9294e6b8790ecaea754005a0291fb065e524553d563a ALSA-2026:18748 Copyright 2026 AlmaLinux OS 0 1 Moderate

libvirt security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * libvirt: Denial of service in XML parsing (CVE-2025-12748) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libvirt-daemon-config-nwfilter-11.10.0-12.el9_8.alma.1.s390x.rpm 0ba90173455267195286de2449af68831b0411efc1464c0f5825fa93711aa3a6 libvirt-11.10.0-12.el9_8.alma.1.s390x.rpm 11bbcfb10f84df9188574d2dc2b99598fa73bed55328146695c2d17234e2c7f7 libvirt-libs-11.10.0-12.el9_8.alma.1.s390x.rpm 1b0e312388add85ee9efb7d88fccae1b97c4a2704b8adaca4caa832fd980d68b libvirt-daemon-log-11.10.0-12.el9_8.alma.1.s390x.rpm 2a513cdac61d26d45553a72489117c243c9755214a273c0814b2acd3ea80a64f libvirt-client-qemu-11.10.0-12.el9_8.alma.1.s390x.rpm 2f9fffb3c274c1d98079dfa9483ff160311e2efb5c99d0cc581523b25ef1b4f1 libvirt-daemon-driver-storage-scsi-11.10.0-12.el9_8.alma.1.s390x.rpm 303a0cf1e51b69d7a3241c34e6531cd009837a1e7ac8367ca3bfc9d34de6bfd8 libvirt-daemon-driver-nodedev-11.10.0-12.el9_8.alma.1.s390x.rpm 4fb74ee8c66c01471764f59e7b6996e052433dca2250e354ab43ba2c08e48c3b libvirt-ssh-proxy-11.10.0-12.el9_8.alma.1.s390x.rpm 53bb022663d59d9fc7a0a627e0215643ba96e6445b43d2be15785183bec7f7a4 libvirt-daemon-kvm-11.10.0-12.el9_8.alma.1.s390x.rpm 58bd0291a9fce3632eae06a23818a4d9987e690d39b73d7f7df05e507c82cd65 libvirt-daemon-driver-interface-11.10.0-12.el9_8.alma.1.s390x.rpm 6fee76e068aabe8e51c01c589d15e0c02e17fd2ec4435464343468f560a10cee libvirt-daemon-driver-storage-disk-11.10.0-12.el9_8.alma.1.s390x.rpm 74cf58303eb8b462b19b20b702353da0630444f17a174f5185d3b190a15feff4 libvirt-daemon-common-11.10.0-12.el9_8.alma.1.s390x.rpm 77bbba189fb6853e41f439b3409da677463a6bd7027632f7b7ef85e0e1e85e70 libvirt-daemon-proxy-11.10.0-12.el9_8.alma.1.s390x.rpm 7e85111fb722129a2cf10203ec951836428cf6b17fee8cef4eee563b9eef360c libvirt-daemon-config-network-11.10.0-12.el9_8.alma.1.s390x.rpm 822ceeecd1f2a19e4c159f34eb7171dc85d20147f8855e4beffe88f380d4cde6 libvirt-daemon-driver-storage-iscsi-11.10.0-12.el9_8.alma.1.s390x.rpm 94667bde0047cbaac91fe4643e3d4b04f525d6c7dadc997912070fbe8c6f45d4 libvirt-daemon-driver-secret-11.10.0-12.el9_8.alma.1.s390x.rpm 953a52d5669739886d3748b736f961e26d7682af37c49557345a7e9446c4250f libvirt-daemon-driver-storage-rbd-11.10.0-12.el9_8.alma.1.s390x.rpm 9b6fe89531d035caf1ac1f77944485f308692a02dfaaa005052e7c4e863f71fd libvirt-daemon-lock-11.10.0-12.el9_8.alma.1.s390x.rpm a0d69abcda05c663f32a5eb53a4309448d455e8e74ba86835782890f39179161 libvirt-daemon-driver-nwfilter-11.10.0-12.el9_8.alma.1.s390x.rpm a4669bc7770b448a6420dffe9830b8e503d8095925094b6284088ec6a2349010 libvirt-daemon-driver-storage-11.10.0-12.el9_8.alma.1.s390x.rpm b22b14676bbb75992ac85c0abc29c89c3f69b446218870b7343bb1ec6ea02223 libvirt-client-11.10.0-12.el9_8.alma.1.s390x.rpm b4f6dac9d3882099feeca0f3b58fc2606a50342ef3444cef25b390c2809242ac libvirt-daemon-plugin-lockd-11.10.0-12.el9_8.alma.1.s390x.rpm baf43feaec039fe7cab2f97a508fe829ee883b81e58cc523b16e01c0fe55dbd8 libvirt-daemon-driver-network-11.10.0-12.el9_8.alma.1.s390x.rpm c51d14675f79f7023cb9125f45db252b1e49ffac5a2338664cdef9e295101e95 libvirt-daemon-driver-storage-logical-11.10.0-12.el9_8.alma.1.s390x.rpm d1e19bc829c73ea7483e45db28ef56f7dab9baff741179d15e08762944b6fbcc libvirt-daemon-driver-storage-core-11.10.0-12.el9_8.alma.1.s390x.rpm dc01adc28756e600e7a50fc6d1487f503aba53e3128a07fe4819c849ba6ee4a4 libvirt-nss-11.10.0-12.el9_8.alma.1.s390x.rpm e304d7fe265145f79292d902116cf0de36074efa8c6523fe92b73f7d12bff720 libvirt-daemon-driver-qemu-11.10.0-12.el9_8.alma.1.s390x.rpm e65528dd7af6babcaf02075e888b5642298f176cb41bfd2fc181ce4ac3f34e00 libvirt-daemon-11.10.0-12.el9_8.alma.1.s390x.rpm eee9d8827674e8dcdcb274a7d18cea68ae622e8735bb76c3fe4ca5369904da6f libvirt-daemon-driver-storage-mpath-11.10.0-12.el9_8.alma.1.s390x.rpm f746d24beafb3a3702fb1f07f7c3987fe300946aae084c7e4355d087a2b2e4f4 ALSA-2026:18772 Copyright 2026 AlmaLinux OS 0 1 Moderate

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.alma.1.s390x.rpm 273c71c819b08b0cd98c48be0c4f6f20e47b4554b30dddd039bc26b6de5d4cef qemu-kvm-block-blkio-10.1.0-17.el9_8.alma.1.s390x.rpm 2d3769016dfd5e99e7ddd5b00d3a951b8fb484a32f04289799819f012a53ef68 qemu-guest-agent-10.1.0-17.el9_8.alma.1.s390x.rpm 38674061e372cd2606de636129d521a09a15de1fe07c4f7d1a570e10fa1a904c qemu-kvm-common-10.1.0-17.el9_8.alma.1.s390x.rpm 41c6fda078eb9b6d0c3f265c4636eddcdde34b96f021bf5c846a00e3727153b5 qemu-pr-helper-10.1.0-17.el9_8.alma.1.s390x.rpm 424307d8831f78742a47dbdb7b005f852a928193ddac7ea60b79dfd926e6654c qemu-kvm-tools-10.1.0-17.el9_8.alma.1.s390x.rpm 428c87390fff4317a9983c3d4db28cc3390d9acdea97359e5f3c55b277933d4a qemu-kvm-audio-pa-10.1.0-17.el9_8.alma.1.s390x.rpm 466fa7a147c470757954ab34b365993cd3ec998ac1068028f0fe422d7eb7261c qemu-kvm-block-rbd-10.1.0-17.el9_8.alma.1.s390x.rpm 6dedae0c542c662e0da38907a28029168451a716241c497f3dd7bfb944e7251a qemu-kvm-block-curl-10.1.0-17.el9_8.alma.1.s390x.rpm 7659839427cb369a70cdfd0824ccb1e87e844ab4a3ed296acdadec88e711cfd3 qemu-img-10.1.0-17.el9_8.alma.1.s390x.rpm 863cc042b11aa5a848583d7689d992fcd45f39f6a3d63b912ba44dcbc778fd04 qemu-kvm-10.1.0-17.el9_8.alma.1.s390x.rpm a85f439fdb15bf7c3255754880913e3564cf4c08dd3e6ff96b23f9e9ce665e7f qemu-kvm-docs-10.1.0-17.el9_8.alma.1.s390x.rpm ae4a9cf4e49422387072f911ce010b9fe54cae0ca197ec7a1aa9295d43cca239 qemu-kvm-device-usb-host-10.1.0-17.el9_8.alma.1.s390x.rpm d035517ccaddf30325464b311ec439d5495c95104e74273ec26ad7a454439c2a qemu-kvm-core-10.1.0-17.el9_8.alma.1.s390x.rpm d555f4d730f6741ce5459e0e1151f9580ab7cf8416e31563e1e9496a3943929f qemu-kvm-device-display-virtio-gpu-ccw-10.1.0-17.el9_8.alma.1.s390x.rpm e787af7fafc6fb5eecce23903888143b1f12ab6353dfe0be5bfbebcea0c762e1 ALSA-2026:18786 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind-license-9.16.23-40.el9_8.1.noarch.rpm 0ff25c108b9f94989d77bba0c7fd7cde329cdab2e2cc257b21d372ba8067d492 bind-dnssec-utils-9.16.23-40.el9_8.1.s390x.rpm 1cbf5bad351afa6f183a6515f174aa0f1c753a9eebef950d67970979031ad09c bind-dnssec-doc-9.16.23-40.el9_8.1.noarch.rpm 97fc2609538dcca589fa85ba93ac2103d94f7e913df47a094d87089f05a623b4 bind-libs-9.16.23-40.el9_8.1.s390x.rpm b9e326a1b5177913440da4f2d4f539d619f5df826716269164bbc1361539b455 bind-9.16.23-40.el9_8.1.s390x.rpm d663d1914f1823481a77e7fd3e8510f52a35923cb8d8abe48ad7750456e0cb07 python3-bind-9.16.23-40.el9_8.1.noarch.rpm e22d04a5caefcca626811d95c7c8d88a3bbf382d27188cf6131a9888927646a5 bind-utils-9.16.23-40.el9_8.1.s390x.rpm eee08a109413baf973ccac17609f763869a15df5a638f912649ce9a75b7efae9 bind-chroot-9.16.23-40.el9_8.1.s390x.rpm f397e9ad809b13f5e0fdc0f85790bee003b3c4c27218cf872067f44df99e9e7b ALSA-2026:18824 Copyright 2026 AlmaLinux OS 0 1 Moderate

luksmeta security update

LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux. Security Fix(es): * luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libluksmeta-10-1.el9.s390x.rpm 09200652498da4c328b2b297b08ee965f3c76f5c9a2d3d8ee3767e9744ac72fd luksmeta-10-1.el9.s390x.rpm 191cc4f4d70912844a48b336477d79a7b0fcc2166abcdd103ddc5408ea4dc82a ALSA-2026:18913 Copyright 2026 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default containernetworking-plugins-1.9.0-2.el9.s390x.rpm f3925f5ff3cce69d9981d25b7d0421efbbb7afa377e59555a9c02687d11b734b ALSA-2026:18931 Copyright 2026 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: DNSBomb vulnerability (CVE-2024-33655) * unbound: Unbound domain hijacking via promiscuous records (CVE-2025-11411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default unbound-libs-1.24.2-2.el9.s390x.rpm 1112baf6b69c73ab279d757f33891a310d63a60f653713be0c55711d489adc1f unbound-dracut-1.24.2-2.el9.s390x.rpm 565e250fb2a3346cbc1ed58254339163dec7dfb53dfdbb6eb307ab07a448055e python3-unbound-1.24.2-2.el9.s390x.rpm 968fb3bf17d8e2477b17f294326b155094a87ac4b107a3d0e1737e59779bda15 unbound-1.24.2-2.el9.s390x.rpm 9881e782cc85e24e10b95f4797ff8fee258730b6d6425b606b82f3cc18390f36 ALSA-2026:1903 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default fence-agents-eaton-snmp-4.10.0-98.el9_7.5.noarch.rpm 0a72c372ca1bbb9b4f95c5af019513c2377bc5613d0333e1dfb4ee1f79901d07 fence-agents-virsh-4.10.0-98.el9_7.5.noarch.rpm 0ca6c483d555044d94bad4656dd2584513dd6c1011f9865c5d1d724596edcc01 fence-agents-amt-ws-4.10.0-98.el9_7.5.noarch.rpm 0f363b6c118195bec277e0e0776be4e2743e4a1c518aed417398006c449b3058 fence-agents-ipmilan-4.10.0-98.el9_7.5.noarch.rpm 17376c12166df49ccb3e4bb46c6703956700a060e56b1fb3c08526725e6abf66 fence-agents-ipdu-4.10.0-98.el9_7.5.noarch.rpm 1c24a03341e5774f81f6d5b11513e7201d7460a1da4607aa9ab80f5ef1a2ab5a fence-agents-apc-4.10.0-98.el9_7.5.noarch.rpm 1d31a6e8ac91ac4bf0d2bcc2854594412761dbb8a39fca91bb9fa4a6f7f419d5 fence-agents-eps-4.10.0-98.el9_7.5.noarch.rpm 1d7eb98f49129ee32883e57f1985e57ba60f0145505a4eeae041b45d8debacd3 fence-agents-zvm-4.10.0-98.el9_7.5.s390x.rpm 1e3dc6e5a64e37736d507c25396e58ef4cf091e8d5479fc539fc549f27b46e5f fence-agents-redfish-4.10.0-98.el9_7.5.s390x.rpm 29d21a304cf0f2f3602f8222898fe96ec7f733dcf30063c6511e5c3cd5ce88ff fence-agents-cisco-mds-4.10.0-98.el9_7.5.noarch.rpm 2bf09ee7a5ace98775ad8c7197443dfc2a0cc415c3b13632c5d4365251fce6c2 fence-agents-ifmib-4.10.0-98.el9_7.5.noarch.rpm 2c7dc7f2ddaf97a2216a953e4ba52c1ad623563fe55fa07aac96aa581aeb1a17 fence-agents-emerson-4.10.0-98.el9_7.5.noarch.rpm 3262dab3facca2eadf80d3b54ba7484be542c59b0e35807bd216c0356718c3dd fence-agents-intelmodular-4.10.0-98.el9_7.5.noarch.rpm 40069141238412567b9e39ba25e4cd746439b9e34ac16c367ac103e20e7fe4f5 fence-agents-rsb-4.10.0-98.el9_7.5.noarch.rpm 434603eabe33f6851df7a710f6d85020be71679d12887158d462518c7d8567c2 fence-agents-rsa-4.10.0-98.el9_7.5.noarch.rpm 44d997f2e65c5d3aafa3c2ea7fa094479a02facb99532654da72412a24e60d08 fence-agents-lpar-4.10.0-98.el9_7.5.noarch.rpm 44e8e802710f69ae51e86aa413546ae9adf0e021d7251b3fa3de9e3a920fad97 fence-agents-hpblade-4.10.0-98.el9_7.5.noarch.rpm 471a83092c68d9ffc59544d3826ad79a2bd9876ff2525ac247d61c1887a0ec88 fence-agents-heuristics-ping-4.10.0-98.el9_7.5.noarch.rpm 4e1255b0fa64032f791781dc3d613ea046da9feeda4e5877f210dd4e2a570f8c fence-agents-drac5-4.10.0-98.el9_7.5.noarch.rpm 54888794665b03a1d0c8df1cf24a94f5589bdb5e87ab527df09546890888e92e fence-agents-apc-snmp-4.10.0-98.el9_7.5.noarch.rpm 5868830b44bf20352826b6006dc72f5677371f2a9e609c307dc4c1ae43b17716 fence-agents-vmware-rest-4.10.0-98.el9_7.5.noarch.rpm 59a8eaaafb8e63ecd813748131e5878197c7e76b09ab61a04e5feb8ea333a14b fence-agents-ilo-mp-4.10.0-98.el9_7.5.noarch.rpm 6bed968d59090b36dc78914af7090fab29ed62f4adbd76a4ed47a36f7563949b fence-agents-ilo2-4.10.0-98.el9_7.5.noarch.rpm 71225d333a5cc5071f7e59dac81315fdc9749d8280cf5c56aeca8456b40a8884 fence-agents-brocade-4.10.0-98.el9_7.5.noarch.rpm 9149ab0f779704f4e097e688d48b8c5b82b128dadf3c42e8f7260593be83cac5 fence-agents-ilo-moonshot-4.10.0-98.el9_7.5.noarch.rpm 97d97d9f27da5e13a49b081fc489793a2dd3e51da0bf34e6a3a700f9e6ee08a8 fence-agents-mpath-4.10.0-98.el9_7.5.noarch.rpm 9e4b46f8ead566419123cacde5f268d1654a690c508949e37a562dcf8ea1f04a fence-agents-all-4.10.0-98.el9_7.5.s390x.rpm a43e8f4923d538365f67f8827f148d30654dfc5a26740171f8206083ce08cf9e fence-agents-bladecenter-4.10.0-98.el9_7.5.noarch.rpm ac8fb7835f4e1070c33c6f0480b43ccf5f7677840c5d40822e663c2f4d762b31 fence-agents-vmware-soap-4.10.0-98.el9_7.5.noarch.rpm add0c1df0dad1d5bc7fd6b56e9a6f81d538d8974d60ee6eac32cc7e2c3360425 fence-agents-sbd-4.10.0-98.el9_7.5.noarch.rpm bda2bf3ca14b8bac6dd8f1e5eb24f8c1884c46c263df37e67933865d95b4d390 fence-agents-common-4.10.0-98.el9_7.5.noarch.rpm bf90ae0ab6d11bae83d21aad9c9d75ac27cb6ac5108efd490f943358f268c02f fence-agents-nutanix-ahv-4.10.0-98.el9_7.5.noarch.rpm ca03edb03a0e986bc79abaaf6ebf5426cc2926c0dbe760b6b06ec835c0c43740 fence-agents-cisco-ucs-4.10.0-98.el9_7.5.noarch.rpm d0803571c5f3e49830629b6f49f57bcb54d7f7ed6baf5a75290d209bfa406b33 fence-agents-scsi-4.10.0-98.el9_7.5.noarch.rpm d53a5f95a2bf1fe31530ba0b78f5c01803901040474a837a2d4223ec4382188c fence-agents-kubevirt-4.10.0-98.el9_7.5.s390x.rpm d5e180390187942627f2b2a67d4651a26bb81ceaea8e4f9033c1dea01aca2bae fence-agents-ibm-vpc-4.10.0-98.el9_7.5.noarch.rpm dc9900dc246c7d8543abec1e32fbaff6a408656ab0f7eaeb9a7fbbd5bbd855a4 fence-agents-wti-4.10.0-98.el9_7.5.noarch.rpm e113c4f2542bbc77d731a018ccbbb11b2727248c9e986a14454d64d063eea811 fence-agents-kdump-4.10.0-98.el9_7.5.s390x.rpm e19413cb538c8ae1e093db30ff064b2255db1b5d84f0e89d48dfbe575ca8ffe8 fence-agents-rhevm-4.10.0-98.el9_7.5.noarch.rpm e2b28924710f143cbea0a4f91d2d6aae8bb98ebfe9c63d4362f36e950948bac8 fence-agents-ibmblade-4.10.0-98.el9_7.5.noarch.rpm e40933d29a19ff92b72f339727336904bc931454a37183fcfb4cfda6fbc8a90f fence-agents-ilo-ssh-4.10.0-98.el9_7.5.noarch.rpm ee7fdf1dbbf04e60b16b6c443705789cca28b260f685e2f38233c3f5c88348f9 fence-agents-ibm-powervs-4.10.0-98.el9_7.5.noarch.rpm f5dc4995ef565b16e60151916f7570957d4bfad840ea52b44deb225ef5483ee1 ALSA-2026:1908 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default opentelemetry-collector-0.135.0-3.el9_7.s390x.rpm 39670cc1dc265ba62f6b0a63f24ac38ab0cba0e2913dbea4f7bdb8cbfccb0db3 ALSA-2026:1913 Copyright 2026 AlmaLinux OS 0 1 Moderate

util-linux security update

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fix(es): * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-libmount-2.37.4-21.el9_7.s390x.rpm 1ec7957406ae57d4892e1bb7a5f2a82cf77fc4fb29eb419b98fa785ae7cdb4b2 libblkid-devel-2.37.4-21.el9_7.s390x.rpm 55737475ae98f8caf4215afcc56d8f95bdfa42a5326c9ef835352699820f4be9 libuuid-devel-2.37.4-21.el9_7.s390x.rpm 98067b4c2b5eeba8835af1379f07143b52fb2a288f59b7de1daa4f4e3f1a630a libmount-devel-2.37.4-21.el9_7.s390x.rpm a31bfc2d5767a3fa59c49c32f6f84597a686c8d56370d5a36ab011e50c22f306 uuidd-2.37.4-21.el9_7.s390x.rpm cd6cdb5eafd4c89362d4b0f4a88309232f29adfb1268f679a584f8c27b62601b ALSA-2026:19173 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default podman-tests-5.8.2-1.el9_8.s390x.rpm 20d2089d7bb3d12de280adae2053a9564a17d87affceeec0ce5f8a1af1400e86 podman-5.8.2-1.el9_8.s390x.rpm 5c168d4598cd2cf2337ac4577cf4fce47e07e04f1299d12c4dbb219a5276cba2 podman-remote-5.8.2-1.el9_8.s390x.rpm 6fb9d71a06b09f1316b5613339fd7a56b25b505a447ba7dc645b55b4beefa8e4 podman-docker-5.8.2-1.el9_8.noarch.rpm bf701b10c638d2f32f075d9b31a079ab7a604d3d2fe51c55ddf3db2ba55027f6 podman-plugins-5.8.2-1.el9_8.s390x.rpm e5c4a42f9a299a2615dd4df8cdf808794c8e249ac000a8098c0fbc74109ffa52 ALSA-2026:19175 Copyright 2026 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.11-tkinter-3.11.13-9.el9_8.s390x.rpm 0715ca15f178a0eec758909b50296ada31733fee627d6054cc8101bdd147d299 python3.11-3.11.13-9.el9_8.s390x.rpm 56e5c79bcca60db5156cd87a7ab8d0195990aa12bcc085c5b313772b814c33b6 python3.11-libs-3.11.13-9.el9_8.s390x.rpm b668d6195da71ef9e3a99209fd3e427d452629a53cc5a8b589324a17aebf0fb9 python3.11-devel-3.11.13-9.el9_8.s390x.rpm dc4f9d8e7257476a6a89f23aa3d32f63146f9ea02603f0a4e1ddf91df7f033fa ALSA-2026:19176 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865) * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297) * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644) * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224) * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) * python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-libs-3.14.4-2.el9_8.s390x.rpm 089e3c8d4793aa1ffe084f95f0fc0aec0111bc08af3dd12bf56e5ae849bd16ab python3.14-3.14.4-2.el9_8.s390x.rpm 095dde24535ce9434aa4833215687f2bc7c071e95fc0dc9f9e56e6323fa435c3 python3.14-tkinter-3.14.4-2.el9_8.s390x.rpm 8a23d6469e1f94cfed8ab5da87f6c2579877f6bffaf0c4bdeb3621c902566c30 python3.14-devel-3.14.4-2.el9_8.s390x.rpm e1d9affab2efe49d0effca2457fb471732e8aa494cd05459496d28f68dda1a20 ALSA-2026:19177 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375) * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075) * cpython: Out-of-memory when loading Plist (CVE-2025-13837) * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282) * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672) * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297) * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644) * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224) * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.12-libs-3.12.13-2.el9_8.s390x.rpm 67afe578428483efcfa57f447703585b576947bd1adc7d086c837d8fec55606b python3.12-devel-3.12.13-2.el9_8.s390x.rpm 748d22449ab57c32c9a3fd0063a6b1b96e5de80849352033c734ff6b0cc03ad0 python3.12-3.12.13-2.el9_8.s390x.rpm 807a914851a2c2795cfeafcdfb2d0aada7b40b1f7ee718de3c9684bb7c73696f python3.12-tkinter-3.12.13-2.el9_8.s390x.rpm 9e990be3ec42c7e1980b9f9f9c02e8c729aedbdce55236319686ec70bc0f786d ALSA-2026:19178 Copyright 2026 AlmaLinux OS 0 1 Moderate

crun security update

crun is a OCI runtime Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default crun-1.27-1.el9_8.s390x.rpm 47931ab7e3219b32de3d31ff92a190f9298c35dbe7c62a4d6688785f024d6882 ALSA-2026:19180 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.s390x.rpm 3546a9166a2ae473660fadaca6c55242e55d22d247b1b8b0557a41965fc6060c gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.s390x.rpm 39102628bd3c86716bcad3c15e3995ad320690880cb6b3f689b8f3296d7417b4 gstreamer1-plugins-base-devel-1.22.12-8.el9_8.s390x.rpm 50cbb393f30a9ed3d99f26d14ad770eb5d6c01dfe8de2553be4cf05bcdb7fb41 gstreamer1-plugins-good-1.22.12-7.el9_8.s390x.rpm 69a08cddb312ecd357627dacabc42412a992b75b17208157393447dbdc97643b gstreamer1-plugins-base-tools-1.22.12-8.el9_8.s390x.rpm a761d7493603b3ff9b28def8f4187764da73e3c3a0013bdf449274862be7b833 gstreamer1-plugins-base-1.22.12-8.el9_8.s390x.rpm d0b7a415c2cd179dd65b9f5692f0fde461fd38a9fe013d5f95fb136b0479749b gstreamer1-plugins-bad-free-1.22.12-7.el9_8.s390x.rpm eb206c448dd7ef317eebe408bbf85b090d805083dc8eae92ab500a99dc4f6c75 ALSA-2026:19181 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default golang-tests-1.26.2-1.el9_8.noarch.rpm 08e67e53fc3ce9c0ae96ee93a5e4ec66f4e5a3a2ffed7a0f9616d7670c9ee570 golang-1.26.2-1.el9_8.s390x.rpm 120d4e87b1532dc62baa6747050cd96a6909d55ea8d4224f808abfe6878117f1 golang-misc-1.26.2-1.el9_8.noarch.rpm 2b165165493a8b8fdd5580a8b1fb21b00df7d36596374379549a4d569feb2ac1 go-toolset-1.26.2-1.el9_8.s390x.rpm 501d157bd013edb756ca58eba4e86b8daf2ccecef218ba7b984bd47a5958ca6b golang-race-1.26.2-1.el9_8.s390x.rpm 67b94e6f1ebe6019f16a8c8e2e4c7bb06d632938f5395d48206bf5520ddd97e9 golang-docs-1.26.2-1.el9_8.noarch.rpm c6f64db75f56c9be80e9d422eff77fb9d16eb9d3573825deeeef6f21aaba86fe golang-src-1.26.2-1.el9_8.noarch.rpm eb5fa14bbbf8d032e4aba23b5f3e28e92d877365ba212ca2df8ecd70381ea7ff golang-bin-1.26.2-1.el9_8.s390x.rpm f768e310d3c9193c52c852d4d7cb704820a1f548c72beb8bef0b54b79d5cfc02 ALSA-2026:19186 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default buildah-tests-1.43.1-1.el9_8.s390x.rpm 32f8e719af4a5079ee974b4ff9b8c55702a823f79e726bd3d33da3de863835ad buildah-1.43.1-1.el9_8.s390x.rpm 4d9d7612bf0de926d70c25f0e2a5bf1f6ed42bde22d857f6eceaa1ba33db8c25 ALSA-2026:19187 Copyright 2026 AlmaLinux OS 0 1 Moderate

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default compat-openssl11-1.1.1k-5.el9_8.2.s390x.rpm 72949cf38d344541fb79edd340a31ce047e67ee05fe4a5a3e682e6de8e095814 ALSA-2026:19189 Copyright 2026 AlmaLinux OS 0 1 Moderate

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado-python: Tornado: Denial of Service via large multipart bodies (CVE-2026-31958) * tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments (CVE-2026-35536) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-tornado-6.5.5-1.el9_8.s390x.rpm e437acb6608e9cfbfa8c737d0f5c28137baaa707cf47d02b5b2fb1764158c514 ALSA-2026:19197 Copyright 2026 AlmaLinux OS 0 1 Low

python-jwcrypto security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens (CVE-2026-39373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-jwcrypto-1.5.6-3.el9_8.noarch.rpm e66316079d3883be28953443b67665f3a7fceb807b84eb38d480e8b6c6c2591e ALSA-2026:19200 Copyright 2026 AlmaLinux OS 0 1 Moderate

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default corosynclib-3.1.10-1.el9_8.1.s390x.rpm c5a5cb1aad9cee910eceda6f43c44c5d3ee94485837104470e7cba8501d6f7f5 ALSA-2026:19206 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43213) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43214) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43457) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43511) * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-46299) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20608) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20635) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20636) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20644) * webkitgtk: A remote attacker may be able to cause a denial-of-service (CVE-2026-20652) * webkitgtk: A website may be able to track users through Safari web extensions (CVE-2026-20676) * webkitgtk: Processing maliciously crafted web content may bypass Same Origin Policy (CVE-2026-20643) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20664) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-20665) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2026-20691) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28857) * webkitgtk: A malicious website may be able to process restricted web content outside the sandbox (CVE-2026-28859) * webkitgtk: Visiting a maliciously crafted website may lead to a cross-site scripting attack (CVE-2026-28871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default webkit2gtk3-devel-2.52.3-1.el9_8.s390x.rpm 8f5db4111c6e2dda11bfd2ead6af740c30dd3374a3c520fd579264aa1eb7f7c6 webkit2gtk3-2.52.3-1.el9_8.s390x.rpm 9915542be821f8d05ca3c49201b5e190f4e3153bbc89354bce61c5bd4b768d02 webkit2gtk3-jsc-devel-2.52.3-1.el9_8.s390x.rpm e0df4d6ada7f4dd92614f437db40e111e8335ff3ea9247e39cd76fde7e483f61 webkit2gtk3-jsc-2.52.3-1.el9_8.s390x.rpm e8ebc616b883c5f6e93a5e68c27646760f0b5a69478a23dd1b70197ca5729cc3 ALSA-2026:19208 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default freeipmi-1.6.17-1.el9_8.s390x.rpm 04aeb73fbd11e171a38fb2940ca72a3613b7eb185e9d93c6e9986e7d816eb225 freeipmi-bmc-watchdog-1.6.17-1.el9_8.s390x.rpm 704821b2f499da78c037da3a17fc157a459b887589434ccb71126e1234d5b7ea freeipmi-ipmidetectd-1.6.17-1.el9_8.s390x.rpm ad68a53be8e250b07b2d6071820f30f4e88a82abebb020c5cda8c13597e5e61c freeipmi-ipmiseld-1.6.17-1.el9_8.s390x.rpm ec41b0ce6f8b08f586fb1901bf5ea8e805445ab051946228ecd3a8163de19065 ALSA-2026:19210 Copyright 2026 AlmaLinux OS 0 1 Important

gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gdk-pixbuf2-2.42.6-6.el9_8.1.s390x.rpm 6749eff1bfdc9057f48c34ab689f1652db626eea725ea1d5bfd710fb452d7704 gdk-pixbuf2-modules-2.42.6-6.el9_8.1.s390x.rpm 9d196080ab6075da36cbd7b7ba98161051def014f24e49ef64e97e79d213e889 gdk-pixbuf2-devel-2.42.6-6.el9_8.1.s390x.rpm 9d437280ae7e58d95dc5effc94d05f805dbbdef99e26ad2e92d8017dc6783637 ALSA-2026:19213 Copyright 2026 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data (CVE-2026-29111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default systemd-ukify-252-67.el9_8.2.alma.1.noarch.rpm 1a4f0806fd77d375c8c135c7e51d18fa9cbf1888602883cb3ecfc1b4474adcea systemd-journal-remote-252-67.el9_8.2.alma.1.s390x.rpm 87a2c1b4ec80c5df258e96426f008e3e6c6d42b548e70d3a828013e61d80dd85 systemd-devel-252-67.el9_8.2.alma.1.s390x.rpm c447ef3783cc50c4470cc89b22e18b05b2f81e254ac624ff64578e2b8c52e005 ALSA-2026:19216 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-devel-3.9.25-7.el9_8.s390x.rpm 4f6ed319f94346d740b287c82e47f444e5300ad5a04588ca6a4493ec96a1e705 python-unversioned-command-3.9.25-7.el9_8.noarch.rpm 9fe444f47227c4074646726aad56f37d6429f0194a82c959db352a2742937fa3 python3-tkinter-3.9.25-7.el9_8.s390x.rpm b7d45aad14be7f71e261c88c5e8501569c3cdabf579c04ae2d9808a3f99587d3 ALSA-2026:19218 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default openssl-perl-3.5.5-2.el9_8.s390x.rpm 3aabff541fd35d624100e60f0426e8816626cd4eebd380d54c06ffdf489596a6 openssl-devel-3.5.5-2.el9_8.s390x.rpm c5c0946b9fa546eebebcbe33773268716e8d76d1be2251d84d9119342dd7ea79 ALSA-2026:19219 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385) * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414) * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387) * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388) * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pam_ssh_agent_auth-0.10.4-7.7.el9_8.alma.1.s390x.rpm 6629070e1df45b128ccefe108b7dd48a64242981628e35087051db3c73f134ac openssh-askpass-9.9p1-7.el9_8.alma.1.s390x.rpm cc775fad09c751c422408f75171181c2f6d572efd70f277ade44800cdf59bac7 ALSA-2026:19220 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default sudo-python-plugin-1.9.17p2-3.el9_8.s390x.rpm f37d92a01d2439157230cc07536aaed0e62e2ab4f4cc9965857be6633749cb45 ALSA-2026:19224 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default vim-enhanced-8.2.2637-26.el9_8.4.s390x.rpm 0a423e8e96fa293f9f7d787ff11a3bd971e0331b79a01a4fbf61a17e5b9d6692 vim-X11-8.2.2637-26.el9_8.4.s390x.rpm e479512c310fa31fd76a431b70ad3149a68019606cb7017bd2ce20276f4c7ad2 vim-common-8.2.2637-26.el9_8.4.s390x.rpm f7369a760cd0608e408f554593395104c70f451f030655eb655688a309efe4ec ALSA-2026:19225 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-devel-5.14.0-687.5.3.el9_8.s390x.rpm 083b750a5f54db129ba6b06143526b488956eee25b0322d95f49ba2c9df9f45d kernel-debug-devel-matched-5.14.0-687.5.3.el9_8.s390x.rpm 0a6dbbef925a7dd119955da45cfa1acac20917d3e8e729d9582ed80b4cf412ef rv-5.14.0-687.5.3.el9_8.s390x.rpm 13f63d4ff790235e79857dab1069a771f13685f336f33c3cebf1eca113ebc875 kernel-debug-devel-5.14.0-687.5.3.el9_8.s390x.rpm 2dd4370a492dcb1d67db4ec732e2ea41c119ad2368330520a15f9aec289ddeb2 kernel-doc-5.14.0-687.5.3.el9_8.noarch.rpm 33ca69fc070e55e4b840823a5d48ab5c3cde5157c69ef93423ad2fbc5402a62f kernel-headers-5.14.0-687.5.3.el9_8.s390x.rpm 3f64b06971d7f51d1df9dd2dcfa60d885078c9583176aca217b53e7e09c622cb perf-5.14.0-687.5.3.el9_8.s390x.rpm 48f10f45ed46117f6f086eb14ea49bd4e905f681c717853da7e6845e86f80f82 python3-perf-5.14.0-687.5.3.el9_8.s390x.rpm 4ee2231eac515453040dbfbe4a895aab7a6d3cb4f6e93e0f7d1c75ea0f81de67 kernel-zfcpdump-devel-matched-5.14.0-687.5.3.el9_8.s390x.rpm 7eb7616d3391ef8149aeb65e298c9b49f693e92ebeca0d30dd3b2b659bebbf0a rtla-5.14.0-687.5.3.el9_8.s390x.rpm b3fad698c215b9e014de5333aa3618e08f175975150f356cb6ebb82b9f91345f kernel-zfcpdump-devel-5.14.0-687.5.3.el9_8.s390x.rpm c6b700d4044429fbf6c3f23795f86d1555b8db426dff5eb314b22f2316fe0dec kernel-devel-matched-5.14.0-687.5.3.el9_8.s390x.rpm df7c4195c63a05f29355b5904e596ebb9500f20873536f0fbf68cc9574fe1ff0 ALSA-2026:19342 Copyright 2026 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. (CVE-2026-34000) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default tigervnc-icons-1.15.0-7.el9_8.1.noarch.rpm 204dc02b0092c43fea77222b15f9ddd4c77b8c72beef2e9073b0c24894adcc08 tigervnc-server-1.15.0-7.el9_8.1.s390x.rpm 347229b5853ec246532d9cdee9555036fe02f653c3514943857828e4be70202e tigervnc-license-1.15.0-7.el9_8.1.noarch.rpm 672089a8fee58da2e35ca630c893fd3e167a9eb513d9f6e54ffd88b4e0153082 tigervnc-selinux-1.15.0-7.el9_8.1.noarch.rpm ae1ca1cabd7da66c8cd0aba66e2ac735b06b37092ae2419168c3952db5fccd49 tigervnc-server-minimal-1.15.0-7.el9_8.1.s390x.rpm c63bd9f61e906ba5131fd57a3e07a782a622284fcaf90d21483bdfbf96f9f2bf tigervnc-server-module-1.15.0-7.el9_8.1.s390x.rpm e8387cc6cf3c69ec72c6700452825989ae0150fe5cebf5a5c717d77ad10e9a50 tigervnc-1.15.0-7.el9_8.1.s390x.rpm f5a0a34c7101e23843b8db8735b7819b688965c90ccfc1997badf557a36c90d4 ALSA-2026:19343 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xorg-1.20.11-34.el9_8.s390x.rpm 4353797b0784a1057a31bc6ad5ce49827f9558a7ddc89b7d9e755b8f79b3bf50 xorg-x11-server-Xdmx-1.20.11-34.el9_8.s390x.rpm 50a858676d4d0b346b3321a26cbef989ce5a4a0ddf8b8c1a985cc0ebb1bdeb88 xorg-x11-server-Xephyr-1.20.11-34.el9_8.s390x.rpm 515579e28d11e064ede41221f76169716a3ef487a572139ea772769117068732 xorg-x11-server-Xvfb-1.20.11-34.el9_8.s390x.rpm b129da1ed350f95f29fc435007d6faddd9229a231ef4f92d1599da01f5b00c35 xorg-x11-server-Xnest-1.20.11-34.el9_8.s390x.rpm b3d785a623fcb41c4a592f391f7f4682d414dccdad0a8065fdccccdee1abb935 ALSA-2026:19344 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xwayland-24.1.9-4.el9_8.s390x.rpm 5f0e669d4bdcaa1d13ca3c87ad069d11bf76b30ec204e4c2fd647df5b67b3af1 ALSA-2026:19345 Copyright 2026 AlmaLinux OS 0 1 Important

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450) * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default LibRaw-0.21.1-2.el9_8.s390x.rpm dcf0e5d981a6e5560cc7409ac0c89c733f9c45efd062e565f46802eecd609566 ALSA-2026:19346 Copyright 2026 AlmaLinux OS 0 1 Important

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libcap-devel-2.48-10.el9_8.1.s390x.rpm 1842b708e0e4f49de2f4af758b55bf8a8987a89e05655292d345a17d4265a85c ALSA-2026:19348 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754) * firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752) * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757) * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759) * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747) * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749) * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766) * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761) * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771) * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764) * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765) * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320) * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322) * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default thunderbird-140.10.1-1.el9_8.alma.1.s390x.rpm 5c20a52f3116921cdb295de4abe85af8aadc714f899e81c6ff49b4f678365d60 ALSA-2026:19350 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default git-lfs-3.7.1-4.el9_8.s390x.rpm 2ec8d17f9b10f72ae4461982a3684513cabe088ee0557c46b9ff7e5bd0eeaf41 ALSA-2026:19351 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-pcp-5.1.1-15.el9_8.s390x.rpm 91c54ff04e893d038802a96493a7046e793d758ba2a9970cf7fc15a4c10b0fae ALSA-2026:19352 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Information disclosure of data-source passwords via public dashboards (CVE-2026-27877) * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-selinux-10.2.6-22.el9_8.s390x.rpm 807eb05e0c1005ad1b1fcab49c11721ea9c8342a04bad2e343650fe657af4735 grafana-10.2.6-22.el9_8.s390x.rpm eead7566c4819529d0e647dd7bdc4a0828ebf0e5a8c407451a86bc834b85b215 ALSA-2026:19353 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186) * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default opentelemetry-collector-0.144.0-2.el9_8.s390x.rpm c4f374e57aa42424897517bd8b50f50f51bd1139dab54a0a6f4ad87369230d16 ALSA-2026:19354 Copyright 2026 AlmaLinux OS 0 1 Important

PackageKit security update

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default PackageKit-command-not-found-1.2.6-2.el9_8.s390x.rpm 01a14a8c453b780c838b295690d361b6f0d2cb4b9f3f15fde24bf86e04821100 PackageKit-glib-1.2.6-2.el9_8.s390x.rpm 2180ed788daca72694a0bb6eb27be57dfddc2ada255d454135bcf353f8f94e4e PackageKit-1.2.6-2.el9_8.s390x.rpm 443d67c2cd9c7d2ce452622fe270e1a3f93d6b9e066c17c62c4c69e6a2525f00 PackageKit-gtk3-module-1.2.6-2.el9_8.s390x.rpm c98bb9987368f30120bcc171b60f679cab343a82f5280cd780f728209eb80003 ALSA-2026:19356 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libsoup-2.72.0-16.el9_8.1.s390x.rpm 3cbf5781d33df13b26b5f5323c34ec34b8451b4aca1cdb5c5b8b18a960f378f0 libsoup-devel-2.72.0-16.el9_8.1.s390x.rpm c053cd43e08e01d4093801a76bf72ba3c8de6417eab71ef0d6031046c69d6b39 ALSA-2026:19357 Copyright 2026 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356) * krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default krb5-devel-1.21.1-10.el9_8.s390x.rpm 769742b09789cb6786bb976adda721e112369e9ebf931373681fba04e107c770 ALSA-2026:19358 Copyright 2026 AlmaLinux OS 0 1 Moderate

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952) * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986) * freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951) * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775) * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885) * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884) * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883) * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libwinpr-2.11.7-7.el9_8.3.s390x.rpm 6131ca27f10b373c8d1112810a1f18916721e36548d64a41383aeafb3514b225 freerdp-2.11.7-7.el9_8.3.s390x.rpm 6fae81ad78822669ef03e69e80c1db4d5ee358491921aa6706127f9df9d68c25 freerdp-libs-2.11.7-7.el9_8.3.s390x.rpm fb2684fd228ba385f575a67bfe7dcaf602e8e31355e84313a8de7dd3b06d1dea ALSA-2026:19359 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default openexr-3.1.1-3.el9_8.2.s390x.rpm 0b7413e8516b765d0533db6facf7b329430a5894f56a500523cc5e1c6ebdae52 openexr-libs-3.1.1-3.el9_8.2.s390x.rpm 58c8e4b87d00ca8cfae34b2099f8d90b1fac5978a6cbda353ed57dc02698b954 ALSA-2026:19361 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default glib2-tests-2.68.4-19.el9_8.1.s390x.rpm 8bc779ceb78245ebec50428c510ca6edcfd2d098d6f81f449e2eb5e899c0e6bc glib2-devel-2.68.4-19.el9_8.1.s390x.rpm bf5daa19bbf15631d9b5b64d484c6ead69141e5bff5c5e4e87253806c8bc9223 glib2-doc-2.68.4-19.el9_8.1.noarch.rpm cda772d673741f8feb8166c8a9da05787ce099516f6e443d57ec2b2adbaebf33 ALSA-2026:19363 Copyright 2026 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libtiff-4.4.0-18.el9_8.s390x.rpm 59a7d83c382e995e1f12a1e3c6f18c6af9556272ac6749e3f9d62d9e782d846d libtiff-devel-4.4.0-18.el9_8.s390x.rpm db3e09e0ef27499ee3909edfd512a6924cfa3b64bcdecc6ff5b341483bb2bbf9 ALSA-2026:19364 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032) * dovecot: denial of service via crafted message before authentication (CVE-2026-27858) * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dovecot-pgsql-2.3.16-18.el9_8.s390x.rpm 0790e34e5c3bd3ad55f0eef8d15e2dcc33c51e728a9e0190f95d8e9e17b1e66e dovecot-pigeonhole-2.3.16-18.el9_8.s390x.rpm 4ccc33a071732f433f028d056294c3c29e1f68cedeedf45cd32103367760ebd6 dovecot-mysql-2.3.16-18.el9_8.s390x.rpm 4e751602bb0effce328e06b4ca9f108b83df50fcaf7969707838fea42b7264f3 dovecot-2.3.16-18.el9_8.s390x.rpm 8418bafb4a4409815446cf0f140414af6b07bdd213e18220de854f1108b5131c ALSA-2026:19367 Copyright 2026 AlmaLinux OS 0 1 Important

giflib update

Please update For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default giflib-5.2.1-10.el9_8.1.s390x.rpm 03375e416a961075e776422b8d51adffa5d0c1ddedd79ee4d3cd4c24d3c87831 ALSA-2026:19368 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync server leaks arbitrary client files (CVE-2024-12086) * rsync: Rsync: Use-after-free vulnerability in extended attribute handling (CVE-2026-41035) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rsync-rrsync-3.2.5-7.el9_8.noarch.rpm 43d9cf79fa9ce4a89b964a0232c459b19ee6c2e5985cf441871054079586ff5b rsync-daemon-3.2.5-7.el9_8.noarch.rpm 919ae583f77c1cc05f57aee5b61c4f5cdeef715158ae1b4e986d9e7e23fcfb12 ALSA-2026:19370 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320) * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322) * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-x11-140.10.1-1.el9_8.alma.1.s390x.rpm e0b1d356ab2bdbd5f413657593f88a37ad4f4317d94fbabe649b2a82517fcca4 firefox-140.10.1-1.el9_8.alma.1.s390x.rpm e9421ee93632abffa62616bcdf121ea092f6695189fdfbe3a06ef5d00b90cda2 ALSA-2026:19371 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-filesystem-1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1.noarch.rpm 4b75dc5e5a21e8910ba86a24f6e6258401f3621309f270bd5108dd80b6bf19d0 nginx-all-modules-1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1.noarch.rpm aa4adf00fe9a29ad20661636181a70b59636f81647b8a23f56f13995636f0f96 ALSA-2026:19372 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-all-modules-1.26.3-9.module_el9.8.0+247+aa936373.noarch.rpm 79370c3b0f6d72f1c1c18536070f462a31f2caaa3e44a0f7655bbc1f2aae8bce nginx-filesystem-1.26.3-9.module_el9.8.0+247+aa936373.noarch.rpm a588c17f4b6c26252592c622da00137b3b8c446004b63892f235b283b8a7484e ALSA-2026:19373 Copyright 2026 AlmaLinux OS 0 1 Important

dnsmasq security update

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291) * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890) * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891) * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892) * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dnsmasq-2.85-18.el9_8.1.s390x.rpm b5a8cd83c1de7204c7dfff1c24405bb880faca372e5fc8432882a4c2dadce2b8 dnsmasq-utils-2.85-18.el9_8.1.s390x.rpm be76a65d9cf221aae15bb0efb25a38900640252db394cc10681e1499eb69ab41 ALSA-2026:19374 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-mod-mail-1.20.1-28.el9_8.2.alma.1.s390x.rpm 12e1beb340f568bc0d9d3d635fd0797d7832663e2c30e457f28883bfb447fc13 nginx-filesystem-1.20.1-28.el9_8.2.alma.1.noarch.rpm 12f18b98da9a7faa44afda3b2668f321871594ee329ee860f6775cd29b059e3b nginx-mod-http-xslt-filter-1.20.1-28.el9_8.2.alma.1.s390x.rpm 4350b31901401251289916f0212b9d570f161ebd19b458bc35cdfc7d0618fded nginx-mod-http-image-filter-1.20.1-28.el9_8.2.alma.1.s390x.rpm 4520cc63d526dafb0d1149972eeab78bc15873dea841dea149590d83ca3e6aa8 nginx-1.20.1-28.el9_8.2.alma.1.s390x.rpm aaf19d850d9b49d0a6e4b081031580794055873098779a827a4b0b22638eedfd nginx-mod-stream-1.20.1-28.el9_8.2.alma.1.s390x.rpm bdc20b4e4d59685dbc823a777b049ef3480ee0aabddd7e008f8ab314fd0900e1 nginx-all-modules-1.20.1-28.el9_8.2.alma.1.noarch.rpm ce5401d4547cbc480a1fcbb0a701d21434b2bf97b7b33cc45dfba0c5a7ee32f8 nginx-mod-http-perl-1.20.1-28.el9_8.2.alma.1.s390x.rpm e1555949003c49cbfebeda6fb9752e04d167162f19aaf007aa7c154abb2b77c4 nginx-core-1.20.1-28.el9_8.2.alma.1.s390x.rpm f0b9b7c9d75fe81c551cb7e6e90634d555f6e5c6a4608dff12fbb458592411df ALSA-2026:1939 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-wheel security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.12-wheel-0.41.2-3.el9_7.1.noarch.rpm 9413f53ffc095e36c05ec3a5d831494ae2982f7d1c8d756934be012af6221166 ALSA-2026:19568 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-zfcpdump-devel-matched-5.14.0-687.10.1.el9_8.s390x.rpm 07ea40a6fa353fed56a181c3ac4cdf63136e38e67877cc81de331a1e640afd4d python3-perf-5.14.0-687.10.1.el9_8.s390x.rpm 0d28273272810115f4eea975098ade1507c764733dd129745be6409efc224231 kernel-devel-5.14.0-687.10.1.el9_8.s390x.rpm 12e4f2d330ac8e85476f965202009ea9eb74102ee001caa32543ad16fb66e356 kernel-headers-5.14.0-687.10.1.el9_8.s390x.rpm 64098a69f3a227c4ea2129c4899b227cc374db30d68efd956c41e82141b9a3a0 rv-5.14.0-687.10.1.el9_8.s390x.rpm 6e99d2725055b1e8a934bed76b601c7a220494ce2ec0bed17c55758d0cdb7863 kernel-devel-matched-5.14.0-687.10.1.el9_8.s390x.rpm 7405eb62e68c058e81c4b8f67f5f294954733c33c51cb149b98db562d0cafc4d kernel-debug-devel-matched-5.14.0-687.10.1.el9_8.s390x.rpm 74156e6fb14eb0dca77a6dda87a412d58f41813563db1ff6b0d1cd5dd5c53703 kernel-zfcpdump-devel-5.14.0-687.10.1.el9_8.s390x.rpm 8041d456932778d1d485eb468b23d895050cf3fe341fb91f7eb001bda35607aa perf-5.14.0-687.10.1.el9_8.s390x.rpm 92bcdce48c51f762462f338c8847023ff0082147d62dcb11322c8b6d5a305b74 kernel-doc-5.14.0-687.10.1.el9_8.noarch.rpm c86d478183c0e93679c9cec4f8150367b9476143809996d576f886886b8dad83 rtla-5.14.0-687.10.1.el9_8.s390x.rpm fd13884c45fe878f60413acd419f057bcd4a92f385554e86289f999b58686943 kernel-debug-devel-5.14.0-687.10.1.el9_8.s390x.rpm fd4c91ea5418347462c11ac6c53a12ccbbe86cb9342c05dbcd520979c3bd9191 ALSA-2026:19610 Copyright 2026 AlmaLinux OS 0 1 Important

libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libsndfile-utils-1.0.31-9.el9_8.1.s390x.rpm cee5e7848cc63100bf3c64c2012effb54601026f47fc5e1a4933757d3b80f64f libsndfile-1.0.31-9.el9_8.1.s390x.rpm eec34af3ceabc059331e95fdeefb4a1243f12398397f5ff172f020e7a42de3ac ALSA-2026:2042 Copyright 2026 AlmaLinux OS 0 1 Important

brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default brotli-devel-1.0.9-9.el9_7.s390x.rpm 69eba75395589d53968e4afc122ed443175b825201d3a01dcb9f50eb68e27fef python3-brotli-1.0.9-9.el9_7.s390x.rpm af203063c7442473e84da2c1e530ab6e9de4d5ef27a5e4504e408687f95499a9 brotli-1.0.9-9.el9_7.s390x.rpm c273a36291fd25e3b65d57959618551ea00f2a3ecadc79705114e8a51eac04ec ALSA-2026:2048 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530) * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884) * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883) * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533) * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531) * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534) * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default freerdp-libs-2.11.7-1.el9_7.1.s390x.rpm 3113d99ce697556ce31a9bfd0fa15c3f8238c9cada41180fc655d7ad82f144f2 libwinpr-2.11.7-1.el9_7.1.s390x.rpm 4430826467bf4a9c58d2a19e01f0dd4bf159517e8393b03c3ea75acff1c038f3 freerdp-2.11.7-1.el9_7.1.s390x.rpm ca1539d039851900b6666c9e61ca7517378cefd02d50117a4ec48c48cc855d60 ALSA-2026:20574 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Other issue in the WebRTC component (CVE-2026-8094) * firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 (CVE-2026-8092) * firefox: Use-after-free in the DOM: Networking component (CVE-2026-8090) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-x11-140.10.2-1.el9_8.s390x.rpm 69c867901ca8628c11b439b4559dc0f2f7df696b11bdb3e87204983ece1ef136 firefox-140.10.2-1.el9_8.s390x.rpm 8718ced2b3c5cc2b49ccc7905d9b20ebee8803f2af5a88195aaca00598041871 ALSA-2026:20596 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-pg-doc-1.6.3-1.module_el9.8.0+232+50f6dd36.noarch.rpm 012587b1454988d3ae9e2df6f066e9a9582859f741daa26cc97f6ce56f7cc40d rubygem-rdoc-7.0.3-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 0761b4ce8341503678c2633ae8d44016b45aa3e50bdd481c3ae958f2121f9b68 rubygem-irb-1.16.0-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 086dcd315919daacbe708f121fcdd243a2f8ae01b70285ee804a76ab3ec63e58 rubygem-test-unit-3.7.5-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 1773ab3b144fd3572d9e9c33356f308cbf16475977e2ca2c5723497f87914ddb rubygem-rss-0.3.2-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 1db5dd3f5f3afd32c809bd0c9b49fe18fd6911dad309d960b89b8f309942bad3 rubygem-rexml-3.4.4-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 20a363d7f7d01ca0d3c810380cef47f03803304ac1de85ec2d1513897239e2f3 rubygem-json-2.18.0-32.module_el9.8.0+251+5fdbd96b.s390x.rpm 3b40475e4d893b3e963279d28715c18daefd0208f2fc6e5903d3ebd970084c86 ruby-default-gems-4.0.3-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 400e6ed87410488c293562d0ff4fd3746dc5c28e05b66d0899e120f3759354b1 ruby-devel-4.0.3-32.module_el9.8.0+251+5fdbd96b.s390x.rpm 49e1ed36651c6c00ff9370c19b7b4d1a2e2f7ac0185dc8b02d1ca4d2d82cd854 rubygem-pg-1.6.3-1.module_el9.8.0+232+50f6dd36.s390x.rpm 5a3274b260c9f148a2d53963874a7074a6eb753d8de5561715f81aa190b751ae rubygem-rake-13.3.1-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 5cf0a0ce0a7c2ae61008315eb0e36a3050cd5069dfaf41131b9376b2950b7227 ruby-doc-4.0.3-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 60f9b14298e80fff8d4bd034870ef3b34a2ad53c0662db91b64fc6bdf5024620 rubygem-mysql2-0.5.7-1.module_el9.8.0+232+50f6dd36.s390x.rpm 700ff63225b94b696ac533940dc41391e7462b01042b665bb6817ae92d805d39 ruby-bundled-gems-4.0.3-32.module_el9.8.0+251+5fdbd96b.s390x.rpm 706cbf25314483669b6c18dec1a0b69cdc08d3fd38c4ba21c60db2d48c69b02e rubygem-minitest-6.0.0-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 714dc33f4604cba5fe409c0e0e823d48ef00c88a6ecd72307c49a4998f637f28 rubygems-devel-4.0.6-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 7157d7b21a4e836d8e71c7e96ff3b1208dcce1c10617ef0e15f2200ddfb4c697 rubygem-bundler-4.0.6-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 7a6d2e335d6cda1e5b483e3c0bee4ffc86ce7fcc8da36ed60172b3c71ddf3aea rubygem-rbs-3.10.0-32.module_el9.8.0+251+5fdbd96b.s390x.rpm 96d867d82bcce10b25462a3531753bd36ca66fd2eaf67ec08253dcbd5b69d38f rubygem-mysql2-doc-0.5.7-1.module_el9.8.0+232+50f6dd36.noarch.rpm 97e11c128bce3071fdab6ecdaf0cc24053f436b72c10921807cbd89f4b2ff2d2 rubygem-io-console-0.8.2-32.module_el9.8.0+251+5fdbd96b.s390x.rpm 9a00307308c99698825893a32d28da6fc2112ed60b127b81fb2f1169f1463318 ruby-libs-4.0.3-32.module_el9.8.0+251+5fdbd96b.s390x.rpm 9af1301e6977e0d0ab74f4cb581c5560bc5fd45f08da34b6912d4d6bfb3edadc rubygem-psych-5.3.1-32.module_el9.8.0+251+5fdbd96b.s390x.rpm 9f414deb57701c82b97182a12e6abf39ecb5bde2185ae48a708e6e89843af2ef rubygems-4.0.6-32.module_el9.8.0+251+5fdbd96b.noarch.rpm a7661e9b7aa2032495805717adf06800705eeb3503cb44c8933d1e0aab72c277 rubygem-bigdecimal-4.0.1-32.module_el9.8.0+251+5fdbd96b.s390x.rpm b52429cc00291965bc471a1870132ef6c4ab154fc6ed7c730fea4f417b4c53ae rubygem-racc-1.8.1-32.module_el9.8.0+251+5fdbd96b.s390x.rpm c49ca26ebb61ecf0b37c5eff9c5322b95228135e67d2027d9de9509148194a40 rubygem-typeprof-0.31.1-32.module_el9.8.0+251+5fdbd96b.noarch.rpm d6a7ff8591ef0f77d29c077c7806318971787418b9e4f72e0512f542f3142ea5 rubygem-power_assert-3.0.1-32.module_el9.8.0+251+5fdbd96b.noarch.rpm e6a2d8460cd9cf237f34d4a50b800d2763f086bcebb12d6a4e11b1d0b8daa0c1 ruby-4.0.3-32.module_el9.8.0+251+5fdbd96b.s390x.rpm f5f36abaeb28ef41206db339a6a1649d8be0f8089d83bcd7eb7e2e775ab2ac80 ALSA-2026:20597 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Incorrect DNS response parsing via crafted DNS server response (CVE-2026-4437) * glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions (CVE-2026-4438) * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default glibc-devel-2.34-270.el9_8.s390x.rpm 2e2516c906ac49321e9b8976dc50c36c320c1b212e556a84c6579cd63e51cb26 glibc-utils-2.34-270.el9_8.s390x.rpm 3e38da610f2308ec40b72aba75f52faa3b0bbf60dfa754a09a81d24fa8d2a98a glibc-headers-2.34-270.el9_8.s390x.rpm 3ec5e8482b9abbeddb1f999dcfb33dcb868ce99edd1e4ab9646c08c8ed2f1daa glibc-locale-source-2.34-270.el9_8.s390x.rpm a1d583d8085b87ee885cd89ae7b608d63f554b606494c4741b7c0a209ea802f0 glibc-doc-2.34-270.el9_8.noarch.rpm fc1b2c6a3553ac4cdfdcf085c5eec39c85fdeabda7beaad2ce67276f76923f89 ALSA-2026:20612 Copyright 2026 AlmaLinux OS 0 1 Important

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009) * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845) * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010) * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833) * gnutls: Fix intersecting empty name constraints (CVE-2026-42011) * gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gnutls-c++-3.8.10-4.el9_8.s390x.rpm 098acaaf0db18fd616ca306397b48cf9bd38334e406e9e5541fe1f4a3522595f gnutls-utils-3.8.10-4.el9_8.s390x.rpm 1241ecf92c27b18b6aa19ac0e87f98409b31a9658eff09119019cc7ea294079b gnutls-dane-3.8.10-4.el9_8.s390x.rpm 1d4c7eac713b6102eadc3ba52b3fead501313a7cc3599ed9f69da5bacabb2477 gnutls-devel-3.8.10-4.el9_8.s390x.rpm 7e57a7551b8f19234b94227ea2c5a85954e751ef35697cba3ffc56ec748ad813 ALSA-2026:21293 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es): * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043) * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-runtime-dbg-8.0-8.0.27-1.el9_8.s390x.rpm 5b309893498e27b9fcaf8104d70cf4b74730145dd2f39acf25f8ac9f75305277 aspnetcore-runtime-8.0-8.0.27-1.el9_8.s390x.rpm 824fe62c93790ab2b6851b787fed40719f8bf358354b9e8d0bb113e93d4df9bb dotnet-apphost-pack-8.0-8.0.27-1.el9_8.s390x.rpm 951752a5919bdb5692a3503ee6d8477f1a726543df1945fcca21e08cf22828da dotnet-sdk-8.0-8.0.127-1.el9_8.s390x.rpm b2127b95f9e096186808ee5be9c42af252270fa0c3ca70ade123ceb02e8b7249 dotnet-runtime-8.0-8.0.27-1.el9_8.s390x.rpm cb80bc30bbd59d9c33016a235b86aab589841d3da9be9a6d0f8ed8a7e1034f8f aspnetcore-targeting-pack-8.0-8.0.27-1.el9_8.s390x.rpm ce5b05d437c90f8153fe554bee9d9c40676d281a67a46a36f82299caff9aabed aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_8.s390x.rpm de884c70cdb4f862903b5e3d4231b8810e920a640adc423bb5a7e2242a5e6e74 dotnet-sdk-dbg-8.0-8.0.127-1.el9_8.s390x.rpm dea2ae91da6b423383c2924ad70b1993564365182de091a804037dfc4ef53df5 dotnet-targeting-pack-8.0-8.0.27-1.el9_8.s390x.rpm f704b4c117d892cd8a9ffad832854965d9cf41c59e4d797d5be6a2b1d5b2f13a dotnet-hostfxr-8.0-8.0.27-1.el9_8.s390x.rpm f9374536e0c9742d2f678fed64de6ea2f3ba4dd9cab50c11fabac6cda0391ee1 dotnet-templates-8.0-8.0.127-1.el9_8.s390x.rpm ffd9f3b6515b35240bfbdec54dbace588494911e5db8a0801dd240f80f167a3b ALSA-2026:21296 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es): * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-runtime-dbg-9.0-9.0.16-1.el9_8.s390x.rpm 06f0324aeb3cbe0b1b18500bb16b4dc5efc2da33fce059be4a9cf8f0b9268da4 aspnetcore-runtime-9.0-9.0.16-1.el9_8.s390x.rpm 1d538bcfe28e5ccd21d85a902115dcd78396aa6db8bac3f37751d9de50f001a6 dotnet-templates-9.0-9.0.117-1.el9_8.s390x.rpm 35efacd237c90c7f99f0bd486dda5200ba35403043844b688ce9a66edaa369e3 dotnet-hostfxr-9.0-9.0.16-1.el9_8.s390x.rpm 423883cd3401aa4abd96e63b157c3d5c5a77a5cac286e2b95efc11d90595ec0d aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_8.s390x.rpm 68853da2ebd4152fe19856597640c525b6cce1e2da894219d8cfc27da714c491 dotnet-runtime-9.0-9.0.16-1.el9_8.s390x.rpm 8c70134eefc25c4f911c82dbd2598b4e92dc65e37dd92cdce59b8e6d929de453 dotnet-sdk-9.0-9.0.117-1.el9_8.s390x.rpm b245cc40157571b0251e431c7f23fd9e92366e6deb70e4fa253d32e7ebce1e17 dotnet-targeting-pack-9.0-9.0.16-1.el9_8.s390x.rpm b72b72a4d8089d83364694a4ab6dde7dac4612c0696bf7f7d0fbc2a35ba6e47b aspnetcore-targeting-pack-9.0-9.0.16-1.el9_8.s390x.rpm cb221570eec88882bcc11c04cabe0635192cefd2fdd6b20ab2a4e8e4a5e4161b netstandard-targeting-pack-2.1-9.0.117-1.el9_8.s390x.rpm cf1bb6c1390129619382107ff6d9fe9911953550a4b70453420e8854221fd03b dotnet-sdk-dbg-9.0-9.0.117-1.el9_8.s390x.rpm d3f143ee3e4ef40a877ea93ce60310921dc8aa296ba8ccf902b9862684a91882 dotnet-apphost-pack-9.0-9.0.16-1.el9_8.s390x.rpm fb7cf824d3ae971f33fde4335b8a746149bd6f890e26236c4b92fb42cc08c3c7 ALSA-2026:21297 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime 10.0.8.Security Fix(es): * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default aspnetcore-runtime-dbg-10.0-10.0.8-1.el9_8.s390x.rpm 1f2ada590b4924c055075e5c635c6092201fe1d279104b39808f7fb036458040 dotnet-sdk-10.0-10.0.108-1.el9_8.s390x.rpm 239768fbf8ad2674e79d55e849ac05d5277b9539dff42b2c3a1d79462d852f04 aspnetcore-runtime-10.0-10.0.8-1.el9_8.s390x.rpm 32cd6137907064a4d617ead3f1209f8a59d7af432bc69b1cafc49cc6031608a2 dotnet-targeting-pack-10.0-10.0.8-1.el9_8.s390x.rpm 39f7082ef5dc8f001df4ac2041294d46c807d5e6c2362f02544b44060aaf3eec aspnetcore-targeting-pack-10.0-10.0.8-1.el9_8.s390x.rpm 44fc9cc79dcd384f7fd1693223c67b57e9c5a89eb3ee69b8962e6700d27c7eeb dotnet-apphost-pack-10.0-10.0.8-1.el9_8.s390x.rpm 88d2b459cceeefe15a9ef159a43c39dd6e5f56e2c9a192017e4c6bad7eef086a dotnet-runtime-dbg-10.0-10.0.8-1.el9_8.s390x.rpm 8f950053457b962b18e54a57c71742ae0312c51bf5e36c948246e99ac832176b dotnet-runtime-10.0-10.0.8-1.el9_8.s390x.rpm 942408a1ef6e90fc5dc1895ae8623f969971050525db27d0b632fa192554df7f dotnet-templates-10.0-10.0.108-1.el9_8.s390x.rpm a63bafacce0b367953582e2663210c9ff21b8472d7962598b9f0599810de2522 dotnet-sdk-dbg-10.0-10.0.108-1.el9_8.s390x.rpm aef37793ccdf508eb36a85a10517cf014dd9f317cb23ff2e8c6923403ef5a2c1 dotnet-host-10.0.8-1.el9_8.s390x.rpm be6842d9dfdeae5a1db54feaa65556bdb0203fc3abbc01e9e3fd0adc6fa3bad8 dotnet-hostfxr-10.0-10.0.8-1.el9_8.s390x.rpm c94b0c6bd4db1b1bfddb8a1aef4c7ad829a48ed8851e1d7dadd6cee783512087 ALSA-2026:21378 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388) * firefox: Other issue in the JavaScript Engine component (CVE-2026-8391) * firefox: Sandbox escape in the Profile Backup component (CVE-2026-8401) * firefox: Integer overflow in the Networking: JAR component (CVE-2026-8956) * firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 (CVE-2026-8975) * firefox: Privilege escalation in the DOM: Workers component (CVE-2026-8955) * firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component (CVE-2026-8968) * firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component (CVE-2026-8954) * firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-8958) * firefox: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-8946) * firefox: Privilege escalation in the Security component (CVE-2026-8970) * firefox: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-8950) * firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 (CVE-2026-8974) * firefox: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-8953) * firefox: Spoofing issue in the Form Autofill component (CVE-2026-8961) * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-8947) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-8962) * firefox: Privilege escalation in the Enterprise Policies component (CVE-2026-8957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-x11-140.11.0-1.el9_8.alma.1.s390x.rpm 3bed1f1b1e3c562a5b6eb59f672f79598e0c30eed4a2f41ccc41bc4dce3dc642 firefox-140.11.0-1.el9_8.alma.1.s390x.rpm 5fde6b80438e54f15398554e4a9f39e81ae42fa87c08768b26c878a0b6ae2fe1 ALSA-2026:21381 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388) * firefox: Other issue in the JavaScript Engine component (CVE-2026-8391) * firefox: Sandbox escape in the Profile Backup component (CVE-2026-8401) * firefox: Integer overflow in the Networking: JAR component (CVE-2026-8956) * firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 (CVE-2026-8975) * firefox: Privilege escalation in the DOM: Workers component (CVE-2026-8955) * firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component (CVE-2026-8968) * firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component (CVE-2026-8954) * firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-8958) * firefox: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-8946) * firefox: Privilege escalation in the Security component (CVE-2026-8970) * firefox: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-8950) * firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 (CVE-2026-8974) * firefox: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-8953) * firefox: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component (CVE-2026-8959) * firefox: Spoofing issue in the Form Autofill component (CVE-2026-8961) * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-8947) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-8962) * firefox: Privilege escalation in the Enterprise Policies component (CVE-2026-8957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default thunderbird-140.11.0-1.el9_8.alma.1.s390x.rpm 53678dc77e6a9e4b71c805936f234a4c73d5fc60ac22666b4ce858fa168f100c ALSA-2026:21391 Copyright 2026 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007) * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default httpd-core-2.4.62-13.el9_8.1.s390x.rpm 05189f61f3476d2e8e2fe89d85bf8c512862e91748911ff6d968e7dcc4bbfe45 mod_ssl-2.4.62-13.el9_8.1.s390x.rpm 193f8e7a11203ee18f4dc35898a6c041c604d665e32e832890e20ad6d9b6f94c httpd-devel-2.4.62-13.el9_8.1.s390x.rpm 310de1480a6f91479dadd1e1aba51a99c4975b1f6c297efd8a4791f0e5183f26 mod_lua-2.4.62-13.el9_8.1.s390x.rpm 7883b8b789d54b489b7db82639ea7782b86c3a4e7727a5a8a9a479f573420f1e httpd-2.4.62-13.el9_8.1.s390x.rpm 98243ffff072e25992c1046dc0b7015397160c562fa9369ee9f87ff96b503e08 mod_session-2.4.62-13.el9_8.1.s390x.rpm a862a365cdd6d2c89b6fc3e4e8c85ab46601e6ef9916dde0f5beb5912025eba3 mod_proxy_html-2.4.62-13.el9_8.1.s390x.rpm b5cee4beb0f295f834643cf50d7e91b8ccee126fb32e4058d6b2c22c03b8088a mod_ldap-2.4.62-13.el9_8.1.s390x.rpm b7f0169599ffef00c7f21bcac5f8f04931e1bac4560ab8cf9f63a83b2f0e72d5 httpd-tools-2.4.62-13.el9_8.1.s390x.rpm ceab4cee4c9ce8f8418706ed16a3a962d14d5f55faf0ffe637bc51b26a72b869 httpd-manual-2.4.62-13.el9_8.1.noarch.rpm e9223dcbdeb90eb5d457d6c73fc637da55357100d817faf8b124cf06fc13e816 httpd-filesystem-2.4.62-13.el9_8.1.noarch.rpm f78ac744ce7d15cf7665a6832386ef5c78eff67394972b82c66bd73b689a583c ALSA-2026:21468 Copyright 2026 AlmaLinux OS 0 1 Important

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI (CVE-2026-4802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default cockpit-packagekit-356.2-1.el9_8.noarch.rpm 37861ee4d0ecfb3e385eacc38d6344e4416d27285a4f56bc6e61904d5282e326 cockpit-storaged-356.2-1.el9_8.noarch.rpm 8a0d02108ed04e514bf99ed16018067d3439b4b57b6ca725f660d86984537950 ALSA-2026:21556 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-zfcpdump-devel-5.14.0-687.12.1.el9_8.s390x.rpm 208606f917e1bc9c4f56ae79e9d3865b9b7f0c558f23a8a563a77e146546ca6d kernel-devel-5.14.0-687.12.1.el9_8.s390x.rpm 25171353c4cc1d5772b0e05e982b26657f4aa63e31561a1afa2c91bfa1dd4ecf rtla-5.14.0-687.12.1.el9_8.s390x.rpm 3d3e6171098908b8b4ee50413a3ed2daadee38e58da6137b263cffa687c20166 kernel-devel-matched-5.14.0-687.12.1.el9_8.s390x.rpm 581072c1f6933e875556a25a88f42805149a126c7b8ad16116d50892f6b48528 python3-perf-5.14.0-687.12.1.el9_8.s390x.rpm 7b81ece769171e81f3cf2b85b47dea9553fd58bed9949a636678c995a40fd014 kernel-zfcpdump-devel-matched-5.14.0-687.12.1.el9_8.s390x.rpm 90a2489fa197d2e1e7cb1aa5c686678eac3e87a48d910da1ac8b0fd41be7945f kernel-headers-5.14.0-687.12.1.el9_8.s390x.rpm c582c7b88884703fb5dd333a3b8284e7b8b8b400b5cf4f9447b9ca2a3c63803c kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.s390x.rpm d131deea59c610940f8afe91d61d2ed4bbc3f7701a0b9930f666be26cc5479fb rv-5.14.0-687.12.1.el9_8.s390x.rpm daad2862a022e9aa06b3b3f5381792e681bc388905f84d19e3f9b59f862cbf19 kernel-doc-5.14.0-687.12.1.el9_8.noarch.rpm dfa3ab44d65235f4e205d0a79959c122e6673db88d1ccfc39f42fabbd04226aa kernel-debug-devel-5.14.0-687.12.1.el9_8.s390x.rpm f7c5bd65340451ef656f01f32585c35230c670debf4fbf29a33cc4dc34c641ab perf-5.14.0-687.12.1.el9_8.s390x.rpm f9f815765a70f6b6ccf305dd283835491924ca7b178f1245697e505b0c922fa6 ALSA-2026:21755 Copyright 2026 AlmaLinux OS 0 1 Important

flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via crafted symlinks in sandbox-expose options (CVE-2026-34078) * flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation (CVE-2026-34079) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default flatpak-selinux-1.12.9-4.el9_8.1.noarch.rpm 3a8c3e535452a1a754a11152933374d7b9278500b066e6fefbf5d5bd4b5c314e flatpak-libs-1.12.9-4.el9_8.1.s390x.rpm 87c20c58bd44f6ae6e7d9119e89bace74c7861b3852cdc5edd51b313355606a3 flatpak-session-helper-1.12.9-4.el9_8.1.s390x.rpm aeaa499d05dbd8ddea09b94bf61df3a3e4bc6033cc9bae17766d5786690938d3 flatpak-1.12.9-4.el9_8.1.s390x.rpm ca30a11c278bfbf508581d054988eacd58a2cbcf259d25902965a419550ebb9d ALSA-2026:2212 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789) * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819) * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022) * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024) * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415) * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403) * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459) * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730) * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760) * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141) * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271) * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269) * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-devel-5.14.0-611.30.1.el9_7.s390x.rpm 35292802f306a4381a2249e211e33134101b5f4a2b88adc0496b4a3d6775483a kernel-devel-matched-5.14.0-611.30.1.el9_7.s390x.rpm 46e054c04aa3dfa1385d0c8f8885ab7b861baa1031316b0bae0952db7612d14b kernel-debug-devel-matched-5.14.0-611.30.1.el9_7.s390x.rpm 63fbe8fccb8459531787de87e0aa58d909f10af94637cc1fc5f400d6717d89fd rtla-5.14.0-611.30.1.el9_7.s390x.rpm 6d8f1bb3477afc391a21e4aa4ec1ea8c12dfa73ded1f0ebc870cbd193bfbdb63 kernel-headers-5.14.0-611.30.1.el9_7.s390x.rpm 6f69f7ce5df344d6ec951190a528d98e730f3fa77a264e6109d5f41d7c05a3c3 python3-perf-5.14.0-611.30.1.el9_7.s390x.rpm 7841f6849eac255959d6b884bf2c3da73c1a6753c83a9a56e2568fde3b4a136d kernel-zfcpdump-devel-5.14.0-611.30.1.el9_7.s390x.rpm bdbf5cde6b2877e920ec35e6bd70aa2fe3b13dfcb0da98685a6ed6cd2e01d5ea kernel-doc-5.14.0-611.30.1.el9_7.noarch.rpm c0111c1cafe87d2869c26ac1632c8f3ccec81e1d538d4dde6f505d75bbd27b04 kernel-zfcpdump-devel-matched-5.14.0-611.30.1.el9_7.s390x.rpm ca6c6d55b922faf916bf31301a08760d8594e50e1edbf994c9173095dcebf495 kernel-debug-devel-5.14.0-611.30.1.el9_7.s390x.rpm ce1782c877366005de52190c547bc170c6c484f271f1cec78963a49f9cfce9e3 perf-5.14.0-611.30.1.el9_7.s390x.rpm e4d04f1f43f7f3c2c0fa3d1ccad7c02848420e1632384c80e15ba03268e6a4a8 rv-5.14.0-611.30.1.el9_7.s390x.rpm faf09d09e10d8d1c1342e60117c8d22ff4c201a21b6bbfb979c4b18498c63b77 ALSA-2026:22121 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501) * html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823) * cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819) * net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814) * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825) * cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817) * html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826) * net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows (CVE-2026-39836) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default golang-src-1.26.3-1.el9_8.noarch.rpm 07c7f200f7fe759ad19fd2a49c19c0cc56dc838622fc1885e067f8f964584ffe golang-tests-1.26.3-1.el9_8.noarch.rpm 1dd7494db6dc2017d066b16b3f301b9cf93618980649b49617f7aac39f43c58c golang-race-1.26.3-1.el9_8.s390x.rpm 247787a6ea60014c82565b2d629e5c4c48363e9a21476e5a874021a75ca18b4d golang-docs-1.26.3-1.el9_8.noarch.rpm 5b1b052e81efdac821156b9c6b24ace83a966ab7d2c26076b833c1cc07e193f8 golang-1.26.3-1.el9_8.s390x.rpm 9906df3a981b7f116c2fcaf5423d878aa108886f51ebd7ed6fb32f3e31822fc9 go-toolset-1.26.3-1.el9_8.s390x.rpm b0a1bc14b9699800905f63b24168e95a84b4874512de1ce40fdd02efd076eb72 golang-bin-1.26.3-1.el9_8.s390x.rpm b152964427b26d7112afa8e5250082d981f06c965139d68a9dfc74136c726340 golang-misc-1.26.3-1.el9_8.noarch.rpm cf1b59f238bbde6523c9aa3a9346a23371e1f0fc403733a78a666cdf74e22324 ALSA-2026:22142 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735) * php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262) * php: signed integer overflow in metaphone() (CVE-2026-7568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-mysqlnd-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 141b1212d533fe9e619f5497ee5909bd61d6cb68211b2cf917377a8a650df818 php-fpm-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 1e4f9032784149416a27a5d96e694af5210d4cbac69e4392214ef9120dc1bb52 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm 2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552 php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm 2d91df18463f7e5cd5a771f760d2dae331ad870672e519b72976b7b1e308de4b php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm 2e6d69933e316fd47fb94a2c937bbdd1aa9468b2ff581671b71042a7b07a002f php-ffi-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 3759245ba92d331ad618ed2c83f1c3bf7c6e22eb6e88574f4d16ccd7c29d8b50 php-common-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 3af696ecc9a34723f422f72f04c107c10a50aaf7a2c9b2e5d8a2985ffe558bde php-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 3cad9fd536522b13f3f5f264a00b6eafca98461f5d45966878176846c45390dc php-ldap-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 3ec8da02ac0921e99305971137c9df6fb4b736b042c595145cdc0670af966a6c apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-gd-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 619fddc3c439148c62243cc151859dcd1e5b37a6e54f229b7406c5886dfefe88 php-mbstring-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 66bd4c7989abe611f84b71cfae1705c1541570cd58046ad47df37a7c24904095 php-embedded-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 6c88e679f5aafbdf2e9e4f754f0e206c09fa6289b0afb7ac64eb83bceb8398bc php-bcmath-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 815d23556fb353cdfca7e9f67ecb562b839e7b1e4750f92b02a2261bc3d01935 php-odbc-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 82e17113307b4eb3e90b1dc5177bcd82a9cd1c26b0eebf295afa43d8f1ae1c80 php-intl-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 87513ff73c7b723e7895edae93a3e54fe34b06c2c5b28f5b7e497fe94bdddc03 php-snmp-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm 89558588c34e4cbc4a1c63bfb43297eaf23f1e0454507c376b32a76220de29a6 php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm 9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2 php-enchant-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm ad5956d8a3c55c65a3e150fd28e6c59e73021f0f3555385aa3137531ecb69503 php-gmp-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm af70a9e732dec790fc121e8f0a42c4e7ac4ec1dab7fb7120c9087e6804dfc184 php-cli-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm b6c1ca07e3442fc102831b266af02d5acfaafdea8ba37adab037eba8cd23e303 php-soap-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm c04ccfdb9e448008fc1070b7c1d04f4a1a3a0b37aaecfd74dabe5032eaac51fb php-pdo-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm c57415d1fa106369318b4cc7ec34121cf5c0b712b47672a817e84b97fb5cae1d php-opcache-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm c775e57c76d34b0d40f5b2fb2a6c66c1486bfcfba4c04e5a2374e05009f43553 php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22 php-xml-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm d26fdc746a398baf78fc1662720b82416fe116c56d8e375110e290f5e5894f4a php-process-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm d49d96e531eada0e703f113b5b06f3607bdf87d8c633f834d11e12c67d170811 php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.s390x.rpm daddebb79dcabf2b21e7db723448b62a2c6d9941272af21949a665d7b0e9e11e php-devel-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm f8eb418f355a3dbaecff6ecc68b7c99ceb817e3bea46987e158b921bfec7ae84 php-dbg-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm f9457dea586948da2883cf18906e6f58cb59e7158bfe919566dc0c67819a9a06 php-dba-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm fb482299077fc63512906243b8c36cfb3e07de9307905dca671fbfd21437cc92 php-pgsql-8.3.31-2.module_el9.8.0+255+747189f2.s390x.rpm fd5eafba5995072f9bb9cc9703910b1912ef9766f0baafabd262bd314c6fb7bc ALSA-2026:22143 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735) * php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262) * php: signed integer overflow in metaphone() (CVE-2026-7568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-soap-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 24ab2de2ba2b45a7bb391623bcb446d18201af71cb4922ce561ca3c00004cae3 php-cli-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 2855ee9265e619ebc2cc870d0a03d6aa2eab1a6b5feb046d3986b6fea1e297b1 php-ffi-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 2898b7dafb9a5468e4b885a1a6d0ad8d5da56180c288b0de8f6b80036f2b621d php-opcache-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 2e866521b1592eb0cba7f5f28dcbcf847775dcec457b1c375c1a5ec9fe17c5a1 php-intl-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 397b67897d7f422078198a276c4674af3734d409fd2fb5f04a5d3740467d4138 php-embedded-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 3c901d9f7995312e5bc61818685491b8d10276fc70153ae19018d8d02bbf5e44 php-mbstring-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 43cd3815b17351e5f0861fc72c7e4f6ae28f56f608c7d4e5d9ecdef6856ba7c1 php-enchant-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 44b66a26c60f8052ae8ca2f43e39cf46b922aa8cb8637c97cd094a485a764eaa apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-dbg-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 562f902466a60e4416b45e175c3d6ae9bbdd93c0a428118c30508f302e4b466a php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683 php-bcmath-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 60ab0220f1d28fe46600e64cf35629f989aa5cd478f6617a7f8f4f5808a431ab php-mysqlnd-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 654865a8e41f8f6618b384f5f3349d6477d692e4dd3fb12e2db124cf545cc4d8 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm 7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a php-snmp-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 865e6791cfe49c651748945f909029abaa92309bc518070cb992a764789d0a93 php-ldap-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 96d1277a0cf63c9de56afabb036df88d63d41d50f24e1dff4c5b754f5228bdd9 php-common-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm 9c9d0bf85cddd9ff24c5b478a817ac847a57976a9dbb4508a27d11307fd261b3 php-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm a9f60101a6440be910335362f7e88eb80762607562b60c8fde5ff9793dae4e31 php-dba-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm adf2ad9f5db242216e00d2534a4eab7a4357f1d4e7ce6270d073ac276510a91f php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c php-xml-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm b14989a9ed424a1bfcd21eeac794ba60ac42a8b48262be1c591f5da08893b8aa php-pgsql-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm b80cbd957da57fdcb01839da7c30ef484eab07dc3e010e23b1308d30c0a6416c php-fpm-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm bd08f320db3535ebb29b02855533a6625c946a1a4b34854512fd160e0daf956d php-pdo-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm bfcaf6f2ab154c096840558c578b6dea925968523bb1f2bbef3ec32a4789e4f1 php-odbc-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm c0d33b99d1324c6d25d0bee00c520a712ec7db6e58530114cee795aa628d3a94 php-gd-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm d9ee6e6fed28392f676bf58fee967174abc081e9b94d41c8df930c327fb5edca php-process-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm de5b308be09900987c76c7961a6e8b3a0a22603b3c3229b433d92504fba6f315 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d php-gmp-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm f698d6c3ad8f84b177c3db897e642292053170825954063c9b992d27f875bc0d php-devel-8.2.31-1.module_el9.8.0+254+5708f44c.s390x.rpm fc68ebf813bef3d275377079d367e85b261846ff90f0abacbdc0df4c74d56a6c ALSA-2026:2216 Copyright 2026 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication (CVE-2026-0719) * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libsoup-2.72.0-12.el9_7.5.s390x.rpm 05c95643d2a506705c65ec1c98ffc6680855f0513082a9d16154b7f9b86fcb06 libsoup-devel-2.72.0-12.el9_7.5.s390x.rpm 574e048eae9296ae55e66a7cdfe8eaf87b65c5240b7fbfa91f957fabb04fee20 ALSA-2026:2224 Copyright 2026 AlmaLinux OS 0 1 Critical

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication (CVE-2026-1709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default keylime-verifier-7.12.1-11.el9_7.4.s390x.rpm 1687edb22002ae52b1574a4dcab837d71f6d51c3c61c8cc9ce3f73b86331a944 keylime-registrar-7.12.1-11.el9_7.4.s390x.rpm 22efc21012f8ad98103f3db670fbf46badd70fd4c097b3f1411423c084220b2f keylime-base-7.12.1-11.el9_7.4.s390x.rpm 69331f412f913365d286964bd2ae9a7cd4c017e26aab0791adec1edcf23bde52 keylime-tenant-7.12.1-11.el9_7.4.s390x.rpm 7897c901d3b588e4ca30ab789af352c729ace45c99ffaf53f98d864d946bec13 keylime-selinux-7.12.1-11.el9_7.4.noarch.rpm 88ace794fbf4e50db3a4619a2caf1de44fce0c4e79733315d23fe3689d3a04b4 keylime-7.12.1-11.el9_7.4.s390x.rpm 8f580e942103f5e35f691f55f3618427bf6324106f28fae0435fbb7dff7c8539 python3-keylime-7.12.1-11.el9_7.4.s390x.rpm 99cb8a261a6cbc4c82766f7685cd49693fdc6b706ba5918b5c79cea0569c74e7 ALSA-2026:22304 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql-jdbc security update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): * jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (CVE-2026-42198) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default postgresql-jdbc-42.2.28-2.el9_8.2.noarch.rpm 72a729e12218dbeb67fe6a986d1d121fcd8cc4422f5b7f3b07f817d1bb79b842 ALSA-2026:22312 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default openssl-devel-3.5.5-3.el9_8.s390x.rpm 3c2352926ef7455494b62d0859b3ce021aac91628d3c4919420c14ee45acdb38 openssl-perl-3.5.5-3.el9_8.s390x.rpm 52f55614328ffb024b2942db6a6c7300768b9e6210bf4e5522a5007e51da4fc3 ALSA-2026:22313 Copyright 2026 AlmaLinux OS 0 1 Moderate

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default compat-openssl11-1.1.1k-5.el9_8.3.s390x.rpm dc0497c28afc7b9d3e595d4983c07b06948c77c8e5a44226a430c23b5b655410 ALSA-2026:22551 Copyright 2026 AlmaLinux OS 0 1 Moderate

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mod_http2-2.0.26-6.el9_8.s390x.rpm da4f286940e3c0017c7bed2d8dcaa4ee2ffdcd38d6a5ff02b3a633b8ed3b21aa ALSA-2026:22553 Copyright 2026 AlmaLinux OS 0 1 Moderate

libexif security update

The libexif packages provide a library for extracting extra information from image files. Security Fix(es): * libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385) * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libexif-0.6.22-6.el9_8.1.s390x.rpm 685a30dd82ea502c22c0fed2889000e9023541ac1a3bf569fcee365906d08194 ALSA-2026:22717 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default vim-enhanced-8.2.2637-26.el9_8.5.s390x.rpm 1549fa404f2736840969cbf5e4925bb6cc77f7623661b7f4017261b164ca6c9a vim-X11-8.2.2637-26.el9_8.5.s390x.rpm 5877092c1322c93b7d7f8cdbd8b213f79e1d0de08cc40cad16f927b093b9b283 vim-common-8.2.2637-26.el9_8.5.s390x.rpm b518e88cf215b50c6d3f4eade85a37512f9f53c70003d71ec5d42b35e7734632 ALSA-2026:23229 Copyright 2026 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default redis-doc-6.2.22-1.el9_8.noarch.rpm 0c7e7441492772c539d0a5cae713b66964677cd9e08c4d096fffb5c5428ddd6f redis-devel-6.2.22-1.el9_8.s390x.rpm 2ccc66e3085974a63e26d22824316b04db4b8e83545c75cf3a5e2023498fe84e redis-6.2.22-1.el9_8.s390x.rpm ab14623c39c75e9137a7f8a78e5133e9bb37ccb064496d2cf7a55f3339c7de06 ALSA-2026:23230 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: denial of service via crafted XML input (CVE-2026-45186) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default expat-devel-2.5.0-6.el9_8.1.s390x.rpm d7cb4d8255dff88752764ce16c4103fb49cdf53e2191d84f760a0f775bcc7fbd ALSA-2026:23332 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mysql-errmsg-8.0.46-1.el9_8.s390x.rpm 0e0c6d1290f53538c663284f5cf32a359d6479ccb5526252ef85ba35284f95a3 mysql-8.0.46-1.el9_8.s390x.rpm 423204c62899f80eac388f7e6998f4718f3d42296fb2b02c739cbf4c8200ee36 mysql-common-8.0.46-1.el9_8.s390x.rpm 6f3c6229e5895975f4d4ca1beb2601b9c07af42cc5a80594c30401bbc8bf69da mysql-server-8.0.46-1.el9_8.s390x.rpm b1ec741c7146b1b5efb3a2ebec1a2ac4f93342c08da447b127f167f2701e2e75 mysql-libs-8.0.46-1.el9_8.s390x.rpm c8d3018f29895389ab7fedc9bdaf34aa18005c539fe86feed7950dd12c41bca8 ALSA-2026:24367 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039) * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind-9.16.23-40.el9_8.2.s390x.rpm 1992140b7b84fbc7bba3ce704372d7dc3355c5d9c7d81d5ff5d2b3d5026b1c9a bind-chroot-9.16.23-40.el9_8.2.s390x.rpm 41a1507d4a6efbde168b92c27fc30ec20aa40675cc867804988ec3c7f554abb3 bind-utils-9.16.23-40.el9_8.2.s390x.rpm 766291d44c29b4ef7a8222befbc615eeb25b59b296d6936b50fd3610bb4053f9 bind-dnssec-doc-9.16.23-40.el9_8.2.noarch.rpm 78ce8fa09289f337d1c9605ec59161b7ec062545be0257457b2049b135335eec bind-dnssec-utils-9.16.23-40.el9_8.2.s390x.rpm d31218e035eb9acbf7fa326a881c571cc4d299e9239e0fbb129a6bd25652133b python3-bind-9.16.23-40.el9_8.2.noarch.rpm d62b2932b3258c28a8da5012072e55ca68ebdaf6ad231b705ef07006e52ad166 bind-license-9.16.23-40.el9_8.2.noarch.rpm ee9de953de235be914cbf5de22b22afdd8182767dd2ca9f95eeee04a07552a60 bind-libs-9.16.23-40.el9_8.2.s390x.rpm f18989c74bf82f256b84cd31560c2d77e2351b52af17968062d09e7bde3296dd ALSA-2026:24368 Copyright 2026 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039) * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind9.18-utils-9.18.29-14.el9_8.2.s390x.rpm 322ff1c9493a5c144554a711e14f86f4efd81c42ac7d2ecf77d8b63dfbd9e76c bind9.18-chroot-9.18.29-14.el9_8.2.s390x.rpm 5dd02ae3d51c9a77c2fcb73963bef540d52515a876c08b56279337f89b99a965 bind9.18-dnssec-utils-9.18.29-14.el9_8.2.s390x.rpm 8a66be4c64da88cea18ce45bfac36a4d26110ee66601db75d8b412a4b41b6274 bind9.18-libs-9.18.29-14.el9_8.2.s390x.rpm a04783efe76932a1ecf029500aeb82e440b13ef313d48465db7274ae8c0c9778 bind9.18-9.18.29-14.el9_8.2.s390x.rpm c430d8db0bca86280948cc164f6cd8d267035e8bfb1e741c555300810630febd ALSA-2026:24369 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944) * unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959) * unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution (CVE-2026-33278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default unbound-dracut-1.24.2-3.el9_8.1.s390x.rpm 2a4d26b02429e61d5cf2b716715238dbb67f199deb7333bd2cefff445b1ac7c9 unbound-libs-1.24.2-3.el9_8.1.s390x.rpm a4689d9536f82fe22c822522a0890f37f1677a2beaf64a2f2a7bd809608a75f5 unbound-1.24.2-3.el9_8.1.s390x.rpm f111418c893b952d44c6c874176dc19cea4c69c69e2a3c4ed481169d44441204 python3-unbound-1.24.2-3.el9_8.1.s390x.rpm f2cce6fdb5e2331a25466b271f8c80c1d51b29f6100a7dede58f8d064bdd0be8 ALSA-2026:24370 Copyright 2026 AlmaLinux OS 0 1 Important

frr10 security update

FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga. Security Fix(es): * frr: denial of service via crafted FlowSpec component (CVE-2026-37457) * frr: denial of service via crafted BGP UPDATE message (CVE-2026-37459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default frr10-selinux-10.4.3-3.el9_8.noarch.rpm 781bd941283c3f90faf0deba317db50c9b40a431d1ba99b3f4bce29a8895fcb7 frr10-10.4.3-3.el9_8.s390x.rpm c7b762a8395214ede8fc5d35437a4a1032d434aa5703ee3a44a7baf85ca3910d ALSA-2026:24371 Copyright 2026 AlmaLinux OS 0 1 Important

frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: denial of service via crafted FlowSpec component (CVE-2026-37457) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default frr-8.5.3-13.el9_8.s390x.rpm b5f997025d058e029f85c902000c85bf931d1dec87fc419fd984c5a8599e6d6f frr-selinux-8.5.3-13.el9_8.noarch.rpm f3d4c9040abdbc552bc5a5fad2c15e49efc021fd0bc624074688e7cc57683945 ALSA-2026:24381 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-debug-devel-5.14.0-687.13.1.el9_8.s390x.rpm 224583c111686add3faea655909933950254d4ca9643ef5773b49b7302242d53 rtla-5.14.0-687.13.1.el9_8.s390x.rpm 4f018e09276bfec24fb07f532d29318416c8f1fff8d110ba795ad8943c653fe5 kernel-doc-5.14.0-687.13.1.el9_8.noarch.rpm 50f24be4b5835e3190d3216b4b9fbd7923274a14f9360ed3a65d69544c49d3ab rv-5.14.0-687.13.1.el9_8.s390x.rpm 5380e560c8623aa083a90981ffdb967891404535a05af7019e7b294ea9c71ff5 python3-perf-5.14.0-687.13.1.el9_8.s390x.rpm 584fdc29954c4c5b730a3b56be423c01b8e30e71d38cee755bc24f61effa0b3d kernel-devel-matched-5.14.0-687.13.1.el9_8.s390x.rpm 6387f8601aa7c8fe7e92d089002834c9e377b89bba654f744013ea2e3701ff6e kernel-zfcpdump-devel-matched-5.14.0-687.13.1.el9_8.s390x.rpm 64babb581e1b61b077b77c41b751f50ecb8992f54f1b76f1d8d7954e0fd98f2d kernel-devel-5.14.0-687.13.1.el9_8.s390x.rpm 708e7f4e7f0e08437fcea9fd2db98e1750910468bebc9c80f612a3ea3fb617bb kernel-headers-5.14.0-687.13.1.el9_8.s390x.rpm 796aa68a4bfe4b66dc072c4d1e973c735b28b510e9b6bee55e6d2a5e7ad94143 perf-5.14.0-687.13.1.el9_8.s390x.rpm e554053b2d50aaa28b8c98dd60f24ab426af3a047c5b220892178a63166cd017 kernel-debug-devel-matched-5.14.0-687.13.1.el9_8.s390x.rpm f134fe7d2ae3c65d08655b3629fe5cc91c3cab8dd49599b1cf660a2a5da08df5 kernel-zfcpdump-devel-5.14.0-687.13.1.el9_8.s390x.rpm f519dca17db03d1c781d3bf76b627f3bf62cb816b5a4656340b7864bda692f31 ALSA-2026:25049 Copyright 2026 AlmaLinux OS 0 1 Critical

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Missing access check on reparse point operations (CVE-2026-1933) * samba: vfs_worm does not block directory modification (CVE-2026-2340) * samba: group policy certificate enrollment uses <http://> without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170) * samba: Remote Code Execution in SAMR (CVE-2026-4408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default samba-winbind-clients-4.23.5-10.el9_8.s390x.rpm 07bf1061555ba4fcdd448d38eee97c1a9057c8d14fb8ba42e52e3d8fbf29de65 samba-winbind-krb5-locator-4.23.5-10.el9_8.s390x.rpm 16b734c53e15cfe0f0d32cefc223ebf1636081fe2a3cd093fbbd60ac44cd162e samba-vfs-iouring-4.23.5-10.el9_8.s390x.rpm 79b6704e341980a4baadcefc1c9361723c941a30717faf7458420c796d263643 samba-gpupdate-4.23.5-10.el9_8.noarch.rpm c325a0e0088628360ca06b78809e6c90bb01bbeb11e2c19acee479e0383e4627 samba-client-4.23.5-10.el9_8.s390x.rpm c78cb1da5eda18699803d61d3fbb6963846a2c8c9048a4ea66ee7c590855913b samba-krb5-printing-4.23.5-10.el9_8.s390x.rpm ee54a0edec23b0cd0d58ab4a3f3c0a4a6e60a03f67f5082f3cff95989e94bfa4 ALSA-2026:25051 Copyright 2026 AlmaLinux OS 0 1 Important

libyang security update

Libyang is YANG data modeling language parser and toolkit written (and providing API) in C. Security Fix(es): * libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libyang-2.1.148-1.el9_8.1.s390x.rpm d35d3210abcdcf4975971e533a2da6438e62431a89a412edb8310a40be451cc3 ALSA-2026:25052 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mysql-test-8.4.9-1.module_el9.8.0+263+ff5e95cf.s390x.rpm 3a56b60ed38e3436517d734a993d0e3a66bd95f29ae038313d97ebc921592888 mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm 69e976d54c4bc862ea946aa1957a4af06ba625136f6734651e78787b4180585a mysql-libs-8.4.9-1.module_el9.8.0+263+ff5e95cf.s390x.rpm 75fa58d134750ea4851adfb9508b9b41c447ac0711f5fc4a40f14a018736aca3 rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.s390x.rpm 8c0a757ea82924ecf340e621f29cb6d7322ebd996c0b7e05116c51486e2b6c37 perl-DBD-MySQL-4.053-3.module_el9.8.0+235+a38ba90c.s390x.rpm 9721488d22bfe9d43fa97ac410b4a3f93a0e2d12270603179553c89c960507c3 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm a6a291c26e1b08f26ceec3afe3bb4650cb21e203ce04cff2350db34cbd12e24d mysql-devel-8.4.9-1.module_el9.8.0+263+ff5e95cf.s390x.rpm ad047610d297cd2d61b3c9440c39c59bf7cd37fe5880c1c6f711b0488e81811d mysql-test-data-8.4.9-1.module_el9.8.0+263+ff5e95cf.noarch.rpm b102d96964c390d8c54754efd184d5927d4d6d4c4f2b507100ce55e02df85b5f mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm bad50cf06e6ea4327ddfa8063a98361e493a8fe7dcf921be55ba12177dac540e mysql-server-8.4.9-1.module_el9.8.0+263+ff5e95cf.s390x.rpm c10915cf757e762680c8db174ec1bf249482fb30a518fcf56d9057643468dcb2 mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm ce7c078f962fd614387a5a86f7b229eb57758d44e95f0f1ad2cd522019019b61 mysql-common-8.4.9-1.module_el9.8.0+263+ff5e95cf.noarch.rpm d8cbf17ce48d657b62b19c6891bc7ad0445861ea6770ba0e037e23ffac6cfba5 mysql-errmsg-8.4.9-1.module_el9.8.0+263+ff5e95cf.noarch.rpm f2a1a76fb605a38e2220f85cf172bc2ed3e26a07681a9a2ef11653bba730b085 rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 mysql-8.4.9-1.module_el9.8.0+263+ff5e95cf.s390x.rpm feb82926550eba26611b244f73cfda83794fe0210efc2a14d45136ad341f4834 ALSA-2026:25057 Copyright 2026 AlmaLinux OS 0 1 Important

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mod_http2-2.0.26-6.el9_8.1.s390x.rpm 833d5f7cf871602d1015e93396a8ec12e5f96307c7d02e6ee101a70a3d7c1628 ALSA-2026:25058 Copyright 2026 AlmaLinux OS 0 1 Important

poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default poppler-cpp-21.01.0-24.el9_8.1.s390x.rpm 20d93a82d5b292f5ca524654035b12f100599295522a8f58af14a526f9651288 poppler-21.01.0-24.el9_8.1.s390x.rpm 5eccfc24a4aa305fc341d9ca8b4a018911eb981e0d505d5ac4b4d7a8e7c2a7e8 poppler-glib-21.01.0-24.el9_8.1.s390x.rpm 885e60536700433a4c9db458a64cabf22f0a8426499eb788009b200d47eebb85 poppler-qt5-21.01.0-24.el9_8.1.s390x.rpm 9f9817e1ba08b30bd7d8a9c80e382b2d7c7a74708769e844b623fe0bfe75dda0 poppler-utils-21.01.0-24.el9_8.1.s390x.rpm d693e5b467338b996f6ffad2d9ad07f15fadc5b8614e6c45fb0cd49e2a8bb554 ALSA-2026:25217 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-perf-5.14.0-687.15.1.el9_8.s390x.rpm 326c9902f5de9e87b5233b761327caa19eb62f68e42bdb82af5a59667eb05b5f rtla-5.14.0-687.15.1.el9_8.s390x.rpm 39d6e312272756114d3b48ee3a0eb54860d5a60063f906a668bf831f64aaf10b kernel-devel-5.14.0-687.15.1.el9_8.s390x.rpm 4427e5755df1321bddd4a7c6631ca12edb21c9739e1e6ee118082fdce64aea78 kernel-doc-5.14.0-687.15.1.el9_8.noarch.rpm 46ca4f642096e10ff37d9ec5a5311072fc55575922e83524e8358638996b0b39 perf-5.14.0-687.15.1.el9_8.s390x.rpm 61de2d64215c83d2168a68bc55187a2a67f591ef74a431a4ad336bd16ded1261 kernel-debug-devel-5.14.0-687.15.1.el9_8.s390x.rpm 68162cc9120ae95c3483ccd299e8efbaf484af907f2f136e82a3bb52be6082ec kernel-headers-5.14.0-687.15.1.el9_8.s390x.rpm 6d259732007cd38ebc686d3dd916e0df33609aeb986c112064a20bd22bb44d2e kernel-devel-matched-5.14.0-687.15.1.el9_8.s390x.rpm 7034eb956b1c1eca0d049a7bb986fa0ee337fef70e4b4a1baf49c1d0c59c70a6 kernel-debug-devel-matched-5.14.0-687.15.1.el9_8.s390x.rpm 71fb2e3df68139930c5db6d981c9025836f2c09bbe51fd689eea70eacd9eff05 kernel-zfcpdump-devel-matched-5.14.0-687.15.1.el9_8.s390x.rpm 94654de4d19a3e914c1953f18f60bd063c28342c9e46e6cd5ce325e81ebc0482 kernel-zfcpdump-devel-5.14.0-687.15.1.el9_8.s390x.rpm d2ddab8e453f06d575cc27008f3be8effd51104e1ef185fbfd421bbbf548ea37 rv-5.14.0-687.15.1.el9_8.s390x.rpm d69eee128c884fc54c5d9ee92eb974c1917ca3aeb3bd689360812cb8d15c0de3 ALSA-2026:25219 Copyright 2026 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479) * redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631) * redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default redis-doc-7.2.14-1.module_el9.8.0+258+b8f945d3.noarch.rpm 36de6c3ed6aae80f0229ecf365a3e6816a211966224f1eccddbdcccff6cbf232 redis-devel-7.2.14-1.module_el9.8.0+258+b8f945d3.s390x.rpm 537c5ad0cdd2228f9edbdd319a210a2fe8697db37cd569de1eaae004f4ad991e redis-7.2.14-1.module_el9.8.0+258+b8f945d3.s390x.rpm 5a4a0a43ad43da2d18e4199ee761de63f79a15172270501a12aa3b7bf6b56a9c ALSA-2026:25220 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-hostfxr-8.0-8.0.28-1.el9_8.s390x.rpm 236d85579cd28e58dbafe9d383cbdef28cecab9aadd5c81d1049d5729e80e8e9 dotnet-sdk-dbg-8.0-8.0.128-1.el9_8.s390x.rpm 27999af92bf21b122dbd9c0d1f5e6f2dc3e5aff3a383b789353a616b80bfa650 dotnet-templates-8.0-8.0.128-1.el9_8.s390x.rpm 29ab07ff4884ccf33a97fea74b920b59b51411e3ca519aca8f70d18c5b8ef9c2 dotnet-runtime-8.0-8.0.28-1.el9_8.s390x.rpm 3a955d6f5a2aae255b6bea6b2d788d3fb4fe2c24926d15ecacdd614b6d67d1af dotnet-sdk-8.0-8.0.128-1.el9_8.s390x.rpm 50388043ef6ae79bcdb9e2e754efb2b1bbf784a5d35334a344994170df9d1b49 dotnet-targeting-pack-8.0-8.0.28-1.el9_8.s390x.rpm 5e9cafc627f5049884f2b2a841c820d2d990d8af50413862b4eddbec86411423 aspnetcore-runtime-dbg-8.0-8.0.28-1.el9_8.s390x.rpm 6e48371617c78639ee2367632087981275c1aa0c07768ed1f3eeaf851d4d1c5e aspnetcore-runtime-8.0-8.0.28-1.el9_8.s390x.rpm 6f8e63913c01b46b47380b993147199d5cd4d6fbd38fd985e7230d58c7b1fc63 aspnetcore-targeting-pack-8.0-8.0.28-1.el9_8.s390x.rpm 833af6da21b0e4d271e4d1590c96f360eede0a3394fc03fb2d14ee387b6aa38a dotnet-runtime-dbg-8.0-8.0.28-1.el9_8.s390x.rpm 97a37c6c75763ec0e4fd6f9aafe1f7a5571770c084e535a7d62ab2ee8c7e61e2 dotnet-apphost-pack-8.0-8.0.28-1.el9_8.s390x.rpm e9cecb56de578ee122e0343ac8f72c706f678b4de97f39de97bc5ed16b7b5cda ALSA-2026:25221 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-hostfxr-9.0-9.0.17-1.el9_8.s390x.rpm 4c47229153d5d4bf7b96d99caf167cd5b2e7092c67f1ce4795ac7d4dfd0e4caf aspnetcore-runtime-dbg-9.0-9.0.17-1.el9_8.s390x.rpm 53430d9614b66727972a26d5b07ab5f4c528f5fbfb8bf15e6122a165ce863d06 aspnetcore-targeting-pack-9.0-9.0.17-1.el9_8.s390x.rpm 59b9ac79c689958de80f2bf0c768066e8b1bbe36a7c9328dcc133b159bb71f6f aspnetcore-runtime-9.0-9.0.17-1.el9_8.s390x.rpm 6acccd0a4a0b005e6b450b193ffe0b69b03dd7b8b97711fe7db03525f59dbe72 dotnet-templates-9.0-9.0.118-1.el9_8.s390x.rpm 7eb435a784b7dd89dfe41122f546f8155b42f5518fae5bfdf27ac37249d4c3dc dotnet-targeting-pack-9.0-9.0.17-1.el9_8.s390x.rpm 82c7dbabe617245471bd383786a71711d30d0185368110bd14cd7d0873758767 dotnet-sdk-dbg-9.0-9.0.118-1.el9_8.s390x.rpm 919f2c202d3e1969f9f12b0a26181ba2e646dc670d7fc17058e908a55fd23fd5 dotnet-runtime-dbg-9.0-9.0.17-1.el9_8.s390x.rpm b275e93a85dbc1ae1d0afb028add2ba8857526e32ce015b53179184d8a790f1f dotnet-runtime-9.0-9.0.17-1.el9_8.s390x.rpm b35d2e5ef0a2702417af25aa946ac108707f52ee7ba3c4e724e401f48fdae526 dotnet-apphost-pack-9.0-9.0.17-1.el9_8.s390x.rpm b84ebf56322675ccaf910c4646b77622082138907073f943e955abade3f7a720 netstandard-targeting-pack-2.1-9.0.118-1.el9_8.s390x.rpm cbb433cad5398073f9e2126026341b02aad0a0d706cd8bbb4859db8c0fd3857c dotnet-sdk-9.0-9.0.118-1.el9_8.s390x.rpm da1571e333873a1c1493fd53f7f29bba0c9a0a70ee59abc550239bc1c7b123d5 ALSA-2026:25222 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-runtime-10.0-10.0.9-1.el9_8.s390x.rpm 198f0f2f1da5769cdfcf6a4592b6b4b381360c30f028ea0a90cb3910af543989 dotnet-runtime-dbg-10.0-10.0.9-1.el9_8.s390x.rpm 1d66f16d86b8eff660cb93e73c159fbe37c8e6d4bacf403019870970e9431b93 aspnetcore-runtime-dbg-10.0-10.0.9-1.el9_8.s390x.rpm 2de53a09f0b1795ebd81fda4748848065b73010a53d7df5a4cf00b7083e6a21e aspnetcore-runtime-10.0-10.0.9-1.el9_8.s390x.rpm 34e9dcdcff935f6f24ab1a1ee89789c177ad3fc125543ea0320f6d9017786f25 aspnetcore-targeting-pack-10.0-10.0.9-1.el9_8.s390x.rpm 3ffd5c52ee9653a88dbb51c6317b5a4232abdf102dde09ca899063a8971bd1f0 dotnet-host-10.0.9-1.el9_8.s390x.rpm 6cb73ab0b6744c69b0b6357d00f46c092c299395727b400c780e6c968b038f7a dotnet-apphost-pack-10.0-10.0.9-1.el9_8.s390x.rpm 937e8a0ee71d0cf7c606b66874950a241e1fe3d169586d1bfe03a2b8bb2ad98b dotnet-targeting-pack-10.0-10.0.9-1.el9_8.s390x.rpm 99e4ebaacb40d7c76793a35227aa2eda8de096d53ec5c619e556b95e30646e57 dotnet-sdk-dbg-10.0-10.0.109-1.el9_8.s390x.rpm 9c13121266750ae77719eaa5417d4c7942b65f254fe1862f9506271cc290c9ae dotnet-hostfxr-10.0-10.0.9-1.el9_8.s390x.rpm a4e1e891111aa0beeb6b2fae1869967fa62dcba192dcbad501e69eba658be014 dotnet-sdk-10.0-10.0.109-1.el9_8.s390x.rpm c6c6bed2f3dfd97bc904e58f0c2a126866c0be2d3f64367df19f79d87bcfeb32 dotnet-templates-10.0-10.0.109-1.el9_8.s390x.rpm ea55473f3c3ccfb0bc5a0f1568dfccaa5ea5bc1c65160f70955fbfe00fc828b9 ALSA-2026:25239 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing (CVE-2026-7383) * openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption (CVE-2026-9076) * openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. (CVE-2026-34180) * openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVE-2026-34181) * openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182) * openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (CVE-2026-34183) * openssl: NULL pointer dereference in QUIC server initial packet handling (CVE-2026-42764) * openssl: Possible NULL Dereference in Password-Based CMS Decryption (CVE-2026-42766) * openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVE-2026-42767) * openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (CVE-2026-42768) * openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVE-2026-42769) * openssl: FFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770) * openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445) * openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVE-2026-45446) * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default openssl-perl-3.5.5-4.el9_8.s390x.rpm 4a8784547399666f245d26d61af83a3e565bea302bbfd442623186433f6ec903 openssl-devel-3.5.5-4.el9_8.s390x.rpm 5b8cd0971ca0238fd3dde01dd2299ec2528ae9831b620db6fe9030422323f350 ALSA-2026:25925 Copyright 2026 AlmaLinux OS 0 1 Important

valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479) * redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631) * redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default valkey-8.0.9-1.el9_8.s390x.rpm 07d2f8e0ebbf8ab0cf4a525664d2fd850768bdc52f23f2cf1222c679e8cc122d valkey-devel-8.0.9-1.el9_8.s390x.rpm e44cebcd4d658d367631a85b9b81f1dac71bcaf18a6209d8fb9791b83c5ab147 ALSA-2026:25927 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955) * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default webkit2gtk3-2.52.4-1.el9_8.s390x.rpm 21d7cf1f0dd59b1cd5f0bd6207bb93317e87150bd21406bd3cab7207a9c6ab4e webkit2gtk3-jsc-devel-2.52.4-1.el9_8.s390x.rpm 490c503b1bcdbc996bea2411e354e17f65e7a07611db6f6ed6bb3d63b15270e2 webkit2gtk3-devel-2.52.4-1.el9_8.s390x.rpm 57353d5d180e5bc2eaeed94664e0ac2f260f31870f524084bca3fd7e763ba505 webkit2gtk3-jsc-2.52.4-1.el9_8.s390x.rpm 67515de3fb6a2704bf8145f6aeec7404d797ade103ad5829a596cabb567629d7 ALSA-2026:26203 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm 0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906 postgis-upgrade-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm 0d1c22f319803439f1f3fe03590a8fd1e006f9b359eae567fb17c8845c24612a postgis-utils-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm 207763f8f02b72b368e090ce2bc8dd30299169d1b91ad9caa9eeb5a46db2aed5 postgresql-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 20e39b60a1104e3ae01b37c84f9efd3bc7dfef87c1b015dacafda67fc88ecf3d postgresql-plpython3-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 2c52e35cc731404883d486a1e1345f11b0881105d0600231bd48c3f2f26e78e3 postgis-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm 4a25d87093ab238fc40709991efafa8aab70effba17c6f29688a1142a0b1eeca postgresql-private-libs-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 4b25e654fd8ac5628e4dba0eccfbc4163b0e81bc9950fc302c9594c2de0baee1 postgresql-test-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 502eec3fdb269233d5ac1c461c1936a9db73a568a3137fd13cc35730ef23cf98 postgis-client-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm 5496722af9373b8c71fb71cdb15cbaaf21a4e679227c9bc9316d0619309be796 postgresql-private-devel-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 628b53cc01c1c654c79754558cd77a96fa763c7975b41df417609208dd69ecb6 postgresql-pltcl-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 72795a86dd2e9913d1af3597ada2f0c225eeb6af43994f828532da8392745ee3 postgresql-server-devel-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 7d55f2c0f4790ddfca49e5c3c4f1679c07c095553841f8db91f167fca1f39514 postgresql-plperl-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm 901b4e7376e840d65cd9c9690cabe5f3c31ec4818ae77872fcde455eef711aa2 postgresql-test-rpm-macros-16.14-1.module_el9.8.0+266+1e661e97.noarch.rpm 9232351ae957fe56b5a13893ddc43647683af1ce4e933cb6b2e1651d097a4163 pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360 postgresql-docs-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm b1309cf0c8b94c08b0e93ee4f264df934cc9ae7920d27db6799105d1f5653824 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-static-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm b95aee4938f82b9a3144972c954c605f430b4e7a9d2446a49fef28fe109aee0a postgresql-upgrade-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm c2ef704e1f97003d916e1be63a21af6a052f91ed5079c604837d29f5b5664849 postgresql-upgrade-devel-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm c491c66c6b045415c37170367f6c3d9991ec5954743f638e2421050f1f60aa0f postgis-docs-3.5.3-5.module_el9.8.0+236+2d3cbd4c.s390x.rpm d5e98e2f38fdf63c7a380c83e03efe4391e1c355d9a6a209d5e3298eb99645ba pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 postgresql-contrib-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm dd4c8e5c44f353b681af33a5963008b302409b53068fc5979f3d005dd9c83391 postgresql-server-16.14-1.module_el9.8.0+266+1e661e97.s390x.rpm f2fdf6da725c81fe195ff375219baada36d8dad5ce6836a945a5c561b5885b96 ALSA-2026:26204 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.s390x.rpm 0aee221df9fcadb4e5d55081ba918710e491dd25e75f4cbb868972cba3020269 postgis-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm 0b52cca59e22c5219b56da5d9b96c86c042dbf31ba07f3aecbbb9b21da046266 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.s390x.rpm 2620edfd9ab8983b1d904b2ebe15fd1a471e2c9b841578def8489c160a857b43 postgresql-contrib-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 2a59876754017ea882aa897dc106f7f9f4960e5171c98b4d6091fd2b6e86f339 postgis-docs-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm 2e532d21729c79293a68567f875ec8a8f286d2dd83f46f6de723360ca66b8083 postgresql-server-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 425a0d6e4a5f41d66693fd6605545a087358d074078238e21f2ed34aa54a259e postgresql-pltcl-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 431b20ba5ad4a7a7c7dc5bb1d2d09206a1221e99b352fcdea32708c115c4842b postgis-utils-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm 4349c80a1ad7b2913c1fa5276b656c83cd2ab516e10c7a6f2c00afbdb95e7aef postgresql-plperl-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 459ba186838c84c8cbb5e2cd4efc6eff481d95c872d8b4ffe821038271a7047d postgresql-test-rpm-macros-18.4-2.module_el9.8.0+280+5ad12178.noarch.rpm 81dd7290e5be11670a1072bc113b92cf9e802f39ce597fd2b6c9d72761542cf2 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.s390x.rpm 8c4fc11feb6c33f647222fe6ab3a8655915ccf335954744c8092d36a4732ac0e postgresql-upgrade-devel-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 8f520ad19241bdb0f904f4728971983a1bb9e87e180326bc4f68b69a35e284c8 postgresql-upgrade-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm 96be368961c5ae0fef0dda5895ac288a9ea59ba1e415058e00d4c66cdf62517b postgresql-docs-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm a1bbbc933e63e1340d94c7cb3f0a7812b0e54360f3f7f18a82b6033e184e3007 pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.s390x.rpm a74781a4f88bc94ae1c1617e887bf0c8a360b201e425d5cd327754bba1187458 postgresql-private-libs-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm b167cb493f138e8476e05d7130fd864f0449a0f31cf3a29525f823141461d952 postgresql-server-devel-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm b537996513f75eed5b47af67a1d332fbff33e23b628faf2f325b5437108784ae postgresql-static-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm d3fb1d883a12dd551a7f73bcfa9ab3366936521b9d15cc0d2ae386bf0ea36522 postgresql-test-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm e0925207dfc02a28afedb953b036952724c045d210abab6d0685ffb4e0068813 postgresql-private-devel-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm f25c92db1d796dcaed8433a22798b4e3bbbfc708f0f8f11e882643e8e40701bd postgresql-plpython3-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm f2712a1d8ca8762938ffcb897552ed15ef0fa87e779caed7f16cb788d93ff057 postgresql-18.4-2.module_el9.8.0+280+5ad12178.s390x.rpm f3ac56dc1378376a0ccbc159d81f7a3cd10e9a36e90de2960a595ddf07cbcee5 postgis-client-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm f55d1f7792bf767efeb290fd80942f1973b6a1d1ee149d48d72358e5b352f855 postgis-upgrade-3.6.1-2.module_el9.8.0+239+6fb51d38.s390x.rpm f86b7be743fc25489506e36c3736e46d5a7b560bb07bec5ef0ca5b4ce3c2ec7a ALSA-2026:26205 Copyright 2026 AlmaLinux OS 0 1 Important

postfix security update

The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS. Security Fix(es): * postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default postfix-ldap-3.5.25-3.el9_8.s390x.rpm 1c800514adbdb903cb186093828add888e222853ae6bbba220642f77474d7397 postfix-lmdb-3.5.25-3.el9_8.s390x.rpm 2a76251f40bef00f64d2839d433e243a9f92a44bcb42e46aac3397e2401bb082 postfix-3.5.25-3.el9_8.s390x.rpm 3e1cd5790749c0bcb94ecc402acc1cee2e72c209243937f814601c4cec99c24c postfix-mysql-3.5.25-3.el9_8.s390x.rpm 41c3931b764a05bc90112db2a5a47e7cd7a5b3e7ea101943b8d5d8007bcb819c postfix-perl-scripts-3.5.25-3.el9_8.s390x.rpm 8b0ee23d05c5f9cd682fba7aebf3134da4963ec73bb6730151205ebb92b69870 postfix-cdb-3.5.25-3.el9_8.s390x.rpm a6a49058215ecee33066a65450e5a4ed951e3f26c30892cb8fe78fc7a5b24dda postfix-pcre-3.5.25-3.el9_8.s390x.rpm c51d244d1bf89b9c4643efc97273c50b2984a079732bdaaa3955296b3f098249 postfix-sqlite-3.5.25-3.el9_8.s390x.rpm d228fe120c5cc76f867e188e25d5cd8ff7d330ab49a5807e2873a9301f5af13d postfix-pgsql-3.5.25-3.el9_8.s390x.rpm d89cf33ecaad0a4c4ac27bd2eebb942d43433ab85c1c055ab7d01879d09d292f ALSA-2026:26206 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default fence-agents-bladecenter-4.10.0-110.el9_8.3.noarch.rpm 00e37728dda29b5db7f35488eabef0b9443f6661414cc56466b72687a452aa93 fence-agents-cisco-ucs-4.10.0-110.el9_8.3.noarch.rpm 07314381d6f3062faf4d14b1f8b5bb21035668ad128f74e83c6929c8215cceb2 fence-agents-kubevirt-4.10.0-110.el9_8.3.s390x.rpm 13004eb9cc8d5edb86319f8e0889bd8bd191a4d0f10b3979e64a8b890db688d9 fence-agents-ibm-powervs-4.10.0-110.el9_8.3.noarch.rpm 1c8b01a5621adf4e8e8b4253daa2e30f931e1b77ec555943aa215936c55d720b fence-agents-ipdu-4.10.0-110.el9_8.3.noarch.rpm 1df62191826513e27705a2656bd81946db58f11a8c31ee950af5ff259364a6cf fence-agents-ipmilan-4.10.0-110.el9_8.3.noarch.rpm 224a833d099b68da7ff864f73f319140df571fcc42de30dd684032d569574a23 fence-agents-emerson-4.10.0-110.el9_8.3.noarch.rpm 25d5e3af82025a90e11e690fb07089a0f8daf6a318c7cca8fc9846ed8a43a284 fence-agents-intelmodular-4.10.0-110.el9_8.3.noarch.rpm 286060cd04d785707cacfc62fc7ab5934ce6dddfdcb8d030ac75e7deb424eaed fence-agents-hpblade-4.10.0-110.el9_8.3.noarch.rpm 2aa566bee9075d5a526555d9cf42b1d9580f669612c902599af1f4dadc49aab7 fence-agents-drac5-4.10.0-110.el9_8.3.noarch.rpm 40f6cdeac74af6acd4d4f3131a49eab7b861d23d5950d8339c41a9cae2a7aced fence-agents-rhevm-4.10.0-110.el9_8.3.noarch.rpm 4765fd5ed8600272a6785e78c78721a78fecf8015cc6911f07e51193b83d6eaa fence-agents-common-4.10.0-110.el9_8.3.noarch.rpm 48b240b9489fde1ae9a765be495a522d9decd867b517769be1d3df6fb1d0df20 fence-agents-apc-4.10.0-110.el9_8.3.noarch.rpm 53791efe9cd7b3501b56515af69217444d30f24d070525d3ea3ec35ae3fc2e8a fence-agents-rsa-4.10.0-110.el9_8.3.noarch.rpm 53d732cab69d63bb3fbb3ade4e046a63020cbfbb066c7c3efa12bc2406864eee fence-agents-mpath-4.10.0-110.el9_8.3.noarch.rpm 579ab4c114eb3eb54f82756de6baa60de68b980c1cb820b25ef85d8345c5eab0 fence-agents-heuristics-ping-4.10.0-110.el9_8.3.noarch.rpm 5a22ab5fd2021ee1192e62a8ec4dd6b536f1940661776286cea49825f36a6a75 fence-agents-ilo2-4.10.0-110.el9_8.3.noarch.rpm 5b53a6864e7158f4d316eff9f250db6c81fbc9b45d700d96e4600fb17ceda9df fence-agents-ilo-moonshot-4.10.0-110.el9_8.3.noarch.rpm 5c6a7d45cf476b342b5bda86914a0653750d99c8bc528e17a35fea466ae92b7b fence-agents-eaton-snmp-4.10.0-110.el9_8.3.noarch.rpm 631719558d0fd3add8ee1671ff950cd4b3aa7d4eab261f10f3fbbdd2c63fffed fence-agents-cisco-mds-4.10.0-110.el9_8.3.noarch.rpm 649bb606e84b0bd4ccb730aeb0915854dcf3b6418fc72b2f9c98af1d40d77738 fence-agents-amt-ws-4.10.0-110.el9_8.3.noarch.rpm 65f6a54f34c5b1ca7b2cfb072c44fb720956487cd021c29b751255a32a7f575b fence-agents-vmware-soap-4.10.0-110.el9_8.3.noarch.rpm 69936397859f5b697b9f5b6f1b392976d2a92d3507b0a2c9494c597cc7d4ce0a fence-agents-rsb-4.10.0-110.el9_8.3.noarch.rpm 759df41020d8ae447b079a590c4610b0b85c41016dea069d286434d7c9c96acc fence-agents-wti-4.10.0-110.el9_8.3.noarch.rpm 79dbc3ed7ac50cfbf3279e43328b0f56d0da1f24de7f72e3464d1e019606f1d5 fence-agents-kdump-4.10.0-110.el9_8.3.s390x.rpm 7b54328c73201c7fcc2d1daae21eeab1587b71e60701e04bdcca1e565fc61f77 fence-agents-apc-snmp-4.10.0-110.el9_8.3.noarch.rpm 821056fad813d659253688f4d10394948ba5e31554d174c8fd8026d331ad6b22 fence-agents-brocade-4.10.0-110.el9_8.3.noarch.rpm 8abbe378138e11b97a8aca78c63a33b000a2597e3f7613b111c9174e34d0d809 fence-agents-sbd-4.10.0-110.el9_8.3.noarch.rpm 91f498b308c9cd4ed2e8df90377000fb564a0dbda6671e93d3bfc7d57ba899a5 fence-agents-nutanix-ahv-4.10.0-110.el9_8.3.noarch.rpm a24939641caa8e05a93b2dedbdc6a0e46298f2613f9a976c88bee3c8ccf07452 fence-agents-redfish-4.10.0-110.el9_8.3.s390x.rpm ae99571daf568142afc811f45a2b5affd8478cf2aa6baf818713065b0a3720e8 fence-agents-virsh-4.10.0-110.el9_8.3.noarch.rpm b025cd9768ed20007f7285658b02fbb4d2facbb426e765932e4345c0ba68fa78 fence-agents-ilo-mp-4.10.0-110.el9_8.3.noarch.rpm b7390c0ffeb016811174dca151f06d152862c453dade59e7b56e8a5ac60cb6c6 fence-agents-ibmblade-4.10.0-110.el9_8.3.noarch.rpm c18942616d1fff28d17144af7baaf9a70a40fff6a83e5dbd88cb067933220942 fence-agents-all-4.10.0-110.el9_8.3.s390x.rpm c8554294a3bef79e57b69544fb68ed72f2cf07708153d9b266d6873fc19f63de fence-agents-lpar-4.10.0-110.el9_8.3.noarch.rpm cf0e857b4d9ada11081753882a1da1fabd14d4b9825d2b8ca0cc3bf7085fc93d fence-agents-vmware-rest-4.10.0-110.el9_8.3.noarch.rpm d1eba44d3531ce4a799fbc8d02056d04f5dd4a556245be51cd7ba1c455ac40ff fence-agents-ifmib-4.10.0-110.el9_8.3.noarch.rpm e4e01af89f856a43aa98614c741c950493755670e36aa46540bbc8224f49ed40 fence-agents-ibm-vpc-4.10.0-110.el9_8.3.noarch.rpm e6eeefc15b044228c808a6eccf3e9cc9d00c953b3a167a6c37b6c3b00e07ced0 fence-agents-ilo-ssh-4.10.0-110.el9_8.3.noarch.rpm ebfc9e72eaddafbe2c4636ddbca2aeb80c5915efed604cba68d06c82c27e842e fence-agents-eps-4.10.0-110.el9_8.3.noarch.rpm ec94d122859a024f2f8ff080bb3cbd32ab942e9d9e914e283d6cbe2ee5ecb234 fence-agents-zvm-4.10.0-110.el9_8.3.s390x.rpm f566fbe3074984c7651d803b2efee29579049219cc1777cacb7a572851fce34d fence-agents-scsi-4.10.0-110.el9_8.3.noarch.rpm fc7c22dc20aeffcae8b9269163145e3300c98ab7f29f433353991885621ded0e ALSA-2026:26297 Copyright 2026 AlmaLinux OS 0 1 Important

hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fix(es): * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632) * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libsane-hpaio-3.21.2-6.el9_8.4.alma.1.s390x.rpm 39a2dccf95b24b914a9e728e634ca861dc78a0db559ade93fe5cf6c018aa761a hplip-common-3.21.2-6.el9_8.4.alma.1.s390x.rpm 839a0b7c7aa2fc731e60279fc23206155278d47ec8279f43c0208233d9c74933 hplip-libs-3.21.2-6.el9_8.4.alma.1.s390x.rpm 9bfb1ced7dd013d7c1519a00dc234381cab33266d19061b396b30d022ce79bf7 hplip-3.21.2-6.el9_8.4.alma.1.s390x.rpm b3c0e89c301ae6dc1f55c46d350c09f9cfb31fb8060dc55c51a9323ed2bc476b ALSA-2026:26323 Copyright 2026 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default tomcat-9.0.117-1.el9_8.noarch.rpm 0eaf642ae4d9b596cae38404933890210da1f9df790f8e9048a0cd1da7462feb tomcat-webapps-9.0.117-1.el9_8.noarch.rpm 239add45ed7dd4f81c8cca324d5025907a07c6f8154f263608d6a8bb1851aee6 tomcat-admin-webapps-9.0.117-1.el9_8.noarch.rpm 5db74dfbab55a95108ec95867e68efae6ace0041bd70e34f0c7c9e543e175248 tomcat-servlet-4.0-api-9.0.117-1.el9_8.noarch.rpm 6b940066457482981ae06d10bf4546889a9c3977799f1beb065abc122a0f2cd9 tomcat-jsp-2.3-api-9.0.117-1.el9_8.noarch.rpm 8aef4525d23bdc46eef0a553d8380a1bf95c895e8199e5ac4fbaa8e38dbfe7d1 tomcat-el-3.0-api-9.0.117-1.el9_8.noarch.rpm da3e298483b203f2aea7165716ca26b73a6727b31b13e4403c9a18753680a302 tomcat-docs-webapp-9.0.117-1.el9_8.noarch.rpm e389e1e320afb9af3019d8d47769716b24d72708042c378490416de9bb7a0a64 tomcat-lib-9.0.117-1.el9_8.noarch.rpm f36e5317418dbb0ed928719cdfcb5ea2d81f2b8e3263c119a7deed73cd000863 ALSA-2026:26410 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding (CVE-2026-43618) * rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. (CVE-2026-29518) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rsync-daemon-3.2.5-7.el9_8.2.noarch.rpm 7c0373557493e91c344f66b7d76726c6390c3877128300de73d1b1b2e80c463e rsync-rrsync-3.2.5-7.el9_8.2.noarch.rpm d87baacd988226823837afa1d49f2b03f17f919d9b31c9480abd43994e280481 ALSA-2026:26447 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default podman-plugins-5.8.2-3.el9_8.s390x.rpm 4bdd5ecf688cdebb54df5f4c4c247b8dbaa3ccbc13a6a4f52af016106f4c9f0e podman-remote-5.8.2-3.el9_8.s390x.rpm 6f0182336bd5bd271b75ed4e541350b206fe08868ff7d46f715ee9d5978eb62c podman-docker-5.8.2-3.el9_8.noarch.rpm ea4950ecb9c95b7b1500b31873bbcbd8605c4ba657a2c19826324871dd9ae0ed podman-tests-5.8.2-3.el9_8.s390x.rpm ebcb4ecb0b1bcc713db1b2dbf99fe937141f68a6278c346c7016ef8932e7e646 podman-5.8.2-3.el9_8.s390x.rpm f75e2cee8d424862e7f29c86120add4e6b21403a9d20fc844c86c282630c968e ALSA-2026:26455 Copyright 2026 AlmaLinux OS 0 1 Important

389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064) Bug Fix(es) and Enhancement(s): * Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [almalinux-9.8.z] (JIRA:AlmaLinux-152356) * Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [almalinux-9.8.z] (JIRA:AlmaLinux-168967) * DS 12 does not handle escape char in bind user [almalinux-9.8.z] (JIRA:AlmaLinux-170269) * [RFE] Add OS-level thread names to all server threads [almalinux-9.8.z] (JIRA:AlmaLinux-174524) * Online export is failing when using the option "-s" [almalinux-9.8.z] (JIRA:AlmaLinux-180716) * Server shutdown during online reindex may lead to data loss [almalinux-9.8.z] (JIRA:AlmaLinux-183895) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default 389-ds-base-2.8.0-7.el9_8.s390x.rpm 3ca7828836311d46bc1b03aef97bc5551fed9b16b1bf9e92127f16d32158f76f python3-lib389-2.8.0-7.el9_8.noarch.rpm 78804c83fd98b10a8c1d117c439e62fae0e5e25f3f58c1f77b69764f2d9e3d92 389-ds-base-libs-2.8.0-7.el9_8.s390x.rpm 8a61a6ed261a17481c287d624466a0827cac7a24349e78854812d84c45d33153 389-ds-base-snmp-2.8.0-7.el9_8.s390x.rpm 93df09eef50f431bc096f76860f2f910e1aa65b9cfd18527c3a50f361017f082 ALSA-2026:26533 Copyright 2026 AlmaLinux OS 0 1 Important

dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition. Security Fix(es): * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dracut-caps-057-115.git20260527.el9_8.s390x.rpm 0d7702224f871b88b36c4182667d780bc3ac819a610beedc103901c11a52c0a8 dracut-live-057-115.git20260527.el9_8.s390x.rpm fa4b21d656416ba82b5ec12ef12ee8b4e8d737bb7f44f7c7175c9425eb9a8cbe ALSA-2026:26590 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security, bug fix, and enhancement update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) Bug Fix(es) and Enhancement(s): * [xwayland] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184292) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xwayland-24.1.9-4.el9_8.2.s390x.rpm c538a5b9daa607331ebc6abbd033d45e2485edd16a05516daf2acebe27a90833 ALSA-2026:26610 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security, bug fix, and enhancement update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) Bug Fix(es) and Enhancement(s): * [xserver] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184288) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xorg-1.20.11-34.el9_8.2.s390x.rpm 41e9f2bb0630d0c6c47e35a3a7e01428d705299ba7fb0f974ec4f9b6cd1b1b61 xorg-x11-server-Xvfb-1.20.11-34.el9_8.2.s390x.rpm 53a4fdd831285a0a8679a444798cc935e0aac35bc66180eb69c3f32b464dbb46 xorg-x11-server-Xephyr-1.20.11-34.el9_8.2.s390x.rpm 5dbec8ea0d7e2c26586347baac73654b6c3181c67c9ef3d4ba792c02f8f04f7c xorg-x11-server-Xdmx-1.20.11-34.el9_8.2.s390x.rpm 727d31e628284a7078a1f8eaaf803046ad9a4298ef125987c9504d673b413015 xorg-x11-server-common-1.20.11-34.el9_8.2.s390x.rpm 803c92ca264195de1ca9a2887615db6ec99b0e1a83c8c7a0b217802b25c7c548 xorg-x11-server-Xnest-1.20.11-34.el9_8.2.s390x.rpm e71fffc6961959332a69199813f08895ea5c7b10c91b76ebfb0092c5e4b20e56 ALSA-2026:2709 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * cmd/cgo: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default golang-bin-1.25.7-1.el9_7.s390x.rpm 0f4c4efb1d4f2f28558b9bfab408612280d91a79811904965a19215c7fb12b9a golang-1.25.7-1.el9_7.s390x.rpm 29abda12b7dab9e3065c1f4eea450cd1b111c82ec80e21e855b8ed9d08edfd55 go-toolset-1.25.7-1.el9_7.s390x.rpm 33ff3c4f2edec3885e2363b10d7cc5f83d1fc3941d1441ce4d6b25ee4b3c7bf4 golang-race-1.25.7-1.el9_7.s390x.rpm 60184f3a6af270f2670d5b2c7ac10bc69557138c6b0cfe60d11199d6c2a840a6 golang-docs-1.25.7-1.el9_7.noarch.rpm 686ac35cb0130236e1ba9f065e7fa2a21533ae475237498d0c222af295a5fe47 golang-tests-1.25.7-1.el9_7.noarch.rpm 7cb785edbb4f7d6eafc3e43e383b7d6bc925cd055c5bec99cedb8be289c830f7 golang-src-1.25.7-1.el9_7.noarch.rpm b3ea6240252afc4aa1cd8e39e5e65f40e80fb4df1ced744cd5d613572c0b0049 golang-misc-1.25.7-1.el9_7.noarch.rpm c12eaeb220c75cd9ace3ccca24d26329389573e2fbaf8cf5533b296b5bbd81f5 ALSA-2026:2722 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034) * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304) * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322) * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349) * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811) * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-devel-matched-5.14.0-611.34.1.el9_7.s390x.rpm 19702a7cd817f8d5e90436f36aed369beb181ba1aeb8af347e5de33906e7d362 rtla-5.14.0-611.34.1.el9_7.s390x.rpm 4bac9b508843e25f784c678b92ae46784d8db881ea51b8af63d70aa2102894aa perf-5.14.0-611.34.1.el9_7.s390x.rpm 4d3043eef4c642d88de42912639a6a56808fa98faddcaf66db791adc8cdf50ac kernel-headers-5.14.0-611.34.1.el9_7.s390x.rpm 4f325675c4c704db4c013289bbf883dc782d81e510fa854bfa1f14e884bc0754 rv-5.14.0-611.34.1.el9_7.s390x.rpm 5cd60ef6e83e0eeb63f49511757165a79e04d7f91d7d919d3134307817e3f6e2 kernel-debug-devel-5.14.0-611.34.1.el9_7.s390x.rpm 66a521497e77e4ef105c6918c4adabad0c2caeabbc97c866157d531584335f46 kernel-zfcpdump-devel-matched-5.14.0-611.34.1.el9_7.s390x.rpm 6774f58db59a02184644a2d64736fe9de913aa9d926e4a2155535d429caf9663 kernel-devel-5.14.0-611.34.1.el9_7.s390x.rpm 848adffbde741f32e583d7b670243b892c939614081b13f59a4ab2e2505335e5 kernel-zfcpdump-devel-5.14.0-611.34.1.el9_7.s390x.rpm b73e4b8943352a8a6c78fd5a489ea2e26b44adcf3affc3eb1a9337f951648fc1 python3-perf-5.14.0-611.34.1.el9_7.s390x.rpm be03f04f3ef045a3772dd5bf419f274829a3a5002222c5990c3713916ed78133 kernel-doc-5.14.0-611.34.1.el9_7.noarch.rpm d6daa259ec2338d1f306e57d0667458a60db4dbd7884b3b326901e4dda3d4b3c kernel-debug-devel-matched-5.14.0-611.34.1.el9_7.s390x.rpm ea7df753494675c3e06017cf4c6351d28349ee86d4c7bd5bb48f5f630a7fe171 ALSA-2026:27734 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294) * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313) * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327) * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328) * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310) * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325) * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315) * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305) * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324) * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304) * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-140.12.0-1.el9_8.alma.1.s390x.rpm 2be70eabdc659864b8614d7dcbf31fb7fc199a01c1a751e34a36d995fde6c8ec firefox-x11-140.12.0-1.el9_8.alma.1.s390x.rpm 70730d0daafed4987fd9c2f9156545b7fe72e3de586236f00d78b73382f841c8 ALSA-2026:27741 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default postgresql-private-libs-13.23-3.el9_8.s390x.rpm 2c57f0b4878c745dd8ab1729e402d80c1a6d6817b967007906b7751b02dfb586 postgresql-13.23-3.el9_8.s390x.rpm 4130748a122e1d6b5fdc541963f8b174e68fbcdd2204a691908f18c64da55b52 postgresql-pltcl-13.23-3.el9_8.s390x.rpm 6a696f8f79692b9b11c396b70507c1b956d6671e4f5f5801835d976bddfd501c postgresql-contrib-13.23-3.el9_8.s390x.rpm a5e07f386619e8e1ac101f0f242bb7468f03f21bf572423cb7bd706a8903ceb6 postgresql-plpython3-13.23-3.el9_8.s390x.rpm ad3b890abdd9f89c4030d807ff53e9f67d3ea92dc5c738d390d11680fca2ce36 postgresql-plperl-13.23-3.el9_8.s390x.rpm b1be29d3bbb6c55d9cf6ecc17d544cf0053f23f575c1099b91bb3f2a7172fef1 postgresql-upgrade-13.23-3.el9_8.s390x.rpm bcc2c9345e0244d7dfed1861de16646c4402e3f7d85badce7b7232e9eb23d600 postgresql-server-13.23-3.el9_8.s390x.rpm c5b308058b2960313793d0405e37c64cf02e4b5cd275a3e537876bf08d33de95 ALSA-2026:2776 Copyright 2026 AlmaLinux OS 0 1 Moderate

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default edk2-ovmf-20241117-4.el9_7.3.noarch.rpm b5e7af0c61e51f6617ef9d9b9ae4fc554d01d0de332dade45c8bb7304457a20d edk2-aarch64-20241117-4.el9_7.3.noarch.rpm c529f43a57b1378db756550bd605d19c555f6d0c4d1b8d34861e2a5c1bfb655e ALSA-2026:27789 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) Bug Fix(es) and Enhancement(s): * AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048) * [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699) * DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820) * DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823) * ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308) * AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-devel-5.14.0-687.17.1.el9_8.s390x.rpm 00b6696336dc34896ddbc5f30ea4138169c2a20be2b4ddb46d384c923e48a338 kernel-debug-devel-5.14.0-687.17.1.el9_8.s390x.rpm 4cf2c40a2af408bebfdd8bcc8eed6d3b0034b5d8b3f40c229054349ab0f43ca9 python3-perf-5.14.0-687.17.1.el9_8.s390x.rpm 50b024d4ace56f657ede8851201a78b7c203fe7587dc8cf44f357696fdea63a9 rv-5.14.0-687.17.1.el9_8.s390x.rpm 65038c6f307715b94547842d79ce48ef2b26730a566e2d74c5c73ac17cd61434 kernel-zfcpdump-devel-matched-5.14.0-687.17.1.el9_8.s390x.rpm 6eeedcca0d4b0ce9ecd6e4142ce2ca14950911a6794d168bd6864e5fd52ee853 rtla-5.14.0-687.17.1.el9_8.s390x.rpm 7eac5337bda6c87a863f0059dc494eb98494c8a2e1a2f3b0619adee68d8dce64 kernel-doc-5.14.0-687.17.1.el9_8.noarch.rpm 7f8264df925d7334c6806d74ac852a268d27036d7534fc5e7c464e75572e225f kernel-headers-5.14.0-687.17.1.el9_8.s390x.rpm 7fdc42563abb6dc848fd81494cd1cdfad18ad264a1ebf7222bc028d5012e8409 kernel-devel-matched-5.14.0-687.17.1.el9_8.s390x.rpm 8e760212a7bcf90f1d630c795106560a59522048044b9e78c726bbdf981810fa perf-5.14.0-687.17.1.el9_8.s390x.rpm c11d39e01fc33bcabc5a64eaec1a0c232eebb44d773954e91eb1acd14e15854b kernel-debug-devel-matched-5.14.0-687.17.1.el9_8.s390x.rpm fb1488e0e4783713e85be7b9173eef4ede4bb6f520bce3f127bcd51eca3a4df9 kernel-zfcpdump-devel-5.14.0-687.17.1.el9_8.s390x.rpm ff93ff646b9ea0035f67a2b124ced39d9c9f919e04c82bfa6ecd4e026350ac32 ALSA-2026:2781 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132) * nodejs: Nodejs denial of service (CVE-2026-21637) * nodejs: Nodejs denial of service (CVE-2025-59466) * nodejs: Nodejs denial of service (CVE-2025-59465) * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131) * nodejs: Nodejs file permissions bypass (CVE-2025-55130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nodejs-devel-24.13.0-1.module_el9.7.0+209+ecf6523e.s390x.rpm 5f4fdde9d94c71d891edf85d71c72379d6ca59dc62da1d5af63baf3cb541ca4b nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.noarch.rpm 6688ca82e36c7f78fe80655131c4a7fad6d4c7b9c851130cb6202a27b946c979 nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.s390x.rpm 70a27bdd4343b5d1f2edd86991f4ccc70f4901f7377a1438cd0d8b8af854e08b nodejs-libs-24.13.0-1.module_el9.7.0+209+ecf6523e.s390x.rpm 762bb4b0e1a23761f7aaa1b13d8ed65e559f10d81d92b1852c659e31c48ef198 nodejs-full-i18n-24.13.0-1.module_el9.7.0+209+ecf6523e.s390x.rpm 7a4f7603cee9801b21deebbca54dd4fffb4743deee8115d4ab6ef8d2a4180268 npm-11.6.2-1.24.13.0.1.module_el9.7.0+209+ecf6523e.noarch.rpm 931ef73d066840659ef738e6282e95b16c91f6f620c8f26fd043d22f7444ae8c nodejs-packaging-bundler-2021.06-6.module_el9.7.0+198+8bf605ba.noarch.rpm 97b592d61e7cdad2e8509964064ddbff27be4f5aa478b78c4438ac2fd0d42bb1 v8-13.6-devel-13.6.233.17-1.24.13.0.1.module_el9.7.0+209+ecf6523e.s390x.rpm a7d9e5d68eb4125b75e9b51f59f9048427a73092baf0dd91aefdf48ac893ec75 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 nodejs-docs-24.13.0-1.module_el9.7.0+209+ecf6523e.noarch.rpm f3dcf4672dfa5ced1e0eb20f250035b95ef6641b4e73e39d51a627ecba152c4b ALSA-2026:27819 Copyright 2026 AlmaLinux OS 0 1 Important

evince security update

The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files. Security Fix(es): * atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default evince-40.5-4.el9_8.1.s390x.rpm 429dd30b3e4cd27411eab7f921c8cae28bf91d666ac167e6cc7a2fa6081d5596 evince-thumbnailer-40.5-4.el9_8.1.s390x.rpm 6b18ce1b971215243efe06cbe0e2f8217dc33b5f4df8cd654ff221540a058788 evince-previewer-40.5-4.el9_8.1.s390x.rpm 7c99467117d991af1a63b9b1edc86c0bc126789d0c2f5eeeabb15a1c1d7ab963 evince-nautilus-40.5-4.el9_8.1.s390x.rpm 7da085c653dc6895d8df9145044c82a664e8ae3845e25534a1ca987fd0605dc9 evince-libs-40.5-4.el9_8.1.s390x.rpm a2c7e556b6de950b4961b3a08e7decbf95d6e552f7abb90d18afa7ee89da920f ALSA-2026:2782 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132) * nodejs: Nodejs denial of service (CVE-2026-21637) * nodejs: Nodejs denial of service (CVE-2025-59466) * nodejs: Nodejs denial of service (CVE-2025-59465) * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131) * nodejs: Nodejs file permissions bypass (CVE-2025-55130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nodejs-packaging-2021.06-5.module_el9.7.0+208+fb06c0ab.noarch.rpm 0528eee629fa506b56c3cec5fd577ee9ade9ee3263827b8f394f53d54bbe1672 nodejs-full-i18n-22.22.0-1.module_el9.7.0+208+fb06c0ab.s390x.rpm 326d7d6b92e4acdd71920b42eb3dd7cf1c8e4b5271d5f73c467b32c65a3b5a86 nodejs-libs-22.22.0-1.module_el9.7.0+208+fb06c0ab.s390x.rpm 46d54159011f929e3162a30f49c6d1fac056d9377cad5878a20287f16aa7a4bb nodejs-devel-22.22.0-1.module_el9.7.0+208+fb06c0ab.s390x.rpm 6171cca946d484320427a869df0619083415c735cee4f448bb14ab00271ae7be nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.s390x.rpm 636d353a3d084ef4071303bbe8046e5bb62386dc377c79f5b416bb76c8ccdc60 nodejs-packaging-bundler-2021.06-5.module_el9.7.0+196+ac40ca3b.noarch.rpm 7ebb5361e6442c86bcc948ea9b435aecc4c8bfd34de4f5d6529133fdaa23235b nodejs-nodemon-3.0.1-1.module_el9.6.0+172+f0ba00ec.noarch.rpm 8921c764fbe46df7cc2acc0214748ae816c81911a1ef010e4954d2f9f3f1f581 nodejs-docs-22.22.0-1.module_el9.7.0+208+fb06c0ab.noarch.rpm 8f3de5a8307d83d62844ec5660a43d92dbb1352be6470f6ca457e5ae5f80e28c v8-12.4-devel-12.4.254.21-1.22.22.0.1.module_el9.7.0+208+fb06c0ab.s390x.rpm aed4afa0d3d936a12ae411fcde3e6cdb59a5e696dbfb2fc78c62bee8bfe8f2e2 npm-10.9.4-1.22.22.0.1.module_el9.7.0+208+fb06c0ab.s390x.rpm ea74a47058e87ab78b701b6d8f82d9ac13a99f93541229e0e50fcbd6e88e6666 ALSA-2026:2783 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132) * nodejs: Nodejs denial of service (CVE-2026-21637) * nodejs: Nodejs denial of service (CVE-2025-59466) * nodejs: Nodejs denial of service (CVE-2025-59465) * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131) * nodejs: Nodejs file permissions bypass (CVE-2025-55130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nodejs-packaging-2021.06-5.module_el9.7.0+207+84573810.noarch.rpm 05f86c49a68ad3d28eb5632b8d8cb414cdc8e1b609d53821410f46d958d55e36 nodejs-20.20.0-1.module_el9.7.0+207+84573810.s390x.rpm 19415782267af242f3069081222e0965ad8d5e267086d987c5138b4782958bf8 nodejs-devel-20.20.0-1.module_el9.7.0+207+84573810.s390x.rpm 3ccc744c20e4576a05eb772133e03528f29c949f3fd47c9b48468f7c3c8f7698 nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm 572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648 npm-10.8.2-1.20.20.0.1.module_el9.7.0+207+84573810.s390x.rpm 7c11fe6948be5bf6999bd6871b0bf9543e67e06d0d03cfdff77aaa5068df4b70 nodejs-packaging-bundler-2021.06-5.module_el9.7.0+207+84573810.noarch.rpm 8aafd12f78157e86ba2ec7e2c9345b60105bf6f6ee017bd22496ac3e8d69f790 nodejs-docs-20.20.0-1.module_el9.7.0+207+84573810.noarch.rpm 9b45e7911e1228b9f6ae1ce27a752e5418a996eb6dc94653709a9cf4d18b9b3d nodejs-full-i18n-20.20.0-1.module_el9.7.0+207+84573810.s390x.rpm b670eae1c4077f15c5ee590cfc51a2bbeb5cc1262231e690bff5b146fa9025c3 ALSA-2026:2786 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861) * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915) * glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory (CVE-2025-15281) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default glibc-headers-2.34-231.el9_7.10.s390x.rpm acf1f2c14b34bf0153043befe7a63edc69423111a11ad1370262b8ba5fa91933 glibc-utils-2.34-231.el9_7.10.s390x.rpm be72948e3987cf5c5b15eb37e49d6b6038dca33f5e0c3300da1b1cc28d57edda glibc-devel-2.34-231.el9_7.10.s390x.rpm c70589335b80d7d756b59e8e0ebedfd4f265160e2e2a55df937e7f88a012e37a glibc-doc-2.34-231.el9_7.10.noarch.rpm e146bafa6482576f31bdadfebf68eee5589d4e14b974824ede11162381569408 glibc-locale-source-2.34-231.el9_7.10.s390x.rpm e51c6c6da3da01d7f37a32ea784e751bbb26b9548e0c2f6ffcbf262d526d0b52 ALSA-2026:27862 Copyright 2026 AlmaLinux OS 0 1 Important

memcached security update

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load. Security Fix(es): * memcached: memcached: Username enumeration via timing side channel (CVE-2026-47783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default memcached-1.6.9-7.el9_8.1.s390x.rpm 0c91e5034e755b57e42a1d386d782e70df4071342df6b52e9636c0da912529c9 memcached-selinux-1.6.9-7.el9_8.1.s390x.rpm fc943b795a16385b2a68c02f134cb33fed1faf006b0519d1110360a985a8f0ad ALSA-2026:2799 Copyright 2026 AlmaLinux OS 0 1 Moderate

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: heap-based buffer overflow in array_merge() (CVE-2025-14178) * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default php-soap-8.0.30-5.el9_7.s390x.rpm 0a0d6c576bdf001606739e0f16452f7305c7f2f3e9fcc020e9b1cf5690b23018 php-gmp-8.0.30-5.el9_7.s390x.rpm 141d0cd4e28cc466e728f5ee54149dee22ae3ce333b98536bd95b35ed6fe2576 php-ffi-8.0.30-5.el9_7.s390x.rpm 177dfcc237eaf8120a71e7a5ec0694bc6b7cf0f67b0d39d09da48723e9c96c5a php-snmp-8.0.30-5.el9_7.s390x.rpm 1b9c81c5edad18bcee5cb6eb8bc44756ba6deb29a442cedda28107edb43ba127 php-dba-8.0.30-5.el9_7.s390x.rpm 2c22b7ed191884df3fb075668673c1ca6c379f1dfac3848364cf5529c00f9b6e php-pdo-8.0.30-5.el9_7.s390x.rpm 3ca401e09a3b79027caebfccd8f0199a81e940d48a2233ac2c4a064f11687457 php-dbg-8.0.30-5.el9_7.s390x.rpm 506fe10b70c407d3478b845b86b073aae9497e888f9fba24ea5aca2d87a2a573 php-process-8.0.30-5.el9_7.s390x.rpm 59254bb62d969c708f3d76ebb4cd2ca6377b65cd33ad01551f51c0519cb8c2b0 php-cli-8.0.30-5.el9_7.s390x.rpm 5d99425dfef71ae7d05071556cbb40817ce8236b25cc1d5e608252672428aa8e php-fpm-8.0.30-5.el9_7.s390x.rpm 61cd69daf8ce16ea7f8774affe8a84ea72e2323bab2403d7bb673b68f4ae2270 php-opcache-8.0.30-5.el9_7.s390x.rpm 68f97e4a1fcab447060ed283c347b1bae3f39784586308e9d8cbc22779eb4598 php-enchant-8.0.30-5.el9_7.s390x.rpm 7181b53959953a2d4cc9c2378b492f5a7e23ed9e7438af7e069690ab36d94d7a php-pgsql-8.0.30-5.el9_7.s390x.rpm 7306b518a7cd90e024fd9a7aa277380b5376f83b0d5c20508bec4c40050c5378 php-common-8.0.30-5.el9_7.s390x.rpm 76298eef825d2d197ccd74951833d307c19a6ac1b7f1cd2f8f3d80f56cf072c1 php-embedded-8.0.30-5.el9_7.s390x.rpm 7ad19f032ecff083af575982949ef0d9041a6b9d463a46dda8ae7bb00da56531 php-mbstring-8.0.30-5.el9_7.s390x.rpm 7c2e417a0f54b9b090584358cd5e5e516d112b2a7f529a242c456d7f1cd6da57 php-bcmath-8.0.30-5.el9_7.s390x.rpm 7eb33c7cff9ab3f1472b9b9e6b268d8991f2a57c8c00fd8f58b2c8ee1587f0b6 php-xml-8.0.30-5.el9_7.s390x.rpm 934d6d6bd5306a8d4d5bab1672016ab57c5e518a3c265ed1d003bd3039cd1487 php-8.0.30-5.el9_7.s390x.rpm 9d2df740f7d9162fe6e79e91cf13f941d597f571acd02028a0125a8915033a49 php-gd-8.0.30-5.el9_7.s390x.rpm a2f5b1021d9b716624859837627fbf4220c64f351e57145806c5431e9b3a1228 php-ldap-8.0.30-5.el9_7.s390x.rpm aa6732a5590f3b1dcb5c4395ad9ea0d0789e0de3c68da8d7165586768dbfb061 php-odbc-8.0.30-5.el9_7.s390x.rpm c9e19503ce97feb80b5588b353cce3865379983db1358286bb7c3deeae791eea php-intl-8.0.30-5.el9_7.s390x.rpm d938ff90b8e834d4624b3d0b18c7f10bff35c3533c6955a0812d290aacd91063 php-mysqlnd-8.0.30-5.el9_7.s390x.rpm ef4cc44ed71bbe3280b6f58d44ad2a13301064f2fe611df759084883ae1a6c5b php-devel-8.0.30-5.el9_7.s390x.rpm f2f4035d74bdf7586a4ced70283ecc2fc197047849c256df02f81289b2b65431 ALSA-2026:28037 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89 postgresql-private-devel-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 1aef0309f74a76075003150e3d813ebb9c631d63f92920a40e0a4ae461fd449d postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445 postgresql-server-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 3834d96c09cc591ccc4501b4e4b84c4fc57d271677b23966949759d72757ff54 postgresql-upgrade-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 4839c398ea32b4812467336f041bce8c816d76c6170e90eddd33eead5c1fa421 pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm 565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f postgresql-pltcl-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 57fd815851732ae4bb4fa9e6542eb1acf15ee617aa0f0b5a3b767782640bee2b postgresql-docs-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 5aee73369d04565090622f18e8cc977808ff08cbba5562783860881e4f91f06c postgresql-static-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 5fa638e909c15898bf79b7545bf7d04560ff83297a10012c1908b7cc4746ccfe postgresql-contrib-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 6030209f65c6da98cb1565cdf3605bfe73625ce2276b261bb9673bd632b69eea postgresql-test-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 6720b87f11f12b7935fd81a816bdc2385de7f98493e03c7e4ee5f90bd652958c postgresql-plpython3-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 886f6be4e207ebe0c5e1e7c9daf32c245384c09c8ee6972077bc0597d7fd1fe3 postgresql-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 909bced1d6fe7df25a934b6e466afd1eb9b310fe169715c43d57b6750bed3b84 postgresql-upgrade-devel-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm 9692d4d15a9071737c5ec47af531632a0a82e3f7b88f89894c43ce5d666e172e postgresql-plperl-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm bd56c157eba9dc2850cdd39e2be2654fb3f2b3cf75a1816aea57068425fb5256 postgresql-test-rpm-macros-15.18-1.module_el9.8.0+267+7c71b4a4.noarch.rpm c5e814edfdda4b6654b63f7ba294dfb634e345de80c9943d701a6a312008ad84 postgresql-server-devel-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm c9ee2852ff8e765482a7ce3f4bf1a28529b139d1b9d4d0702386e7aa68947df5 postgresql-private-libs-15.18-1.module_el9.8.0+267+7c71b4a4.s390x.rpm d9e853630833537b4a03d40cf66ba27818aa12e643961cb0882712acc11242fa ALSA-2026:28074 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default skopeo-tests-1.22.2-6.el9_8.s390x.rpm 5a62b5df66f9072307a9bec92ca01c94415230882336e6c752cdab473f725246 skopeo-1.22.2-6.el9_8.s390x.rpm cae3a02a5763fcc100a7777f23d3a2e51fb788ca08b6573e3efa8d20975cb16a ALSA-2026:28157 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432) * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-urllib3-2.6.3-2.el9_8.noarch.rpm 2fcfea7fd375e87dd3eae3be2e982a4f477a32f6c90ff0927c3f84735037577e ALSA-2026:28159 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432) * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.12-urllib3-1.26.19-3.el9_8.noarch.rpm 862cbefda8ef310d9b93ec705f7474e435661a59ac81ec87ebc561dc490d91bb ALSA-2026:28209 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Command injection allows arbitrary code execution via malicious tag files (CVE-2026-41411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default vim-common-8.2.2637-26.el9_8.6.s390x.rpm 65acd696a039750de04329fa7132bddf3c56d7f3cec402bfb6ef6ea8996b40d5 vim-enhanced-8.2.2637-26.el9_8.6.s390x.rpm af62d7dfa8caf9d62a5e3d4386fd425bf990d4630be176cede050df3cdad1ca4 vim-X11-8.2.2637-26.el9_8.6.s390x.rpm b4886bbd94fc6d6dd5ebfb6f0c6dd6d4e3455db7d671195e1fc147eb12427362 ALSA-2026:28212 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-mod-devel-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.s390x.rpm 163f4e68ead1625cb11b4de7a3bdcf5b25113f5690f4a4c76dc8062353fb5a9c nginx-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.s390x.rpm 1aead2994f5bcf954e9d1eb99895e1bb86c5daca726d0fe551d2c5cfee2be2ec nginx-mod-http-perl-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.s390x.rpm 50f9a2ba969de26e050a390bbd7ce351f2a463e19ac1a8307f777284ac68d977 nginx-all-modules-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.noarch.rpm 535a701d0dd2f355598f9ca2728b825715b9d43b41d1b31b674367c98c954c67 nginx-mod-http-image-filter-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.s390x.rpm 7279cdf9e872c862519bbec97e96896e07f4740abfd408166198d398d1b00c78 nginx-mod-stream-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.s390x.rpm 8192194bf15c1130a020a3fe89ef759b28314b7cef810d4313e6056833e29893 nginx-core-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.s390x.rpm 94df64177b1907103fce82421ab55d9bf1095f9788935773373fa8f135bafac7 nginx-mod-http-xslt-filter-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.s390x.rpm c4f30da1eb5ff9b60f7a5ab4d16eab9d83dfd8ba5518cf960a5286b5221b8a76 nginx-filesystem-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.noarch.rpm c56f252d7b12e7c49af137e1608c5f89ce33fba245336267b34e950dbccbe6ab nginx-mod-mail-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.s390x.rpm e2e1f6bb05786a78b87956a86e90e2ec16d18f775d276d3ce06633243d8ce80f ALSA-2026:28243 Copyright 2026 AlmaLinux OS 0 1 Moderate

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: use-after-free with key data stored cross-RVT (CVE-2025-10911) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libxslt-1.1.34-14.el9_8.1.s390x.rpm 020d433b3c9d3b96706911cfe44b3d9d38a2a45f1e64a4040f3903677dbc40bd libxslt-devel-1.1.34-14.el9_8.1.s390x.rpm 8570b3e7e1f62b3e44b22eef9a27adfb4f54c0742337fec45625d31f6ce0b4c3 ALSA-2026:28244 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng15 security update

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libpng15-1.5.30-15.el9_8.1.s390x.rpm 7d9978b2219b85d5d531c48b9884cff05174e4abe8306c1b72c10c1f9c421bb3 ALSA-2026:28247 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) * python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module (CVE-2026-6019) Bug Fix(es) and Enhancement(s): * [9.8.z]Update python3.14 to 3.14.5 for the incremental GC changes (JIRA:AlmaLinux-180642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-libs-3.14.5-1.el9_8.s390x.rpm 2cc083f17002d400637b7d3e4a7bc8101118359b44b6c9c26256582a1119ca26 python3.14-3.14.5-1.el9_8.s390x.rpm 8f5c94f462b8b54355163a52666cdc5381a77f6bc6318721d1230b63f069880a python3.14-devel-3.14.5-1.el9_8.s390x.rpm 9fd7b9ee0e01535c98b218f3b2eb92aa3168f53b4a5ddfe66045b200653296d6 python3.14-tkinter-3.14.5-1.el9_8.s390x.rpm a440999e300f50b05b50727c56f5a97368c75a06a10c70b4346d544d8f999f50 ALSA-2026:28253 Copyright 2026 AlmaLinux OS 0 1 Low

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libtasn1-devel-4.16.0-10.el9_8.s390x.rpm 4cec33a9751d40054298ed59e88b13e0e541c6210dcdff4f2a3297f4b2b254bd libtasn1-tools-4.16.0-10.el9_8.s390x.rpm 6df284853e7d642ba17a2ce185568c547f8cc3abf399e6dca3a5e678035dc2bd ALSA-2026:28254 Copyright 2026 AlmaLinux OS 0 1 Low

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libxml2-devel-2.9.13-14.el9_8.1.s390x.rpm a1d010ebe976b5fb7e4a1b7bddb3fc2635c591cbdacd6d8d30652bc3556034e6 ALSA-2026:28255 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libpng-devel-1.6.37-15.el9_8.2.s390x.rpm ba7a2d3394f214875d0d390f09bc645ee151463a0e75650176b95f50773c97b4 libpng-1.6.37-15.el9_8.2.s390x.rpm fa899b2ca1c3da73a99e85c89db9e595930034f32475d70d66b32f2f771720a8 ALSA-2026:28290 Copyright 2026 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default autocorr-pt-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 126b5f360fe039f904e46655562f86bc089f98dcea4541d307cedaec64f419f0 autocorr-sk-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 12b637194599a36e87d18f21015606a2c9ed806ddcba04881a624abf0733153a libreoffice-calc-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm 19592824d977963fac15dbbcb86a1870a1269d5ec9e1cd0d5df8d77799280492 libreoffice-impress-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm 19998e5320a3d96a58c9ee95a776d7c51aac1e4c96983040098516e819ea371b autocorr-lt-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 1ef0e9bf99b41347c298764671c10c2184dfe99899590fa43a5ae7fc3ed37da3 autocorr-tr-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 23343d598bbebe724cc5191cefd2f6dcb50588e329e69f68a4cfc11131ccc50c autocorr-ca-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 2a182ff93c468d1f6f3ea2dc61777d975458367c46e9a62b837809d717f6d460 libreoffice-core-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm 2a2f1126a269c716e9dd5d98c9b975958243ae121232c85e5315b362612118e1 autocorr-vro-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 2adef2f4dc75561f3fa633fd2df624d2ec19081234a72c2545cbc6f0955787cb autocorr-de-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 370b74acbb3ce94ec2006ce1b3358cf3686c8252bb462b307875fcf1ef336a1e libreoffice-langpack-en-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm 452a5ec66c0aedae4f90f96ddbc7ffea6404a14244d0cdcfe0f9fc1c1c704a7f autocorr-is-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 46b8c24fab852ba17fac05c4de035b097bc255247bdda72e28debb4644c09991 autocorr-cs-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 48a612cf6160efb68c1d29c975f56da4c8ada658dd1d79ca6df16172bb49f100 libreoffice-ure-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm 4ee9b4b52d2b678452fe53321b4b7b96f8bc05bc77c3f6ba6b9554bcc60c5f7f autocorr-sv-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 4ef45e773b5641f3dab3a5c96e1d41726c7ea59dd9a144c4832886a245745d9e autocorr-mn-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 4f84c34b62af83ed52383c2947bde1908cecce6c1a22179126d6e44e0472e9c1 autocorr-nl-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 56e3ca8fb1f7faf1876cfb11008ca588124d952c7782c94dce278d6145fac31b autocorr-ko-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 56fc0b34686c4125188bda6092e8bf3306ea4478eff5370fb13afa19dbdf94a7 autocorr-da-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 63f2e748fb33a01f7928bd53da923ce6a5b3497bbded5145d58f2432ea9dcec1 autocorr-hsb-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 645507bccd1276196190064afd53482fbfc9060406d9a31e47ef43cb56fac314 autocorr-ga-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 654fbb10860bbef11394be44c3fc984ac267c4cbb3ca0aa151c49d5bbc56156f autocorr-dsb-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 658f15562751c64fc1c836d52480045f97d78d897d57f7e1fcd2b13c8fbb64c3 libreoffice-help-en-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm 68025cdb3ef0c06e9fbba212815cb46f525f9b3cb29864f8c3119e86c5caae9a autocorr-lb-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 712d94951579928301ceb155052ab136fbb5ab6d611576bd486c661a40470111 autocorr-it-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 73309656b8d0d1e5790d9dba9e917535d76580fac542e70d442045f0d35a9865 autocorr-hu-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 736b577d90e096644199233df6a6c4de44f1b46cb6addf063936e0a3d29f877c autocorr-sl-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 75bbeefe8852e53f48ba0f63b8c7f07930b6597dc4c9f5f6838594199f8b3ae2 autocorr-el-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 7cce1710297ddb684a27b258903bd55d41e4ffdff03164ccd5eced20ae66daa4 autocorr-es-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 7d2846b86a5a3b2f29ad1086ad940c42922bab9a75d8edc2f32e43c93aecb04a autocorr-en-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 8d4dada0394bbc877c15cc65d5f19e9ed4f4474f17c37ac022efeba5dc88a504 libreoffice-pdfimport-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm a695f568b1fc0fb37915924a1c01218da835dee4a88a7ce05440a341be5265d5 libreoffice-pyuno-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm abf0145f00cdc396a083ac7c393b9a9e7ac5d619153da420ffb901797e6c111e autocorr-zh-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm b872bb0d0f46e38290c75d8f8727cf2f050a52f77497d16b705aab96baa9a7b1 autocorr-ja-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm bec72bc6f4a132105ff83abeff3c828dc33dc42cab8c8c393891cc33c094cc9f autocorr-fr-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm c2ec143910db9c308d6845acc32bf6db42b81e6c1081c53dfb4a99074cc07a0e libreoffice-ogltrans-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm c3de91f45996c00a7687d73e59dd32fd9dbdfd2e66f81efe67dfc889029ee736 libreoffice-writer-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm c7ebf7ee2708f4c134a34217f16ec6b2128721a3328d53501c97401e4a5f8850 autocorr-bg-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm c8222de505ea2ab6934fa7a258726fb68ab84f9b96b9f976ab97f114c85b932a autocorr-sr-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm c8929c6a70e97e980f9d550f5d790ba15795a0b671e2f344fb414332da76a088 libreoffice-opensymbol-fonts-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm ca886fe25341881c1712a7e4e326bace8869ee788334953851a521a76e0c3c2e autocorr-ro-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm cdae86430e7657915a6ed6e5b07297fe6491a4f965289f2d65af42e1da8d6415 autocorr-hr-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm cdfd06061d8e51e2347005308ae804d5036faf73a05b721083263d89d73fab7f autocorr-fi-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm d014a6907cc58089cbfae85c36ca7d660f41ce0f84f73be354c4015257c312bc libreoffice-data-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm d52494b0fd0c5299085d710fafb66a424dcfad326e900cb096ba6f44e3e1bf56 autocorr-pl-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm e433d1b2eac78c3b56b51e49d9585b4eedcf683dd6379647a667da9488c337c4 autocorr-fa-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm ea70d11fdecf7752f5a0ca78bf8fe278ad71b39aaf85614f6fbddaf45f205524 libreoffice-graphicfilter-7.1.8.1-15.el9_8.1.alma.1.s390x.rpm ee9697fa8a87c5ec436f0c3ebd5346d4afb6501b95627473908e213117576551 libreoffice-ure-common-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm f46b562e3cffad96bb0bf9cf36dfed81d36f4eec411f5f8772699c30d39d3532 autocorr-af-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm f80092429af39edec8efdef9b5923d414f7aaec8234f1a08f36740e10e36577e autocorr-ru-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm fa5c74aff89b79c040b0998a46f875a7ab8423a89ea3a0bafebc0ecd715f090b autocorr-vi-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm fcfad0297d081bcef300487f831ef59c236cd61331a2b78b18328d65a797e799 ALSA-2026:28973 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-all-modules-1.20.1-28.el9_8.3.alma.1.noarch.rpm 2062184586744de5e2e8ceb10a463786ea27a367938d7ea6df2780301a4969d7 nginx-mod-http-perl-1.20.1-28.el9_8.3.alma.1.s390x.rpm 33950b01e8bf9e965362eb45768c5ed7d73675e88a89066654444e61048314be nginx-mod-mail-1.20.1-28.el9_8.3.alma.1.s390x.rpm 581e9c2dddaef86a4ce61abc3156afd7ecc9abae2e2245e6c228904adc4e620a nginx-core-1.20.1-28.el9_8.3.alma.1.s390x.rpm 6672be931e22248381165276a59b24b3658e780bbfba9666eb233db98f45ee45 nginx-mod-http-image-filter-1.20.1-28.el9_8.3.alma.1.s390x.rpm 74c203f02cb1490c99d735e92b5b6f9969673ad79488a47a703e8d556c2deb3a nginx-mod-stream-1.20.1-28.el9_8.3.alma.1.s390x.rpm 91c7e558a6277270bbfdd1a7ac85f6d9a485cd7dac775cbaf16e6c74fc9951bd nginx-mod-http-xslt-filter-1.20.1-28.el9_8.3.alma.1.s390x.rpm 925a41e1f80680fb2f14d0978ff2516c33198565f1a94216b055617c42824451 nginx-filesystem-1.20.1-28.el9_8.3.alma.1.noarch.rpm 9defcf603703c37571f3f54b2fd9cc57e8cf2a087072e028bbdc85530ec70838 nginx-1.20.1-28.el9_8.3.alma.1.s390x.rpm ec2cda5819908788fc4643f93779f99ccd6ce0b0a180d3c59e3c1db40d46729d ALSA-2026:29151 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.s390x.rpm 0950c6ad56b2a7c171ad82671a18ae96a61f78e36c74f5d101f2b4b499826877 nginx-core-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.s390x.rpm 10bf6fe415404c9a361eb967f286512b866967bf5adcb37b89ab73a737082821 nginx-mod-devel-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.s390x.rpm 44657bf28b5a1b2afa5a69c6e4423bfe79144c5ffd76a1da7add1fde39540e18 nginx-mod-stream-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.s390x.rpm 73e116c8bae6db74a8c16129dd8ee2600dec2f04b0e5bbc8e87513fb40af3fdc nginx-mod-http-xslt-filter-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.s390x.rpm 83650abc6cc479ed0f91448c86baafb6cb39d6abedb284974e86fb4cfbd69d73 nginx-filesystem-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.noarch.rpm 8f8165aa94a5caf0242030ba85c296e43e310117a9c4ab97817fccb0da660f2a nginx-mod-http-perl-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.s390x.rpm 9412e79f525b9413ba454ec8b7640b7fb6662a04e6c5b497831cd9e890621087 nginx-mod-http-image-filter-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.s390x.rpm bae2cd095c254cda5b77130bf056922efdd39fa6066392c1ab1eace6c9f151cf nginx-mod-mail-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.s390x.rpm d60c318d55969ba35bff82a5ef49eb4dae79775bb256df70f1787e94d72136b6 nginx-all-modules-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.noarch.rpm d8b17db41a4088718e5582fd2690997c2a0eb233e98d547a30890ff8befdbf05 ALSA-2026:2920 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross?Dashboard Privilege Escalation (CVE-2026-21721) * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default grafana-10.2.6-18.el9_7.s390x.rpm 1e6199c63d08f78eae0c88e53378e7da190b2035d1b871396cad22ba64c77f0e grafana-selinux-10.2.6-18.el9_7.s390x.rpm c1200f0fc85b5c961be5c36efbe8d02f88bb7568ddc48836b15e876ef6c1a8e1 ALSA-2026:29455 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default buildah-tests-1.43.1-2.el9_8.s390x.rpm 81cc35cc422925a9ffd5af770c382c898f7a40dac506b5e7dd4d721fae6efab4 buildah-1.43.1-2.el9_8.s390x.rpm bd2fa063192796fcadb14250eec31456d75cbaa88a2523d442620191fcac55fa ALSA-2026:29702 Copyright 2026 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default runc-1.4.2-2.el9_8.s390x.rpm ffd9c97f7cf90316af167265f9672e7953a273292196ae6027ee34491280c8f6 ALSA-2026:29703 Copyright 2026 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default containernetworking-plugins-1.9.0-3.el9_8.s390x.rpm dcb9116fe3104c51032c09504f8e922d247ed38606b3a67ae0eb0f1382633418 ALSA-2026:29844 Copyright 2026 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default tigervnc-license-1.15.0-7.el9_8.2.noarch.rpm 6dc9356de382439479290e0fe573714ed7c54fac9cc3c5b4c1a5688b6a08d823 tigervnc-server-minimal-1.15.0-7.el9_8.2.s390x.rpm 82f51e57e8cf52a07e209778507d0e515711fd562660c726cf9152fa21ccdffa tigervnc-server-module-1.15.0-7.el9_8.2.s390x.rpm 969174dab6928099773e05aa4304089d6b7b2b22537bda86458f9724798baf3f tigervnc-icons-1.15.0-7.el9_8.2.noarch.rpm bd5342a78bbda689ce234b9d474bec09298793ed5d18dba21fe3a3363d4ce456 tigervnc-1.15.0-7.el9_8.2.s390x.rpm c0682023fdb91ca7e700b47ae82c0cfcf89658ca57d5e79ea466226987fe7b5e tigervnc-selinux-1.15.0-7.el9_8.2.noarch.rpm c437c1ef0d78e64e2813217d6e58cf407792f913bb9adcb9f584f4b8bffe62f4 tigervnc-server-1.15.0-7.el9_8.2.s390x.rpm ded12a5913a710d5d03127218b8a9e53261fcc2e7d3de028fe3a2ce319ec8e22 ALSA-2026:29940 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294) * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313) * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327) * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328) * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310) * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325) * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315) * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305) * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324) * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304) * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default thunderbird-140.12.0-1.el9_8.alma.1.s390x.rpm 3eff2ffd42086c92b1099cd37582e82d11c0251ab05eb4bcd84575758d76bf3d ALSA-2026:29981 Copyright 2026 AlmaLinux OS 0 1 Moderate

golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.4+1 [almalinux-9.8.z] (JIRA:AlmaLinux-183350) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default golang-src-1.26.4-1.el9_8.noarch.rpm 1a89a83fb0ecb4df041cfede9c040997d4b14c129d8db2ccb977ce238ad7d2e3 go-toolset-1.26.4-1.el9_8.s390x.rpm 22e8a143cd25e9a641c53d0559369be182b0c0040c70a2d9e5c724a74b2f39af golang-docs-1.26.4-1.el9_8.noarch.rpm 4d94fd28d694656d5d2522b782d20b0e7b392d096994c5c7767d65e389044961 golang-1.26.4-1.el9_8.s390x.rpm 7f257003bc24e6a5f82d82f255c24eb552958dfca810efde8d14fe5863e2b4fb golang-race-1.26.4-1.el9_8.s390x.rpm 87f0ba3e0e34262cc8d8e58388039fe4a6aa7fad5e126079eed3264f25cccc3a golang-bin-1.26.4-1.el9_8.s390x.rpm a887de7ec17abaa283954e65f79dfb8b701f3372326726f6b697d444f6323d1f golang-misc-1.26.4-1.el9_8.noarch.rpm ca0a04d0e7e96e7a6ea0dfeae36e2cf9034fba8463390c0337105fe1c4f30fb0 golang-tests-1.26.4-1.el9_8.noarch.rpm f78026c0f7115c1d75bbb67b794a76ac169f593d51429c4bc4465b9af02de804 ALSA-2026:3031 Copyright 2026 AlmaLinux OS 0 1 Important

libpng15 security update

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng. Security Fix(es): * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libpng15-1.5.30-14.el9_7.1.s390x.rpm 6432ea27082233e3be1bac474ed3f2584238606a1e475a93b6ea5226ab8555b1 ALSA-2026:3034 Copyright 2026 AlmaLinux OS 0 1 Important

munge security update

MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods. Security Fix(es): * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default munge-0.5.13-14.el9_7.s390x.rpm 258034719a1d3d27feab9285d8e64dd6121df340ab4a7ed7a18c35083ae99f6a munge-libs-0.5.13-14.el9_7.s390x.rpm 73fe93eaf2c4e2a93f097091a1239e8b06c8658084ecb5bd96ebe866e379c813 ALSA-2026:3040 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default grafana-pcp-5.1.1-12.el9_7.s390x.rpm 0c1870680bd1ae2e9d6065ccaed802df2a41707128a0e04cb6ac81cfe1437bbb ALSA-2026:3066 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129) * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default perf-5.14.0-611.35.1.el9_7.s390x.rpm 1d8a458eeca2afd698e1965d6c6e31af6af61f918e24dabb35ca6cdfb0046d6f kernel-zfcpdump-devel-5.14.0-611.35.1.el9_7.s390x.rpm 1e1cd9b0a48f0abcf3d761205be5f781cce06d0bad18fbf2b2807faf81a22016 kernel-doc-5.14.0-611.35.1.el9_7.noarch.rpm 83c32fd1cc9b21f2a2cf9fa3f0e639678f7e0f2825e0768db924ac804d139e37 kernel-debug-devel-5.14.0-611.35.1.el9_7.s390x.rpm 8a82d5ffe5b837df9bfb69fb1bd7d1d3e305bc798572eada95d4a8cd72e3f34e kernel-devel-matched-5.14.0-611.35.1.el9_7.s390x.rpm 8a9fb6de0dc152214fa3b4199f1fb1e91911723e4558762a6c0e04609fabccd2 python3-perf-5.14.0-611.35.1.el9_7.s390x.rpm a4c5d0b64d0a223cb532ab13a21d5e348e8da1cb50e0739862f7eaf3215cfdae rtla-5.14.0-611.35.1.el9_7.s390x.rpm a597fd4f9b32ab9aa67ec5d5f8339fab54cd58b04b88d29d251c8b8259e036d2 kernel-headers-5.14.0-611.35.1.el9_7.s390x.rpm b2d3d26acc14901463cc0eab4c4cd6d7f86525d880e3ec4adfed0d9adb5c28dd kernel-zfcpdump-devel-matched-5.14.0-611.35.1.el9_7.s390x.rpm ba148e04a6b80c7eeeaa08d3c5009dece978ddc27a79a760d07bb198cdf3a0f2 kernel-devel-5.14.0-611.35.1.el9_7.s390x.rpm e7b15c9845ca24c926ac998254153dd52d162e8e91e93815ef875ef2d4c95ec1 rv-5.14.0-611.35.1.el9_7.s390x.rpm ff84c93de00d3880aaadb53b395e5110723fde53cdfa4a7c1a992de78ffa0d9b kernel-debug-devel-matched-5.14.0-611.35.1.el9_7.s390x.rpm ff86c8d304b084b159b15a31f2aae6a7638514e1bf170a6f1a9563488a905e09 ALSA-2026:3067 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855) * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libwinpr-2.11.7-1.el9_7.2.s390x.rpm 947cca0233fb7d617f89d945bf3396874cc35ade383dba7cc39e092a6dcebeb2 freerdp-2.11.7-1.el9_7.2.s390x.rpm b243b10f15b23afdaa0d33c3d25dfcaa51f95329d047990018100c57790950e6 freerdp-libs-2.11.7-1.el9_7.2.s390x.rpm f1ba1d4e5b850fbace4c12b8650903887097b95cca029ce383a4d7b194241315 ALSA-2026:30844 Copyright 2026 AlmaLinux OS 0 1 Moderate

mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fix(es): * httpd: mod_md: unrestricted OCSP response leads to resource exhaustion (CVE-2026-29168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mod_md-2.4.26-2.el9_8.1.s390x.rpm 148a8933792eeaa2165fef87cad431ac94aec387725ddc44ad1846fd529f720f ALSA-2026:30848 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057) * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993) * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273) * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776) * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-devel-5.14.0-687.19.1.el9_8.s390x.rpm 06f191ffcbde65ff2c140fa9355286894b672a3564344881b0c61344132c3a8d kernel-devel-matched-5.14.0-687.19.1.el9_8.s390x.rpm 3085e2bdf5219af60f49d6ab189296826da7d0346812898c42e4a3c4c8323fbb kernel-debug-devel-5.14.0-687.19.1.el9_8.s390x.rpm 4079f0d24c7cca288b19bf58ba6f2d891ac1a4111ae88e1d4694c8b43d82ff47 kernel-headers-5.14.0-687.19.1.el9_8.s390x.rpm 4b1f65920481c875b0647de21dffade2c7383092b40382a15f5abd35a42a9d70 python3-perf-5.14.0-687.19.1.el9_8.s390x.rpm a6ae7bdd347e1a74a76396d9d375f6b43b63c44d02860ec82a01f98296ecb559 perf-5.14.0-687.19.1.el9_8.s390x.rpm b4e05adeb26fe4db08fd73a85f633e1067b918bbad4019f8a2a86d38983e95ce kernel-doc-5.14.0-687.19.1.el9_8.noarch.rpm bcc36e7842e8b0a390b8c723333091fbc05aec63f401ab8aeb375823027e543f kernel-zfcpdump-devel-5.14.0-687.19.1.el9_8.s390x.rpm c886ec8e73b42964d246a154b1c580995d6dc46d3c0f378fb300adda6fe544f7 rtla-5.14.0-687.19.1.el9_8.s390x.rpm ceaf4fa56f9394f63cb7896396cb77b0f66c8327f7a040e0cc5ec909d9b520da rv-5.14.0-687.19.1.el9_8.s390x.rpm dcf981609e47b8a86b2890844c3f5671a4871f7a3099f0074529c21bb247b5f9 kernel-zfcpdump-devel-matched-5.14.0-687.19.1.el9_8.s390x.rpm ed173e8f62bbf07ce8c6116d1809cf85f278e041475e207a048d507d2d8a9b03 kernel-debug-devel-matched-5.14.0-687.19.1.el9_8.s390x.rpm fdfc441fd9ac79a4acf9f8f785fa80582f163fabea8b1b3dff740e76f37ebb54 ALSA-2026:30854 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default git-lfs-3.7.1-4.el9_8.1.s390x.rpm 0b6e4d3f3281d3f7d7ec44f85531172e04496132d4f29049e16467addad7adc3 ALSA-2026:30856 Copyright 2026 AlmaLinux OS 0 1 Important

perl-Archive-Tar security update

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support compressed or gzipped tar files. Security Fix(es): * perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access (CVE-2026-42496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-Archive-Tar-2.38-6.el9_8.1.noarch.rpm 029befe10d08adb5f1475f1473abce9e1bfefb173955c98013ace2f61db4891f ALSA-2026:30859 Copyright 2026 AlmaLinux OS 0 1 Important

perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries. IO-Compress supports reading and writing of bzip2, RFC 1950, RFC 1951, RFC 1952 (i.e. gzip) and zip files/buffers. The following modules used to be distributed separately, but are now included with the IO-Compress distribution: * Compress-Zlib * IO-Compress-Zlib * IO-Compress-Bzip2 * IO-Compress-Base Security Fix(es): * perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-IO-Compress-2.102-4.el9_8.1.noarch.rpm 9180bc36dc0e26f58a3079d46bf7aac1866c77ea730d2324eae291ada265a029 ALSA-2026:3095 Copyright 2026 AlmaLinux OS 0 1 Important

protobuf security update

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data. Security Fix(es): * python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default protobuf-lite-3.14.0-17.el9_7.s390x.rpm 44f7bb76f914a955bffa0ad848ae80a62c5b37c145dd674438321df89e1f1697 python3-protobuf-3.14.0-17.el9_7.noarch.rpm 85e3188bf898ebf9e10dbb9ae58bb3ec02cd6b77f7b5b082c7990b581e2f4265 protobuf-3.14.0-17.el9_7.s390x.rpm a1938c77fdef615acb18133d300bde38094f7059a59305fefe848c0b676760c0 ALSA-2026:3189 Copyright 2026 AlmaLinux OS 0 1 Moderate

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow (CVE-2025-14905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default 389-ds-base-2.7.0-10.el9_7.s390x.rpm 712b1d27ed2f8f0826db8cd39ef4c55eb36301ffaa7597dd3b97303e0bbc845a 389-ds-base-libs-2.7.0-10.el9_7.s390x.rpm 7627494cea975d620c8b0856a5b42eff928db0fb65f87b9b70d15375ac1ec1eb 389-ds-base-snmp-2.7.0-10.el9_7.s390x.rpm d9e935b0530e7a542aa480837e2e2746175777587ec198e742961e205876746c python3-lib389-2.7.0-10.el9_7.noarch.rpm e01a4b3ef68c0a71ed6b10c63829a369bd4b005575e18530b85333e20b880f65 ALSA-2026:3291 Copyright 2026 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default runc-1.4.0-2.el9_7.s390x.rpm 8d90e3ab792d22a8e2626371b37ace157cbbb041bd0be3ebb1c11528cd315ccf ALSA-2026:3298 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default buildah-1.41.8-2.el9_7.s390x.rpm ab86fc49d5cdbb2d08f95fe10427e36ef28bcc4243a5fa38ed2dd604723d5208 buildah-tests-1.41.8-2.el9_7.s390x.rpm f504e27bc017c775cb924b068f969e3c54baced8e998c511408e18c461cc8bb7 ALSA-2026:33226 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) Bug Fix(es) and Enhancement(s): * glibc: counter overflow in __wcsmbs_clone_conv if setlocale is called (JIRA:AlmaLinux-145156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default glibc-doc-2.34-272.el9_8.noarch.rpm 0743193855a12ae0fa37408df5abf1b3d2e78bcc976feb01197b31607cca58a8 glibc-locale-source-2.34-272.el9_8.s390x.rpm 5b5fc9b75fe2db770f1d4c4ee585eb3fb452215d5060572675bc1088ce0311cf glibc-devel-2.34-272.el9_8.s390x.rpm 89fff61d2422b7d911aa60e44dc8762bac1162c254c6decd0438b96cbc062849 glibc-headers-2.34-272.el9_8.s390x.rpm a3391f5089c7889d197132b269b0a4f384282cbd7540571f3a6378be4171f68c glibc-utils-2.34-272.el9_8.s390x.rpm a37732299482c4c36947b42b73cf5ddf654736530aebed4ebd4bffc6afe8f7cd ALSA-2026:33285 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886) * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540) * tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-doc-5.14.0-687.20.1.el9_8.noarch.rpm 21557b6b4b7991a3f17284636922fd55984ded870ef89b70663775d317b0a465 perf-5.14.0-687.20.1.el9_8.s390x.rpm 297607f0af9c942da4c55404df5e93355dbdb8a5169998f404eb4111a53dbf15 rtla-5.14.0-687.20.1.el9_8.s390x.rpm 4e35c932172cec639b024d9fb7a9db70ca1136d9d0e4046aac4634d34016a624 kernel-debug-devel-5.14.0-687.20.1.el9_8.s390x.rpm 56f996bf3a209a34b2c746657813816358a3b0d1b130b3e2265ad521bc884ac9 kernel-debug-devel-matched-5.14.0-687.20.1.el9_8.s390x.rpm 59c6b6e11429541466f25fdc238a156b37badd92879351cdce53b212736c36bd python3-perf-5.14.0-687.20.1.el9_8.s390x.rpm 60fada526bb2522b4b79c103fd928c7402756d59540b7ad273c6b30c91566b33 kernel-devel-5.14.0-687.20.1.el9_8.s390x.rpm 9db380a2b4bf0830e1a1e527cc52d0bc078f556ab4d8a994ac999ec6cb2b75a1 kernel-zfcpdump-devel-5.14.0-687.20.1.el9_8.s390x.rpm abc1f267bc29123d9c76da367c8e4e00e2819a509b0bd9ec949181aa27b40d41 kernel-headers-5.14.0-687.20.1.el9_8.s390x.rpm b38d4385fb4d8572589bd455750f2b9d6c8a7257ea48c9e95ae75682092e6c9d kernel-zfcpdump-devel-matched-5.14.0-687.20.1.el9_8.s390x.rpm c392e744c0c7a911ec17102db34426bfc059e8967aeb9894319ba20d5df9b332 rv-5.14.0-687.20.1.el9_8.s390x.rpm cb8409b366ed805e3e4f06c2a9bdfea4ed60c2b60a2b4f71f82211cb3d45138d kernel-devel-matched-5.14.0-687.20.1.el9_8.s390x.rpm f8134866efee85f88b873d90574e44a3f5e6a85ceec0fe5831e237d0e09ee921 ALSA-2026:3337 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default podman-tests-5.6.0-14.el9_7.s390x.rpm 2c6111d75251288d1b2e818e6f5e00bce3bab6b7dd1d9199eed15116b7589682 podman-remote-5.6.0-14.el9_7.s390x.rpm 722351c4ba7fdf36973c1f2bcda5fbcb4bb6dbcdf4abf50cbc2191b25d2f88a5 podman-plugins-5.6.0-14.el9_7.s390x.rpm 861f1be97e9bbcd8376c59df39773d0252fac10694a18019c3717c8757683a63 podman-docker-5.6.0-14.el9_7.noarch.rpm 90f0d253f84790d17063d4dde9ddda5ef355f2c3aa527a2d188e91000b803229 podman-5.6.0-14.el9_7.s390x.rpm afa91cdc1f78a470e0bf3369612038f74f999a076af6a7d77fdf1ee767c55b15 ALSA-2026:3339 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785) * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793) * firefox: Undefined behavior in the DOM: Core & HTML component (CVE-2026-2771) * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774) * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776) * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781) * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766) * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769) * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787) * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768) * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783) * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784) * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759) * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762) * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761) * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777) * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790) * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763) * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792) * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786) * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760) * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772) * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779) * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767) * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764) * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765) * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780) * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component (CVE-2026-2778) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758) * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791) * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default firefox-140.8.0-2.el9_7.alma.1.s390x.rpm 2fdccdfc46d1c74b0cece3a477ad0ab313864c4a6ece342162e131a6a3ee7744 firefox-x11-140.8.0-2.el9_7.alma.1.s390x.rpm db0e165432e9eb418c327e7dda8e21ffc195069d885c3cdac9a19eb158756661 ALSA-2026:3340 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default skopeo-1.20.0-3.el9_7.s390x.rpm 37c5350f690775dc4d6aa23e2383a34dac09b01f3a428961473d5ce4dd04686b skopeo-tests-1.20.0-3.el9_7.s390x.rpm 5a4235b59b002005c4c1a2346fd8dd222e86ba7016c44010e28675c652d9efba ALSA-2026:3341 Copyright 2026 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default containernetworking-plugins-1.7.1-3.el9_7.s390x.rpm 8f19cca689a68018bbecc0e7b93ead8be46162f152f5dc4d7255ecfde2e1cd1e ALSA-2026:33449 Copyright 2026 AlmaLinux OS 0 1 Important

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability (CVE-2026-6722) * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735) * PHP: PHP SoapServer: Memory corruption and information disclosure via incorrect persistence handling (CVE-2026-7261) * php: NULL pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() (CVE-2026-7259) * php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262) * php: signed integer overflow in metaphone() (CVE-2026-7568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-cli-8.0.30-6.el9_8.s390x.rpm 03229ae6c321c6038bbad847d978efbdc48ae3cec4fe0633d9755ad07bcbe392 php-embedded-8.0.30-6.el9_8.s390x.rpm 126bfd5c9287f5e9a42d1265bf0c138ea0469c72c5f76bf0d42c352783506553 php-8.0.30-6.el9_8.s390x.rpm 156ba9b4ff894bbbd760511511935aabcf2b554cde2df15b6aa734aef6990789 php-odbc-8.0.30-6.el9_8.s390x.rpm 165cd6c22b8e3d6ec750c996a424e93af21ab907c895aedaa7d7ce89bd097a0e php-process-8.0.30-6.el9_8.s390x.rpm 1e7053e26e1e52e5abe8da2f18469db87317802c76c936217e27e6b226a7b3ac php-devel-8.0.30-6.el9_8.s390x.rpm 217964ada515c0014434646eac466d830c4e0d10ee84f4ee256d50349db0004c php-dba-8.0.30-6.el9_8.s390x.rpm 232fa47c78d2e520e36dfcd1541d35d2e9094292603c4bf049213e019d23bf85 php-opcache-8.0.30-6.el9_8.s390x.rpm 379a18e7bd917b43cce357f95a34e7ba516d29a44892722e1bd755621d357a90 php-pdo-8.0.30-6.el9_8.s390x.rpm 3a2a9e623f7cd6fc8ea4e2ef68d3234c35f8f9752d8f4a9f6e3e8a51ddd52edc php-soap-8.0.30-6.el9_8.s390x.rpm 44b474dd65de70efb95f5ec07887f4c4cea743304c3ef99dd7e263a5a8aaf386 php-mysqlnd-8.0.30-6.el9_8.s390x.rpm 4c379b559f129ac7d020739098cd7dc82ebc0ce19817f5dd807f48fa1566bdce php-gmp-8.0.30-6.el9_8.s390x.rpm 5148315561dfcf1c75a42804cedf4b865f62fe25c62d7edea39e0ea2f3d31a90 php-pgsql-8.0.30-6.el9_8.s390x.rpm 5f47356470c927a0318c2a429215dfebc43b3800eede4829e43961fed02a135c php-fpm-8.0.30-6.el9_8.s390x.rpm 680d8f0cb9fde04f5436c0954a21e96465bf043ee071ba03f100833a8804b53b php-mbstring-8.0.30-6.el9_8.s390x.rpm a9a596f02a6a68dca59e6bb5dc483050e3e8b7afddda69f8c87e804e8117dd76 php-intl-8.0.30-6.el9_8.s390x.rpm b379e7e1d54cfcc649708d3bd8310d7c92ccd95dbc64dc61923ec812b7e7395c php-bcmath-8.0.30-6.el9_8.s390x.rpm bbaaf6b8e55cc53ad38bf8384f5536d241e3ec01704e2e60d21647d70f2e1db4 php-xml-8.0.30-6.el9_8.s390x.rpm c63cbe2282baf1b032e48417a0c70b52deaaff2e975dd614b6d224a456c7771c php-ldap-8.0.30-6.el9_8.s390x.rpm c6bcb3500f6a6c1651a10b40891629375ca6118ca26493687c41680980a8a902 php-gd-8.0.30-6.el9_8.s390x.rpm c96f150132529075171573591a469a34bb14b68513f5fc1b0fb3bf50bb266402 php-snmp-8.0.30-6.el9_8.s390x.rpm ce595d073b0c637ece7fe9c1fb2f36c9052df95ad6a32696cc55489488720e1c php-common-8.0.30-6.el9_8.s390x.rpm d154e34254597890f00eb434136ea6bed0fa33ea82b350d5781bef5e5d5c7364 php-dbg-8.0.30-6.el9_8.s390x.rpm d91315324b304a93e05aa98f51691de33e415d4b1c8e62cc3bd1b4560655dfa7 php-ffi-8.0.30-6.el9_8.s390x.rpm fad64c36762398b9e4f3571c11edefb34955cc3eba4b8571a8842e006c2a26a0 php-enchant-8.0.30-6.el9_8.s390x.rpm ffd1a4ac6007d76accabecfc6e3dd41c7a8b023915f5007c829e1714fed7c271 ALSA-2026:33481 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb:11.8 security, bug fix, and enhancement update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] [tracker] Rebase Galera to 26.4.27 MariaDB:11.8 (JIRA:AlmaLinux-140364) * Rebase MariaDB 11.8 to 11.8.8 in AlmaLinux9 (JIRA:AlmaLinux-183085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mariadb-errmsg-11.8.8-1.module_el9.8.0+274+ad8c02e7.noarch.rpm 2ba6941e25c7b20c0770e5f9bf4bcb8a1ce5101bfe24d9d76f85b74967acb3ca mariadb-test-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm 52d67f7d53bed832767dbfd20c224fd0503b83d17be3770b217fb4f763b9b1ed mariadb-server-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm 5d6afc15787641964659acc4569c6abbe1d0fc16692bcf69e97b55910e14aa27 mariadb-server-galera-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm 710dae50d1921688feb0ac296306b1c1c24c60b1e3b80a5f582a66786cb855c7 mariadb-embedded-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm 7c9792cfe71f05dced6c4ea73e7650b85897fd24fae5a2f89bce8a88fb2db0c5 mariadb-gssapi-server-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm 7fd1f51b46ced3048d495f7c778da4db31421764a13cf91f650fd66d33937711 mariadb-embedded-devel-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm 866e4144de5ed94ae37b5a2e693145588d96e767e17b77d33016fbd87ed9cfa3 mariadb-client-utils-11.8.8-1.module_el9.8.0+274+ad8c02e7.noarch.rpm 97ed99b2a6ca86e25055f5d77445e356a3798c4763f1591b0d6f28a89d2d9638 mariadb-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm a53a89e7ad3fc09ee01e8ac4fa43396a94ef0539091f0a214d922f92fca10ee7 mariadb-server-utils-11.8.8-1.module_el9.8.0+274+ad8c02e7.noarch.rpm a83e539558d45bc8c44c04b1a78e551a6d79e320de3f57dec6168405ac1d5902 mariadb-common-11.8.8-1.module_el9.8.0+274+ad8c02e7.noarch.rpm c0d482499e6ff0610af8fc431141ed3579fad01fa6bf9ec22150b068c1bfc646 mariadb-backup-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm d54cf111310966656095ce90b1235acd839911e4037071d486ad150c6415e5a7 mariadb-pam-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm e51f1621917a94fbdf77dd811484e4e324b6632946cd3f7ead16209f1e80c3ff mariadb-devel-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm ec728c375aeaa4be0a3c0416057569e0e381f44e7eac1b34921295ae5fc80c9a mariadb-oqgraph-engine-11.8.8-1.module_el9.8.0+274+ad8c02e7.s390x.rpm f44b181ee655c771de816f119fc9e505eef80470a85a875ee19a6b919f24339d galera-26.4.27-1.module_el9.8.0+274+ad8c02e7.s390x.rpm fbdca372bb24e488251e8837d226ef556dd9a9da90ace13924a104b64033787e ALSA-2026:33501 Copyright 2026 AlmaLinux OS 0 1 Important

giflib security update

giflib is a library for reading and writing gif images. Security Fix(es): * giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default giflib-5.2.1-10.el9_8.2.s390x.rpm 9cb9aeb6b0c5be1af730a03804e5545570a5f7fcb97c17e5db4c9eecdbbd8c81 ALSA-2026:33512 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-rake-13.0.3-167.el9_8.noarch.rpm 017df6ed9c96fec4a2281f254f6d5606ebaa694de9bdbaa7d71bb99b86e531e0 rubygem-minitest-5.14.2-167.el9_8.noarch.rpm 0aae863ac7ee57ad68a07fdb6278ea18ac4383f2fad31d4ff2dfb7136299e32e rubygem-bundler-2.2.33-167.el9_8.noarch.rpm 0b5ccb37e47b7103dee9d1761ade9ff4b7df725cf2e3c6cd156915c4ac7655c3 rubygem-psych-3.3.2-167.el9_8.s390x.rpm 0c4aa7cd43818e8151c29f27a2efdb2a99634ceb8cd8adf1f695a1a3aa67ed64 rubygem-rss-0.2.9-167.el9_8.noarch.rpm 0f8fecc8dda580d9308084c9f4db3fc0511e7522040ef852f3300ce0372e86d7 ruby-devel-3.0.7-167.el9_8.s390x.rpm 1619f6be68a9be1c2f14e88d59d290e4bed0dd276cb20daaf2d36d50587e518c rubygem-typeprof-0.15.2-167.el9_8.noarch.rpm 1a07250b43b7c4dbae60bbbe4fa6495a51661fd296aa7b0bca3fbd9c46391cb6 rubygem-rdoc-6.3.4.1-167.el9_8.noarch.rpm 1f42368d368113554591d81da8195e05db2c2399a0f74ba8603105c0d7146eb0 rubygem-irb-1.3.5-167.el9_8.noarch.rpm 23a661be424a3c7090632a0c828c1f994399937d81de3b96ba7f227cbbf08241 rubygem-rbs-1.4.0-167.el9_8.noarch.rpm 260570e38293c026b6d93deaa8204757f94b0cdd1e20ddd3aea5d446d87a6e17 ruby-3.0.7-167.el9_8.s390x.rpm 3c3f6700a223760d4e227e3355f5ab174b1069e918d57855d4aabc73a3017642 ruby-default-gems-3.0.7-167.el9_8.noarch.rpm 3e1e5f0386e1f92386686eca2e800ff9a6630765ade5d38355f6e5c9f843d8f0 rubygems-3.2.33-167.el9_8.noarch.rpm 406b971f265bc5f4a54e86dd5da25af3d3d1032704c1149c93f05035ed53d0a1 rubygem-rexml-3.2.5-167.el9_8.noarch.rpm 7da0d9630451de9340a8a3aff361005c9d008e68e0043df0f64bbfdc7101d28a rubygem-power_assert-1.2.1-167.el9_8.noarch.rpm a4b554f30d56b6384ca2f0958b8b778735673be5ab6dae9cfa8aab9b1675af77 rubygem-bigdecimal-3.0.0-167.el9_8.s390x.rpm c5e222ef29c9168368adcbc82e4100c4e93a1da1a376a36c617f2f5f4cd8d6de ruby-libs-3.0.7-167.el9_8.s390x.rpm cfdaccf7abe8e10608eee7d8526623fa0434b29cca3ff05ccdb12823fdf4ed57 rubygems-devel-3.2.33-167.el9_8.noarch.rpm d3ccab346eac191a14ce56c6f3a1583f82660109843bb6b87d5689667d18108c rubygem-io-console-0.5.7-167.el9_8.s390x.rpm e0f30039e81bb21732e4c251602226780f3710f09d95fbb29a4dbe6813c8802f rubygem-test-unit-3.3.7-167.el9_8.noarch.rpm eaf12f6786174f3df73ce52fff9a051766214710dd2c3fc0647fa7dbe1b8745a rubygem-json-2.5.1-167.el9_8.s390x.rpm f9e27bef3eae887b776a12d7db8d9de9b68adfe68975362543a3c6ad7b021e74 ALSA-2026:33576 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-bundler-2.5.22-7.module_el9.8.0+272+38177c5f.noarch.rpm 050ae5833f13601f3e3620e8b6bfe00a8ac08572e240aa18877cfdcf7636eb0e rubygem-rexml-3.4.4-7.module_el9.8.0+272+38177c5f.noarch.rpm 058ab8321139dbe2ad614b2180ac3d17b2ec1cd1b50b79b9b5d548478b75cc0b rubygem-rake-13.1.0-7.module_el9.8.0+272+38177c5f.noarch.rpm 09b047092a29c9ceb785b0cb8701504ffe883ebe14d676a49640dc6f3520473b rubygem-psych-5.1.2-7.module_el9.8.0+272+38177c5f.s390x.rpm 19232dab6158af5d2bd3aee3de67c9acc703085ca6bd38d8e1805a5820921d66 rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 ruby-default-gems-3.3.10-7.module_el9.8.0+272+38177c5f.noarch.rpm 2b2409c0a88976ab1ff3b135a7873396c95acf4008330a7c1c8965a5a2853954 rubygem-pg-1.5.4-2.module_el9.7.0+245+447713a2.s390x.rpm 37933771eaf80f507c99dab2a888edfd251e524975ea35ca2f70ce5f9b0badeb rubygem-bigdecimal-3.1.5-7.module_el9.8.0+272+38177c5f.s390x.rpm 3d25e09c61a6ec3a0edbfb006a14e89dd925df605786ea27e5e7548aebf655f5 rubygem-racc-1.7.3-7.module_el9.8.0+272+38177c5f.s390x.rpm 42b7cb04766c48d4b05daf8d4b7409805df21527445edafe4adc304eab3dfe49 ruby-libs-3.3.10-7.module_el9.8.0+272+38177c5f.s390x.rpm 465720a4f8faa756e8d63ced36f800563db4ba6762e20c495037201a39a947f7 rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.s390x.rpm 4866939ab52aa8d02863557cdaf8e3af45c043a8c7136082318eabfec4ab8150 rubygem-irb-1.13.1-7.module_el9.8.0+272+38177c5f.noarch.rpm 4cb89d1ae91bce6c146ce23a402e37891d07d6b03edc48428743ea97e2d55d92 rubygem-minitest-5.20.0-7.module_el9.8.0+272+38177c5f.noarch.rpm 4dda41986f898c4cc5d6449900bcf14f5d8d6102770bae01b0212474b3225735 rubygem-typeprof-0.21.9-7.module_el9.8.0+272+38177c5f.noarch.rpm 4f412d7b6b60ba0b33049ad7f7aff96b44b17e314c6b234bb7492d4799dfe34a rubygem-rdoc-6.6.3.1-7.module_el9.8.0+272+38177c5f.noarch.rpm 4f9317afdb2c41c923a3709cfe6265b75ec26ad20562412ca1cf258960c40913 rubygem-rss-0.3.1-7.module_el9.8.0+272+38177c5f.noarch.rpm 5119b49ff6186942466ebe4826d46a0b708af76472ac026a04f32540aba6243f rubygems-devel-3.5.22-7.module_el9.8.0+272+38177c5f.noarch.rpm 5306445a1de5ac24de32f5fe5c97fd1c50a0ce48d1f3ad2a8582a1cebe736494 ruby-bundled-gems-3.3.10-7.module_el9.8.0+272+38177c5f.s390x.rpm 60a018bceec6acf28eb178e7099b5499c788f2760689fc249465c9a6ba48cf22 rubygem-io-console-0.7.1-7.module_el9.8.0+272+38177c5f.s390x.rpm 668b7d7333eb5c27f3efd3ea97014327213ee131b7d53fa0c5d6fce85a614cfd ruby-3.3.10-7.module_el9.8.0+272+38177c5f.s390x.rpm 684eb4912a57c8fcac9d1c6f0df59110472b0c53a16f11433dc6ec73d4b95e05 rubygem-json-2.7.2-7.module_el9.8.0+272+38177c5f.s390x.rpm 750d9125c07f3032689ef134ce7ad676212c51ac129b5ac32968e0869459dbfc rubygem-power_assert-2.0.3-7.module_el9.8.0+272+38177c5f.noarch.rpm 805863e2f5c1a0560b9544fdc1c724fd4bff6d25f2318a9ad0e2de6e0dda3700 ruby-devel-3.3.10-7.module_el9.8.0+272+38177c5f.s390x.rpm 878311036f91b09adebf6c6239bd89d3afa03ecb94af49e800487ce64ab75faf rubygems-3.5.22-7.module_el9.8.0+272+38177c5f.noarch.rpm a57844af1446e0e8d452f900533ec3a9d71aa3b5f22b8392dce7d2352cd73c3d rubygem-pg-doc-1.5.4-2.module_el9.7.0+245+447713a2.noarch.rpm c96338e6d5222b04fcb018874d6c36073340306f6f05aad2761a5a9b3a5b180a rubygem-rbs-3.4.0-7.module_el9.8.0+272+38177c5f.s390x.rpm dd65def3b2c390b6325a02e8afbb5e0d0e2804392e5166e966a9ee9df7c3980a ruby-doc-3.3.10-7.module_el9.8.0+272+38177c5f.noarch.rpm f5d18551d08e0327beefbb09aa69130e88e101c7452f0c986c8a1f97c8f1732c rubygem-test-unit-3.6.1-7.module_el9.8.0+272+38177c5f.noarch.rpm f6950cca9e12e1ac5a2bb9b0fff0ff05bcc305fd93f11445260d987d39df57f8 ALSA-2026:33577 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-pg-doc-1.6.3-1.module_el9.8.0+232+50f6dd36.noarch.rpm 012587b1454988d3ae9e2df6f066e9a9582859f741daa26cc97f6ce56f7cc40d rubygem-rake-13.3.1-33.module_el9.8.0+273+a67497ba.noarch.rpm 06a27e8affb9bd0f406ec44b702ccaabd733cda95e6c3f44defb2cd9491e1c70 rubygem-rbs-3.10.0-33.module_el9.8.0+273+a67497ba.s390x.rpm 13c75a759d26b69095ee851a5227eecb24b8c8062665a076be8a79b65224c40b ruby-bundled-gems-4.0.3-33.module_el9.8.0+273+a67497ba.s390x.rpm 1c28f816ac1147cb7ac7218704f043e0e720a6c613034bb64a302400a094f5ae rubygem-bigdecimal-4.0.1-33.module_el9.8.0+273+a67497ba.s390x.rpm 1f360b019950eeb5db926c5534b4803184f16d0892fd39eafb320bb6c62471ec rubygem-racc-1.8.1-33.module_el9.8.0+273+a67497ba.s390x.rpm 38a87cb593ac13675cf1f0ee1580b1a4947488a5298b0740eff5976e8b12aea5 rubygem-bundler-4.0.6-33.module_el9.8.0+273+a67497ba.noarch.rpm 3a9f0cf94a291fb73496f14f2e40d3e9f8ec6a41762999d54c7c9ded48371ea0 rubygem-power_assert-3.0.1-33.module_el9.8.0+273+a67497ba.noarch.rpm 4d9b03fc4afee5ea5633edf2632b0a9c51e022025cb920c51f0e5b64b3a7a645 rubygem-io-console-0.8.2-33.module_el9.8.0+273+a67497ba.s390x.rpm 56fd5ccf15870c45eafad5cd4e6296ce19e2b80c6bb3b1a3a32f63adb4acd061 rubygem-pg-1.6.3-1.module_el9.8.0+232+50f6dd36.s390x.rpm 5a3274b260c9f148a2d53963874a7074a6eb753d8de5561715f81aa190b751ae ruby-devel-4.0.3-33.module_el9.8.0+273+a67497ba.s390x.rpm 5d38f32c6e0bb266cd032a3ba4d5f2e14fd2f5b7929213b3dc23eb18d199303e rubygem-rdoc-7.0.3-33.module_el9.8.0+273+a67497ba.noarch.rpm 629fd1526b2b869694dbe666d55591a3a5ef70195236f181e340f247353ed0ed ruby-default-gems-4.0.3-33.module_el9.8.0+273+a67497ba.noarch.rpm 65043c6771a3bb3e39b54da409df6194a670c045543513d1c305a34925e712fd rubygem-mysql2-0.5.7-1.module_el9.8.0+232+50f6dd36.s390x.rpm 700ff63225b94b696ac533940dc41391e7462b01042b665bb6817ae92d805d39 rubygem-typeprof-0.31.1-33.module_el9.8.0+273+a67497ba.noarch.rpm 794ec4ce25a22612e62ec9f20ae1aea445a924fedc045326088241d7117f2d45 rubygems-4.0.6-33.module_el9.8.0+273+a67497ba.noarch.rpm 80578fc98e4588fcf494f58714eb883676198f36e15c38473c5ba05005b3ae64 ruby-4.0.3-33.module_el9.8.0+273+a67497ba.s390x.rpm 82a5694ae4fa8963003cee00c6ab7af9cb0dc04f68216dfb0db1b9031f2f8ac1 rubygem-mysql2-doc-0.5.7-1.module_el9.8.0+232+50f6dd36.noarch.rpm 97e11c128bce3071fdab6ecdaf0cc24053f436b72c10921807cbd89f4b2ff2d2 ruby-libs-4.0.3-33.module_el9.8.0+273+a67497ba.s390x.rpm b0c3ec85169932be02940ea9ed7aaf558aae25838b2eae753dc3b54e2d34bbfb rubygem-json-2.18.0-33.module_el9.8.0+273+a67497ba.s390x.rpm c4a567a5548bfa593ae1e26045349d7e7be9f00da91f32f0624351edebd22398 rubygem-test-unit-3.7.5-33.module_el9.8.0+273+a67497ba.noarch.rpm ca3a0e27b2d4570d2bbd80a704f5dbdd2022b34d3084d6494c9880b8db733044 rubygem-minitest-6.0.0-33.module_el9.8.0+273+a67497ba.noarch.rpm ca79e939abba640f76c4c062157183efbb98111a4b7e701b02f12eebe19033b0 rubygem-rss-0.3.2-33.module_el9.8.0+273+a67497ba.noarch.rpm cd0b635abb6b71102d76a58a0641e9eb870ea8467903b4a0a9604b7afdf5fd9f rubygem-irb-1.16.0-33.module_el9.8.0+273+a67497ba.noarch.rpm e4ea6581167549409ba6b667f1938ddeeeb0d4cb9fb1ba166c0571aa2322a179 rubygem-rexml-3.4.4-33.module_el9.8.0+273+a67497ba.noarch.rpm ef054123eb535f182ea93bcd1f450bd57d477788ced7665fb5bcae658dbeb3bf ruby-doc-4.0.3-33.module_el9.8.0+273+a67497ba.noarch.rpm f4cef4fec24644f99973e28610d0dd30c300be7fd6c46b1f9bb66d64058c3e95 rubygem-psych-5.3.1-33.module_el9.8.0+273+a67497ba.s390x.rpm f9b4fdcd7e604c85236d1f05efa984aa3038208adb9b5be464277ade928a0ac5 rubygems-devel-4.0.6-33.module_el9.8.0+273+a67497ba.noarch.rpm fa6514837e26ce65192011cb0a76da4fc20715fb53408b005f4021a3c212c91d ALSA-2026:3359 Copyright 2026 AlmaLinux OS 0 1 Important

python-pyasn1 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-pyasn1-modules-0.4.8-7.el9_7.noarch.rpm 185f28965ad6cc22b7e1767295b2443e3d13e8d9d8af115978aa137f5d3b4dee python3-pyasn1-0.4.8-7.el9_7.noarch.rpm eff31a478fa68dcb64c7c6c3c391eb6f137e148de9738698d9fab752e84f4c82 ALSA-2026:3405 Copyright 2026 AlmaLinux OS 0 1 Important

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801) * libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read (CVE-2026-22695) * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libpng-1.6.37-12.el9_7.2.s390x.rpm 8066d24a06a04e640faf2330c44b7ffec3f58439d6bd35cab6b61773035b659e libpng-devel-1.6.37-12.el9_7.2.s390x.rpm adb06d262131f487cf31fa585972166c4fe97f040bba0ccfee0cf2ba7d6b6ba8 ALSA-2026:34156 Copyright 2026 AlmaLinux OS 0 1 Moderate

rrdtool security update

The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create applications using its Perl, Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data density. Security Fix(es): * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation via unbounded DS/RRA arguments (CVE-2026-43958) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rrdtool-1.7.2-22.el9_8.s390x.rpm 87c8b13a1266b18cef8533660d968fc31777eca36be2bb793119387f0b1557c6 rrdtool-perl-1.7.2-22.el9_8.s390x.rpm fe7274d485dad06d02ab0c4f4b9e60250fea489b3cee0a97f7b349143683cc09 ALSA-2026:34359 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154) * github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151) * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default opentelemetry-collector-0.152.1-1.el9_8.s390x.rpm 6bcd9b8c51a7ea3cdd84d2907042a6c005107d2310e78d1386139d859c3a9b36 ALSA-2026:3488 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168) * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085) * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-zfcpdump-devel-5.14.0-611.36.1.el9_7.s390x.rpm 1c9e3112c571f2022a2c9f2017fc6f6da3ec3d33f7a1f26010a487a1ddbb662b perf-5.14.0-611.36.1.el9_7.s390x.rpm 30a6e5c0ad73d9d2854202d3edf930376d3a064834e5a0d2d6bb464dddaf9b4e kernel-devel-5.14.0-611.36.1.el9_7.s390x.rpm 4efb4a3b26dc68909701858a6167c49d6e01812b88349117c041bdc7328e94b3 python3-perf-5.14.0-611.36.1.el9_7.s390x.rpm 6242ff4d1eed0ae08fdd005058fdbcff6243e6768491f1ba69029ab348c57742 kernel-zfcpdump-devel-matched-5.14.0-611.36.1.el9_7.s390x.rpm 72cde1fcfcfff8c273dca1907d0ff2d91595752ce927e0fffc81b5e983144d00 kernel-debug-devel-matched-5.14.0-611.36.1.el9_7.s390x.rpm 86f57d4aae809c45bcb73f3f738e525b2da08d887341faa3031d502f2b6a3e7e kernel-debug-devel-5.14.0-611.36.1.el9_7.s390x.rpm 8efb42ef040f5153e20a6a9158df691d9a124f029b43ca8ab0ef8fb815483ca6 kernel-devel-matched-5.14.0-611.36.1.el9_7.s390x.rpm 91106775cab5ad38321630bb1d7492faeb6a392f1c805dd8e5655ec8558f0428 kernel-doc-5.14.0-611.36.1.el9_7.noarch.rpm c5a4c443e64ae4995e8975ddff5642b01b33428d15f6bd6c06b89e94ba479e83 rtla-5.14.0-611.36.1.el9_7.s390x.rpm ddff715c35b724d370db0382188fc1c048903a9a529798e9b1f33720cb0878dd kernel-headers-5.14.0-611.36.1.el9_7.s390x.rpm f2094b5912e272ba881f84862ac37ac2d42504756e8ea6b09857c09a4ee2dfa2 rv-5.14.0-611.36.1.el9_7.s390x.rpm f6920958774ae7e1a4960ab7f6e0264a5f06f5d4d3f1b3270a11e71bfa9ca848 ALSA-2026:3507 Copyright 2026 AlmaLinux OS 0 1 Important

valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts (CVE-2025-67733) * valkey: Valkey: Denial of Service via invalid clusterbus packet (CVE-2026-21863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default valkey-8.0.7-1.el9_7.s390x.rpm 41d53d286cfef67c98b29f5398af63132b3be8a51d981b4d6c8ef74cf48849db valkey-devel-8.0.7-1.el9_7.s390x.rpm fbf4d543a500b220331b8f36fce915bbcf00a64acbc2267330b749b170257c1f ALSA-2026:3516 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785) * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793) * firefox: Undefined behavior in the DOM: Core & HTML component (CVE-2026-2771) * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774) * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776) * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781) * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766) * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769) * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787) * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768) * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783) * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784) * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759) * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762) * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761) * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777) * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790) * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763) * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792) * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786) * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760) * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772) * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779) * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767) * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764) * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765) * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780) * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component (CVE-2026-2778) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758) * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791) * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default thunderbird-140.8.0-1.el9_7.alma.1.s390x.rpm 7a056b28c9f440ba972a6b70b310a82ed3411a8a3ecb16745ee5ae3c59272ca0 ALSA-2026:35828 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-selinux-10.2.6-23.el9_8.s390x.rpm 65b90e6c67ac283f6a5b7a458a3b80b064d1c3c47c0a4007257cb1b559a3a423 grafana-10.2.6-23.el9_8.s390x.rpm b5acee0d9dbcc691a7d07148c19dda513bb1fac375c60b7cd1c7b880860a5973 ALSA-2026:35829 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-pcp-5.1.1-17.el9_8.s390x.rpm 404cba94ae0cf7003f1ac05f36f3bd65a7d8da8c683e596c6da8d7f1325bd5f5 ALSA-2026:35891 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (CVE-2026-42338) * undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151) * undici: Undici: Information disclosure due to improper cache-control header parsing (CVE-2026-9678) * undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733) * undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (CVE-2026-11525) * undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697) * undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734) * nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames (CVE-2026-48619) * nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling (CVE-2026-48930) * nodejs: Node.js: Unauthorized file metadata modification (CVE-2026-48935) * nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() (CVE-2026-48933) * nodejs: Node.js: Certification validation bypass in TLS host verification (CVE-2026-48934) * Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency (CVE-2026-48928) * nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling (CVE-2026-48615) * nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch (CVE-2026-48618) Bug Fix(es) and Enhancement(s): * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-9.8.z] (JIRA:AlmaLinux-186580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-24.18.0-1.module_el9.8.0+277+61fc613e.s390x.rpm 294b2a7a0c2a63f2ee824c8889eaa7f1414ec1acb66fdf9352dd79fe9034fb01 nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.noarch.rpm 6688ca82e36c7f78fe80655131c4a7fad6d4c7b9c851130cb6202a27b946c979 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a nodejs-full-i18n-24.18.0-1.module_el9.8.0+277+61fc613e.s390x.rpm 9b6d5c97ab3c71d3d81b15c030233797d560bb7995028c1779e7eebc62b7e1a9 npm-11.16.0-1.24.18.0.1.module_el9.8.0+277+61fc613e.noarch.rpm ace4b9e51c9ab9bcaf5f6ba5ecf44f9f7d86c93508085ffb7326fffc3b897cc1 nodejs-libs-24.18.0-1.module_el9.8.0+277+61fc613e.s390x.rpm b7dbce8d4df2e9cb4971bf66c246dcb0f256679003b415a58d677867e679a20a nodejs-devel-24.18.0-1.module_el9.8.0+277+61fc613e.s390x.rpm c056ae7c85da0fd5b4af05199a445a8dc092d69c3052a7f1c96287a448ad5cb4 nodejs-docs-24.18.0-1.module_el9.8.0+277+61fc613e.noarch.rpm c5a5530de75944a2fbe70c1c64475e26c1bbac2be3d1ad947e0dcd8681aa70d5 v8-13.6-devel-13.6.233.17-1.24.18.0.1.module_el9.8.0+277+61fc613e.s390x.rpm db904747efaf5050529898818fd404ab7d641fc5c33693895325bcbce7047f64 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 ALSA-2026:35892 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (CVE-2026-42338) * undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151) * undici: Undici: Information disclosure due to improper cache-control header parsing (CVE-2026-9678) * undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733) * undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (CVE-2026-11525) * nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames (CVE-2026-48619) * nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling (CVE-2026-48930) * nodejs: Node.js: Unauthorized file metadata modification (CVE-2026-48935) * nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() (CVE-2026-48933) * nodejs: Node.js: Certification validation bypass in TLS host verification (CVE-2026-48934) * Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency (CVE-2026-48928) * nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling (CVE-2026-48615) * nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch (CVE-2026-48618) Bug Fix(es) and Enhancement(s): * nodejs:22/nodejs: Rebase to the latest Node.js 22 release [almalinux-9.8.z] (JIRA:AlmaLinux-186622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-devel-22.23.1-1.module_el9.8.0+276+8b329b47.s390x.rpm 15935f8899eca97d431cc2f715b9be8b6366cfe3f2a872944c59b3f5773394fa nodejs-22.23.1-1.module_el9.8.0+276+8b329b47.s390x.rpm 197af16ef8edd7377c4813aeded1f53c8052296333bc33012f7d69677e4ca391 nodejs-full-i18n-22.23.1-1.module_el9.8.0+276+8b329b47.s390x.rpm 41f8e5ac84c9bba6f87886cb66d63e38045e8de6ce645adf43458441996abb0e v8-12.4-devel-12.4.254.21-1.22.23.1.1.module_el9.8.0+276+8b329b47.s390x.rpm 4a31b3c3df5ef502a9eccb7f4115d82d5526087902444d4ee39b11094a8027aa nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 nodejs-libs-22.23.1-1.module_el9.8.0+276+8b329b47.s390x.rpm 8ba5fc8cbce2611e04dc48b78da8b31a63596703e7306e89269b37999872564c nodejs-nodemon-3.0.1-1.module_el9.7.0+208+fb06c0ab.noarch.rpm b32744158c91e29f4466c2e744a254de07ebfd0471383b6a1a5b556d3529fc33 nodejs-docs-22.23.1-1.module_el9.8.0+276+8b329b47.noarch.rpm c6286fb14b457a558bdc65b14bf9f8056ffd2913dcde7a930fd306cf581bdf8a npm-10.9.8-1.22.23.1.1.module_el9.8.0+276+8b329b47.s390x.rpm e24e64b00b18e2c81c1535788a760b9ba6275904747d6a532be00f5416c1b4f4 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:36018 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-zfcpdump-devel-5.14.0-687.22.1.el9_8.s390x.rpm 03299e595d89b4cc1d85ea7138312d0e55828f7ad8c7c8c74e0cb909cff023c2 rtla-5.14.0-687.22.1.el9_8.s390x.rpm 28d3baaf5e131260645f304b7a9e79c35b449301dff2af3cbec97b1642a1e816 python3-perf-5.14.0-687.22.1.el9_8.s390x.rpm 44d279887de34fd453b553720d8d799685491b2d4c83d2c3d3492426b4419e5c kernel-zfcpdump-devel-matched-5.14.0-687.22.1.el9_8.s390x.rpm 58834539cd18bb99bb9dd2642ac630cc95c56df561d6a1bd25fbfd359e19a0fd kernel-debug-devel-5.14.0-687.22.1.el9_8.s390x.rpm 595179841416706734ae3ceebdbfb8d31d28a9f1b6463204dd9250479f9c7828 rv-5.14.0-687.22.1.el9_8.s390x.rpm 7d6cc012086a4c45b2068e2672793fe256ea346ee602427eaa318309b682b254 kernel-devel-5.14.0-687.22.1.el9_8.s390x.rpm 94663e1093fd71123067768ec0ea499c45df0d19c3f98cb8b2d021518b3e99cc kernel-headers-5.14.0-687.22.1.el9_8.s390x.rpm b04af931dbc9de2dafb1fcc16a8129cf73021c9f05362008b2a5a51eecdbe651 kernel-debug-devel-matched-5.14.0-687.22.1.el9_8.s390x.rpm b7d985040429eb7842fd70ee0ead8c6ea140304a46303f8fb8a8f4cac06fbf8d kernel-doc-5.14.0-687.22.1.el9_8.noarch.rpm bba4f9c48e614ac5facc9cd9584f1bd336725d21dc71d24ccbe59e97cf1fe63f kernel-devel-matched-5.14.0-687.22.1.el9_8.s390x.rpm d03f28e04fb0799f9bbc7ca474c17ba7e0e28617010dd60ee38a074eb0151432 perf-5.14.0-687.22.1.el9_8.s390x.rpm ecc8e001b27398e7b9a190903e2f484b2af7fac9381238731a7121370802c58b ALSA-2026:36195 Copyright 2026 AlmaLinux OS 0 1 Important

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610) * 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-lib389-2.8.0-8.el9_8.noarch.rpm 1022a7bcb738465acebfefd3cee5251b0570838eae57563b936e0e86030043a4 389-ds-base-snmp-2.8.0-8.el9_8.s390x.rpm 8d1ba716c1d421ac5e70595e6a9a5a372eb6664f15d58bd38a1038e9d9da9632 389-ds-base-2.8.0-8.el9_8.s390x.rpm 8e6321a1ce2b2008ef79954b224317e12221415dac30966512c8ac7278a359a8 389-ds-base-libs-2.8.0-8.el9_8.s390x.rpm cd47486de11741ac6b64f6c53f12392f955c01a4b3e6484a87d5ae914f03e3e2 ALSA-2026:36210 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (CVE-2026-50031) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default freeipmi-ipmidetectd-1.6.18-1.el9_8.s390x.rpm 0d5880c3d6fbfae3b386807113440e49034898e141cfc541c46acb41f1e06045 freeipmi-ipmiseld-1.6.18-1.el9_8.s390x.rpm 5439070a4f1cb78857cd1039c83a463187e58ebe3f788461ae9b904fce8eaf40 freeipmi-bmc-watchdog-1.6.18-1.el9_8.s390x.rpm b36eb396b40b816424540ae8a7ba78604abf81b9d609f3a3611c1369f81eb1b0 freeipmi-1.6.18-1.el9_8.s390x.rpm f59be79398fa4e9ec84a2f2236ddbde85d15df964e029204f11c4fe6bc4c5c2f ALSA-2026:36315 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14-pip security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (CVE-2026-8643) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-pip-25.2-3.el9_8.5.noarch.rpm 3b05f65fd48d6f30f49fe2e3d980cf42230cd0878772bbd374e8a54cddd51190 python3.14-pip-wheel-25.2-3.el9_8.5.noarch.rpm 86909c297af71c0c2bb5b22b0d411ef3f12434c764e4d7b933347d0e69d4be7c ALSA-2026:36317 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default skopeo-1.22.2-7.el9_8.s390x.rpm b1872ab419100c3851eb54d8a9878a7a0f25c0e261911a28e0941f3e8bfa402a skopeo-tests-1.22.2-7.el9_8.s390x.rpm b23ccf71c61bab59b755840a507379b37fa4f5896c9e80055f9efc429501700e ALSA-2026:36318 Copyright 2026 AlmaLinux OS 0 1 Moderate

aardvark-dns security update

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`. Security Fix(es): * aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset (CVE-2026-35406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default aardvark-dns-1.17.1-1.el9_8.s390x.rpm aeecc7a556f2b41de15a2e53eb8c69a5adecd3961c620d8ceeec7f0b1397304f ALSA-2026:36331 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) Bug Fix(es) and Enhancement(s): * nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-190800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-mod-stream-1.20.1-28.el9_8.4.alma.1.s390x.rpm 06a49b4b82e86a0e5eaf6eb241c6f36e819f65f2fe686f904e6c3c28e1504776 nginx-mod-mail-1.20.1-28.el9_8.4.alma.1.s390x.rpm 16483425a03c49365c398174618efc57ce0b1efe0026611d64a40c49f0eefd22 nginx-core-1.20.1-28.el9_8.4.alma.1.s390x.rpm 6833c9d25aed52c693361f0e9e25e8fb7498820d39cc3aa96a9cc3a6cacd80e8 nginx-all-modules-1.20.1-28.el9_8.4.alma.1.noarch.rpm 8665b30d7efc8fb465161906dfc71481ce9fcae1abc34d23a76bad6a123e214e nginx-filesystem-1.20.1-28.el9_8.4.alma.1.noarch.rpm 8c0988d8ac95a3a733ba01e39ce1a88f106bba6456f114a97696d2ef4dc0eb68 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.4.alma.1.s390x.rpm a2b14649050130072d25c089c51aac458386093925cb33ef0922192a91d25967 nginx-mod-http-perl-1.20.1-28.el9_8.4.alma.1.s390x.rpm b4a8cd6bcf12837de35119fa3e3fd6b6d5e6564b5b7fa9bea9e621995429c528 nginx-1.20.1-28.el9_8.4.alma.1.s390x.rpm b53336dbe876099bcfea6a4cda68789f996938a5fa4f13537a6bd9ef6a073ab9 nginx-mod-http-image-filter-1.20.1-28.el9_8.4.alma.1.s390x.rpm d2e276f8d3f030d07931c5e27dd9306ff23cef95232efb5058564d7b13ba32d7 ALSA-2026:3638 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nginx-mod-http-perl-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm 022a2c13d1c85073a96d6aceb3e3401580e5a77281596ef630b71f6d35458d72 nginx-mod-mail-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm 16d66e26a1675c2b7a962159e33bf5c3c1a9a86130c637cb863c86b5b724da30 nginx-mod-devel-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm 4b46b6285fd4dcefa26e6f771eb099109d3f1025532d9da2ec74c0be69976f25 nginx-filesystem-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.noarch.rpm 5a3f5b22c1ebb25c16a8d580f17b5b555ef8fe552a3987514f70542f23ed706c nginx-mod-stream-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm 5dd77a87318a5853762993318d3c941ef9af5c5ad72512e2e5a00e0f34818322 nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm 6252fe42b455dd6bf21866973245be7cbc6f70ff1cf2b082b950ac99bb29637f nginx-all-modules-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.noarch.rpm 8dcb64f1ff3f4826abee42be90fba7e110364045aa78cc7cf1b73ddcc937e492 nginx-core-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm 9d296c9c0bddd73a070b700aaf7b284c2aa5e67e09e1651cce4b8bf5420f068c nginx-mod-http-image-filter-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm d33419dfb1ed0b008bdb77561ebdd0abb5cec417c48b654bb136b7e163274e31 nginx-mod-http-xslt-filter-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm f8e51af4212cc1771fcdf60658b534a29b356767d58f697d990083c49bef8256 ALSA-2026:36617 Copyright 2026 AlmaLinux OS 0 1 Important

oci-seccomp-bpf-hook security update

OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default oci-seccomp-bpf-hook-1.2.11-2.el9_8.s390x.rpm 4241f6bfa703b5c6a3eb7dd9d9f6fd8fda950e52e48b7072de533be2efa2ac77 ALSA-2026:36618 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.24 security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) Bug Fix(es) and Enhancement(s): * nginx:1.24/nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-191773) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-core-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.s390x.rpm 023af8c57b9a4fdc9cb56970bb5ad71b36c3effb88cf61b9d63e73e1a226e18f nginx-mod-mail-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.s390x.rpm 03c98dc08b3f43353627df80a1752b9c60d2886309bc085a6020cbd90bcdc708 nginx-mod-stream-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.s390x.rpm 0ed75865a4b011f08a1340e09553d707bcf55849925d5592adf4261b746068f7 nginx-mod-http-perl-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.s390x.rpm 14f3070970e013376af77139c14d811aa418f6313c482606e05d9680e5757352 nginx-all-modules-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.noarch.rpm 19456fe1d88b5010becd6fb7fb15d91883d58c25c15ae8f09eda7292be441940 nginx-filesystem-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.noarch.rpm 2d154b2847267c46570d522255c6ccf3cd2a83f1def6822328c01b88aac76aa5 nginx-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.s390x.rpm 50560470ace6b8c9f18b9b4ef90beab807401e0aa5c1a7a506441b9dd1b93feb nginx-mod-http-xslt-filter-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.s390x.rpm 6cfa4620a2eb7dae58ad1c8df60d0871f7589090605989fdc964bb1779f224b8 nginx-mod-http-image-filter-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.s390x.rpm 9fd442da0de09b471926cc5324ec1224faf8efb7bf7c7f5ecdc09e6312b2fd2f nginx-mod-devel-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.s390x.rpm ebb401d2a661ae29bd4f60e6358777bc6a83f3fbb95a993e58dfd2f922c102e2 ALSA-2026:36639 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.26 security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) Bug Fix(es) and Enhancement(s): * nginx:1.26/nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-191774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-mod-http-xslt-filter-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.s390x.rpm 0b322fec9b046307af8a0dbd7f61df67c527a25893acdafdd82e39ce05e79a23 nginx-mod-mail-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.s390x.rpm 7fd324bfb59b4b0763f8b873dd74f07354a166ddcf159f323f87d4402760d134 nginx-core-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.s390x.rpm 800c979244408f0794faaaaacc5733b5985398a0bc9844ebe54fcec082f3b49c nginx-all-modules-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.noarch.rpm 88730ac825490f706a8a59483ef93af7b86d2fe28e8c2451a142029a8a963731 nginx-mod-stream-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.s390x.rpm a34cab73e5493eb6d476a71dd5087e96ba5328123b61161d4eaa74ed6d6e69a2 nginx-filesystem-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.noarch.rpm a6fcef132f9a64e3040a525037819bab499ab63d692dfe6ac1589b0363351934 nginx-mod-http-image-filter-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.s390x.rpm af8d78091f69dae792ff527df563caad528598d0250816f0068f93c829903931 nginx-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.s390x.rpm e0b9d41668dfba3f3b7298fa2785cc1cec7c11dbbfdd7d83f1feb06573228249 nginx-mod-devel-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.s390x.rpm e0e146b6ab645c5e5142e70c658bc33f159cf8bc8317f917ed4cf72ab3332bfa nginx-mod-http-perl-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.s390x.rpm ea137c516e40076dcecd00c9468ae6990aaccf6b11a3ee395dfccd9e2ec26c9e ALSA-2026:36645 Copyright 2026 AlmaLinux OS 0 1 Important

kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266) Bug Fix(es) and Enhancement(s): * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [almalinux-9.8.z] (JIRA:AlmaLinux-182344) * [AlmaLinux 9] Bonding reports unknown speed/duplex for tg3 interface [almalinux-9.8.z] (JIRA:AlmaLinux-182768) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-doc-5.14.0-687.23.1.el9_8.noarch.rpm 0bec269327c0cc792d25ad644d3649cd96f2a6b21c893bd78c488e40eba1060f python3-perf-5.14.0-687.23.1.el9_8.s390x.rpm 0f7fb52bd3f1034fb5768ebb940101eb364a0eb354e0886829c9587238568da1 kernel-zfcpdump-devel-matched-5.14.0-687.23.1.el9_8.s390x.rpm 17ded5502626a96e1a95995b44cfe67fda5274a4e4f0598d5b74bcc47f2a735d kernel-debug-devel-matched-5.14.0-687.23.1.el9_8.s390x.rpm 1b0c79fba9c92195c41292d4a60490caa517949b0296e7ea039c8b0010d9a9f7 rv-5.14.0-687.23.1.el9_8.s390x.rpm 26b68dedf8ac4900722f78fff022482791eb341dc231b4f96114bf266e48dc65 perf-5.14.0-687.23.1.el9_8.s390x.rpm 50a67a80c9266e32f1841e426f05cc4265c6f14de7a49afc6604cf552ca9b04f kernel-devel-matched-5.14.0-687.23.1.el9_8.s390x.rpm 60d8e030c02b7bb1d19633f67cfae96ef23d9c45f5ef396336f8338f8690e9b7 kernel-headers-5.14.0-687.23.1.el9_8.s390x.rpm 8a7b65c8ccd312b2a7f2ac58fb8488e7fec00c920df19478f1430224ba240f97 rtla-5.14.0-687.23.1.el9_8.s390x.rpm c120c8e26531f752602a694256884e1b569d6255041e18247acd20277d636f9b kernel-debug-devel-5.14.0-687.23.1.el9_8.s390x.rpm c2a81a921352a2d7ddd649eacab2a9fe75f8e2f490b9e5cbafe04cd55f0282df kernel-devel-5.14.0-687.23.1.el9_8.s390x.rpm d5d47456c4bea4c12230f3406e32e41463e96492bf7b4c8f2c99bf4023f27dab kernel-zfcpdump-devel-5.14.0-687.23.1.el9_8.s390x.rpm f23dd3262b8e1f0a7b967242d9d02621875a4c3001fe61bae690c43b4b8b528b ALSA-2026:3668 Copyright 2026 AlmaLinux OS 0 1 Important

go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fix(es): * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default go-rpm-macros-3.6.0-13.el9_7.s390x.rpm 09405c64c179e957775b5de7e757a6258797b2dd7219edcab23cb48db3cbb589 go-srpm-macros-3.6.0-13.el9_7.noarch.rpm a8c6d9c83a99b5a1a2c97245231465840ca92610087c1f6fc97c2ca2baedf49b go-filesystem-3.6.0-13.el9_7.s390x.rpm ac24c10ce61897938d92a7767c9746623a0a0c21490f4de095c213b0216f8eaf go-rpm-templates-3.6.0-13.el9_7.noarch.rpm ec55a8ec96c689ee62e71bb540e6522865cda785bcf3a9e23491a42b3c6a1e0b ALSA-2026:36777 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Denial of Service via excessive EDNS options (CVE-2026-41292) * unbound: Unbound: Cache manipulation via 'ghost domain names' attack (CVE-2026-40622) * unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets (CVE-2026-44390) * unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic (CVE-2026-42534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default unbound-dracut-1.24.2-3.el9_8.2.s390x.rpm 578b70938002548735574c16718c58672859596458481e0f15ad3228dc2a3479 unbound-1.24.2-3.el9_8.2.s390x.rpm a213061bf88d6e36161e6fc8aa6f36ee243fb10b12687bffc279b215d2932350 python3-unbound-1.24.2-3.el9_8.2.s390x.rpm c0e98171e17554b510f589916358b8625162f28e7ea50122617d30b27ebb4c82 unbound-libs-1.24.2-3.el9_8.2.s390x.rpm fe58379bb7f915c4cd6ecaf76b36aef011859ad0a686e9f18d9908ccf9a432f3 ALSA-2026:36832 Copyright 2026 AlmaLinux OS 0 1 Important

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation (CVE-2026-8357) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default autocorr-ru-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 05a2912d61bca8cdf15aafbbe3c22b8ba57c829f11c47eaea9e59a2d832e6b17 autocorr-fi-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 077f5efd706abe6754803affcacd920658ae2a1be358d40d446cc40a2f6b0748 autocorr-ko-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 092af5389a1039e58950bf93de80e94a9c8f85115acd3464d8aca88056613c82 autocorr-hsb-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 11e2e90115c06350ae9d35c25129268a3e38dcda36192a5bbee57831ff29a547 autocorr-bg-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 131f464f777ae5aa40747ae25a5c6b39411b7d6e2fc0fc1d477144fb793588e1 libreoffice-opensymbol-fonts-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 174388abe33af674b8b4336a25786bfec5226cab90aef4e25726d55b320c8927 autocorr-dsb-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 1745674717fb32e5a390cb1b013404f2d2235f69e986a12b0313add3ac579028 autocorr-sk-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 1ba54f6eff31cff16a4fc3e3ea5c045bdf8613f31f7771698a58eaa04f1c56f5 autocorr-da-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 1e835eac3643b34586394a3a4f0e05085f70d10aee16500247047bbbb71e0bad autocorr-vi-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 1f9807142c833a5c4f75e8b9ca74b35d4401ee3db549352f713be60a894fe30b autocorr-nl-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 23c68cff69b8a925aaba7fc9394f6303282213ddb1fd2dbc61c4673c427c38db autocorr-es-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 254d3bfb8310e5bbd1abb9a1f64eb066d69684697c3cd6434aeb9a7979713bf1 autocorr-hu-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 2cfebce0350bb87d327e39caf3bf63c4cb20bb808b623a6f3466e1e0db7103e1 libreoffice-pyuno-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm 317c3707ef808d729d48ba410b362db345a1feabc9ed34de087ef17c6d681d1f libreoffice-writer-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm 31862d19214c1b58386243187cf4d236c220193d95ce901752ca6e41ee4fdda8 autocorr-pl-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 3813df42e79d3b3613796e2e6275b240864ff5914604aa2746a0bb37e7f8442d libreoffice-data-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 3e4c4636f54323e5bd9a0d13f2a8f53ee377d1a114d42c269a925235dc4bf97e libreoffice-ure-common-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 5ab2aeaa63394fc80103e21f4ff476789d9afb82a772071e74d48ef7b117ec28 libreoffice-langpack-en-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm 5e7921cab96b1915984b7f61e693aec3bf6fd22a88ca930c74bd1c1d0a281db5 autocorr-de-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 67ea0846cc7bce2472a5f88d9d7213781d5a9c3e7bbc8384b8f958df78de8ec6 autocorr-cs-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 82f4ef8d8d406217486ef49b184d37d64691929c01e1c235f1d8297389377935 autocorr-hr-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 88262c92ff987b8766f8b8ad6c619342c885bf072b6ff788efd4fa19aa99a0b6 autocorr-lb-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 891ec234983e48015d92bcc1615f3ba0ea864f57cdb6ac405d648147eef126e0 autocorr-mn-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 89b99ddaf7e1b2ef6b8b657137e7464b78a185f12f694116afdd1e84d41ca105 autocorr-el-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 9520e4f8bcb257e0672acafd211da5a6c2f2bb8174f5613d235b90dde711793e autocorr-ro-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 9670f2b1eee4512381c27f82d68da4465c83e0272342b759c364d69355ee8312 libreoffice-graphicfilter-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm a0e39653c6cd89e8805cb74878bc55d228cff96ff7bd90d2add454874877d501 autocorr-ja-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm a704da7ab3300d46afe2d6b1db2d883e60e1b4404e7b123e728b92907c9eeb0c autocorr-vro-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm a83d296cf29b5affe8ab26d0904aedd68e4bc2c6814bb506ad5be4bf594bb873 autocorr-fa-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm a8b62f5706ba50987e04bc3689d5d46863515243ef020adb78e11acd0dd0154f libreoffice-ure-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm a98b08646cdfe0dabd70ed520940af0de986b743d2acfb0d96abe03d390cd60c libreoffice-calc-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm ae3a6f3bb9365e3f74087fbda2b457568d7924e029f594ccde6b9f99c85f7d28 autocorr-sl-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm afe239c300287646d29dbd485a6dc317c5496b8d30d6d8d33c9166bd1b240559 libreoffice-core-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm b15e75dd476e11aee8d09b07ccf9da1118893252e26171a8671cc8b275de3d61 autocorr-lt-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm b9074206c197cc1ce78ebfd34a4271b1e207acadc263375121f96444e970ab2e autocorr-tr-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm c0728f92a40feb87738231ac12552f8f9d83273bc69a097af807dabc73592d7d autocorr-sv-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm c2a0d9a0448e805b90c5c6a1841dc10d6c9a4a78b699547ec0b1d4506b121e7e autocorr-pt-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm c628695dc7125a64c1e9254be8130a9dcd933f25b9af3eb6faf29caeac64e2b8 libreoffice-pdfimport-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm c8412a3823d10875e2b175e17b5c780dd3e26772f7a3e2d8c1bf6209389906d5 libreoffice-ogltrans-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm c98f6ec8375355a758f92b7c1d1d6e50b3e4c28f8fee938825ec1ea96c84a4cf autocorr-zh-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm cc035a7dd26c432d7716850f49839962ca43f9332e21a0003aa7da68442a946f autocorr-sr-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm cce9adad97aac1c4700c08a826b2381071adc25c5c0f8a58347a399b8f68b7bb autocorr-fr-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm db5133aa690e53c13cb2c2c887ee79252edefdf61e699b4b855a504bd285d951 libreoffice-impress-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm dea294115ccdc432c1150bf1ac05b976ecc67dd81e577d3c2b047f9cec313a17 autocorr-en-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm dfcae3724bcbe86e9083fa1f33f585655601a6f44893a95cb5dad4b11e3f976d libreoffice-help-en-7.1.8.1-15.el9_8.2.alma.1.s390x.rpm e6931b811d7b5190d1134de2604444fff6ebecfdbd4bf1473c66556bb5df05c7 autocorr-af-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm ed665837319a55253922a5161864f886d14c10e3fd11f0b38707555ef4738f06 autocorr-it-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm f47496c6d795f0b1b9d0482ed43fa855b9f37ed31072a97d595c41941c9ba0f6 autocorr-is-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm f68750ad94432e34db496b79abc3de2c95169286bf97e04e45e38aab16e7a47c autocorr-ca-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm f8a4efc97d342931ba3780bb8529eeecbf62a4d016654a914fb44c588547d160 autocorr-ga-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm fef4ed87110cd1f720c12b697887799ba94171e9aa40b659f48f2dd22517bed8 ALSA-2026:36834 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tile_list_obu parser byte/bit confusion (CVE-2026-52718) * gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (CVE-2026-52719) * gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb (CVE-2026-52720) * gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling (CVE-2026-52722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.1.s390x.rpm 12d1e60cf55bb3832b048a71dde3c1dfb246d6cb21a523132189134bdbc32942 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.1.s390x.rpm c34b02310f46818062d0cde5d02e12256e6feb2809e56f533b8549770142c2c2 ALSA-2026:36879 Copyright 2026 AlmaLinux OS 0 1 Important

tomcat security, bug fix, and enhancement update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146) * Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486) Bug Fix(es) and Enhancement(s): * Remove tomcat clustering JAR from RPM builds (JIRA:AlmaLinux-183992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default tomcat-admin-webapps-9.0.117-2.el9_8.noarch.rpm 21b54338c8911f7d0570dfc4074336245d72ecd7fd23b957b38844adfcbf6080 tomcat-lib-9.0.117-2.el9_8.noarch.rpm 45d3d9c3b65f47423d088727c129740f81222b9b8bfa692878e832ef6390c98d tomcat-servlet-4.0-api-9.0.117-2.el9_8.noarch.rpm 466e8297da209d0af30af01e14bbef7218bf09463c608d213849d4582e764d0e tomcat-jsp-2.3-api-9.0.117-2.el9_8.noarch.rpm 96d0aed85ef0a69f45bb8a77dc6b293ab62c284f4a1a45d9c015e69c58864a9d tomcat-9.0.117-2.el9_8.noarch.rpm a5150c547f61bd7c396c7176e7d473f5dd29a61aca9f1feea88c733601d78dbf tomcat-el-3.0-api-9.0.117-2.el9_8.noarch.rpm b1bcaee9dc8dbb1ce4809e011e7a60dec43f5b5b22f04a7b83f18ddc347a5e66 tomcat-docs-webapp-9.0.117-2.el9_8.noarch.rpm b283f9775d07ccfe3e013e36ecfa6a528400aa77ad95f9d2b03843579919f90a tomcat-webapps-9.0.117-2.el9_8.noarch.rpm ef598638b8b6b5ed0398ec7653df1c400833b2a665d7ef817ad3ddedcf6ea83e ALSA-2026:36957 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-zfcpdump-devel-5.14.0-687.24.1.el9_8.s390x.rpm 1f69ba8007ddade58d06296910f55361550410ec84935be09b522abd17a468cf kernel-debug-devel-matched-5.14.0-687.24.1.el9_8.s390x.rpm 2bd4d7de3b86138becce7c92e8649743d902260eb48755fe047e76b68d8af3bc rv-5.14.0-687.24.1.el9_8.s390x.rpm 59a9785092bb62059cb4ba734760788e5b16dcc91f3eae6e7ee9bea03802ef82 kernel-doc-5.14.0-687.24.1.el9_8.noarch.rpm 79b42120a5094ce2bd3ad52d2879cb41299578c704cbb6536cae41311578233d python3-perf-5.14.0-687.24.1.el9_8.s390x.rpm 8c3eb076c86c9337fda82194e0084aecf58c2857945dbaa5088940f0b9dc6bcd kernel-devel-matched-5.14.0-687.24.1.el9_8.s390x.rpm 8d21614548fb10b64276f62d85d7cc28ac6d4fa5efce7fb715271ed0a1fd5b5f kernel-headers-5.14.0-687.24.1.el9_8.s390x.rpm 9b17d0192fd73448179877d33d05b64be48e98da01a399b1c34c8a1efedaa166 kernel-devel-5.14.0-687.24.1.el9_8.s390x.rpm c5e53197ce504822bf45bf6f6defc1ca318a975f7bab1bf766dd1d1787c30633 kernel-debug-devel-5.14.0-687.24.1.el9_8.s390x.rpm cb2d8d09442c477d8b7bc93c1486cdfb7c15b8f9b0df32b7d888466b87cfd614 rtla-5.14.0-687.24.1.el9_8.s390x.rpm d3dfe9977bcdd4dcc0522f8d0fe9826938948600856662f66b850c8d174bbf2b perf-5.14.0-687.24.1.el9_8.s390x.rpm e0c6a3318e793a06f1727661da58c8f54d1d6d255ad4e3d22e11760d2eb3f465 kernel-zfcpdump-devel-matched-5.14.0-687.24.1.el9_8.s390x.rpm fd0ce9bc3b770361ce54585b79f231ac9ed3d15fe52cd5b0302e4e71a107e61e ALSA-2026:37123 Copyright 2026 AlmaLinux OS 0 1 Important

podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832) * golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508) * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) * podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231) Bug Fix(es) and Enhancement(s): * podman does not clean up all files and leaves orphaned files consuming disk space [almalinux-9.8.z] (JIRA:AlmaLinux-173988) * [FJ9.8 Bug]: [REG]The "podman-remote save" command fails for rootless users. [almalinux-9.8.z] (JIRA:AlmaLinux-192439) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default podman-tests-5.8.2-4.el9_8.s390x.rpm 0d68fc24b5b07dad79e1e7613075d5a60eb695b5ddc9ae6dd5dcb9fc4daa7646 podman-remote-5.8.2-4.el9_8.s390x.rpm 522eb88fcadd2601962c29e00fa5140a724d467ef8abacbbafba1f0e75caebc9 podman-plugins-5.8.2-4.el9_8.s390x.rpm 676057b698495edebceecaa0d54c2fccccd01d8e7493306411cb9ea847f6dc54 podman-5.8.2-4.el9_8.s390x.rpm 844eac96e15c1bf2d915c5bb331b049231a6dcdec7d28c0287ad97ad5ba226bd podman-docker-5.8.2-4.el9_8.noarch.rpm c8fc0fc3eb88364d645aca2cfaadcbcbc1af1a30567728916ae77481d5b25e34 ALSA-2026:37129 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow (CVE-2026-53705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.1.s390x.rpm 064c793e7d8acded5bbd39f526341de78602bb5e099e1a8b91193e4df7e9e434 gstreamer1-plugins-good-1.22.12-7.el9_8.1.s390x.rpm 10ea77015602bc3a1b7ac1fa11b9e4096b0a98c02f51f8a8a3c7ef85688e6ace ALSA-2026:37207 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default freerdp-libs-2.11.7-7.el9_8.4.s390x.rpm b6d8110b640506c458557cbf1ab77053e32d90bbfffbae01a8f041e1c1a9f776 libwinpr-2.11.7-7.el9_8.4.s390x.rpm bc9230f5314784e3bf65f99a0b39647be34392d47ab90d216301f36cb00ff1b7 freerdp-2.11.7-7.el9_8.4.s390x.rpm ff46eac3ca8bc8e73eaf8e3a886f08cab2bedd354ed1efd55b3ef0819e180919 ALSA-2026:3730 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default postgresql-13.23-2.el9_7.s390x.rpm 2e5c9ab1a0d47645e70b455840606ac26d1c7b97c3de01a86a9fc396d3712363 postgresql-upgrade-13.23-2.el9_7.s390x.rpm 49f187c427a34af34749a8cc13f1259f36a6c10b1b9873869a9142253d77dc56 postgresql-plpython3-13.23-2.el9_7.s390x.rpm 886f5aa8dfeccb9622f3c2efd19a8c0ae18197933a58e140f0a9a5adc9aac34e postgresql-pltcl-13.23-2.el9_7.s390x.rpm 8cdc1af8dc2f71e13dec916c69a80ac42664a71d7ea828ff4c9eaae1bf782427 postgresql-private-libs-13.23-2.el9_7.s390x.rpm 9cd607552b74f4e94cc78117b580a7fc3414c6f18392288138a2902d69afbf3d postgresql-plperl-13.23-2.el9_7.s390x.rpm d178a1844be066f62bcd176639f4f03e56ea5e77c9717bbab486266c2d2061da postgresql-contrib-13.23-2.el9_7.s390x.rpm dfaabf922b325888a15fd884bf4313d19e78a15c42853819f36952c02d26201c postgresql-server-13.23-2.el9_7.s390x.rpm f6dfdee32caf9b2ccabe3050b77fbc5c6549ec380c3aa2e834a29155d11f9a2c ALSA-2026:37410 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default buildah-1.43.1-3.el9_8.s390x.rpm 8517e551dd66e2abcf9bf7da62f3dafb1cd5446d8eeda157f1de6d59f68c2c65 buildah-tests-1.43.1-3.el9_8.s390x.rpm e0915e7206a91769ea559dd7c34e9813e87b7a049ec7fca8d38a5b6d651ba023 ALSA-2026:37435 Copyright 2026 AlmaLinux OS 0 1 Important

golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.5+1 [almalinux-9.8.z] (JIRA:AlmaLinux-193476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default golang-race-1.26.5-1.el9_8.s390x.rpm 19fd474f8740b8fb948db5b2e0401cb02f704e5f629e7a42225dbd7f4cb61a28 golang-misc-1.26.5-1.el9_8.noarch.rpm 1b0cbee9a35a7b9c8ca6a706b29e919de7b40cfefc3905814997aaf1f191b47c golang-src-1.26.5-1.el9_8.noarch.rpm 8c9194ab73cd3e8966a44f7ed9332e5eb88c0fbc7b1fe0092a748d3d1f8772c0 golang-1.26.5-1.el9_8.s390x.rpm 92e4d07a1aa3afd6a4a07ddd21245c3761c68baa8773b6469e7f18cd349bbb5a golang-bin-1.26.5-1.el9_8.s390x.rpm 9b6d279e7ffd559254b6b145650a560a34bef676625ef2bf933a3689fbee0883 go-toolset-1.26.5-1.el9_8.s390x.rpm aa9a0b57c8366a963654c66750a1795c5b89211dd4829f21ed9d5554aee187d3 golang-tests-1.26.5-1.el9_8.noarch.rpm acf98e39d416ff38b57a2190f23f2bfb43b7a3ee35e7fd1dd39433ea4f24992f golang-docs-1.26.5-1.el9_8.noarch.rpm f15ecea52d7dfe2a6228d2a9b4c75c71e1e51f9ab50ea0ac0d4d004026d64a36 ALSA-2026:3753 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default osbuild-composer-core-149-4.el9_7.alma.3.s390x.rpm 1f74b65aa27e8c063d1d2897f7da8e4d3679da0ead50e5b02671487fda1ecd95 osbuild-composer-149-4.el9_7.alma.3.s390x.rpm 3359e17ad152b4efaacc4d48878b2a55915358c05cacfd2fd38581f40040e4ae osbuild-composer-worker-149-4.el9_7.alma.3.s390x.rpm 8382194e0a3b3d01d53ff164ccd31c2c314a732d3470941de50a9e3d303776a5 ALSA-2026:3839 Copyright 2026 AlmaLinux OS 0 1 Important

image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default image-builder-31-3.el9_7.s390x.rpm 3a8782458c1d9d7eaad13d8b30330ef098154c9c5262f986b697917a7d124a51 ALSA-2026:38486 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xvfb-1.20.11-34.el9_8.3.s390x.rpm 64ecd20679fee8bcb9de33ba21e84c06c53e74825e1d991934f0ddd2239e3a0d xorg-x11-server-Xorg-1.20.11-34.el9_8.3.s390x.rpm 785c87c8220ca9850c816030802159b369bef4a76c8fcafb35e9ccfccbf5bfee xorg-x11-server-common-1.20.11-34.el9_8.3.s390x.rpm 9cdb84ad57fc7b771d427dbcec3b098d90c2fd204ad844afed5c22bd7cf21e4e xorg-x11-server-Xnest-1.20.11-34.el9_8.3.s390x.rpm aa5022adcb45dbf9dcc081935a7f05ca11e5a099d501f16eeb5974de48c2929d xorg-x11-server-Xdmx-1.20.11-34.el9_8.3.s390x.rpm ada4f29b21afaa5438d859cc69f190cbe151e98cedf37d6026ecbb4c82018db5 xorg-x11-server-Xephyr-1.20.11-34.el9_8.3.s390x.rpm e97ae3a28b3c82aef9f26cb4a0abf6282894dcbe448e56f9694a77f95b9a46f6 ALSA-2026:38490 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) * X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.s390x.rpm d268e5ed1e4a1ddf83ee8f0efeccb5da070b8dcd7eb74ef05d009e8160aea2d6 ALSA-2026:38491 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) Bug Fix(es) and Enhancement(s): * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rv-5.14.0-687.25.1.el9_8.s390x.rpm 126771a1bf7cd89d328804cc484821afbbb5d14e11dca7901ea0b848440315d5 kernel-zfcpdump-devel-matched-5.14.0-687.25.1.el9_8.s390x.rpm 1ec088e9a9ab5f090112dcfa4936fbb582078ad058f5b8a453c9679c073054a7 kernel-debug-devel-matched-5.14.0-687.25.1.el9_8.s390x.rpm 4cc57278b7e25258f97bb6b6dcdcb2f0252caf7b5992fa574a2d3f8742a68d30 python3-perf-5.14.0-687.25.1.el9_8.s390x.rpm 5b717e72518dd64cc780180a33ce608bb1d31d0884bebf16ee61ba561ae0ad2b rtla-5.14.0-687.25.1.el9_8.s390x.rpm 6ffd3a6b0a7d4bac9a01f1bb27ac7fc4b3fd01877201e2266e7b315153c2d131 kernel-devel-5.14.0-687.25.1.el9_8.s390x.rpm 9f779409492256fd965e056e9aa91398040556c5ea9f6e58561a1a9d2ec25504 perf-5.14.0-687.25.1.el9_8.s390x.rpm a4b93e3fdf43af5ca32cc9b5f7fa761fa024965ea7666f6af0bbbe5a12627536 kernel-zfcpdump-devel-5.14.0-687.25.1.el9_8.s390x.rpm b4e7b31f0c7407790960d7ebc681ebc2385ade8220ba7e124cdbb896fabfec4f kernel-doc-5.14.0-687.25.1.el9_8.noarch.rpm c3fd89f4618f0665b6991c8a594e011a4e91c896424e1919dc750befdcec1396 kernel-debug-devel-5.14.0-687.25.1.el9_8.s390x.rpm d177e0bfb5faf6bd71d47c581e487c54ecc12ae325792b51d916492fcde0f966 kernel-devel-matched-5.14.0-687.25.1.el9_8.s390x.rpm d3de433ff8d0ba7685bbf5cdf0936c142c3a7dab7d93960c1e1cbae78a4292c9 kernel-headers-5.14.0-687.25.1.el9_8.s390x.rpm e5fff2e59af0fcabb83d836033b21ef41264c4108becb7d8fe5b30bacd53a1ea ALSA-2026:38493 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default buildah-tests-1.43.1-4.el9_8.s390x.rpm 8076cb18f7040981cbd3c91cc1a0d4985d3af065d226a6db972f78778ce57420 buildah-1.43.1-4.el9_8.s390x.rpm f4c91afe42794d70d588b0b17d7f01afaf01fc3a81b285b43b1aaebd64c743f4 ALSA-2026:38497 Copyright 2026 AlmaLinux OS 0 1 Important

gegl04 security update

GEGL (Generic Graphics Library) is a graph-based image processing framework. Security Fix(es): * gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing (CVE-2026-2050) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gegl04-tools-0.4.62-1.el9_8.1.s390x.rpm 2eda95b36a82de27e74376cc1e6ca4669a4beac10bf49e0ccae80021c64b434a gegl04-devel-docs-0.4.62-1.el9_8.1.s390x.rpm 94715073f3c5e36f0ecefa0800ac8e42f4f96c0f731b18832558e23acb78c0bf gegl04-0.4.62-1.el9_8.1.s390x.rpm cce7348fb17cd2ffe6b4250869493ef1151dcc397d2482dc7b06390b6092cb38 ALSA-2026:38498 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing (CVE-2026-41142) * OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files (CVE-2026-42216) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default openexr-3.1.1-3.el9_8.3.s390x.rpm 1fdc58f763d1a80b8864b41715a0de60cdf8910027fbf072ef4684b2a643e9b9 openexr-libs-3.1.1-3.el9_8.3.s390x.rpm f6ec9d58745e73de997d1de2b1cade8403f79321f0a4041ccca714f1246ea638 ALSA-2026:38500 Copyright 2026 AlmaLinux OS 0 1 Important

maven:3.9 security update

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fix(es): * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default sisu-0.9.0~M3-7.module_el9.6.0+148+fb6dc857.noarch.rpm 0068d3862eac581d1244a88f8aabd8da4bc2a149214df3e6332f6d1881756263 maven-lib-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 013a955ca67a470521cf125f30fe0c80d6fc2f0cd4074e5467b9bc06e94a7920 google-guice-5.1.0-23.module_el9.6.0+148+fb6dc857.noarch.rpm 125ab240f75159463d459a50b70127aa61a66ed6466c1b98e7e72a65156116b8 apache-commons-io-2.16.1-9.module_el9.6.0+148+fb6dc857.noarch.rpm 16174a73cfc84903af6f4471c24018b74535c335cf5aa29d3a82dd0f88facbbc maven-openjdk11-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 193ca7922bdab1bebc00cfc84cdb04c583329734a296dae47377e44e46d9f861 maven-resolver-1.9.22-6.module_el9.6.0+148+fb6dc857.noarch.rpm 206efd1b0da9d7053e07d3fa65d24886f20e2ddddbad3c6f2837145dbc559005 plexus-containers-component-annotations-2.2.0-10.module_el9.6.0+148+fb6dc857.noarch.rpm 23f68d37cb57f3040a2f06ca0ad0b7425c4776bef698284bb5c32641e3d9b9ce maven-openjdk17-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 2fa08ecea399a1912665d3fb1703c05fe278656bb5eb2c35afd45a42555d2063 plexus-sec-dispatcher-2.0-28.module_el9.6.0+148+fb6dc857.noarch.rpm 355f079b47dd677a1fa96c87b03ff84dc41d9fa1b1f5d216e09d5b64ebd01beb plexus-utils-3.5.1-17.module_el9.8.0+282+e62fc403.1.noarch.rpm 42ffb75bbd9b3e338c7d32e8d104f10f840c61eef11abca0bc8c1d3f585d9fce jcl-over-slf4j-1.7.36-9.module_el9.6.0+148+fb6dc857.noarch.rpm 44944cc4a43b396145ddfff53aee410c0ea976fa7fb408e461af66e2350c3d2a slf4j-1.7.36-9.module_el9.6.0+148+fb6dc857.noarch.rpm 451b9bbb1235ad094a6c78342fb8355ff77d4fd6b3669e64dc9f8b556a10047c plexus-classworlds-2.8.0-9.module_el9.6.0+148+fb6dc857.noarch.rpm 51d092c60f21d54c339c021d92cc8fef9003e664d4a24e6c7de8ce46112eb5ee apache-commons-cli-1.9.0-4.module_el9.6.0+148+fb6dc857.noarch.rpm 56cab142f75ee073a33918f63cb431f3f149d9759be85e2a291721a35b661a10 maven-openjdk25-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 754addd6d3f04ab900c47775cfc8190a8da0985c86ebc0d8b3e1d6d2a98e9d8f plexus-interpolation-1.27-10.module_el9.6.0+148+fb6dc857.noarch.rpm 7ff65c99b5cfb055a1ba6ce4e965c70bd7e9e43550ce7df4fd3ab16c917ac172 httpcomponents-core-4.4.16-21.module_el9.6.0+148+fb6dc857.noarch.rpm 8ab2f7de652b168e63235a2cdb1aa18bfdd65874de65b98131071fff64308595 maven-unbound-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 98411993464cfc1be59b326861976a020c081b9ecb3e00020886626c0f5738cd apache-commons-codec-1.17.1-8.module_el9.6.0+148+fb6dc857.noarch.rpm 99d95463c03e6bf061ba1d4cee25e8001708017cd08afca31f787641bda5c216 maven-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 9dc575ec379acf23c42f2f24723564418f241254fd0ecc2609f7721d04615bbc plexus-cipher-2.0-25.module_el9.6.0+148+fb6dc857.noarch.rpm 9ee651942405bd06f4f0051fc30526737f6dae92e090ce141e202372281eeac6 atinject-1.0.5-14.module_el9.6.0+148+fb6dc857.noarch.rpm a2970b4cf013e030528956075c7a5fd78763309f8a33b72e6aab2de9456b5d36 maven-openjdk8-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm a5c21f9b7b9b729197addc6cf1f0acfbaf7a7e98b3b98d64e1ae4cd91276ebe1 jakarta-annotations-1.3.5-38.module_el9.6.0+148+fb6dc857.noarch.rpm a5cd127cea4d1a3b7d5976617ccedcec1a881b8b993ee1d4b3a74c971c90daae jansi-2.4.1-12.module_el9.6.0+148+fb6dc857.s390x.rpm ac5242eaa56897862277e8078da6bca823a703e0aeef9ef4b76e7e5dc5732909 guava-33.3.0-5.module_el9.6.0+148+fb6dc857.noarch.rpm ad3c8ee977ad4ba8691c734349c9b4f0099c2db54c387a97a4386b3dd390a494 httpcomponents-client-4.5.14-21.module_el9.6.0+148+fb6dc857.noarch.rpm add1d5437455f933172e1a1e8d88d3d830a27744aec457792abf5e2c38281688 jsr-305-3.0.2-36.module_el9.6.0+148+fb6dc857.noarch.rpm bde7485a59bd2cebcec0886b030996bbd471cd9d2a01e133886602602ab3ce3a maven-shared-utils-3.4.2-19.module_el9.6.0+148+fb6dc857.noarch.rpm c3fb1a2a3f787c705c7c5ea4b59d8603aa51215e2f4248e13fd79faef4b81552 maven-wagon-3.5.3-17.module_el9.6.0+148+fb6dc857.noarch.rpm c637e1092cac547cd8b9bcae126bc7e2d5d138f8862aca9493ac13301804da08 maven-openjdk21-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm c6c41819a4134c9548a573ee36bf34df4d4b3276008fe9741b37e2751e159c1b aopalliance-1.0-51.module_el9.6.0+148+fb6dc857.noarch.rpm d8789fd27e9fcd05738d1310118583738d264ee4d5a84ece00c3e06a71ea6d7f ALSA-2026:38511 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: command injection when decompressing .tgz archives (CVE-2026-46483) * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162) * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858) * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default vim-X11-8.2.2637-26.el9_8.10.s390x.rpm 633b2209e1e7987251f3122d1ac75e042f7d6eb2ef1df2cfe8eaef19e536d395 vim-common-8.2.2637-26.el9_8.10.s390x.rpm 6fbd7e5ed113bbffe416cae4a1a363133f1c9f1f8a1d91fcc50bb9bfd92e717b vim-enhanced-8.2.2637-26.el9_8.10.s390x.rpm e7b4f9e9b54d09859c1f298685b88cd8d0c8c50f7872573d5a3be096898f2b7e ALSA-2026:38512 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fix(es): * DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.1.s390x.rpm a0d041a6b5cc31a5600fb5399e089be7d6672f665d3b698d3be180345efd040d ALSA-2026:38796 Copyright 2026 AlmaLinux OS 0 1 Important

plexus-utils security update

The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for a full scale application server. There are many reusable components for hibernate, form processing, jndi, i18n, velocity, etc. Plexus also includes an application server which is like a J2EE application server, without all the baggage. Security Fix(es): * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default plexus-utils-3.3.0-14.el9_8.noarch.rpm 83674d69aca9951f1245d4c6899f7352451489b852ed1df7ec085e28cbb56cf7 ALSA-2026:38878 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default podman-remote-5.8.2-5.el9_8.s390x.rpm 38fe0df10437dfad60d77b73688a83c4f36fb6f144672eb8c7d5b13d9b530901 podman-docker-5.8.2-5.el9_8.noarch.rpm 3d08400ee877ef9e0f3484afa9a5edb7b404546085f79f9d29378584c58193c8 podman-tests-5.8.2-5.el9_8.s390x.rpm 85e54daa79bb70466dc85479890010ba3191a13aa4e6f4c8843304c32efe6920 podman-plugins-5.8.2-5.el9_8.s390x.rpm dd5e565cd6bc787381ef033dcd2c0a9ccdba4523f15f4ca9c8e84326cd6a41c3 podman-5.8.2-5.el9_8.s390x.rpm e87cf12cc100fb8d4d7db12983adc41bdda4bf394a42f9d42a0d29705f2af8eb ALSA-2026:3896 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89 postgresql-server-devel-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 1780ca4cc4b9af52d78cd676bf7d7b5528dcbac10fe282212304c6266083bfcf postgresql-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 1ee425b02e9422427c6d391cc3c0a8f6e2f124f7530b2f732fa3ed771734632b postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445 postgresql-upgrade-devel-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 38be78ce1e4c048ad85d91edf2b12eb79a56708a869f4455bb3f79db9f33f973 postgresql-test-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 40763e3893b3a41c2d8d75e10ee7d07cc9e02cdfa5af3b9c29ece3c24d85c37a pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm 565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f postgresql-static-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 7336555794cfff3255806bd7df58bd121b299d086dbeb4dd9ce1a07068414557 postgresql-pltcl-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 744d7e5bbc2257448ef94331fd714523b8dfea280701140b66cf66428a876afa postgresql-contrib-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 83b0ca35338b846cd527357bf7d4371f80c5424f99672c88b37dd481e856ecdf postgresql-docs-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 8ed1f46d6f481c83be86e895bddac7fc0a6ccce64995c5743aca24ef886022c5 postgresql-test-rpm-macros-15.17-1.module_el9.7.0+214+91f631df.noarch.rpm 92d7410aeb90fa0ed2a802d15be612836a4eaa2ccc45639000941b46086dc542 postgresql-private-devel-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm 940b65a7fcc3da2c63e129de5e8b20df4254233c93df1441942a0c5cc938233b postgresql-plperl-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm abf17168f42f890c1d49adb2c221c79aa6bd270399127a2d9be07f082b1d0bc8 postgresql-upgrade-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm abf5770258c96671dbd7e5c0d855730ea2ef8582ab24c7d1a15a54fb1f5169e1 postgresql-private-libs-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm bd62384f9fceda4548453c942f208a06659b542984fd3ad9783b7aeac5553913 postgresql-server-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm c90628072a3a8afa6a688800f7fe53b2ee5ee0af271f6c77a08dc5e253620d33 postgresql-plpython3-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm eea00604be9adb28a35e3af0dc3cb3f732175635be70fb0d960d0752b2bea471 ALSA-2026:3928 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default git-lfs-3.6.1-7.el9_7.s390x.rpm 3ac814d0f7039486235d4ed14281bda7484804dd3649d1a83accac8be42e875a ALSA-2026:39309 Copyright 2026 AlmaLinux OS 0 1 Low

capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Security Fix(es): * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default capstone-4.0.2-13.el9_8.s390x.rpm 8057de3e7e5c71e1469ad13abb3ceff53ddb7cf66b5e16a83b1902142efbf025 ALSA-2026:39311 Copyright 2026 AlmaLinux OS 0 1 Low

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-48914) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default qemu-kvm-device-display-virtio-gpu-ccw-10.1.0-17.el9_8.4.alma.1.s390x.rpm 072dac7b7611af1e35f0bd9ba1a353b1444a8a21a3e6df64967b088b9513fee1 qemu-kvm-block-blkio-10.1.0-17.el9_8.4.alma.1.s390x.rpm 1387bfb24f9175fce7e234fe5200ec5c16fa250fbba5f97d35031db138f772fe qemu-kvm-core-10.1.0-17.el9_8.4.alma.1.s390x.rpm 1b208d9f7cdf48260f225cdac3c74da905249870a568cf9780de25c084fb64e3 qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.4.alma.1.s390x.rpm 2036c62c53343b8d2b15561b8c50144baaedb4496ac8ec78275f1adeefdecf21 qemu-pr-helper-10.1.0-17.el9_8.4.alma.1.s390x.rpm 31f7ae9bcba6671eaf854087e6d73574117c515587a4772c43e38575c89bafe1 qemu-kvm-docs-10.1.0-17.el9_8.4.alma.1.s390x.rpm 409414de4e20e669c826e0b891514ae3e439a532d6a06d290a660326c3b7afb5 qemu-kvm-common-10.1.0-17.el9_8.4.alma.1.s390x.rpm 67103286a9c5430070dacb9b8284e904b5113adbe777125ed8f4457b48b2f0aa qemu-kvm-block-rbd-10.1.0-17.el9_8.4.alma.1.s390x.rpm 877875d22fd12fd071e75137182ac1a17e21c01ca24ba64a303ecf2699459c54 qemu-kvm-tools-10.1.0-17.el9_8.4.alma.1.s390x.rpm 91f4deac01bb9e53b661c388d992d43d8403938cbdcd35903fb0ccbe270afa56 qemu-kvm-device-usb-host-10.1.0-17.el9_8.4.alma.1.s390x.rpm 997f4378f06775d57d3969cab96e07327c36d679842f961e851e02b8d4877cd2 qemu-img-10.1.0-17.el9_8.4.alma.1.s390x.rpm ae005156c533c93e8f8e85099843cb43b8d173f5de47d71d76864c99f633fe95 qemu-kvm-block-curl-10.1.0-17.el9_8.4.alma.1.s390x.rpm afe5260ce68d8f91afd8eb6cdca911b0ec4467122f11ebc6d8924f2879a66775 qemu-kvm-audio-pa-10.1.0-17.el9_8.4.alma.1.s390x.rpm cf46b3093487afed3a941882cf2b621b92dd75c8f05b00ccedd9688f8e98766a qemu-kvm-10.1.0-17.el9_8.4.alma.1.s390x.rpm da0fe211f258a7023f1b3c259df3fa8cb1a71031709a76a0ae3a9484269a16ec qemu-guest-agent-10.1.0-17.el9_8.4.alma.1.s390x.rpm e46e142a66feb30bd4ae3657ce8d45460c2685d1468b532e613d2eb440d478e9 ALSA-2026:39315 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-solv-0.7.24-6.el9_8.s390x.rpm cd30ea146ea5d766e2ffec57f9bcc487e277eb50089ee7305a86b872c0e71ca0 ALSA-2026:39316 Copyright 2026 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network (CVE-2026-34980) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default cups-devel-2.3.3op2-39.el9_8.s390x.rpm 16a55a753aadc49b3f9c4415127aa4b8c0fc4ee4ee0820667a2b360615011f7a cups-lpd-2.3.3op2-39.el9_8.s390x.rpm 488d65ede86cd4b35418e86a2a527a17f437e50db70840236ab7958390e615d0 cups-printerapp-2.3.3op2-39.el9_8.s390x.rpm 5e6e1a13008a25dfa380310504a489c2a79cf50a977d9b7f36e0eec50752f126 cups-ipptool-2.3.3op2-39.el9_8.s390x.rpm aaecfa81a1011bda96cf433c96a5cc6018ab5e6672beacda7917fa121e459858 cups-client-2.3.3op2-39.el9_8.s390x.rpm b75d8345f80b3bcca72a37b4da1d81e84c2a169bc99e4a75bbffc735e625b25d cups-filesystem-2.3.3op2-39.el9_8.noarch.rpm e6a12c11938fcba6e5a16bd90a2f88d21c18c5a2d767a05bd56e9901397c9815 cups-2.3.3op2-39.el9_8.s390x.rpm f77fcf6a90fde17f32b9748017d510e0b4216367656e24619daf8a71ba13259d ALSA-2026:39317 Copyright 2026 AlmaLinux OS 0 1 Low

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling (CVE-2025-6170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libxml2-devel-2.9.13-14.el9_8.2.s390x.rpm 25586c8e9598a42a1fd7846b72fd72d7e485b8df64ba6e5e82be3722f89a72e7 ALSA-2026:39319 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default git-lfs-3.7.1-4.el9_8.2.s390x.rpm 4db731ddb4c4de635f423e3b0aa827b4c16b954b497261b117bb11467363a862 ALSA-2026:39323 Copyright 2026 AlmaLinux OS 0 1 Important

pacemaker security update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): * pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pacemaker-libs-2.1.10-3.el9_8.s390x.rpm 681eb0ceaeca7e21360447b8a46ffa519602fc6fab9ef35a05bbf57acfc4252a pacemaker-cluster-libs-2.1.10-3.el9_8.s390x.rpm 70f5da94190eb29623859a93041755fa680377901c04b5a9edb56e246bd8d2c8 pacemaker-schemas-2.1.10-3.el9_8.noarch.rpm a589196ef5ee06f85babd1361cfed46835235482de7612a1a68e023eb7eb09a3 ALSA-2026:3940 Copyright 2026 AlmaLinux OS 0 1 Moderate

nfs-utils security update

The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Security Fix(es): * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nfs-utils-coreos-2.5.4-38.el9_7.3.s390x.rpm 03a9f3ef9eb521b567e6261a8ca2269de380bfdb99dff975e67cccad4ff0811e nfsv4-client-utils-2.5.4-38.el9_7.3.s390x.rpm 21da57d57b41e113a857d5fb3a3e620d9e850c72998fe31414a12415f7617514 ALSA-2026:39553 Copyright 2026 AlmaLinux OS 0 1 Important

perl-XML-LibXML security update

This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation. Security Fix(es): * perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-XML-LibXML-2.0206-5.el9_8.1.s390x.rpm 9eeae95783b245bf1d8af1bc260fa4a7480bfa5438648b1d3ca820e771423ee2 ALSA-2026:39576 Copyright 2026 AlmaLinux OS 0 1 Important

cifs-utils security, bug fix, and enhancement update

The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system. Security Fix(es): * cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505) Bug Fix(es) and Enhancement(s): * cifs-utils: regression with kerberos mount [almalinux-9.8.z] (JIRA:AlmaLinux-192982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pam_cifscreds-7.6-2.el9_8.s390x.rpm 8dcab3b0dfd12b8b079a941943af198c6bc57266d2932283a860154bca4ef6b0 ALSA-2026:3966 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106) * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-zfcpdump-devel-5.14.0-611.38.1.el9_7.s390x.rpm 239cf9c5ac8b5dd7357c17da6ab8552a3e6278df5b323d5ad1c256bcd5b640d3 kernel-debug-devel-matched-5.14.0-611.38.1.el9_7.s390x.rpm 68ee1b5361c9f42a8d2ac707bf3645f4866040855e4c991ddd67e4624dcee644 kernel-devel-matched-5.14.0-611.38.1.el9_7.s390x.rpm 7be36851fe50e4b38896a52ee000ccf406007b8d7a8ad3feb119db77477311dc kernel-zfcpdump-devel-matched-5.14.0-611.38.1.el9_7.s390x.rpm 842f18e0d5f8f372ed2c76c0ab175001885a2bdef51462e4adcdcd661967ba58 rv-5.14.0-611.38.1.el9_7.s390x.rpm 85ce5ee3db1cd4e7c2f529b403eb8b5f5a3fe16bf56091b82f2625990d59988b python3-perf-5.14.0-611.38.1.el9_7.s390x.rpm 8d4df2420b38da6ac20656d154a5e0f6c9b7f4d56cc34fe8ecb5d95919f0dade kernel-debug-devel-5.14.0-611.38.1.el9_7.s390x.rpm 98ca357204c8f0807bf52e1d62eebeda0e8301f428c2f2cbd8594bead74c4085 rtla-5.14.0-611.38.1.el9_7.s390x.rpm 9d41b9c07eaaca851cdc4966cc9721de1222944a12d3d31e2f016cf392f0ece8 kernel-headers-5.14.0-611.38.1.el9_7.s390x.rpm a121f8f524f43f0e0ba886dfd5738b274794e965f8bdaf895b21dad0a2215b80 kernel-devel-5.14.0-611.38.1.el9_7.s390x.rpm cec97db0f68c145075c954be3c382befb2d092d4e4c8dc5901dd69204b4be4eb kernel-doc-5.14.0-611.38.1.el9_7.noarch.rpm eb36db504b5dd7e640af106b50d3a99d515546da64a02fb117247f560454925e perf-5.14.0-611.38.1.el9_7.s390x.rpm f6f0dfd0b3aa9dea3054a16b37d5a01d9b44cf8c6445a513ace7ff1020d23de8 ALSA-2026:39771 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.12-tkinter-3.12.13-3.el9_8.1.s390x.rpm 3bd4aed21b5c147f0a2e5924e184e69a02fa5d0f8e7c52b62a7855d8b3f78807 python3.12-devel-3.12.13-3.el9_8.1.s390x.rpm 70fc4afdecd92eb5abe4e26163b067df8245b27a961198e9a9356e23f00fd4b2 python3.12-3.12.13-3.el9_8.1.s390x.rpm 71da229cd86217d1f342ff4ebb96a3d1e5e439a56c9b617b16cb0e4a28a782db python3.12-libs-3.12.13-3.el9_8.1.s390x.rpm be47298465c6c2220a578a3b0f6ce1739d50885c10c2637ef04ce7795dc89eb4 ALSA-2026:39798 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) Bug Fix(es) and Enhancement(s): * python3.9 test_ssl fails ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data (_ssl.c:4192) [almalinux-9.8.z] (JIRA:AlmaLinux-194207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python-unversioned-command-3.9.25-7.el9_8.2.noarch.rpm 5588d5f207e73d570e257bbe685f875ce372c4b756f89f28f8f0b836b1a88451 python3-devel-3.9.25-7.el9_8.2.s390x.rpm a4fe1c8e5e02ca436f22f40b4c9c4b0534e42f2ec3b585158080d8c4823fdc64 python3-tkinter-3.9.25-7.el9_8.2.s390x.rpm c1313489619ef23ca6654ba3781337ad29caf7d39fba8e9cb4bbe70cea1c58d7 ALSA-2026:40416 Copyright 2026 AlmaLinux OS 0 1 Low

php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD (CVE-2026-14355) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.2.32 for CVE-2026-14355 in 9.8.z (JIRA:AlmaLinux-192622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-dbg-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 0961575dd2937e6b80207750b317fcae9d4568f7b7d1fe24bb455eb5cacdb60e php-bcmath-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 09f399bd3fac64f641abfbd8ee489a3063491550c71f2b17d1f621dfd2779961 php-xml-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 16654efc856fb217efc2d3db08c5533f950aa91bd86cef7115b9e404400c0b22 php-soap-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 2d084812006b92f35cb8ffa69e9f42e0ae408959d7880d7c0b2b360418da3e08 php-odbc-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 316816bee17aa6d1f843f9c7acb3d397329ea4dfea5de186b59c88fdf67c815d php-cli-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 438daf0bcaa8b7c555a3c333d2ce03ebb249d0b2ef55733b9ac97342dcd58711 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-enchant-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 56829f6f10a8e9c55dba2105ca34406a38b2698783c15fe4300a23f44e0be4d2 php-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 58041aac0e1c9926b4da790cfcd1d4cce6bc80e955ae030237a0fcb4ad6c7bcf php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683 php-mbstring-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 6b86cee0ec2168b83a4a317e8c494296bb419eaad9807c3661762f8f052103c0 php-fpm-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 6d8d035c855ad004fd25384deff397cf90bf84dfc4dc2c15dc953e9e0707c57d php-common-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 729e8daaf065ac1cac74d5c31c80b2059948e20f2cdb407307a1a6b6aa30d10b php-gmp-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 74297ccd860665b81071f74e4afe6c216b2d8ba9dc1156c6b7629e79441f1877 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm 7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a php-intl-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 87b21456c63c2e678d60ef14f8c1ab77c4f56502addc8eec2cbe5d80d83a2133 php-opcache-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 8a688a010114064a1710f3aca23d84142f75071be7883591c1a3d49e829a54ba php-devel-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 93b120cfc476d4851f111a6655ca06f8d338534a4da2240c9d1ee1488699f79b php-gd-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 99906cbfd83f5f91b814e937b8733ade9ac7851198a27c196af00fbe410c5a96 php-pdo-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm 9dc7d56b26b6c302d6521bfa4e08105609a030d43b04f580e7fab3a7b464e86f php-snmp-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm a9acf547b0ea65ba21781946724559edd8d4bf6a77d72af6482fc3a9e25d3df5 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c php-pgsql-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm b4cd14bf0299bb55de8b16e4b9283e5aa876abed6511829cbafa387904599707 php-process-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm b68896ca45267bc75f56ce697af314479032a79aa5f923efeb2b343c598c86bc php-mysqlnd-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm c55328346c56eb6d93b76dd147a50abc41e774f3c5d2c10ad449d90678398c6c php-embedded-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm dab502a7f710761b0efe91c9b6c18649d934dceb536153d6d7894a31f00aa2d5 php-ldap-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm e28d1a4db603c622b9a2d4117183ead22995a5a1fd69c08af16dbf45e31b8c27 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d php-ffi-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm fa84e44ad89fde55eda90da84be2b203b01133841d8470400d6ef6530593e0fd php-dba-8.2.32-1.module_el9.8.0+284+2e0ccc92.s390x.rpm fb4cd5d82171ae032188815c9337f77989b78a391959aec41efa8c4b3d072497 ALSA-2026:40831 Copyright 2026 AlmaLinux OS 0 1 Important

hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fix(es): * HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default hplip-3.21.2-6.el9_8.5.alma.1.s390x.rpm 5a6f3d8025e0db395fbca9127365c85af64bc8f2d9c5ecde5c8a7da809f2af72 hplip-libs-3.21.2-6.el9_8.5.alma.1.s390x.rpm 84774946153704b19fa78193bbd8b18049bddc4bd9d6a32dafbcf9525419fa33 hplip-common-3.21.2-6.el9_8.5.alma.1.s390x.rpm c4e52804f4117e1b61911ff688f14f2d103d58f4543364d4a3bb9debb0d570a3 libsane-hpaio-3.21.2-6.el9_8.5.alma.1.s390x.rpm f61299fb9f161ec626ed37313de51af6127dd313982bd075adf10033770e1af6 ALSA-2026:40895 Copyright 2026 AlmaLinux OS 0 1 Important

jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): * jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513) * jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pki-jackson-databind-2.21.4-1.el9_8.noarch.rpm 5d70286446cdb2416a754f1113a794c5cd48ff1bbec59db6163f2e5e2d29997b pki-jackson-jaxrs-providers-2.21.4-1.el9_8.noarch.rpm 645bff697f24f756541b9fc6a3c323c13ae54c4cdbe7efd9677c77e135267cd7 pki-jackson-module-jaxb-annotations-2.21.4-1.el9_8.noarch.rpm 71839cc322908f26d651befd7abf661b8a1ac508e56bd55cd19f822c83dd21ba pki-jackson-core-2.21.4-1.el9_8.noarch.rpm 8435724b5a5b5e037898b15d17880d3c1202e1a82c9b8ef93d9a9bbef6c9c240 pki-jackson-annotations-2.21-1.el9_8.noarch.rpm 8b9b129b1ac53f3c58858b72d8367e01a4bc7b489bec6695e97c6cfbbeb87942 pki-jackson-jaxrs-json-provider-2.21.4-1.el9_8.noarch.rpm e5de871877caaca1638b95c9577c8b0cf3ad1757d1b62c2671288758b8402e31 ALSA-2026:4110 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm 0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906 postgresql-pltcl-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 09e3552d4138de482fcd053f990ba819609916ef84bf6aa1e060b5f5fcdc2713 postgresql-contrib-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 17882c8d1f783abb624d9be9bcc1e10ccab66b8993c4baa6cbf7d9eb02a97c87 postgresql-server-devel-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 17de134d23befabc94da62f0ef3d176291754420f90c92ac36d87d71356e2bdb postgresql-plperl-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 23a52cecbfede0cd4be52e71ff68c40217192cdde13f0327d0ff34906f5ff916 postgresql-private-devel-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 2df92aacba22bfcd2b59fc0807337c4959954d8bc676e9cbab83585b8e2c91fe postgresql-test-rpm-macros-16.13-1.module_el9.7.0+213+65e1da69.noarch.rpm 3033607f375f822e2e026542ab0333cc58d6bbb3bc5b12eb086b3c47622de34b postgresql-test-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 3a65d284c1cb3986e12280c81253449cc40f96a568447b054d8482c60f1b99e6 postgresql-upgrade-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 3b7e08e434dbad7e39dc1c04c2a11d79c0ed6111bf54f3a7bccc7232b4579137 postgis-client-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm 3e3c27086d65ab7f69141c813b7afdff70bd3074e3f2e8149c2c95b454a7066a postgis-docs-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm 3ea30af2681c7b274e13cfbc4196f9f05c7bdb2be71edb1a25341dc766227d60 postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm 5350562fab47f66524d7dbda44510b5a76ba5301664983bb3bd6392d6ec91740 postgresql-upgrade-devel-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 5cc6973c5f8641989f200e6ef0d3ecca25e906ba7f14ddb8b0a162c9b560be47 postgresql-docs-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 6be0f21688bacf666b6db068e91bb84160a7ebc30a03d6fee6a2db62bb199133 postgresql-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm 798d41c86a6aa4d4dd7ec12f07f2f381d661cce0096524a13d1f814208b0e22d postgis-upgrade-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm 902fb1ceb74b0812bb672b8ed413fda3b5af06ce924da22ca89bc31b3da262ee postgis-utils-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm a3245da7fd72a14cb42d07e048ccae6530d0f4233e1cf691eb2a1d7d31d7e26e pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-server-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm cb20c8880aef67d099c7146498ae9e9e952dccdb6e724428e8bf86f6e845eaf6 postgresql-private-libs-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm d59d2b94faa639610ba5b90ab04976950dede0962131b0e0ab5923a3942768ec pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 postgresql-static-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm f81e57c756a72e4c4883197df0ca950951faa90d73c0757106866f7436f0282d postgresql-plpython3-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm faee8857f02774697307968a6ab6946348ca5d5b49384c55e998289678ad8f73 ALSA-2026:4165 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366) * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367) * cpython: email header injection due to unquoted newlines (CVE-2026-1299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.12-devel-3.12.12-4.el9_7.1.s390x.rpm 2258af0b1b06a8cec8af258318137cd5cefd322d9875fa8923a2dbd8c6390d72 python3.12-tkinter-3.12.12-4.el9_7.1.s390x.rpm 61088f74e7df3a3898dff1dcdf0f214fd74e37c5249448244031f9ea8c215620 python3.12-libs-3.12.12-4.el9_7.1.s390x.rpm c0321ecc0a6d0edd0b9dd674151a56f788ecfdd77a5d387b54f18abf4610fb12 python3.12-3.12.12-4.el9_7.1.s390x.rpm d834978c9df87e9a160e4acb56d0b4fd34943a73f818311094860f83489b2908 ALSA-2026:4168 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366) * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367) * cpython: email header injection due to unquoted newlines (CVE-2026-1299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3-tkinter-3.9.25-3.el9_7.1.s390x.rpm 726057e2f0a378004a0dbf251968b23f8db61f6c9d72b083c0208d1a65b3da79 python3-devel-3.9.25-3.el9_7.1.s390x.rpm 8c4bd74cde41118ea12425db7dbfa10c35f4a2516f11c194dab1519358bcf780 python-unversioned-command-3.9.25-3.el9_7.1.noarch.rpm fc2bf48a97fb5743bbf48ca1cd3be9b7a5e50de38cb2be4ca3e05881ad308ce4 ALSA-2026:4177 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default opentelemetry-collector-0.144.0-1.el9_7.s390x.rpm 4287c2a5ee4a5468e5f4244b4ee3831a89e3723f6164319094749e8e58b1e08b ALSA-2026:4188 Copyright 2026 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (CVE-2025-9820) * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default gnutls-devel-3.8.3-10.el9_7.s390x.rpm 03abad1802173ca4f35f0cf93e41783ddc000340aedbae1269442ce7b6691ced gnutls-dane-3.8.3-10.el9_7.s390x.rpm 06814310c8fcf7ccfdd238446179c150e3cb54269ad81f1fd3d1e12aff9f2952 gnutls-utils-3.8.3-10.el9_7.s390x.rpm 661e2db8496cec56ef24a70abfee06b4037b8437d6cc3324888cafae0a496d47 gnutls-c++-3.8.3-10.el9_7.s390x.rpm 720911b427d9e7d0baee61ccab1214352afc9f471e43a38fec2bf61c4f2ba82b ALSA-2026:41894 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [almalinux-9.8.z] (JIRA:AlmaLinux-192467) * dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default aspnetcore-runtime-dbg-8.0-8.0.29-1.el9_8.s390x.rpm 29810e1e7106a4899900f156a9f898a53dc86617268e6e014a5e6bf15a297829 dotnet-sdk-dbg-8.0-8.0.129-1.el9_8.s390x.rpm 324e10766eb48730c97c931bb8d1022277722c9b7a4d20a850c397ef7fe85dfa dotnet-runtime-8.0-8.0.29-1.el9_8.s390x.rpm 3ebfbc7a555bb00b246105a7a4121be1fad54978e9fb85cb6593cccb176eb6aa dotnet-hostfxr-8.0-8.0.29-1.el9_8.s390x.rpm 68a804dfefc4219c207d782d048955a531ef529e55acf938e7c8e02cf7e0c2b3 dotnet-sdk-8.0-8.0.129-1.el9_8.s390x.rpm 71c00e840090cc4571300a450a21df059020fe901d963ea63ae06c2baa99f55e dotnet-targeting-pack-8.0-8.0.29-1.el9_8.s390x.rpm 734c0205b70e2e980c7b4e43a3581c87c18700918f5cbe413ac08165a29d94d4 dotnet-apphost-pack-8.0-8.0.29-1.el9_8.s390x.rpm 74ae5acf1b1e79edb4572990466ab2b4f426699dda989b898204af2f1506401c aspnetcore-runtime-8.0-8.0.29-1.el9_8.s390x.rpm 9aa0b1a81affcd826f58f1b44481e540facf467ec22e60cf74369c6c6c8a1010 dotnet-templates-8.0-8.0.129-1.el9_8.s390x.rpm d451c6f74d3f4e03588b2bfb6fc4ed39b20cff270772c6e890f3c526a16cbf06 dotnet-runtime-dbg-8.0-8.0.29-1.el9_8.s390x.rpm e73859aa37f38dbe8f906a172650aafa2c53217894c2056613acc36197727fe6 aspnetcore-targeting-pack-8.0-8.0.29-1.el9_8.s390x.rpm f1d1ffe3e3a399da110a23ba5c3f2e726b7bb7574e138cbe22de7ac78eaf7ca1 ALSA-2026:41896 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.119 and Runtime 9.0.18 [almalinux-9.8.z] (JIRA:AlmaLinux-192472) * dotnet9.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192338) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default netstandard-targeting-pack-2.1-9.0.119-1.el9_8.s390x.rpm 04856efc27751880d03b96adac29b23fcedcf65a1eb06915efb1cd7cf33c0d36 dotnet-runtime-9.0-9.0.18-1.el9_8.s390x.rpm 0775d05bf1f3b3ad1888764f6e0e08bdb2f139b0392b58ed9a53900e3744149e aspnetcore-runtime-9.0-9.0.18-1.el9_8.s390x.rpm 0fa5f21097568a97bf772b55c9cd92c06666891afb15cf3c44404c72e8686c11 aspnetcore-runtime-dbg-9.0-9.0.18-1.el9_8.s390x.rpm 1c85d9955ea0a3b43e3dc43f15d96e84bf6f5c19a500543e4d2465f70d39eb89 dotnet-targeting-pack-9.0-9.0.18-1.el9_8.s390x.rpm 1d2a0d811d311a4ef5d313c2a9c7e2d18c275ae8b302e8a25f66c16d493d2190 dotnet-sdk-9.0-9.0.119-1.el9_8.s390x.rpm 377f14bf1f8dd9221a60c32eea4476b142e00623136329858aa849dec6f7bc14 dotnet-runtime-dbg-9.0-9.0.18-1.el9_8.s390x.rpm 4e71529625f833d292fc0f0609bcc6f69d2d9a69633cae4ec49e7104bc06e708 aspnetcore-targeting-pack-9.0-9.0.18-1.el9_8.s390x.rpm 61193e273749a7abd59e5a99a721297027d874aa3a60cec430332e76b40388aa dotnet-apphost-pack-9.0-9.0.18-1.el9_8.s390x.rpm 87eb8b1ef5d9447996a59a976741a717f5fc8ba89f9ef02669f97e8a74c87b6d dotnet-hostfxr-9.0-9.0.18-1.el9_8.s390x.rpm 89a7abea8078bc1ae348a5c8f3c0c481ef160e93800b1b9b79e7c57b7cc99f5a dotnet-templates-9.0-9.0.119-1.el9_8.s390x.rpm a150c70633a56b02eeb9aa94dca0787f6f799f1e5a7305166f5275ce00484428 dotnet-sdk-dbg-9.0-9.0.119-1.el9_8.s390x.rpm cbce3067ddd8fd897a160624a7e02b31f0e39993539b7f2fc6ae3f4a9b14fb48 ALSA-2026:41898 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.110 and Runtime 10.0.10 [almalinux-9.8.z] (JIRA:AlmaLinux-192462) * dotnet10.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192336) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-runtime-dbg-10.0-10.0.10-1.el9_8.s390x.rpm 0d518fd489554ef91c4a39a95191324e252def644152b352b94fd54fa007ea64 dotnet-templates-10.0-10.0.110-1.el9_8.s390x.rpm 32e7dda4a31df62fc3838b465010cb1cd39ef3b7e5dcd999ec5a9b650c6cbedd dotnet-hostfxr-10.0-10.0.10-1.el9_8.s390x.rpm 48e61987c9a4e97571cf043d831c0a418fa84ee996fa65144622faab2de4f30b dotnet-apphost-pack-10.0-10.0.10-1.el9_8.s390x.rpm 61a6f10198f7c1a728a4fb987b1765b4aa654dd17189416af926301da30c62d3 dotnet-runtime-10.0-10.0.10-1.el9_8.s390x.rpm 63273c0ecc2e1573a6c6f01a68c9d391dc515493140828cc8f57c552ed6a0f32 aspnetcore-runtime-10.0-10.0.10-1.el9_8.s390x.rpm 6f90cadb7c88d5811fa80ea4daebd6bd46eeb166c0c9c7cc91952f9dfed69d0a aspnetcore-runtime-dbg-10.0-10.0.10-1.el9_8.s390x.rpm b5100457884c04699d2cb887e4c80cba098811c29cbed63505e222779d6003c7 dotnet-host-10.0.10-1.el9_8.s390x.rpm b85a683b485ae7f302c36da088023a9b8ca7b635bab12bae5562b97e8f476589 dotnet-sdk-10.0-10.0.110-1.el9_8.s390x.rpm c5b8ea5eb3c8f8d562a917983a000bba3e65d00590b7b1836ce123f11a92fd2c aspnetcore-targeting-pack-10.0-10.0.10-1.el9_8.s390x.rpm cdb28724a561a10adbb3705735e4a514fafd47b13aa395b2c3db79a78ee4818e dotnet-targeting-pack-10.0-10.0.10-1.el9_8.s390x.rpm f483fbbc43e4bb6918e126cddc8474a9de8105a8d06cb7abd1bcddc0ccc9d2f4 dotnet-sdk-dbg-10.0-10.0.110-1.el9_8.s390x.rpm f736208539d0a3e2b567923b6a688b43b831629b55afb88e97db02cdaed93657 ALSA-2026:41905 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dovecot-2.3.16-18.el9_8.1.s390x.rpm 5d1d5b692c2080b459e9a627fc70626a88f3f42e7e8a4ba990f286663cca62aa dovecot-mysql-2.3.16-18.el9_8.1.s390x.rpm 7ade807831d238e8e236bb0e5adcffb6fa4fcd4f63e612b3c737350db29ccbfd dovecot-pgsql-2.3.16-18.el9_8.1.s390x.rpm a9fdb653ac9e4101be32093c2455621f06f3841c56bc3de14b64492ff020d2ce dovecot-pigeonhole-2.3.16-18.el9_8.1.s390x.rpm c95b48379c9dadd0d00e7037898e5651e57574371800440c60f8c0cc610f6d97 ALSA-2026:41906 Copyright 2026 AlmaLinux OS 0 1 Important

httpd security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) * Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation (CVE-2026-24072) * httpd: mod_auth_digest: timing attack allows a bypass of digest authentication (CVE-2026-33006) * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) * httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) * httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) * httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) * httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186) * httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue (CVE-2026-42535) * httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) * httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951) * httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges (CVE-2026-44119) Bug Fix(es) and Enhancement(s): * address Moderate severity issues from httpd 2.4.68 [almalinux-9.8.z] (JIRA:AlmaLinux-184520) * mod_proxy_html regression in CVE-2026-34355 fix [almalinux-9.8.z] (JIRA:AlmaLinux-192752) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mod_ldap-2.4.62-13.el9_8.5.s390x.rpm 2a89752ba8af44e64c71cfc326609d5f918e59ca93db966cd25494159d5e0ea7 httpd-core-2.4.62-13.el9_8.5.s390x.rpm 40469b8c0c84ed1464cc25af8ebb919851d1c1edb61a17595e1ab876916836fb mod_session-2.4.62-13.el9_8.5.s390x.rpm 41e9b493080909a7b8ce51f3acf65712394cf0d195a6da7d29ca4c270a974217 httpd-filesystem-2.4.62-13.el9_8.5.noarch.rpm 4c04f408e6394dcbe2bb7ccca5cb12834258a843eac44ff7fe5558f6fa073d18 mod_ssl-2.4.62-13.el9_8.5.s390x.rpm 5249252b31165c91eed6dd2d94762535833e01ccfd5653ee74b876eace194296 mod_proxy_html-2.4.62-13.el9_8.5.s390x.rpm 7bd6ebd818d3c5d3aa595b004a90dcc0e0345379ef78ff1b8c3225336efa2b2a httpd-2.4.62-13.el9_8.5.s390x.rpm 80a3247074b63e8cc96c9b4f02f4a2e44d0e449948f6bb93881dcb4d41a19788 mod_lua-2.4.62-13.el9_8.5.s390x.rpm a1918420691119691f8ff56109b709479858a2839a170ee138d41438c50fd879 httpd-devel-2.4.62-13.el9_8.5.s390x.rpm e1f42810c65626782211fb4cf523ada034bb1dbd087357b21fd74782528d4694 httpd-tools-2.4.62-13.el9_8.5.s390x.rpm ef411c1d2e4c7e06ca5d04113908ef09f9de06cc50226f6e7fbd1fad568f9ddd httpd-manual-2.4.62-13.el9_8.5.noarch.rpm f385fb8cd4918d9180d8f574c70c9f3d6c7e1ab572c7bbfdc488706f96497b4d ALSA-2026:41949 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-tkinter-3.14.5-1.el9_8.1.s390x.rpm 20ece337a608e91bdcd56ca03f026d99dde14ad4eccd4acf6fefbd0868f41949 python3.14-3.14.5-1.el9_8.1.s390x.rpm 407e867a537fdb6dc5e120373f10f13ac2ced73d0d56c7eaf7790d0afbdf2b8f python3.14-libs-3.14.5-1.el9_8.1.s390x.rpm 6616b4fcf7166e869e6b3fb02dbcd13cfb5cdd399ca4a34fed88b44332ef9726 python3.14-devel-3.14.5-1.el9_8.1.s390x.rpm b94701adc684bebb1ef43c6ffd5b83730676fa1dedf6a44a2e3e60ed451a90db ALSA-2026:42062 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699) * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712) * webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720) * webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721) * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731) * webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734) * webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default webkit2gtk3-jsc-devel-2.52.5-1.el9_8.s390x.rpm 7a7a14bb1ecf48125a26ddad1f6150f9a9a0dc1b9b7001275e9627870574052c webkit2gtk3-2.52.5-1.el9_8.s390x.rpm 83dbc128d248288fe792f169b450e84f34adbaa3e286397ed826bc17b4c8c5bf webkit2gtk3-devel-2.52.5-1.el9_8.s390x.rpm d3a7497ac0007fd401caa7e0250d84d6962bc8bdf3966367cf7c8e121396fea1 webkit2gtk3-jsc-2.52.5-1.el9_8.s390x.rpm d9d92a1c78eae9ae9a7b8b1fea26acf28cedf3b6b2eef84a1c686da4a866ed1d ALSA-2026:42089 Copyright 2026 AlmaLinux OS 0 1 Important

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default glib2-doc-2.68.4-19.el9_8.2.noarch.rpm 4ea9600e51edaff4be40f5e510f7ac1c8c0b0cd99aaa1b168af3bd36cb6d1e12 glib2-devel-2.68.4-19.el9_8.2.s390x.rpm 4f2f1fbf0c1d3c79f3dfc5c384a7319a981d3645b6b9453b4bf151a6b7c61e01 glib2-tests-2.68.4-19.el9_8.2.s390x.rpm 6308408c8acbd1b1c608801911accfc84c14cdebda316d954dc5859c0ace9753 ALSA-2026:4216 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366) * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367) * cpython: email header injection due to unquoted newlines (CVE-2026-1299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.11-3.11.13-5.1.el9_7.s390x.rpm 3a1130880d04f1c7be5fe4e4d541a5d1eaf997a036733fda9d91a2543c7141ac python3.11-devel-3.11.13-5.1.el9_7.s390x.rpm 5f225a1d214ad863d941fd6ea07d90299eb0ac907228efaecc0e8ca3f810bada python3.11-libs-3.11.13-5.1.el9_7.s390x.rpm 64c616ae81384a06e3bda784eea529b2ff25fb07e1bfc79ade6a15755527a591 python3.11-tkinter-3.11.13-5.1.el9_7.s390x.rpm dde4997a66bac7c175eaab2d61a8f04bc20a0d1594be55ee0eafcf4b795e5e2c ALSA-2026:4235 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nginx-mod-http-xslt-filter-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm 1a5ea4219e5f77619b3cc4173ab8eab3507bf036075b2dee5d328e0bf087ee33 nginx-mod-http-image-filter-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm 2283cf901acf3c6bac54dab277f7a120ad5efa493a9173f9f8dd701a6f973f47 nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm 34475508de7658d1bb629e4d2e726911baa95c6f84549831dc2d69e7bb10b5e1 nginx-mod-http-perl-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm 4be5074a39df53be1b8b6421639325f96e81c8f0f61bd62d5715c691aa1cad3d nginx-mod-mail-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm 7c8f3a1c3d7277478587b75433a164a9bb14c2592c1a87d6a7a61f565ae0ef13 nginx-core-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm 87ea5dc33fed6ec200808ae2dc45b771aa330e04d8159e0335f3eecc3d45bc08 nginx-all-modules-1.26.3-2.module_el9.7.0+215+8d94e91c.noarch.rpm 8ffdcb2b101503e11324958ae7605842acc8d0d33faf2ce2994e65e879aff1fe nginx-filesystem-1.26.3-2.module_el9.7.0+215+8d94e91c.noarch.rpm 957cba1da903a4338c9daa2e5e4cf2079d71679d740dadc0f051b466213a971a nginx-mod-devel-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm 9c9a37dcb7242d80bd5ad75a2bb232477752d7146f366c97134680b7237857c2 nginx-mod-stream-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm c6e8e72d2a09255e16e287a978920d723c052983446050573528bac3003d4f9b ALSA-2026:42668 Copyright 2026 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libtiff-4.4.0-18.el9_8.1.s390x.rpm 1cef6f48427829f1bdbc1fef0d8ab17fa7fb250c2b3e71ade3362491017c8c8f libtiff-devel-4.4.0-18.el9_8.1.s390x.rpm 5d00b353d9df874306193d6e4e29b78bae8b89f315497478b00dd96b02d3a020 ALSA-2026:42736 Copyright 2026 AlmaLinux OS 0 1 Important

acl security update

Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fix(es): * acl: Symlink traversal privilege escalation via libacl functions (CVE-2026-54369) * acl: TOCTOU Symlink Traversal via getfacl/setfacl (CVE-2026-54370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libacl-devel-2.4.0-1.el9_8.s390x.rpm 5602ce2a2f11a03716cea3f2e8a7d139c55a91dab62ef30d7dfdaf673b30b0e1 ALSA-2026:42877 Copyright 2026 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Improve Nashorn index handling (CVE-2026-47057) * JDK: Enhance Dataview Implementation (CVE-2026-47058) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212308, AlmaLinux-212309, AlmaLinux-212310, AlmaLinux-212311, AlmaLinux-212312, AlmaLinux-212313, AlmaLinux-212314, AlmaLinux-212315) Bug Fix(es): * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212319, AlmaLinux-212320, AlmaLinux-212321, AlmaLinux-212322, AlmaLinux-212323, AlmaLinux-212324, AlmaLinux-212325, AlmaLinux-212326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default java-1.8.0-openjdk-1.8.0.502.b07-1.2.el9.alma.1.s390x.rpm 1dfb244f0f8ba2adc048626fcb587a7c5d394b3470772e627410e307a4f70617 java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.2.el9.alma.1.noarch.rpm 27b91e2cf01e8b16e3092266801f4afa6345f02a105c3e28d9b795625a42bfcb java-1.8.0-openjdk-headless-1.8.0.502.b07-1.2.el9.alma.1.s390x.rpm 522bb8e23bd80a25056037dc3e912e9e2bce9818da3b47c24d7788b1c35fb34e java-1.8.0-openjdk-devel-1.8.0.502.b07-1.2.el9.alma.1.s390x.rpm 7d506a24074c46c3113499e4e361fca5d2525fc7a13524c43aa32e9de69af8fa java-1.8.0-openjdk-demo-1.8.0.502.b07-1.2.el9.alma.1.s390x.rpm 984c84adf52c017bd2fc296fa2c56895e918c0b573607cbab32f530f513c1186 java-1.8.0-openjdk-src-1.8.0.502.b07-1.2.el9.alma.1.s390x.rpm cf3ffc4e82e011d358552586cf010dd9b319a63f6150b029b67f1d35bf7d254b java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.2.el9.alma.1.noarch.rpm ebada0731a844a8ede5f6a4f511920669645c19e9538ed92763250b6d67dee5e ALSA-2026:42887 Copyright 2026 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212474, AlmaLinux-212475, AlmaLinux-212476, AlmaLinux-212477, AlmaLinux-212478, AlmaLinux-212479, AlmaLinux-212480, AlmaLinux-212481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default java-17-openjdk-devel-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm 043e68d4ee4535691deb1772513677f2a5cf706ea8b3e7d4bd3a2924e67c1a70 java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm 106d68bfe7b8e9143b94e51166c1c86b9e39c933a358937e2816e3fe90a005b2 java-17-openjdk-static-libs-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm 1c324c3506f9eb613e46180df73b58fdeb7ffe701024d0db84bc9277569c8819 java-17-openjdk-javadoc-zip-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm 24c8a850e5c52988c59d5710b42ddc66ca0a28f4a9c197852f6b5598a8ccbce2 java-17-openjdk-javadoc-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm 2562745294956075f308a0216b5d3d963750d7ac1e56e1ff9a44c262010e7dd3 java-17-openjdk-headless-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm d47a59ded04469b4c08e2d340c018a65787e2ea621337d2c5fe92666c3c7d088 java-17-openjdk-src-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm e815cfdf7f888f0f661f8a896e9c43dfd782b0749c8f07ae6b56f3b6fd085b55 java-17-openjdk-demo-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm e8dbca5bfbbd386ff029a3c1c8ed5ee81c1fdcbcc4b9e9c8a1e152d12067cdbe java-17-openjdk-jmods-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm eb974b138d5117dc14ab0b06e7d55838d0672c15da95cf63c4ba13d2512d3e41 ALSA-2026:42895 Copyright 2026 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212337, AlmaLinux-212338, AlmaLinux-212339, AlmaLinux-212340, AlmaLinux-212342, AlmaLinux-212343) Bug Fix(es): * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212353, AlmaLinux-212359, AlmaLinux-212360, AlmaLinux-212361) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default java-21-openjdk-headless-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm 0e4567527c8958f6dc25ce4ece5fcf1379c6497cc719e5347825911f7cd45b41 java-21-openjdk-static-libs-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm 40b4849005d924703a803f72de4c00b263f11cf88320107d65293b7d52060ed7 java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm 5bef54d700cbe0004971d4f2652128563b69313753fa5d0cb28a785ce163349f java-21-openjdk-devel-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm 5f9ff295d49e17fffb7e845f25d501a8af7a5e7411b0fc99a48331c66df38f95 java-21-openjdk-javadoc-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm 6c1e18ce09d138622281f96d1fab5b2fb1c76271c5c11b2cdc7be6b422d10cb6 java-21-openjdk-jmods-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm 8f5737c3720e5e42d61c30861a6cd75599db99130ecc81d1a562617c45ab1b3b java-21-openjdk-javadoc-zip-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm 9cb95344a3315b3967eca23b7babece08ca431b9c2184d691212f547dd5c542f java-21-openjdk-demo-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm b222465e3ff44cb39563cf3cb5270444ae5e2228e7685ce68e5e6a1eb5a73a75 java-21-openjdk-src-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm f4031873207164bfad90a4ce5d9427b39a2a13f88fe807eb71d5d5d45987b14b ALSA-2026:42899 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-211046, AlmaLinux-211048) Bug Fix(es): * The performance of the Math.pow function regressed between OpenJDK 8 and OpenJDK 11. This was due to an absence of constant folding when applicable (for example, Math.pow(2,1) being replaced by 2). This release reintroduces this optimization. (AlmaLinux-211050, AlmaLinux-211052) * On AlmaLinux 9 systems, the alternatives list a JDK and architecture pair (for example, "java-11-openjdk.x86_64") followed by the path to the binary in brackets. AlmaLinux 10 systems have a simpler format that just lists the path. Because the OpenJDK 25 packages for AlmaLinux 9 were originally based on those from AlmaLinux 10, they used the simpler format. With this release, the format for OpenJDK 25 packages on AlmaLinux 9 is updated to be closer to other JDKs on that platform. (AlmaLinux-212650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 0ea98aec0891d06fb04693d94d588bda45c347948a46fe2c4ca014a6687753e2 java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 21c175c2f283cc1228751517e48f8488c271c561c245caa03d30933fe5001064 java-25-openjdk-devel-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 2af82ba4cc739f7696eb4d04365386405b00b99f720c6df6735860643c1f5406 java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 2e5d04953d633a9cd36bc4ee16c332c86ed5bb25d665bceaf1e21415dab8a05d java-25-openjdk-src-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 6d230e3bb92a504ea430fa69fccbac725e3454998d4e7a7183665a5c3d34fdf9 java-25-openjdk-static-libs-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm 8d84c0158442a26d3d3f4542777cf097c9213bddd3ba350ca7cff36559c7a048 java-25-openjdk-demo-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm bab2a1366b5111dc1a1a80e4c5428c94accf4d5c39a8c66a6cf6c9e8de44ffd1 java-25-openjdk-headless-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm c809667cdcb9869e8cba9462f60ee8e6bb966d02137031bd8bfb335d662e5286 java-25-openjdk-javadoc-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm ec6b3369982fa878bb03775c43d63171bebe3845ce1963c99942d4fd492c5592 java-25-openjdk-jmods-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm f948ac8bf9f328920f184c4d1a6c0f500f2e5c690a8cf0baa5e48e2914513430 ALSA-2026:42952 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928) * glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435) * glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default glibc-headers-2.34-274.el9_8.s390x.rpm 078b460ee5d18128b815b7c9041bcb4e07442e778d73a2706c2b541992980722 glibc-doc-2.34-274.el9_8.noarch.rpm 332fdfcadab1579de5501aa922f181113a9d53319166ffdabdb3c2675a4b6c0b glibc-devel-2.34-274.el9_8.s390x.rpm 5a290d6c8c2712c9b906af8b1fad5f1fbc5e2438567a5d02ce51c2f776991bd0 glibc-locale-source-2.34-274.el9_8.s390x.rpm 89d18952c5191ee905f8a34bc8c7902118b14877f0d9989f1dc4825a0a6d41cb glibc-utils-2.34-274.el9_8.s390x.rpm f6044c4b7b46b263c55a54869c5b9a9db7c2ce25275f1a5cc7b8d7d8631eb47f ALSA-2026:43307 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-9.8.z] (JIRA:AlmaLinux-183980) * [AlmaLinux-9.8.z]: mlx5: include bug fixes (JIRA:AlmaLinux-188121) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-9.8.z] (JIRA:AlmaLinux-212061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-devel-matched-5.14.0-687.29.1.el9_8.s390x.rpm 05e617fe8850874d7acf5bf60188db77f4e3a689972be6d137b6bd6d42314394 rtla-5.14.0-687.29.1.el9_8.s390x.rpm 18edf6457c4bd1798176a3f7042a36384b871743bbace183a14e36654376abfd kernel-doc-5.14.0-687.29.1.el9_8.noarch.rpm 41c9154892abc79cd84394c0904c85e36a644fcf6374d3cdf878eaf994c6e487 kernel-debug-devel-matched-5.14.0-687.29.1.el9_8.s390x.rpm 4691a2b4fa95e16dff10ec9f737ee3a85b1223b916c8b2de8d39596527618ea0 kernel-headers-5.14.0-687.29.1.el9_8.s390x.rpm 53298eaf7ef07ee432841b9d395036e1f226d515ae9c30b2984d7613acd9ae7a kernel-zfcpdump-devel-matched-5.14.0-687.29.1.el9_8.s390x.rpm 618703a90d1632ed310626c578263784603d5a99737315e96e8a58a3c17ccb48 rv-5.14.0-687.29.1.el9_8.s390x.rpm 6d6140979dadb2d7d1d2f61683f0e32ec48c21c45f515b9b73b8cc5697ea8e25 kernel-zfcpdump-devel-5.14.0-687.29.1.el9_8.s390x.rpm 836f7a1bc38a0a634d9e03ef63ff4d8342147dee74504b995994eb58e48a5c1b python3-perf-5.14.0-687.29.1.el9_8.s390x.rpm 8db3de3e37b28b0f5ea50d13377cd01363b5b72df677cdf84075a26a15dc1e09 kernel-devel-5.14.0-687.29.1.el9_8.s390x.rpm a72de7f02b22d3f793eeee9aee1c51e450eea143a38441066328d425dde2ce37 perf-5.14.0-687.29.1.el9_8.s390x.rpm b3575cceabd95f771436798aa1d992543645247f73c22bdfc90c3b072b2142c7 kernel-debug-devel-5.14.0-687.29.1.el9_8.s390x.rpm fe2ddd144e8b6b59a425bdab92b97b034a72ab7a63dc7d158f87769bcd76f14b ALSA-2026:44308 Copyright 2026 AlmaLinux OS 0 1 Important

libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libpq-devel-13.23-3.el9_8.s390x.rpm 28cc5fcf2588fdb50a1b704a6e9ded33e4e12671203fde64d4f101b9e55b07d4 libpq-13.23-3.el9_8.s390x.rpm e12960c88b662fd927ed06c3f26e1bb46aad01a1ee8ff99a069ede4f3767ef25 ALSA-2026:44438 Copyright 2026 AlmaLinux OS 0 1 Important

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default compat-openssl11-1.1.1k-5.el9_8.4.s390x.rpm 18acf99ddf0b136cf8474b2fc22e86a7694e2929df0a96de961ad3a4b964527c ALSA-2026:4445 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es): * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127) * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default aspnetcore-runtime-dbg-10.0-10.0.4-1.el9_7.s390x.rpm 0372296a10b7042e14aa2dbebb9b14f4c8061512ddf19e3a3f9bccf79dcf5ede dotnet-templates-10.0-10.0.104-1.el9_7.s390x.rpm 09544ca69bc63dc75485649bd23e2cfc4687c1f801f39f9caced238d52b35fd3 dotnet-targeting-pack-10.0-10.0.4-1.el9_7.s390x.rpm 122ccd814761b29f3e98014d5e2c32ce45af1cffac74b375cc9ae410df00d1a6 dotnet-apphost-pack-10.0-10.0.4-1.el9_7.s390x.rpm 3205f9c5a281382c982cded72c5ffd758b7ec1f7feae57e88c53d25e775caccc dotnet-sdk-10.0-10.0.104-1.el9_7.s390x.rpm 42b64c6b5dc9de2dacc49e690850e48ac6493799352eacecc9971ced7a294356 dotnet-runtime-dbg-10.0-10.0.4-1.el9_7.s390x.rpm 5162ebe368bbe91f5dcf2324a046182b293adc2626a5f0e2c1e2331e00eaad64 dotnet-hostfxr-10.0-10.0.4-1.el9_7.s390x.rpm 6fa84dc52d4991da48475986e11bed0c9029406b3c53e335a33d9a3b3b880133 aspnetcore-runtime-10.0-10.0.4-1.el9_7.s390x.rpm 7d0c6066022c7ff631c0174214ddf7c4f333f19092db8192aef035a6931008d5 dotnet-runtime-10.0-10.0.4-1.el9_7.s390x.rpm d06204dc9e9f0d1ae9c1945700c61f90580627801c82a75fc20762c4cc85da83 dotnet-sdk-dbg-10.0-10.0.104-1.el9_7.s390x.rpm de99b7aec9807244591ae0dd10c7c5d4a8defa7dd69c73b3983670b90e4b09ef dotnet-host-10.0.4-1.el9_7.s390x.rpm e224ad5c074db7c0e5df1b26e1aa9b91a6554b3b70812ad6f9747d94d832a6f0 aspnetcore-targeting-pack-10.0-10.0.4-1.el9_7.s390x.rpm e8c4340492c2b5a9f027afd16df580492db0f846d2ae303315829a76c02b2813 ALSA-2026:4447 Copyright 2026 AlmaLinux OS 0 1 Important

libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libvpx-1.9.0-10.el9_7.s390x.rpm 15b8a0edbd665c82465e4796ccf2373e5f3de3b887dc154be909088e30948235 ALSA-2026:4454 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es): * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default dotnet-sdk-8.0-8.0.125-1.el9_7.s390x.rpm 0628dfafe6d161db6e0900cb455247ef95f7d90626ce25b9cc76f4bea356d398 aspnetcore-runtime-8.0-8.0.25-1.el9_7.s390x.rpm 2219d9c3cc367f3a4ba48567526c0dfc77f2426acd25d96fba8273c42e106e34 dotnet-runtime-8.0-8.0.25-1.el9_7.s390x.rpm 244d71dc7c4d4d88b4bdd7f54517ee761c1805c56df9084109756807542c4950 dotnet-runtime-dbg-8.0-8.0.25-1.el9_7.s390x.rpm 2e300945b405cefdcadf5a1bb5c219439730b9e0dc7cf1f878ede68193c91175 dotnet-sdk-dbg-8.0-8.0.125-1.el9_7.s390x.rpm 3038e8c11cd5267d69de9950859a67686aed6e31a140b2cbb368895015a42b0c dotnet-templates-8.0-8.0.125-1.el9_7.s390x.rpm ae634705714ad27d7c41cf62a2381b9a398185b7d26f374f125ade159feefbed aspnetcore-runtime-dbg-8.0-8.0.25-1.el9_7.s390x.rpm c5f1853e12af78aeda7c55ffd32a17c9d00a2090fd0293282445a2861ac54e36 dotnet-hostfxr-8.0-8.0.25-1.el9_7.s390x.rpm c97c0939e0b6fc1fcc18fccb8a37008bcb129379fd8744e58708148c89849590 dotnet-apphost-pack-8.0-8.0.25-1.el9_7.s390x.rpm d436e7a34ffa71fa30fd568928f7786463b809e3d072d610d83e42b4130d2151 dotnet-targeting-pack-8.0-8.0.25-1.el9_7.s390x.rpm d9d40a48b503fbda573992927bf5e7fa8af0933c8c120d6bac39384e5f1c56cc aspnetcore-targeting-pack-8.0-8.0.25-1.el9_7.s390x.rpm da35f5425b0a6445eaa486f1efe62e241c7e51dcc7222798133a0ba6255b61d1 ALSA-2026:4456 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es): * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127) * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default aspnetcore-targeting-pack-9.0-9.0.14-1.el9_7.s390x.rpm 11ad6fad7a5e94f3ece05b0db0341b98ddc5601404865e560a1e9363c072ce3c dotnet-sdk-dbg-9.0-9.0.115-1.el9_7.s390x.rpm 13103d40ae56ea81f7e1b6d16c125c067dfb2f116333e40eedc126796a080ad7 dotnet-hostfxr-9.0-9.0.14-1.el9_7.s390x.rpm 20240119eaf4597065d343df2c57a0c16ec53c32ae145aa9fa7c948bd6884a3c dotnet-targeting-pack-9.0-9.0.14-1.el9_7.s390x.rpm 24bff03a4308c20842612b2325f38f2e50fe111b45f8ba861609086bc276b8f7 aspnetcore-runtime-dbg-9.0-9.0.14-1.el9_7.s390x.rpm 2c728b2a6f266eb6cb358520dd6d2cd546a88761945a5a15d40f1b4a7ffcb6f7 netstandard-targeting-pack-2.1-9.0.115-1.el9_7.s390x.rpm 973caa432ca331864eeb6681e4e5913cc064442f4b209728f76f2bd493f4a7ff dotnet-runtime-dbg-9.0-9.0.14-1.el9_7.s390x.rpm 97d2b3ccf2d4ad434b2918e19036c41ca330ef4aea9e74d237f573c42259d8f3 dotnet-templates-9.0-9.0.115-1.el9_7.s390x.rpm a286c2b254908f2b270e4157a25610246b3c1b42a6ca0739b75efe932ca8aa42 dotnet-sdk-9.0-9.0.115-1.el9_7.s390x.rpm b4c1e79b82f0497f423ba9b8b66107465aeb80148c4f34bb759d4da18ea7d597 aspnetcore-runtime-9.0-9.0.14-1.el9_7.s390x.rpm b5cb17184b9c18698f2a81de5617c4309087387f9c8c57befeeeabbd446b4ffb dotnet-runtime-9.0-9.0.14-1.el9_7.s390x.rpm dbd48f36cc5ffd9a1df96b422bf17e01cfc035569fd86d5671a06a39632cf7ea dotnet-apphost-pack-9.0-9.0.14-1.el9_7.s390x.rpm f08df93ea1db84049814fec98f5e60094cbe6c32999176a7926b68b5bb1c5941 ALSA-2026:4472 Copyright 2026 AlmaLinux OS 0 1 Moderate

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default compat-openssl11-1.1.1k-5.el9_7.1.s390x.rpm 02412a14899b312d423d9327ddcf9bcccc7d22c75fbc964cef9f81194fbd65cc ALSA-2026:45192 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) Bug Fix(es) and Enhancement(s): * scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412) * [AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-zfcpdump-devel-matched-5.14.0-687.30.1.el9_8.s390x.rpm 22c150e2b9324b73f64448bd1bda4ed7905d29d963b14a2ffe4adb6ea2e6ca71 kernel-zfcpdump-devel-5.14.0-687.30.1.el9_8.s390x.rpm 2f6782dfbd6cd83f10b6b913d4abd65fc778b4713112bdf82f4509f634e58ca1 rv-5.14.0-687.30.1.el9_8.s390x.rpm 5121af9fd176e979e406bbf1ee9539e8a3c245c55c92c425dd72ca2e7ba9aa96 kernel-headers-5.14.0-687.30.1.el9_8.s390x.rpm 5fac882718409c46780895c565bc2d02b967af94871068ff7d9b30c2e096226f kernel-debug-devel-matched-5.14.0-687.30.1.el9_8.s390x.rpm 6f39bfe0c7363bf2820d4ab66d0fc09f07da38ed3743c1ce06c8d7d9c53492e8 kernel-debug-devel-5.14.0-687.30.1.el9_8.s390x.rpm 7357b738bd0b4f58ac8078e9cad70c6b9f7b285732bbdf5f9bf06dfed3170af6 kernel-devel-5.14.0-687.30.1.el9_8.s390x.rpm 77d230ec2ba5f3310019c0542d5729b98e3ae0927ff437536294c8931a372f80 python3-perf-5.14.0-687.30.1.el9_8.s390x.rpm 8d24d0d22356ae6231f8f676cc6c13f0bd61578924c292e00f476fd29842d1d8 kernel-devel-matched-5.14.0-687.30.1.el9_8.s390x.rpm d819e0ebab9a2460ba1dc488df58a3fea12393e149e86483e0b723d1f6b6b74b perf-5.14.0-687.30.1.el9_8.s390x.rpm da0c0a6ae8cec95c4746aad4cb2f38b18f372c9731f730bd2ab1cf8d5f48984a kernel-doc-5.14.0-687.30.1.el9_8.noarch.rpm e64a4138098d41c0bee27aab43dc52f0b29436027f50d17e6adb8731b0a01b88 rtla-5.14.0-687.30.1.el9_8.s390x.rpm fd36bda352d3aa52370667976995aad248c9ca10ccd9c4afe8e2fed3071b2686 ALSA-2026:46397 Copyright 2026 AlmaLinux OS 0 1 Important

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload (CVE-2026-50721) * librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload (CVE-2026-50722) * librenswan: IKEv2 Denial of Service via malformed fragmentation (CVE-2026-12413) * libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process (CVE-2026-14957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libreswan-4.15-10.el9_8.s390x.rpm 77fb0935cec3734cd8cb85613bb81a15ced5da2c13837b9f1120e372536011fc ALSA-2026:47040 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797) * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) Bug Fix(es) and Enhancement(s): * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257) * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-zfcpdump-devel-5.14.0-687.31.1.el9_8.s390x.rpm 0efda28a90aaccdf8c6d34af7d26bacdf5c0314332f1bf59a2d02be9852c602e kernel-devel-5.14.0-687.31.1.el9_8.s390x.rpm 2036427a7b979b13307d89dff1f201414ecb41e7b05e169cf7382fd2e52d7e2d kernel-devel-matched-5.14.0-687.31.1.el9_8.s390x.rpm 3608bfca8c76748376e2ec3cae595f6b235e8704dc11a586487a7dc371449b55 kernel-zfcpdump-devel-matched-5.14.0-687.31.1.el9_8.s390x.rpm 40d60aac1ed7549534d272ac8776fc577d8c4c8442e8f480668681d2e34cae3e perf-5.14.0-687.31.1.el9_8.s390x.rpm 53575cb92c97f3b7598840c1e06a8a22a08affcc352aff75bc9d52b4e37b6b61 kernel-doc-5.14.0-687.31.1.el9_8.noarch.rpm 84a5833f92fd516f4623488bd44c12eb66d77e2bd03f59f59ebe41d6ea020676 rtla-5.14.0-687.31.1.el9_8.s390x.rpm 863a947963452f69af9b712c99f50f4a9a874e63caf7b032838b85500aeedf54 kernel-debug-devel-matched-5.14.0-687.31.1.el9_8.s390x.rpm a098a8471e05c2b3f08c23fb3ab9ed70521d87bde9a724e8df0303a2b89f5cce python3-perf-5.14.0-687.31.1.el9_8.s390x.rpm c998f62565531500f1ea8c32f8d0b9fe1e1e8962671a1eaafae023ca1c42e45e kernel-debug-devel-5.14.0-687.31.1.el9_8.s390x.rpm d83112847f3815b52e0366cadf47fb275d0f4309e6a1e2b5730c0d7f67f58fc1 rv-5.14.0-687.31.1.el9_8.s390x.rpm ef9cecfe8d7ab251b0ce129d0fafe78d287f132d9df05e4ddade0a15f88087cc kernel-headers-5.14.0-687.31.1.el9_8.s390x.rpm f08a695cd80f64fde2725b8e8c417b24b1a44db918370250a07ee6e2e0878008 ALSA-2026:47057 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874) * tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm 053c944b46970fa1a81fb84fd65c14377573fb8935addc580e429457bd697832 nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm 4c4572930d342be70f9928952eba2876fbeeb70b102f38bf96565935dd7a3a55 nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm 6d3209d5838f880c71651d41ee0c7532290d0f4d7862e6445eb2c3a1f100341f nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.s390x.rpm 7e79c24c04a1a88c7d411eee88ccb7359d0bc1402b4a5fdd6fc4af4cbbd7da75 npm-11.16.0-1.24.18.0.3.module_el9.8.0+286+9023ffdb.noarch.rpm 8e61e682f568aab5e0ffee64e8f19d13ab323ff7264dcd0039237189a351dc87 nodejs-nodemon-3.1.14-2.module_el9.8.0+286+9023ffdb.noarch.rpm b09ddf0f03d8df5ac2e78c82a437fb736aa7f4abb64e9b6c426b73e5e6f5d7bd nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm c88929687bc8c29d82260aef8d447ca94b7656319be012c7e22ee398c8d5822f nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 nodejs-docs-24.18.0-3.module_el9.8.0+286+9023ffdb.noarch.rpm e962b7e2f2384848cee4bf0f840c21d10d7f29262944b3f62f55483d1ebb568c ALSA-2026:47058 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874) * tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm 0e9fa85203629ff244eb30349da21d917e5370a6a1931c32f7f753c89d5d2a3f nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm 36d9c56a6307ea4d131791e08f6ecf00f0ced06d74b4899a487d82cff8a43f7d nodejs-docs-22.23.1-2.module_el9.8.0+285+5c3b0251.noarch.rpm 4149d8345a3ce567b08472d195eadff6c3ca00bde93ed53a5ed2e7d7f16946d6 nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm 67956aaed5c341f4524d549a16d4bfe492264d9a20a7041ecae254275251e17d nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.s390x.rpm 76ce7ad1f8408c910895a98dcab4864f6d0537f25e7168067fe0adf7eb3eeab7 nodejs-nodemon-3.1.14-1.module_el9.8.0+285+5c3b0251.noarch.rpm a9628e7429ef5cf14b877a8372ad29f9f90b850434bddc3188c940493b68bacf nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm b4f1926fd4af8244816dbc54c418de4e37c8b1ca7cefd3600c7bace40a148ced v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.s390x.rpm f35563b26fed3bb9dd85811f1c0233c79847300746c23d74cd4c0390236a5f43 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:47082 Copyright 2026 AlmaLinux OS 0 1 Important

pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fix(es): * pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading (CVE-2026-5674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pipewire-devel-1.4.11-1.el9_8.s390x.rpm 2dfb122368123e95de9feee014818da30fc703fdba6cdf25041ef9c4035cceda pipewire-gstreamer-1.4.11-1.el9_8.s390x.rpm 30bad340142e5b24c08fac6efae6f1f4335062a0bf28caba2c2151cf8bc07b0e pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.s390x.rpm 41d0b789c8465eaddc12a461cdcb9b85c689ccf3a584cda95ffd81a22cb83c0a pipewire-pulseaudio-1.4.11-1.el9_8.s390x.rpm 48962c2bee0fff2de340d13d7a55b32d4031e737364f32256924dfc86c33fd59 pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.s390x.rpm 49fe5b92e5237515653fef9a1b1d33e7f0a0e42cdffc60076f38817b45722fda pipewire-module-x11-1.4.11-1.el9_8.s390x.rpm 5e0815432d475386233d78078be41cd01ae66d6b818e7ee2501994ade928afd3 pipewire-1.4.11-1.el9_8.s390x.rpm 6d10a9e1a5e064ac1df7fb9a52051138d11cdfe5bea5750936733c8861840160 pipewire-alsa-1.4.11-1.el9_8.s390x.rpm b7a2b7c964a4fcc0cac237e9e0f97ce4304d5e6393f65580a4c260a4a7a2934a pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.s390x.rpm bb6430924e33615f28d14b1426ae0dee0ed8b8858bfe477f63a0840e0b235e76 pipewire-libs-1.4.11-1.el9_8.s390x.rpm cb8ed61e36f15faca3d6fcc55407d14cf581d96d1950f55ee51e5c14758b7031 ALSA-2026:47084 Copyright 2026 AlmaLinux OS 0 1 Important

libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fix(es): * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001) * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libXfont2-2.0.3-12.el9_8.1.s390x.rpm ec2073121be56c19ce0d486ea8fbf4735f0b8b722df7b40ae3eadb061e1a0a2b ALSA-2026:47104 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208) * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368) * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360) * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362) * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358) * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387) * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357) * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351) * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371) * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354) * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359) * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383) * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369) * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353) * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396) * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-140.13.0-1.el9_8.alma.1.s390x.rpm 2856f7a4344d9832ad8c9ef4610da9bdb6458784118d3c6b4e984fd1c729ccce firefox-x11-140.13.0-1.el9_8.alma.1.s390x.rpm 924de0c9cea06ec0e60b655182b0ae48d6b7e057ae31dc502f2cbedc9ae838f2 ALSA-2026:47178 Copyright 2026 AlmaLinux OS 0 1 Important

yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fix(es): * yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default yelp-libs-40.3-3.el9_8.1.s390x.rpm 64790dae96de8fea8f7c518a26b589295246419cfaeed7034182a63582c58cdc yelp-40.3-3.el9_8.1.s390x.rpm d323e3b0267f85433fdd8986085d1a763ed324f71ff4f22443980f28a387b84d ALSA-2026:47179 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691) * gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.s390x.rpm 5e7c573a27312fd5f0ab4746a43d23e868be1c5a9bb47d31a1fbd8ad9c62c746 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.s390x.rpm ede4180df46f9e1866ed44efbf11a1f10d0e361063b12801849f018fd440a96f ALSA-2026:4759 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818) * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-doc-5.14.0-611.41.1.el9_7.noarch.rpm 089b13ed0872058aee2449d47e7add1a1130f2a4051aa75e5355cdf2c52793d7 kernel-headers-5.14.0-611.41.1.el9_7.s390x.rpm 13744e7f8f8ed5a16525609e7fdb190f103d232e323af7037ba72598e785ba69 python3-perf-5.14.0-611.41.1.el9_7.s390x.rpm 3b435b5741b6ae995476ca89cf76737d87b7c1509d44728f1d180bf715ceb5f0 kernel-zfcpdump-devel-matched-5.14.0-611.41.1.el9_7.s390x.rpm 444b85ad97a4ec5ac37e47cfb30cc63f0a3113588585e847d4c8ca70c87cf6f9 rv-5.14.0-611.41.1.el9_7.s390x.rpm 48cba721565b69d5f3f9e8586882e46d4cf1e96116afccd1175e09a1a223c6e0 perf-5.14.0-611.41.1.el9_7.s390x.rpm 4921f31b7780a5553fd629231591a22f20b29c2183ba69ad87f4c39b6d8cae74 kernel-zfcpdump-devel-5.14.0-611.41.1.el9_7.s390x.rpm 4a39aa8fce2bfcc4b556ca2fb1f4102d3446f240ce2ffef2af09943eddfc9f33 kernel-devel-matched-5.14.0-611.41.1.el9_7.s390x.rpm 4b0752663bf6dd5b4a02231e54a80d02072bfaff0c4de3c05aee36394a635d13 kernel-devel-5.14.0-611.41.1.el9_7.s390x.rpm 8cc780c04c5f4ae0db615276901cc7175ce387819eab61291291b5171d7057c3 rtla-5.14.0-611.41.1.el9_7.s390x.rpm b5ac104ec02d6e44e98dba934865d0e221fd0ea9e5912ce7def3f8ca0b8f6447 kernel-debug-devel-5.14.0-611.41.1.el9_7.s390x.rpm e8b24400d6e5eeb8293e956dd9ea3b8e103cb6705c112771ffadae67c572bd2f kernel-debug-devel-matched-5.14.0-611.41.1.el9_7.s390x.rpm ec275bc0bc5f182e49e692bfe7f505f09b0679355f650d1acf85620ac4767a27 ALSA-2026:47756 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655) * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653) * openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654) * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002) * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pam_ssh_agent_auth-0.10.4-7.9.el9_8.alma.1.s390x.rpm 939a416993c3b9272e0774b7296721457a4d8b14410f947fa96b6ff4d98de0ba openssh-askpass-9.9p1-9.el9_8.alma.1.s390x.rpm 9a9da8f3b3702042ff7bc6ba7b50d875abcc7969a09995e32bd13fd1df634739 ALSA-2026:47982 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455) * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456) * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693) * vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856) * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default vim-enhanced-8.2.2637-26.el9_8.13.s390x.rpm 4960e3869c2f2cea000178ae4e00f1316c66bd563d41eb7a816180926bcd1245 vim-common-8.2.2637-26.el9_8.13.s390x.rpm 4e6b843c6e24601821ba741abe58200566754d04fc06e27f34fa608e4cccd64e vim-X11-8.2.2637-26.el9_8.13.s390x.rpm c8be4a68f0a4a5b893d1007a31eb9eaedc9c7389fafddca58d6e6473101c7c31 ALSA-2026:48197 Copyright 2026 AlmaLinux OS 0 1 Low

php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD (CVE-2026-14355) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.3.32 for CVE-2026-14355 CVE-2026-12184 in 9.8.z (JIRA:AlmaLinux-192620) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-pecl-apcu-devel-5.1.23-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 0094f50d3048b975c70287c92a9973a31fc33f6179f439bf4842596b60b0fffe php-mbstring-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 03f3b3c3fb55e2c0c38e123f3dba222ca902a63495473acbe30ea6fb16232486 php-opcache-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 0f95731f79b6dfa65bc10f4588539c57463a8fcfb03ea9d5d33a6318706d04cd php-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 123dcddb21663560c8028dabe0f9b01356ff583936ab54dd189721ba99839c56 php-devel-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 2333f44821594f836a53530fbe3abcc0c5a5f03772720d758894c9a903957b6b php-common-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 28255aa827c5ac151ab96ded80cf5219c3b94f15fb89f493d3063f83b90e199a php-process-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 28d4af1fe28dcabd2432ae5ae7cf0d364bd063908089aa8e774d6e88207909db php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm 2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552 php-soap-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 2e062bb11add1293829f2bcea88c927909cbe80cc543bd8e64b3c1a940e2611f php-dba-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 2f8750e5466ce822a9b02e13190f22db96b05e96048b5a2ce3e159f3159cc3bb php-bcmath-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 3205fb4f72aa4624436789dfebbe550ee68807daea93a67ff13cf11fd56837a7 php-xml-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 3e3535fdde7a589c5d83e642246c8fce809fd0b12dfe80963ee4c5a9e7b70fcb apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-pecl-apcu-5.1.23-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 43f5e8f4e33fabfafba9506c2936a8e768357a95e51e831cdcc59fb24e683dd1 php-enchant-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 5467f60cbce440acde25fed910e6dc33ffca6d5203773ed733c97b839afdaf86 php-snmp-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 6182752fb56e7501efbbbbfb8bab8f5b43ea63bb20e078e150f096248cadced3 php-gd-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 85b11a5c659d0919649f98bd12e7a15e9930181f1d547d6bc3dbf5196aefced5 php-ldap-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 89358c869b73894490ae5735cd27672a99b6282be498902345411e81e2ef2b7d php-dbg-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 8e57d24c91be00da13ec6f4c7be48522e6e2e74b5ed8aab21b597c25a1381737 php-fpm-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 8ffb4ac0d1e7b23668ef71b019cd267dc26c75612fd949bc79d4b820554c0e70 php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm 9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2 php-gmp-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 97fc57392c036c1cd0066071de8d25d6726b3715cd1edaab05461a3e0564e325 php-odbc-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm a095a1aeca886be19fa861e88d1ea4646bb260a570db1687db70f5b1619c215b php-ffi-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm a3fd245f86ef3c0cf57bf92f2aa912a323381ce854fdb02363eb5d519d11de53 php-mysqlnd-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm a48e203e26e0a15127249ed1f90055f6e214a90201ed99f8543b81566a244294 php-cli-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm b346be4d51e0040efc5741c0856fe75541c4ae7200c1227fb3e1fa2888a13e27 php-pecl-redis6-6.1.0-3.module_el9.8.0+257+89d727f2.s390x.rpm c23a465fb14d28c386d8d6caf29fa725d546921db73d1ca45784315acbb0cde0 php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22 php-embedded-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm cdbc7d9c1fccb801a3a142d76991a91b283f053d32a7fee822940ab2ba36cf63 php-pdo-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm f3a667880cc5dc66714f34e61701082bc4da1401fdd7c15c18d4a7d12bd1ddb9 php-pgsql-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm f9a724de3f9059c3c308ec9e4c6efcb2fe4d2afe0e4105cb42bb3f29663809e2 php-intl-8.3.32-1.module_el9.8.0+287+a9a5bb73.s390x.rpm fd1fb151cab6beae419d0a1d00569e9829259b008e4f826a6c1a712587d84ea5 ALSA-2026:4828 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948) * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968) * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default mysql-server-8.0.45-1.el9_7.s390x.rpm 189697671a1abc7b8ca80cad75cc165c366d400ffe79f043a408dbf7a379153e mysql-libs-8.0.45-1.el9_7.s390x.rpm 36d65ae5574809d95e3fb49f29637aad8b17edd3679aaf920cad3fb5400e546b mysql-errmsg-8.0.45-1.el9_7.s390x.rpm 42f4bca654136c59f4e9bbc9098dd9e15cc6ef28f83747691e6b5e98b1d3b404 mysql-8.0.45-1.el9_7.s390x.rpm 634dcc07ae1b5538d70586281671888ac9f8735043976e191230acbd6c3289fc mysql-common-8.0.45-1.el9_7.s390x.rpm 7ab13aab05b394916ff4e9822cdd3eb16db82dac3265a88e3107b613d0018186 ALSA-2026:4898 Copyright 2026 AlmaLinux OS 0 1 Important

capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Security Fix(es): * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114) * capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default capstone-4.0.2-11.el9_7.s390x.rpm ccdb4d5ade5042dac46f4aa101031899472a11835f5119dd47eb8e05324180bc ALSA-2026:49212 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () * kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-perf-5.14.0-687.33.1.el9_8.s390x.rpm 09b72c9326cbf4262b78b242e786b8ece052375acf59a37d035d436049c5a24d kernel-devel-5.14.0-687.33.1.el9_8.s390x.rpm 0e49925b22f33e34eddf217244a18d2083db797ef634d3e8c4f8ab670eaaf72c kernel-devel-matched-5.14.0-687.33.1.el9_8.s390x.rpm 16d3dcb4fc0a1809629ffca9c7c64d3b8ce0415198c194274cc0f706a74459ac kernel-debug-devel-matched-5.14.0-687.33.1.el9_8.s390x.rpm 1dc02a80f06d0946b9759633dd28beac4f2720ecd973ed7947edb6e055032465 perf-5.14.0-687.33.1.el9_8.s390x.rpm 45f9ea0b2af22ae81902186264442cc3bdc9c5c7260fd8840e9e4d406f04b6ca kernel-zfcpdump-devel-matched-5.14.0-687.33.1.el9_8.s390x.rpm 6da46adfce07a422b279873c01b1d9ebe690fe550e91070346e263701ead9000 kernel-doc-5.14.0-687.33.1.el9_8.noarch.rpm 7eab449a837d5105f4dc026af678941793b1f4232c4b244f7f74019f10377725 rtla-5.14.0-687.33.1.el9_8.s390x.rpm c0787af75cfba11f1206a1b32648a7fecca3e410a2361e883a0e9586cb1e38ef kernel-headers-5.14.0-687.33.1.el9_8.s390x.rpm c83ca63bb8bd0efcd7735f4129e192634e3ffbe1bb751e648ff2b1eaf85b1b5e kernel-zfcpdump-devel-5.14.0-687.33.1.el9_8.s390x.rpm c977854123aa7a9a6a554f55b73e115abbbda1351b2cfa610ec751e6dd8e8553 kernel-debug-devel-5.14.0-687.33.1.el9_8.s390x.rpm d941cb4b1ff205241ae6ac783333aa5cd2a8f0391c7339ba6b316dd487eee336 rv-5.14.0-687.33.1.el9_8.s390x.rpm ed98737408a2844506235d2c87f3a4300ff7e94e8077d848bda339aa7aec4ebc ALSA-2026:49525 Copyright 2026 AlmaLinux OS 0 1 Important

perl-Archive-Tar security update

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support compressed or gzipped tar files. Security Fix(es): * perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size (CVE-2026-9538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-Archive-Tar-2.38-6.el9_8.2.noarch.rpm 74793931ac60339989344ae76edae7f07d84e54591be77be8328a2f7f6b91b2e ALSA-2026:49527 Copyright 2026 AlmaLinux OS 0 1 Important

frr security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460) Bug Fix(es) and Enhancement(s): * Zebra is not installing the route in the kernel after flapping one of the physical link on the ocp worker node. [almalinux-9.8.z] (JIRA:AlmaLinux-152300) * frr triggers SELinux denials when reading root's Python site-packages directory on AlmaLinux-9 (JIRA:AlmaLinux-176258) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default frr-selinux-8.5.3-15.el9_8.1.noarch.rpm 28b90322fe0e517b6678a97af89552cdcd90d85a98188a067b7927be3a71f11c frr-8.5.3-15.el9_8.1.s390x.rpm e5e8b32ea1d29355245899bccf2b1a849d1d45859acc4a1532a045a7615fbc38 ALSA-2026:49607 Copyright 2026 AlmaLinux OS 0 1 Important

frr10 security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga. Security Fix(es): * frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460) Bug Fix(es) and Enhancement(s): * frr10 triggers SELinux denials when reading root's Python site-packages directory on AlmaLinux-9 (JIRA:AlmaLinux-222338) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default frr10-10.4.3-3.el9_8.2.s390x.rpm 1ff46faff619cd3c9b3f4747737555415d5b507406099854a96689d2aad3729a frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm 84b33c63ff314179325a4007f214925c475e13863a5c79287fda0a068efbcdb5 ALSA-2026:49612 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fix(es): * DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380) * DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.3.s390x.rpm b4b5b709dc3f6f08a541ad60c6438c978109998f360e38d4b7a933faf5a9d89d ALSA-2026:49667 Copyright 2026 AlmaLinux OS 0 1 Moderate

p11-kit security update

The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): * p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default p11-kit-devel-0.26.4-1.el9_8.s390x.rpm 60ad9199e6a12e2e542aa135503ee7cccfe71a8b209d2a9ef954b17d87ed4d3b p11-kit-server-0.26.4-1.el9_8.s390x.rpm 994d00a38106d8c2af8fbf09cc32ef8d57655aaa4121f7d70950da2b11a73921 ALSA-2026:49838 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security, bug fix, and enhancement update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) Bug Fix(es) and Enhancement(s): * bootupctl backend install --auto fails bootupd EFI metadata missing (JIRA:AlmaLinux-185745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default osbuild-composer-core-165.1-4.el9_8.alma.1.s390x.rpm 02464d5289566e6465f9bb750dfdc87c9a21b13ffa75030d36499498c79b883a osbuild-composer-worker-165.1-4.el9_8.alma.1.s390x.rpm 18ea1d8aa772b104a096fb3d2165f92fb22382e7e3293721da5380f75a2befcd osbuild-composer-165.1-4.el9_8.alma.1.s390x.rpm a8b4fc666352164a556c03a14580a9df3d4f4f24b5aed88062c7e9b74bf84f7b ALSA-2026:49870 Copyright 2026 AlmaLinux OS 0 1 Low

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) Bug Fix(es) and Enhancement(s): * Possible regression with FM350GL [almalinux-9.8.z] (JIRA:AlmaLinux-184273) * AlmaLinux9: Fix downstream-only regression from 532af53c [almalinux-9.8.z] (JIRA:AlmaLinux-192430) * gfs2: xfstests generic/363 failure [almalinux-9.8.z] (JIRA:AlmaLinux-214021) * AlmaLinux 9: Backport b95e0e792822 [almalinux-9.8.z] (JIRA:AlmaLinux-216471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-debug-devel-matched-5.14.0-687.34.1.el9_8.s390x.rpm 064f76eba64112247c850be2e2312cab3115b636aeb9b793b6da4d4f3deca41b kernel-doc-5.14.0-687.34.1.el9_8.noarch.rpm 11665fa1991b6ab2b2fa02c32a69b60c3411b043582794a4facae7338358986d perf-5.14.0-687.34.1.el9_8.s390x.rpm 1319c56defc6472a07a3ccdc79854083cad0128d0bc6bc18103432e8fda8774c kernel-devel-matched-5.14.0-687.34.1.el9_8.s390x.rpm 385959d886dcb268d61a8a3d1c91aff2de9771bccabcfb644988eb009d3af91c kernel-headers-5.14.0-687.34.1.el9_8.s390x.rpm 5f680f69b36113b553e278f1890fd2689ee7eada271601c87f271292fe11d07e kernel-zfcpdump-devel-5.14.0-687.34.1.el9_8.s390x.rpm 63dd843c76fb94f97ff6fd2b67c73c2a613f4de212e24fd810d8ac924e20a2b4 python3-perf-5.14.0-687.34.1.el9_8.s390x.rpm 9045ad887b139d0537eef2f2f50f5dc73fad433343c4d263cd53df61db5df467 rtla-5.14.0-687.34.1.el9_8.s390x.rpm 905e031a3cf47f685bcbb7a77b57ec757fb5ae79884bc8e570e21222dbea5a99 rv-5.14.0-687.34.1.el9_8.s390x.rpm a291e22499571af8b91400ede2d1fd78e2760a0624102eeebecb4866445e0ba5 kernel-zfcpdump-devel-matched-5.14.0-687.34.1.el9_8.s390x.rpm a8a6991eafb89569ca76256e55311ab36c71f7f7f97246e2400037c837d25eb0 kernel-devel-5.14.0-687.34.1.el9_8.s390x.rpm e1974f61df75ee6eaf38053f3eb1b204e1a4f15a5e45135bfe90300b5f917a43 kernel-debug-devel-5.14.0-687.34.1.el9_8.s390x.rpm f9d911d5c68527f1122d908d7f2acfcc5ee195988e3e7be75da51685116bf8e3 ALSA-2026:49921 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368) * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360) * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362) * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358) * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387) * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357) * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351) * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371) * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354) * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359) * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383) * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369) * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353) * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396) * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405) * thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default thunderbird-140.13.0-1.el9_8.alma.1.s390x.rpm 1320b4402cac5467c6d5dd740a6c34eb1ada630c5b994367f7b5cbb9b08133c1 ALSA-2026:50108 Copyright 2026 AlmaLinux OS 0 1 Important

ldns security update

The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to (for instance) create or sign packets. Security Fix(es): * ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching (CVE-2026-10846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default ldns-1.7.1-12.el9_8.1.s390x.rpm 055f5996c4f347bd56a470ff4d9cbd96f929fd181dfde2261b52d18f570344b2 ALSA-2026:50147 Copyright 2026 AlmaLinux OS 0 1 Moderate

libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libgcrypt-devel-1.10.0-13.el9_8.s390x.rpm 5747b154669a81fc3ac2a2c4dbaa0310e3103fdcfa4e3954552ac62b2aea8c70 ALSA-2026:50317 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies (CVE-2026-59939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default fence-agents-virsh-4.10.0-110.el9_8.5.noarch.rpm 0cef2152a3e141c5d0839223e691ef38852771b95fc7f253eceedbd243119686 fence-agents-wti-4.10.0-110.el9_8.5.noarch.rpm 0fb2c32f55eb2f3fa1d316a66cf4855ed921e142f30de7c06dc0032e4a9e96e8 fence-agents-zvm-4.10.0-110.el9_8.5.s390x.rpm 15345f3dfecea2ce7a16d86f15887569d87aafd9275675dab051a61e6452684b fence-agents-eaton-snmp-4.10.0-110.el9_8.5.noarch.rpm 162b28d6cff7551588e248212c03c56947738816fc7a46324519c90315d75da8 fence-agents-amt-ws-4.10.0-110.el9_8.5.noarch.rpm 16a1449402fd9550d13585ea7e973269afa99a7e31aeed9e0bb05e68f99c0895 fence-agents-heuristics-ping-4.10.0-110.el9_8.5.noarch.rpm 16d21c41ab1a1f920afd2dc9d585a522b8d787b36dc7c091f289cbb46f6f52a7 fence-agents-emerson-4.10.0-110.el9_8.5.noarch.rpm 1c493037b20ae20cfe85da10dd423f918a970757dae84583cabd35321ac37f7c fence-agents-vmware-rest-4.10.0-110.el9_8.5.noarch.rpm 21faaf014b0eeb611eef3ed0192901da2a9420d9ecbf95c781afcbef29c03851 fence-agents-kubevirt-4.10.0-110.el9_8.5.s390x.rpm 22468cff5e109d10c3b88a7cd302dfaef2538028c85b5b96c21a4217aa5dcaea fence-agents-common-4.10.0-110.el9_8.5.noarch.rpm 2573df3eb377fae8f7cd0171524d9bec0b0566291707628f4e51524e94657b88 fence-agents-cisco-mds-4.10.0-110.el9_8.5.noarch.rpm 2b328cc4a25e848c566fb945bb3bfacfffd86373402ea9923fab1b675690795d fence-agents-sbd-4.10.0-110.el9_8.5.noarch.rpm 302233c721a5377579fe6196d0f75d0911ddc678f08c95614186d4218795a15e fence-agents-nutanix-ahv-4.10.0-110.el9_8.5.noarch.rpm 34a44fc977bb429e343e3c0529b7c4ae1f593535cb9a534c17db9c663d288c24 fence-agents-rsb-4.10.0-110.el9_8.5.noarch.rpm 38a58778de27e61451a3104299cb59f3086f44b8b7805f25625a2cc17b7575d3 fence-agents-drac5-4.10.0-110.el9_8.5.noarch.rpm 3a69ef8a3afb4d8094c84538446cb87b49780b5e89e85fc309e665fd2867d40e fence-agents-mpath-4.10.0-110.el9_8.5.noarch.rpm 3d613491abe75229775f1bb7672532e4ab1df2cf9d58b01c353079ba022c779b fence-agents-eps-4.10.0-110.el9_8.5.noarch.rpm 446eb8119057afcc9618db13d1321766d09c7f6e74a4e5e9cc21eb6e852fd780 fence-agents-ilo-ssh-4.10.0-110.el9_8.5.noarch.rpm 46dfded7553c339a8af33cadf3f6b9d38b6fb4dbdd4923a7ea0554ba47993deb fence-agents-ilo-mp-4.10.0-110.el9_8.5.noarch.rpm 47c0a9a124c93cdba4dceb59a6adc6801f0daed021ecae28e684cb27f2efcac0 fence-agents-ifmib-4.10.0-110.el9_8.5.noarch.rpm 5e13da10beb9186e7b48e1e3fc3988eb7643577729cb054c10ce1d2338f78139 fence-agents-ipdu-4.10.0-110.el9_8.5.noarch.rpm 636dc83233d61e1da0012c5f4f92467e06d6b6693fe9d58c364a6f5885f8a5a4 fence-agents-lpar-4.10.0-110.el9_8.5.noarch.rpm 6b6578feb9467298fcb45bd421aaace01a1c3246f4d75691f636b36fd178d8f3 fence-agents-apc-4.10.0-110.el9_8.5.noarch.rpm 721db660ea7bfad7d4f6e29a9a610a66c2ffd9c384ff9789b98677bf8e267458 fence-agents-ilo-moonshot-4.10.0-110.el9_8.5.noarch.rpm 759d68a4653d07e0eeb05837551ffbf56f5e81c14a0def2397eb2a3a4fd74abe fence-agents-redfish-4.10.0-110.el9_8.5.s390x.rpm 76a43caf19abc9d66faa3966e58ec24ab3f887cc1b2ecbc4766a3d61154560a1 fence-agents-bladecenter-4.10.0-110.el9_8.5.noarch.rpm 926f895ca4718c5df2589a2279be1a9df61f62f6e5ea95acd5b6c1fb7b562f7f fence-agents-apc-snmp-4.10.0-110.el9_8.5.noarch.rpm 98b93e967c2442806c5c4090148b7ee1c210a3fbf4e6e34d56ef7a018d1e2687 fence-agents-hpblade-4.10.0-110.el9_8.5.noarch.rpm a4a541ecd56333c15dfd167de0a2730e70044cdab1335e5d318be096a5aba044 fence-agents-kdump-4.10.0-110.el9_8.5.s390x.rpm a92f2e790bf42f9c25ab46ff5a49e1b2e87cb19ffb37fbf250c5094ff6782e7e fence-agents-ibmblade-4.10.0-110.el9_8.5.noarch.rpm adc2202a323783e5944338729ab817ac462dd0851761ce78d02dd54750eb57bf fence-agents-cisco-ucs-4.10.0-110.el9_8.5.noarch.rpm c5d9d69b72aa673a9446b9124e8d9a59edb0102b35bd88837ee928dd6ab705a7 fence-agents-vmware-soap-4.10.0-110.el9_8.5.noarch.rpm c72426aa9a21d4fd21add7725f9bd38934fe02e2cc0508b2a5d4290a90e726ee fence-agents-ibm-powervs-4.10.0-110.el9_8.5.noarch.rpm cb18caa8d3a24e689691e0202abe3b90661fb82b8750bce2f58da33a6cdc161e fence-agents-rsa-4.10.0-110.el9_8.5.noarch.rpm cd75a7335eb94f2e5eabe8dfdff4140c3db649d77a5e2bcf7b2f59e32083bb77 fence-agents-intelmodular-4.10.0-110.el9_8.5.noarch.rpm ce23dae152f9fd25a9a6ec120991547cdac7f36543b76f917e6c9abdfeaa74c2 fence-agents-brocade-4.10.0-110.el9_8.5.noarch.rpm d169dace236ba20ea0dd8468fa2739ae82bac540cd68c559c3da2631eea9a4e2 fence-agents-all-4.10.0-110.el9_8.5.s390x.rpm d5f1fe1bfb7fc20354cebcb7a3ad33729a9d02846324cf301dc58657437db616 fence-agents-ipmilan-4.10.0-110.el9_8.5.noarch.rpm d6ce6563e85b8fc48fe49feab70c82aad5d3facfd257225d917f6e023f0e314b fence-agents-ibm-vpc-4.10.0-110.el9_8.5.noarch.rpm e5c8ba740f2f20b8551f5e4d2b038046e06bb5b89ce0261a5d0fe945d15dfbbc fence-agents-rhevm-4.10.0-110.el9_8.5.noarch.rpm f581413a133d843060234d3795e58f8925bd592f14361cf3e2d6d56a8f0c0d6c fence-agents-scsi-4.10.0-110.el9_8.5.noarch.rpm f5a5b154a4704ec25a2ef7278f107f1631a60ac09d9adb2dab1adc0df4cc204b fence-agents-ilo2-4.10.0-110.el9_8.5.noarch.rpm fe74aef1ac8528480e74bc6b7d752d57168935db99ff646b1e932d668b6e3166 ALSA-2026:5080 Copyright 2026 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive (CVE-2026-4111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default bsdtar-3.5.3-7.el9_7.s390x.rpm b21bc00a32c3d734f0724e6dadac009da1f0eec5cb201453e7f25adf7d067add libarchive-devel-3.5.3-7.el9_7.s390x.rpm e02f6a133370e489853fda0eec66984e6593f9bc7b3f6ca4f4696145bf0600cc ALSA-2026:50827 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:4.0 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257) * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256) * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240) * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242) * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241) Bug Fix(es) and Enhancement(s): * ruby:4.0/ruby: Rebase to the latest Ruby 4.0 release [almalinux-9.8.z] (JIRA:AlmaLinux-211301) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-pg-doc-1.6.3-1.module_el9.8.0+232+50f6dd36.noarch.rpm 012587b1454988d3ae9e2df6f066e9a9582859f741daa26cc97f6ce56f7cc40d rubygem-rdoc-7.0.4-34.module_el9.8.0+289+5a070f48.noarch.rpm 2b33fa77783cc93de8c0883faa6892329f442300d0cbf5e82a6125b00b71fca4 rubygem-json-2.18.0-34.module_el9.8.0+289+5a070f48.s390x.rpm 3ebd7b9fb6a0d6636cd26abbd9c425df6e0ea68be00cf35375f2faa378d343e1 ruby-libs-4.0.6-34.module_el9.8.0+289+5a070f48.s390x.rpm 46944051e319cd954e36dee8e059f8d2ce3c7cc2d4c1f4801fa68793a2be2310 rubygem-rexml-3.4.4-34.module_el9.8.0+289+5a070f48.noarch.rpm 4edee87df2da657900eb98f07642c3d83a1037438ed3582662ca71dc5c3b568f rubygem-pg-1.6.3-1.module_el9.8.0+232+50f6dd36.s390x.rpm 5a3274b260c9f148a2d53963874a7074a6eb753d8de5561715f81aa190b751ae ruby-4.0.6-34.module_el9.8.0+289+5a070f48.s390x.rpm 5d6a05148f22e2208fb85f4f5eb123d8ed6fa889363b203bb1f9c1e73fa4050f rubygems-devel-4.0.16-34.module_el9.8.0+289+5a070f48.noarch.rpm 5ff0a58b9db973f8f827485142a5c70c50eaf99fbcb947c16c74638d7a2a9b29 ruby-default-gems-4.0.6-34.module_el9.8.0+289+5a070f48.noarch.rpm 6474d9bf6e42880f15ad8265fb7fae51ff54f75a245dcf6d39eb4632f7f81838 rubygem-mysql2-0.5.7-1.module_el9.8.0+232+50f6dd36.s390x.rpm 700ff63225b94b696ac533940dc41391e7462b01042b665bb6817ae92d805d39 ruby-doc-4.0.6-34.module_el9.8.0+289+5a070f48.noarch.rpm 7383a71f0ebaddfc76ab3a8b8751b28d27f749dd3c97ed8a0f8382edd75adb4d ruby-bundled-gems-4.0.6-34.module_el9.8.0+289+5a070f48.s390x.rpm 76522c635fff64c477b8c76e2884394315e09dab0e7ae44f9078f803e4e27d23 ruby-devel-4.0.6-34.module_el9.8.0+289+5a070f48.s390x.rpm 81cdaf405e2e29ccc9b4b71606e3e5ba47db76193156f3c94d384c46ffbe21ef rubygem-racc-1.8.1-34.module_el9.8.0+289+5a070f48.s390x.rpm 87c3171e85f7dd4d58425f9802ce3ddd925175de1476436cb627ac9fc2f3aa6e rubygem-irb-1.16.0-34.module_el9.8.0+289+5a070f48.noarch.rpm 8d1764e23f29a1b6728b3e33ab74c0d1ba702c7be0d9fa862621aa3cb76d4d51 rubygem-mysql2-doc-0.5.7-1.module_el9.8.0+232+50f6dd36.noarch.rpm 97e11c128bce3071fdab6ecdaf0cc24053f436b72c10921807cbd89f4b2ff2d2 rubygem-test-unit-3.7.5-34.module_el9.8.0+289+5a070f48.noarch.rpm 98dfab43af99dcb55d9ad636a9e00e9f441f54b539261d335f77a250c3b87944 rubygem-rss-0.3.2-34.module_el9.8.0+289+5a070f48.noarch.rpm 9d8f32cc4b8324acfc9b91a11957b4315f2194772e4af2c1ac254d3f1e96e131 rubygem-rake-13.3.1-34.module_el9.8.0+289+5a070f48.noarch.rpm a0e07a6db4215d2166f1a1cf135e0ed46b6acf714d5d940a78e75de5f0311ceb rubygem-io-console-0.8.2-34.module_el9.8.0+289+5a070f48.s390x.rpm ae18c7978969232238d61ee53febc49fb5a2e927cc07c2a02eb2e960723f3c84 rubygem-bundler-4.0.16-34.module_el9.8.0+289+5a070f48.noarch.rpm b37144bcb7e8ef9ab689609c444876b235350c49b15794514f2505690c5ab572 rubygem-power_assert-3.0.1-34.module_el9.8.0+289+5a070f48.noarch.rpm b44d02d06a9abfc05496a212f9445555603fb80658dc9fcae5578d9f84ce27b5 rubygem-bigdecimal-4.0.1-34.module_el9.8.0+289+5a070f48.s390x.rpm bae1d86c25b86b2eb8eaed00f29f7d447649aae87b3a2e7dddee4a3faa0ba002 rubygems-4.0.16-34.module_el9.8.0+289+5a070f48.noarch.rpm c0ab99a9946b709580b35c70248b9e15c7e5f1c9a8dc0f4cd163296f45a9b4b5 rubygem-rbs-3.10.0-34.module_el9.8.0+289+5a070f48.s390x.rpm c0bff7d3606e247460b7974b50be2db76bd7bd471026c011c8784ed36730b634 rubygem-psych-5.3.1-34.module_el9.8.0+289+5a070f48.s390x.rpm c2b749db6ba7dd8c7be54d04ff807c8a705a6b3f8ff70e25ca56f634d79eb9fa rubygem-typeprof-0.31.1-34.module_el9.8.0+289+5a070f48.noarch.rpm d6aa930ee8efdbad15e5c5e89ef82a900530f8669c79bf2d4de1ea56ed703041 rubygem-minitest-6.0.0-34.module_el9.8.0+289+5a070f48.noarch.rpm f92af6d127f8ccb7327da1285fe8625679ce8a870dccb7f9a67d298b37b20d26 ALSA-2026:50828 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257) * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256) * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240) * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242) * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241) Bug Fix(es) and Enhancement(s): * ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [almalinux-9.8.z] (JIRA:AlmaLinux-171335) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-io-console-0.7.1-8.module_el9.8.0+288+22f1c9f2.s390x.rpm 016cc6393dcd18f54707e32e5ac0e71cdb923086e42c8d70dce6f496c1c94867 rubygem-rexml-3.4.4-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 08941feb88c6e4503609950cd6c317ba783b13e41053f2d7e1350cc313034839 rubygem-power_assert-2.0.3-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 21a684a94095692f90c1d4f707f35459ec30a83b2628fbe9ccedb28b77a2d221 rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 rubygem-pg-1.5.4-2.module_el9.7.0+245+447713a2.s390x.rpm 37933771eaf80f507c99dab2a888edfd251e524975ea35ca2f70ce5f9b0badeb ruby-bundled-gems-3.3.12-8.module_el9.8.0+288+22f1c9f2.s390x.rpm 3f97d586ee2355a37c7e287ece71b2808aededd87cda356d3653018ba87ec725 rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.s390x.rpm 4866939ab52aa8d02863557cdaf8e3af45c043a8c7136082318eabfec4ab8150 rubygem-bundler-2.5.22-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 52fba3af6956af7fb08fa4061b3c1f186a2ef5b4dd0d748aa195c77b59a7833e rubygems-3.5.22-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 5869b9a1d9d3d28b213bd1949cc08e12d108beaaf583630b8b6154e4a81cbbe0 rubygem-psych-5.1.2-8.module_el9.8.0+288+22f1c9f2.s390x.rpm 5d524703ad88c807e8600562f00c47203d5e8853b8e88228607defe23e8a297a rubygem-rake-13.1.0-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 691c8f4a92d8176937fb1c4a4de6fb5564cb9c8856d3c83512909d625436895b rubygem-json-2.7.2-8.module_el9.8.0+288+22f1c9f2.s390x.rpm 6a387c57cb6488d4119588b5600d94e733e47eb38f9f0160e58aba9390cf9abf rubygem-rss-0.3.1-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 7e862cfa3c0e06de4775310186c1e6d5e7e8a6ad6f7ab030429589586e23f87b ruby-3.3.12-8.module_el9.8.0+288+22f1c9f2.s390x.rpm 82b6d38a5e3e7a9c9c8d42fea1ce2b9f47fb4dd10594bafaaa2a31f73d66f704 ruby-devel-3.3.12-8.module_el9.8.0+288+22f1c9f2.s390x.rpm 862bcc678e8e45c43ce48fff2a9090ffa85c135fb122b7360b7f52f3b41a8dfd ruby-default-gems-3.3.12-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 86c55844fcd391a335cfcf6332ed204c2845cd045998b9d52498a1478579ea8e rubygem-rbs-3.4.0-8.module_el9.8.0+288+22f1c9f2.s390x.rpm 89731272645d71132d8c613df05175e306351ed669e9d7e442686b06fab22ffa rubygem-bigdecimal-3.1.5-8.module_el9.8.0+288+22f1c9f2.s390x.rpm 988aed11660d14de7e64af4c55422c43b306c15e8417d84c849f20779f2683e6 rubygem-test-unit-3.6.1-8.module_el9.8.0+288+22f1c9f2.noarch.rpm a603fa7d65af99c20611af32fb62b93bbfd519c4456cdeb7cd99abf4b882f05c rubygems-devel-3.5.22-8.module_el9.8.0+288+22f1c9f2.noarch.rpm b8f0e70b46d8bb742651e9c75fe1f701e485071e8434ce5662697c418d473916 rubygem-pg-doc-1.5.4-2.module_el9.7.0+245+447713a2.noarch.rpm c96338e6d5222b04fcb018874d6c36073340306f6f05aad2761a5a9b3a5b180a rubygem-rdoc-6.6.3.1-8.module_el9.8.0+288+22f1c9f2.noarch.rpm db86eba24a4f37c9eeae9051a56bf231f8ebd280c588773265e2746a9d315431 ruby-libs-3.3.12-8.module_el9.8.0+288+22f1c9f2.s390x.rpm e3bcb8ebe15f2842a843794f3597575791eda15b581c121a307995e8e3f62419 ruby-doc-3.3.12-8.module_el9.8.0+288+22f1c9f2.noarch.rpm e5794b7f0c658541af4601ae6d3f0fff3ba04ee228a89f6f2365ce7099a7645c rubygem-irb-1.13.1-8.module_el9.8.0+288+22f1c9f2.noarch.rpm e9440430241b604a2f50f6e1fdcefa97d58bc91a08531be103df4efb4837168b rubygem-typeprof-0.21.9-8.module_el9.8.0+288+22f1c9f2.noarch.rpm eaa3b6b736b5a153be01570b0936c942616c18918cc279dc70def0d181fe00b4 rubygem-racc-1.7.3-8.module_el9.8.0+288+22f1c9f2.s390x.rpm ed8c1d677b52bc5e1132ecb0332d89ffd72f70a98600f3f6194ee4f540fa4064 rubygem-minitest-5.20.0-8.module_el9.8.0+288+22f1c9f2.noarch.rpm f7c01f4b74fc897bb3bd0cb0aa7287013db8b616396a8020355d3d6e3c6c437d ALSA-2026:51035 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-9.8.z] (JIRA:AlmaLinux-186331) * [AlmaLinux 9.4] Kernel memory reclaim bug [almalinux-9.8.z] (JIRA:AlmaLinux-211058) * Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [almalinux-9.8.z] (JIRA:AlmaLinux-215575) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-doc-5.14.0-687.36.1.el9_8.noarch.rpm 1a442d3d69f8f169857d626a3a6f91a302c21c597469664971c626ac25e11bcb kernel-debug-devel-matched-5.14.0-687.36.1.el9_8.s390x.rpm 1bd9dc89eec57dcd66f53a4c7e0a72c42516f97e83c212a0c4a5b7d9032e7c6f rv-5.14.0-687.36.1.el9_8.s390x.rpm 2c32722757a7c04af98dedab4812aa03bb3849e254a1b8cf09aeacfb6c502b9e kernel-debug-devel-5.14.0-687.36.1.el9_8.s390x.rpm 50d3cde143f46654379c2f0bfdf9cb985bc6900df766fff48f5c4ea3e03c7a28 perf-5.14.0-687.36.1.el9_8.s390x.rpm 565311c36c654fe0aba6590c667559296231fd443ea818694199cde672600b6f kernel-zfcpdump-devel-matched-5.14.0-687.36.1.el9_8.s390x.rpm 8cd039e856c1ddc959ed59a55c2619a810364a522e49b84b4a53a0c748b8d08b kernel-devel-matched-5.14.0-687.36.1.el9_8.s390x.rpm 8ecd8943a0f6a1d0bcc986ba86ff1eb82985d8e5d0ee9adc25bf3b26b16bae82 kernel-headers-5.14.0-687.36.1.el9_8.s390x.rpm 9cb082100c01cfe49e7e9134b16ccc43f83a7b519d508bfacf8a1f935dbadeef kernel-devel-5.14.0-687.36.1.el9_8.s390x.rpm ad5511f0e1ffea02bfbebae71ef2c09d91b2f340aaaf33a4609e6602ed3d39e5 rtla-5.14.0-687.36.1.el9_8.s390x.rpm c60962e3101098017d2c7e55212c96406028da6fd3e8f01fe81b6351440afc4a kernel-zfcpdump-devel-5.14.0-687.36.1.el9_8.s390x.rpm d98359a3e612acdc37ec63b010959927ff1be00e632fca8e24c32d277427c11b python3-perf-5.14.0-687.36.1.el9_8.s390x.rpm e105524117014b173951834e2e79398697427f52ff371c97ff43ca90e5588912 ALSA-2026:51105 Copyright 2026 AlmaLinux OS 0 1 Important

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: LibRaw: Buffer Overflow vulnerability in image processing (CVE-2026-51235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default LibRaw-0.21.1-2.el9_8.1.s390x.rpm 4c599a9e7ed3ff9d858f907969f2382359c82d801a9d28b8997d1712ce434ee0 ALSA-2026:51153 Copyright 2026 AlmaLinux OS 0 1 Important

gpsd-minimal security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The AlmaLinux support for this package is limited. See <https://access.AlmaLinux.com/support/policy/gpsd-support> for more details. Security Fix(es): * gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution (CVE-2026-58459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gpsd-minimal-3.26.1-2.el9_8.1.s390x.rpm 1068c154e22b68ed36c11e128979e108ebb4518a90bfe351baff0cac73902ab3 gpsd-minimal-clients-3.26.1-2.el9_8.1.s390x.rpm ce7b36e98fbade6db22682021aec0d11e7d632ae970202b1113eb9ef7e82d219 ALSA-2026:52395 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation (CVE-2026-6479) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default postgresql-plpython3-13.23-5.el9_8.s390x.rpm 56e8f5a60cbbb73b7585ee1d9482a5c6b151dfb8b628424aa9c9c27dfed307e8 postgresql-upgrade-13.23-5.el9_8.s390x.rpm 5afebbf5b0e0434cbb35ef5f288bcc7405828dfe5c4aab90d15df3e2296d0ff3 postgresql-pltcl-13.23-5.el9_8.s390x.rpm 5ed250d4062443ae87acc3d41b4df486c88aa023ee184794dd51a6bf6ed6c742 postgresql-server-13.23-5.el9_8.s390x.rpm 6505337e84ccc4ec7300884e935c64adf662a0ba14edc11f0810a5f3905241ae postgresql-13.23-5.el9_8.s390x.rpm cea68bb01e31689d73d9077a18dd36e2bfcee744de85022d59ff41bbb11e2909 postgresql-contrib-13.23-5.el9_8.s390x.rpm d657046e228f95cf70fd0a281c7b94fd082a7bccf69ffd8aa401cbf85b39c31b postgresql-plperl-13.23-5.el9_8.s390x.rpm f8ab985c4ac9515e71eb88b97989e654b3546ee3e7020808559dcdae6495cfcc postgresql-private-libs-13.23-5.el9_8.s390x.rpm f95c266cd12992da2f825c15371619c8c16e4b3c389d3b8dd92e925b415dc946 ALSA-2026:52674 Copyright 2026 AlmaLinux OS 0 1 Moderate

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() (CVE-2026-14164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libarchive-devel-3.5.3-11.el9_8.s390x.rpm 0de8470ae73889cd59c01da4a8d0bb82b8b03302c78aceb3adf4c66a184b3ea1 bsdtar-3.5.3-11.el9_8.s390x.rpm d206bfc697e933c258981f997b4f33268843865bd90b31338e5869fe4ae58b95 ALSA-2026:53329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-9.8.z] (JIRA:AlmaLinux-213036) * AlmaLinux9.4 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-9.8.z] (JIRA:AlmaLinux-215578) * AlmaLinux9.4 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-9.8.z] (JIRA:AlmaLinux-215580) * cifs: periodic IO errors when rename races with lease break (JIRA:AlmaLinux-192999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rv-5.14.0-687.38.1.el9_8.s390x.rpm 01ce8160d166259d6111a9eea65c33084e3ce9ad42feaa7be67654f78bf806c7 kernel-debug-devel-5.14.0-687.38.1.el9_8.s390x.rpm 1209f922e196575b47a5cd23bf858e1bdb20c3de9cd9591b241edadb60b968c1 kernel-doc-5.14.0-687.38.1.el9_8.noarch.rpm 16548bf32d1865acebe9e6d0e58aaa3d3a18f92882477ba21efa1c64d9ce6e6f kernel-headers-5.14.0-687.38.1.el9_8.s390x.rpm 37d63e19805249a88e5958757a7aaf9f70d40caf3a5229c4a745f406e6b440dc python3-perf-5.14.0-687.38.1.el9_8.s390x.rpm 58a0e738f1d1bcc919110e0fd443bd79dac2891dd2038c78c40fcd6a229139fb kernel-devel-matched-5.14.0-687.38.1.el9_8.s390x.rpm 5c44253df376e219eb341adf322c4dd8265e4aa672a78210c4eed4d82206118f perf-5.14.0-687.38.1.el9_8.s390x.rpm 7e996cf5f222155fc2349fbc57ea7bbd7e771dae84f3212cb13b62dfe6d6b93a rtla-5.14.0-687.38.1.el9_8.s390x.rpm 8440dc912ea2ba2a6c96247641697cc078528dbbd1bcd252e637410a13c13eab kernel-zfcpdump-devel-5.14.0-687.38.1.el9_8.s390x.rpm 8c41b09f3801eb0cac99dbbebe36ff48b0bff8017e35303ab2fa40c318763403 kernel-zfcpdump-devel-matched-5.14.0-687.38.1.el9_8.s390x.rpm beb5815879f1a97fb2fc5d5fb5eb6475faae1bf6c02b5c1ef1e6a4a431b919eb kernel-debug-devel-matched-5.14.0-687.38.1.el9_8.s390x.rpm e66455d70b93761c7007ffc9026e11cb471f82075a5d1b65c88d878ecb5ce4ad kernel-devel-5.14.0-687.38.1.el9_8.s390x.rpm fc9115f6c1cf28da8849322c6746c912580914581e0eba0cd4ee6bce0c3126e4 ALSA-2026:53365 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default fence-agents-cisco-ucs-4.10.0-110.el9_8.6.noarch.rpm 03a01304b9c37ec088e842b2c0ae03b6ebb6984de4e67e85ab173d3002658461 fence-agents-ibmblade-4.10.0-110.el9_8.6.noarch.rpm 060bbee172f57939405c11d549c55f7048e27e9be0feea9da9a68b9612c708be fence-agents-nutanix-ahv-4.10.0-110.el9_8.6.noarch.rpm 07555078a78092683b0b5871e53259ef7677cb52bc56dc1063f44b1f3d3fdb8b fence-agents-virsh-4.10.0-110.el9_8.6.noarch.rpm 11fcb5ecb847b323df8e20e61f4c8f2bd5399f029c94dbe1ef01af9888509697 fence-agents-apc-snmp-4.10.0-110.el9_8.6.noarch.rpm 12e53976dd1e4bc2ba46579ba914f8d9e735243980be30c8b47461e4e94d8945 fence-agents-rsa-4.10.0-110.el9_8.6.noarch.rpm 1dec887654e43ccdecb9f7971beeee11d0a4e90c126329b07ef6cc62a98c240d fence-agents-ipmilan-4.10.0-110.el9_8.6.noarch.rpm 264b5028a6830e7961242f5dae9c2a632a16b6021a8cc22d43f29841bd67b1c3 fence-agents-mpath-4.10.0-110.el9_8.6.noarch.rpm 3582804328377ba5d686811f84cb172798d7a320bc3d6e4a0ae308f28f8b570b fence-agents-cisco-mds-4.10.0-110.el9_8.6.noarch.rpm 3c1b1f6c5ddece7ab12f0dd6e9d792fdfab3c0e804ef28ef8be6d4b1af6fa1bd fence-agents-rsb-4.10.0-110.el9_8.6.noarch.rpm 3c4ad17f55b5e712c64123718f1fcafe76f6511c1e4b4b120dca69e7c2f4e763 fence-agents-redfish-4.10.0-110.el9_8.6.s390x.rpm 44bae18969c7e5b3854ef9ae4419f8b09ba0690d5dbf06c1691d793112758f11 fence-agents-hpblade-4.10.0-110.el9_8.6.noarch.rpm 670558453db71723c4c8af89eb8faff4e692a85aa93a420c3ada95efabb28462 fence-agents-intelmodular-4.10.0-110.el9_8.6.noarch.rpm 6819f2e84e06a26b0208e9aed004f64a29af5fa117f2b5c0109432bbc280487d fence-agents-ilo-moonshot-4.10.0-110.el9_8.6.noarch.rpm 6c0b8c824e9217430b567fb1a5c0a7d1b24fe8015aa08d69312daf54273bf656 fence-agents-amt-ws-4.10.0-110.el9_8.6.noarch.rpm 6feea0acc3517b9e11ab8d5d6a80cd4c5ad6ffc4a3465ea93de53adb500a2bd4 fence-agents-ilo2-4.10.0-110.el9_8.6.noarch.rpm 73480334426701a3c65eebfb744f4b52fd774b79c045ba7b0e76f6ff41b618aa fence-agents-common-4.10.0-110.el9_8.6.noarch.rpm 7914eea628a1f334a2c3ab3c94e1c35814671aaeb2af38c8e0db0b2ffd9fd686 fence-agents-wti-4.10.0-110.el9_8.6.noarch.rpm 7d2dee7ab9c4a22711b368f03a627733ff93a977e734db13ef9704b1a9efadec fence-agents-vmware-soap-4.10.0-110.el9_8.6.noarch.rpm 7eaff6e3d7aff29b083809aba8941397e3cbf5aa3073fe6e733f41c5f9b0d119 fence-agents-emerson-4.10.0-110.el9_8.6.noarch.rpm 7ee2fcae6d87fe7ea2b5e36bd7777029555dc3715511142090923d29b755812e fence-agents-drac5-4.10.0-110.el9_8.6.noarch.rpm 8ec902f12ee35a927f8cbf94f925ab5b60dd5cdd4b9702dd7b3448fc1cf486a1 fence-agents-ilo-ssh-4.10.0-110.el9_8.6.noarch.rpm 942e9fe5ef868ca84b95f4a4030d9dbf70cd7149bcd101baabee4f7752d1d96e fence-agents-eps-4.10.0-110.el9_8.6.noarch.rpm 9d18d9b0c128ffeb59b3ef229f6af7fce1d163cb12f965dee4d07b2cb21ed5f8 fence-agents-ibm-vpc-4.10.0-110.el9_8.6.noarch.rpm a8df680acd7e63bdb6493a4f10fb3c262a6d2b50b90731398b1beff9c6c6884e fence-agents-eaton-snmp-4.10.0-110.el9_8.6.noarch.rpm a8e1e1e3cb5dd76f1be0a90657bea1c5512786bc65eb419e34ce84b9ecf4b5c8 fence-agents-sbd-4.10.0-110.el9_8.6.noarch.rpm aacd7f63b4da4f4d7bfceb6184033174e124f9419dffe6dca64138fee9413d62 fence-agents-vmware-rest-4.10.0-110.el9_8.6.noarch.rpm ac145950d1098b9893d6679a937269ffac688ff6f96f1c9a7782b846a6dd25f8 fence-agents-lpar-4.10.0-110.el9_8.6.noarch.rpm ad4378e16d78590da19a5e097fce655ff3dc6010a6a72e737f15582d7bd10924 fence-agents-ipdu-4.10.0-110.el9_8.6.noarch.rpm ad4d750d233ccd4ca130d5aa07ca7ce04d814df06fc067116141d13e510970da fence-agents-kdump-4.10.0-110.el9_8.6.s390x.rpm b63f970631ecdc9476d332cf4f7903510b1bc3424307cdb4a6aa25057ff5830c fence-agents-ifmib-4.10.0-110.el9_8.6.noarch.rpm b9a781cf5b1bdc0692ec7f4f971fa47d94b59310e43364a797094b238babe1f1 fence-agents-heuristics-ping-4.10.0-110.el9_8.6.noarch.rpm c40fc5242a7e313ffd826538fc8727bbd42221fb04b43f3c08567360edc4b4de fence-agents-ilo-mp-4.10.0-110.el9_8.6.noarch.rpm e57db7ea5b956d100b2eae25fc255c790d8e83df70cad7ffb68f4981e32d19d8 fence-agents-apc-4.10.0-110.el9_8.6.noarch.rpm e6bd2ff2f5244cc30ea7803f0ac46a04df2e59e876076c8992210571b9b08a4f fence-agents-kubevirt-4.10.0-110.el9_8.6.s390x.rpm e94737483981b557522c10ca07feba659071c155559615d9ec6452ba5d979d94 fence-agents-rhevm-4.10.0-110.el9_8.6.noarch.rpm ee7f0344d660f949ca64ecefe0d5f7f31d85de4a96586d19e70a5c6b4e68dc75 fence-agents-bladecenter-4.10.0-110.el9_8.6.noarch.rpm f548089b6e6c80a09a2effdd76f00c3dfd6b037078bfffe5c5a96dd95eb53b9f fence-agents-ibm-powervs-4.10.0-110.el9_8.6.noarch.rpm facce29f07bdf0bd90ab090a1272d71e59b450dbbe313a423380533dcd7541f3 fence-agents-scsi-4.10.0-110.el9_8.6.noarch.rpm fb6b7b4d44d59f8fd7b70c1c60ba9c96c940fba551e75e9548ff4aceae526a7b fence-agents-brocade-4.10.0-110.el9_8.6.noarch.rpm fc9cf8ff93a72bdd5b95da926fcabf485a5f8948e7f3b3f23d9d1602a6d5a421 fence-agents-all-4.10.0-110.el9_8.6.s390x.rpm fd7a21f96f1aa54152ffa695f5af909f261ac24f89c9b50852bd4c30c0f9b998 fence-agents-zvm-4.10.0-110.el9_8.6.s390x.rpm fd7c0cb71be4d8cc72a48439328725fc6f7f0df405400bd777b95fb461538efe ALSA-2026:53452 Copyright 2026 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gstreamer1-plugins-good-1.22.12-7.el9_8.2.s390x.rpm 185583b8684785fdb317d1f6e7df5ec0ad357a06ab99b2b0767d23a6a9abe391 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.2.s390x.rpm 56364b1980ebbe302c7a3c59d903ff6bfd5ccb5e61432d32e35b46b711e24a93 ALSA-2026:53844 Copyright 2026 AlmaLinux OS 0 1 Important

iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks. Security Fix(es): * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944) * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943) Bug Fix(es) and Enhancement(s): * [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2.s390x.rpm e7730e0884a93d4254f0fa32313ba56f094cc19407a0acd23e35fbdba7ae9499 ALSA-2026:54184 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads (CVE-2026-42127) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-selinux-10.2.6-23.el9_8.1.s390x.rpm 378f32de095e29f1e645d809b5cd5793e2e61543ff52d684687fb1ff1966feb7 grafana-10.2.6-23.el9_8.1.s390x.rpm ff8cfc84dccb6b4c89ab3c4eb767107d666a1ee1ebe365be05d74c30c9082c5c ALSA-2026:54268 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python-unversioned-command-3.9.25-7.el9_8.3.noarch.rpm 06a501fe9bc86175f9fec26616a459a62a2b166060d2a11c0e75a9cd51d36e0b python3-devel-3.9.25-7.el9_8.3.s390x.rpm 3db8101df2d8357b816b199494045839ac1088fa105a6bf5458ca8b51962f850 python3-tkinter-3.9.25-7.el9_8.3.s390x.rpm 78b0ff53d355216a198ca8c004176fe52b1f5226583c52ec3bc002096202a545 ALSA-2026:54443 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-9.8.z] (JIRA:AlmaLinux-214434) * Kernels 5.14.0-434+ may lose page table dirty bit (and page data) [almalinux-9.8.z] (JIRA:AlmaLinux-220787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-perf-5.14.0-687.39.1.el9_8.s390x.rpm 01577001e1486e4c45998fdaab98fc67e4a2d2305aba93f8de3fdb9f6b70db0d rv-5.14.0-687.39.1.el9_8.s390x.rpm 0a346aba12291ab2d98d83f853544154777dfcfbe51a5f39beb077c161c00df9 kernel-zfcpdump-devel-5.14.0-687.39.1.el9_8.s390x.rpm 1539c79d425e8f363a96ddf14eb749c4cbb1d9560747cfcb3624635840f96dd8 kernel-headers-5.14.0-687.39.1.el9_8.s390x.rpm 1b7fde26e6b1745654e2c920ce7bf3af74fad930142dec14f5e28a6f503a0491 perf-5.14.0-687.39.1.el9_8.s390x.rpm 31183cc118fc2835e925e67b7ba96295372884d79b6a6519fcb9dd24b7bda993 rtla-5.14.0-687.39.1.el9_8.s390x.rpm 3aa230618c461e301083635d0b2600f075f68d013edbdafb21aadb03482961bd kernel-debug-devel-5.14.0-687.39.1.el9_8.s390x.rpm 9671539b248f15022e02eecfecc2513c13d6ef0a43401a9a8e93b1d0f4b18290 kernel-devel-5.14.0-687.39.1.el9_8.s390x.rpm 9b321d352ffe832713549eafab27047c3ace0c60733c84cc01881c4e429a258b kernel-devel-matched-5.14.0-687.39.1.el9_8.s390x.rpm a5ed0cc77d1ee12885c6290fe7e4c3c9221bf01994c61cc40af01b9cef2c93e1 kernel-doc-5.14.0-687.39.1.el9_8.noarch.rpm d71ca0a30dc792876b9bdb0aa986f3cbb314c5f90cb083736927ad15d2297106 kernel-zfcpdump-devel-matched-5.14.0-687.39.1.el9_8.s390x.rpm e9378df048dcfc630a45e23a9f6309d4f4ee50317a0783d149360ff009a020e4 kernel-debug-devel-matched-5.14.0-687.39.1.el9_8.s390x.rpm f841ddcbc0d38f2dd9c8e4dadbf8fb190fe76ffec2ed5d687270be650aff7901 ALSA-2026:54487 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624) * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299) * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289) * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow (CVE-2026-68580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default freerdp-2.11.7-7.el9_8.5.s390x.rpm 08881512bbc00e8c6fe1c295e32619902c9b4254b559bebaac5e1c6a8f79289b freerdp-libs-2.11.7-7.el9_8.5.s390x.rpm 804a8409970fa97a300f2a7edda53c31c738fae773b10de9651d89c9ce543893 libwinpr-2.11.7-7.el9_8.5.s390x.rpm 8e8d6f05daf711d7c0638ded81ca49c1f09d6df91eea3a69cafe16a3fa7327e2 ALSA-2026:54510 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331) * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321) * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind-chroot-9.16.23-40.el9_8.8.s390x.rpm 1f2ebc5e73c695f72f94a6d424827ba7b8f06db0125e0b032915ecc67594bea0 bind-utils-9.16.23-40.el9_8.8.s390x.rpm 46aa293fe967eff9428591cdb4794f7b1cbe5d8ea58323a87e82f13c16e262cc bind-dnssec-doc-9.16.23-40.el9_8.8.noarch.rpm 6433eff2e76b241a99cc9a386e2fb06c5d9533e22a413bd4d862fb6109857dcf bind-9.16.23-40.el9_8.8.s390x.rpm 74c7c201475708cce87e6d0cd22ca67c353d5255889f0912cd97a7d7e1dfc311 bind-dnssec-utils-9.16.23-40.el9_8.8.s390x.rpm 81e43e597c5efdca947721c72a63e136ccd8e793712ee8139c206f8103f86395 bind-license-9.16.23-40.el9_8.8.noarch.rpm 947b2ea665eca12f5c7c9ba9da27dafee27caedc3d5cc453f49e00d2dceab840 bind-libs-9.16.23-40.el9_8.8.s390x.rpm 9543ca3b624e56977d5ba0b421005fcf53a72ccd1b27408ad2696a02475ffb27 python3-bind-9.16.23-40.el9_8.8.noarch.rpm d26933328930f69a07eaf5eefcaa302fc57416f02a419bd5932fbba18cce169e ALSA-2026:54571 Copyright 2026 AlmaLinux OS 0 1 Important

dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition. Security Fix(es): * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dracut-caps-057-120.git20260728.el9_8.s390x.rpm 3408b089a754d0cbf307305264297915ceec79ee0fc1bdb88b83049bf19da02a dracut-live-057-120.git20260728.el9_8.s390x.rpm 4d89456c8be63b664e85c35d3c61082382d2a835a85e598a78f6732d2af53783 ALSA-2026:54574 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.130 Runtime version: 8.0.30 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.130 and Runtime 8.0.30 [almalinux-9.8.z] (JIRA:AlmaLinux-235471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-apphost-pack-8.0-8.0.30-1.el9_8.s390x.rpm 22c82f848e2852c15bc0080588f3b30c77128615476b8d2abe6455b422926c6b dotnet-hostfxr-8.0-8.0.30-1.el9_8.s390x.rpm 53b7f7d98c992c26c6d253e1260d71837cb5d850e5f6a74ee4e15c418fc4012f dotnet-targeting-pack-8.0-8.0.30-1.el9_8.s390x.rpm 5d2f9fc2a67ee35ec9cd7904c8d3cd430664b7655fbc2769fda2b54db8cebeb2 dotnet-runtime-dbg-8.0-8.0.30-1.el9_8.s390x.rpm 614cbe209544073eec8521d7bb597e5f6e8504acb582b6fd6b918c939fa5cbeb aspnetcore-runtime-8.0-8.0.30-1.el9_8.s390x.rpm a129824ca0fe16f3f4bbe85d2401704f4cf2203029755ba4c8ac36c8fa29d467 dotnet-templates-8.0-8.0.130-1.el9_8.s390x.rpm a9e8b993e14fe498a00d87adeca6d46012ba76a157f008775507c346babe6f62 aspnetcore-runtime-dbg-8.0-8.0.30-1.el9_8.s390x.rpm c1839e6d94b6a17104d5c90f239eb5402365a23bb2112fe679b31e1c8752deed dotnet-sdk-8.0-8.0.130-1.el9_8.s390x.rpm c4703572fb54156beaabbde1fd52392a4f347be467924393d3eff12b5b8fcd8b aspnetcore-targeting-pack-8.0-8.0.30-1.el9_8.s390x.rpm c523ce41aedd653983a9c0fc7519ae9fb4517fb49e537f60ddbb8a746248972c dotnet-sdk-dbg-8.0-8.0.130-1.el9_8.s390x.rpm ce6d580ec00ecdd8dc0b27643b55a7639515e9e66bbd207feb98f68b1dc3c4c6 dotnet-runtime-8.0-8.0.30-1.el9_8.s390x.rpm ce7033a4c35236af78f3ec5a16724a505c19f1b7d2d988980d2ef563240eb4ad ALSA-2026:55423 Copyright 2026 AlmaLinux OS 0 1 Important

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) * 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) * 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default 389-ds-base-snmp-2.8.0-9.el9_8.s390x.rpm 42cdd8395df5f71523f606b3d17a16fb6440b2f5d400ab2b5e591bf875b9cf2b 389-ds-base-libs-2.8.0-9.el9_8.s390x.rpm 5c06918dd715dc9588d99abbddeac9219c1474721d59cd28a7f345aa11fc8a82 python3-lib389-2.8.0-9.el9_8.noarch.rpm 94aef5c4492dd0017c07a974db60910e4e300449f1b5765b51bbc57b93310f83 389-ds-base-2.8.0-9.el9_8.s390x.rpm 9d35078b305e55974601c3e423d63886cef47daa1762bb34bc5190566e9021ea ALSA-2026:55436 Copyright 2026 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433) * gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gstreamer1-plugins-good-1.22.12-7.el9_8.4.s390x.rpm 6673d8b5291a9e1a1bfaf8c0496aa07d831a2b6c0aee26170eff7e717eabfb8f gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.4.s390x.rpm ef303b72c3701a97f7647e85ea2f2485cf310bfce38ba13df5f4e5c6391d593c ALSA-2026:55439 Copyright 2026 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication (CVE-2026-1965) * curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect (CVE-2026-3783) * curl: curl: Man-in-the-middle attack via SSH host key bypass (CVE-2026-9547) * curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libcurl-devel-7.76.1-40.el9_8.5.s390x.rpm 255422508aabe8ff8dd88efa9f58a38352d82e6fc7edbd3cd79bd17a1e3df172 ALSA-2026:55440 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default glib2-doc-2.68.4-19.el9_8.9.noarch.rpm 3be03920c4cc51ab48f65ffa0c62f9afb51c928c3c6caa8ec0f2a86ccfc1214f glib2-devel-2.68.4-19.el9_8.9.s390x.rpm 490a626fff5235458e8cf68730a82e161ee077bcc1ca6d04ea20063f8032172c glib2-tests-2.68.4-19.el9_8.9.s390x.rpm 584c682e7c8d9ee2b790175ec112fd9915ac92da7c39e71dbb9462aff17add78 ALSA-2026:55442 Copyright 2026 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331) * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321) * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind9.18-chroot-9.18.29-14.el9_8.8.s390x.rpm 0b439bf641bf2571f1aaf57b75fed532ca9f545a7aa194e10ee8c564dcbba670 bind9.18-utils-9.18.29-14.el9_8.8.s390x.rpm 3867cfa20ace1c45f3338f1dfa4bfdc8fdf54d66387f95ff129a0e2fa001e3cf bind9.18-9.18.29-14.el9_8.8.s390x.rpm 7cb0ee2959000c1beef7e2e46ee69b5e478fd78dcfe123f4d2abb1a11dd9470d bind9.18-libs-9.18.29-14.el9_8.8.s390x.rpm aa32f2847847895e4bef8ded69fa2ee204552e77ff282c6e8fa9bdc3096295c6 bind9.18-dnssec-utils-9.18.29-14.el9_8.8.s390x.rpm fefb49653a1461fc3d12597476fe7939eee6068ad0211e08f2bb781b6c594eb7 ALSA-2026:55447 Copyright 2026 AlmaLinux OS 0 1 Important

libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libXfont2-2.0.3-12.el9_8.3.s390x.rpm 06981a7e978f02dd1bd51b8a8a78553978e407bd4ef358466d998ae280c53280 ALSA-2026:55601 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function (CVE-2026-14257) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default v8-12.4-devel-12.4.254.21-1.22.23.1.3.module_el9.8.0+291+0bb98cce.s390x.rpm 2b34032c39ff68fce649bde556084f8e9f43bf618629a12a1eacac01e72e0582 nodejs-nodemon-3.1.14-2.module_el9.8.0+291+0bb98cce.noarch.rpm 36bfb4903244fdf5e11e5ef3cf579bd330a0b7dc8b53b9d7e7a3d490ff6c1e4c npm-10.9.8-1.22.23.1.3.module_el9.8.0+291+0bb98cce.s390x.rpm 454df8f00ccc22be799add6a6184de670baecc345bc40e9daf0298995797e109 nodejs-full-i18n-22.23.1-3.module_el9.8.0+291+0bb98cce.s390x.rpm 4ba24124dcc939c3c6160ed9d42fab5befcd5e94351ad21c0dac53757da1d9a8 nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 nodejs-docs-22.23.1-3.module_el9.8.0+291+0bb98cce.noarch.rpm 80351d45622e81ab7e34b6e82d9da149a69bd9d62175482b820f275532fd9695 nodejs-libs-22.23.1-3.module_el9.8.0+291+0bb98cce.s390x.rpm c61ef8cf078b5cb369ae0c84d464c97154963e8182791237c59a7dfa5bd5c91a nodejs-22.23.1-3.module_el9.8.0+291+0bb98cce.s390x.rpm f3f547297ec92a31cf24aeaa9043ba2c0b3df605cb78ccc7ccd4d96ddb855f58 nodejs-devel-22.23.1-3.module_el9.8.0+291+0bb98cce.s390x.rpm fd58e20030e384e99c0c31a936d3244bf0056bc8c07ed59755863bc5bc555bf8 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:55603 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function (CVE-2026-14257) * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification (CVE-2026-54272) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-libs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.s390x.rpm 14ab5005040ca5ddd64e0979035745ce4dd0596a55b5963847d6ac619b3f5cbe npm-11.16.0-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.noarch.rpm 1b005d31fb45adddbdee96b5dcf17f14a5a7ea61afd6780ff3735b33dfa864cb nodejs-nodemon-3.1.14-3.module_el9.8.0+292+f4eaf8b2.noarch.rpm 34593bae84e3eda22d3c85db93eb84f883d07844a6d2c91217637b2c000e7e3b v8-13.6-devel-13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.s390x.rpm 4a22b4ad7fe1194c5ac2729a7ce49cc532d88487d9059be9095b3f184dee6579 nodejs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.s390x.rpm 66bb36d71c2320bbdb6bb9af0d767e4de8501a83d1d50cbaa6b01ad821603f2a nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a nodejs-devel-24.18.0-6.module_el9.8.0+292+f4eaf8b2.s390x.rpm 8a911dcb1c65ab0ca7ea5d09394032c7851f45a837a6a4aaf464339903ab8726 nodejs-docs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.noarch.rpm b88690db148d544aa4ad64b894f87f220091e46636c3caf1eea2c6f664f8ece2 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 nodejs-full-i18n-24.18.0-6.module_el9.8.0+292+f4eaf8b2.s390x.rpm febbf75ad135ce9d972a985d8f81c90740e1d149140f62946080f44ec7d4b619 ALSA-2026:55740 Copyright 2026 AlmaLinux OS 0 1 Important

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524) * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526) * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules (CVE-2026-16527) * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pcp-pmda-sendmail-6.3.7-8.el9_8.4.s390x.rpm 00376cab1a09b61d7029c0ac4981599f5b24698cf615c0991d628d469e411975 pcp-pmda-activemq-6.3.7-8.el9_8.4.s390x.rpm 00fe0538b2a7984e1bb5b2be0a8a3e2570f36b2c6b9205457b3428e2ec3bd0e1 pcp-import-iostat2pcp-6.3.7-8.el9_8.4.s390x.rpm 06bb36d64f98248e69c477b818c3289c8fb9588d04dac9886a3e697688f09251 pcp-pmda-trace-6.3.7-8.el9_8.4.s390x.rpm 08a8bc934031da9d79ff8081ed23c1f7309ec87ee1094343671362d880ade710 pcp-pmda-mounts-6.3.7-8.el9_8.4.s390x.rpm 103a35c97999718a9813e246b4932872469e22ca776d75be29b8a3861886c356 pcp-devel-6.3.7-8.el9_8.4.s390x.rpm 107e4af7a4cc9e28cd85ba2ae1bddbc8d6f4e866f21ce5fecc664f3dbdcc5b44 pcp-pmda-netfilter-6.3.7-8.el9_8.4.s390x.rpm 133808f53a9caeec3d8bd7f3ff6e735e1ffba49d7854225301bd9c93ec20adf6 pcp-pmda-systemd-6.3.7-8.el9_8.4.s390x.rpm 1890c6b2a74ee4a1f6b80d9010cd83f2b7299169b7903c2376f1c350d85d556b pcp-export-pcp2elasticsearch-6.3.7-8.el9_8.4.s390x.rpm 1acb6e7e3438e1cd441a6b39cf79a3d52c67d0291c36ea6df7c0c223f6db9f99 pcp-pmda-rsyslog-6.3.7-8.el9_8.4.s390x.rpm 21cd07bd1b0aa09a8b5a87f3872b00f2794a6cd96a3a8bb0b552d2fe763ebbe7 pcp-export-pcp2influxdb-6.3.7-8.el9_8.4.s390x.rpm 2612be0ad8f99a0c239eb0e45039c6561f1f43623428d479d9b70a6b19d59d01 pcp-pmda-gluster-6.3.7-8.el9_8.4.s390x.rpm 2617a65e6067a8821b00346e8cddde93dec9cd604d4b149a4a910ecc99834f05 python3-pcp-6.3.7-8.el9_8.4.s390x.rpm 26e5019d76b1d1ec8ebfefc457405300bc169e158cd1570a9a3f1131267f9f4b pcp-pmda-bpftrace-6.3.7-8.el9_8.4.s390x.rpm 2c296c0645315082bb1f1cb31d67ed7d9f9238d6f2ac3fc72c735088c99c1b4b pcp-doc-6.3.7-8.el9_8.4.noarch.rpm 2f0cf2eeac31be8021a1c7ff4a5333b80404bf0805966c814c95b338982629ac pcp-gui-6.3.7-8.el9_8.4.s390x.rpm 31c1d6028025069ae870fb255ea4bf8fe69c6fd1ef4b32f26b12abf164d95965 pcp-pmda-postgresql-6.3.7-8.el9_8.4.s390x.rpm 33c237b64b4d7f440adb7dcac9444ab46d11002a77d1f73217578af91c750acd pcp-pmda-slurm-6.3.7-8.el9_8.4.s390x.rpm 387f22e3e05d59c44e89a2e9a7ff709e89fa68286ce31920e2da5342fe69013a pcp-pmda-denki-6.3.7-8.el9_8.4.s390x.rpm 3e2afddae71be0a3fe5da98054b8fecf6ebb9e4cacb861bb8ee8f97610a8537e pcp-pmda-dbping-6.3.7-8.el9_8.4.s390x.rpm 3fc80723c5ca84770a1f6e5ce1e5db71efaf299fee9907e061abc3f01d0ecbba pcp-libs-devel-6.3.7-8.el9_8.4.s390x.rpm 41bbbeb8c11337d24fd0b55789654cb2e73c6c7aa04f1d60627d1ccd4bcd6527 pcp-import-ganglia2pcp-6.3.7-8.el9_8.4.s390x.rpm 41f606557242cd69f34cc8b5b91e7e24ca5677bf898d84c456192fac8c93a7c8 pcp-pmda-statsd-6.3.7-8.el9_8.4.s390x.rpm 420d31acfe2612d306cb415e0d45a8b3f1b94d88c062fd1fd7100a6811f2cc6f pcp-export-pcp2spark-6.3.7-8.el9_8.4.s390x.rpm 4297126e507b4ec612a546675f5816e208bbc53d74c520a915252eabca3ed7a4 pcp-pmda-smart-6.3.7-8.el9_8.4.s390x.rpm 443d42fb21110ec5069e18fd7a65f8d7d0acc543e93462fdc2e14d7754157b2c pcp-pmda-bind2-6.3.7-8.el9_8.4.s390x.rpm 4a96104d59b96aca61d79fd15853b58081e05f7930296c6c8e3fd5d7f802a164 pcp-pmda-nvidia-gpu-6.3.7-8.el9_8.4.s390x.rpm 4b419f3230625abcfc962f1d501044e2782ec068296987084f31a196c33476a3 pcp-pmda-json-6.3.7-8.el9_8.4.s390x.rpm 4b702c4c4da1954fecea3fb867e8fce501b1cb2c94ce5f90020aff98d6fd31b7 pcp-pmda-sockets-6.3.7-8.el9_8.4.s390x.rpm 4e9afc68f0fca66a3240a89d5a470aaac0312b070e86a5d2b7b345b6bd0ab7bd pcp-pmda-elasticsearch-6.3.7-8.el9_8.4.s390x.rpm 4ead6591c7d5e0a80d19e054523f5bbb785b78ca724f35d0c09c18e2b67e4f03 pcp-testsuite-6.3.7-8.el9_8.4.s390x.rpm 50b33bcf279f65c5dc3f3b2c9c4f9d7dd55be433edfcfbfec3328eac24c1cbe4 pcp-pmda-mailq-6.3.7-8.el9_8.4.s390x.rpm 5380be053eeb5e5e5a949ae2585a656271b974c6846e7e6f5d90be416da7a131 perl-PCP-PMDA-6.3.7-8.el9_8.4.s390x.rpm 53f4562d38db247b423a07650deb88aaa5d3cc1bc511b72790bd264db5514285 pcp-conf-6.3.7-8.el9_8.4.s390x.rpm 551ab49499223095443c45ceaa0f45865d31b0b68ccd789f686bd437d9f7d96a pcp-import-sar2pcp-6.3.7-8.el9_8.4.s390x.rpm 5838e0e73ab0689989f5985fcf9154341e07abf3ef4e5dbad0a2eaedc0dfcb10 pcp-pmda-lmsensors-6.3.7-8.el9_8.4.s390x.rpm 5a7a210d4970873a64e8520cc1be9b4c30f3d5da57aa5a59240f1a2cf8dcc047 perl-PCP-MMV-6.3.7-8.el9_8.4.s390x.rpm 5de696e004da3dfecf3d1e08b2fd518f24b599fdf596f912e343a92f6268cfe0 pcp-geolocate-6.3.7-8.el9_8.4.s390x.rpm 5fe48061cf782a917b1cadf434569fc868ad9e2d1c377afbaa73f866abe42c59 pcp-pmda-gfs2-6.3.7-8.el9_8.4.s390x.rpm 620dae7504da21eef9f0753b46a14b96147b4681cff7ddd51f3933eb42d1266d pcp-export-pcp2openmetrics-6.3.7-8.el9_8.4.s390x.rpm 6637b8ccd14ebec8f9ed8d87eaedbddc1b0583fada7b1b2380562d87376f6356 pcp-pmda-lustrecomm-6.3.7-8.el9_8.4.s390x.rpm 672a111bcf160f43b77bf04cf62db1888776484c04811c1789f81666bbfc160e pcp-pmda-snmp-6.3.7-8.el9_8.4.s390x.rpm 68d93e30fce859e2f0e8752cff62c0d10a508cf9ec53c6f799e8c5ad20d58921 pcp-zeroconf-6.3.7-8.el9_8.4.s390x.rpm 6a05d8efff7ebe409d5c9a9df6503914790acdb3fed1d5e5847fc4a7bd3c79bd pcp-pmda-lio-6.3.7-8.el9_8.4.s390x.rpm 6bd4e911fbaa35315226b281f2cb3ba5b9b91bdff3ad719ea173416e467bbb61 pcp-pmda-mongodb-6.3.7-8.el9_8.4.s390x.rpm 6ea603d1a25d06ccb6a21f860443dd77eb42f59eb411053b3a9eac53a9f32366 pcp-export-pcp2graphite-6.3.7-8.el9_8.4.s390x.rpm 6ff107483235413375754747856de4669f00f1bfc8efb4a8e15c7b5a5d9f6380 pcp-pmda-news-6.3.7-8.el9_8.4.s390x.rpm 79be2da5345626915a20788ec33a59a28688ca451bacda16dc7b3685210c3f77 pcp-pmda-postfix-6.3.7-8.el9_8.4.s390x.rpm 7a07cc889bcb95c467f488f1f1ebbd214fe8795cde407c307c82010633fb41b5 pcp-pmda-memcache-6.3.7-8.el9_8.4.s390x.rpm 7a45153d693e5c0374f6524c9a73fdafb70c9ea191f0a6cb26adbc32e313207d pcp-pmda-apache-6.3.7-8.el9_8.4.s390x.rpm 7edd1aeffae840c9e10bc4761ff256eaacd8b5f1e9c60c1615db52e7fd7187ef pcp-pmda-samba-6.3.7-8.el9_8.4.s390x.rpm 803209eec22af3681864acd666ae5c2161dc8a757b06aa646b317800eb1bc480 pcp-pmda-oracle-6.3.7-8.el9_8.4.s390x.rpm 85f4c153a748cc05a9cda6342bf12050cfb1556514002f9061a3430da3aa17b0 pcp-pmda-logger-6.3.7-8.el9_8.4.s390x.rpm 868808b5d13ec88633ddaed2ba52f87da58e4f105e6bbad7342e54d08d4c9b1f pcp-pmda-nfsclient-6.3.7-8.el9_8.4.s390x.rpm 88963335de49d7db4c26ee598c36573df26cff94c7da5f8fd11582c72652ad01 pcp-libs-6.3.7-8.el9_8.4.s390x.rpm 88fab89928691a631f1acdc9180278631d85f065bcad395240ff422c533bbd90 pcp-import-collectl2pcp-6.3.7-8.el9_8.4.s390x.rpm 89f4bf9390e2b35f7f429a723c74c26635670f5a49d848ba27864dcad24a4890 pcp-pmda-weblog-6.3.7-8.el9_8.4.s390x.rpm 8bfa3476a94ca6e034e114748e48bec4d59d3c10689008671b692e1ab94d887b perl-PCP-LogSummary-6.3.7-8.el9_8.4.s390x.rpm 8cb9573023c345704cd0b4b0b3015821a2cdfc16b23a919623f318a21dd9a021 pcp-pmda-bonding-6.3.7-8.el9_8.4.s390x.rpm 8f2c63d6cc91c8aab179bd31d17e2fc1e37c4374defe10901cc1ae569d6cffa1 pcp-6.3.7-8.el9_8.4.s390x.rpm 9141841913f7407f256d597bbf8cdb06ca5fc529569c354d2900420736c26261 pcp-pmda-cisco-6.3.7-8.el9_8.4.s390x.rpm 970edb339f5f1f77d8c41fb47ad79e360d81fb46b61e161fd091d476165a7f5f pcp-pmda-openmetrics-6.3.7-8.el9_8.4.s390x.rpm 98c8663181cee81ed6c5a396ee35c6bf4a615353afc24786dffc6acac3863983 pcp-pmda-named-6.3.7-8.el9_8.4.s390x.rpm 9951115543297ab737c4b0c6c36aec8c7bddbbda915e97766667f1c8c239504d pcp-pmda-roomtemp-6.3.7-8.el9_8.4.s390x.rpm 9cd992362313be98322c587ecade715aa5b81eed07928b19347cb57aba64938b pcp-export-zabbix-agent-6.3.7-8.el9_8.4.s390x.rpm a180e372d3418aecbd46c21ff034d7a3c827261993395fcd1dfd1f815c8dae0e pcp-pmda-zswap-6.3.7-8.el9_8.4.s390x.rpm ab2b1bf16944c8e989e4797c6980a37ae7aeb2cc73be35f4aa202670a14dfebc pcp-pmda-gpfs-6.3.7-8.el9_8.4.s390x.rpm ab2cb7ecde8b7efea73fbd02cb310ef18b1831972ea06cdc0681a6b185b200a9 pcp-export-pcp2zabbix-6.3.7-8.el9_8.4.s390x.rpm ad24c1834e92a37a8da1d05d9bcd69497d3cc513af6ce1fb092b806cd9f80be7 pcp-pmda-zimbra-6.3.7-8.el9_8.4.s390x.rpm af1aeba5093c0a71c728743183ec3d233db35f4c5cbbead4cd46947d1f67a6fe pcp-pmda-libvirt-6.3.7-8.el9_8.4.s390x.rpm b2761e0779d3baa15c27a888923dfd4d0b4eb9cf27ea0f85305d09a375014ee9 perl-PCP-LogImport-6.3.7-8.el9_8.4.s390x.rpm b2d5a8e87eeebeee4cd35626187959d5ebb1f7677772fb8f6de5fcd0cb01c1c3 pcp-pmda-hacluster-6.3.7-8.el9_8.4.s390x.rpm b3ac572e193685e8d9a28954e8fa09dc13d018c92dcb99a74e4baa3b98f49f37 pcp-pmda-mysql-6.3.7-8.el9_8.4.s390x.rpm b3c1eeadc70a0462fe0df978223470e29e5a9a1f6b331e57ebe0b108e9718f4a pcp-pmda-haproxy-6.3.7-8.el9_8.4.s390x.rpm b6286d6ea848215327c178418a2f9acb5a758a9323c5b374fd8ed82584b3bf12 pcp-system-tools-6.3.7-8.el9_8.4.s390x.rpm b6c219ee05a3a49774c8f05c612b5009a8103cdd6084d724bd5a5f09456e7ff8 pcp-pmda-rabbitmq-6.3.7-8.el9_8.4.s390x.rpm b765f96182151784cfe221832fd91f763fd75cc509b912494667750df7503074 pcp-pmda-unbound-6.3.7-8.el9_8.4.s390x.rpm ba20b93844ede75902b71f4943261b11397ea34fa0f4399450ba6e3efc8de1b1 pcp-pmda-nginx-6.3.7-8.el9_8.4.s390x.rpm c132e99a7d6dbd88bd061c33735d5aff3a65ed8aff2374fbbfac6f149532ad0a pcp-pmda-cifs-6.3.7-8.el9_8.4.s390x.rpm c47d6328882d922da1eab81e20b72ffb7a9ddc4b509a0ff7cafc59118a888ec4 pcp-import-mrtg2pcp-6.3.7-8.el9_8.4.s390x.rpm c89e1003e2bcdfa3813a835b96b788e5c7d3b85f20c82e7ab24f06dbacbed778 pcp-pmda-docker-6.3.7-8.el9_8.4.s390x.rpm cb4f2fde28656f962c46797bcf2514aabd3ebee19d8aa100fad2edff13663ea2 pcp-pmda-redis-6.3.7-8.el9_8.4.s390x.rpm cbf0d3e6abccc866d9fd741cf011b5e6e7498ff12c1ab4a4af7934f4a2952460 pcp-export-pcp2json-6.3.7-8.el9_8.4.s390x.rpm cca1bace169c5065c51bbd91185303382e8e70828fed8b323bfbd7c464ac556a pcp-pmda-ds389-6.3.7-8.el9_8.4.s390x.rpm d217df71cd5df349f876b457fbf00b2f599d2b60d52059b627c27a1472c687b3 pcp-pmda-pdns-6.3.7-8.el9_8.4.s390x.rpm d59c91d7c5265f808701a52e93dbc0caec57c1e037f1ece4e33919060a03ed8b pcp-pmda-uwsgi-6.3.7-8.el9_8.4.s390x.rpm d5d9b86f78463bc5273949d658de93ae2bc4977cf4bcba4766dc535b89c0a783 pcp-pmda-bcc-6.3.7-8.el9_8.4.s390x.rpm e08aaef8465260f5dd9928da5acd77b3f76954f068fbc0a495c86ef85d2eae94 pcp-pmda-podman-6.3.7-8.el9_8.4.s390x.rpm e1e504ce1eed8fdcdd7594454858b46769c562ff530444e48f1e4e585eed2fc4 pcp-selinux-6.3.7-8.el9_8.4.s390x.rpm e33268f02f41be1e0ed33ff700c68dad63f76795b894af45e2e34aedeeccc8be pcp-pmda-openvswitch-6.3.7-8.el9_8.4.s390x.rpm e3e706edc2efb7f0940ead87ad111c4c3c6ec954e4b34fe3a74c5510d7e60b8b pcp-pmda-bpf-6.3.7-8.el9_8.4.s390x.rpm e41798f584b3bf50cc40c0f06e8e25f4e334c22aff85ff2e2e0f100969516393 pcp-pmda-amdgpu-6.3.7-8.el9_8.4.s390x.rpm e5e80be8de75a7ee4c4d354dc98b9efa4337942c9e0214c8e90dcf557c0d29c5 pcp-pmda-lustre-6.3.7-8.el9_8.4.s390x.rpm e7a127e8d3b9f087f3f07d7dd5e3df774905d85660f03a8c483662d70d5b227c pcp-pmda-netcheck-6.3.7-8.el9_8.4.s390x.rpm ea433f34cfe1700d7ad78c437c770c5655c25a947f01cb6eefabb758b79bdb1f pcp-pmda-farm-6.3.7-8.el9_8.4.s390x.rpm ece2dc8b9f7cda26ef6775affd6d579b97a495689d98d963ef16690a435e30f7 pcp-pmda-ds389log-6.3.7-8.el9_8.4.s390x.rpm effa4afdefcd7e6d56806874111127841433bc03858e233b974b5c951949ec8d pcp-pmda-shping-6.3.7-8.el9_8.4.s390x.rpm f0372247cbb5452b21c1b908bd297b1afc099a017d0791ab5b4255b14e491854 pcp-export-pcp2xml-6.3.7-8.el9_8.4.s390x.rpm f0879a1ee866c2acd1cad088abfcb12a8dfcde6f9027f03679871d9a5b10a5f7 pcp-pmda-summary-6.3.7-8.el9_8.4.s390x.rpm f37212eb3d9673bc39ad43b684aa1276ba1bc3719261ce89087841278f4e5850 pcp-pmda-gpsd-6.3.7-8.el9_8.4.s390x.rpm f7848f270cfcb82389cb9485cab8a2192ef2745a098d95319bd5807dbe3cce18 pcp-pmda-mic-6.3.7-8.el9_8.4.s390x.rpm f90031ab63d12e3fdc1a19bca2d940ea962a5bcb5d2f03beebcad8c8404adb73 pcp-pmda-bash-6.3.7-8.el9_8.4.s390x.rpm fd6ab50fbd1069e32848a6c86671629da96faed90a9f3e9556a6c0074eb090f5 pcp-pmda-dm-6.3.7-8.el9_8.4.s390x.rpm fe1f45a34355ff09603e47ceb66f38c01b0e6b20afff242c21c2b23ee5c8dad9 ALSA-2026:55772 Copyright 2026 AlmaLinux OS 0 1 Important

haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions (CVE-2026-55204) * haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling (CVE-2026-55203) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default haproxy-2.8.14-3.el9_8.2.s390x.rpm 01ef72f42f6a398e19f1476a726782574ccb8b99c096105ec6d5cf65de385fe5 ALSA-2026:55775 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default java-1.8.0-openjdk-1.8.0.504.b01-1.2.el9.alma.1.s390x.rpm 0aa2349abded4230540c6bb901bb688d8b98ff3502a1e89cc300b523be97bccc java-1.8.0-openjdk-devel-1.8.0.504.b01-1.2.el9.alma.1.s390x.rpm 134094283f6e14b1959155fce5f34a035e0284901f6ff772895978cbd54292fd java-1.8.0-openjdk-headless-1.8.0.504.b01-1.2.el9.alma.1.s390x.rpm 35d58be2f9533a508790294f9a6d029f155abdee101cacaa378c0e0603a1a8e2 java-1.8.0-openjdk-javadoc-zip-1.8.0.504.b01-1.2.el9.alma.1.noarch.rpm 70213d0fbad4bca3f75cf0839a47219d446efe84e9537f89ac78ed5f6dc8fe8c java-1.8.0-openjdk-src-1.8.0.504.b01-1.2.el9.alma.1.s390x.rpm 70daf0524e95cbdf82ac80d4fddd9a6684931b66249633301e4b84f6a020cb9b java-1.8.0-openjdk-demo-1.8.0.504.b01-1.2.el9.alma.1.s390x.rpm e9946e239f43ece174f57c316b9c79c1c0c3eaa5014b42d507cc9640a5a8da7f java-1.8.0-openjdk-javadoc-1.8.0.504.b01-1.2.el9.alma.1.noarch.rpm fc80ad9aad73fd14ae873c4fc285642bd70fae86b34e36f1724c1154f7f1b63a ALSA-2026:55781 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default java-17-openjdk-javadoc-zip-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm 0e209ab83dfaba0b3588e673d37e5d958219121454431716dd1d7b48ba72cb38 java-17-openjdk-demo-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm 177476ba2f63d20ce35a42083cac448fbef35001b389e0c7aa4b9d0544a17c56 java-17-openjdk-javadoc-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm 1bed5ab78f562fcd2f2d36a1eddcfd857914bd42ac81ad79f8305388b3065e9f java-17-openjdk-static-libs-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm 374336724abef4dc587eba1f45669bd038bac77135229dfebc5e9bf6b05c9dd1 java-17-openjdk-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm 5238825646d836419321458eb95a59334be29f393b90d7a558abda99eb3ec083 java-17-openjdk-src-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm 75fa2a2ab1db6b4d19e65d3ed0347d2ee0edcc638c4ec2d91f1771d4d8763294 java-17-openjdk-jmods-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm 9af19b7a34b7a5ad79512be8d5b167e9b8bbf8284438adcec2851f6e1aa4a526 java-17-openjdk-devel-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm ad3c85ce211566679fe1d57558badb483c614f243813871fd30d4a8213c249e4 java-17-openjdk-headless-17.0.20.1.1-1.2.el9.alma.1.s390x.rpm d7b93e2f50583822b6b75c602c890c7719d676ec92484bb25acd5a38b2405b0f ALSA-2026:55787 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default java-21-openjdk-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm 0bf4bc2ca534fa872b779cf8b91267dd4be18350670ca84897bd694c19962246 java-21-openjdk-jmods-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm 1ecdf698cb2ceeddf0704908f6290d2e72119327610718a2e46ce2cfe669c6e4 java-21-openjdk-headless-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm 2d209160b477db6f02f021e90ae54a96f953b7c70d09e5840137e4a2c0076de1 java-21-openjdk-javadoc-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm 5b5792311d050c078743f2ee3c65921874416bc6ec05ccbc52936614082f94ea java-21-openjdk-demo-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm 82a48889d7c9a0e69bf4be6e3fbb173c54f11bc2766a0e9d87913a80391de45a java-21-openjdk-src-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm bf70d42c353528335dbbcadc9dc5258d4a25d553fb533469a44f7bd9ab55ca07 java-21-openjdk-static-libs-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm c4294ad53ac9776cf55791751b1d4568c40cf25e482ab8226e85b62b2a268662 java-21-openjdk-javadoc-zip-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm df6fd7d8f83cf6b5034db5da01e7f8b8b5856104b05f32f26febfe9136959750 java-21-openjdk-devel-21.0.12.1.1-1.2.el9.alma.1.s390x.rpm e53027a6155345bab56cc617eac67307bedd7fd4e1d1818d6d8ae3a8781b4efd ALSA-2026:55798 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Improve font loading (CVE-2026-70906) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default java-25-openjdk-devel-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm 0a331782799da1d950782e5ffc53952a31192ad89c8c701e74ec0ef35a21b0d5 java-25-openjdk-headless-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm 528dd9ec587b1f1d46bea35e5d430d70835b3ae1a2c6726db9d2841a3ba01e03 java-25-openjdk-src-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm 666f92c1c76bdbd6e1850edd1b69c8fdc84ba10fe4ffc9fd77addbd582e2db91 java-25-openjdk-static-libs-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm 9746452fd5727da8e7e987dbdbacd2ce77841d12eb8b4ee596567e5d510a9c71 java-25-openjdk-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm aeb72c324f12b054d16ba9035327ebf905fb6bff53e69a451d660777559e670d java-25-openjdk-jmods-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm ba4a67dc0a40ce0c8efdfd92b5126b851235e0d47b1eef60ac8eead68b652628 java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm ce43589bb46320c1a13a890f37289cb4146bd2859506691fc3ada1159e5f1a3a java-25-openjdk-javadoc-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm d506d0034ffe930f54bcc49ca1de930f56e1adba77a457e54b7007175fdb3e47 java-25-openjdk-javadoc-zip-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm ecb1b4193df8d73fafc5ca31c15cba551ee8f26b5ded396fc60651bdc461299f java-25-openjdk-demo-25.0.4.1.1-1.1.el9.alma.1.s390x.rpm f30d9ae6ac8e10c3092eb0fd080d03f3ac718ddbf601fe81840d2de6248d9696 ALSA-2026:55841 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes (CVE-2026-44690) * unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option (CVE-2026-55973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default unbound-1.24.2-3.el9_8.4.s390x.rpm 4514d2f88cd1e48a6e76daf1f78f1915388faddc33c52d8ba17412144e0f4d6d unbound-dracut-1.24.2-3.el9_8.4.s390x.rpm 4bd8329bc1f42c6d693ec399a43d25859a5e01f288f938ff1ed04831afd56db9 unbound-libs-1.24.2-3.el9_8.4.s390x.rpm a1aaf6225a4a1ff3fa87454a349ef97dc23c528d2f01f539b0fc1f30db573add python3-unbound-1.24.2-3.el9_8.4.s390x.rpm ba38efc95b250f740794d0d864e68a44391b38814f52eef181dd3d8569908ce2 ALSA-2026:55856 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.120 Runtime version: 9.0.19 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.120 and Runtime 9.0.19 [almalinux-9.8.z] (JIRA:AlmaLinux-235476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-apphost-pack-9.0-9.0.19-1.el9_8.s390x.rpm 101193076f915d459d201c361e71f012c85d0f39dcd33bce8685366181e39562 dotnet-runtime-9.0-9.0.19-1.el9_8.s390x.rpm 163c33851ce5831635cb5097ac4067271b7ea65389109639c1e1994063c1f93f aspnetcore-runtime-dbg-9.0-9.0.19-1.el9_8.s390x.rpm 1e50c3031e0ee7f4b481b214b7c52102244d8f6861549d423bd9e8fd4f28a789 aspnetcore-runtime-9.0-9.0.19-1.el9_8.s390x.rpm 35544a4d394cd515acab32e8bc445e0b98e1c8a57f05732afcad93254e99c312 aspnetcore-targeting-pack-9.0-9.0.19-1.el9_8.s390x.rpm 4a520c0d3150a4be7ab1a5f8383871fe81f1283a1a326ab5697f87e75d144f77 dotnet-hostfxr-9.0-9.0.19-1.el9_8.s390x.rpm 67fdcf3ce823265bd29b4b0e44b38ac098a026cb302d22139c8484cc2bfe81f0 dotnet-sdk-dbg-9.0-9.0.120-1.el9_8.s390x.rpm 794dd4728abfcf374bee66e39fde12a1890e8a3f025b4d31919e9916a2ef9c7a dotnet-runtime-dbg-9.0-9.0.19-1.el9_8.s390x.rpm 87e32e6ac08e1fcf86cabaa48a8d0339082277d17c205394048f81a7a1a83eff dotnet-sdk-9.0-9.0.120-1.el9_8.s390x.rpm a86a4389c9eec6bd725e5797137a93b08a5ee85b41dd70547c51d471e62a6a51 netstandard-targeting-pack-2.1-9.0.120-1.el9_8.s390x.rpm b5781d3bc83797e8ae129121a0924d86464a4af34931b680206dda7581460e3a dotnet-templates-9.0-9.0.120-1.el9_8.s390x.rpm c40b18ed42e86dee3d62075bb302b7f9c07a868c6312a04a88ee694ed35e03da dotnet-targeting-pack-9.0-9.0.19-1.el9_8.s390x.rpm dab0fdcc11e1e9fc6cfbdf6c67b3eb676ef899b66a8280febb54e3c568d1a5ac ALSA-2026:55857 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.111 Runtime version: 10.0.11 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.111 and Runtime 10.0.11 [almalinux-9.8.z] (JIRA:AlmaLinux-235481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-runtime-dbg-10.0-10.0.11-1.el9_8.s390x.rpm 0fb5461c671be7caf8e7f4496ff6a06366b35dceac3607cd4a702d3b466f4418 dotnet-hostfxr-10.0-10.0.11-1.el9_8.s390x.rpm 13c8a770fa7bf1d87a793bfa01c5ebe84a3c0812a8223bd62019795793eded11 dotnet-targeting-pack-10.0-10.0.11-1.el9_8.s390x.rpm 16532b6d5b4add2eacf70b6390de2e8b3b51c70dac535af7c26c122de130e36c dotnet-sdk-dbg-10.0-10.0.111-1.el9_8.s390x.rpm 3513dce1707f7ef7eda46de7413d7c35a27482be18e05bc3dd7423be9d4e163b dotnet-host-10.0.11-1.el9_8.s390x.rpm 7cdc42277a357def0f0cc1d0d27ee0174c9090a29df2f8bf5133601dd28e98bd aspnetcore-runtime-dbg-10.0-10.0.11-1.el9_8.s390x.rpm 811e130daba7aeb4a4eed9bcf3d6d519de6c6113855b9e770b66dfdc1751c442 dotnet-templates-10.0-10.0.111-1.el9_8.s390x.rpm a27022ccb58cfccba8fdff762385a39a88e0e44bdcfd4435d74590453c493304 aspnetcore-targeting-pack-10.0-10.0.11-1.el9_8.s390x.rpm b64bc4257d0d898c0817120df42106daa6088e7b08f142d5990e1036d9c5930c dotnet-apphost-pack-10.0-10.0.11-1.el9_8.s390x.rpm dbbba4d4b2d769dfa31aebc9ab01a66afe3337adbeb8bad3d7d8da1af8e1ba48 dotnet-runtime-10.0-10.0.11-1.el9_8.s390x.rpm ddbcefd7a4365bd84213c5cf3e33938d421040160d67dd58671663581ed5ff54 aspnetcore-runtime-10.0-10.0.11-1.el9_8.s390x.rpm df11bbce439af57ac01f7b1c09e108067a4dbaab1abfc9e67c5a7a74200d1ac0 dotnet-sdk-10.0-10.0.111-1.el9_8.s390x.rpm e5b0827d9712c88831d6d25fcf4acd051dd9415a080893bdac793d09d103c597 ALSA-2026:55865 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387) * gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.s390x.rpm 940d9a2573c31b2877fe4983970e54e5a8f183bbcdcd0c798a91bb61d0663df0 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.s390x.rpm c285b57329bf9cdf38ca649e8d3b8e4f49d4fc509cc0d65358028831f56f145e ALSA-2026:5599 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nginx-mod-mail-1.20.1-24.el9_7.1.alma.1.s390x.rpm 00945e3d275ca6211bd34ad96b2eab4a5548bbe77b1bd44fb9992ecf0bd8ceab nginx-core-1.20.1-24.el9_7.1.alma.1.s390x.rpm 232f5a89dcee8ac6271744225f02d7afeb1871dc3e3749039712d956b291af70 nginx-mod-stream-1.20.1-24.el9_7.1.alma.1.s390x.rpm 689e76b721eecb37c50115fea665599a6a274537575cc1548f82d15930d0db8d nginx-mod-http-perl-1.20.1-24.el9_7.1.alma.1.s390x.rpm 6e000eb0ed96d291250b994929b070c24dbeee0ca72d9c78d37c621db2755d01 nginx-filesystem-1.20.1-24.el9_7.1.alma.1.noarch.rpm 7dae549904b5701335273d41029de59f878d9869e1234fc20ae0f1d03596f001 nginx-mod-http-xslt-filter-1.20.1-24.el9_7.1.alma.1.s390x.rpm 8ae934548a3263173b5ab9ee79cacd71c05a5c11e3acd2c2588412fe07f491a0 nginx-all-modules-1.20.1-24.el9_7.1.alma.1.noarch.rpm 9bc3e6946e0b2d1e943885546354ef6e8adeb1474848f060f0156dbebe276b0c nginx-mod-http-image-filter-1.20.1-24.el9_7.1.alma.1.s390x.rpm b1fb92de5664324b61825816312b81ea1551d0468c4c8933ef2d25bfe98e1137 nginx-1.20.1-24.el9_7.1.alma.1.s390x.rpm fd67d1b1f8294c921620ca017c9346a195cd8f43fde8928066dc0f84a28c937a ALSA-2026:5602 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default vim-enhanced-8.2.2637-23.el9_7.1.s390x.rpm 57979eedcede030066dbcf46f7d14634e60816c8d439ec0ecb0b7249da295eed vim-common-8.2.2637-23.el9_7.1.s390x.rpm 633658cb9e62ec6f9ffbd82fbe6cb59c0a695ab6bb030f425e73fcc86a7bec23 vim-X11-8.2.2637-23.el9_7.1.s390x.rpm bae7cd20b8739c00efe063ae3abbba09fae005d1f39b566ed441f569f1d51fff ALSA-2026:5640 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948) * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968) * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default mysql-errmsg-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm 43b2e927250e941eda0c95183368842b966dcae63133c155c3ef362324e82b50 mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm 5fe0dfed82fffd2bb51eb983f63cc25992307c81ad41983fa696c0dc17ae75a4 mysql-devel-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm 65e17c77600d4403d2362662096a2092356afc3480a33c7d2dd2880a1f1209e4 mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm 69e976d54c4bc862ea946aa1957a4af06ba625136f6734651e78787b4180585a mysql-test-data-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm 7f198cea09183f443e64a26121b6203a8fe55c9e6e8e82fdd9ab3a567d843589 mysql-common-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm 81a027ddbcfb8c0e798110bc79852f97c31d9934b416fae86a3b14b0a6046cc2 mysql-server-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm 87a81259ebe3dd893271e8cb1f60ec98e42954a34bcec1304391b6f24ddf2648 rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.s390x.rpm 8c0a757ea82924ecf340e621f29cb6d7322ebd996c0b7e05116c51486e2b6c37 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm a6a291c26e1b08f26ceec3afe3bb4650cb21e203ce04cff2350db34cbd12e24d mysql-libs-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm b1fe7cfdd1548e41de5a399560e0a16f5b19d9b7384845aed7c21cd6452e54d2 mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm bad50cf06e6ea4327ddfa8063a98361e493a8fe7dcf921be55ba12177dac540e mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm ce7c078f962fd614387a5a86f7b229eb57758d44e95f0f1ad2cd522019019b61 mysql-test-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm f806b6448185efd5bcdd2c36b767f5275c9c6438210cda2570cdd86f6ab32f7b rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 ALSA-2026:56970 Copyright 2026 AlmaLinux OS 0 1 Important

perl-Date-Manip security update

Date::Manip is a series of modules designed to make any common date/time operation easy to do. Operations such as comparing two times, determining a data a given amount of time from another, or parsing international times are all easily done. It deals with time as it is used in the Gregorian calendar (the one currently in use) with full support for time changes due to daylight saving time. Security Fix(es): * perl-Date-Manip: Date::Manip for Perl: Denial of Service via CPU exhaustion in date parsing (CVE-2026-60075) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-Date-Manip-6.85-3.el9_8.1.noarch.rpm 359a33e31ca3b8143e9143264dd3d3b9ce02f0bda32b3d865699bd050119a734 ALSA-2026:56973 Copyright 2026 AlmaLinux OS 0 1 Important

mysql:8.4 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145) * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936) * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186) * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315) * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096) * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163) * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185) * mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178) * mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183) * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182) Bug Fix(es) and Enhancement(s): * [tracker] Rebase MySQL to 8.4.11 (JIRA:AlmaLinux-188045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mysql-devel-8.4.11-1.module_el9.8.0+295+1681b9df.s390x.rpm 03fddf086a93b789a9ca681282b4fb027d1183daa04495f1cd6a2ce00ebc9227 mysql-test-8.4.11-1.module_el9.8.0+295+1681b9df.s390x.rpm 103c63774542529c30bcd08b52368f89a59b19ac657eed1f71d993c88ca0f009 mysql-test-data-8.4.11-1.module_el9.8.0+295+1681b9df.noarch.rpm 38c63cee1e72da103bff5100ff9a99f01151d0cd470d07af75fdf02bef332b1e mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm 69e976d54c4bc862ea946aa1957a4af06ba625136f6734651e78787b4180585a mysql-errmsg-8.4.11-1.module_el9.8.0+295+1681b9df.noarch.rpm 7a864d6adc01cac0aa1bb90e99b7addaa5201ac09694dd539c74d02c53ac1034 mysql-libs-8.4.11-1.module_el9.8.0+295+1681b9df.s390x.rpm 81c403439c79da131652c5665a167856fe60aee3bad5d945e25e93d0cff17121 rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.s390x.rpm 8c0a757ea82924ecf340e621f29cb6d7322ebd996c0b7e05116c51486e2b6c37 perl-DBD-MySQL-4.053-3.module_el9.8.0+235+a38ba90c.s390x.rpm 9721488d22bfe9d43fa97ac410b4a3f93a0e2d12270603179553c89c960507c3 mysql-common-8.4.11-1.module_el9.8.0+295+1681b9df.noarch.rpm 99781d1f09005cde55db8c299e4b5616461a434c7c02d5f5fe3c0a5099c1d050 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm a6a291c26e1b08f26ceec3afe3bb4650cb21e203ce04cff2350db34cbd12e24d mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm bad50cf06e6ea4327ddfa8063a98361e493a8fe7dcf921be55ba12177dac540e mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm ce7c078f962fd614387a5a86f7b229eb57758d44e95f0f1ad2cd522019019b61 mysql-8.4.11-1.module_el9.8.0+295+1681b9df.s390x.rpm dd8585229cfb7484c079bad6742d8dd612ff6c220e9d2347e391fbf9d0072c85 mysql-server-8.4.11-1.module_el9.8.0+295+1681b9df.s390x.rpm e30ca4973e66e479405ef7ac8eca600c634668398e2e696b4e4aa0772248c8af rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 ALSA-2026:57149 Copyright 2026 AlmaLinux OS 0 1 Important

ansible-core security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): * ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default ansible-test-2.14.18-3.el9_8.1.s390x.rpm 6e56a91c504a95bcaed614f3715f3d025e66e0a0c671142db532f103cd88b036 ansible-core-2.14.18-3.el9_8.1.s390x.rpm d4727fb6619bce82321edf39c46cbd7d9c5fba529a44fb779b65cf65e3d1d0fc ALSA-2026:57252 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233) * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-debug-devel-matched-5.14.0-687.41.1.el9_8.s390x.rpm 0d5412557486e95ba28bd40a702837158c1fcd200cccd85d8fe3385a6a42b48c kernel-headers-5.14.0-687.41.1.el9_8.s390x.rpm 22ee635ad1dd28f7182b7b6b5339450501e74c2f21bac52668e31de2cbd1770c kernel-devel-matched-5.14.0-687.41.1.el9_8.s390x.rpm 61f80b1c0c1d413c7791d367bae9127205d96cdd1d653c20eae0c1f2ca04e5c4 python3-perf-5.14.0-687.41.1.el9_8.s390x.rpm 63f7169e0ad634de3a5d42f52c333433dbf9eca770b8d7ce4b24d1b1b6941880 kernel-devel-5.14.0-687.41.1.el9_8.s390x.rpm 757335edaafae6c5f889d67649bb6a896e511a6f174949ac0990f2ff18118626 rtla-5.14.0-687.41.1.el9_8.s390x.rpm 9e9792e957c12d30e0eb04e5dfffe41a30c2836bd9b12eb26164f5c0b2c7d641 kernel-zfcpdump-devel-matched-5.14.0-687.41.1.el9_8.s390x.rpm a7b1c780074c7e0b21de08ca74b4dad8600ab2aa407254308ac11ed3f3879575 perf-5.14.0-687.41.1.el9_8.s390x.rpm cf6944a1bc16945bcc659cefbf8c805be543eb5d29d34a28e643d31384dfc18b kernel-zfcpdump-devel-5.14.0-687.41.1.el9_8.s390x.rpm dd4e6526aa7da9206c4cae76b6155a4e49b710b6a13e42ebc00c34b9b27d3692 kernel-debug-devel-5.14.0-687.41.1.el9_8.s390x.rpm e89afb0a113cda91a3eb629742a3c0ff8527d473d9d809a4e4e6708e3d916f28 kernel-doc-5.14.0-687.41.1.el9_8.noarch.rpm fa08c4e291121a9371826286972c2cce15dd036a3e6ed5303b91aa12bdd265c3 rv-5.14.0-687.41.1.el9_8.s390x.rpm ff670b58e8fbb20342c69554361d4f62a18164ad3b8b814cb3d4a37e1db60fc2 ALSA-2026:57539 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) * php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223944) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-pecl-apcu-devel-5.1.23-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 0094f50d3048b975c70287c92a9973a31fc33f6179f439bf4842596b60b0fffe php-devel-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm 140a360dab0279ca888d12f36b81abb59d99a1b1b623381536f4ce427102c4dc php-odbc-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 160214f1aefb50050ca0b7f6885797b9962a8e6efceb7f500c4046d227dac306 php-ffi-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 1f06f4cb6e87c7492ce0feed79bade6b012e9df89458b7e4e671eeb4881c5b20 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm 2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552 php-soap-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 3188c26d9a5c400983db616b81d07ebb4ed0c99256265e85106203bc872d24ae php-dbg-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 35e936d3315bd45c11667472aacea53be51854ccf394363cf77b839db716c47a php-opcache-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm 3ef6bbba2f15badee21b7e88ec60a5834ecb1f7561f8e3ba247e90ed3f49f3aa php-ldap-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 40f2339abae4717b662242235fd5b756889d3565d2ae612039505ebed20e238f apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-pecl-apcu-5.1.23-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 43f5e8f4e33fabfafba9506c2936a8e768357a95e51e831cdcc59fb24e683dd1 php-cli-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm 4c1c66ac120503ad1ab7fff094213ee9feba3512aed247d9353041945bf0877e php-fpm-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 576acf104d911607c2ec8466d82745bf0cc2d5e666244d2cf5454948a5882b11 php-enchant-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm 5a4b0c35479b812be281ee817882a1703cc36bab963b389ea6cc3c216b266acb php-process-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm 615e50386176ed8c47e5c8ac457e7f64697b67b49ee0a86f21c6a9fddcd0be93 php-xml-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm 6247bad8e25111bcadfaf72e584ab6bf38d817b4b815b1cf611a7d9e4282ea99 php-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 67ab516c62d50906fad6e7f44a8096278bfe6ea91414383815417cfbcf0547ad php-gd-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm 6cc57af426a1a6271ee1a1bb447a894067a57099b1122e696813e9a07a38366c php-snmp-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 6fb9cad3dcabf9c24af5e839f7ebe264823387ae15752196185d11eb6a91cf53 php-mbstring-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 760378e6a7051522767a846cfbe7535148162f78e6dcd697ea7e6c06b49c91e9 php-dba-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm 8fca71ae3dc3d360bd61cf3a97d97b05284730a5fa5e93c33775b285fced5117 php-pdo-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm 92fdbb9729ad304fe1adbdd4b1441cffa781dde1a6575d814d9ea5c763efa3f0 php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm 9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2 php-bcmath-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm a41da1539c5dc9c85201562705c8fd67d65ac5170d17ce40719b07bb8a4ede67 php-pecl-redis6-6.1.0-3.module_el9.8.0+257+89d727f2.s390x.rpm c23a465fb14d28c386d8d6caf29fa725d546921db73d1ca45784315acbb0cde0 php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22 php-gmp-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm d16209b1a7e2a70ec151020cb3babf744aa7cb6db089ca9cb34d78a9751da132 php-pgsql-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm dd219510bb95c832f015893a7cd94e90ccbc1db4ad7e4ab9f513f955fd515a49 php-common-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm e60769790922b12f7e9bc10678e42582fe03b94f922cee745919ef56d56c7ac9 php-intl-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm ee741338e68565c2d3fcee7e4d1ebd6e0ba0ea6434090b5fac087410b640479a php-mysqlnd-8.3.33-1.module_el9.8.0+296+9aab6c42.s390x.rpm f7ab67f35892cc20021ee77536c18d4c5ec99df348a55808b0d799ac49149adf php-embedded-8.3.33-1.module_el9.8.0+297+88e7f1bf.s390x.rpm fd67e2e44efa826b5d1cb582376525dfef15c549298d5e919cf10c144f5a6369 ALSA-2026:57600 Copyright 2026 AlmaLinux OS 0 1 Important

mrtg security update

The Multi Router Traffic Grapher (MRTG) monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fix(es): * mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation (CVE-2026-72694) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mrtg-2.17.7-12.el9_8.1.s390x.rpm 4830f9f34708ceb4afa3e53f5e9ff30c24894100b6bfe58eb6ec9417e51e68b3 ALSA-2026:58560 Copyright 2026 AlmaLinux OS 0 1 Moderate

cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. Security Fix(es): * libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG (CVE-2026-64612) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default cups-filters-1.28.7-27.el9_8.s390x.rpm ec28411363714a9b55797fde0e5d5138adb35843b2022fa61c16fddeb341f562 cups-filters-libs-1.28.7-27.el9_8.s390x.rpm ee10e8592b48be07fee93747aa8eddb7ae387e5a93fa1010ad2c618844c5a035 ALSA-2026:58572 Copyright 2026 AlmaLinux OS 0 1 Moderate

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default NetworkManager-cloud-setup-1.54.3-5.el9_8.s390x.rpm 456ecf96c0883a4893d7a6a40df066b3d473dac87b4c0f8330f62a18ad1bc790 NetworkManager-ovs-1.54.3-5.el9_8.s390x.rpm 941e0d164fed0dc1c228fcb25571ff2640047c571b1d72fee6a7728e24ca3b6d NetworkManager-config-connectivity-redhat-1.54.3-5.el9_8.noarch.rpm a0baeed81520696adc7e95383d698538e44f0a90b2d17928a2223ba00fb74352 NetworkManager-dispatcher-routing-rules-1.54.3-5.el9_8.noarch.rpm b37ba551c6f4b3afee1a51cececb09bf99f0e6e2e265567a0df920155d04fb1a NetworkManager-ppp-1.54.3-5.el9_8.s390x.rpm b75946bde29cd746a5b3362c3547bfaa4eaca0834285b4ca1e6d7b50efbca62d ALSA-2026:58897 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983) * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934) * firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987) * firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948) * firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943) * firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971) * firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941) * firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946) * firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973) * firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936) * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940) * firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960) * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969) * firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976) * firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974) * firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957) * firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967) * firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942) * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939) * firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972) * firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945) * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-74944) * firefox: Integer overflow in the Graphics component (CVE-2026-74964) * firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962) * firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-140.14.0-1.el9_8.alma.1.s390x.rpm 64f93c21b94aac86006608f8998633e1b068d831a5d4f2cda76284e66febcedd firefox-x11-140.14.0-1.el9_8.alma.1.s390x.rpm 6dab22a5390dbb7794b13e56acf4e95edba6a1741f5e5fe25adeff1ece0f0ecb ALSA-2026:58901 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-devel-3.14.7-2.el9_8.s390x.rpm 101c923bd8c7252faa367349e712ec5aa042f6234318264e37147f3282f14a13 python3.14-tkinter-3.14.7-2.el9_8.s390x.rpm 21dbfc3fba3e191d90017b66d68f15095b5fc9d63e8adc296f3951b03449de12 python3.14-libs-3.14.7-2.el9_8.s390x.rpm 64d268647706616fd5e64dce8c2f72ddf35ee415ebee2d40e8bcb579b75a2a56 python3.14-3.14.7-2.el9_8.s390x.rpm 870121a13874446e69f552f4630cf378d4eee8bab4cd74a63e7469d8abd12aca ALSA-2026:58936 Copyright 2026 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default sqlite-devel-3.34.1-11.el9_8.s390x.rpm 2c9bda5aec3a5451d4ae40a774c72405d44124b2ca1f02d188232894ef8aba53 sqlite-3.34.1-11.el9_8.s390x.rpm f98210ef7ced93bcce63a77a378d334de9e74cb79d0293c34ec14c079a778ee5 ALSA-2026:58982 Copyright 2026 AlmaLinux OS 0 1 Moderate

grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Privilege escalation via dashboard overwrite (CVE-2026-33377) * grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default (CVE-2026-33376) Bug Fix(es) and Enhancement(s): * Avoid unbounded memory growth [almalinux-9.8.z] (JIRA:AlmaLinux-242865) * Limit the size of the request body before processing it (JIRA:AlmaLinux-242866) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-selinux-10.2.6-23.el9_8.2.s390x.rpm 790f632b935d9dd6f3920d1574fdcf493b5ce742593ed2fd26c433043da8b1a4 grafana-10.2.6-23.el9_8.2.s390x.rpm 960365124773afbf3eccb52fad2b210f72d800eb30191d26697ba0a93990c383 ALSA-2026:59009 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.12-libs-3.12.14-1.el9_8.s390x.rpm 18d5bf25e22858bad94713808c748c12d7e5205a24830138daed77cc0f73144b python3.12-3.12.14-1.el9_8.s390x.rpm 8ac312822670bd32d2dca78b5a3554d08cd2e25f81fea14735ffcefb8352dec8 python3.12-devel-3.12.14-1.el9_8.s390x.rpm a8847afbc27e7fb40f0b7d3deabc22446edd12b39c309a6625e8b2971c0d41b3 python3.12-tkinter-3.12.14-1.el9_8.s390x.rpm cc15128ddf862621b61eb322f33ab07bb4c10a32d131b510061811eef1b40bab ALSA-2026:59152 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296) * gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298) * gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299) * GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.s390x.rpm 50cf71872664124ae5b9eff83e1d7e6a2581bf14d6b03acfe0eec9219987dbc3 gstreamer1-plugins-good-1.22.12-7.el9_8.8.s390x.rpm bb16918d60c1433bb8d43f667c9289b0b3e2f59a67965e4dc028530ccc9a457f ALSA-2026:59242 Copyright 2026 AlmaLinux OS 0 1 Important

python-pyasn1 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-pyasn1-modules-0.4.8-7.el9_8.1.noarch.rpm 7a7a0f6915b23f755d0805ab5d44d058890215d719b0e4d10ae39073b22d5dd3 python3-pyasn1-0.4.8-7.el9_8.1.noarch.rpm 8dcf51f1e3e30a88c5cada4667ae5447149fa014722f019f5e5efffc0f4ee13d ALSA-2026:5930 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721) * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698) * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716) * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705) * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710) * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708) * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691) * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699) * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694) * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720) * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707) * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVE-2026-4687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default firefox-140.9.0-1.el9_7.alma.1.s390x.rpm 1c79b9efd14060b490b4e5d0aefd366e71bf0453f9af86d9e0c7ecd9134c8f98 firefox-x11-140.9.0-1.el9_7.alma.1.s390x.rpm ec2c029e05a06873ca7412558080c2029fe8df10c2bb6844ed7cd46e55fdaf18 ALSA-2026:59347 Copyright 2026 AlmaLinux OS 0 1 Low

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default httpd-devel-2.4.62-13.el9_8.6.s390x.rpm 0054c3b498c1fe447f08b8b4a9701378b8f92ec9c8aef8d288d44be7f79506e7 httpd-filesystem-2.4.62-13.el9_8.6.noarch.rpm 11d1969830d2eaf25303f4b88b60582158166266af1d71d33c23ce5bee42bc15 httpd-tools-2.4.62-13.el9_8.6.s390x.rpm 297ca48707229aab220aecf41497bdc80eaddb377d5e94d4247918c80be04a58 httpd-manual-2.4.62-13.el9_8.6.noarch.rpm 2ec8ba93ec079462e7a98dec94f245389851b8d8d38ce753c2c555d6fd0d1e2c mod_lua-2.4.62-13.el9_8.6.s390x.rpm 60b278f6de24d32a47734d91edeeb9b82cbbcc143e6a72c587fb428baebc9bb3 mod_session-2.4.62-13.el9_8.6.s390x.rpm 72fbca31ba360cb0b71902775a4f750558f6dd672dfeb5f806436813b905e2b4 mod_proxy_html-2.4.62-13.el9_8.6.s390x.rpm 93b90c48ba2646eea29afb9796272c28cc45974af43847ebcb2213af86260047 httpd-2.4.62-13.el9_8.6.s390x.rpm 9af72d0dd2302eda76985fdfa3cee7030873af84b216f1bea0522adf743e6ee3 mod_ssl-2.4.62-13.el9_8.6.s390x.rpm a0c828bd8cf05a0f776627dead97408e77d3c5fa8d6f812fd0b5bb04e8534f33 httpd-core-2.4.62-13.el9_8.6.s390x.rpm a38e9b3837d1cf207817168b0365dd6c1e1ee19bd32b80cb29419961f20770fc mod_ldap-2.4.62-13.el9_8.6.s390x.rpm dbec4dde211378467383f57e6a29ab7da076b6971b27ce8cdfdc12f2d9991472 ALSA-2026:59362 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-filesystem-1.20.1-28.el9_8.5.alma.1.noarch.rpm 04836f924d852c9230a481032cc7d59ce5e0b6ac958a577f8b01db877f035330 nginx-all-modules-1.20.1-28.el9_8.5.alma.1.noarch.rpm 546e0c4eabdfe1df61bc24bdb226ee059323da8db517161e7f4a0e8d9fd68933 nginx-mod-mail-1.20.1-28.el9_8.5.alma.1.s390x.rpm 6296e01a60d253fc735deb5ef4706d3f3138b3fa054d7b66e31a4666c740067e nginx-mod-http-xslt-filter-1.20.1-28.el9_8.5.alma.1.s390x.rpm 70d6f4c698421790210c6e44dca51d58fe226aa959c762e69554f13c6ff458ab nginx-mod-http-image-filter-1.20.1-28.el9_8.5.alma.1.s390x.rpm a98f669de25e6966f689d27b783a4c53c2cae4e75a802f6ac8f1f2ddf8571ba5 nginx-mod-http-perl-1.20.1-28.el9_8.5.alma.1.s390x.rpm c0dda5f48521c66157c003cfed0f6fc4543f827349dffd7efe55b120f1ed4cc2 nginx-mod-stream-1.20.1-28.el9_8.5.alma.1.s390x.rpm cc5e809261b4878c6534f09db7f9d70618e95db5eceb4c4b35ad1396aec9a749 nginx-core-1.20.1-28.el9_8.5.alma.1.s390x.rpm d826ae660f3720e9c593ece104a8376bbfc2ec6da0c46e47bcb9889d7d87374d nginx-1.20.1-28.el9_8.5.alma.1.s390x.rpm fd304f496f77287396b74509d10c1c491d256fde5ca888eefdb7a1a02e7a22c4 ALSA-2026:59387 Copyright 2026 AlmaLinux OS 0 1 Moderate

mod_http2 security, bug fix, and enhancement update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service. (CVE-2026-48913) * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951) Bug Fix(es) and Enhancement(s): * address CVE-2026-43951 and CVE-2026-48913 in mod_http2 [almalinux-9] (JIRA:AlmaLinux-190583) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mod_http2-2.0.26-6.el9_8.2.s390x.rpm 2950e1292004e1a4e68af1f5746dc799683979dfb74d1a00987e39d6881e756b ALSA-2026:5942 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default golang-race-1.25.8-1.el9_7.s390x.rpm 3aacd69a3d2aee0804aa89b1457993f5fc656646568299346325f57f2dc25438 golang-src-1.25.8-1.el9_7.noarch.rpm 45a4c4bc4bafc9f3cc030f532a49bb2916cf525a2f90fccb9034a0bf674e380f golang-misc-1.25.8-1.el9_7.noarch.rpm 5a5c777474a1afe08ff05fdba78bd9e029acb30f5f712ae99a1b70f0bc26f617 golang-tests-1.25.8-1.el9_7.noarch.rpm 8396ecbeb0978e795a5ebd4033fcb83709360f0802ba4b3b9ebe8bb782727fdb golang-bin-1.25.8-1.el9_7.s390x.rpm a02c3a660bd8deb92031524287d879b1bb301d07c7ea4d24b32cb57a360bdf5d golang-docs-1.25.8-1.el9_7.noarch.rpm bcb2fec225ae078b804b886ab40ac56bd8ff2885fa27ceda5e0887a8624c81ca golang-1.25.8-1.el9_7.s390x.rpm cc770a6ee6d925931e560a464a5db75ad1761a22f6d763d9d00596cbfba12af1 go-toolset-1.25.8-1.el9_7.s390x.rpm e2baace2a5386ac2729333b4e170f23e5e0f6d1e162dbc10eeb680d5f43cc91c ALSA-2026:59490 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-mod-http-xslt-filter-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.s390x.rpm 02e359f9950641adc32b3e49d16b28a11181a672f0d10b682f84cabea0b5d624 nginx-mod-http-perl-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.s390x.rpm 3290a44ea7e32dc733b25afe3f25358ca0da64ed63eaa13c116e05f0767cc9bb nginx-mod-mail-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.s390x.rpm 342ce90d1d1624bc9ce1eb3527be6d3cb236b7022b8f010bb9515e76874bb914 nginx-mod-http-image-filter-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.s390x.rpm 747052778af8935924ee99d0618f5d32697bbfc9fcd15c467195fc900d3755c5 nginx-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.s390x.rpm 88828460cfdbeb47fdccd35ebd8161047a32ae54325db5936a8f18f0eb22bd12 nginx-core-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.s390x.rpm 9295cdae6dde913db8e693da4f66f4867821a4ae1ffde65a212de840449136c2 nginx-filesystem-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.noarch.rpm a2d9495a2c4bbe3f98eda0d9d347366a0de4dc232f5f711e1b90aef137545042 nginx-all-modules-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.noarch.rpm b9e4f0ea7748c335ee5b3d5aa3700c91386cb94d0229583370e5a806d21984d1 nginx-mod-devel-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.s390x.rpm d351ec3aa131e142369da7b1961cd56c581009855a365a3ddebde7e1e6d08904 nginx-mod-stream-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.s390x.rpm eb792c5e21a83ceb95c9007ef1ef1faa865b8e507b3bbb33453de3e294da4607 ALSA-2026:59496 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-1.26.3-9.module_el9.8.0+300+0781a894.3.s390x.rpm 4f5fe41211250a190da1de82edc4ec81abeb1ae84ad4621436489b6300148da1 nginx-mod-devel-1.26.3-9.module_el9.8.0+300+0781a894.3.s390x.rpm 5af4674b63f7b2eca4cb8350a4a716e23a5de332c1b29f1800823261deb66e58 nginx-all-modules-1.26.3-9.module_el9.8.0+300+0781a894.3.noarch.rpm 61459217a8cef686f96e73cbc4848db3c0558ed07576219c4f4bf4c499b65624 nginx-mod-http-xslt-filter-1.26.3-9.module_el9.8.0+300+0781a894.3.s390x.rpm 6bf732cf1fc0735d82ad642322f0220176e325cfcab7bd2c204f31d09db98f43 nginx-filesystem-1.26.3-9.module_el9.8.0+300+0781a894.3.noarch.rpm 6df3a09d14e1aa4f86305f9f4386e058a6def79b3c97e635890054f2a4032638 nginx-mod-mail-1.26.3-9.module_el9.8.0+300+0781a894.3.s390x.rpm cf1fb260ef0001080ced8a471f86fb4a6a575d2f774a87089c752804757c1903 nginx-core-1.26.3-9.module_el9.8.0+300+0781a894.3.s390x.rpm d6c2a345181bf2e8fb93ca16c66e632797b1820480dedcac8605538576e5f5cd nginx-mod-stream-1.26.3-9.module_el9.8.0+300+0781a894.3.s390x.rpm dbe28a32c5c0e083c6ca7593d8d15d9af742a68b885ad06fb127b534627b4f7a nginx-mod-http-perl-1.26.3-9.module_el9.8.0+300+0781a894.3.s390x.rpm e03d4068cf8b2cd861345fdb49647316ea34b19c24c14a0acd269a0f2af45da8 nginx-mod-http-image-filter-1.26.3-9.module_el9.8.0+300+0781a894.3.s390x.rpm efcd37f3aae1b99408b6167861622500e515a526f1ea258bc2d8a7c4edb5e6c1 ALSA-2026:59723 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-166118) * ss core dumped when there is an SCTP session [almalinux-9.8.z] (JIRA:AlmaLinux-212398) * [IBM 9.9 FEAT] zcrypt driver overwrite function - kernel part [almalinux-9.8.z] (JIRA:AlmaLinux-245333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-zfcpdump-devel-matched-5.14.0-687.42.1.el9_8.s390x.rpm 20da7c4f2b023c7994884f38d756ff90c9a8f7b2ec953d224d1b0bebe919d238 perf-5.14.0-687.42.1.el9_8.s390x.rpm 2fc0a1ef4b2c2e2587ef959ca5bb1bd7ad96f817ae5674d92b3487b7705728b1 python3-perf-5.14.0-687.42.1.el9_8.s390x.rpm 482d6fedbde6d2a86720bf221a8156be082bf7272e20f096d08da2ac33b79a87 kernel-doc-5.14.0-687.42.1.el9_8.noarch.rpm 495e55d1e5d1300ec04749a165ba6ace04e569160eac9c0b50b08e841220949b kernel-zfcpdump-devel-5.14.0-687.42.1.el9_8.s390x.rpm 5f2a306d1c1e7c8ac3a02334703aee207d85ea8b94b5db7bdf210b85fe616e3d rtla-5.14.0-687.42.1.el9_8.s390x.rpm 7e5424be0be922503cd1306cc25a5e89584b035e5a85871f579da47509b35766 rv-5.14.0-687.42.1.el9_8.s390x.rpm 8c4691ee623ae13137e6213f568117c5e746a4c55d9efb740970df43638fc233 kernel-headers-5.14.0-687.42.1.el9_8.s390x.rpm ccc53402109920735f159e4d625a0d4de7a1bfd9eb385eb269056432223c060e kernel-devel-5.14.0-687.42.1.el9_8.s390x.rpm d68bdb53fff6038cc860b3b61216b0cbbb240bcb2a6e666b5c38472725017eed kernel-debug-devel-matched-5.14.0-687.42.1.el9_8.s390x.rpm e4de20124e7360d666dc70150e437d3407f1257f0af67d32d07ab1dc2f958193 kernel-devel-matched-5.14.0-687.42.1.el9_8.s390x.rpm fb994f11e1ee2a3cd2a5c8954f09029d7085dacd93d48d6eb6a2b3df2942345e kernel-debug-devel-5.14.0-687.42.1.el9_8.s390x.rpm fff352c39983f812b06df7b4dc632b9082eef44422bc37dee86c90a2183d8a79 ALSA-2026:6004 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965) * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default freerdp-libs-2.11.7-1.el9_7.3.s390x.rpm 0f6672bf6631c93ac207334fdb01bde213c7c980687ea989233e42cff762b64c freerdp-2.11.7-1.el9_7.3.s390x.rpm c486e568f710ee001da192861aec4fbf97e643664c8ab0c39a01c904113d7272 libwinpr-2.11.7-1.el9_7.3.s390x.rpm efcbf4da78f9d13e3a0a219bf5c5bd7cd35f0e7577236610fce6aa7d855f6b11 ALSA-2026:60215 Copyright 2026 AlmaLinux OS 0 1 Moderate

assertj-core security update

A rich and intuitive set of strongly-typed assertions to use for unit testing (either with JUnit or TestNG). Security Fix(es): * assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE) (CVE-2026-24400) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default assertj-core-3.19.0-9.el9_8.1.noarch.rpm f9e024bcec7e266199a95d255ad248bbe8bea590cb36edeca0d8e00008631900 ALSA-2026:60226 Copyright 2026 AlmaLinux OS 0 1 Moderate

attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fix(es): * attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libattr-devel-2.6.0-1.el9_8.s390x.rpm 086ffd43da2a97b5d06f7e029942e248d4e1a1fe1153c7d1f62c80ee81b11139 ALSA-2026:60304 Copyright 2026 AlmaLinux OS 0 1 Important

golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) Bug Fix(es) and Enhancement(s): * Go 1.26 -- maxThreads limit hit in CGO threads blocked on RAND_bytes in FIPS mode (JIRA:AlmaLinux-215845) * Update Go to version 1.26.7+1 [almalinux-9.8.z] (JIRA:AlmaLinux-246425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default golang-tests-1.26.7-1.el9_8.noarch.rpm 14565ae19f03ef4227d82ce3e4030df52c335f26e02d86d40ec0fd398b774d22 golang-misc-1.26.7-1.el9_8.noarch.rpm 178902393cee6104035c55b9908d625f2a8470f53a6e7ccc120fa9d86cad8b36 golang-race-1.26.7-1.el9_8.s390x.rpm 2996325e7078877a176617281ca7e43c80020d8bb70c903573743272a0db6d9b golang-src-1.26.7-1.el9_8.noarch.rpm 5ecf0e5a09fbe760b856ca58376955d75fa597b3f82e28aa2df227a620012cee golang-1.26.7-1.el9_8.s390x.rpm 69d700af93baba5805992db806c185f73918f186fb0685ff66b11ce5c8bacfba golang-docs-1.26.7-1.el9_8.noarch.rpm 700d9e89173b96cfbdaea70b82bb4cec4428ef2addc69f9e4d8dc3e2ba2a367a go-toolset-1.26.7-1.el9_8.s390x.rpm 7225377e548b52f4d6c2df636f7d92358d6fed4b886959a2098d90edbc1d1acb golang-bin-1.26.7-1.el9_8.s390x.rpm ce4eff47ce225d1ce5ef12bafc84744a9ae9967655159cb957724b8bdce8dc35 ALSA-2026:61240 Copyright 2026 AlmaLinux OS 0 1 Moderate

pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fix(es): * pipewire: RAOP RTSP NULL Deref (CVE-2026-14324) * pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pipewire-libs-1.4.11-1.el9_8.2.s390x.rpm 01c4f61ed157cb83250ab63110f05f7b4820b9e3ad01799e05b9594b42c3e1f3 pipewire-1.4.11-1.el9_8.2.s390x.rpm 1a53c755dd0b1d8e89459b1a6e883adf8030ab5f18459974d77706f7e02992c3 pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.2.s390x.rpm 254921b40a384d83c98ac60b9987ac4aa6214b1ec6d9984a077fe02345bf758b pipewire-gstreamer-1.4.11-1.el9_8.2.s390x.rpm 270fee93b31491dad67e7b466c76b48ee72793db1d91016226c357f415ddd17c pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.2.s390x.rpm 476f5f91e422bdb1b86b5f0b9567cb08d87e3750780a8eb9b7ef9f75e832d31c pipewire-module-x11-1.4.11-1.el9_8.2.s390x.rpm 69e93690f4717ebd5a86643458ce9bd6ce6e7b4ce6df913307744fe5b373ea9d pipewire-pulseaudio-1.4.11-1.el9_8.2.s390x.rpm 8b1064c6e7023727fa5783ef452d14e03d39c750337811c6e697f48593264db4 pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.2.s390x.rpm 9bd2abdc950a2a91b0547428e1c8306a1f61a182ae30aaba8a20914c20d8df1e pipewire-devel-1.4.11-1.el9_8.2.s390x.rpm a936a08ae9ab91f3b7a5ae50f2c36e928892e7f052685c2bc0dce01ea52973ac pipewire-alsa-1.4.11-1.el9_8.2.s390x.rpm e22ad18366985cf21ae315f7f2223731cd3706537a3ad7ed9ca390144501c3c0 ALSA-2026:61247 Copyright 2026 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653) * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libxml2-devel-2.9.13-14.el9_8.4.s390x.rpm 8677a84712a639c3f3a14d9d510f452e4d21e31c218811e32ce21987e9c048e2 ALSA-2026:61259 Copyright 2026 AlmaLinux OS 0 1 Low

php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD (CVE-2026-14355) * php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) * php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): * Backport fix for CVE-2026-14355 to PHP 8.0 in 9.8.z (JIRA:AlmaLinux-192624) * Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 8.0 in 9.8.z (JIRA:AlmaLinux-223940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-embedded-8.0.30-8.el9_8.s390x.rpm 099f7d8c62f70b70e195531ab0718993529529d3442bc11ac432a297986452e0 php-common-8.0.30-8.el9_8.s390x.rpm 0a69205794481a7bcd3f3a7d7bc3f272da290bde66a55613d8f2c9c6e4882997 php-process-8.0.30-8.el9_8.s390x.rpm 21ded9f4df54b574220a2a03b3da53c106b67340bc97163919c73520ba986fa8 php-gmp-8.0.30-8.el9_8.s390x.rpm 24ec1475406cdda8d95feac6ee8b46ed1c1d9349c2fcbc4b8b20600e9d9613be php-ldap-8.0.30-8.el9_8.s390x.rpm 33f01d1e6b676084a6d6c6721eb424873f2427c3d55165759527247260e2e6bf php-xml-8.0.30-8.el9_8.s390x.rpm 362da945383aeb2b411357c39919a2df45c8367bb9c1b331daee1c5d7713f2fe php-soap-8.0.30-8.el9_8.s390x.rpm 3934fe7275238c093a3f471c3191c1d9db110cdf461547042c5793826211e162 php-enchant-8.0.30-8.el9_8.s390x.rpm 463886da6438d1ad7c201c734403bd67da9362b3c6148e2819ca29d3a1b20098 php-dbg-8.0.30-8.el9_8.s390x.rpm 4ae9d42933ce8e94f3e26aa48ba98b40951f87e2bb1fed9d01dc2beafdcf4e45 php-mysqlnd-8.0.30-8.el9_8.s390x.rpm 530c6d9b41312d9543c898af727ea770a43da383801e15877a143258219cc8b3 php-opcache-8.0.30-8.el9_8.s390x.rpm 59b2c15caf8449a05affaf485ac16b482b30fc40b35746de0e0e601b5fc623e9 php-devel-8.0.30-8.el9_8.s390x.rpm 64513125822fe8e39b0f956666e5666fe4fe23da2e4d527571578d075067688d php-dba-8.0.30-8.el9_8.s390x.rpm 66348e0be9e6d09d45c0c7fbf6eff1245fecfc2f509355c498f5a21405454295 php-gd-8.0.30-8.el9_8.s390x.rpm 8b55064d3e56ad1dea89bd311e5551a6b7be64a8ba009b6b0cef05c0b29bd3c2 php-bcmath-8.0.30-8.el9_8.s390x.rpm a037081bb893e4bf54f62903526eda79baf35c6f2edf58341bd26797c672a19e php-intl-8.0.30-8.el9_8.s390x.rpm a7907562d18167d516d6453b29b1f986959c2e749015956cd081370edd732543 php-ffi-8.0.30-8.el9_8.s390x.rpm a7d28c20dc5bde30bf9643f90de8e5a1acc390eead0327933f60b9e624025d89 php-fpm-8.0.30-8.el9_8.s390x.rpm a872e5d39e9c80fd48ab55e7bd5471edb17e805dd26ca20c9e6b21ea9d405e6d php-pdo-8.0.30-8.el9_8.s390x.rpm a8c4c3648fe9c4605bac5e374c9724e9ae479181d760ee9a84b1c0ecbd283a08 php-mbstring-8.0.30-8.el9_8.s390x.rpm b0c743ad5a6801235430e033d282fe731da97b5515493ecb2e4e4ce144a20247 php-8.0.30-8.el9_8.s390x.rpm b4d234be567a74bcba36ab2efbfd07a1c7eebea6423a7dfd8eb738fda710a216 php-snmp-8.0.30-8.el9_8.s390x.rpm b8dd7e25c40d84d2a6fe42ae2e014cc6a1196e43f85cd73152e82c6a21b5e622 php-odbc-8.0.30-8.el9_8.s390x.rpm d462287a5a59cd32cf888ab27d9cbdcf839bbfbca8a62f5789b825e788af9fda php-cli-8.0.30-8.el9_8.s390x.rpm f09a598974717b145c6273dd4c462fcacdbdd7e14ee7fc980fbcbbe980c6020b php-pgsql-8.0.30-8.el9_8.s390x.rpm f72cb67f97f658f3699735d936459ce604c3b86bce9d311bd166b8833a9b0f73 ALSA-2026:61316 Copyright 2026 AlmaLinux OS 0 1 Important

xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML. Security Fix(es): * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xmlrpc-c-client-1.51.0-17.el9_8.s390x.rpm 4ffcadc8bb5ddaaeb3bf0bd188375a7a548f1031ab02fe71f821f191f6365471 xmlrpc-c-1.51.0-17.el9_8.s390x.rpm 91bfb49761491a6ec317aa0a0d081d8cdea3a602a6a717488eb70e64a8f4590e ALSA-2026:61379 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301) * FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288) * FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291) * FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default freerdp-libs-2.11.7-7.el9_8.6.s390x.rpm 55a9c3589deda8a68678303a2a4e84bddf88b9b43d4a5659b87dd53561a3ac7a libwinpr-2.11.7-7.el9_8.6.s390x.rpm 6d2c443b49d8a1224a27d681d286ea7a7e7a489527dcdf0ebef704e2a30d3f80 freerdp-2.11.7-7.el9_8.6.s390x.rpm 9fc3c8d0778de3d0a2ac1cb6b4e79a9db28eab0871a3b3eec1639a3d4060a164 ALSA-2026:61383 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-22.23.2-1.module_el9.8.0+302+959ebcd4.s390x.rpm 36a7731d5608c9dc70c31eb68dfd619e2cbcffbc71129e9dc5b1d490788c1fdf nodejs-nodemon-3.1.14-2.module_el9.8.0+291+0bb98cce.noarch.rpm 36bfb4903244fdf5e11e5ef3cf579bd330a0b7dc8b53b9d7e7a3d490ff6c1e4c v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el9.8.0+302+959ebcd4.s390x.rpm 3d7f3b6157db1e4f41b352dee094ce2f41fb0b1001d49c468cf3fdb7284d1aa3 npm-10.9.8-1.22.23.2.1.module_el9.8.0+302+959ebcd4.s390x.rpm 4a53b843850b7a3dc92f7767a09ceafdeb07f3d3bc15ab8942be417465bf5d23 nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 nodejs-libs-22.23.2-1.module_el9.8.0+302+959ebcd4.s390x.rpm 897cd16b1fc7714cfa930a92c695f325c793a12a0b6985469c403b3a284e1b24 nodejs-devel-22.23.2-1.module_el9.8.0+302+959ebcd4.s390x.rpm cab6904906a27d2e0dfd14e60cc5ffd141b8d8740e3dffca2b8f114027d9fd65 nodejs-docs-22.23.2-1.module_el9.8.0+302+959ebcd4.noarch.rpm d5f00dee1013bd6ca5404a82ca89d383299eeeb366e77cdf7a21bdf73a8a7351 nodejs-full-i18n-22.23.2-1.module_el9.8.0+302+959ebcd4.s390x.rpm db3598c7665eb110a014c55c62acfce182260e4634c350f949610225644c64cf nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:61386 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-nodemon-3.1.14-3.module_el9.8.0+292+f4eaf8b2.noarch.rpm 34593bae84e3eda22d3c85db93eb84f883d07844a6d2c91217637b2c000e7e3b nodejs-devel-24.19.0-1.module_el9.8.0+301+084fac05.s390x.rpm 3cde8f09554f6a3000d2f4ad81850aae574694406bdb57e7514a0966032f25e2 nodejs-24.19.0-1.module_el9.8.0+301+084fac05.s390x.rpm 6292fc75ee76b255485b654700f2f7f2d2d96c64b021af81f5ab4238e07155cb nodejs-docs-24.19.0-1.module_el9.8.0+301+084fac05.noarch.rpm 6b79a2f327c28ae2162ae997dfdb6299749be495174f71a83bfc01986ade4afc nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a v8-13.6-devel-13.6.233.17-1.24.19.0.1.module_el9.8.0+301+084fac05.s390x.rpm bb4dc6f570194ea1bc7524f5aafe96170633fc6ae951f6a806297b4058b07281 npm-11.17.0-1.24.19.0.1.module_el9.8.0+301+084fac05.noarch.rpm c6914f0c7aa777d9357f2895ae67a8bae88b7446eb82b6c70af657b804da2e1a nodejs-libs-24.19.0-1.module_el9.8.0+301+084fac05.s390x.rpm cd769f2b1cd2d44df9b1910768bce447ab03a3e3e172f44a2ae606d9846dadfc nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 nodejs-full-i18n-24.19.0-1.module_el9.8.0+301+084fac05.s390x.rpm f26d9ad97b8a9a44027b7998142d049e29e58f20bd47fcc8b8080465b04afe1b ALSA-2026:61389 Copyright 2026 AlmaLinux OS 0 1 Important

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (CVE-2026-71217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default iperf3-3.9-17.el9_8.1.s390x.rpm 1937f958550581adab8d5718b0a836b4c631afcc04052862a4a9d2f089e9537e ALSA-2026:6153 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180) * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096) * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144) * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171) * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193) * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-devel-5.14.0-611.45.1.el9_7.s390x.rpm 1ab691b6279b9e886318cc72698bc294f01dd60404f8197da4ea3f0cab5ca333 kernel-zfcpdump-devel-5.14.0-611.45.1.el9_7.s390x.rpm 2416c552db09681cbc9f6a2b460d887fce49a7068cb34692916a14ea49d8ec6c kernel-devel-matched-5.14.0-611.45.1.el9_7.s390x.rpm 295eee6f3c396cf428155ec2be56d7d673d13d043b0255793adb7d9fd9c4a86c kernel-doc-5.14.0-611.45.1.el9_7.noarch.rpm 51ee35bdc30cf1b987ce698d9f5b2bd289787990115917651e634cec54466fa4 rv-5.14.0-611.45.1.el9_7.s390x.rpm 5bd17540f9c9e1a3b3a1da6d2e5ef5578fbcb4eaacfa796f0724d19471d9c028 python3-perf-5.14.0-611.45.1.el9_7.s390x.rpm 68a66ff8548115f6bf2deb5210b3cb794b0c8d10940ee3836f7ea37bf07fa869 kernel-debug-devel-matched-5.14.0-611.45.1.el9_7.s390x.rpm 8096f250cc5774a73cb21189f647596401f2d778c2640bbd2847a5bc6f80158e rtla-5.14.0-611.45.1.el9_7.s390x.rpm 8bd02dcdf35f2352724c84e554f2d855da9fb52762a98571a630b83eda423046 kernel-zfcpdump-devel-matched-5.14.0-611.45.1.el9_7.s390x.rpm d5967823384cd39cbc8322f591ba7852aed927e4c6bf039c232d9d2a79fbf807 kernel-debug-devel-5.14.0-611.45.1.el9_7.s390x.rpm de771f75a9947bdb4e978eedb0ed38f1d70f693af3d6f8a9133d28d9a52fcd18 perf-5.14.0-611.45.1.el9_7.s390x.rpm de8830084fdd3799a5a8fc2fba949be45a7dc63a6f77bae128d0a9372eb1fa9e kernel-headers-5.14.0-611.45.1.el9_7.s390x.rpm fe1ab945db403d0ca7260ca238f43bfd930f28457a36ae893333c40882f194d2 ALSA-2026:6188 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721) * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698) * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716) * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705) * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710) * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708) * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691) * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699) * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694) * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720) * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707) * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVE-2026-4687) * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371) * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default thunderbird-140.9.0-1.el9_7.alma.1.s390x.rpm 34824f0156968eb87c15c4472eff1c5feec03c620a6fb03dd56a51bbfe6558f0 ALSA-2026:61903 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) * php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223942) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-pgsql-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 026aea0c00898894cf736a22f2ea2696826135831e4989f9c843a4aff56ee86b php-intl-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 2133d471615e0f8d9736cdd0b0cba95349db4f9ddfbce0a034e965e2d8ed1293 php-dba-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 28d1878b0af3a14ed20075f141d073a09781b14f3e0c643c0746cbc73c3b7f52 php-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 39e655ee6ca9d08224bc301cfbf78bfc0e8143763f6d7049e4927292aa58590d php-process-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 3baed0077fcbe474b76becd8838e989a89638f0477c226331044cf57c6776719 php-embedded-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 42d72390564890f8e3b910a61de95fbb4b2348625e01573b8d3c77d1e63895b8 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-bcmath-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 51069f17721e7e24993d736140c401d07215b8e6e2f2b231bcc88e675d0045cf php-enchant-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 545436ddf108bb33c3ddd450dba5ff82ea91d46113c0074d5292a25c6a9da501 php-xml-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 56f2ed1a95424e77586554b807553202c14fa3031165f17af0ab25c9d2b353f5 php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683 php-cli-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 5bf5cd3de7fa998c03d4afda968304fb852eac7553bf03dd93a4f4fbad05af3a php-ldap-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 68b2da7cf878ddbf332859990600c0b7d58a179f61c825dd7300e0d568376701 php-ffi-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 6912fefa2c0e3cb3f5d25d278b1e6cd9fc7409af216ab850d54b3bdb8b83ecf8 php-common-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 7f2c8ab4e737e5a73a292132de17103eba06ece51daea05cd3b60d7cb621584a php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm 7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a php-opcache-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm 810512a5754b5d3056f522bf18e6e5bb95b3a89c77c3bed34f2f8fc6f94d1deb php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c php-devel-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm b7c2b99661feaa81bc998b445838008382a5e4faeaa6ad09c5150a2274c0cb69 php-dbg-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm ba5517e5ca205d184d21fcfd58f41f468c55f386ec4320c70836c989de42a692 php-odbc-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm bf72b2d0d0291a3506f305f98fa495841263ccfd926d1c64d6e91fca2c64f365 php-gd-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm ca1e85bd68fdbbf0135bba4d3ad43e413fd51a5c4b1a5bb2a5132618f0bf8653 php-mbstring-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm d5a55f5656dcb5bcae81a843b56293301ecda3aecc004623ebb473e1e556286a php-snmp-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm d737db0cbc703ec63069035fd95a9cfa1b6370328a565e8db2c2b12cb79744d0 php-fpm-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm e142c8729de728e4996967db95d19de970e693a8d5c9285480fde5c3cdedd939 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d php-mysqlnd-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm f66bb62a7dbae5009a574f39611774f17fa34979307b7bb75503b4cb0f7c97ea php-pdo-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm f67c98fed8617a57ebb7e54b50493b14708a493470e18406aebf2dbcfe9567a1 php-gmp-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm f969da8eee961663115d1ee081ebdd5ebcaa647388013b338856fcf620d7789e php-soap-8.2.33-1.module_el9.8.0+303+1bef6c12.s390x.rpm fd5b0d831f94c1baba8801127a69fdce57c3d5475d71bb20a4e50284f22d9f0e ALSA-2026:62143 Copyright 2026 AlmaLinux OS 0 1 Moderate

wget security, bug fix, and enhancement update

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption (CVE-2026-58471) * wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute (CVE-2026-58472) Bug Fix(es) and Enhancement(s): * wget async unsafe code in signal handler context [almalinux-9.8.z] (JIRA:AlmaLinux-220497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default wget-1.21.1-11.el9_8.s390x.rpm c8acb94be13182b86886a5a826c8090e47c3eb620cd0633b39fca6c38233c624 ALSA-2026:62170 Copyright 2026 AlmaLinux OS 0 1 Important

gegl04 security update

GEGL (Generic Graphics Library) is a graph-based image processing framework. Security Fix(es): * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gegl04-tools-0.4.62-1.el9_8.2.s390x.rpm 1dea649df4ed436b498d8997f4df1d0b0777a0484f8ddeaeb6f283f48634f30a gegl04-devel-docs-0.4.62-1.el9_8.2.s390x.rpm 742bfeecdca24f2013573b9173d4010507d641e411bc4e69ba184c9aeb31ec33 gegl04-0.4.62-1.el9_8.2.s390x.rpm 7ac2762cc54789ad07fd2ce9e8af141365cf22878caae0eca4e9d0609b3061e0 ALSA-2026:62217 Copyright 2026 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844) * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845) * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846) * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847) * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848) * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libssh-devel-0.10.4-19.el9_8.s390x.rpm 082cd09673c7852b7f7e40cee198475a1f0b8265fa1295d36c3a6d4aa2e4bc12 ALSA-2026:62406 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-10.2.6-23.el9_8.3.s390x.rpm 8ad4f4d1421c5f990224e2cf7d7ae4f7034e56606ddfb931b1ef26ec1b008786 grafana-selinux-10.2.6-23.el9_8.3.s390x.rpm d8ee6bc0ff4505bbde6bb73bb3dbe07f6084ad1c7b7ab52e466e61fabb0a1a30 ALSA-2026:6266 Copyright 2026 AlmaLinux OS 0 1 Moderate

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Processing web content may disclose sensitive information (CVE-2023-40403) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libxslt-devel-1.1.34-14.el9_7.1.s390x.rpm 3a49c2d76c7d09af3cb4ebc90cced841ae0cb7baf35aa4e1d2e182fcd7b2ac6c libxslt-1.1.34-14.el9_7.1.s390x.rpm 79c54e2350779bc5ecdf437d57a3b27567ca31205be97b74f7720759a1fc5dab ALSA-2026:6285 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.12-devel-3.12.12-4.el9_7.2.s390x.rpm 0fc0c5f739d6da3d65facbdd00c174d47d2784dc99de4adc28b623468ce8637c python3.12-3.12.12-4.el9_7.2.s390x.rpm 2313fec974ec0f6d2e7b303dee1cff3850bcb11cfe8a00f849ca11586f4afece python3.12-tkinter-3.12.12-4.el9_7.2.s390x.rpm 7e2272d693362fe16a6ec8d5ada46122105c08ea66edfe8b682320104596ae93 python3.12-libs-3.12.12-4.el9_7.2.s390x.rpm fd4e6894922255436a261dc3f7d3121159666842ee23975ee27ce4cf4692858f ALSA-2026:6286 Copyright 2026 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python3.11-tkinter-3.11.13-5.2.el9_7.s390x.rpm 0d6409f46bc8b893f94760105a940d87bd5e318ce0fd69fedc979926274b6fbc python3.11-libs-3.11.13-5.2.el9_7.s390x.rpm 19d8375377e98864cc95d7021857b680265d3c5d6c58e281f21f2e8ce75a1187 python3.11-3.11.13-5.2.el9_7.s390x.rpm 5d79815861f61d5e3e2f2b9a0fb515dd2c9671332d60c56fb26f5437abad78ea python3.11-devel-3.11.13-5.2.el9_7.s390x.rpm dce5de2178517496f95bb9393e31d9ed088d927d9992fe3e6f77176085c6d7f8 ALSA-2026:6300 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default gstreamer1-plugins-good-gtk-1.22.12-5.el9_7.s390x.rpm 5f385e7ff51ecfa05c9832e8025346a2d580cf7e5f79eb2af9af8982891bf610 gstreamer1-plugins-base-1.22.12-5.el9_7.s390x.rpm 7ab3eb3be7222625d42d91aef244d83c147489d51aff0b1460945be091cedf92 gstreamer1-plugins-bad-free-1.22.12-5.el9_7.s390x.rpm ac72d3ea0b8ec0e0dd23ff3c26e6708559a0c2579ee672917186791426574f8b gstreamer1-plugins-base-tools-1.22.12-5.el9_7.s390x.rpm c82fdd463252e9f4e939b53ae4262adf60c9ae8a4ed33f1dcad20d2529d365b7 gstreamer1-plugins-base-devel-1.22.12-5.el9_7.s390x.rpm dcba42389c9dcc1928b940509a556674f4877ecce44f61f2a24ab942955debc5 gstreamer1-plugins-bad-free-libs-1.22.12-5.el9_7.s390x.rpm f9e342829b908636d2fd797f1798300e76264849cdd2114ad61e66a0337f5c9a gstreamer1-plugins-good-1.22.12-5.el9_7.s390x.rpm ff218a851d65a04c9d9b83ac3f29907494cf46561e0c6df007c215af53268378 ALSA-2026:6301 Copyright 2026 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fix(es): * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526) * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default squid-5.5-22.el9_7.4.s390x.rpm efec082a45a40d289c0a256213ccf14a7b7e050bd73fe546c1de662e51286b0d ALSA-2026:63129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9] TPM becomes completely unresponsive and requires a full reboot to clear [almalinux-9.8.z] (JIRA:AlmaLinux-213940) * RT scheduler livelock caused by missing backport of 94894c9c477e [almalinux-9.8.z] (JIRA:AlmaLinux-240634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-doc-5.14.0-687.44.1.el9_8.noarch.rpm 03698724499a5b6f1e72b1d1ae3f100231c1455364dee05353c9e065e2221441 kernel-zfcpdump-devel-matched-5.14.0-687.44.1.el9_8.s390x.rpm 2e06914b81d9dbecbf28a2250fc660edbb7b0e605755ac0c00b34557ef69320b kernel-zfcpdump-devel-5.14.0-687.44.1.el9_8.s390x.rpm 3171b6ca2d850ae8c703effdd0faad57d011cb3117cc91d02cf70b2371f25a1f rv-5.14.0-687.44.1.el9_8.s390x.rpm 3aca87aedad798b6e230426b09d790707bb6cfde94e540a0fe207b1959d558c4 kernel-headers-5.14.0-687.44.1.el9_8.s390x.rpm 600239a5afb3bdd4da1e99efde6fa38d0ca361774596441e46911e4bea04246b kernel-devel-matched-5.14.0-687.44.1.el9_8.s390x.rpm 62b0ed0298d761a299f7ca65489f51a46990beed773827c5fd789914321cdfad perf-5.14.0-687.44.1.el9_8.s390x.rpm 7973cd2f49a51bc951fe77e7ecf177134075fb280ecdbbbc931472bd2938b007 kernel-debug-devel-matched-5.14.0-687.44.1.el9_8.s390x.rpm 797c1984ef5d217cb2834242136a52b0d5667a4628b751fb8b74d3360661c407 kernel-debug-devel-5.14.0-687.44.1.el9_8.s390x.rpm 81c70820e9261876859cb36b5a1c3b5aa69a4ec4b3aad46ab61e22fe3f9ded22 kernel-devel-5.14.0-687.44.1.el9_8.s390x.rpm 96fd01ccbea8c4c07d7f4f8d2c9de99427be4b35abcd210a8564a15b81745f40 rtla-5.14.0-687.44.1.el9_8.s390x.rpm 9f870cc201ecfb597157b1838d1d8a19b7b7143213cdad5c778e53ad1a765489 python3-perf-5.14.0-687.44.1.el9_8.s390x.rpm cc53c79009b7c52c89ea83cb77007461ac9bb30eaf6b47da5e8a737b227ce530 ALSA-2026:63136 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-pcp-5.1.1-17.el9_8.1.s390x.rpm 01d7585e7932ece1454a9b0be72d92735ad98937bb89489c2851cd4dfd37ea97 ALSA-2026:6340 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852) * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732) * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676) * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491) * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948) * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684) * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681) * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683) * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679) * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675) * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages (CVE-2026-31806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default freerdp-2.11.7-1.el9_7.5.s390x.rpm 35697b4f7105dd1a63d9211874d97b3cfe94288152c48ed12ea4967f03d61f9e libwinpr-2.11.7-1.el9_7.5.s390x.rpm 624af36594e870ad10f2307d316a2596f58248c2ced7cc39005fa10d7dcb8f0e freerdp-libs-2.11.7-1.el9_7.5.s390x.rpm 898cb4227e82f34b9699c02944b61e40601ddf8e3910f63e9b3cf0398e90ad4b ALSA-2026:6382 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default grafana-10.2.6-19.el9_7.s390x.rpm dad277a76ae76c478276ec2e914a2d28860f113255fa8c2b0b756c225cd40c9b grafana-selinux-10.2.6-19.el9_7.s390x.rpm fec6c6b766dfa8226aa289e4571de4a7a7857a5292979290146f26f00049edc3 ALSA-2026:6383 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default grafana-pcp-5.1.1-13.el9_7.s390x.rpm f726d8e82786aee11c21b9f5bb94703c79a94c4a19e67613177416d555b25804 ALSA-2026:6390 Copyright 2026 AlmaLinux OS 0 1 Moderate

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Rsync: Out of bounds array access via negative index (CVE-2025-10158) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default rsync-rrsync-3.2.5-3.el9_7.2.noarch.rpm 20e6827622e2407f70397002101336f2142c419bdfe5782a1049359d24b4f3d5 rsync-daemon-3.2.5-3.el9_7.2.noarch.rpm a5609c71037630d4e81495e31dd61408a6fbe7f4791a36590b17e112d3eab1b9 ALSA-2026:6462 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default pam_ssh_agent_auth-0.10.4-5.48.el9_7.alma.1.s390x.rpm 396addbc72cb262cee2c126a0fcca8b15c402dffd467638b54820156f241327c openssh-askpass-8.7p1-48.el9_7.alma.1.s390x.rpm 65c963d891e7e79753c201e9ad7d149e88498b8bd88c42b62e922bd7b9f92182 ALSA-2026:64774 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building (CVE-2026-69249) * python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees (CVE-2026-69248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-cryptography-45.0.4-4.el9_8.6.s390x.rpm 894bcd5ca091b6d6f5a977212eb3e0fc74a47c4031b3b5e6d44a7d30f50228dd ALSA-2026:64784 Copyright 2026 AlmaLinux OS 0 1 Critical

389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() (CVE-2026-18355) * 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (CVE-2026-18453) * 389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property (CVE-2026-18922) * 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN (CVE-2026-76560) * 389-ds-base: 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS (CVE-2026-78701) Bug Fix(es) and Enhancement(s): * lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [almalinux-9.8.z] (JIRA:AlmaLinux-244467) * fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [almalinux-9.8.z] (JIRA:AlmaLinux-248766) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-lib389-2.8.0-10.el9_8.noarch.rpm 2f022fe85918e8c3d7805a320a2c2ea198144e5d740733af6dee9815ddf5c6d0 389-ds-base-2.8.0-10.el9_8.s390x.rpm 47fd94e90061af8e81416627428cc91320588737374c2c4160c5073096eb0cc7 389-ds-base-libs-2.8.0-10.el9_8.s390x.rpm 94206a42845a23f6b2ebda48276bee4e6d15a3ac82e9bffa0d5afb62cc24da23 389-ds-base-snmp-2.8.0-10.el9_8.s390x.rpm d3391cc7c867510adfb1008082da766cc4622fef57682267f71a967c8a172ada ALSA-2026:64800 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVE-2026-16118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default glib2-tests-2.68.4-19.el9_8.10.s390x.rpm 34fd0079a4cfa46f5dbe37dc578e93b061796fb5d0f7e1e813201fbac3baf8ce glib2-doc-2.68.4-19.el9_8.10.noarch.rpm 55c729bcddc62dc33bd00fd4f8ebdefeb2d7b5583398d2f625431c882cac74c8 glib2-devel-2.68.4-19.el9_8.10.s390x.rpm 987d86429fd6d67e1d41dccdd0302dde0b2094e373639173cfa988b6e435e4c8 ALSA-2026:64807 Copyright 2026 AlmaLinux OS 0 1 Important

valkey security, bug fix, and enhancement update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373) * valkey: Valkey: Remote code execution via use-after-free in stream deserialization (CVE-2026-63639) * valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free (CVE-2026-56684) Bug Fix(es) and Enhancement(s): * [Tracker] Rebase valkey to 8.0.10 (JIRA:AlmaLinux-216778) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default valkey-8.0.10-1.el9_8.s390x.rpm ed3c70835b1685323c778fc1461ff4afce5f28414a16214757c760805aeb2aa5 valkey-devel-8.0.10-1.el9_8.s390x.rpm fd78be486cc68e9c3e60f22efec582a2674a1e792e37418072e5da207f11c138 ALSA-2026:64808 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004) * kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933) * kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319) * kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-perf-5.14.0-687.45.1.el9_8.s390x.rpm 07772aad37b228831b3500dec48bf552a94c1d0f371c7c4ab4b54e457ed9d878 kernel-devel-5.14.0-687.45.1.el9_8.s390x.rpm 0878008b2d75d767a19573286f4e5f77231e71bf7cbd70e7fb110a7d3ff0602b perf-5.14.0-687.45.1.el9_8.s390x.rpm 12c24f346439195a6752f61f7f6d0e1d399c1841e95c7b539eb5cae9a265718d kernel-debug-devel-matched-5.14.0-687.45.1.el9_8.s390x.rpm 460482e956fa0fdbb201bc14bed4e35ce023acd1c91235efdc2d9ee34d197899 kernel-debug-devel-5.14.0-687.45.1.el9_8.s390x.rpm 5a3c37a64e0fe6e149dd17f42ebc859e09fae770be98797f2188df3e8fd92a74 rv-5.14.0-687.45.1.el9_8.s390x.rpm 6bf3a030eb842e11d7312e354d22b0d6a7ce4fad6656e0f92fba6146d94b954f kernel-doc-5.14.0-687.45.1.el9_8.noarch.rpm 76953329178d6b5f01af29f7b2e9d21d9460a2c61aecbc869ca8a2decab062be kernel-headers-5.14.0-687.45.1.el9_8.s390x.rpm 874fd601e5eeb1e45c98c6d91d6e83b8eda0ad4db8b73546b4569075e11c6a5f kernel-zfcpdump-devel-5.14.0-687.45.1.el9_8.s390x.rpm cf073e3c307a6fde71be9412b96e6a386fba6aa8686c47452b2be6d7f743292e kernel-zfcpdump-devel-matched-5.14.0-687.45.1.el9_8.s390x.rpm e9b4860718735005aafed2176ce81ff7e2eacdaa779c1354e495e0139315e671 rtla-5.14.0-687.45.1.el9_8.s390x.rpm ea8b71ac0672d243d151c2f5b70004c00f15e225cccd1a0533fddcd57de78607 kernel-devel-matched-5.14.0-687.45.1.el9_8.s390x.rpm f98e4ce836077ce3763895826d1786627a96c14f9c449adb634003d21cf44297 ALSA-2026:64812 Copyright 2026 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) * expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default expat-devel-2.5.0-6.el9_8.3.s390x.rpm 6343b7f8387f30eee9051e586988eaa5ce3fdccdfbff634082e2402fe06a5182 ALSA-2026:64815 Copyright 2026 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE age(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pam-devel-1.5.1-28.el9_8.1.s390x.rpm 5a24a053814d67f6f1762f8c6a45e65d0cc50f6978d1e385ae19df1d91e72214 pam-docs-1.5.1-28.el9_8.1.s390x.rpm e45bf7b0e408e3b0414708bbc272980e2f5e269355422754ee351bfe78b77450 ALSA-2026:64824 Copyright 2026 AlmaLinux OS 0 1 Important

redis security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373) * redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934) Bug Fix(es) and Enhancement(s): * segfault because of Unsupported system page size (jemalloc) (JIRA:AlmaLinux-180910) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default redis-devel-6.2.24-1.el9_8.s390x.rpm 85bdecb3c230699ee0ed123896b328f5c718dffffbe5b07efa6a363f68ce82bd redis-6.2.24-1.el9_8.s390x.rpm e8af13ea8b844b3b3a23caacd742a46b8dd5c8826c9293906c4fed42c01d236a redis-doc-6.2.24-1.el9_8.noarch.rpm f050c028af04be9971fda16c89bb59a35b725f68e3c63742004653a905dee012 ALSA-2026:65117 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default opentelemetry-collector-0.152.1-2.el9_8.s390x.rpm 2651ae2f85fc2d9964dcb5b17a5ee15166364044bf994a396a5aba3bc63d5c69 ALSA-2026:65153 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * golang.org/x/net/idna: golang: net/[http:](http:) golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default osbuild-composer-worker-165.1-4.el9_8.1.alma.1.s390x.rpm 6deb4e540d9a2d9429c90715284366f33f5221d66bd91139b50111d6937d74c7 osbuild-composer-165.1-4.el9_8.1.alma.1.s390x.rpm 8d369898257ab1e11e080a875b7f72aa5b0e22077e54c6843dbd112eb030b4a3 osbuild-composer-core-165.1-4.el9_8.1.alma.1.s390x.rpm 9c1815c04a60baf5aea3e89218fe0d2f5cea06cfa3cfe6196aebc0fce8d53194 ALSA-2026:65158 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987) * firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943) * firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971) * firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946) * firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973) * firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990) * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940) * firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960) * firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976) * firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974) * firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957) * firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942) * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939) * firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972) * firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945) * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-74944) * firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962) * firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default thunderbird-140.14.0-1.el9_8.alma.1.s390x.rpm 7e97959218aac7476eefa2e21fe1894988d6d9cb8fced30b70e4079dcb1cba39 ALSA-2026:65606 Copyright 2026 AlmaLinux OS 0 1 Important

gpsd-minimal security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The AlmaLinux support for this package is limited. See <https://access.AlmaLinux.com/support/policy/gpsd-support> for more details. Security Fix(es): * gpsd: gpsd: Arbitrary OS command execution via code injection in gpsprof utility (CVE-2026-60122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gpsd-minimal-clients-3.26.1-2.el9_8.2.s390x.rpm c16cd9d3266ebefa5f01ce1eb9b2ac6e92cfaad34aae639df200ca00c6942553 gpsd-minimal-3.26.1-2.el9_8.2.s390x.rpm cb1280dd6388df571448edaf125ba06b8052e181ae2fa8c9cdd66b67db37af15 ALSA-2026:6570 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default rv-5.14.0-611.47.1.el9_7.s390x.rpm 144542cca74baa0332232fd117dc599be85c1d0dfd4880ed481d91f4b1c2586c kernel-headers-5.14.0-611.47.1.el9_7.s390x.rpm 192e8b4a2d25a4287ba2b735c9bb28793743366eb21e8bdc2d4d5ffb3454ff1c rtla-5.14.0-611.47.1.el9_7.s390x.rpm 462a99bbd58968853d08ca22a1f3300af7a30c6f171abc8f7c643a918578a4a5 kernel-doc-5.14.0-611.47.1.el9_7.noarch.rpm 64897f10f4ec67a6df5fa39e0ec8ecfc5cee61c6168a1c230a32b1f1c8d3faf2 kernel-debug-devel-5.14.0-611.47.1.el9_7.s390x.rpm 6b839c5cf546b383dad62ab0e36157d4d16b06db3ede097b8ab298dcfc11e0c4 kernel-zfcpdump-devel-matched-5.14.0-611.47.1.el9_7.s390x.rpm 94ad38f1b6b988808f47cbe07e0d4d78bffc94c8b638907ad79fc5c67916490b kernel-debug-devel-matched-5.14.0-611.47.1.el9_7.s390x.rpm 9fd9b7eb117bf7a67f9b69c507d2d3fb890f1a1987672236921d6daa075c0d6f kernel-zfcpdump-devel-5.14.0-611.47.1.el9_7.s390x.rpm c503c92a015dc2e641410e13f13a22a108db25e923dd5022a6d835f8d92f1a27 perf-5.14.0-611.47.1.el9_7.s390x.rpm f331cd3a1db7ee123f3e212a8511dbb74acffd23af40275aa1f23dc56e067d04 kernel-devel-5.14.0-611.47.1.el9_7.s390x.rpm f75a2b9cb9bcbb0da4116b17ea5b42429d363b06b9f391b7420bd9e428b570a0 kernel-devel-matched-5.14.0-611.47.1.el9_7.s390x.rpm fb9263b69b6a58ce823b41f9ef56afe15be46a04f21821b563962bc815fca76d python3-perf-5.14.0-611.47.1.el9_7.s390x.rpm fe554b6436302648bf756999669b4dfdf5dc52ca8e75221875fe39f366de6a8a ALSA-2026:65993 Copyright 2026 AlmaLinux OS 0 1 Important

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: Qt: Denial of Service via out-of-bounds read in text codec handling (CVE-2026-9499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default qt5-qtbase-private-devel-5.15.9-11.el9_8.1.s390x.rpm 04d10c277a3ec0b894ea4355fc674619b9d4ab2b3c8836b41ce397c779ac94ef qt5-qtbase-examples-5.15.9-11.el9_8.1.s390x.rpm 1ec0101a07db201e441fa6ebfa77307744ff9f55e73b2161043a6d97a76f9bd7 qt5-qtbase-gui-5.15.9-11.el9_8.1.s390x.rpm 2c230baec24194255ee62eb2207e4b7951d8a576f210ed6ed6625694e2772351 qt5-qtbase-mysql-5.15.9-11.el9_8.1.s390x.rpm 3fde9aaff7206250f5b6ddff4d75b359b7d7d47332cb7b6b257742b335f21f96 qt5-qtbase-5.15.9-11.el9_8.1.s390x.rpm 420c3bf68e0a6bfa39905754b89d35cbd5f66b0936c56754ac3a86a0cd589710 qt5-qtbase-common-5.15.9-11.el9_8.1.noarch.rpm 8200d322f0868b16bfe5e1744a0f8e4d45310a89141ff46b84ebdb59a5d4d6d7 qt5-qtbase-odbc-5.15.9-11.el9_8.1.s390x.rpm 95bfb2310494c7f1701543aef2e81aa7082a583e351e5f3699f7725dbf165012 qt5-qtbase-devel-5.15.9-11.el9_8.1.s390x.rpm 9a202015659e2ebf0b5c4b9f8cb9f71b289ec2ddbe107238e97d451f16a03487 qt5-qtbase-postgresql-5.15.9-11.el9_8.1.s390x.rpm 9b9d77da765513cef44184c894376baea8d35c125cee4456a2e32ca3aeadb708 ALSA-2026:66179 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fix(es): * DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-19546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.5.s390x.rpm ffb4f6f3c958261fb6e21e307a125b67b5c90d9d068cb9d0938e4aabf0d7eb34 ALSA-2026:66180 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266) * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306) * kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) * kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002) * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223) * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275) * kernel: ipv4: account for fraggap on the paged allocation path (CVE-2026-53366) * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563) * kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) Bug Fix(es) and Enhancement(s): * KSM to deduplicate only zero pages [almalinux-9.8.z] (JIRA:AlmaLinux-249161) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rv-5.14.0-687.46.1.el9_8.s390x.rpm 127f3bccc6bc73c47c508366890865d4a27420709e91f454d99cacb17a50858a python3-perf-5.14.0-687.46.1.el9_8.s390x.rpm 54c6b3b7fc336184736220a0ffec11fad87b803db03c1cd9b09f36ff294e037b kernel-doc-5.14.0-687.46.1.el9_8.noarch.rpm 5558018523ede0ec038847ea2ac92108f58b79f421c42473ca786811a88868d6 kernel-zfcpdump-devel-matched-5.14.0-687.46.1.el9_8.s390x.rpm 5e360b64b040ff4c6592aee8a7133220e5236eeb97cc28800e56e7c79f184701 kernel-debug-devel-matched-5.14.0-687.46.1.el9_8.s390x.rpm 73da58230089df26a6908fc2d0860e603469bbaef22953783740e83be3c9e7e5 kernel-devel-matched-5.14.0-687.46.1.el9_8.s390x.rpm 7f62e9437a844cc91f4f39aaec0af85d9b74ff923cb59e77fda02696b05310b4 kernel-debug-devel-5.14.0-687.46.1.el9_8.s390x.rpm 805e6301d282ee5a4723cd269bd6934c66fecebc223ee97abc4c5fa750b2b62f perf-5.14.0-687.46.1.el9_8.s390x.rpm 8cf5162494506adac4923771508ffa203b2f3c0fad192294acec813976f2d3f7 kernel-headers-5.14.0-687.46.1.el9_8.s390x.rpm ceb2321e07cc530020c0325f1005310ab00fd8154bd2cfce6d5e89348f0c80cc rtla-5.14.0-687.46.1.el9_8.s390x.rpm da38959a246c5e1d683b66cdfd43c634f41f02dc99bc062a067228f1383d1d63 kernel-devel-5.14.0-687.46.1.el9_8.s390x.rpm dc6c650bb056a6d666f88cc558512b8c55568b4db51312d974d2d88d8262fc1b kernel-zfcpdump-devel-5.14.0-687.46.1.el9_8.s390x.rpm fc70ba7d2dd1da2e45c127fdd5ddab165f6b377de02d129dfbcb1f7d4cf58303 ALSA-2026:66203 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-lxml security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href (CVE-2026-49825) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.12-lxml-4.9.3-2.el9_8.1.s390x.rpm bb27fdbd2ee03c458faf2a1166fa0af7180d8d39101d5cd34d1b332930867089 ALSA-2026:66204 Copyright 2026 AlmaLinux OS 0 1 Important

python-lxml security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href (CVE-2026-49825) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-lxml-4.6.5-3.el9_8.1.s390x.rpm f06a3df5ce90a817cd2b74851d72ca428f2b910376d3618af4c8c9fb513de33c ALSA-2026:6621 Copyright 2026 AlmaLinux OS 0 1 Moderate

crun security update

crun is a OCI runtime Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default crun-1.27-1.el9_7.s390x.rpm b61a56f9a4a53a8cc97abc6a04cbb285aa193a38aa7897c9de199dbe0a4fab52 ALSA-2026:66341 Copyright 2026 AlmaLinux OS 0 1 Moderate

apr-util security update

The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fix(es): * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) * apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) * apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack (CVE-2026-32327) * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default apr-util-sqlite-1.6.1-23.el9_8.1.s390x.rpm 3828299cbe5d38071441583a47feac747b7fe81094d0a7ed11e92bc15cedb115 apr-util-devel-1.6.1-23.el9_8.1.s390x.rpm 406202a852de0b144519f049e2d2f84b12e254ce2f53a3ec3b49b17092228dcb apr-util-1.6.1-23.el9_8.1.s390x.rpm 65b0ea5a80aeac07f6330faa199d9dd05632acacdf27822529a28c9e56853f28 apr-util-bdb-1.6.1-23.el9_8.1.s390x.rpm 77c1c74c2659e429153df0008e484485fbca448aff5497ba21ba2c384deda335 apr-util-openssl-1.6.1-23.el9_8.1.s390x.rpm 805dc6d38f91043646a49dd690bce9707563fd1d0361612cbaf60c2595352a5d apr-util-odbc-1.6.1-23.el9_8.1.s390x.rpm 84a1c364a57868ee7f6f8d3ed4b4d5daed6cdda60eee29f449e858c76c8af7b5 apr-util-mysql-1.6.1-23.el9_8.1.s390x.rpm 8b8d74529eb97b4cff33ae14abd1c6b27a4db51b6548c5d312e814f4a14bca06 apr-util-pgsql-1.6.1-23.el9_8.1.s390x.rpm 91e830298f6f89ae1a541f4a8af96d7d52ef898cfc4c675402add2466e007306 apr-util-ldap-1.6.1-23.el9_8.1.s390x.rpm 98e219835e0c2f1629f09bea757a27c5dd4ad9d80ce9b60d589697aac7d55ab8 ALSA-2026:66347 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway (CVE-2026-55193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default freerdp-2.11.7-7.el9_8.7.s390x.rpm 24e44c5aa1a10f63bb0ab441cf0d9ba75864e58736fb3a446f3d40e57a346e99 freerdp-libs-2.11.7-7.el9_8.7.s390x.rpm 345c696131da975e01724109d5471cf284978cf943844a89a147cc16b893eb1b libwinpr-2.11.7-7.el9_8.7.s390x.rpm d4b5f7dbca9d744a19da72de7c0a32391121d361be485b0f19fd6520607c2d18 ALSA-2026:66364 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default git-lfs-3.7.1-4.el9_8.3.s390x.rpm 3eff1dac7fb1bf1cef79af1ed732e836593de39164f75882e6b7ad64a90b3c6d ALSA-2026:66366 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420) * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859) * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892) * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857) * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076) * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072) * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078) * vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default vim-enhanced-8.2.2637-26.el9_8.21.s390x.rpm 0c14252fc35482d56cf8477b60c573bb4398f818808510ed26409ba3d8b3965e vim-common-8.2.2637-26.el9_8.21.s390x.rpm 181f9883a40c03044ffed7cf33ed80c06ff9c38be11ad9045a2ca23d29b8b941 vim-X11-8.2.2637-26.el9_8.21.s390x.rpm 20d15ac463bb8ce174b31699ca2f612b71fbbea9720c63ec0a2b6de90e66c40b ALSA-2026:66542 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.s390x.rpm 0a58d9ff1ac485b3c84d7e17b87dce59eefa72007c58fb4e2a8bc3d9f2b02360 nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.s390x.rpm 168c4b56e9648bfe148ca4fb526cfca24c27ee3084afc4390865e226713378c0 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.s390x.rpm 36f94d2bda963879555dd57fda80781e3defc9ec749c99028f6ffb14e675adf1 nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.s390x.rpm 5959c9abfcc5c2e9377cc1ead3cb40e14406964970fec426f46b516acb2b23ed nginx-core-1.20.1-28.el9_8.6.alma.1.s390x.rpm 6809e73f80c7daa22d1446ffb6488ec8070e8ad47c5a498989d611d78682de1e nginx-all-modules-1.20.1-28.el9_8.6.alma.1.noarch.rpm c9379a6934a1a7fd2b289b46490b776c8771eb4c5e3e37e9cf8e998e08d2494b nginx-filesystem-1.20.1-28.el9_8.6.alma.1.noarch.rpm cae767fbb7a5a0aaab79574a1a6798e5ff8527e17c48621ce618aab8810fc920 nginx-1.20.1-28.el9_8.6.alma.1.s390x.rpm cc61d611683c3b481cd88381521c78bd81c0eee7399b75be5b9f0a583302e59b nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.s390x.rpm d5762d655e6238451ccfed1472d12e0eba5f0d75d1aba9d589396a2845156e8c ALSA-2026:67133 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365) * firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874) * firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121) * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145) * firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119) * firefox: Use-after-free in the Audio/Video component (CVE-2026-84120) * firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124) * firefox: Use-after-free in the Audio/Video component (CVE-2026-84122) * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-140.15.0-1.el9_8.alma.1.s390x.rpm 701ac78e91c997d91aea0b08669e3e9123ade9843fb78db7b285ad84e87b7b10 firefox-x11-140.15.0-1.el9_8.alma.1.s390x.rpm dfa3d6dd748ddcd62e48618cb790274d59c80f89a3948eafb29f414d9b82fc4a ALSA-2026:67146 Copyright 2026 AlmaLinux OS 0 1 Important

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado: Tornado: Information disclosure via improper handling of credentials during HTTP redirects (CVE-2026-49853) * tornado: Tornado: Denial of Service via uncontrolled gzip decompression memory consumption (CVE-2026-49855) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-tornado-6.5.8-0.el9_8.1.s390x.rpm 107aa9fc2ffd293c1bdcf64fb703b665746c0cddba8468440389eeb88105eeef ALSA-2026:67150 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CVE-2026-63945) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Wi-Fi subsystem out-of-bounds read via crafted frames (CVE-2026-68402) * kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376) * kernel: wifi: cfg80211: validate PMSR FTM preamble range (CVE-2026-68406) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) Bug Fix(es) and Enhancement(s): * gfs2: Various xfstests fixes [almalinux-9.8.z] (JIRA:AlmaLinux-178219) * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-9.8.z] (JIRA:AlmaLinux-193025) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-9.8.z] (JIRA:AlmaLinux-193050) * Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch [almalinux-9.8.z] (JIRA:AlmaLinux-224489) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-headers-5.14.0-687.47.1.el9_8.s390x.rpm 114ae867b52a54bf43eed1fd6d89998ad391e00497abde6f45ef16ff0e285ac6 kernel-doc-5.14.0-687.47.1.el9_8.noarch.rpm 18764989ced67c1daf14bccf38bb7ee740ca86ad859cedb9f676b672eada1882 rtla-5.14.0-687.47.1.el9_8.s390x.rpm 18e524fa7bcf4c0afba519debce66c2e19e90032bb7f81f71337344a4f1169be kernel-debug-devel-matched-5.14.0-687.47.1.el9_8.s390x.rpm 517a0a76d22d249adfee72edf58830d39e693c326770439a2681e8b15eccb9a5 perf-5.14.0-687.47.1.el9_8.s390x.rpm 79b89aaf3f29aadaa196feae6588a3128ca7d9cb911998543fa04f036dd99e89 kernel-devel-5.14.0-687.47.1.el9_8.s390x.rpm 80530d9b0c49fc99908b10f76c90d4c5092ed01c52d0829ce1bd859a592cfb54 python3-perf-5.14.0-687.47.1.el9_8.s390x.rpm 9141eea9ee4eecccc28117d4a7f0146db2b5f867f3a2d56f8ba761566016e35f kernel-debug-devel-5.14.0-687.47.1.el9_8.s390x.rpm 946a92f895b6e3446582b8661ce2152a16637e2027235b6e82340cdab44b15fe kernel-devel-matched-5.14.0-687.47.1.el9_8.s390x.rpm ae1c5c0a328169c9923eada50aea8c38c3d065be398d3ffa66ef3e8f8514193c rv-5.14.0-687.47.1.el9_8.s390x.rpm b94cd415930e45a3863678ed4cc35522ddc2da0d33f365ff307bb8ef319953a0 kernel-zfcpdump-devel-matched-5.14.0-687.47.1.el9_8.s390x.rpm c12173c306b3460ef8bf5fd00dbec3c975212c2c2486871d7406f43c564e1856 kernel-zfcpdump-devel-5.14.0-687.47.1.el9_8.s390x.rpm d8228cc0d0b10cd6abfd245ff69e90446eab758b4b3acc6de282a348ccebfcb8 ALSA-2026:67155 Copyright 2026 AlmaLinux OS 0 1 Moderate

perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-blib-1.07-484.el9_8.noarch.rpm 00cc82d2a7da11891c9d091d76a26ebe5d3dbd10a1dae3cbb977505ef877c564 perl-mro-1.23-484.el9_8.s390x.rpm 02c7431c2b9332e6d931fb11810c92d6e89d6d3b53adaf46e8a1b94018545ffa perl-5.32.1-484.el9_8.s390x.rpm 07f4953fb93242f3fb4b92b9f5cb3b5545eecab4342487e9787b0aca9f616c43 perl-NDBM_File-1.15-484.el9_8.s390x.rpm 12517d858610c04356b246669d070f89e43caca04065b11d58cc60d6a0c99c6c perl-DBM_Filter-0.06-484.el9_8.noarch.rpm 16d44a931822311966c33def0b37947ac345c6289f4d3130ae2ccbcaf77af7c0 perl-sort-2.04-484.el9_8.noarch.rpm 17e3465a8f0680366f3637f3d803a8fb1eeeb6d37714b3a1bf09251be3aa5f31 perl-AutoLoader-5.74-484.el9_8.noarch.rpm 1cf438a8dd96414d5f0b322ebca079ce9cad9c5c24c2555cad438a3a3c523e86 perl-Attribute-Handlers-1.01-484.el9_8.noarch.rpm 1dcbcab009b552a8ea6e2c1583c10713d81339c8c7a081e6653ff3b10c95d562 perl-Tie-4.6-484.el9_8.noarch.rpm 1ebcd58c278904e454051a06bc90dcfcffbda7bf0dad30e74581fb0b98dc0600 perl-Thread-Semaphore-2.13-484.el9_8.noarch.rpm 21001f0da3f9cb1613b27321361ba5da95d5fa7a0776b42126082ca0a886c414 perl-Net-1.02-484.el9_8.noarch.rpm 237eb2caefb414e076fa5cc363e7250d461cbe83670e2892e5f7c700f8c3a579 perl-deprecate-0.04-484.el9_8.noarch.rpm 258bc3e54dcc4c96412e21ec2d7e53287a314c0d31af1cf60cbfa50b63db5062 perl-Sys-Hostname-1.23-484.el9_8.s390x.rpm 25941c164855fcc5a5e0dc517ca907c00e7eb014367649968029d71b56f84e57 perl-Hash-Util-0.23-484.el9_8.s390x.rpm 274c42334d6b7ee71f569db4a9f0075a9454603272c76361fe1e5af37c6f886a perl-meta-notation-5.32.1-484.el9_8.noarch.rpm 29bd4b007b84bd0d80cdf04d354488b6d7ae834970ceea6c50bb995f71ff73c7 perl-POSIX-1.94-484.el9_8.s390x.rpm 29ff9bdc1a9d38827488d342b4451971b7d8993053fcb128dd1f75ae5ca22150 perl-Pod-Functions-1.13-484.el9_8.noarch.rpm 2bb30c5477f2e1eccb33517f4bd808e51ee9eb193118a12c34f8aac8d18d8a71 perl-Search-Dict-1.07-484.el9_8.noarch.rpm 2f861eff655b40760ca58ba206c6886a00c11872c2e797f3870e94fdaebbd91f perl-English-1.11-484.el9_8.noarch.rpm 3275aabc74b472dfc28d281f71074ff65537c2fc665e810fb7ef0eb1f982a48a perl-ph-5.32.1-484.el9_8.s390x.rpm 338ea7d6af41bc6886e60a5b9a2cde09319dc52778a3816b8876b7a703b67cae perl-FindBin-1.51-484.el9_8.noarch.rpm 339c83f70d416f740f1632fe8295395701bbeae96fd73ca87f5fbdc7ea103e95 perl-Time-Piece-1.3401-484.el9_8.s390x.rpm 36cadf03343a6ca74787aae3294d9e0b68c1eda3260c62f0205d1684d301ce13 perl-Pod-Html-1.25-484.el9_8.noarch.rpm 3b56ebce8d1be0cf96e4bf5a32339d6eaa909ed6729afea93fe897aa0dafc8d5 perl-vmsish-1.04-484.el9_8.noarch.rpm 3ddc18fb4e524ed78afdbaa43440ff98fadfd765532595e8ed3d33ac9b034970 perl-Term-Complete-1.403-484.el9_8.noarch.rpm 416d1800396f431cb97382a296fcfbcc5157ca66c350ba9c17f2040339a973bf perl-Term-ReadLine-1.17-484.el9_8.noarch.rpm 417f0cdac648871329d765f06838412c44441d73350ebfb560fec792833082ad perl-IPC-Open3-1.21-484.el9_8.noarch.rpm 449c2c55c0a3a5335888d65bc92982174ee17b92a65015a963de90551c2135a0 perl-Symbol-1.08-484.el9_8.noarch.rpm 4b30d52851ed594b6d7cde7d42e273a340e76118d048e42f1ebc7721a18993da perl-ExtUtils-Embed-1.35-484.el9_8.noarch.rpm 4f301e82cf5a1f46cb31fee55a39197c8f4922aee857fcd2767e594f4b4aa8fc perl-ExtUtils-Miniperl-1.09-484.el9_8.noarch.rpm 51d913e23a195f6d2d48645b24a6ea4d4a407bf1ebc0769dcfae2373c08afafa perl-vars-1.05-484.el9_8.noarch.rpm 54f8049ced1fb889e765db13ded12191a48d87ba0bb3b792a905e9a91ac3da61 perl-open-1.12-484.el9_8.noarch.rpm 56a5a7e7d66017770405976d4316cb28f8a5a9efc73c90a1210cbe2165c92e4b perl-overload-1.31-484.el9_8.noarch.rpm 5ad9293d799e79332f906c4c828f6868f5f9c613e35c4c4fe3a1d997421c0e3e perl-I18N-LangTags-0.44-484.el9_8.noarch.rpm 5bb968c2803ac1bae02a495f63508d008b0c0989f496879f3460e5f0f2346ee3 perl-NEXT-0.67-484.el9_8.noarch.rpm 5cd550d963e9b691e01098a80a60d53759f55e929f4885abbd8658817de8bdeb perl-Module-Loaded-0.08-484.el9_8.noarch.rpm 5f067c1f1b18dd62411fb2d90f40500735789cddb332675b6861caeeefea7896 perl-interpreter-5.32.1-484.el9_8.s390x.rpm 6071434e286357629fd9e7231b70308a32d4e0dac9c28c253f617fb4710b5a45 perl-Fcntl-1.13-484.el9_8.s390x.rpm 60a676674a8a16ca5eb5406444dcead0de87298b61caed398b67009c30f6dbab perl-GDBM_File-1.18-484.el9_8.s390x.rpm 6268256d3e31e7b210df216664e4b7d727dfc94a0691e3afbf89daef161de757 perl-libnetcfg-5.32.1-484.el9_8.noarch.rpm 6469a50f43dc76dec4d7556a5d3962da2a508be83267eabd11d7cd4eb3bba0b5 perl-sigtrap-1.09-484.el9_8.noarch.rpm 649a95544e85d3d43547370f982970f85c2eefe0451b136ac197238d4cdbd562 perl-User-pwent-1.03-484.el9_8.noarch.rpm 6552c9fc991b25ea6116eebe8632c7d517a5eba7f2515c4da7f13361cc4c05e7 perl-Locale-Maketext-Simple-0.21-484.el9_8.noarch.rpm 6ab6c8a42114b9c2b0c5e5e54b58cddf889bc7cecdfc247415f0dc3bb24f6b08 perl-File-DosGlob-1.12-484.el9_8.s390x.rpm 6b02de46fd2cf39ab5abcde12cbd5c9787330541f670222bedb5c97df8d2f831 perl-subs-1.03-484.el9_8.noarch.rpm 6bbc7f4ba10a589cd76b8f4664bc56e6d198848e873d21869a72418bbcc8757b perl-Opcode-1.48-484.el9_8.s390x.rpm 6c8430d645bb6b38217922fa28e02650dacbaedce644ca4fc19b2551f169925e perl-File-Find-1.37-484.el9_8.noarch.rpm 70807ce72e63326eac639e9f618a71977bfdabed1e8da0d8413be4075b7beeee perl-Tie-Memoize-1.1-484.el9_8.noarch.rpm 7338d3d4b05c5df631635a0dc95577396c062f58831194922da8e4a569ad923f perl-SelectSaver-1.02-484.el9_8.noarch.rpm 73f700dd3af882a6f445153fff51f8f30e458751b2072685ebda4cfd0f335886 perl-Config-Extensions-0.03-484.el9_8.noarch.rpm 756682247d5016a0c7e99a118e83fe908d577cc644a38c2e02aaae6bdb5c1c94 perl-Devel-Peek-1.28-484.el9_8.s390x.rpm 761fb1cc07090d2df256fffcba08862d4ad9886c107ac641a1992c015058eb3c perl-filetest-1.03-484.el9_8.noarch.rpm 7d06e7f83713990fe0c5c99aa169d60a7bea5ff8e7d155a5e6395c3f4f6d2836 perl-Safe-2.41-484.el9_8.noarch.rpm 864b968966cbaade9ff404fe050888d39e39c2a15a28071a5b08b148ca980b1f perl-Hash-Util-FieldHash-1.20-484.el9_8.s390x.rpm 88b532cf30b587b4f3b1686c56bacac9d048b5d2812bb33bdeea6d5f144f1cf9 perl-Class-Struct-0.66-484.el9_8.noarch.rpm 8f67f3ed843a2d3feb33062b477ae557430942c97fe83518bc64c4aec8955a12 perl-I18N-Langinfo-0.19-484.el9_8.s390x.rpm 923ad72c11ae6f2096120913df12403b46a627797e275aabe286ee0081f836ed perl-doc-5.32.1-484.el9_8.noarch.rpm 92ab603ca3fbfd442dfadce225de4026792a70dd13a270b4c4bf4471b4c2e03d perl-Devel-SelfStubber-1.06-484.el9_8.noarch.rpm 9a49903c536ee3061f48c5949382cb55691e4ff4db17e99ad3ddca246e6b306f perl-Text-Abbrev-1.02-484.el9_8.noarch.rpm 9bb896b991d1f5be44561deec9eda7220033bf5c6aefc3fadadca3bc7bb09c34 perl-DirHandle-1.05-484.el9_8.noarch.rpm 9db1b85a2df0e5127271d5be92fa477368d4c1f98350031ff3d5423483593b0e perl-Time-1.03-484.el9_8.noarch.rpm a1601554940c061da13a5ff5b0d3029d201fc114d410f5ecab43435886bc9439 perl-macros-5.32.1-484.el9_8.noarch.rpm a48242ea9810e229336c6c1d8c2d6b0ed1130d4062cd24287417aeee5e3405b2 perl-Thread-3.05-484.el9_8.noarch.rpm a4b0626e6b7ee1aad585cfc9cf0adbf43df9d9b3fc46330d5795971678f79907 perl-Errno-1.30-484.el9_8.s390x.rpm a916c14fa7335496dba710e5ceae911e8a328c4ad6aa2680b6261f71fed7ab90 perl-File-Basename-2.85-484.el9_8.noarch.rpm aa3dce56ce5aff117a52bc8dc2efd1a1ee81430386832255011800b409775cbf perl-fields-2.27-484.el9_8.noarch.rpm b2ed105529d93aa111302c55f7bb0ae932840eae2d7e46214c5a74b6921091c2 perl-Math-Complex-1.59-484.el9_8.noarch.rpm b4535e173ab53ff9165338ebedf4f9532de417099598dfd5dd3514022b774081 perl-AutoSplit-5.74-484.el9_8.noarch.rpm b95cafe18febc1c92183d4c3743daa09fa329308415aa375b8eb47fbeb31bdfa perl-libs-5.32.1-484.el9_8.s390x.rpm bfdef2d2b0e0ce918c88e238c8aab18717098a49ada6f258c97bd748ad2a974d perl-SelfLoader-1.26-484.el9_8.noarch.rpm c2be0d0a75859b8c8dc7966bf19b162cfaa5ca9e121b780972787cc57ea26fa8 perl-Tie-File-1.06-484.el9_8.noarch.rpm c3d55b9e4834fa8a5382beb358152eb16f0a9fee1462fa85b359301223b5e17a perl-base-2.27-484.el9_8.noarch.rpm c3f8d248ebdc34e5d31223fdbef9d7cf51f16d276356f4801fe8f1d92798efa5 perl-Test-1.31-484.el9_8.noarch.rpm c48ba7c5b24730d4689332edfa63fdce97acbfd5eb9fda5b3dbcdfc9acba1f98 perl-Benchmark-1.23-484.el9_8.noarch.rpm c65efab0c4eb12769a71be8801854e989ba6e34caf93b0439e0dcd36fef0d8a2 perl-ExtUtils-Constant-0.25-484.el9_8.noarch.rpm c98068e7b00ddc5b48e0bb0fe21ec48d9c5ef1709b17a97b3972b1e4ae34feb8 perl-B-1.80-484.el9_8.s390x.rpm cbe68cf3b59675b08aa39cfd708c7b04418f112f75fa2fdfe4b5e7b391253b63 perl-Unicode-UCD-0.75-484.el9_8.noarch.rpm ce4dc3ee8e7fdb70330557ab600ec6d41c2f678561fbff783cb370095f070134 perl-diagnostics-1.37-484.el9_8.noarch.rpm cf8ff13ac92636be559dda8d354f730e8e340b3e7e76f379bb4e7c07645d4d70 perl-devel-5.32.1-484.el9_8.s390x.rpm d096e7cbb15b132e0d77a39142da0031a0a3a6ca8c6e4425c03ec64813807cb6 perl-Dumpvalue-2.27-484.el9_8.noarch.rpm d3fe3b839da0965841f0ff00153ed5dfdf7a956bdf6424af8fb3e2c8fcedcd3c perl-Memoize-1.03-484.el9_8.noarch.rpm d540903ecf8e792f6222cc9eee020f4759ece5283e0e32ce7976f3aa65bc3989 perl-Getopt-Std-1.12-484.el9_8.noarch.rpm d7fd6e0e2ac7b2f182f30e9346b599d2e23b9ffe450770388dfd91067d8dea03 perl-utils-5.32.1-484.el9_8.noarch.rpm d91f8ff7be0001c6c17d6169cf0ceba34a3a438a148b2f192b76148830ee31e3 perl-lib-0.65-484.el9_8.s390x.rpm d98c50d40d6848138ab78dd370fd91f59a4cbda25e589e813e520aecc2628012 perl-FileCache-1.10-484.el9_8.noarch.rpm deba482267f42a85f4bf4b814855325fda8f4c40de58c28c6dc151b1b5a9cbb4 perl-IO-1.43-484.el9_8.s390x.rpm dfcb18bf73caef62ecffe9b7a8677d9fb2f73bca25656c7533539ea1fd7899b4 perl-File-stat-1.09-484.el9_8.noarch.rpm e250d5d74f5e44acb0d3e8fc7174f6edac98b8d2755b85443f0534fc180535a4 perl-overloading-0.02-484.el9_8.noarch.rpm e3346e105f05f18e15599cf1edf755a7e9e4031974826910bdf3050e614608e5 perl-less-0.03-484.el9_8.noarch.rpm e35e4016e37c3bc0860d7630708082cf7f50bac5fed16819b4be403da0190931 perl-debugger-1.56-484.el9_8.noarch.rpm e45f4344eaee1d6c5a1b734016d9976625362500ae0eea9aa1497dc655a82044 perl-File-Compare-1.100.600-484.el9_8.noarch.rpm e492dced42dacecf656038229e6cdd0a1370ba00923351fac73ca617fed2dec6 perl-encoding-warnings-0.13-484.el9_8.noarch.rpm e58e64f72477489db2fff2942082cf2fd675f32aba0edab70ae6fa6e9188c8a5 perl-File-Copy-2.34-484.el9_8.noarch.rpm e8a1a6f964938371d853de66caa6a300511a60c2c678df2ca98c83ed09d21c66 perl-DynaLoader-1.47-484.el9_8.s390x.rpm eb35085428ddcf7681e4526e8afd4c0030cdea93e81298ddd36e5e04f0f40a23 perl-if-0.60.800-484.el9_8.noarch.rpm ede7f98d890bd54d112f9229de908d8c1f243bc837d7c84859e6e9cc08d88b40 perl-ODBM_File-1.16-484.el9_8.s390x.rpm f176b506cef6b9aeba2a71c0f63f9ed0494f24fd253ccd11d214d6125b670071 perl-I18N-Collate-1.02-484.el9_8.noarch.rpm f24b64b8a1c85b53190f81f56121dbabc603c94cd591732b66e6ffa59a97b082 perl-FileHandle-2.03-484.el9_8.noarch.rpm f48ff4e56e9527c1aca1e0a9369056f74dc88f5803c593a02527378f33e2977d perl-locale-1.09-484.el9_8.noarch.rpm f8b82202b99a33f003b36c9978f852ed85a857ddc985174f0c135e3dcb30645c perl-autouse-1.11-484.el9_8.noarch.rpm ffde53be5d492916e97c32e3a585e0c78c44de5827e93a51039554c31d363421 ALSA-2026:67165 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456) * openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798) * openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072) * openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076) * openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457) * openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874) * openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073) * openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074) * openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075) Bug Fix(es) and Enhancement(s): * openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 9.8.z] (JIRA:AlmaLinux-232828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default openssl-perl-3.5.8-1.el9_8.s390x.rpm 792f84581f849b63c59107adca5efc263c4dbd5db5514a6ec668dabe02c2bca7 openssl-devel-3.5.8-1.el9_8.s390x.rpm f03c96356fc5a47f4d00103b05c9113bcd7be1a7bede3ab01c8a54d296cf27b1 ALSA-2026:67283 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-mod-http-xslt-filter-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.s390x.rpm 41065e140e959dadd611d4d07348a8642f71a73a3e05d9bc4736bd3ccae194bc nginx-all-modules-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.noarch.rpm 50f544362827ec37d0740cb3baf7408eb494ac130d6ac0c3edb4523c791bd5a3 nginx-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.s390x.rpm 54364357c7b640ca184b6f95a8dd2c0dc70bf79d242778630d46e28e78ee35e3 nginx-mod-mail-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.s390x.rpm 9b86158d434542f34dc936a290086544b9bf4f112d859b71e0693ffc2bfed8e9 nginx-filesystem-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.noarch.rpm a2b94d3186abdb269a932e655061a884f0c125836ea9de3550bcbf339815a02f nginx-mod-devel-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.s390x.rpm a906f2c0f22aa8f6819f1da8af99a0bf1a448593bab2e7f5c8a293845b170b75 nginx-mod-http-perl-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.s390x.rpm c6a540076d2942991ed2b26e8a78e090d8da72e2b20187d950525c73482a9d08 nginx-mod-stream-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.s390x.rpm d4965baf090578d38e209681d9602c38a06d8bec631288370c80da567188edbe nginx-mod-http-image-filter-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.s390x.rpm f0f16573cc15725e3e4f377c3524df20448dab48be1a6b31d6b0964ea6260840 nginx-core-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.s390x.rpm f756bc941cef0b5fbb27c92070e0a7b4f647b9aeb549c476cda8cc630dbe1bf0 ALSA-2026:67285 Copyright 2026 AlmaLinux OS 0 1 Important

rust security update

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator. Security Fix(es): * libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server (CVE-2026-53587) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rust-doc-1.92.0-2.el9_8.s390x.rpm 172671bb744512960147ec2d12c6cd63b52d65c9624ba31542b17a215b88c7aa rust-toolset-1.92.0-2.el9_8.noarch.rpm 180513280d5b19d9563b41796d5d56d0f546d18148c0c3ad4ff6606d8617b56e rust-debugger-common-1.92.0-2.el9_8.noarch.rpm 48f4c2cb3f87dd7b1a9dc946ff10acc0538a63a9f810ef0f7624783fe180988c clippy-1.92.0-2.el9_8.s390x.rpm 4aa73fe1f4bb803696fe581644b259b9a41c8f7d4500519777948871482cb841 rust-lldb-1.92.0-2.el9_8.noarch.rpm 54511f84f3ccb4461fd8d7b306ad96a9ba62ae04344cddd43ebebed046f2c85c cargo-1.92.0-2.el9_8.s390x.rpm 56a40e66b0668b8205e84c72da24816069d21f27768cd5ba198f3a0e81cd6dac rust-gdb-1.92.0-2.el9_8.noarch.rpm 5dbc3719e024877bade76b8dbdb3c6fb2e3798bd4b7ad7e0bdea8ddee3df81ad rust-std-static-1.92.0-2.el9_8.s390x.rpm 6bb4af90bb8c22dc6d1e8a733291397f87d2c1e1d12ddd0c7e4ca8be484f949a rustfmt-1.92.0-2.el9_8.s390x.rpm 96a2353d2acef572d40b7a227826ca5021bad3c98f84f14ded5b360fd1247e5b rust-src-1.92.0-2.el9_8.noarch.rpm aa8d3fec6a91c88b33f03cb5b41468b4351b64fdeb6639251148bd3f17276e8e rust-std-static-wasm32-unknown-unknown-1.92.0-2.el9_8.noarch.rpm b13954b02e3711ff971b9bd111a4bcb9e77080b6513d5936eaff8be2fde7de25 rust-std-static-wasm32-wasip1-1.92.0-2.el9_8.noarch.rpm bffe40c0d2cda0a4834451bbb174fbbd75db15a542a7aadaa2a7b0f3a2022a42 rust-1.92.0-2.el9_8.s390x.rpm c2ee568f58a25f54b310607ba8f111c2c6e269ed5419406ba3c61f0f69ee450a rust-analyzer-1.92.0-2.el9_8.s390x.rpm ec5974b4e646af809b8873786e5aec6cb9151d88e3c1e019dfef128c67dfd876 ALSA-2026:67308 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nginx-all-modules-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.noarch.rpm 02b09e728f61c62cf1d9c7ad043dc0b9d65932c0ee5bf7784bd312c3b89677dc nginx-mod-mail-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.s390x.rpm 35323883827ec18bc95fdc8d65e8cb0e99e7a6791d72abe46668ad57310ddbb7 nginx-mod-http-perl-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.s390x.rpm 63d0ac5688a476936c299f92f14aa2ef407f610fe06aa979fa4ed318b0eabf88 nginx-mod-devel-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.s390x.rpm 73de0053f347dd4b81037f9750cb53e3ae7d00385567322b8d3b4fdcea39fb55 nginx-core-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.s390x.rpm 74b31f5b8a910a2b8c1c357ab64d2d2231e1e837c6e423e002c5b3eb89d395de nginx-mod-stream-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.s390x.rpm 8cbc5e270a1f48ff6d19c728f31e2e0e6b1934914f520bc671207dcf9c70bffb nginx-mod-http-xslt-filter-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.s390x.rpm b922ec33da560de40361e02103a03ab53e30ee96f8c0973bf876e8001b6afb0d nginx-mod-http-image-filter-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.s390x.rpm c17f752fa99a19e89921df3b86f6f2cad8e936b3bac535b50dbe4f74cdffaa81 nginx-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.s390x.rpm d7dbf49db4fff73e9a785e43b8920de9457bb03a73e8746b7339f37893b43a26 nginx-filesystem-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.noarch.rpm e9776f7214ce683774b346f415f444e38286a300b452debff13b0925e8a739aa ALSA-2026:67462 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460) * rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions (CVE-2026-70454) * rsync: rsync: Arbitrary file deletion via malicious file list (CVE-2026-53789) * rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths (CVE-2026-53790) * rsync: rsync: Memory corruption via crafted file entries (CVE-2026-70458) * rsync: rsync: Denial of Service via handshake stall (CVE-2026-70464) * rsync: rsync: Local Privilege Escalation via Symlink Following (CVE-2026-53803) * rsync: rsync: Unauthorized File Access via Symlink Module Root (CVE-2026-53784) * rsync: rsync: Authorization bypass via `auth users` directive parsing (CVE-2026-70463) * rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure (CVE-2026-70452) * rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791) * rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795) * rsync: rsync: Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456) * rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (CVE-2026-53793) * rsync: rsync: Denial of Service via Algorithmic Complexity (CVE-2026-70453) * rsync: rsync: Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457) * rsync: rsync: Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461) * rsync: rsync: Arbitrary File Read via Symlink Following (CVE-2026-53802) * rsync: rsync: Arbitrary file write via path traversal in --relative mode (CVE-2026-53785) * rsync: rsync: Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783) Bug Fix(es) and Enhancement(s): * Rebase rsync to version 3.2.7 in AlmaLinux9 (JIRA:AlmaLinux-248835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rsync-rrsync-3.2.7-1.el9_8.noarch.rpm 7d9a830ad81c396036b02e9fde77cacde85572516743db30575017ec1b4f4802 rsync-daemon-3.2.7-1.el9_8.noarch.rpm b5d900802bfdefae90bb876bbf3f550bd65797f89a787ceb8668bb274765fd7c ALSA-2026:67470 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (CVE-2026-72045) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * gfs2: bufdata leaks [almalinux-9.8.z] (JIRA:AlmaLinux-178223) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-doc-5.14.0-687.48.1.el9_8.noarch.rpm 0c5255aa66e1571bfd57d31f99ac574859dbb59bd2dd06b247eb654e79a02e29 kernel-debug-devel-matched-5.14.0-687.48.1.el9_8.s390x.rpm 411dc9eb74d104b9b008768e550e03879026627f4ed87a0143fd3a201401612d kernel-zfcpdump-devel-matched-5.14.0-687.48.1.el9_8.s390x.rpm 4da0761132a8b2745ff3d0d2113144a7589e62e63f8c4dbfe293fd39799db0d3 perf-5.14.0-687.48.1.el9_8.s390x.rpm 7bbbae49c8d167cf96f75253a55f5d856fbcfade3a16062d0804ce82a3ce56fd kernel-debug-devel-5.14.0-687.48.1.el9_8.s390x.rpm 7f6d629082b91946dab2ebf79df667c3c712502a4b5f04ffbb947db574bf369e kernel-headers-5.14.0-687.48.1.el9_8.s390x.rpm b3ad324cb822fcdd45aaef65d3ffc2636e6241f7b041cd9bbdd5a324cb3a9fa2 kernel-zfcpdump-devel-5.14.0-687.48.1.el9_8.s390x.rpm c39cd24f5b7a99489df55566f6ead6152bc31040f920ba3277b63da3423a6c68 kernel-devel-matched-5.14.0-687.48.1.el9_8.s390x.rpm d3d9d0d15c5a142f84691d581880013740ecfe942e712257a7608351a9ff42f4 python3-perf-5.14.0-687.48.1.el9_8.s390x.rpm db54fa72290066b43b3e38fa1d723fc23b9811ff9f9bbff0f47c8003e186298c rv-5.14.0-687.48.1.el9_8.s390x.rpm e03195bcc565a5bb025742010eb35a70f603809755831da877612a666a8c1f2a rtla-5.14.0-687.48.1.el9_8.s390x.rpm eed80f1d7023204b4a1d9b814a28619b6c0dc922786d3f41134edff952533065 kernel-devel-5.14.0-687.48.1.el9_8.s390x.rpm f3faf22eac4db5941e60d9fa83f0d52e6e9210683eed33ae9c132c3d253fd030 ALSA-2026:67491 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default postgresql-plpython3-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 0066af49473552e981b74d77b870fee9e63bac1036d35e6c4746cf7f50209a90 pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm 0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906 postgresql-server-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 03098498b14804e05099f19e87612c19a6169ec09e96d55352eb00cd5a652678 postgresql-pltcl-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 096e94407d79c9e7052a347f1cae602804e90dedbb93e30e0b467c2d037234d3 postgresql-private-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 0b8acb99047c9ff7f60e7f366d494dd327a1bbfca1b2640bc4e0ad4b2d57f989 postgis-docs-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 1f8badf906c166b3b673ef8cab77c9c50da35aa172078e12692505e7e6cacaf5 postgresql-test-rpm-macros-16.15-1.module_el9.8.0+311+c39b793b.noarch.rpm 1f8e0041a0fd1a55a894b645a43c1bef24abc455b3b25fe575e89120bfda9388 postgresql-plperl-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 2f9f268d3c604488e0d176a3210f5474db641ee3215ff3122e597376ecfe8c81 postgresql-test-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 3b648ae855e2c8a808cc23897ede8ef914607281bd5bb9994381807d8f93f0fe postgis-utils-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 653135074ae16c24f1999605bed4b1435c7a0849ca5683980fb79ae74570713f postgis-client-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 8f719a399f3020fcb3dec2ef66310c2a0474800e9db8c92b7ad00cdbd17c3257 postgresql-private-libs-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm a3bd3695eb00f0d37e4a54e65f0428db8c8a92b6fc4196d5a7a5b843d6b3992a pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360 postgis-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm a5e446aa220be67fbed83aef41073b03900ba55924fc1b2d1105df72ea119be5 postgresql-upgrade-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm aa631aa845a02d38b026c297d00099ada302ffddf4ad6bd31665cd5f11ef2502 postgresql-static-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm b81e6f45e47e41b1c7b8adf114a3841fee5e1f1f46cd877bc64a7509cfd04e9c postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-upgrade-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm bac457026ec968f28e6a88c8e62a6e8702b1e7ead5a273115564b9a161fa2db3 postgresql-server-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm be9b7a18b2848c5c2de80a57cb88621833f47cad345a843aa68142910a08811f postgis-upgrade-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm cf89b52ed2eec449e222b03d3f398fd1a516a615c7eae941e8055c157f34ba24 postgresql-docs-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm d6964008cb05db32b08046d5dae1ccce757fb55dab5e0f43d755b4b61b9c824a postgresql-contrib-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm db3a64ef06c4c2991f7a1da00fa139fc44a9b5b38594b1efb5eda5f6eb52f240 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 postgresql-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm e8996dc72b1875e054e465e9309215b06f59a3b48d759ee70143903a1816d961 ALSA-2026:67524 Copyright 2026 AlmaLinux OS 0 1 Moderate

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.131 Runtime version: 8.0.31 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [almalinux-9.8.z] (JIRA:AlmaLinux-252247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-targeting-pack-8.0-8.0.31-1.el9_8.s390x.rpm 252a047abfbce5b37d70f318a782b63f7a021dd70f17deca7cf0de7329c3b7b7 aspnetcore-runtime-dbg-8.0-8.0.31-1.el9_8.s390x.rpm 303a6bdd0596f5cf7dcf07c8010c6c447a392f6bf5ee1a8546f7e9301ca61e92 aspnetcore-targeting-pack-8.0-8.0.31-1.el9_8.s390x.rpm 47974a0f838076d83beb78a6b678daf1563688d4f84eb5f4b8ba6bf6bf00cc42 dotnet-hostfxr-8.0-8.0.31-1.el9_8.s390x.rpm 619d65c9248122fdea3872bbaaadadea763fd39b8ed004f6f09966d77b30552e dotnet-templates-8.0-8.0.131-1.el9_8.s390x.rpm 7fb970a09f8beee2b1bc13c4b05ba6b2f5917569948bc28c7a90e996f465267a dotnet-apphost-pack-8.0-8.0.31-1.el9_8.s390x.rpm 833b5da6f905e687cb27f255006dfd4e0a90a4bba9890a1a68292654cf211fc2 dotnet-runtime-dbg-8.0-8.0.31-1.el9_8.s390x.rpm 85d2ece74675f7bee4025347036dd8d37e34f262dc0f15d86ee8887d826bd81a dotnet-runtime-8.0-8.0.31-1.el9_8.s390x.rpm dbf2af485ca193779af97385be4ee9a4d152a0c6531c3539ecf39003c3a864c1 aspnetcore-runtime-8.0-8.0.31-1.el9_8.s390x.rpm e5276817d1a706169e36d91b33fd32e033d13df217a3c02439ae5bed9f3b30d0 dotnet-sdk-8.0-8.0.131-1.el9_8.s390x.rpm e83c4180e0262c62610a4220dfcc519a8b197219e5aeb46623f8ec42a2b0a781 dotnet-sdk-dbg-8.0-8.0.131-1.el9_8.s390x.rpm f4bd6d6a875b38984fef9f5423f94da92573bbf7488dd6d1a1d2deadc2aa5db0 ALSA-2026:67583 Copyright 2026 AlmaLinux OS 0 1 Low

rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fix(es): * rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd (CVE-2026-19654) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rsyslog-gssapi-8.2510.0-2.el9_8.1.s390x.rpm 0999ae6ab7ec4aaf87d25c02bed4aff99dc4ce6492a6595b659b36bdba072403 rsyslog-8.2510.0-2.el9_8.1.s390x.rpm 0e44532a6c1eb546e413f5278492279fbd284513505272055d7c0783b250254c rsyslog-omamqp1-8.2510.0-2.el9_8.1.s390x.rpm 1be142020c2264e71888fa863a9d36102b54e215ff08ec192349fc62a71e3a98 rsyslog-openssl-8.2510.0-2.el9_8.1.s390x.rpm 1fbb254f1630ee9613310b72d22e8c4d7d00652f47665e4dd2933b9a582cbb55 rsyslog-udpspoof-8.2510.0-2.el9_8.1.s390x.rpm 2cdf0d6f80c65512511d9bb47c50d8eb6fd11976360e0ebbb654095de40dbb07 rsyslog-mmkubernetes-8.2510.0-2.el9_8.1.s390x.rpm 39c76f4f7870b3d2e3f447203a4acbe390feb83dd71efbf2149cbe2e72161c74 rsyslog-snmp-8.2510.0-2.el9_8.1.s390x.rpm 48243ebc802e4d112761ffab7ef22bac891872a30392b7b4421482028a2c2959 rsyslog-mmnormalize-8.2510.0-2.el9_8.1.s390x.rpm 5075720a7cd651f5c8428d3edb97968b77011c53b8e9a31d6e8b25fb70194c13 rsyslog-kafka-8.2510.0-2.el9_8.1.s390x.rpm 634f57b876e666a23f6674a87cd91048ff84fe102e304e213ca3dbcbf8589c72 rsyslog-gnutls-8.2510.0-2.el9_8.1.s390x.rpm 63b590aeab6ea51dc7aa54bf8a68c076931267cb043c6429041bb83a0ce7bae2 rsyslog-doc-8.2510.0-2.el9_8.1.noarch.rpm 7e1e6aa258add26ff5ceda1802063e7d7c8a36b97174ea51ed0a00f5af992fdd rsyslog-pgsql-8.2510.0-2.el9_8.1.s390x.rpm 943777b8aff4b451a571ebe06c73fc8c66819264166c3614f3eb1261cac83799 rsyslog-relp-8.2510.0-2.el9_8.1.s390x.rpm 95066ea3c012644421cf9fb5433461aeec6cf24a0ef9351f06bfc933eef98fdf rsyslog-mmfields-8.2510.0-2.el9_8.1.s390x.rpm 9d91e45d840297bc73f533dfac7a5dced7f6f5d0527d9adf5ea100099df50f37 rsyslog-logrotate-8.2510.0-2.el9_8.1.s390x.rpm b61fa63f352d892e07b03bddee24322da4540977cbea4b3055281d41d572e244 rsyslog-elasticsearch-8.2510.0-2.el9_8.1.s390x.rpm c3b6bbc8af4aace4fe654cdecebfc6c32cb52dd1d8b0b839feb38da68e1a1e64 rsyslog-mmsnmptrapd-8.2510.0-2.el9_8.1.s390x.rpm ce6db6c7855d2f4f98f94e5f0d9e65c4485487ccd06844109a93894362868160 rsyslog-mmjsonparse-8.2510.0-2.el9_8.1.s390x.rpm e3efacdbc0fe1eb7d27e23c36f3bdd152ea5ac4ae16460dced6ea4e1369bc320 rsyslog-mmaudit-8.2510.0-2.el9_8.1.s390x.rpm e6aec626bc509718ecc265aa68df27959927120ae8cea1de3e2450f8fe956f8c rsyslog-crypto-8.2510.0-2.el9_8.1.s390x.rpm eee130b64c3bb9d7f34e52a87a671875e1c266051229ea0abf2ba2284ff0cc0d rsyslog-mysql-8.2510.0-2.el9_8.1.s390x.rpm fa895c543dbfe069a4372fe083e7c8cde5010cf27608da7c88b13e9c92e8f70c ALSA-2026:67585 Copyright 2026 AlmaLinux OS 0 1 Moderate

firewalld security update

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fix(es): * firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firewall-applet-1.3.4-20.el9_8.noarch.rpm 5cb3cc37cdc25aae8a41cec2b39ef3b7bcd160ac849b08a5008671a9e36be1e2 firewall-config-1.3.4-20.el9_8.noarch.rpm 91980f7225628e2cfa8c80686f24a59cdeae2ea391e7e6ef4a95ff8cd7390f3f ALSA-2026:67613 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.112 Runtime version: 10.0.12 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [almalinux-9.8.z] (JIRA:AlmaLinux-252319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-runtime-10.0-10.0.12-1.el9_8.s390x.rpm 312424c65a26c33bb0ae8d44430ee96e11a6ad3c91ee5b9b4333cbd93c6fafb9 aspnetcore-runtime-10.0-10.0.12-1.el9_8.s390x.rpm 6e0b72b2949fa58271235201c5b8350dc1f1291944a098ac3dc255df8dbf102e aspnetcore-targeting-pack-10.0-10.0.12-1.el9_8.s390x.rpm 72ab2d5728407d3d9db06dc313d3d62d7f9e3abe0e146e3268b80bbf4da7639a dotnet-targeting-pack-10.0-10.0.12-1.el9_8.s390x.rpm 7aaa79055ac84bd005463b031ed684a9c505f312ea46dc38e48d9c79aeca5c10 dotnet-runtime-dbg-10.0-10.0.12-1.el9_8.s390x.rpm 8bfaaba3ca2629ca04707ca22e4c519ebe36c59cbdf5a27c636abdbd20cbaca7 dotnet-hostfxr-10.0-10.0.12-1.el9_8.s390x.rpm 974d81ba91dcb99d58ddcec35733ed591cb0898db80d18494248f446907f636f dotnet-apphost-pack-10.0-10.0.12-1.el9_8.s390x.rpm bc2573c48e9d5a97fb303e2b108cbddc53b89b06ffc87c62985fd9056978c36d dotnet-sdk-10.0-10.0.112-1.el9_8.s390x.rpm be2e9f68bfa76ad366b9e2e950a7ac9ba49023f0e4865649f7223e506284413e dotnet-templates-10.0-10.0.112-1.el9_8.s390x.rpm be77f2c3d4e654170370c32ec605b68870415fc6e7d48e75ed74bc7417424c9e dotnet-sdk-dbg-10.0-10.0.112-1.el9_8.s390x.rpm da8a55c206ded5829c8155fc25cdde87ddc7e45d9442f35cf1918cd5220ca761 dotnet-host-10.0.12-1.el9_8.s390x.rpm f6b58a04e69add9a4e8b34774b09e15c5c45da24643f5aae679eb62de55698ba aspnetcore-runtime-dbg-10.0-10.0.12-1.el9_8.s390x.rpm ff413c04d3e69fb4e83b8f0f07fcca7fb8ccb2b340e5a3db1a44cfee77366bad ALSA-2026:67614 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.121 Runtime version: 9.0.20 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [almalinux-9.8.z] (JIRA:AlmaLinux-252278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default aspnetcore-targeting-pack-9.0-9.0.20-1.el9_8.s390x.rpm 05b151726b918209622c92c2b0ae889fc373897dd216a823f1c5c7438ee10e5d dotnet-templates-9.0-9.0.121-1.el9_8.s390x.rpm 3b00405b16435e8eb2bf75b93d9705be96d5d03957a58184411a6fb1a877aa74 dotnet-apphost-pack-9.0-9.0.20-1.el9_8.s390x.rpm 481e7eef74900f48e693beb43a3aa64f90c12c51a31f71fa776d8d0c34f344ec aspnetcore-runtime-9.0-9.0.20-1.el9_8.s390x.rpm 546b7ed51c070e1b0c7eb3c4f46a818236cfba196af38b48a6e299d04c7ad4d9 dotnet-sdk-9.0-9.0.121-1.el9_8.s390x.rpm 5c1e3728ed45adba6bf9d4e298dcc4cb8bd096a7d26154a1cc1adf614b03f7a9 dotnet-runtime-dbg-9.0-9.0.20-1.el9_8.s390x.rpm 76ff72cdf2f8e1229aeecb0acb15816911819b2fbd2fc6379f32ae298b14f808 dotnet-sdk-dbg-9.0-9.0.121-1.el9_8.s390x.rpm 818c05b8ff86f39d6ad3872ce190dd345a3baec9bc4f831f723742679404ee4d aspnetcore-runtime-dbg-9.0-9.0.20-1.el9_8.s390x.rpm 8c8e1f820f24b20695490e26ba309b95e80ed78e1a22808b63aa401083623b42 netstandard-targeting-pack-2.1-9.0.121-1.el9_8.s390x.rpm a5ab384ea68a04e7914955373ad0950b30db4490d6eb78041968341679bc390f dotnet-hostfxr-9.0-9.0.20-1.el9_8.s390x.rpm aa416bcf3dd7bf9f62ef13827fcec136a09cffdadc26503334c255e27638c022 dotnet-targeting-pack-9.0-9.0.20-1.el9_8.s390x.rpm b1919fe4c2e7b72da24eedad94fc3d3307ac2a7f84c0fefe6f55031068603665 dotnet-runtime-9.0-9.0.20-1.el9_8.s390x.rpm ffbed0232563952a08a355f1a7a2b26d278f8cc85b7d8e4de69604699011ae52 ALSA-2026:6766 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default python-unversioned-command-3.9.25-3.el9_7.2.noarch.rpm 2cf74a7249e41fac31789c663ad5c35ecf474b413c7548205b08142ecc62cbb5 python3-tkinter-3.9.25-3.el9_7.2.s390x.rpm 40b90a12f344c4acaf9dfc33033cbfdb6f7b83e7d4c27310504b502386878870 python3-devel-3.9.25-3.el9_7.2.s390x.rpm 5a2b07b827f9af3ee52586ea82664f80e7e3a8d104bd66fe9638cb99aa639558 ALSA-2026:67831 Copyright 2026 AlmaLinux OS 0 1 Important

tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es): * tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata (CVE-2026-73066) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default tesseract-4.1.1-8.el9_8.s390x.rpm d83c0873ddf45115a4dadfc907483080c10fe31a6a8951fd65f9c057dc0c756c ALSA-2026:67848 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476) * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats() (CVE-2026-16238) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow (CVE-2026-14676) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.s390x.rpm 0aee221df9fcadb4e5d55081ba918710e491dd25e75f4cbb868972cba3020269 postgresql-docs-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 1bc3a174f8c38f3dbef50d73cfc010bf65f9f8edc5bc37c078d03f1ac71531d8 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.s390x.rpm 2620edfd9ab8983b1d904b2ebe15fd1a471e2c9b841578def8489c160a857b43 postgis-utils-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm 32a8b615fcdf8f4245b098cd1b5fb68dc1722b858997956b47fcde3b57aac878 postgresql-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 353722ea47901b496015c9fdc3441f698c84006c416f91250ac549638a2698f9 postgresql-server-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 35ddb5d79c187150f7327920e38a9e31e33f3316bcd5a1b7d0d15ea3e58c01b0 postgresql-static-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 35e09508a0486bcad11d2201eb49e5826bfeba426bcf1c9e0805187a0f64ed1a postgis-upgrade-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm 67a0ea0e8e35a206ea08bd70a70fe1b4d0e4cac0c187213f3be8f88d869c2f6b postgresql-server-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 6c39ee992ec36c1461d81c2b4222001848f9810732c0046af772a11b139255ab postgresql-plperl-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 6fb3e5726098690c0877e174fb90a5a060ae6f83c42f5340ac630e9fabcef794 postgresql-pltcl-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 727aafa6ecfe136114d50652ce8fb1c480adf42d026ae7bb37943b2a277f070a postgresql-upgrade-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 86e4ec343046a93246b4a0c9249fb3e5819bc95b45d0a49111b26336611eb149 postgresql-private-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 899780bbad2b2c81bebe5982c11d96bc989bc99ea9640eabb137b48455bbd083 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.s390x.rpm 8c4fc11feb6c33f647222fe6ab3a8655915ccf335954744c8092d36a4732ac0e postgresql-test-rpm-macros-18.6-1.module_el9.8.0+310+22372bcc.noarch.rpm 8eaf675017f8792c3580aef927e0dbee1bcf5fcec60c7539b7858bdd65d78062 postgis-client-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm a2c3ee833fd37b1d62a17aebf239c9629c9cf27cbdcdf9580d5666f9db2b4a37 pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.s390x.rpm a74781a4f88bc94ae1c1617e887bf0c8a360b201e425d5cd327754bba1187458 postgresql-private-libs-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm a9d1d0c4671aa0fdedff559ac195fccf9b4230c314119126acf6a83cf15000ae postgresql-contrib-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm cca6975e9a06a6e839274ac73ee7143e4c5f300260ff1b8f32f547fad898f951 postgresql-upgrade-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm d09ee17798a00b7ee5d2c77f36b0d9ee818aef82c4c036f6178a857ad0f12cb4 postgresql-test-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm f1ad7548dba6a82ae604251e617a7e10d8d2abdbd1a2b306db5772819c1a4464 postgresql-plpython3-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm f47890ff0cc4ef169bd335a14910ab425ebe8bf3dd7cc6acc808f55834832362 postgis-docs-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm f7ebb9a4f0e8c7321eed998f338f5706d8d86b5247f0346152a5d5992ea0b867 postgis-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm fa9d9173d563edf37121742f81aa0ed4a401a313b4c6d6cc52b270c30183b7bf ALSA-2026:67873 Copyright 2026 AlmaLinux OS 0 1 Important

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (CVE-2026-81665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default corosynclib-3.1.10-1.el9_8.2.s390x.rpm 0749cba64c68aba589717d8413329c9676112be680be0a5bc7ab718388511fc5 ALSA-2026:67910 Copyright 2026 AlmaLinux OS 0 1 Important

libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fix(es): * libevent: Libevent: Denial of Service via malformed RPC data (CVE-2026-63383) * libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption (CVE-2026-63387) * libevent: Libevent: Memory corruption due to use-after-free (CVE-2026-63381) * libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header` (CVE-2026-63384) * libevent ev[http:](http:) Multiple HTTP Parser Bugs Enable Request Smuggling (CVE-2026-63382) * libevent: Libevent: Arbitrary code execution via heap out-of-bounds write in AF_UNIX handling (CVE-2026-63388) * libevent: Libevent: HTTP header handling bugs create risk of access control bypass. (CVE-2026-63385) * libevent: Libevent: HTTP header smuggling allows authorization bypass or cache poisoning (CVE-2026-63379) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libevent-doc-2.1.13-1.el9_8.noarch.rpm 56b63bfc369e5e5d2c14e2056b0e942db4cea5e72e17fb9875b72dfb75749de6 libevent-devel-2.1.13-1.el9_8.s390x.rpm b84546ccd2b0c68188c4a5e1c9484a6950568815d1237cb8ef908577f8a1310b ALSA-2026:68234 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709) * libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libsoup-2.72.0-16.el9_8.3.s390x.rpm 79b82b5797c37934bb18265e00cac4ee7bf0ab5831a94c9e65a4c8c074a2bbcc libsoup-devel-2.72.0-16.el9_8.3.s390x.rpm c666a7b0239aa073a3242a03060a74f09c27f50e239b3ed898c4f188f4f7bab2 ALSA-2026:68292 Copyright 2026 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: DNS cache poisoning via UDP source port predictability (CVE-2026-50252) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-unbound-1.24.2-3.el9_8.6.s390x.rpm 2b912a56d1bc8ff991a17f8e458b5bdb02977e1a75345a14a486cf6ed616a3c3 unbound-1.24.2-3.el9_8.6.s390x.rpm 5682f5bed9667fb8810115ad3dd0b609c63a5ab9c9dbc92d8ff0cdf1b4d1b52a unbound-dracut-1.24.2-3.el9_8.6.s390x.rpm b7f1a13b79435c8f8552a0fc2e14580ae748cde88c2ee8aada6528bed766cd1a unbound-libs-1.24.2-3.el9_8.6.s390x.rpm d2428ae4d1dc4b4c53ed026ba7802b0151c181b71b22a1aebd17e618ba403914 ALSA-2026:68570 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910) * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043) * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133) * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) * kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298) * kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003) * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243) Bug Fix(es) and Enhancement(s): * gfs2: filesystem withdrawal rework [almalinux-9.8.z] (JIRA:AlmaLinux-252540) * The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [almalinux-9.8.z] (JIRA:AlmaLinux-252544) * gfs2: Get rid of sd_async_glock_wait [almalinux-9.8.z] (JIRA:AlmaLinux-253986) * [AlmaLinux9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255217) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [almalinux-9.8.z] (JIRA:AlmaLinux-256733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rtla-5.14.0-687.49.1.el9_8.s390x.rpm 01cc9819c72b457a2fbbe9b633327ae8b72ebbd439a066b54ec227c0b7e5369e kernel-doc-5.14.0-687.49.1.el9_8.noarch.rpm 0d9dd872dadbcd5cf82a6512c7f06514f376cf8dc0bea0c94bce2bf99a03d677 kernel-headers-5.14.0-687.49.1.el9_8.s390x.rpm 2045775fe1be7fea8618a13b4968fc7d7fc90c9aedb64dc968aa3c29288e73fb kernel-zfcpdump-devel-5.14.0-687.49.1.el9_8.s390x.rpm 3bbc87908c8d505d74feb0fe0b1e2b57133e7414ea979da6fc7f5beb295d1b65 kernel-devel-matched-5.14.0-687.49.1.el9_8.s390x.rpm 3f47bd61c406222cd4b448aea6da36a1982b63730d3c98043f779400a03acc38 perf-5.14.0-687.49.1.el9_8.s390x.rpm 5ee4daa67d3e302966262d062d7ced25251f2240d1b9f2022e7b73ed3773d837 python3-perf-5.14.0-687.49.1.el9_8.s390x.rpm 5f74163e4b40cb87ff858f1daed9212c13a883e780f1a8ea67fe734fb576d74d kernel-debug-devel-5.14.0-687.49.1.el9_8.s390x.rpm 8121e779f3f5fb34265c51073203a5fc6d7d7039767aa96e2aa04145873cb533 kernel-debug-devel-matched-5.14.0-687.49.1.el9_8.s390x.rpm a1fdd7b37277511b187c5602ba8a0bdff150dfe2d4741b5b1df41329859fde88 kernel-zfcpdump-devel-matched-5.14.0-687.49.1.el9_8.s390x.rpm c5bce75099818294b43b15144ddf0c74f8456375e5d91a13ed0bd8fcecdf6dc5 kernel-devel-5.14.0-687.49.1.el9_8.s390x.rpm ddc5114e6f2e484d2582621dd7c6656c72c9f269cc3d6f465912a174477d18bd rv-5.14.0-687.49.1.el9_8.s390x.rpm e5dd9bf329d5306bb5dcd3cb5ac1a06e7db690698af78f79855d966f1b68a3c8 ALSA-2026:68660 Copyright 2026 AlmaLinux OS 0 1 Moderate

tomcat security, bug fix, and enhancement update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) * tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication (CVE-2026-43512) * tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated (CVE-2026-41293) * tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication. (CVE-2026-42498) * tomcat-coyote: tomcat: Improper Authorization allows security bypass (CVE-2026-43515) * tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) * tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) * tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) Bug Fix(es) and Enhancement(s): * Tomcat fails to respond to client connections when using Java 8 [almalinux-9.8] (JIRA:AlmaLinux-257456) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default tomcat-docs-webapp-9.0.120-2.el9_8.noarch.rpm 6dfc559a43177a819c06487fa6024ce010776c6b5e89381af229eb5fc7aa5c67 tomcat-admin-webapps-9.0.120-2.el9_8.noarch.rpm 75578cde5feced53de7864e3f3a5ebbc277a2f27bce1aa5898a0b3f5af0b0daf tomcat-el-3.0-api-9.0.120-2.el9_8.noarch.rpm 9a379f7274681c05c662801d6ba3485760cd41eb494ffdfad7f2c63efcc2edd3 tomcat-jsp-2.3-api-9.0.120-2.el9_8.noarch.rpm bc687b69d033983fc9896992f2334962a6b3637f01d6920e9199c39b38abf192 tomcat-servlet-4.0-api-9.0.120-2.el9_8.noarch.rpm be94b701599d2a1c328fabc0a744a4947ba3af4d7affbf0c838b81dd1e299b68 tomcat-9.0.120-2.el9_8.noarch.rpm c0bca291238df35d1177e1069f1e00b400684ea0cef283d1cf2ed9634852fa93 tomcat-lib-9.0.120-2.el9_8.noarch.rpm d657d0abbb1d15d592b39a564ae6065edfe97aed367809d4685bc0c968cfba40 tomcat-webapps-9.0.120-2.el9_8.noarch.rpm e55f968b0ef13f637323c703d64ca51bd1d4a72f4b9b284dabe683300dbd0287 ALSA-2026:68786 Copyright 2026 AlmaLinux OS 0 1 Important

perl-Net-DNS security update

The perl-Net-DNS package contains a collection of Perl modules that act as a Domain Name System (DNS) resolver. It allows the programmer to perform DNS queries that are beyond the capabilities of the gethostbyname and gethostbyaddr routines. Security Fix(es): * perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records (CVE-2026-81928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-Net-DNS-1.29-6.el9_8.1.noarch.rpm 1fad069f9c93178d45147b2a3fd0e9348b0d69899674cf45546ec8cd0352bf52 ALSA-2026:69098 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154) * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173) * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161) * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176) * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984) * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804) * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713) * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783) * webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376) * chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718) * webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351) * webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596) * chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635) * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default webkit2gtk3-devel-2.54.0-1.el9_8.s390x.rpm 57bc9d13b618cdd1bde08e2721189101f8d5a0d096f49852a45b44a3b727ef1f webkit2gtk3-jsc-devel-2.54.0-1.el9_8.s390x.rpm 58d920726fb2addf605d390ca24a008c508dd61e9c823a8640ddebc5414f3c15 webkit2gtk3-2.54.0-1.el9_8.s390x.rpm 8154c9c5fecb8a484d018ae09a0633982b6f018fb0bbb2f32eda220d2c8db84a webkit2gtk3-jsc-2.54.0-1.el9_8.s390x.rpm b27059b8b62e4b7388bb949383959b190cf1d9e50706b84c5c65fe6c53751cc7 ALSA-2026:69123 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default sudo-python-plugin-1.9.17p2-3.el9_8.1.s390x.rpm 508da8d8f5d8c9391dc7a22c817b4a7c503e4b119bb0d2968ab40b6ec3de9c1c ALSA-2026:69126 Copyright 2026 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: libcurl: Unauthorized connection reuse due to a logical error (CVE-2026-8458) * curl: Information disclosure due to uncleared proxy authentication state (CVE-2026-8927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libcurl-devel-7.76.1-40.el9_8.7.s390x.rpm 28dbe8477daaf2c6557845e8562b530e9852e876713d627d64f6a56c5b37f5d4 ALSA-2026:69130 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pam_ssh_agent_auth-0.10.4-8.11.el9_8.alma.1.s390x.rpm 47791db7a8c9ab297b2171183a6e59febb7843a8f62ef6d0e41da9738a8b4b1a openssh-askpass-9.9p1-11.el9_8.alma.1.s390x.rpm c992d1498d65a71c378b0cea3f6bee6c2027f63e10eadd062568922c6e045021 ALSA-2026:6923 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647) * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654) * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784) * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nginx-mod-http-perl-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm 2d2da32a8e1e9c10f830d9993ae1ed3f1b35ac5a10027c4f26dbdc2a1ec54bd5 nginx-mod-mail-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm 4e67e3d580bf818bdade5f26c7e31872d0d02d577e53ee9343020fedf707cd2d nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm 55beee2e8d717a1a53e8fe2c64665a3b1cdb353089e1eece81f9b8b3f8867584 nginx-mod-stream-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm 589cee8f743d3191be9ee3dc5d5a7041b46658cb64b2f1a5ab57e8014399c123 nginx-core-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm 6055974a1075c2cf87725048814ec1fbd3ecb24113f72a4bf00cf6e3819df8a8 nginx-mod-devel-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm 7dc63337c579f44718c46fac3a9dc7b2898959667935dee57d10230f6d63b27f nginx-mod-http-xslt-filter-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm 9cc311b49d9c94a9bd09237df831207622485892bfce33e0b0352b8f54bae84f nginx-all-modules-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.noarch.rpm b799c8ef26d44cfd0262668c4eb7f4175b41eaa8627ceaeb3d6a091a41252c3b nginx-filesystem-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.noarch.rpm b8d466c7bada98dc15166388e2494cf943dacbd9983af9157f1b1745b862687c nginx-mod-http-image-filter-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm fa6f658812972a23dd66637b3b97dcac99b96d48e5cee9f9f4804994bb75483b ALSA-2026:69293 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering (CVE-2026-42502) * github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178) * github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy (CVE-2026-55677) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default osbuild-composer-core-165.1-5.el9_8.alma.1.s390x.rpm 20a27406df967d2c299469586eadfc8d302bd5c51365e2bb1abe8b0f97ca2892 osbuild-composer-165.1-5.el9_8.alma.1.s390x.rpm 2adb8c001b6100c881f4b59da188b8f696fda9d09265813b224f4dcc263ba762 osbuild-composer-worker-165.1-5.el9_8.alma.1.s390x.rpm e93b48283dee787a6b3b0b92a67d84b8efe71fca0055fd120bc6dad9c7e44472 ALSA-2026:69462 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024) * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019) * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031) * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011) * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028) * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013) * firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012) * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014) * firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018) * firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021) * firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008) * firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007) * firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025) * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029) * firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-140.16.0-1.el9_8.alma.1.s390x.rpm 86df861c4a66d109781b8ef337e890f71888befe7b978c0d893ce3448454d772 firefox-x11-140.16.0-1.el9_8.alma.1.s390x.rpm fbf008b6507ddb41eafd6169d861318a533529ca5c4e763a27090efaac1d68e4 ALSA-2026:69540 Copyright 2026 AlmaLinux OS 0 1 Important

rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fix(es): * rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function (CVE-2026-78002) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rsyslog-mysql-8.2510.0-2.el9_8.2.s390x.rpm 1164e2d9e5f7f6782e30c23a9bcd96ee9039d273b1f8275fc487d64bed653cbc rsyslog-logrotate-8.2510.0-2.el9_8.2.s390x.rpm 158946e0d8eca9c1e2268741891b18acf6a9e85044e59baf8ef0816a9a91f450 rsyslog-mmkubernetes-8.2510.0-2.el9_8.2.s390x.rpm 18c1277e15dec0abb8b751b5b24181a91e03d1eb0bc62ad4365684c39733fcf0 rsyslog-kafka-8.2510.0-2.el9_8.2.s390x.rpm 3590a6400f80b9df9527260472448ffde6241da8cf605d5ed25ddc846f80c504 rsyslog-pgsql-8.2510.0-2.el9_8.2.s390x.rpm 3744b691403570279ea2585754288f3291eb075d5d7e2d8be92a0d2afadbd4c9 rsyslog-mmsnmptrapd-8.2510.0-2.el9_8.2.s390x.rpm 5e97f6ca7ef94c1d073dfbbdc949301418a752604d4e6b420ce92854da9dadb6 rsyslog-omamqp1-8.2510.0-2.el9_8.2.s390x.rpm 66a46e6b49b60d23d69e2792bbfe507468bea2dfe25866f152e48c9919fed385 rsyslog-mmjsonparse-8.2510.0-2.el9_8.2.s390x.rpm 6c4a8fb0a8a46d3c92b37ee04b0fd2d095e2ee2fd22f4ad0e0411c70c089d9f3 rsyslog-mmfields-8.2510.0-2.el9_8.2.s390x.rpm 706d93d5a0d52a05aba90eb7e46b8d49e26637046b3d547ede0a70769ac9d99f rsyslog-doc-8.2510.0-2.el9_8.2.noarch.rpm 77faefb38fc694fcc0ca3f08b6d0d89dbbd605626392bcfc402581884981285c rsyslog-mmnormalize-8.2510.0-2.el9_8.2.s390x.rpm 7c3b009f6c9e2ef0b1f2698d9d146658b4a4e4de80790672984aad9673d6ac21 rsyslog-gssapi-8.2510.0-2.el9_8.2.s390x.rpm 894afd7f6ca2ec1fa3330c3e60e7d4854ea211d055f232d8bb1d77b65b4bd2d7 rsyslog-openssl-8.2510.0-2.el9_8.2.s390x.rpm 8cb4248844334305937c4cd4155707e23e27cad5bfe5e1f34f39ece7ab2d4c12 rsyslog-elasticsearch-8.2510.0-2.el9_8.2.s390x.rpm 918e02c90b69b03510bf916654c6bf84e25c1fcbf8d2394d624e2c4c8a5d3627 rsyslog-crypto-8.2510.0-2.el9_8.2.s390x.rpm 98b3696718ec4ed52aaea31e9e68b3f4d1d4fd11e78396230fd9d95cd559b032 rsyslog-gnutls-8.2510.0-2.el9_8.2.s390x.rpm a1d2c3f6100049865eb404947bf7f952d1901fd7a84146f6d02a7f5e842d1c01 rsyslog-udpspoof-8.2510.0-2.el9_8.2.s390x.rpm b383f67450fb3ad81188fc6a08c04899af17ec51a8b68f21ae92cf8582b5e213 rsyslog-snmp-8.2510.0-2.el9_8.2.s390x.rpm c113cd8cd36bff60736e658b838644e74505b0db19a6fded5cb9e700268ebb3c rsyslog-8.2510.0-2.el9_8.2.s390x.rpm cef9eebed3f093421c21da7be40e907c67f6cf6005731cd9a0388bf95fc1f491 rsyslog-mmaudit-8.2510.0-2.el9_8.2.s390x.rpm d72698d29ba9584f194f8134c45e77c693be4271946ce7a211e1d6adc77564f0 rsyslog-relp-8.2510.0-2.el9_8.2.s390x.rpm f11019a4d7b4968305cfb0f419019358d16f11443839eccb97b76c2b8f227c77 ALSA-2026:69607 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default postgresql-pltcl-13.23-6.el9_8.s390x.rpm 16a86186240ca24099f7784b48ca26018eb54a3f5f7aea83fc859690f407d82f postgresql-13.23-6.el9_8.s390x.rpm 3243b2104d45bd7d568d3bf09b887821864d30a4e7ba2577e15257e2b7ac1372 postgresql-server-13.23-6.el9_8.s390x.rpm 70a9821d90073a64f70dde352090a492eb1f07e4b6b621915c08a4fa290728ff postgresql-upgrade-13.23-6.el9_8.s390x.rpm 8307c61553b02703c70dba1501f34d3106ea4dd8b2b4180a095a81a4d388a6cd postgresql-private-libs-13.23-6.el9_8.s390x.rpm 8b60f230d653701f5e333f40d0662796602a2fedc4108d9513b154fc925d4e48 postgresql-plperl-13.23-6.el9_8.s390x.rpm b4bf8c4d22e44f50a02db242299a2278b3a429e4803650c14025fffb360e80cb postgresql-plpython3-13.23-6.el9_8.s390x.rpm c46dbe7f882c9c6f78846113c7d8e6b81fa02a728d862139a8afdc1fa8106e20 postgresql-contrib-13.23-6.el9_8.s390x.rpm f474ba00320c2d3e8d26c546a2bb590e45de89732fa18e5f3332f3d2ba8245b3 ALSA-2026:69608 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files (CVE-2026-68515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default openexr-libs-3.1.1-3.el9_8.4.s390x.rpm 0d42b9ee153bd1471a71a68090d5141619680b4cc1e839324a01253f329212e6 openexr-3.1.1-3.el9_8.4.s390x.rpm 94c4303f8f491016b67423996131e78390509366d3a725aaf215b8d4427178fb ALSA-2026:69914 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default postgresql-contrib-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 0167de262d3e44fb42a382f909b3a87fcb2f4ba9f09f864434a6fd3a31c9b5a9 postgresql-private-libs-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 0299ba2129bdd5f40a80ae0b578a151c25e16e60b86350fd41745201b8ac8830 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm 1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm 35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445 postgresql-test-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 397484f580752274291bf92f5455a6b2008d3a64c6229493b8188973a2df8fff postgresql-server-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 3a4bb74768cf3032be317b9c3d4f464eac545bbc27e7969079e08bcc8eee61d1 postgresql-static-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 44e47dc7fee7691c15b5bc40ff950a31f8851425a2dc19ce39c6e10bf0b01da8 postgresql-test-rpm-macros-15.19-1.module_el9.8.0+318+764e137c.noarch.rpm 4811baaf65686bca1a77984dcf7cf5ae0d97326f1e759012b50a8eaa53aaf392 pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm 565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f postgresql-server-devel-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 6df1e0804d129fd781225b2b8029df03e0f299e07939637574276997bbe6a8fe postgresql-plperl-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm 99e01a15857895e0ff40c6c05b3f060cb13ab5cb3d61bd3827c207fe5b5ab6ee postgresql-private-devel-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm a97a2cf9a45fb57b852798cd96f467a1677d0a3c8f7e0abd9aba195e55d6ce8a postgresql-pltcl-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm c156f1fc205bca73fe33de0cbc2dcbc23d41b35381c50be3660294ad88c8e634 postgresql-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm d133ad238b73731bc2f41f41b21e4a408d0e886c97adf9599730d0425aee89a2 postgresql-docs-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm e350aacc60c7e0c7156e8adf690e94fff6ab009a04eebb83aedbab16fdac5b8f postgresql-upgrade-devel-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm e8860fe2696710b1a0200af24aaf289003bc06e0608d765e173a5c27730f1684 postgresql-plpython3-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm ea562030673c8b0f1395a76b28f35e831b15c4bc1aaeb023c7176d9b2f683f16 postgresql-upgrade-15.19-1.module_el9.8.0+318+764e137c.s390x.rpm ff21814cded44aed3c0342bbf830ea4f665a4482541f1a0ee8d6ed0e1d853cc1 ALSA-2026:69961 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * podman: Quadlet install --replace non-truncating write retains removed host-access directives (CVE-2026-19730) * podman: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) * podman: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default podman-5.8.2-7.el9_8.s390x.rpm 19f28a683759cabfd4a05292a28ce995c5bd2ac67d39f89c9ce1546515c14817 podman-tests-5.8.2-7.el9_8.s390x.rpm 3729cefa3756eca0c7fac9a43afc4e762413cfc5a32fa38366f67773d803476a podman-plugins-5.8.2-7.el9_8.s390x.rpm 3a9060dc519b71d25b39583328392994ed855a65c3d941de9e85543506a7bc95 podman-remote-5.8.2-7.el9_8.s390x.rpm 467e46e033b1508f78ec2cc79b0078d3455f2efbaf6f3a3f6be521a13189496a podman-docker-5.8.2-7.el9_8.noarch.rpm fd163f1ef56d10ba0e6833a4f1abf995c8ed30151e9041b68dd7a6cdf2338f63 ALSA-2026:7002 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647) * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654) * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784) * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nginx-filesystem-1.20.1-24.el9_7.2.alma.1.noarch.rpm 277879fa5db7744b71ccc6211c52813232a7f193f9a4170810dd06f48de4433c nginx-mod-mail-1.20.1-24.el9_7.2.alma.1.s390x.rpm 48c5c1f5a1428492f87dc327a4c394ffd8a3bf1e6433d5208f5a63e7c05d5f7d nginx-mod-http-xslt-filter-1.20.1-24.el9_7.2.alma.1.s390x.rpm 5478ed0ff2f61a7181b431238e754b95f3e691cff920524d3fb8f2ab03e7368e nginx-mod-stream-1.20.1-24.el9_7.2.alma.1.s390x.rpm 6eac28e23254cc0e02ca134d8c0670576b2b1e022f2acc711dd56b93deb62a9d nginx-core-1.20.1-24.el9_7.2.alma.1.s390x.rpm 956d1c3352d8319f6db4e3c60f67c3439134796adccab9b382ea4711ed228979 nginx-all-modules-1.20.1-24.el9_7.2.alma.1.noarch.rpm ad5e29e77afa744fc5598b84076ae5e965f895cd4a29cabfb09c94e1bfa3a033 nginx-mod-http-image-filter-1.20.1-24.el9_7.2.alma.1.s390x.rpm aeaee9767991b3faec3e39c53d8ba40c630a7325f9d7cc652007e8cc666ee714 nginx-1.20.1-24.el9_7.2.alma.1.s390x.rpm dfd79fc74742300377ebbe838b3b7698a2e8862465ead702c531fa512b50823c nginx-mod-http-perl-1.20.1-24.el9_7.2.alma.1.s390x.rpm e573ade34b4e66d391766d104d478e6e45c6147e7e2efc94f390619f40c7d7b1 ALSA-2026:70191 Copyright 2026 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default runc-1.4.2-3.el9_8.s390x.rpm a4741838992a21e1a71968a109180da62e80b94d2385c49d1bb0773cc7b72b11 ALSA-2026:70391 Copyright 2026 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default containernetworking-plugins-1.9.0-4.el9_8.s390x.rpm 8aa882ffe59868346b3463367a132dc63fb95f9e4eadd6e2eb3fae66b84d9778 ALSA-2026:70459 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * [Intel 9.8 FEAT] ice: Driver Update [almalinux-9.8.z] (JIRA:AlmaLinux-213003) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-9.8.z] (JIRA:AlmaLinux-254108) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rv-5.14.0-687.50.1.el9_8.s390x.rpm 084b4994fbd5f33a7321b382236666970727e9ed6606fdc0d85b791051accacf kernel-headers-5.14.0-687.50.1.el9_8.s390x.rpm 1066476a798201d042f1d75288ef59e587cf2cfc06110a15296d019e11bc34f2 rtla-5.14.0-687.50.1.el9_8.s390x.rpm 10788d12209cedfed3ebf7bfb761926729727e81761b8787b936108694bd8ab8 kernel-debug-devel-matched-5.14.0-687.50.1.el9_8.s390x.rpm 4233fd0c563ed1c23e7c3b45a8f6ace45153cf98e45a651beefb8871980e7e89 kernel-zfcpdump-devel-5.14.0-687.50.1.el9_8.s390x.rpm 4563e68cd4dbc6d67fa218c4624188023aea100c40fe1220ed40c31ca1bdeaba perf-5.14.0-687.50.1.el9_8.s390x.rpm 82631c631f2a84eec35cfbffd947216f4c847fd97e0cbee62b63c6ffc1abf5b4 kernel-zfcpdump-devel-matched-5.14.0-687.50.1.el9_8.s390x.rpm 902ad82e10823ae018adec633d2590f9357c2a3b248564f75ad9cd247f99b5f8 kernel-doc-5.14.0-687.50.1.el9_8.noarch.rpm 98a5b977fe1f2e98fda095f02b339a4bf2903a46041e4bb71cc770704edf5561 kernel-debug-devel-5.14.0-687.50.1.el9_8.s390x.rpm 9f7fa4dcd44fd41f5e39a87256f36aa614676b309b7074f9f4e6b84a30c36e2e kernel-devel-matched-5.14.0-687.50.1.el9_8.s390x.rpm a74029f24f71c43ecbdc7b4e83cfb743db6fc7d0542a0673b92538f2e02de843 python3-perf-5.14.0-687.50.1.el9_8.s390x.rpm dc1b37caa4fc2ade506ed4ce116f012115190f5db2e917a23ff94f8d1b150693 kernel-devel-5.14.0-687.50.1.el9_8.s390x.rpm e03f5da5b76a78a0632b0c562276821c3c389bdf767e5c89cb3555ccfef4fdef ALSA-2026:70564 Copyright 2026 AlmaLinux OS 0 1 Critical

ipa security, bug fix, and enhancement update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198) * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197) * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861) * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147) * freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550) * ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097) * ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578) * freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678) Bug Fix(es) and Enhancement(s): * [Cursor Automated] Include latest fixes in python3-ipatests package [AlmaLinux9.8] (JIRA:AlmaLinux-170987) * WebUI Hardening [almalinux-9.8.z] (JIRA:AlmaLinux-238511) * ipa-otptoken-import hardening [almalinux-9.8.z] (JIRA:AlmaLinux-238519) * host-mod: handle the password attribute when set with --setattr userpassword= [almalinux-9.8.z] (JIRA:AlmaLinux-238523) * ipa env: support only simple * wildcard [almalinux-9.8.z] (JIRA:AlmaLinux-238527) * ipa-epn: drop_privileges method is mixing uid and gid [almalinux-9.8.z] (JIRA:AlmaLinux-238674) * ipa-migrate: require Replication Administrator privilege [almalinux-9.8.z] (JIRA:AlmaLinux-238677) * ipa-migrate tool is renaming host records & host info in automount information [almalinux-9.8.z] (JIRA:AlmaLinux-240767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default ipa-server-encrypted-dns-4.13.4-1.el9_8.s390x.rpm 11b980f1ffca069003b9861bd94dd85c4a315b6c0e2a0609ecccd2568766331c ipa-server-common-4.13.4-1.el9_8.noarch.rpm 176910619bf6bc9d20a1e1804178207a122659c795374cb315661e8d0649299b ipa-selinux-4.13.4-1.el9_8.noarch.rpm 1fa3e8d81b72faa1f444d8479c9c02fe54062e9e5f430e0b15e083345a7a9d3a python3-ipalib-4.13.4-1.el9_8.noarch.rpm 220e3bcd406c5ecf0a5b57a1be697689598dea63f0591f59222720cfd28a0cdf ipa-client-samba-4.13.4-1.el9_8.s390x.rpm 31d376c97106784537c53a8ec9d91367faaa624bc1acff241f89821998172043 ipa-selinux-luna-4.13.4-1.el9_8.noarch.rpm 390683cd768481143a2347673931fef899c31d2666b4435bb2d88c05b16f1a6a ipa-client-encrypted-dns-4.13.4-1.el9_8.s390x.rpm 395d8c8366a94444b7ed99ebeeeec8d94e62e7c632e19f9c457ed15d56850dac python3-ipaserver-4.13.4-1.el9_8.noarch.rpm 3c1b8ce255ccf6e9e9aa58e2d4004b353b78bd126de8f8df3b9670044648da55 ipa-selinux-nfast-4.13.4-1.el9_8.noarch.rpm 3e476049592688b3d4b2f653f3b02f0687f3cfb7b86dcc10b7f927f9454a445f ipa-server-trust-ad-4.13.4-1.el9_8.s390x.rpm 4b44ab0138e50bc4910d87327667edc32fa07be77c60eacdd5fddb3872417f7f ipa-client-4.13.4-1.el9_8.s390x.rpm 6980a6a817571e63b615010d2e49a8222d6f5a9b5c162c5a6facc8186077de1f ipa-server-4.13.4-1.el9_8.s390x.rpm 6d301a66b4f126d34c399b28eae1143846b7d3fc78ef5a5d8114272e57b35352 ipa-server-dns-4.13.4-1.el9_8.noarch.rpm 6f7a1877cfa120907e38fd95a7c48fcab160c62b3c98cd05000715823a0d0eb8 ipa-client-epn-4.13.4-1.el9_8.s390x.rpm bd807804e5b9d5837a6b46dfbaa84d1b3e0d7c97ebbfc0de6e42914c1fb50e7f ipa-common-4.13.4-1.el9_8.noarch.rpm c9714dbdaaeffc5692e95fa070fc85ee2371c5437b0a32630e462486ec3658f7 python3-ipaclient-4.13.4-1.el9_8.noarch.rpm d107d5b70fd5d9e19de8659e5c30d434f8386be69f0ce43eee94d843c05e1e47 ipa-client-common-4.13.4-1.el9_8.noarch.rpm da3add48f06d2af1a8f2c662c0f60d48888a6c7e1b83aff7f164f3c31577fadf ALSA-2026:70640 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * buildah: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * buildah: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * buildah: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * buildah: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * buildah: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default buildah-tests-1.43.3-2.el9_8.s390x.rpm 37c5778b6f03bc924d62d5181eb8771de717bb78dc03de5a66d68eff4e78934d buildah-1.43.3-2.el9_8.s390x.rpm b181c677c1d0ac12269636f3fb0fff8aeac1d802dc50b0308ec465a2740b13e0 ALSA-2026:70641 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fix(es): * skopeo: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * skopeo: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * skopeo: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * skopeo: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default skopeo-1.22.2-8.el9_8.s390x.rpm 72b0c16e4db9660ac5fc9a1b70737a9c7491b307e23f61c1e4c75daa5b443d16 skopeo-tests-1.22.2-8.el9_8.s390x.rpm cfe4e1efe1bb66dc5b2a59b17d16657c15a5035d3ed549873ba66eae7223ae7f ALSA-2026:70642 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365) * firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874) * firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121) * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145) * firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119) * firefox: Use-after-free in the Audio/Video component (CVE-2026-84120) * firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124) * firefox: Use-after-free in the Audio/Video component (CVE-2026-84122) * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143) * thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639) * thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641) * thunderbird: One byte overflow read in mail parser (CVE-2026-84640) * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024) * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019) * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031) * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011) * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028) * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013) * firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012) * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014) * firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018) * firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021) * firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008) * firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007) * firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025) * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029) * firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023) * thunderbird: Out-of-bounds read in IMAP response parser (CVE-2026-92240) * thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line (CVE-2026-92239) * thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers (CVE-2026-92238) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default thunderbird-140.16.0-1.el9_8.alma.1.s390x.rpm f73adab077b5fb79f071a57f9eda0534ea0d389bc41e650a7ba8a2ed52f9c2bb ALSA-2026:71422 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fix(es): * perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder (CVE-2026-73194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.6.s390x.rpm 01619361c6d54cb8ce185f0e85b27f8577a8cda741f49b47ac8a98765cfa01bc ALSA-2026:71487 Copyright 2026 AlmaLinux OS 0 1 Critical

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-unbound-1.24.2-3.el9_8.8.s390x.rpm 4637362ba8d92790dc966e46c5ea6c92623dfb84e712e2b430d4097c3036c3ff unbound-dracut-1.24.2-3.el9_8.8.s390x.rpm 652923d142b360fdd42343557a1e1f1f50b9cb7bd0bd6d51c4168e4721489f5f unbound-libs-1.24.2-3.el9_8.8.s390x.rpm 6c353721019446d708f1b09ad6b5499436319bf9ceb53524bc8b24c889ddac93 unbound-1.24.2-3.el9_8.8.s390x.rpm 800013632a6b1f23e874c6c228047621050c31cffca6f36337b6a9103da7f0b3 ALSA-2026:71585 Copyright 2026 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138) * libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143) * libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140) * libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142) * libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144) * libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libxml2-devel-2.9.13-14.el9_8.5.s390x.rpm b262d860939fe36f058bd3439ec1a6cb8b1583fc1d82b8604c6fe29948bcb5af ALSA-2026:71700 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) Bug Fix(es) and Enhancement(s): * MADVISE i/o size in AlmaLinux 9 additionally limited by read_ahead_kb - Was addressed in AlmaLinux8 via AlmaLinux-22476 [almalinux-9.8.z] (JIRA:AlmaLinux-260938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-headers-5.14.0-687.52.1.el9_8.s390x.rpm 0bc3f656efaeb6a21b18d18aca93e485c321f40873638249996f39297606ee7f kernel-debug-devel-5.14.0-687.52.1.el9_8.s390x.rpm 10baea37cb5c5966f8d7978017aa21fa6177187f4cdf1bd52e17f381de5f5a12 rv-5.14.0-687.52.1.el9_8.s390x.rpm 2a74b1a9c90679a223a922844fe3a7a5a20643100e147fec6ebed12509f38897 kernel-devel-5.14.0-687.52.1.el9_8.s390x.rpm 30d38dbbc5de5af606d3d2e18bbc3fda9fd602b703ea6323054eb7ef8b6d952f kernel-doc-5.14.0-687.52.1.el9_8.noarch.rpm 545f233eca06318144d84548f7bf10c5997484341778b3097f21088bb32ac75c perf-5.14.0-687.52.1.el9_8.s390x.rpm 7d05bb263377d3b865e37d57b8686e01005884140e1b541cc430a2fad79aa33b python3-perf-5.14.0-687.52.1.el9_8.s390x.rpm 85e4e7e631f461ebd1f84f53c221aaa3916876b24c00c46260d3e4209c938c8f kernel-debug-devel-matched-5.14.0-687.52.1.el9_8.s390x.rpm 8d6140c7550ce40c2e2e105bf93fd101a8ba418d905037cdb6cc42f86045ccd1 rtla-5.14.0-687.52.1.el9_8.s390x.rpm a8baca7c22683d12be13ba7399268c5a48fe59f89477783e9386bea9840ef74c kernel-zfcpdump-devel-matched-5.14.0-687.52.1.el9_8.s390x.rpm cf31a7ca18c05e3adb95c0da414dcaa8d9a2ddf745e2173418e45ab4c3eaf4f7 kernel-devel-matched-5.14.0-687.52.1.el9_8.s390x.rpm dd5be886020a003f0108d323cf85eb59ab2929051ea36ec8bb7362fb18fe5f37 kernel-zfcpdump-devel-5.14.0-687.52.1.el9_8.s390x.rpm f5ae0ae1120ce19ae29336e12f77d6c0945a3516256a5410b63fc96a0a0278d4 ALSA-2026:72286 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) Bug Fix(es) and Enhancement(s): * ruby %check fails in Konflux: Rinda multicast tests need network device [almalinux-9.8.z] (JIRA:AlmaLinux-255606) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-json-2.5.1-168.el9_8.s390x.rpm 0435f2364e81d15ae699ebeff113a485accec66e8a3eff44daa6bd44a3a8e0de rubygem-minitest-5.14.2-168.el9_8.noarch.rpm 08d43e8f8152f3895a2d0326175cdd77224fd889dff3e9987ae5f43a9a144fb5 rubygems-3.2.33-168.el9_8.noarch.rpm 0ff649f67730053eee7110ebe835d2a90034bb1f5590715868d0289dfe2b9290 rubygem-rexml-3.2.5-168.el9_8.noarch.rpm 1a330b70d8b0baecbd5be63621a6e6a13e21b5c73e419710100e9321b8b49ef3 ruby-3.0.7-168.el9_8.s390x.rpm 1d5ee684f6b5e4ef42a542767ff49aa803833e40055a8533ff513c1386dc8cee rubygem-test-unit-3.3.7-168.el9_8.noarch.rpm 2917449ebc2a761d87a8fe46ecf6d555b59453c04b64e6e2cf9f139ce75ae167 rubygem-io-console-0.5.7-168.el9_8.s390x.rpm 309f552c2a060330cef9578220b69703dc7ed3f3825f5a1412c7f3b1e1f97dad rubygem-rdoc-6.3.4.1-168.el9_8.noarch.rpm 4273b6c14de1b67b244d223ba42eafa3ee177a81de15c928f6d3a095175545c7 rubygem-rbs-1.4.0-168.el9_8.noarch.rpm 4ecad1a5dd57c3294ba370f9dfc06aa514dbb2d91f6d51eb01d0bcd44ec55006 ruby-devel-3.0.7-168.el9_8.s390x.rpm 5407be7630b8670220070843b5a32ca6de574e2ea3986bf86ca1c6bffd442933 rubygem-power_assert-1.2.1-168.el9_8.noarch.rpm 582f2c1af106dcbb105930a65fb7714110c8e15a63b7508dbae421ffc6751d43 rubygem-bundler-2.2.33-168.el9_8.noarch.rpm 792a2d85c7f8eea97cd36608011ff8942d80cab006c3638e76e3214f51cea103 rubygem-typeprof-0.15.2-168.el9_8.noarch.rpm 944d2608a4461f5b6b0085a680c92a9d64525c829f052a45b00ae4dc3057e784 ruby-libs-3.0.7-168.el9_8.s390x.rpm a21ca494daaf7967438fe89748226be39805256906f110341465105adbb75332 rubygems-devel-3.2.33-168.el9_8.noarch.rpm b385387e6244d2c3dabf6bf8404416cb21757002584916d1eadb7f6ac3d17595 rubygem-psych-3.3.2-168.el9_8.s390x.rpm b45e7186611c51c56b64599aedd8711f96374649c9fe2acb1397d3af79fd2f69 rubygem-rss-0.2.9-168.el9_8.noarch.rpm be44b6fd8e466317965061e826022cfa9f490dc917b1e49be0712f1543ba608b rubygem-irb-1.3.5-168.el9_8.noarch.rpm ca5de07dc4528f6bc1ab617a64028e93731d4f13a3242c364e2898c589590dea rubygem-bigdecimal-3.0.0-168.el9_8.s390x.rpm d333e030037cce23c3d7d9e336e47f9541d2dcc3cbacb813412ebe6479516375 rubygem-rake-13.0.3-168.el9_8.noarch.rpm d495c7579ebbf5077e3d8a58f13f2bad6f0a86946a796d7bfcff9118e288d742 ruby-default-gems-3.0.7-168.el9_8.noarch.rpm fc662ece69054cb8c3fbd1d1acd869a79a5493360343a31a88ab882fc8cafd75 ALSA-2026:72424 Copyright 2026 AlmaLinux OS 0 1 Important

resteasy security update

RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fix(es): * resteasy-core: RESTeasy SourceProvider remote unauthenticated file read (CVE-2026-17615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pki-resteasy-servlet-initializer-3.0.26-20.el9_8.noarch.rpm 1432be7017629df283a50f1d6ad47144babed061ba76bb347b0f65c08220e553 pki-resteasy-core-3.0.26-20.el9_8.noarch.rpm 2aee3e8476f2051676c084f50306e164282500603c9d52a1ae72566f720d4fc7 pki-resteasy-jackson2-provider-3.0.26-20.el9_8.noarch.rpm 5ac9a4d32d702ae283a2e63ba68ff54b27167fcf00cc5e7062cf921840e64eec pki-resteasy-client-3.0.26-20.el9_8.noarch.rpm a5355bcc3cafcce09a4fa18a5bf70dc2033dbb240ad76e1694ca4dc241a38ded ALSA-2026:72484 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default rubygem-pg-doc-1.6.3-1.module_el9.8.0+232+50f6dd36.noarch.rpm 012587b1454988d3ae9e2df6f066e9a9582859f741daa26cc97f6ce56f7cc40d rubygem-psych-5.3.1-35.module_el9.8.0+319+116e6235.s390x.rpm 01f07e23d41349ac4cb77936e4d8f1da44aae6049920612dc996a3b13337b572 rubygem-rdoc-7.0.4-35.module_el9.8.0+319+116e6235.noarch.rpm 0b7b80a085d4788dd182bd7b0a41ba808a7e68da1b98a50815297480fc3a74ce rubygem-rexml-3.4.4-35.module_el9.8.0+319+116e6235.noarch.rpm 4139ef6747a718d6c74dff56f9d771ee1da11113a2eb7d9fff17dfab578af35f rubygem-rake-13.3.1-35.module_el9.8.0+319+116e6235.noarch.rpm 5163ccf53eabb349692813b491438ce1aa9af76b22cf9e4c8df4030d520fe44d rubygem-minitest-6.0.0-35.module_el9.8.0+319+116e6235.noarch.rpm 534eaa95c1595939117f7f17b2402069b998078fb8f751feb7acfaa85995438f rubygem-pg-1.6.3-1.module_el9.8.0+232+50f6dd36.s390x.rpm 5a3274b260c9f148a2d53963874a7074a6eb753d8de5561715f81aa190b751ae rubygem-io-console-0.8.2-35.module_el9.8.0+319+116e6235.s390x.rpm 5f90c6efb50cc9969b1a1855d44e87b607e4d60164244eae529127417ded271d rubygem-test-unit-3.7.5-35.module_el9.8.0+319+116e6235.noarch.rpm 61ad60d081c4e6e053eb56455300243f113a1bdb85507fae1f4f2d68d4842d53 ruby-libs-4.0.6-35.module_el9.8.0+319+116e6235.s390x.rpm 657283aac8054cbc61bd6d45184bee641f650f17ba4eb857ffa64fcd912e2dd1 rubygem-racc-1.8.1-35.module_el9.8.0+319+116e6235.s390x.rpm 66e346c5ac6eabf122dc8018f87e6ebd58fdd32e1d5c26612b411a7b9f33479f rubygem-power_assert-3.0.1-35.module_el9.8.0+319+116e6235.noarch.rpm 6f2e6a613c89d2a4b206e289d5c7d2bb9b1a0c14c44d9fa481db3ddc0a7c8528 rubygem-mysql2-0.5.7-1.module_el9.8.0+232+50f6dd36.s390x.rpm 700ff63225b94b696ac533940dc41391e7462b01042b665bb6817ae92d805d39 rubygem-irb-1.16.0-35.module_el9.8.0+319+116e6235.noarch.rpm 705b4e6423512b0ac2e4a6e930543374190306102fafa79d8628d152ee2418ad rubygems-4.0.16-35.module_el9.8.0+319+116e6235.noarch.rpm 8a879012504fb72c523dfe851707b328b676d350899934014f3f5d2bb6389a1f rubygem-bigdecimal-4.0.1-35.module_el9.8.0+319+116e6235.s390x.rpm 8fb2501ef6eddb2391e333ad46460d8e429837e44a6d251da92cc0b3a0817850 rubygem-rss-0.3.2-35.module_el9.8.0+319+116e6235.noarch.rpm 95dc04487c969cff94bb1b018fe77ce1e34cfbcd6fe36b701b99e6e1f68e5d97 rubygem-mysql2-doc-0.5.7-1.module_el9.8.0+232+50f6dd36.noarch.rpm 97e11c128bce3071fdab6ecdaf0cc24053f436b72c10921807cbd89f4b2ff2d2 ruby-bundled-gems-4.0.6-35.module_el9.8.0+319+116e6235.s390x.rpm 99e3411895a621e0fa93df11f1759081d45bbdf6de90372fd5e42ce102b029e5 rubygem-json-2.18.0-35.module_el9.8.0+319+116e6235.s390x.rpm 9f9a940a9e3c3f1fadb831908332a119071ed2dc448aac594b46300c2e918e20 ruby-default-gems-4.0.6-35.module_el9.8.0+319+116e6235.noarch.rpm a7058bebf8fecee103995959e2eddffd85bca8f538f1d99daab5794c28db2100 ruby-4.0.6-35.module_el9.8.0+319+116e6235.s390x.rpm b23f9b672857e6bf7fe3d1bfdcd18831c65f87d28360e06858e2d9732e8e4930 rubygem-rbs-3.10.0-35.module_el9.8.0+319+116e6235.s390x.rpm c435b20d70710e59f7d99e46335a67bbbaf9796e98f2bc778cfa798dba868187 ruby-devel-4.0.6-35.module_el9.8.0+319+116e6235.s390x.rpm ca3c2c30849a72b52cffe4f400d179b89220b0aa8046bdc072b74312ff425c0f ruby-doc-4.0.6-35.module_el9.8.0+319+116e6235.noarch.rpm d43284c824f179d9e085be9c3f8fb9c36bd19eb90a3b55580fdfb8c85c2ed280 rubygem-typeprof-0.31.1-35.module_el9.8.0+319+116e6235.noarch.rpm e4e795e6660dc7b8a33f2be76ca8dc3dc4ab77aa8ba8c908813b16d2af398f23 rubygems-devel-4.0.16-35.module_el9.8.0+319+116e6235.noarch.rpm f3eab9f7a57584155a5e0ffd86ee65603dce4351be9ff7495ab6bcce5a7ceeb2 rubygem-bundler-4.0.16-35.module_el9.8.0+319+116e6235.noarch.rpm f46b794b69f8fc0a8908341ea5e12163d6a1e1ec0a838433fcd6ac12eb24cddf ALSA-2026:72485 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default ruby-default-gems-3.3.12-9.module_el9.8.0+320+13e2b195.noarch.rpm 005da9e0f65109a223976e4f70788a9fa99484b306a9864eff62f8d5a4e39f24 rubygem-typeprof-0.21.9-9.module_el9.8.0+320+13e2b195.noarch.rpm 0af1d840ab0465cf6fe03a16c568f5947d98be365dea48c3f832e560093a89f0 rubygem-test-unit-3.6.1-9.module_el9.8.0+320+13e2b195.noarch.rpm 1320774383d2339c33c4e28a891ccdb2f4a7b36caee8ee197278155da1036de7 rubygem-bigdecimal-3.1.5-9.module_el9.8.0+320+13e2b195.s390x.rpm 1342280f933f7d8218dda6f135c635bc6405b1a204bedf593b2077b22f5e7a40 rubygem-minitest-5.20.0-9.module_el9.8.0+320+13e2b195.noarch.rpm 1c60538493cc681509d29ee9ef281b5902673283b9e62fd78f74d045bf2b7488 rubygem-rbs-3.4.0-9.module_el9.8.0+320+13e2b195.s390x.rpm 21e05d7cd2808c1baf2c5922432556cbc1981e4c4cb2dd67dfdc6672555575e6 rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 rubygem-pg-1.5.4-2.module_el9.7.0+245+447713a2.s390x.rpm 37933771eaf80f507c99dab2a888edfd251e524975ea35ca2f70ce5f9b0badeb rubygem-rexml-3.4.4-9.module_el9.8.0+320+13e2b195.noarch.rpm 3f3e351e32e014e27d7378fc55e3c939bb2c78f9eb3ff8244d2fca29bb1dde81 rubygem-power_assert-2.0.3-9.module_el9.8.0+320+13e2b195.noarch.rpm 3f92909a8c84cc94d51c78407f337ce78634a631be8035496b2506b460944c05 rubygem-rss-0.3.1-9.module_el9.8.0+320+13e2b195.noarch.rpm 44feef6c3955517a560ceef605d3d17359a24e75611864c8b3b1dd147ed6049c rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.s390x.rpm 4866939ab52aa8d02863557cdaf8e3af45c043a8c7136082318eabfec4ab8150 rubygem-json-2.7.2-9.module_el9.8.0+320+13e2b195.s390x.rpm 673ddb991324fa1964b86717646a3c83c7c9f0bcfa277440c788a808cc072856 rubygem-io-console-0.7.1-9.module_el9.8.0+320+13e2b195.s390x.rpm 6e7b22cf1d6f3404ed6f03d17270a277f2fccb5f755a0c44990b894d1b2c47f2 rubygems-devel-3.5.22-9.module_el9.8.0+320+13e2b195.noarch.rpm 7ccb8309f5fc4d4a0081bde9c7c24883827066a3c3b67ef343079d55715bede5 ruby-bundled-gems-3.3.12-9.module_el9.8.0+320+13e2b195.s390x.rpm 9800a67c63b487c1c404938561d842119c8bf4530cd6d79826845dad5b03fe25 rubygem-rdoc-6.6.3.1-9.module_el9.8.0+320+13e2b195.noarch.rpm 98a854e61f315d970107d4cf5104eaddaa1b0968253e5fe454f5ed5fec878052 rubygem-irb-1.13.1-9.module_el9.8.0+320+13e2b195.noarch.rpm ae6fe622dd798584ab57c52873944d5899d082aeed2cd1f159ce53c39d218f5f rubygem-pg-doc-1.5.4-2.module_el9.7.0+245+447713a2.noarch.rpm c96338e6d5222b04fcb018874d6c36073340306f6f05aad2761a5a9b3a5b180a rubygems-3.5.22-9.module_el9.8.0+320+13e2b195.noarch.rpm ce080b4de33dddb0ac8f303f3ac201839412377e92a199d0db18e6498c6e15e7 rubygem-bundler-2.5.22-9.module_el9.8.0+320+13e2b195.noarch.rpm f0b72ff3d60bb8169fe5174af3353e8aa6cf364120c2533980202f486a880468 ruby-doc-3.3.12-9.module_el9.8.0+320+13e2b195.noarch.rpm f4a992fd9faa876f975ac08c33996d2999605d815f39d898ed3d1fed0b34eac3 rubygem-rake-13.1.0-9.module_el9.8.0+320+13e2b195.noarch.rpm fdf004d6a93755b7ea90838bcb89e737c2750fdc2495566a135891e266495082 ALSA-2026:7259 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default git-lfs-3.6.1-8.el9_7.s390x.rpm cacb39fc97f3e923ccab751d7b28cc5e3b037c99c3b6069fadb7694b8e15c118 ALSA-2026:72623 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875) * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-9.8.z] (JIRA:AlmaLinux-188656) * crypto: xxhash64 should not be fips approved [almalinux-9.8.z] (JIRA:AlmaLinux-256437) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-debug-devel-matched-5.14.0-687.53.1.el9_8.s390x.rpm 080e0e86cd24de15048c0ebb5fdd4b8edb2b009a120d7838069e7180a2e8bdfc kernel-zfcpdump-devel-matched-5.14.0-687.53.1.el9_8.s390x.rpm 27753b283486ee1b08087a265c76e83eeb9711cd119ef8cd8ced7c8dbae8481e python3-perf-5.14.0-687.53.1.el9_8.s390x.rpm 3b9c373cf5a270809c3a769df2d0111709d5c48acf701ce7339be00ad01d0c6f kernel-devel-matched-5.14.0-687.53.1.el9_8.s390x.rpm 5f072c53d7cac385256fd446f06918b3c8ab5667057118ae292f4a48a21d89b4 rtla-5.14.0-687.53.1.el9_8.s390x.rpm 68496bb58df2efb97f99034e887aded9d05bf608a15d58258d18a025a081a995 kernel-headers-5.14.0-687.53.1.el9_8.s390x.rpm 6a7ea1c446105bf9bad99e79ce1e1a36001a04748942acfa16d6a43c8abaa623 rv-5.14.0-687.53.1.el9_8.s390x.rpm 76a9528a3ba5772a4b9b5f8292cfbbbb41d88a3712ff1911431c4a9970372e37 kernel-doc-5.14.0-687.53.1.el9_8.noarch.rpm 83ea8ee0f1d7bc56d63f821e92d73016fc01144cdc77dc176dbf964210158a19 kernel-devel-5.14.0-687.53.1.el9_8.s390x.rpm 936cf5fb1340a531e6eea46a1fbf0e674c0fa3bbd73f724538d1de05529e7ca7 perf-5.14.0-687.53.1.el9_8.s390x.rpm 9e3345c42cb18066b06d9fc15ae84548660246adb67fd24fe921f028c8faaa5b kernel-zfcpdump-devel-5.14.0-687.53.1.el9_8.s390x.rpm b20a1be61f202f520d45b5996b33bbe968319d0c69870ecaceb5ead26bb4aaa2 kernel-debug-devel-5.14.0-687.53.1.el9_8.s390x.rpm fdbdcd3a6aad96a12c5246545812395b9b208c0d9b9d6442459cc69031d9b1e0 ALSA-2026:72663 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: Expat: Denial of Service via quadratic complexity in attribute processing (CVE-2026-66046) * expat: Expat: XML Injection via Malformed UTF-16 Input (CVE-2026-93990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default expat-devel-2.5.0-6.el9_8.5.s390x.rpm dd21900f9e58c684adf493d66168a96a7920625ed1251232413c0a5428f5a9f3 ALSA-2026:73426 Copyright 2026 AlmaLinux OS 0 1 Important

gdb security update

The GNU Debugger (GDB) allows you to debug programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing out their data. Security Fix(es): * gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gdb-doc-16.3-3.1.el9_8.noarch.rpm 0e8cc808dfa9a54de7cf167d2a080c9544f6b5f6da76f37d4c32d4b2f9ba41c0 gdb-headless-16.3-3.1.el9_8.s390x.rpm 94f62da54b59e1f67f26d0f4a6bba204b1ea360e061b1e04e77f809863f0e6a8 gdb-minimal-16.3-3.1.el9_8.s390x.rpm c6c8940c5dc99d27343db778ac610275fd4f6b3695861ea43abf1edce9a97956 gdb-gdbserver-16.3-3.1.el9_8.s390x.rpm c94bfc8443109442ab09eb4becdac397e15036b6a462f9f14bb5454fd1b3e135 gdb-16.3-3.1.el9_8.s390x.rpm e30a010355f6f188e5bb9321a1e62b31b1eff9af3a82252e40c69ff2f6c4c6b2 ALSA-2026:7343 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647) * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654) * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784) * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nginx-mod-http-perl-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm 0034f246d34c086bce45c1883d3f21391976a6595bce52c1cf79cea8d2cccb58 nginx-core-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm 211ad2dc4ae9fc280c35ebff3f24fcc55fad108a87a6b1d7a337b783795fc5fc nginx-mod-http-xslt-filter-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm 571f256562caa9bc1d52c5dd71b24beaa1e331b111c5e0d07e9f2aac3026f142 nginx-mod-stream-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm 84be6c2865258e7d20478b6542acf3a9f4f86532f42428392071e5b948146b58 nginx-all-modules-1.26.3-2.module_el9.7.0+223+9cd7031b.1.noarch.rpm 8625be1bb61ff199185d32d10533f2c6becc0bd595d4c9e5b89698cf231f92f3 nginx-mod-mail-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm bdc98c0c4d48bf0a062818fb138602a311b1daf41bfe2cd669d2d788f76a3ba9 nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm c8675fd9142844529e2800724479bb59188df8cbeae2ecd73df45f3f09066987 nginx-mod-http-image-filter-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm e2ee05d5f108bf4d4ef5d529b1ea65bb06e97fbde4a42a0521158176101ee3b1 nginx-mod-devel-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm f3531a5277dddccca2574e70cfb39a8ac08abb4269418da44df2182790ba0ab0 nginx-filesystem-1.26.3-2.module_el9.7.0+223+9cd7031b.1.noarch.rpm f700a99a7d3c141ce36c826a6f190696bca3ca5f2cd132a61ef28dc660424e96 ALSA-2026:7350 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs denial of service (CVE-2026-21637) * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547) * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996) * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581) * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527) * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526) * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229) * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525) * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528) * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135) * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing (CVE-2026-21712) * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710) * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions (CVE-2026-21715) * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. (CVE-2026-21716) * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks (CVE-2026-21711) * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713) * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames (CVE-2026-21714) * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions (CVE-2026-21717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nodejs-docs-24.14.1-2.module_el9.7.0+222+ef1c61e1.noarch.rpm 290f01c220560280e8b6663ba1032bb090c4263df500da7c79062005df793c75 nodejs-devel-24.14.1-2.module_el9.7.0+222+ef1c61e1.s390x.rpm 477fe73250d25cc3dc378dd8482094cf7b38a4bcfd94c5d898dfe3e21c6fc4e6 nodejs-libs-24.14.1-2.module_el9.7.0+222+ef1c61e1.s390x.rpm 4a1e966d058662d150f8962e53f56967f32fe00c118b9bcca9735f12f8a80627 v8-13.6-devel-13.6.233.17-1.24.14.1.2.module_el9.7.0+222+ef1c61e1.s390x.rpm 6145d44aaf4217c78ee5dac342e2666424f116c6cb69701e171c91af1d1b406f nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.noarch.rpm 6688ca82e36c7f78fe80655131c4a7fad6d4c7b9c851130cb6202a27b946c979 nodejs-full-i18n-24.14.1-2.module_el9.7.0+222+ef1c61e1.s390x.rpm 8f4970a84fd1190abfd95c2faf7c8e61b6ed0e2e159abb9dd847cc48de878c81 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+198+8bf605ba.noarch.rpm 97b592d61e7cdad2e8509964064ddbff27be4f5aa478b78c4438ac2fd0d42bb1 nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.s390x.rpm a81216ec5d47e8c144765cbc41845ebe93bdfbbb85ee54ca65344e0497403be9 npm-11.11.0-1.24.14.1.2.module_el9.7.0+222+ef1c61e1.noarch.rpm d17496ca3682a8e6122b905a795b96f1a7ffd63f051fb6b5be46e8191f0e03ae nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 ALSA-2026:73512 Copyright 2026 AlmaLinux OS 0 1 Moderate

gawk security update

The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs. Security Fix(es): * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468) * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553) * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gawk-all-langpacks-5.1.0-6.el9_8.1.s390x.rpm 1d8694c189ccf953216410a98144528378e1949118b0fa7923c5f77f2d65cb1e ALSA-2026:73766 Copyright 2026 AlmaLinux OS 0 1 Important

pki-core security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561) * pki-core: Dogtag PKI v2 REST ACL filter's reverse-lexicographic tie-break lets a CA Agent invoke the admin-only raw profile creation endpoint (CVE-2026-80110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default idm-pki-server-11.7.1-2.el9_8.noarch.rpm 0be7465bcb3362a3ee42f558a74c407c5e357a3cec76bf2d891b8f7b22b37fcc idm-pki-java-11.7.1-2.el9_8.noarch.rpm 45accff203deaf91b04d80b76a8b69fc0ed0167c3219777b49e3e560616c3e4f python3-idm-pki-11.7.1-2.el9_8.noarch.rpm 7cdb2b5d930010bbebf60d3b62fdedf7118fbb41a798b829b109192b8d60ae6a idm-pki-base-11.7.1-2.el9_8.noarch.rpm 7fe4d9e4ba29b64ee9004839fd331a3037c2fd71214a9750ccc0aa0a5f25cba1 idm-pki-tools-11.7.1-2.el9_8.s390x.rpm a03d2adf31c776e03994f6f67771848156fb77d63a8d76d1cb2c48f08f6cc03d idm-pki-acme-11.7.1-2.el9_8.noarch.rpm ca1650891a908a6b38eef68f208682acdea4e0f58fe3e2d83478ccd526576ccb idm-pki-ca-11.7.1-2.el9_8.noarch.rpm d223ac6542cafc7b4197cb73101e27b427d0751ac102916e3043983e65773dce idm-pki-kra-11.7.1-2.el9_8.noarch.rpm ef33e6f4d5d2acd1e082dea0c53b585a59884c3eba548e0c3f7c5a2127db4669 ALSA-2026:73838 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation (CVE-2026-85152) * undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options (CVE-2026-84961) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) Bug Fix(es) and Enhancement(s): * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-9.8.z] (JIRA:AlmaLinux-249189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-devel-24.21.0-1.module_el9.8.0+321+1555b6a2.s390x.rpm 2412c13a67ff5a7712fae78621177a569d409fffe9100417253ed2efb33d324d v8-13.6-devel-13.6.233.17-1.24.21.0.1.module_el9.8.0+321+1555b6a2.s390x.rpm 285e4127cd8a2a13ad7d844aa0e6540151c414fccb8f67468ac95179a5db7f20 nodejs-nodemon-3.1.14-3.module_el9.8.0+292+f4eaf8b2.noarch.rpm 34593bae84e3eda22d3c85db93eb84f883d07844a6d2c91217637b2c000e7e3b npm-11.19.0-1.24.21.0.1.module_el9.8.0+321+1555b6a2.noarch.rpm 3b671ea4309e16dd67563449867fcd5bf6bc6480d23b0d4db1a1575fd4ccb715 nodejs-full-i18n-24.21.0-1.module_el9.8.0+321+1555b6a2.s390x.rpm 63cf7a2e8897321d61abebceb3a61cba6bd371edd9cca0e2be72daa634d736e4 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a nodejs-24.21.0-1.module_el9.8.0+321+1555b6a2.s390x.rpm 9347837c25ef3e3ce6e73ca3b22d2e20a2c452b042edf351135d866852b2f79e nodejs-docs-24.21.0-1.module_el9.8.0+321+1555b6a2.noarch.rpm af3130313d30050827c59151b1aada7a5f51ada41e4ae3921be4e7f59930338a nodejs-libs-24.21.0-1.module_el9.8.0+321+1555b6a2.s390x.rpm cf67d07142bb8d8649241eca577fa98bdad141c4f53261d7dce00a790221ede9 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 ALSA-2026:7384 Copyright 2026 AlmaLinux OS 0 1 Critical

cockpit: Unauthenticated remote code execution due to SSH command-line argument injection

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default cockpit-storaged-344-2.el9_7.noarch.rpm 0c9b09373a2cf6803bc493ad471ec3a0d5e03cb01e571b4046e2daaf255195b2 cockpit-packagekit-344-2.el9_7.noarch.rpm 1ef1686e9430eb02e35f06d182d13aa3a421ee0a8388cd25f9a0e2d6d91e4bae ALSA-2026:73955 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay (CVE-2026-60001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pam_ssh_agent_auth-0.10.4-8.12.el9_8.alma.1.s390x.rpm 75992023c58f922df4e549c532bf08cd958209b0d7242b34937c91c2ff6d8fd2 openssh-askpass-9.9p1-12.el9_8.alma.1.s390x.rpm e224f7752ba7ba5298b09c9347e05b2430ab6bf8b8eb9841bd99dd973671ba54 ALSA-2026:74370 Copyright 2026 AlmaLinux OS 0 1 Important

gvfs security update

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer. Security Fix(es): * gvfs: SFTP: heap-based buffer overflow in read_reply() (CVE-2026-84268) * gvfs: gvfs-admin socket ownership race permits local root (CVE-2026-88924) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gvfs-devel-1.48.1-8.el9_8.1.s390x.rpm 06afeed44a7779089795e83a524fbecf68d6b482770a518aab038f0929f8360b gvfs-mtp-1.48.1-8.el9_8.1.s390x.rpm 52ab8627d7af474ddd91e3d15f72a3e71e0745d1bca04e3889eca190c1bec99c gvfs-smb-1.48.1-8.el9_8.1.s390x.rpm 745e4c29621fa5dcb0fe0639c7b5db6da7643ba0e7000fe75503ff15d7897a45 gvfs-goa-1.48.1-8.el9_8.1.s390x.rpm 74fb8a92dae91f3a257d10c9b5a8cffb02b7216b66b0b223fa13285fae307df3 gvfs-gphoto2-1.48.1-8.el9_8.1.s390x.rpm 7a274dc6197c8ac5edc257bdab2f1f224d3b0da685d564b46ed1580e28c1b9c1 gvfs-fuse-1.48.1-8.el9_8.1.s390x.rpm 8729db523548cf1f0680e0a2d82b497a844fbb99c1cc815bc8519482797d002c gvfs-1.48.1-8.el9_8.1.s390x.rpm b1a9fce41e28bac95c727cc2c506282154aefa056c346a23b24334f3270699db gvfs-client-1.48.1-8.el9_8.1.s390x.rpm e3e46e256c1a0f60ca6fab51e4b32b0f72b2ed80722d8c52e42bb879d3a27cb3 ALSA-2026:74424 Copyright 2026 AlmaLinux OS 0 1 Important

libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fix(es): * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622) * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (CVE-2026-18917) Bug Fix(es) and Enhancement(s): * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to virtio-vga on target [almalinux-9.8.z] (JIRA:AlmaLinux-186018) * libvirt-guests does not work together with virtlockd on shutdown [almalinux-9.8.z] (JIRA:AlmaLinux-224986) * Expose guest-get-devices in libvirt-api [almalinux-9.8.z] (JIRA:AlmaLinux-243306) * allow hyperv pvpanic "device" to process Windows crash dump [almalinux-9.8.z] (JIRA:AlmaLinux-242549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libvirt-daemon-driver-secret-11.10.0-12.7.el9_8.alma.1.s390x.rpm 0cbc0e51292138b3c8cd8a97ff967233f25a3beb9d480522075e936554617ede libvirt-daemon-driver-storage-logical-11.10.0-12.7.el9_8.alma.1.s390x.rpm 15c16f7c3551ac602cf11391bd01d39681511bc1a4c76a39a2e9df97c0406c07 libvirt-client-11.10.0-12.7.el9_8.alma.1.s390x.rpm 245823cc10ed3443ba548b8b9f7a2fc9b8d802ff7de57f3e042f756529bb0cab libvirt-daemon-kvm-11.10.0-12.7.el9_8.alma.1.s390x.rpm 24bd5b4953597ed984bb58850bf476884ee3fbadafb81bd6f8da9018fb0bc207 libvirt-daemon-driver-storage-scsi-11.10.0-12.7.el9_8.alma.1.s390x.rpm 2ca899ac1b712433aabced9ededf0263a36a581a7695bc16509bc6ce1f77d2ca libvirt-libs-11.10.0-12.7.el9_8.alma.1.s390x.rpm 3c1ff7cad55b2150280436d4685ae087baeabdd6c38669e8aa796026cf944ec6 libvirt-daemon-driver-storage-11.10.0-12.7.el9_8.alma.1.s390x.rpm 3e56b5761941d3b5175cb85c82dd7fcc11f85f89f42cf53b3627afed9ff97a1f libvirt-nss-11.10.0-12.7.el9_8.alma.1.s390x.rpm 42d82b4f6329a7883350805bb4a30be5993b9b11dc54f14dc8ffa5c0a2ab9f78 libvirt-daemon-driver-qemu-11.10.0-12.7.el9_8.alma.1.s390x.rpm 583f402b4ba07a1aba3d2b8b4b5f2f825e4c6107808e0e64614a135a157704ab libvirt-daemon-config-nwfilter-11.10.0-12.7.el9_8.alma.1.s390x.rpm 5945c414e4a381b528ebf42d7d288b06667f27dd0f833bbdf72c57c0f5fceceb libvirt-daemon-driver-storage-rbd-11.10.0-12.7.el9_8.alma.1.s390x.rpm 5f090c6bee750326ec519cd9572da1afa5e0c12da73fd8c823e7f3926904d382 libvirt-daemon-driver-interface-11.10.0-12.7.el9_8.alma.1.s390x.rpm 6109b9227b3ad417975daaa7aca9095ad969ec3a2d514ef4ee1fb5f1b955b3a7 libvirt-daemon-common-11.10.0-12.7.el9_8.alma.1.s390x.rpm 65d88fadc7c87c99b29cba5c75937b3619ec8b83f41fd73f8f6beea3af800cad libvirt-daemon-plugin-lockd-11.10.0-12.7.el9_8.alma.1.s390x.rpm 78a3db2b833cf88981f4c9e099d97737b9fee41c133175b40109007e87ff4bd4 libvirt-daemon-driver-network-11.10.0-12.7.el9_8.alma.1.s390x.rpm 7a7ed4d59858ffbf2807aa08b0ec4813cf57c1838022b52e4e230fe1ea874751 libvirt-ssh-proxy-11.10.0-12.7.el9_8.alma.1.s390x.rpm 7c206d764fa53c9fcb123e3d7f2d869687a41400ca28818b792f19a816497b46 libvirt-daemon-config-network-11.10.0-12.7.el9_8.alma.1.s390x.rpm 8860febca37397e3e5b61886d1fc1f5ef9b35b2b90e14c81ebbbdfceb1f8f8b5 libvirt-daemon-11.10.0-12.7.el9_8.alma.1.s390x.rpm 89e2fb73981948682a0f0986c28ff069b5a80f83a91c6dd5cf4ff45fcd966dab libvirt-11.10.0-12.7.el9_8.alma.1.s390x.rpm 8d6952eabacb5e8b180127122f01313880d25e288291c6d5f0bd3996e00a4093 libvirt-daemon-lock-11.10.0-12.7.el9_8.alma.1.s390x.rpm 978d37045a8526c3d64ed3e9d1b124284fe1ec55320effc03ca6d74fb7bb21c9 libvirt-daemon-log-11.10.0-12.7.el9_8.alma.1.s390x.rpm 9cd3cbdab786b47a4908a23268a42741e55fca946eeb94178425f88248781007 libvirt-client-qemu-11.10.0-12.7.el9_8.alma.1.s390x.rpm 9d37f7460c655a7d4603db838049ba6f3daff1f2d6d58f0263f40a62dcc4b4ab libvirt-daemon-driver-nwfilter-11.10.0-12.7.el9_8.alma.1.s390x.rpm b4e0e181dc28458d596da4b32d2636e997fe739216b7b6c5ddadb9b3398d8125 libvirt-daemon-driver-storage-iscsi-11.10.0-12.7.el9_8.alma.1.s390x.rpm b50d6ae64aebba8aac10db451236aecf203b25ce936cc6731c424cd83bbc3f53 libvirt-daemon-driver-storage-core-11.10.0-12.7.el9_8.alma.1.s390x.rpm c48c6babddd8fa2a6a13ec15f5eb238c42d267c4022b98176836e2c24b092305 libvirt-daemon-driver-storage-disk-11.10.0-12.7.el9_8.alma.1.s390x.rpm e03760814ed2221a4dd8ec95b91fb7835f200b20c950e70a43c7cea1a58ce802 libvirt-daemon-proxy-11.10.0-12.7.el9_8.alma.1.s390x.rpm e7f69215b2e4e515ecbb05fe6926e4a3b1d3726287b1fcc257c4b488023e3524 libvirt-daemon-driver-nodedev-11.10.0-12.7.el9_8.alma.1.s390x.rpm fba8e06653c81124ebeb83a669e23a83b7e05819ad197a630277c82b63f6739f libvirt-daemon-driver-storage-mpath-11.10.0-12.7.el9_8.alma.1.s390x.rpm ffa426095ad835e9a6d7239cc3831a51b8b0373fdd05167f5978b8e55fe149f8 ALSA-2026:74438 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) Bug Fix(es) and Enhancement(s): * Backport of protocol attribute to IP addresses (IFA_PROTO) [almalinux-9.8.z] (JIRA:AlmaLinux-169936) * try_charge_memcg() refactor in kernel 5.14.0-687.36.1 causes premature memcg OOM with GiB of clean page cache present [almalinux-9.8.z] (JIRA:AlmaLinux-269060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-zfcpdump-devel-matched-5.14.0-687.54.1.el9_8.s390x.rpm 09eb5c7bd24b4a1cbad1a8923a67265f7432202a7acd7bfc53c6b8a5f11ca75a kernel-debug-devel-matched-5.14.0-687.54.1.el9_8.s390x.rpm 20cc3c5180d4b20873878c0a54618646f18e713f462b042b274abfa258d99c0a rtla-5.14.0-687.54.1.el9_8.s390x.rpm 3ccdf44491f77584ab4155faf3bbb0b825ff8aee40b42fb27f59f408b4b58f0a kernel-devel-5.14.0-687.54.1.el9_8.s390x.rpm 683965d8bd150eafc2242d745bfa17941f98bba2e7b80a9f03b98649c5bb28ae perf-5.14.0-687.54.1.el9_8.s390x.rpm 8b8ff56d2e996b44b1179f0b9da62c303ca09700936c3f61a4c8c3da03c0ad6e kernel-doc-5.14.0-687.54.1.el9_8.noarch.rpm 93ba5d6f80b0eac857876df1d62ca2c3d73c7441ad73a04b418dc7cd83a83644 kernel-devel-matched-5.14.0-687.54.1.el9_8.s390x.rpm a01ed1cdb292a5a07a1508607385e38e340b954b1f08a26a40f3c324ac7456ca kernel-headers-5.14.0-687.54.1.el9_8.s390x.rpm a6e7110ae586e2437d8ff424cdd79aa5a9fc7881a82adf4d925990ec42b7f6aa rv-5.14.0-687.54.1.el9_8.s390x.rpm a8d8d595aa407fee6cab21e11479151a2fcc81339d37b460b68af4369cc4b746 kernel-debug-devel-5.14.0-687.54.1.el9_8.s390x.rpm ad1286c0db2cae1ccf07fd1f43fadc97b7f8cf9eef10e8b05ec52b45daed335a kernel-zfcpdump-devel-5.14.0-687.54.1.el9_8.s390x.rpm ad2a8a7d559b7b950926df81022f0a11bb9a7417275274296a414f832e05e6f5 python3-perf-5.14.0-687.54.1.el9_8.s390x.rpm fb6325ba66cfb6b24ac535863f9be96ba987a9115e24328a71a45363a320f0d1 ALSA-2026:74457 Copyright 2026 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter (CVE-2026-39919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default ghostscript-x11-9.54.0-19.el9_8.1.s390x.rpm 06aaa5f2d2861cacfc4ac200668e86c876f679f5562dc7bbfd6bb76206fd7037 ghostscript-doc-9.54.0-19.el9_8.1.noarch.rpm 20a79f095fc54e0eaaf0efc2a53ea22ebaaa22528519cff071f89e5c8a7d09ba ghostscript-tools-dvipdf-9.54.0-19.el9_8.1.s390x.rpm 9426ec15cc32bb6fe33ef9b1967696fa9c0841bbb51a7588c6af7145c043fbaf libgs-9.54.0-19.el9_8.1.s390x.rpm ccb2ba444a735b8aa095008fbb23460e4561bbf8a7600215c737c53691975554 ghostscript-9.54.0-19.el9_8.1.s390x.rpm e2105bac0162cd6cecb332848926e73042024a4eafaaa7f6edd31685b6948b7d ghostscript-tools-fonts-9.54.0-19.el9_8.1.s390x.rpm e9099b706732398fe7f8701c1659e8f9029a9ec77b88e342b499b1844b50b209 ghostscript-tools-printing-9.54.0-19.el9_8.1.s390x.rpm feaf9b93a8a07129b4d807efb2e662b91010c4bab73c1951c1c36992cce6b260 ALSA-2026:75571 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization (CVE-2026-96512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default sudo-python-plugin-1.9.17p2-3.el9_8.3.s390x.rpm d948baebcc36857e19860a9eb0b8d7071c2a66f3c873bd39957cbc71ce6a266c ALSA-2026:75578 Copyright 2026 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736) * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667) * bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563) * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274) * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind9.18-chroot-9.18.29-14.el9_8.10.s390x.rpm 0c28775d1f3e601b67183150fff812b72e5532923a13dbb1cb02dcc90dd07867 bind9.18-9.18.29-14.el9_8.10.s390x.rpm 12b98ad42559c01404d1170583681fe84a8970d7e5e87d8c72869a0b4ac29201 bind9.18-libs-9.18.29-14.el9_8.10.s390x.rpm 2342434b47690200ded6a1ec510f7d4bfc873cb225c7f72852e2dde46fc27fec bind9.18-utils-9.18.29-14.el9_8.10.s390x.rpm 5512bc9edd0ca6b97c409444fcfd02388a0c83ccb14c474c75612d2f69b5db6a bind9.18-dnssec-utils-9.18.29-14.el9_8.10.s390x.rpm fe22e17a3b62f1e8bd19056a417cee645803e45806714b87f37d9f2ec75b4e8c ALSA-2026:75673 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb-connector-c security update

The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fix(es): * mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mariadb-connector-c-devel-3.2.6-2.el9_8.s390x.rpm 2baadbcdf101ee92d5bf01dfc186871cbaa3ff0128dc4430bc20833518ed0733 mariadb-connector-c-3.2.6-2.el9_8.s390x.rpm b954c2ffda02797e3f22f02c5736b088ecd9fbad0daa9fd27a7fb53d51e1e268 mariadb-connector-c-config-3.2.6-2.el9_8.noarch.rpm fc7dff578a251b7c72a4e8d200d18e840141bf13b7b499db9866e9d88a177fab ALSA-2026:75767 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667) * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274) * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind-9.16.23-40.el9_8.10.s390x.rpm 21610bd45c63914667d015b7e51b47fa3b7882195de11fa50c74fbcc57a293c9 bind-dnssec-utils-9.16.23-40.el9_8.10.s390x.rpm 3875f046a3306ebcd778a3598541dda0db0b6e28d87ed859de971da3ba6b46b2 bind-chroot-9.16.23-40.el9_8.10.s390x.rpm 5af4e54534e91fa61700275c1ff66e9ff06594e56bee98a25556dba616d90e2b bind-libs-9.16.23-40.el9_8.10.s390x.rpm 60a14e5aa64ac6d6a21ab747b943f4b62c7628d15c3d1f64b8ca829127d4d0e3 bind-dnssec-doc-9.16.23-40.el9_8.10.noarch.rpm 7a524da214c9061dd809b96f1a2282e9f174658e37be3bca8180bd5f90a9bb11 bind-license-9.16.23-40.el9_8.10.noarch.rpm 8e606d2ca32583855edebf2c4959fda822e98fa4bdf8397313c697b895d1d00c python3-bind-9.16.23-40.el9_8.10.noarch.rpm d9c20ba5b3b5bad11d2374dab93550626af777c6dcdd803868365868b7e06fc4 bind-utils-9.16.23-40.el9_8.10.s390x.rpm fb9a763142b5c2067d3065212841c45fe29bc8f3867ad9094b37ec294e17265d ALSA-2026:75768 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default vim-common-8.2.2637-26.el9_8.23.s390x.rpm 191c34035d4948beeaff662f699d4af8a7dfe136866a79deed0da8f3b3971084 vim-X11-8.2.2637-26.el9_8.23.s390x.rpm 1de01543df140aa94624537036e229615503a9e17e5f672c8a0ff981e5273217 vim-enhanced-8.2.2637-26.el9_8.23.s390x.rpm 5eb074f7763c857c63f7de1e3e3e502114518c11cd92f2a44d6e7279fccee5f9 ALSA-2026:7671 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default firefox-x11-140.9.1-1.el9_7.alma.1.s390x.rpm 2c49998846d970973a3455280811a863f29025bfd941406c926158d5468313bf firefox-140.9.1-1.el9_7.alma.1.s390x.rpm f4e14d639792fb985a32ad155091f740be836e3aa7eefa5ededf19a080cb4852 ALSA-2026:76744 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests (CVE-2026-84445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default opentelemetry-collector-0.158.0-1.el9_8.s390x.rpm e210ece807cae89e8e659f7788f80ec733e44976189d020b0902b7e12653fe12 ALSA-2026:76750 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function (CVE-2026-9496) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default nodejs-22.23.2-2.module_el9.8.0+322+f4aa738c.s390x.rpm 1f7da923820f425dd2dd02e19993c461d02878c5ccba94b30f1d69d8ca35f439 npm-10.9.8-1.22.23.2.2.module_el9.8.0+322+f4aa738c.s390x.rpm 3c8bbfab5798b6d982cdbe27de610a8ce667ce43fd22526364df2420385095a0 nodejs-nodemon-3.1.14-2.module_el9.8.0+302+959ebcd4.noarch.rpm 5190b3e52c15db838024cbc8fabaabca0e1df1b58db46abb8e280935c57129f6 nodejs-full-i18n-22.23.2-2.module_el9.8.0+322+f4aa738c.s390x.rpm 623593cd693b660d750faed1f8cf6ac5ec563fe62844400c57a1151f24b23656 nodejs-devel-22.23.2-2.module_el9.8.0+322+f4aa738c.s390x.rpm 689eeea4f40fcab6d6eee3bd04463c7ff8301596f16103eb8d364065f3abf44b nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 nodejs-libs-22.23.2-2.module_el9.8.0+322+f4aa738c.s390x.rpm 84932e37327dffcbcf9e1f0f2cc50ae27aa38b5c0072adf7360162595b06a6f9 v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el9.8.0+322+f4aa738c.s390x.rpm b30f8c1ac5d8c164695a8d34ad114a21d2db0ac3956d2ddddf72de6242c27db6 nodejs-docs-22.23.2-2.module_el9.8.0+322+f4aa738c.noarch.rpm dc0de39d827a00ab6bd0d5487e3d4c7971b5e3c74d6268d6e135d21f1f870add nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:76755 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954) * FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964) * FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956) * FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963) * FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959) * FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libwinpr-2.11.7-7.el9_8.8.s390x.rpm 2ec62488735ef19aef119dda2b7ef03ae3070be1e40c9d52efd44c6b48ffbbd6 freerdp-libs-2.11.7-7.el9_8.8.s390x.rpm 61bcd1ea7e2ed248dd82ca6016775f6b6214991b6e6de369b2cb87a752c165ba freerdp-2.11.7-7.el9_8.8.s390x.rpm a6c878449034ac647de8cad963da01bc8a5dade170a5387055d0bd9fb8cb6495 ALSA-2026:76760 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fix(es): * perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting (CVE-2026-88815) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.7.s390x.rpm 5079b7ef2793596a8ef2d488965b28ef20586b297f218637d66512658a4fffe8 ALSA-2026:76761 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832) * firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784) * firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794) * firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777) * firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792) * firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776) * firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757) * firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786) * firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869) * firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791) * firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782) * firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772) * firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759) * firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778) * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758) * firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774) * firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785) * firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788) * firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771) * firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790) * firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100780) * firefox: thunderbird: Use-after-free in the Networking: Cache component (CVE-2026-100767) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-100756) * firefox: thunderbird: Uninitialized memory in the Audio/Video component (CVE-2026-100783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default firefox-140.17.0-1.el9_8.alma.1.s390x.rpm 43547260b4bade1328d26d9255ac5de89b9c8417c3a800b5a34982039129a129 firefox-x11-140.17.0-1.el9_8.alma.1.s390x.rpm b643a4caf23475f0ce2288468fbeab18c9e34176f14806bf5736a33039f683b0 ALSA-2026:7679 Copyright 2026 AlmaLinux OS 0 1 Important

perl-XML-Parser security update

This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options may be provided when the XML::Parser object is created. These options are then passed on to the Expat object on each parse call. They can also be given as extra arguments to the parse methods, in which case they override options given at XML::Parser creation time. Security Fix(es): * perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files (CVE-2006-10003) * perl-xml-parser: XML::Parser for Perl: Heap corruption and denial of service from crafted XML input (CVE-2006-10002) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default perl-XML-Parser-2.46-9.1.el9_7.s390x.rpm 9de859369abe06c25674a138c34f9c27f9c18a734133f26895bec4077edd2867 ALSA-2026:77017 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.12-devel-3.12.15-1.el9_8.s390x.rpm 03f9c4f4a207e3970685a37c1c98ed6c715bc8bf0e82a9fef2e52f2419755746 python3.12-tkinter-3.12.15-1.el9_8.s390x.rpm 2dce8ca792acfeaf6981dca05fe577d032b79bac11776cbcf48b1baa8e91b57e python3.12-libs-3.12.15-1.el9_8.s390x.rpm b5ff8ce1820e28df9a27480b8343a3f5c10a0bd3abb6b399a4a7d8dd3f167981 python3.12-3.12.15-1.el9_8.s390x.rpm d490558d652b7d82c141b1db5822e87a894c0fafd08d3d3b95dfb2e8f07d5cbd ALSA-2026:77021 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-3.14.8-1.el9_8.s390x.rpm 3fcec500790fcb7ea066341cedaf3fed3fe9ee0d88496f16cbdecf96ec31a889 python3.14-devel-3.14.8-1.el9_8.s390x.rpm b79803fcabd1b6b7dd8868358bc8225d79ca533684df484c7b876e496224b3f9 python3.14-libs-3.14.8-1.el9_8.s390x.rpm cd8dc8de55a5eb15f1feb52983717fd5a2fdc775032afe0c6379432109a5eb3a python3.14-tkinter-3.14.8-1.el9_8.s390x.rpm f05c0355d56efa211ec6b7e6797a20f542d0ce75ced948df0c5f4e780d1654dd ALSA-2026:77396 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default openssl-perl-3.5.8-2.el9_8.s390x.rpm 21d6f848cbed116516232734c27c536c0e187ff9e23ca4f350b96f733b1da1c3 openssl-devel-3.5.8-2.el9_8.s390x.rpm 867f48c2fb5c3c2c5259e415d791408386913b2e53f55c6d0494562d21c7ee64 ALSA-2026:77689 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) Bug Fix(es) and Enhancement(s): * "iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on almalinux-9.7 [almalinux-9.8.z] (JIRA:AlmaLinux-169480) * [GNR-D] missing interfaces tspll_cfg (JIRA:AlmaLinux-183201) * AlmaLinux9.8z KVM guest panicked in vmmouse driver (JIRA:AlmaLinux-186577) * Add Epson RX8111 support to AlmaLinux9.9 [almalinux-9.8.z] (JIRA:AlmaLinux-212014) * RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [almalinux-9.8.z] (JIRA:AlmaLinux-256279) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-devel-matched-5.14.0-687.56.1.el9_8.s390x.rpm 1d9d1ece39c6129d91c27c955f8e4ca7ff6c1739b56d44e7dcb3997a24173d36 rtla-5.14.0-687.56.1.el9_8.s390x.rpm 50a7be9610a30ccc7b8b46299efe8288751f9fe5e963cccd9571f2c5552a2a05 kernel-doc-5.14.0-687.56.1.el9_8.noarch.rpm 7a91ac48476c2ac6c7aa7e421a976065838589636679a27e05d6e6d8e29a95bd python3-perf-5.14.0-687.56.1.el9_8.s390x.rpm 810d05dad1e5e5f84e7d5a3624750c73286877fbf106c48b8cb79b8ac40a25bc perf-5.14.0-687.56.1.el9_8.s390x.rpm 831171d8349a9bb4dab17aae1609a4cf3e9bbe10784864bf9b6027388afe9080 kernel-headers-5.14.0-687.56.1.el9_8.s390x.rpm 9f3d1aa70aa3f1d2921446cdc75b45adbd44fb312bdb3f3c0b898a2007fd0627 kernel-debug-devel-5.14.0-687.56.1.el9_8.s390x.rpm b8bf188e6fa8d99ad52d2ffc9927773946d1ec4198329e165a0a264f4c0ce53b rv-5.14.0-687.56.1.el9_8.s390x.rpm bca33ab07006c59ff25c812dd6c9ed3379486371a375d3f84aa1607c844acb00 kernel-debug-devel-matched-5.14.0-687.56.1.el9_8.s390x.rpm c0fa1027c565949b51d71a3d34974aad550821fbda2b2d487b42e1992c19d8c8 kernel-devel-5.14.0-687.56.1.el9_8.s390x.rpm c797abe7ceb21a716c0b3dedee08af5646b3a51e881c3324a35031b78928a65b kernel-zfcpdump-devel-matched-5.14.0-687.56.1.el9_8.s390x.rpm ce89d8a455bb20cb0c572fa63dc15ffa888a80bc2631d14fd9f9660827c1a7bd kernel-zfcpdump-devel-5.14.0-687.56.1.el9_8.s390x.rpm e7b0b09d005668dbc9082fac2cb6f6fd36c2fe4d6c8591e1e6823cfc728eaca8 ALSA-2026:7896 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996) * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions (CVE-2026-27904) * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135) * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default nodejs-docs-20.20.2-1.module_el9.7.0+224+0af7cc6b.noarch.rpm 314f155c9da69d62425f24a2d2fac67bcaa649b9c23fc6cb01870e3ba1d9f489 nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm 572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648 npm-10.8.2-1.20.20.2.1.module_el9.7.0+226+88d36870.s390x.rpm 668080c617f8a3c1dd46624252e80d01bbca90689d82f0bac0abe8377ed6c366 nodejs-packaging-2021.06-6.module_el9.7.0+226+88d36870.noarch.rpm 9ffbd61248997549fd001f5063043eb12602b6f2d1536abbf1f7e32520b402e7 nodejs-devel-20.20.2-1.module_el9.7.0+224+0af7cc6b.s390x.rpm b8fb668f900167be84487f1316848f99bf9d19176a9768e4e32acbcd33e7e1d1 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+226+88d36870.noarch.rpm c18bda74e3d85c8b2f96722b89e8b886d82685c1b71bf3d3c7a308d400dbd165 nodejs-20.20.2-1.module_el9.7.0+226+88d36870.s390x.rpm e7cc723a8bea7cf5881f03243c396e28d1e2aeb0a51c15682a06949bc959365b nodejs-full-i18n-20.20.2-1.module_el9.7.0+224+0af7cc6b.s390x.rpm ebb0d78fd50cdb77b0416ea36c32931a6b616fc89312417cd2817e231394732c ALSA-2026:7915 Copyright 2026 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default bind9.18-dnssec-utils-9.18.29-5.el9_7.4.s390x.rpm 55039b08f0be5b68e18664e7adaea9780d7cd9b255e8ada0bddfebfabb681b22 bind9.18-chroot-9.18.29-5.el9_7.4.s390x.rpm 62ba7fde89b7eba9d2b072c294356ff11f6a482682035d49bd3176f104083e16 bind9.18-utils-9.18.29-5.el9_7.4.s390x.rpm 6ef03db7f774251924f7e81834f24ec631c0a1ea6a29ad72efa6f058d278f51f bind9.18-9.18.29-5.el9_7.4.s390x.rpm 91920ed2e1bff6b25dde8648238f94960db9f80e9148d757e2c4ee5b271f1aeb bind9.18-libs-9.18.29-5.el9_7.4.s390x.rpm baebefba10e7a367b5826ee922abcf8bc317c4de585e8cfc256752dada784174 ALSA-2026:79177 Copyright 2026 AlmaLinux OS 0 1 Important

mod_auth_openidc security update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: mod_auth_openidc: Denial of Service via malformed state cookie parsing (CVE-2026-54789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mod_auth_openidc-2.4.16.11-1.el9_8.1.s390x.rpm f6d99198b3ea22b006a81c4685b598a949eecd58a57a103277390e0ffb37d805 ALSA-2026:79281 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion (CVE-2026-6791) * glibc: glibc: Process abort due to invalid memory in wordexp (CVE-2026-6368) * glibc: Fix out-of-bounds array write in tdelete (CVE-2026-19542) * glibc: Non-progress DoS in SHIFT_JISX0213 -&gt (CVE-2026-77117) * glibc: Non-progress DoS in SHIFT_JISX0213 -&gt; UCS-4 conversion state (CVE-2026-80489) * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374) Bug Fix(es) and Enhancement(s): * glibc: Stop shipping glibc32-debuginfo package (in debug channels) [almalinux-9] (JIRA:AlmaLinux-219516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default glibc-locale-source-2.34-283.el9_8.s390x.rpm 538d343de56981b6358cc2e03929a93bebade73ebd93c8b1d3712530232c655b glibc-devel-2.34-283.el9_8.s390x.rpm 6ed9911711eaacf79734877836eedd96f18fcd4385141f45e5939d9459e11707 glibc-doc-2.34-283.el9_8.noarch.rpm 8689d2fcc2bf7cee48da5eeeeea4242181705a1151d81e82fa00b65bfa056da3 glibc-headers-2.34-283.el9_8.s390x.rpm d8c83f06f86388bc05760cb620da01e0ad1ed9b323350abc135f2483a6fa8570 glibc-utils-2.34-283.el9_8.s390x.rpm f9ba288907bdeb9649900c38cd00914fc3d3f2626ff166fd83fc67875d4d821d ALSA-2026:80496 Copyright 2026 AlmaLinux OS 0 1 Important

flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fix(es): * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`) (CVE-2026-86320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default flatpak-builder-1.2.3-1.el9_8.1.s390x.rpm 49abaf06c326fe8527ee5de33a070cd6c10da916425ef686ac6f2c1e6766d880 ALSA-2026:80497 Copyright 2026 AlmaLinux OS 0 1 Important

flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as root via extra-data extraction (CVE-2026-96275) * flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280) * flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer (CVE-2026-96808) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default flatpak-libs-1.12.9-4.el9_8.4.s390x.rpm 1bf41ca08e6ba17fae93b1605ad87837b496e888f16cd11ac5479d114bd0eae5 flatpak-selinux-1.12.9-4.el9_8.4.noarch.rpm 9e712cfeb4f24f5cd4219a7bee38555aa6217a1b054683debde1d17c0a8f7a26 flatpak-session-helper-1.12.9-4.el9_8.4.s390x.rpm acf007df0f71b5253b431831ae8396090a43d72556357940b0cd48181366600b flatpak-1.12.9-4.el9_8.4.s390x.rpm ce3fa18b5a13e88964f150a316a4d97b481b76483815c6029e1d4874da8c6cc4 ALSA-2026:80504 Copyright 2026 AlmaLinux OS 0 1 Important

jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile (binary JSON), XML, CBOR (another kind of binary JSON), YAML. Security Fix(es): * com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing (CVE-2026-68497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pki-jackson-core-2.21.6-1.el9_8.noarch.rpm 0217997f30742dafab4cc9c9e5d9ccfd48fca7eeaff8ee46ea404317fd1accfe pki-jackson-databind-2.21.6-1.el9_8.noarch.rpm 12910c21a46832d57a8bc9013fac02135dabb3b68ce4f12c072eef052f7ee9f3 pki-jackson-module-jaxb-annotations-2.21.6-1.el9_8.noarch.rpm 798acc97fec7c4f2b45252292a3928650e36b77a2048d7e0bab35c639f9f0486 pki-jackson-jaxrs-json-provider-2.21.6-1.el9_8.noarch.rpm a27ab0aa9f686d0561d760b8ea6c9b1b098d622a37ecbec01b8a2047f6a3b3ce pki-jackson-jaxrs-providers-2.21.6-1.el9_8.noarch.rpm db3eb9026e2269776b40cb822cfe3e059f30a2ccce4df1d1cf0d2bf8889703a3 ALSA-2026:80507 Copyright 2026 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219) * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default emacs-27.2-18.el9_8.2.s390x.rpm 1e2c490de0c12ab8cc42af516db641bed0348760954ca532c2f04542dd74a2a0 emacs-nox-27.2-18.el9_8.2.s390x.rpm 33103c3a1299024352cdb42cb3a04666f7b23f44f0cea06ff185065dbe03b7d4 emacs-lucid-27.2-18.el9_8.2.s390x.rpm 49b453425e688cc412c5a07553131dae1a047ee7a0992ba4cbf029c28945c066 emacs-common-27.2-18.el9_8.2.s390x.rpm 817a5ef6ca2b5698432198e301b9f75d8efd8997bbe9cd16637552e4d85086a8 emacs-filesystem-27.2-18.el9_8.2.noarch.rpm c28a239e67ed0f93f63a5c92b2d4a6fb24e1dc94019b64de79c676af81b04274 ALSA-2026:80511 Copyright 2026 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Cookie injection via malicious HTTP server using super cookies (CVE-2026-8924) * curl: curl: Information disclosure via incorrect Digest authentication header reuse (CVE-2026-11856) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libcurl-devel-7.76.1-40.el9_8.8.s390x.rpm 986af42e634bcf77e1238c0c878e26b0cf3c15660c4221d219e9d6ca8315e7f5 ALSA-2026:80514 Copyright 2026 AlmaLinux OS 0 1 Moderate

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072) * openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default compat-openssl11-1.1.1k-5.el9_8.6.s390x.rpm d3a89aa61dcc5eeabc6fe2fa3a7be02d6569586790a3f24e7ebfe99b10ad788d ALSA-2026:80663 Copyright 2026 AlmaLinux OS 0 1 Moderate

tftp security update

The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine. Security Fix(es): * tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default tftp-5.2-40.el9_8.1.s390x.rpm 9f633c85cd98b99988c04524d8e833415b4268ad20dfdba6f577e874fccaff73 tftp-server-5.2-40.el9_8.1.s390x.rpm a0aea3cb96b35c1327ce0b1effa9e511701c2ebdf7ac09114dcb413214a7083e ALSA-2026:80694 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832) * firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784) * firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794) * firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777) * firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792) * firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776) * firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757) * firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786) * firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869) * firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791) * firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782) * firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772) * firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759) * firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778) * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758) * firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774) * firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785) * firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788) * firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771) * firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790) * firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100780) * firefox: thunderbird: Use-after-free in the Networking: Cache component (CVE-2026-100767) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-100756) * firefox: thunderbird: Uninitialized memory in the Audio/Video component (CVE-2026-100783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default thunderbird-140.17.0-1.el9_8.alma.1.s390x.rpm 94b4dc712acb3cc523e645ef37ceea397a3ef846d2957c78b77a1b3427b0440b ALSA-2026:8075 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default bind-dnssec-doc-9.16.23-34.el9_7.2.noarch.rpm 1b0dccf2f36b3e7e37897d3bda8ff53a99ae63f5909e9ca3de1a5e8a44f9328a bind-chroot-9.16.23-34.el9_7.2.s390x.rpm 23b3ae3973c760e0f72f6e7e2f555875923ac835bc39f5bf09a038665487750f python3-bind-9.16.23-34.el9_7.2.noarch.rpm 4311c398764c90d88216f3cca4cf1499b1c6cf8d37bb86a3355b4024186bef5f bind-license-9.16.23-34.el9_7.2.noarch.rpm 4e5041c5bb714e338831f746aa89bcdefb8dabb9dfa3e2caa2041e4ac6253b21 bind-libs-9.16.23-34.el9_7.2.s390x.rpm 67c4844039f6bd0d72499ecad1d9ac50843aa282d7e8a85a66757d76692d4cc9 bind-utils-9.16.23-34.el9_7.2.s390x.rpm 78dcd6916bf1fc813b87475ad1ad8befdc43520258ac84029c8fcd46bbf54641 bind-dnssec-utils-9.16.23-34.el9_7.2.s390x.rpm 8351f148ed2489bac76a5cef205c9fe49aaaddaf9d926184b7fd6a7db751df42 bind-9.16.23-34.el9_7.2.s390x.rpm ce18b06dd5671630424ee96b8c9405fe53157841cdc86a79c7525df0ce0a1d1c ALSA-2026:80825 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters (CVE-2026-42391) * dovecot: Dovecot: Authentication bypass via incorrect OAuth2 token validation (CVE-2026-73208) * dovecot: Dovecot: Denial of service via crafted email headers (CVE-2026-27852) * dovecot: Dovecot: Denial of Service via truncated quoted argument in ManageSieve (CVE-2026-40019) * dovecot: Dovecot: Denial of Service and potential message duplication via connection limit exhaustion (CVE-2026-33263) * dovecot: Dovecot: Denial of Service in ManageSieve login process (CVE-2026-33605) * dovecot: Dovecot: Arbitrary Code Execution via Sieve editheader use-after-free (CVE-2026-42007) * dovecot: Dovecot: MySQL multi-byte escaping wrong (CVE-2026-40018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dovecot-pgsql-2.3.16-18.el9_8.8.s390x.rpm 7d79fa7d3eebea9bc734d3875f0ea1cb727cbf81559edeb6ddf43a7e71ed7bad dovecot-2.3.16-18.el9_8.8.s390x.rpm 83c5825d82bddc0b1d723b9a6227b885cd1c3cb9431af49fd0a12946204b1770 dovecot-pigeonhole-2.3.16-18.el9_8.8.s390x.rpm af8f869fef31ca30d6003306fa11f430dcc6e20b1e29f1a8265819061e0b04bd dovecot-mysql-2.3.16-18.el9_8.8.s390x.rpm cfe1a6b021d3a62e8d791bb147147688f81ce5eed7a834575968d43eb3ff1bca ALSA-2026:81517 Copyright 2026 AlmaLinux OS 0 1 Important

gd security update

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. Security Fix(es): * libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default gd-2.3.2-3.el9_8.1.s390x.rpm bb2d415b700f31d73ff226ed7608dac81cc732e70002f06b5c7d357dc3fb5937 gd-devel-2.3.2-3.el9_8.1.s390x.rpm e1fba06a1761f2c55c19d99fb53c50d0473b334953aaef5430611b2bdf766e64 ALSA-2026:81532 Copyright 2026 AlmaLinux OS 0 1 Important

pcre2 security update

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fix(es): * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions (CVE-2026-86145) * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156) * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157) * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160) * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158) * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161) * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pcre2-devel-10.40-7.el9_8.s390x.rpm 94865fd8ec9c1c330f73b3901475bf710813f893507b0c446f6e9cb4a7cbc2b0 pcre2-utf32-10.40-7.el9_8.s390x.rpm bbed23181d797ecd4cdf4ff4ef89f987647a98e100ee9736a48094869af68643 pcre2-utf16-10.40-7.el9_8.s390x.rpm e394661ef0cf0d978aaaa79aa5a7a0f97a13dc9ef287e010daadac87200297fa ALSA-2026:82013 Copyright 2026 AlmaLinux OS 0 1 Important

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: heap buffer overflow in PDF import stream handling (CVE-2026-63274) * libreoffice: stack buffer overflow in CFF to Type 1 font conversion (CVE-2026-63276) * libreoffice: stack buffer overflow in CFF font hint handling (CVE-2026-63275) * libreoffice: libreoffice: Arbitrary code execution via remote Java database driver (CVE-2026-63277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default autocorr-zh-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 08cfa6c71c4998ffeeecd02bed1d7b2ef83aabdd87e5fadecd9cb0eceb517c1f libreoffice-data-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 0da89dc1589ebcd0af7a0b5a2ec9c34c7c3fb5200f161e49e55ad9ceade19762 autocorr-af-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 117cee491d8368ee88a6c1af48f4c0050dc6bb1cf68b015bd0ad497dd5f0d436 autocorr-mn-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 158a3b14bdb81bbc6191916fc4cc6eb1355d53ff5adafa91e951edac7046e40a libreoffice-help-en-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 1b015ee1e88f46946269961a653e57dc27e1fde442f106c3090b82be14493922 autocorr-hr-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 1ea18c812d9b202a076d27e0d0f9d3aff7e1bda85f519c90591b4598c39aa785 autocorr-fr-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 21f580666436d472ea36694222ca6cb0f695904a600ab31481e63ae2d0709abc autocorr-ga-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 237c5c1b3bfdc7263bd8a9801611919e4c5c8c2c5d0e30a75b0241a8e4c83f6b libreoffice-graphicfilter-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 2ae1d02d0542b4daca72b3a0751a7c6e42e664dd0f0633dc0bb48ff057eac20b libreoffice-calc-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 2c581ee29acfe0071ef04d65e320884584947b2d0b5533a0d0a1a3f93a9fe6d5 autocorr-fa-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 39ebd8969af0d1a7a6c51d66722e969afb93d991e3ddd90c87a9f79ee8143174 autocorr-dsb-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 3dc185bbe20e769ab79a150f5b7bbb1700e610028faf839853904d6c56a9d82a autocorr-ja-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 41d471360df455a7d7dc575d001ae45cfe651b3b8875bbab24899bf001bb0f12 libreoffice-writer-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 4624f666fc4ac2b0aff14e99466457bbf32c8763fbf5f4fade3722b2462c5ab4 autocorr-it-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 4951c1c19b88e7269f2318f8ec224969f7aaa18045f90ce55a0d3ec70a8e47ed libreoffice-opensymbol-fonts-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5557f914b17b52a5195f58277c6356b5a99f2785ce042b2a5771cf7889807442 autocorr-sk-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 57761fe24cfe29e18099f67f4326aef44a5d43f26b2bccfa4a96e30b06459000 autocorr-nl-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5a0b1c46cc492808ccc5be034fae090a3a6fcbd1ee4ea67238579860a75d7474 libreoffice-ure-common-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5be6042219fc7ed0c38d82ef90e0f6c37ae5f2adfed9c5fc36ececf23969e7d8 autocorr-pt-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5c4e17c2fc0865d095f227ba19a6860f4bf74d8508b041d94a2ea0de07a61fef autocorr-es-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5fb1761cb89a1707543b65fb8060aad72fa73ae6d633dd6c0a2dd86bb222aade libreoffice-pdfimport-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 6b22ee2ac374b29d0778a809f68a986d1dbed0ccfd0206b063444f45719d27d9 autocorr-sl-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 6c0bec41ddb9cf500e64874c10df9dbd99b8a6f1854cb5af5a20f10ebc182314 autocorr-en-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 6da68a4ae105fbb10b9d1b85a8c06b0154a601a377b39fc7829447ffdb6df37e libreoffice-impress-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 71559f031ff18b760c250a8b09a32b4bdceb721e0a648f528022e5f010a2136c libreoffice-ure-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 72361b59e8cd9230952605e10cf60645a2d4a584ad4e3c2091904ccd90559346 autocorr-tr-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 72c29ed1c8e28c94d74bf8dcddd67a7ec6d911889ef898bff23936987429a56f autocorr-sr-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 777c52a58fda8f5295fb61a4e4085a1df7e71f7b68374945edf9a69eb4516de1 autocorr-ko-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 799e27545961dea4890629314302e485d126110df9cda866283810ceb19d1484 autocorr-de-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 7e7146f0cb70fca4ba6c167e013c214f721b28c484d5c2086384656921a3d6e5 autocorr-bg-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 7fc1a0a96225e3bd6cac32c39c45916bb777af224966541a515d6d4a91012c71 autocorr-is-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 826f61f3360fdfe050d5e8598e7d8148961198330358adbdf196acfb5f6d31a9 autocorr-fi-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 8a0f1b945e8ce635fa82f7ae2620d0545eadac220cdc24edeec87f3424e011c4 libreoffice-core-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 8e8980e3076a700eaaf7569589a2774a82893787e1cd2f8217c6736ef94d0a6a libreoffice-pyuno-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm 92f618e80674f373d38888517bb6df8c40b66bd92be13c01a55bc0f1a812fd07 autocorr-vro-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 96d9fb90509740432d5125bcf98975fc875434ecd76ad4a8006680ef6d6d40c5 autocorr-pl-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 975f5efd8dde89f80c5939b25a47376d51e4c73ce56aacb38973338f3ba05157 autocorr-sv-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 99065b7a16b045ee132395b8e6784f1a95d7db097b61b951a6cfda43edd897f3 autocorr-lb-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 9ce12bf5d6c96804b01a7455a02faf4d094782c347e095bb8c895eb2096afafb autocorr-vi-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 9e6841582565c525804c37527c18bc08bd46da782cd97bcddedfa944c876013f autocorr-ca-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 9f6b5959b05133bde9739edb6d0519251bb5e059c9ed3302c89215fd5ed6f8fb autocorr-hsb-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm a00f1e56c6e9210bf044ea7ea50cb2cc6bde152c9db860d4c2af91379de1d0f6 autocorr-hu-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm a8779258bf4175e8021c13da3e91ad7501f8f75cc1e3ebc68b60daa7b7f36158 autocorr-lt-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm b34a0ccd2d86827b953a192fb24a8efdea4f310cee3f3a0189cd41f4c819e56a autocorr-ru-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm b86f0e5d883d6fed2b0fd0f99cae30e4cc0180a8efe6afed9a31c282546f6933 libreoffice-langpack-en-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm bd42306695be10fe26df5dc303182ff2c0bfc53e352571e65db822c628050c32 autocorr-ro-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm d519b90200d6745eb5fff95e64e63957a699de04b489ac7b106aff397a41d3df autocorr-el-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm e68b1053e04305c85e995829b5d9a1a6e00cf993fef99d86f2cda34542ae2f78 autocorr-cs-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm e97069e3f38a567a43feefe37ada045cd639ad32a8713a8058e2a661fb51482f libreoffice-ogltrans-7.1.8.1-15.el9_8.3.alma.1.s390x.rpm ec2ea29fef0e3aef29d6b4e5c64b80de6f284c87e674b94bf054b335550e8558 autocorr-da-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm fa7070ff43bddb1d6f32e7106926b48be64e0f0117a3c4e2b2fbb585f16e176f ALSA-2026:82015 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xvfb-1.20.11-34.el9_8.4.s390x.rpm 0f4cdbe86fede6647384fb4e8f6b606e7ffb0eed7d0eee3219919dfd213378e5 xorg-x11-server-Xdmx-1.20.11-34.el9_8.4.s390x.rpm 1fa8b150e24be0bf1273c13560558a1e168b138e58701c560e8cbf828de82b0d xorg-x11-server-Xorg-1.20.11-34.el9_8.4.s390x.rpm 5c7fbb2d0ab677976b6fb91dc5678cf023a91bf75c28e9abab123f1d4f161674 xorg-x11-server-Xephyr-1.20.11-34.el9_8.4.s390x.rpm c447cb1987763874207e394015c0a0d58681ab9230980a0deb6a7958be811222 xorg-x11-server-common-1.20.11-34.el9_8.4.s390x.rpm cb627e57d26225b488ea1eba503eb6bc53f7b8e10a4aa29ac5d77e8fa8828ea8 xorg-x11-server-Xnest-1.20.11-34.el9_8.4.s390x.rpm fc5239c8b97c18ff177af0210ed75caab8716d84ea35505d38ada070077b8633 ALSA-2026:82040 Copyright 2026 AlmaLinux OS 0 1 Important

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient (CVE-2026-103262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-tornado-6.5.10-1.el9_8.1.s390x.rpm db977a489586f71028544146a867dfdc32969946d183e93a557214e0f70609c0 ALSA-2026:82094 Copyright 2026 AlmaLinux OS 0 1 Important

librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default librabbitmq-tools-0.11.0-7.el9_8.1.s390x.rpm 09af544531f262675b0111960781a6bde38f0a913a576071245b7c496007f7ce librabbitmq-0.11.0-7.el9_8.1.s390x.rpm 9d646d97038a90dfb1d7dcc1a9b09fdcb58c9048f35aeea7c62fd7e87acbf818 ALSA-2026:8259 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417) * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421) * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default vim-common-8.2.2637-23.el9_7.2.s390x.rpm 6f0063b887b5a228594c2cf5a123510b031dfe786c36c5a1b32da7cd3f1c3e7c vim-enhanced-8.2.2637-23.el9_7.2.s390x.rpm 723274c91fe996b5631ac9e76ba5cd31be3dddbc32d01dd874c34e28f169f7fa vim-X11-8.2.2637-23.el9_7.2.s390x.rpm 95f747a2051274bf0fbedf6912fd4c929a3352602b5d2985a00f8e2d84526994 ALSA-2026:82882 Copyright 2026 AlmaLinux OS 0 1 Important

hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fix(es): * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023) * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099) * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098) * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097) * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103) * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106) * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100) * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101) * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104) * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105) * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102) Bug Fix(es) and Enhancement(s): * [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:AlmaLinux-257310) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default hplip-common-3.26.6-1.el9_8.3.s390x.rpm 21880942e6fa7f0f7eb050863b7f09795c2de09b9437d1209b66a6bab1ae4045 hplip-libs-3.26.6-1.el9_8.3.s390x.rpm 4da37a405e4039355680931786989825e80833c3006282afedc5f757a77b6aad libsane-hpaio-3.26.6-1.el9_8.3.s390x.rpm 7745a19d79e29de2dfc01e8fc558f461daf0fc0e4032038be23f891e96295e64 hplip-3.26.6-1.el9_8.3.s390x.rpm 7a609396d4acca8ce9269865d6d8bf2cd2c69b8dc16cd5f6232be47d10619a63 ALSA-2026:83156 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect (CVE-2026-68404) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CVE-2026-81003) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-devel-matched-5.14.0-687.58.1.el9_8.s390x.rpm 1ac3395d9dc34e109d1a30dc8d9f65279410f173de99c91dc0598118f3f83a2b kernel-zfcpdump-devel-5.14.0-687.58.1.el9_8.s390x.rpm 35ab22d00a218e9feed8f2ed7377e6b5b57b4e9b9f76be322b9368f19ee66a8d kernel-debug-devel-5.14.0-687.58.1.el9_8.s390x.rpm 37196a9e418b29e943314d481cc63e6071720b83a96fdf90106f87e1f19d91e7 kernel-zfcpdump-devel-matched-5.14.0-687.58.1.el9_8.s390x.rpm 4134554910750f54fe18ed16dcab0f0f7ee37dd01e6abc15a7d4a542f83f8ee1 rtla-5.14.0-687.58.1.el9_8.s390x.rpm 59b5dc2ac38531ae765138dbf6c736ac2757b96fdb6d84196df229a8d8facb26 rv-5.14.0-687.58.1.el9_8.s390x.rpm 5be1dbd59a4969a526d0e1ec0f41ece4bbf4e8460f42c94f25f502a8b0ef1d0e kernel-headers-5.14.0-687.58.1.el9_8.s390x.rpm 952d9ed0b61209c2c90e9bb2f8337d96ec9fe369824852a02a84e6ec17302032 kernel-debug-devel-matched-5.14.0-687.58.1.el9_8.s390x.rpm 99ece406db374b5904130ed4b39f491f7a6d361ba10e0b90ef40187c691d0b17 kernel-devel-5.14.0-687.58.1.el9_8.s390x.rpm b36d3cc96de8770403955afcb4d5cb411b19334c625aef72cdbf7e07b3954b3d perf-5.14.0-687.58.1.el9_8.s390x.rpm cd6a7980996ce73ac8999f3cad12bbd300c158ab10bbe4408db0944ffefb9a7d python3-perf-5.14.0-687.58.1.el9_8.s390x.rpm dbd8b9a137ab0aa3bbc2056c6b47da26a99e4fc19407d6bd30b158f9386b53d0 kernel-doc-5.14.0-687.58.1.el9_8.noarch.rpm e5f41facb21d3e68dc8da7f37853c367751bf32c6a07785854bd3810808b918d ALSA-2026:83384 Copyright 2026 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559) * libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libsoup-devel-2.72.0-16.el9_8.8.s390x.rpm d1a2745ebf378d518494370a52f5c0e1dd84a60cda3ccd64bcdf7521ea883427 libsoup-2.72.0-16.el9_8.8.s390x.rpm d87af0d0bac8ebe9a5888a80b9700e69aba7d913a5dcd2518b60356b59f5fbaa ALSA-2026:83546 Copyright 2026 AlmaLinux OS 0 1 Important

wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886) * wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880) * wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919) * wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927) * wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default wireshark-3.4.10-9.el9_8.5.s390x.rpm 2a176562e02232cbc11552e675b37bc37436e66282ef0fefed72cbb2895de02d wireshark-cli-3.4.10-9.el9_8.5.s390x.rpm a07031f94f4efed71f42bbfe76d6c70d136e8573c27bc88bdb4bdbb107361e40 ALSA-2026:83553 Copyright 2026 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default ghostscript-tools-fonts-9.54.0-19.el9_8.3.s390x.rpm 18b01519f0d7c7826f12c29d3f124a218eaacb48731455c84656b959dc675f20 ghostscript-9.54.0-19.el9_8.3.s390x.rpm 49929a5005536d5d0e12b0f5b836aedac11a8504a9c2d0c6866714835bc15c63 ghostscript-doc-9.54.0-19.el9_8.3.noarch.rpm 49b93255ffa1d112a31b03948eb523bb01e9029c5b8423a69db60ece111f8bce ghostscript-x11-9.54.0-19.el9_8.3.s390x.rpm 985cc05af4415e35d11cea706db23b4f851974873f8ed1d0f479030ca602ba2f ghostscript-tools-printing-9.54.0-19.el9_8.3.s390x.rpm 9b9d87fe8b83c22589a86d65c7abf22099ea06b1de583c80ee890fd130f61b45 libgs-9.54.0-19.el9_8.3.s390x.rpm d04a56ce5c040b64b63cbf81ae4c1c4be659001e0a2d9f92ea854c7838e69c06 ghostscript-tools-dvipdf-9.54.0-19.el9_8.3.s390x.rpm dff1255d91a6db1f24fe550fd6fe866820837a2cd69ceb8b1923077fef3ab8e4 ALSA-2026:8457 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984) * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libwinpr-2.11.7-1.el9_7.6.s390x.rpm 0fbd8257ac36bccf81a9e1ce611e6e0f60da99b8af875a557d833f62ca41bb7d freerdp-2.11.7-1.el9_7.6.s390x.rpm 95e5b0ea04a739ae8e143094d50776bf2dae2eb6b09d888a5759c17572a9914b freerdp-libs-2.11.7-1.el9_7.6.s390x.rpm 9f04406e975f16fc18f6ffc81968fd6189f156d188d64fd433071845cb291c09 ALSA-2026:84574 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xdmx-1.20.11-34.el9_8.5.s390x.rpm 080a86543fa4022e7d9ceb24c25cadc647dbf106eb7c3dbd593bdc0a4c36b7d3 xorg-x11-server-common-1.20.11-34.el9_8.5.s390x.rpm 099fc6cb42a74b8de9669c08c8da13fd7618a66b0f5ec61caa94aeee9bdf283c xorg-x11-server-Xvfb-1.20.11-34.el9_8.5.s390x.rpm 551cbdc60143d5febb42b1215c983b7663d615b5da62f22624f7daa01c76a4b4 xorg-x11-server-Xephyr-1.20.11-34.el9_8.5.s390x.rpm 74ac15e7f5d09c47d694d914df759cd6be4bfb4a91533723c7e2b10d78a8317b xorg-x11-server-Xorg-1.20.11-34.el9_8.5.s390x.rpm a984c373e442b704919b74afd2bc1473ed1feb6fea5e92d732a051ca5f6ff81f xorg-x11-server-Xnest-1.20.11-34.el9_8.5.s390x.rpm c2289913b0591231c8d4fb7e57947600180ae94d6495ab3799dd9bfb406110ea ALSA-2026:84577 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.14-urllib3-2.6.3-2.el9_8.6.noarch.rpm 5e7fa2b5b4a3b35b0cbdb076ee4e7e2ce1b7af25421e2c3f6204f6b156a5ea02 ALSA-2026:84583 Copyright 2026 AlmaLinux OS 0 1 Critical

webkit2gtk3 security, bug fix, and enhancement update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read (CVE-2026-87596) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-87500) * chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE (CVE-2026-87654) * chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability (CVE-2026-87621) * chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE (CVE-2026-87512) * chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free (CVE-2026-87648) * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page (CVE-2026-87602) * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page (CVE-2026-87586) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read (CVE-2026-87604) * chromium-browser: angle: chromium-browser: Improper input validation in ANGLE (CVE-2026-91738) * chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE (CVE-2026-91720) Bug Fix(es) and Enhancement(s): * webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 [almalinux-9.8.z] (JIRA:AlmaLinux-274394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default webkit2gtk3-2.54.1-1.el9_8.s390x.rpm 2e5aeaf72d34b567ada64425f28b9f1c3fe6fd3dc2687786a0db054bb1c1e345 webkit2gtk3-jsc-2.54.1-1.el9_8.s390x.rpm 87bec56e9cef064a2979a5ec251113eeb9e9f851b7469923a0c1b7c929f6e345 webkit2gtk3-jsc-devel-2.54.1-1.el9_8.s390x.rpm c7153a10d6ce18915be475df17eac3764eb51b8b569bec5d6fa0599d1ef32433 webkit2gtk3-devel-2.54.1-1.el9_8.s390x.rpm e02cde5e45cca6132a806b6eec312d587438a3d73bf2b67b074173cf378b0774 ALSA-2026:84588 Copyright 2026 AlmaLinux OS 0 1 Moderate

perl-URI security update

This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 (and updated by RFC 2732). Security Fix(es): * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization (CVE-2026-19953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default perl-URI-5.09-3.el9_8.1.noarch.rpm 3e683e7bec6f7865127d4c77631291350019f0e6c6d29b0b201fac445bddbe85 ALSA-2026:8459 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default thunderbird-140.9.1-1.el9_7.alma.1.s390x.rpm b38d6c5baba1abc801c214fd1fc6f95cbb6ddef150c39e6d103454a91ef3133f ALSA-2026:84595 Copyright 2026 AlmaLinux OS 0 1 Moderate

cockpit-files security update

A filesystem browser for Cockpit Security Fix(es): * cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste (CVE-2026-91202) * cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race (CVE-2026-91205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default cockpit-files-36.1-1.el9_8.noarch.rpm 771c5fdb9d2cae1039c07d0302d2d72f22915b85a4b25e83a8e7f156a4088952 ALSA-2026:8469 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es): * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171) * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203) * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116) * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default dotnet-sdk-dbg-8.0-8.0.126-1.el9_7.s390x.rpm 01a0162a059d66cb6cadac2490f14315e71840075de6a66b80c9371dbb01b4f4 aspnetcore-targeting-pack-8.0-8.0.26-1.el9_7.s390x.rpm 373927ad47ce965a748d8d816cebb34a9933cb4ff8df7d574dc7c6b3fcc71429 aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_7.s390x.rpm 3eb5257e1b5f78df44fd16732d810a6e5a33238034e61785acff9aea0a151f78 aspnetcore-runtime-8.0-8.0.26-1.el9_7.s390x.rpm 7f5a88b2bce4ec551e04274804bd0513bfc45d9b5c9115de7b2eb602139da178 dotnet-hostfxr-8.0-8.0.26-1.el9_7.s390x.rpm 95c2f4dfbead28cd201b1380e8f684ef315112e5f639d914f90aca5fb0b831df dotnet-templates-8.0-8.0.126-1.el9_7.s390x.rpm c047305941c34015305791cd58898f1a6c1b6100f4685fa163e481b5b788a42c dotnet-targeting-pack-8.0-8.0.26-1.el9_7.s390x.rpm cc0b6afc9eed44ff61deef84480b16be9ebe9309c1267c1268243c28ec4a81be dotnet-sdk-8.0-8.0.126-1.el9_7.s390x.rpm d083700c1e1f73ddaed8201309b30af7af6470bd7054f92cb444f8fe4f7eadb9 dotnet-apphost-pack-8.0-8.0.26-1.el9_7.s390x.rpm d597e516e3193c8be7ea5fbe1a6c41873079c55a72feeb041437eeeb28165396 dotnet-runtime-8.0-8.0.26-1.el9_7.s390x.rpm e512202a5634c81258d0bb0481b0fedc424c03535a158e19ac1fd620db5cc9f1 dotnet-runtime-dbg-8.0-8.0.26-1.el9_7.s390x.rpm ec4a7d7ae9c692d19198e57469b8a5754d573ad23f5e210a192dcb2c8cbc0632 ALSA-2026:8510 Copyright 2026 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424) * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default libarchive-devel-3.5.3-9.el9_7.s390x.rpm 14f520e396f9c68999c70a5528b5d749f7d118e8803819b721debbf639a5455d bsdtar-3.5.3-9.el9_7.s390x.rpm 3cdce0c54711dd89efc8acf65a347e034691e911f82d22d13f5680ef623b5b96 ALSA-2026:85193 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xorg-x11-server-Xwayland-24.1.9-4.el9_8.4.s390x.rpm 948060a1eadd2d3bffef570251aa0f7c8ea2112775d2bfcc9a367ad0b0e2f2e2 ALSA-2026:85231 Copyright 2026 AlmaLinux OS 0 1 Important

jackson-databind security update

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): * com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pki-jackson-databind-2.21.6-1.el9_8.1.noarch.rpm 3c8fb8ac4d2319df3d2dcebf6762b741ad8d5e872daea95635aedc281a3b5877 ALSA-2026:85234 Copyright 2026 AlmaLinux OS 0 1 Important

resteasy security update

RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fix(es): * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059) * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pki-resteasy-client-3.0.26-20.el9_8.1.noarch.rpm 12ba6b585b548ff34881a2362021ffd70e6449344ba8f9ef0fa4c221e737f245 pki-resteasy-core-3.0.26-20.el9_8.1.noarch.rpm 420ce9a2cd9a7e8e0a3214c8da95bf1f1ff11d0d42ea5866da14a7f82b2297cc pki-resteasy-jackson2-provider-3.0.26-20.el9_8.1.noarch.rpm 4377a151501801e2bd5032763346b037e657c3f863e624be06fa4f57f713cfda pki-resteasy-servlet-initializer-3.0.26-20.el9_8.1.noarch.rpm caec530dec585303d1fed45c8ec652d6e8d9fa1f7b73e998c1d0ae6eb562f919 ALSA-2026:85245 Copyright 2026 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default emacs-nox-27.2-18.el9_8.3.s390x.rpm 401e5ea32199323c7aa2b8baeace45ec0dea7b6b6b734c74d3234a0e989e3e11 emacs-27.2-18.el9_8.3.s390x.rpm 60dd6bfe117ff7e82b1682447e14197e50e9b1ea1024469a477bc82738d0f85f emacs-filesystem-27.2-18.el9_8.3.noarch.rpm 7b58432f929295216f420b00de612ce91fb5d0b748a9a8106f70ebeaaa85ccbb emacs-lucid-27.2-18.el9_8.3.s390x.rpm a01c4b35e4f48fdb1e5a449c3f0c19baea1787f8f4ff77f5dd82411765a0a5a7 emacs-common-27.2-18.el9_8.3.s390x.rpm fe358fef78251583ed75c94b21cde3aa31e9f71acae74b7c9e59e3c329136f67 ALSA-2026:85277 Copyright 2026 AlmaLinux OS 0 1 Moderate

hostapd security update

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground and acts as the backend component controlling authentication. hostapd supports separate frontend programs and an example text-based frontend, hostapd_cli, is included with hostapd. Security Fix(es): * hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request (CVE-2026-58374) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default hostapd-2.11-3.el9_8.s390x.rpm 3fb7c2e0fa4ba20cd3c2b88fae2c92d914e0ffb6a730b5a997d7abedd176750e ALSA-2026:85791 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default postgresql-plpython3-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 0066af49473552e981b74d77b870fee9e63bac1036d35e6c4746cf7f50209a90 postgresql-server-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 03098498b14804e05099f19e87612c19a6169ec09e96d55352eb00cd5a652678 postgresql-pltcl-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 096e94407d79c9e7052a347f1cae602804e90dedbb93e30e0b467c2d037234d3 postgresql-private-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 0b8acb99047c9ff7f60e7f366d494dd327a1bbfca1b2640bc4e0ad4b2d57f989 postgis-docs-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 1f8badf906c166b3b673ef8cab77c9c50da35aa172078e12692505e7e6cacaf5 postgresql-test-rpm-macros-16.15-1.module_el9.8.0+311+c39b793b.noarch.rpm 1f8e0041a0fd1a55a894b645a43c1bef24abc455b3b25fe575e89120bfda9388 postgresql-plperl-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 2f9f268d3c604488e0d176a3210f5474db641ee3215ff3122e597376ecfe8c81 postgresql-test-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm 3b648ae855e2c8a808cc23897ede8ef914607281bd5bb9994381807d8f93f0fe pgvector-0.8.7-1.module_el9.8.0+324+0cb93d9d.s390x.rpm 546e7fb44788f71c346e6088f86d0c305ac5b1492c267a6f03979b0b8c76db34 postgis-utils-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 653135074ae16c24f1999605bed4b1435c7a0849ca5683980fb79ae74570713f postgis-client-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm 8f719a399f3020fcb3dec2ef66310c2a0474800e9db8c92b7ad00cdbd17c3257 postgresql-private-libs-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm a3bd3695eb00f0d37e4a54e65f0428db8c8a92b6fc4196d5a7a5b843d6b3992a pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360 postgis-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm a5e446aa220be67fbed83aef41073b03900ba55924fc1b2d1105df72ea119be5 postgresql-upgrade-devel-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm aa631aa845a02d38b026c297d00099ada302ffddf4ad6bd31665cd5f11ef2502 postgresql-static-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm b81e6f45e47e41b1c7b8adf114a3841fee5e1f1f46cd877bc64a7509cfd04e9c postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c postgresql-upgrade-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm bac457026ec968f28e6a88c8e62a6e8702b1e7ead5a273115564b9a161fa2db3 postgresql-server-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm be9b7a18b2848c5c2de80a57cb88621833f47cad345a843aa68142910a08811f postgis-upgrade-3.5.3-6.module_el9.8.0+311+c39b793b.s390x.rpm cf89b52ed2eec449e222b03d3f398fd1a516a615c7eae941e8055c157f34ba24 postgresql-docs-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm d6964008cb05db32b08046d5dae1ccce757fb55dab5e0f43d755b4b61b9c824a postgresql-contrib-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm db3a64ef06c4c2991f7a1da00fa139fc44a9b5b38594b1efb5eda5f6eb52f240 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739 postgresql-16.15-1.module_el9.8.0+311+c39b793b.s390x.rpm e8996dc72b1875e054e465e9309215b06f59a3b48d759ee70143903a1816d961 ALSA-2026:85814 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.s390x.rpm 0aee221df9fcadb4e5d55081ba918710e491dd25e75f4cbb868972cba3020269 postgresql-docs-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 1bc3a174f8c38f3dbef50d73cfc010bf65f9f8edc5bc37c078d03f1ac71531d8 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.s390x.rpm 2620edfd9ab8983b1d904b2ebe15fd1a471e2c9b841578def8489c160a857b43 postgis-utils-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm 32a8b615fcdf8f4245b098cd1b5fb68dc1722b858997956b47fcde3b57aac878 postgresql-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 353722ea47901b496015c9fdc3441f698c84006c416f91250ac549638a2698f9 postgresql-server-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 35ddb5d79c187150f7327920e38a9e31e33f3316bcd5a1b7d0d15ea3e58c01b0 postgresql-static-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 35e09508a0486bcad11d2201eb49e5826bfeba426bcf1c9e0805187a0f64ed1a postgis-upgrade-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm 67a0ea0e8e35a206ea08bd70a70fe1b4d0e4cac0c187213f3be8f88d869c2f6b postgresql-server-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 6c39ee992ec36c1461d81c2b4222001848f9810732c0046af772a11b139255ab postgresql-plperl-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 6fb3e5726098690c0877e174fb90a5a060ae6f83c42f5340ac630e9fabcef794 postgresql-pltcl-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 727aafa6ecfe136114d50652ce8fb1c480adf42d026ae7bb37943b2a277f070a postgresql-upgrade-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 86e4ec343046a93246b4a0c9249fb3e5819bc95b45d0a49111b26336611eb149 postgresql-private-devel-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm 899780bbad2b2c81bebe5982c11d96bc989bc99ea9640eabb137b48455bbd083 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.s390x.rpm 8c4fc11feb6c33f647222fe6ab3a8655915ccf335954744c8092d36a4732ac0e postgresql-test-rpm-macros-18.6-1.module_el9.8.0+310+22372bcc.noarch.rpm 8eaf675017f8792c3580aef927e0dbee1bcf5fcec60c7539b7858bdd65d78062 postgis-client-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm a2c3ee833fd37b1d62a17aebf239c9629c9cf27cbdcdf9580d5666f9db2b4a37 postgresql-private-libs-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm a9d1d0c4671aa0fdedff559ac195fccf9b4230c314119126acf6a83cf15000ae pgvector-0.8.7-1.module_el9.8.0+325+9e644128.s390x.rpm b3ecb353af28a31cd803635b8409ff125f5b79026d2d7daf4a2f2de0b1b50ee4 postgresql-contrib-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm cca6975e9a06a6e839274ac73ee7143e4c5f300260ff1b8f32f547fad898f951 postgresql-upgrade-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm d09ee17798a00b7ee5d2c77f36b0d9ee818aef82c4c036f6178a857ad0f12cb4 postgresql-test-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm f1ad7548dba6a82ae604251e617a7e10d8d2abdbd1a2b306db5772819c1a4464 postgresql-plpython3-18.6-1.module_el9.8.0+310+22372bcc.s390x.rpm f47890ff0cc4ef169bd335a14910ab425ebe8bf3dd7cc6acc808f55834832362 postgis-docs-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm f7ebb9a4f0e8c7321eed998f338f5706d8d86b5247f0346152a5d5992ea0b867 postgis-3.6.1-4.module_el9.8.0+310+22372bcc.s390x.rpm fa9d9173d563edf37121742f81aa0ed4a401a313b4c6d6cc52b270c30183b7bf ALSA-2026:85929 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3.12-urllib3-1.26.19-3.el9_8.2.noarch.rpm 1c34311b13f3e8ae99a127f87e2fa61cc8292eeb7e6d8e5a818d008a4b493342 ALSA-2026:85958 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997) * openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (CVE-2026-59998) * openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.s390x.rpm 52afd320d6f512dd0bff50d5e2aa1df0c98c7fdcfab15771fe17b63e77f67f39 openssh-askpass-9.9p1-13.el9_8.alma.1.s390x.rpm e45c777891b715cf396d95289a134b8e3caf301033503a5970913583f560f0c0 ALSA-2026:86033 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: Linux kernel: Denial of Service due to incorrect GSO state handling in network fragment reassembly (CVE-2026-80590) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817) * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation () * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) * kernel: ipv4: validate checksum_start before completing checksum (CVE-2026-99999) Bug Fix(es) and Enhancement(s): * Batch: z-stream xfrm - almalinux-9.8.z (NST-Core-26W38) (JIRA:AlmaLinux-256697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-debug-devel-5.14.0-687.59.1.el9_8.s390x.rpm 0ac99ac64e57dd6bf6e83d641087b5f30341d34c3fb67ee15a110dbeb150737a kernel-devel-5.14.0-687.59.1.el9_8.s390x.rpm 0ce0dedf8bedbf8b40f8fec7bc43778b0485f176ebd941a8a6942276c940f695 rtla-5.14.0-687.59.1.el9_8.s390x.rpm 12136f9cf0fd3b12e0d0db44f6167f79a5aa4259739ba17e4fd8235666d512f8 kernel-doc-5.14.0-687.59.1.el9_8.noarch.rpm 1d3a875c070331325cba51ca7019246d0c657e0ef1dcdf54bd464124ca9d5180 kernel-zfcpdump-devel-matched-5.14.0-687.59.1.el9_8.s390x.rpm 75b9149be9e4699615bb9820e60d7dad1b11cdec8861f68a01b9b10f0e50af6d kernel-zfcpdump-devel-5.14.0-687.59.1.el9_8.s390x.rpm 79056a61857559eb6a1051c56110525b5deace25efe210c8321897210439d3d7 kernel-debug-devel-matched-5.14.0-687.59.1.el9_8.s390x.rpm 81d4caf6a6e3f9d8d9e2a90aa0c38741928d688a1641e71b7e6f5a0aa8fc8741 python3-perf-5.14.0-687.59.1.el9_8.s390x.rpm 95b8188a14c0c8314098ab77d2cbcbfa62da08e16a5d10eafdc03a4131fcdd3f kernel-headers-5.14.0-687.59.1.el9_8.s390x.rpm a52fa131be98e8737f98108838ec44da009e3f410d02fe6b4514f8c0b34ef9b9 kernel-devel-matched-5.14.0-687.59.1.el9_8.s390x.rpm c0687a6f3f95119cd3bdbfe77296a24f5771e2b0f85047d6106c25c8911f5bc1 rv-5.14.0-687.59.1.el9_8.s390x.rpm cdc0fe327f15651e7a62e5590516c9d027d0146f0dca85d73c9cf0115f4ab59e perf-5.14.0-687.59.1.el9_8.s390x.rpm e19ef5e72a73bc103dfdf2f8e726b8dba26fe7be0d631e9d83fe73845c5a4487 ALSA-2026:86169 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.132 Runtime version: 8.0.32 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVE-2026-96222) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.132 and Runtime 8.0.32 [almalinux-9.8.z] (JIRA:AlmaLinux-277793) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-runtime-dbg-8.0-8.0.32-1.el9_8.s390x.rpm 2b74b534a83c59d25153d04396521af5085f778a671b4aea7af909291c31999f dotnet-hostfxr-8.0-8.0.32-1.el9_8.s390x.rpm 3d9bdea89720a3f6e6f7ebd7aa566f4a6543cee4b93a0508261784dc42d8f00c dotnet-runtime-8.0-8.0.32-1.el9_8.s390x.rpm 4324a76b558d7ee5739228db14599bbd0187acd3b1dde8709d3807270233cb2a dotnet-sdk-dbg-8.0-8.0.132-1.el9_8.s390x.rpm 5c9f171a01c514616f45d49673eb3b13f671ec41245b5f7c291c61d3fb75a731 dotnet-sdk-8.0-8.0.132-1.el9_8.s390x.rpm 6893b5092ab61cc6408e8c211d22af71e34a1f37d84f01b302d14f30482d60ac aspnetcore-runtime-8.0-8.0.32-1.el9_8.s390x.rpm 7334f87ff7ef4ee29ef1a8ce28950e82187eab5062cc23e663153f5a7a6e9781 aspnetcore-runtime-dbg-8.0-8.0.32-1.el9_8.s390x.rpm 9b692a3b6f8ac3d10ff93bed88761c7692c33956c4a0a2d6a1ad406bc318fbfb dotnet-apphost-pack-8.0-8.0.32-1.el9_8.s390x.rpm a093c83ccd767ee55a520139a9e2311e8054a86434d9e246330d4f91b58a10e1 aspnetcore-targeting-pack-8.0-8.0.32-1.el9_8.s390x.rpm a265b78b430b7c4df20d0d44e8ab65cc5aea56e2729cc68e3ddd88e22d0fa3fb dotnet-targeting-pack-8.0-8.0.32-1.el9_8.s390x.rpm c252d36a0a6c3462dae9fec4427c5bba3da35a27aff675867e2768beacec6995 dotnet-templates-8.0-8.0.132-1.el9_8.s390x.rpm f15857bc41a705725f652818bef1d30c044dc0ef0becb3aacc178f098964775d ALSA-2026:86171 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.122 Runtime version: 9.0.21 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.122 and Runtime 9.0.21 [almalinux-9.8.z] (JIRA:AlmaLinux-277800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-apphost-pack-9.0-9.0.21-1.el9_8.s390x.rpm 2232c1a053835ae40969d40ec92f198111ad8b801d296401fe1404b43ce6d583 dotnet-templates-9.0-9.0.122-1.el9_8.s390x.rpm 4ac494ed8c614dcc5f27dc050625264e0b2e5c2a43565907c684f62e55097ae6 aspnetcore-runtime-9.0-9.0.21-1.el9_8.s390x.rpm 64b849d962c222d0bcfba9d77374859d4025ecdc52646bea8b310950b37e78e0 dotnet-sdk-9.0-9.0.122-1.el9_8.s390x.rpm 67bfbf04884681239058c98da7c7f3c7a91c14b76b6ebe71677c809ae7e4147d dotnet-hostfxr-9.0-9.0.21-1.el9_8.s390x.rpm 6bf1b5602f31b91bcfb0dff178ec67537193898fa2727d1a3359fac8fbc64fd0 dotnet-sdk-dbg-9.0-9.0.122-1.el9_8.s390x.rpm 71d58f124b6c996b7ee328c90ff904ccd2f8cd805e3bff436b17c3fba7d65f80 aspnetcore-targeting-pack-9.0-9.0.21-1.el9_8.s390x.rpm 74c675315c78759929060fd410583225f56993eb730f14862ab050fe5568bd7c dotnet-runtime-dbg-9.0-9.0.21-1.el9_8.s390x.rpm 8b50fe0b1e570781cd72bbec69e227db5b6b186094d7f2052a876c056dbc3f78 dotnet-runtime-9.0-9.0.21-1.el9_8.s390x.rpm aa22149b54e7b4dfdf41b5a92f0013df1113f9cc9f5820cff4274c525b81e045 dotnet-targeting-pack-9.0-9.0.21-1.el9_8.s390x.rpm d2c3ba898c3992e4aaaf91b1962099d2431f2f7a33dd6f479fd9bd41743e701f aspnetcore-runtime-dbg-9.0-9.0.21-1.el9_8.s390x.rpm eb5604f3ee4510683219697bdeaa3467ba204b15845c58b4274812253add281d netstandard-targeting-pack-2.1-9.0.122-1.el9_8.s390x.rpm ff83ceeefb9becdaf512b6eefd9ba56f3536e7ad7ff2c164faa2b97583b7907f ALSA-2026:86193 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.113 Runtime version: 10.0.13 Security Fix(es): * dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-102870) * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) * dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96957) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.113 and Runtime 10.0.13 [almalinux-9.8.z] (JIRA:AlmaLinux-277808) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default dotnet-sdk-dbg-10.0-10.0.113-1.el9_8.s390x.rpm 1431868b39a0aba9292ca5c272dcac610fd21c778f69f36d8330f85af1f97dd0 dotnet-hostfxr-10.0-10.0.13-1.el9_8.s390x.rpm 3538b88c006ef8e581612561bf9f1f400fdfcce9454699950eac1d6739c5fb42 dotnet-runtime-dbg-10.0-10.0.13-1.el9_8.s390x.rpm 3673fd382d2ee14f1ac16713a45db5fac02429a23fb5f3ffd4b01d4a6aaa67d3 dotnet-apphost-pack-10.0-10.0.13-1.el9_8.s390x.rpm 475c02a040fe18d11d02b5010f0316991b7d4dcc2c128f32920f0db38c05b5e4 aspnetcore-targeting-pack-10.0-10.0.13-1.el9_8.s390x.rpm 645de944c76f4428c47324693637cae69621685cb629a05c2fd9827af9b36cf3 aspnetcore-runtime-dbg-10.0-10.0.13-1.el9_8.s390x.rpm 725204b668035aad9066fb3e56b6bc353522955e3e4681f69302c5c627483330 dotnet-host-10.0.13-1.el9_8.s390x.rpm 72653cb4b2f213c2b51ed01155468e160b4eaa9f328b23c11f27fc23ddfc21e1 dotnet-sdk-10.0-10.0.113-1.el9_8.s390x.rpm 9c5f3185501b0bfd9f29f66f45a4359a54be8ffea3db9684619f95551336a2a4 dotnet-templates-10.0-10.0.113-1.el9_8.s390x.rpm a32d0010bdf9f8eb4dfcb0c0d4004f06b8c7bc94799a396099f0e65651a6558a aspnetcore-runtime-10.0-10.0.13-1.el9_8.s390x.rpm c8c5e3c007f96bcae789d0d0fc9bad917d50b3ceb5f24de50df40675c6efb927 dotnet-runtime-10.0-10.0.13-1.el9_8.s390x.rpm d273d238cdefb7f0fa77d47c56c241f7cc6dd85fba329e937b09e3b276fddaac dotnet-targeting-pack-10.0-10.0.13-1.el9_8.s390x.rpm daa6b46f909e2c52c11e2f7aedf234eb5294e4f123e85259504e177ba1fd7b40 ALSA-2026:86196 Copyright 2026 AlmaLinux OS 0 1 Important

golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.10+1 [almalinux-9.8.z] (JIRA:AlmaLinux-287192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default golang-docs-1.26.10-1.el9_8.noarch.rpm 2052d08e651131149d53da41cc8a12baf5da4aef770762486d3305a875127cf2 go-toolset-1.26.10-1.el9_8.s390x.rpm 4d3685223eca043357ceaeb871f89185a434bfdad0ecb5f523406dfded565abd golang-bin-1.26.10-1.el9_8.s390x.rpm 5168d1467393a5acd60c89ca70bf20f45f48bc464b11a071c526ef36bc921ca6 golang-src-1.26.10-1.el9_8.noarch.rpm 80f6768e4deaf99aae5d2cf4c4c7c6c1ff14e79f61ecd2889638f07e07877269 golang-race-1.26.10-1.el9_8.s390x.rpm 8280c12f60f8f3c0ee74a5d507b6efe5cc12fe2da4ac3f21410d186d765d53d0 golang-1.26.10-1.el9_8.s390x.rpm 8311a5f6306169240669c32b2d373af0ce1c25fd3575e83a5efbab50f54b4d79 golang-tests-1.26.10-1.el9_8.noarch.rpm c95cd98460e3df6867fd54b4f44c90a35087fc4b5568027586b22abb43c9b5b1 golang-misc-1.26.10-1.el9_8.noarch.rpm f96102b3b183f1b77561ed40706967006177c5c56689a7e9b3ed657ff0814c39 ALSA-2026:86706 Copyright 2026 AlmaLinux OS 0 1 Moderate

jackson-core security update

Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fix(es): * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking (CVE-2026-89407) * com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default pki-jackson-core-2.21.6-1.el9_8.2.noarch.rpm 95b663358dc13330eb353f5d167567fbdabb433155876e4d8d6e0776d7989c36 ALSA-2026:86921 Copyright 2026 AlmaLinux OS 0 1 Important

librsvg2 security update

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default librsvg2-2.50.7-3.el9_8.1.s390x.rpm 04abbeed1a399ca3af1721109138033c71ca59c5232f27ee82444ef660d913fa librsvg2-devel-2.50.7-3.el9_8.1.s390x.rpm 09875cd2d143b0a6fddedecc6410a10a3bc0e26876dbc779168755e311a4f3c3 librsvg2-tools-2.50.7-3.el9_8.1.s390x.rpm f1c2be59f5b17ae7015dd540c27039c29e4f901c2157ff1e6574c59cfc6b2e55 ALSA-2026:86970 Copyright 2026 AlmaLinux OS 0 1 Moderate

cockpit-machines security update

Cockpit component for managing libvirt virtual machines. Security Fix(es): * cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments (CVE-2026-92768) * cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list (CVE-2026-92747) * cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments (CVE-2026-92745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default cockpit-machines-348.1-1.el9_8.noarch.rpm e1b2a04fc6678778e67aecaf3383310a09c8859aa8532ef1ba59042ce682ef4d ALSA-2026:86981 Copyright 2026 AlmaLinux OS 0 1 Moderate

fetchmail security update

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client. Security Fix(es): * fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default fetchmail-6.4.24-1.el9_8.1.s390x.rpm 77f58a07b32cb4107c794d69d28cbde22d3064a597ddc17e5b4925cf1ce7e806 ALSA-2026:87072 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm 7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d ALSA-2026:87079 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-pecl-apcu-devel-5.1.23-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 0094f50d3048b975c70287c92a9973a31fc33f6179f439bf4842596b60b0fffe php-embedded-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 0aa28c7f735cf336021648b3349d61785d6c540a94c46b35d81e7ea8548ea443 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm 2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552 php-bcmath-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 320c11e4e8a593994d87e47f3093d00177c4c34896fcff7f38fcd676a46d172d php-snmp-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 33d2829dffed170b992a1fb587174fa360d4f1084f888e4164d4c33b7d58048d apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-pecl-apcu-5.1.23-1.module_el9.8.0+287+a9a5bb73.s390x.rpm 43f5e8f4e33fabfafba9506c2936a8e768357a95e51e831cdcc59fb24e683dd1 php-gd-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 44b6db16b6591b0a39c74720a5c43a9d4a3e4464f36e25ff2be01ff658140fea php-odbc-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 4bcdd37745c0be52b527a03ae5193d2965d1fb319c1acd73eb8436d548d36b17 php-gmp-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 500fe0503dcc85cb25dddee60a4671bfd632bd0e78ec81a1694eec11afcdcdc2 php-xml-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 50e069e2043799582e828ba0da9180e7e6bad4d2f0eae7129ea9840a02ef2f6c php-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 617e04fb868fd5c2e414de710fdd384f7479d62682dd4e3740fd6563f88721f6 php-mysqlnd-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 68711a1ba947940c0f7b9e734d7e08d3288365ded992b3ff28007b65745d90fd php-pgsql-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 76a03e751a9e02102bce1b6495363ede68a41797dfc0fa169eabca35a06d8f67 php-process-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 76c4dd0deed3c1cf1e61582e67cf04b87a9c332db3e4e2c07c424668f86fb8dd php-cli-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 848b919713c9571d2e15bc2d084b70b2f60e77f703be96e7552c738c4c873b74 php-intl-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 8de6ec9d99e570adfe6b102c652604295286a1efcb824fb9436576b9937b4f9a php-common-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 9091c39feb6feeeef7e9acbea0bae3ed8259276e491f58b6d833d7e01479b43a php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm 9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2 php-devel-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm 969ac186e57815b4c682c90e5eff7072691a709d2255aeaa498f85dcda7e6454 php-enchant-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm a093dbe206199ebc7da2bc723a8bbbfc298be0efbcf365244180a320d679116f php-ffi-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm aa6cd15444e60c2ef146bddc30afa803b6aa1b1aa438a04b7ca7bc7e379787b9 php-dbg-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm aefe5af9aa01afbf38141a0009dcf8998f75824b1760967bccc57a4656cc10f8 php-fpm-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm b5e115d4b817f68fef60fcfd4bff695851e73acbe7aca2143e10f0a20aa54b53 php-pdo-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm b98cf39616955a7aceb60e20e36c81777d3f6a4229efd1def7275c16fbbe654e php-pecl-redis6-6.1.0-3.module_el9.8.0+257+89d727f2.s390x.rpm c23a465fb14d28c386d8d6caf29fa725d546921db73d1ca45784315acbb0cde0 php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22 php-mbstring-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm ea432e8c7c906ce219ce49179fdf5f24e4a31f045d1630a463aa1cdae16a12e3 php-dba-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm ed490ef0d5b47b37b5630fa04fd7b23207bc5b4b55b9d23db30544c9e4f8cb4b php-opcache-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm ef5904e720b08d2752c50c77dd2797caed3e886b84d23a7c81395646d9a0f4a3 php-ldap-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm ef7b41319e649a6cf1558840a9dd2983c98fdd45fa05a13a4cd22e9a71b04094 php-soap-8.3.36-1.module_el9.8.0+330+fdc30075.s390x.rpm efc2540fe9f681f1318e994311caa3ccb5a8d369c9c0860139a3f3e279d7e3f6 ALSA-2026:87082 Copyright 2026 AlmaLinux OS 0 1 Important

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573) * qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default qt5-qtbase-common-5.15.9-11.el9_8.2.noarch.rpm 31db94f10fc9e80bf124d72d86fe191c73118d34200e8d72a13fe92f5b57e9f6 qt5-qtbase-odbc-5.15.9-11.el9_8.2.s390x.rpm 3369f43b3cd9f180b319650389ce3ea6b9675992e8bba2e2fd12987d9fbf5d27 qt5-qtbase-gui-5.15.9-11.el9_8.2.s390x.rpm 573c354661e6fcf09d1f4a60b82435cf9c2808dc16eed15965fb07023be4e8f4 qt5-qtbase-examples-5.15.9-11.el9_8.2.s390x.rpm 71725eaf7a83012e41cddef0e16d3359a0e299845048498d9d5714382ac5d1f1 qt5-qtbase-private-devel-5.15.9-11.el9_8.2.s390x.rpm 93969b91e93cd14110d18f4046919eb3759a2ce5f2a35228ae50a57966332cfa qt5-qtbase-devel-5.15.9-11.el9_8.2.s390x.rpm 97bc67763684d62005a1e40686ed6109b1c61ba747e2e9e4f164a651a31b778e qt5-qtbase-mysql-5.15.9-11.el9_8.2.s390x.rpm b51219da69debb07a5dee7aede788b3de7465a7c0f4b450b40a111f577ad9142 qt5-qtbase-5.15.9-11.el9_8.2.s390x.rpm c87446b2d82d88a107f3ef365e08920f34b8876b1adf638b1c1df05d3ee21bcf qt5-qtbase-postgresql-5.15.9-11.el9_8.2.s390x.rpm cb088db6ed6a9beec72042ee97f1cc0565aacd3a826e58fe72979d62b7c1d16c ALSA-2026:87151 Copyright 2026 AlmaLinux OS 0 1 Important

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-mysqlnd-8.0.30-8.el9_8.1.s390x.rpm 03d0bf02d124189cb65d282c56104a1f45be5a39979141a9a180147f05553be8 php-snmp-8.0.30-8.el9_8.1.s390x.rpm 09bf24f39582113885a3fc251056b65c8ec2f8cbbc5d5dacefc02a6184f2732b php-intl-8.0.30-8.el9_8.1.s390x.rpm 0a178f339ae32b15de538d6ccc50e597c1d9ff4f3b2ce0cda12ce8eaf62a5764 php-soap-8.0.30-8.el9_8.1.s390x.rpm 0aff910eabc15f9b45bb2fe33ee828f5d8880f0070e46e1f671cc02f64bb3962 php-process-8.0.30-8.el9_8.1.s390x.rpm 0e9fd6461999a57e94ec264122bf2acb7c64387874eccefeb6ec3407b0114bf5 php-embedded-8.0.30-8.el9_8.1.s390x.rpm 185cda9096592a396295425c7765621822fcc42a0e5b083f64dd76bc05f09080 php-pdo-8.0.30-8.el9_8.1.s390x.rpm 1a78be2e430e397844d010ceac4ac2c651c2a22c33aef9bf879f70b320006dc5 php-ldap-8.0.30-8.el9_8.1.s390x.rpm 1b244994429860e86ddb3b5f0bb4ad878a91a730d9bc27db136a2087fa88f3c8 php-ffi-8.0.30-8.el9_8.1.s390x.rpm 2b2850652858745cff917403282c3dac7ebc78bb0658bd11609c9edf0859ba83 php-8.0.30-8.el9_8.1.s390x.rpm 3641090f2a4e3679496720a4d5b4675bf876475ea23ac46df56c18a793b79614 php-bcmath-8.0.30-8.el9_8.1.s390x.rpm 45a5b47ce9af44069a2a02c1ffeea90401f2155e78e5883f4d65e9f81391e2d4 php-pgsql-8.0.30-8.el9_8.1.s390x.rpm 4f02dc51f7221dee8b1cc2d5ccd2aade14370b0a0201e49d9e5a00828e9d5219 php-common-8.0.30-8.el9_8.1.s390x.rpm 681414c1f9467c76e01f47d30c14d9a550cef8b379f0c1f0d8691b5da485fe1e php-opcache-8.0.30-8.el9_8.1.s390x.rpm 6a5f19762345dffbf56e161d5977020975da21b517215e2adaec064b793c29bc php-gd-8.0.30-8.el9_8.1.s390x.rpm 73e2ca9b48f9a79f9ca90c33b351335e48097c9590cc8efe5416d1124e457f89 php-devel-8.0.30-8.el9_8.1.s390x.rpm 831e9d7d04a17e90d74a85f0d2d3469c264bc65d011a9c17bbd4c05201619acf php-dbg-8.0.30-8.el9_8.1.s390x.rpm 8411d9622b75006b532c71b09cf79d27a46091a95b7d7a42fb426ff0cac69752 php-mbstring-8.0.30-8.el9_8.1.s390x.rpm 9545baa364bb47641ce1967d5e12c8393081a72bab4f4c28fecbf6b641dbf25b php-xml-8.0.30-8.el9_8.1.s390x.rpm a51224f258954837fd53e295d7d7a9b3eb09e5c935c4ba86773f2c0affd6d35f php-cli-8.0.30-8.el9_8.1.s390x.rpm afecf93082d2aaeda3acc7f5afea8b65e0f55ebe99aa11899714883b478d717b php-odbc-8.0.30-8.el9_8.1.s390x.rpm bf774c0d6cc0455cac6561966304edacc6774f65c624e9cb6fc4819151ac40a7 php-fpm-8.0.30-8.el9_8.1.s390x.rpm c85701865f897a52eff91dae8783ae9b85e39140dde8a09062246cbdf39cafd4 php-enchant-8.0.30-8.el9_8.1.s390x.rpm d317e03c90d8666f8e87cc4fcb285ab0c78b06f975376017eafd5c50e206243a php-gmp-8.0.30-8.el9_8.1.s390x.rpm e84d352f48f83b3a02ff19a640789e12b87cb62b227a66ee5a56c79a5c56fa72 php-dba-8.0.30-8.el9_8.1.s390x.rpm fd199a7c7ea5cd9d615cd98d7bf4cd394096a45793e72ed25ae067cf4dc9f3e5 ALSA-2026:87805 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063) * kernel: calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147) * kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: ovl: check access to copy_file_range source with src mounter creds (CVE-2026-68448) * kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CVE-2026-80530) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) Bug Fix(es) and Enhancement(s): * RTLA segfaults on freed memory access on double SIGINT [almalinux-9.8.z] (JIRA:AlmaLinux-193029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-headers-5.14.0-687.60.1.el9_8.s390x.rpm 15929acfd47048ade29fca151ffcdb007dad49a46ff87b34035a2ce38f87ab5e kernel-doc-5.14.0-687.60.1.el9_8.noarch.rpm 328dc82578f69f49c07bf85b34a5fa0324c52fda662a6075b3d2806b1e642715 kernel-zfcpdump-devel-matched-5.14.0-687.60.1.el9_8.s390x.rpm 691ebe7e2aa99323a545c83c836f666342ba43951adb4bcd9ed2163fb85823ca kernel-zfcpdump-devel-5.14.0-687.60.1.el9_8.s390x.rpm 70d08e42976e52fde466347606436db0078766517de086b863a5a3611a93f3df rtla-5.14.0-687.60.1.el9_8.s390x.rpm 85f2bbdb2544d8d432b6c6a8b3ecbbaf23ea1bdfbfc6b247ffeaf35d3614369c kernel-debug-devel-matched-5.14.0-687.60.1.el9_8.s390x.rpm 89263ac2d25afe9fcd71d73949fa24ef0a058942f38a96d5514be30bf9f2fb8a kernel-devel-matched-5.14.0-687.60.1.el9_8.s390x.rpm aa3d19903d2cf003ab2b283cdb2e32260594fe5606b1cc907288868dc4a9353a kernel-debug-devel-5.14.0-687.60.1.el9_8.s390x.rpm c6bd1da8b7515024d8dfa6804670b19cb53ddc193a90445ecf7d9a2087b576b0 perf-5.14.0-687.60.1.el9_8.s390x.rpm d9aa34996a5c478238df661c15555d2f4469aeb4caa407dacc27d9b0764e3013 python3-perf-5.14.0-687.60.1.el9_8.s390x.rpm e21f913edc14e43ca97048d92238b1e00ffea082af590d746a4cdaee71dcc016 rv-5.14.0-687.60.1.el9_8.s390x.rpm e66d2ccc4374b6e28db5c3f5fe33bd05dc2848d83576d2c2157f55fd3b37360e kernel-devel-5.14.0-687.60.1.el9_8.s390x.rpm e8070ea71079c94903fdfc8a82c7c74c0b3670e9fd424297acadd137c7ff682c ALSA-2026:88229 Copyright 2026 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi (CVE-2026-63718) * httpd: httpd: Denial of Service via integer overflow in mod_dav_fs (CVE-2026-93546) * httpd: httpd: Authentication state corruption via concurrent Digest authentication requests (CVE-2026-73637) * httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response (CVE-2026-63045) * httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) * httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference (CVE-2026-46729) * httpd: httpd: Authentication bypass via credential replay in mod_auth_digest (CVE-2026-73636) * httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc (CVE-2026-63686) * httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest (CVE-2026-48005) * httpd: httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) * httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite (CVE-2026-56153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default mod_ldap-2.4.62-13.el9_8.9.s390x.rpm 29ce8545ffdc6275ad3f6ff6acddf853ca809449775558e744b0a5747cf17190 mod_lua-2.4.62-13.el9_8.9.s390x.rpm 328bc85b452065895b09b9eecf8391207d3068b268a1ac4b7587b332f52df195 httpd-devel-2.4.62-13.el9_8.9.s390x.rpm 3670390c8ccf7d6b0635face84a16266fbbeb4ec6ac1ce4f766a1b736dbb9bba mod_ssl-2.4.62-13.el9_8.9.s390x.rpm 44b1c47884ca1877413a7b6d183452046cc14800e899209c8ef927136aadd4b7 httpd-tools-2.4.62-13.el9_8.9.s390x.rpm 4de9dacf38507fdb9cbc3687adb68748eb07d5b6bfe1e4b4ab2a52db475cc19a httpd-filesystem-2.4.62-13.el9_8.9.noarch.rpm 6a2429a79aae70004496618facb3c0b1e5199f6b38dcfbe069d946036e1d7b49 mod_proxy_html-2.4.62-13.el9_8.9.s390x.rpm 6dda7e6317f836dda072e6a4d56eac70fe877f72635e5c10de00cdf58ba4effd mod_session-2.4.62-13.el9_8.9.s390x.rpm cc9e315e4c8dff6c189a8b4a1f6084ba1c9114ad3db9dfb51aa965dc6b888bf8 httpd-manual-2.4.62-13.el9_8.9.noarch.rpm d77bff969acdff5b9ca5b1f6c0d5d8e4cfb8b9e79d2cc72c68a4ad00477f9669 httpd-2.4.62-13.el9_8.9.s390x.rpm e4003a21782a099e2c52e665aa1e3160ceb7c3a95b33183fbdddf8e32ea3b230 httpd-core-2.4.62-13.el9_8.9.s390x.rpm fd9acec0494347ceda45b8f52bf25f804976d3e7b8a400ee22a2d90a101aa3f9 ALSA-2026:88247 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: expat: Denial of Service via integer overflow in expat_realloc (CVE-2026-102633) * expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer (CVE-2026-77214) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default expat-devel-2.5.0-6.el9_8.7.s390x.rpm 3e8fa3448fe72db50e3776202d5700801cb4ed36d4d4ad1d1dcf0c87b13c7fb8 ALSA-2026:88354 Copyright 2026 AlmaLinux OS 0 1 Critical

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-pcp-5.1.1-17.el9_8.2.s390x.rpm 1507844068e20a1fcff123af55a9164f0adb0ab34c436f81f9e9e1fc912fa92b ALSA-2026:8841 Copyright 2026 AlmaLinux OS 0 1 Important

go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default go-srpm-macros-3.6.0-14.el9_7.noarch.rpm 2e5ba21f9c0f50fe601b839339e1d20f3ae28a07c960d4f26280a8d906e41f22 go-filesystem-3.6.0-14.el9_7.s390x.rpm 93a9fe004ef744ce12501f1c99b93ae9c2dd970794d9a91945e69cb27223b36b go-rpm-macros-3.6.0-14.el9_7.s390x.rpm 99aac16ba53919c36d1893fd9ab61ba21988282ca3571d8bd315ea7b6cfb79b5 go-rpm-templates-3.6.0-14.el9_7.noarch.rpm f10c8cb303a924da9f14f077ac0cea7d926403d627791adda19250e5371dd888 ALSA-2026:8859 Copyright 2026 AlmaLinux OS 0 1 Important

giflib security update

giflib is a library for reading and writing gif images. Security Fix(es): * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default giflib-5.2.1-9.el9_7.1.s390x.rpm de775611d51533c55940a9369f14cd53c01fbf11b9f270eebaf9dee38cda22fd ALSA-2026:8888 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing (CVE-2026-27622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default openexr-3.1.1-3.el9_7.1.s390x.rpm 39df21a5fc7ef57ee282e8aaaafdec56aa80c0a0a6c8f435cc8e03071d47f188 openexr-libs-3.1.1-3.el9_7.1.s390x.rpm d591c8126dced2a658881c480c6f7402f2f0272cc1c791513148a297cc92435b ALSA-2026:8921 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default rv-5.14.0-611.49.1.el9_7.s390x.rpm 0a109a95629a33356ddb89d39781ce8e6d1c04e7c7ffafe88fff77e9add21465 rtla-5.14.0-611.49.1.el9_7.s390x.rpm 349b108f7d7428be27c65870df30c34b26f5fb76ef588068c5daf3ff8bdb3cbe kernel-zfcpdump-devel-5.14.0-611.49.1.el9_7.s390x.rpm 425a6df9c8235bec122478247f94d12f1e9981a47ff6c50fbb05ee2ea6dabcc0 perf-5.14.0-611.49.1.el9_7.s390x.rpm 53ca138e0b92759bfb4c448d016c9778a59341a0fae421763a16e9e8a7a41732 python3-perf-5.14.0-611.49.1.el9_7.s390x.rpm 74f2a2fcbfbf07c5753100a1b668f93bb2a39c7c22398df35284afa50245deed kernel-devel-matched-5.14.0-611.49.1.el9_7.s390x.rpm 83811655f73fa7bd717606c604ce3b44b1884e2d8df2bf800da6c93ff9e5968e kernel-zfcpdump-devel-matched-5.14.0-611.49.1.el9_7.s390x.rpm a9926084a4bdede3e1fa74ac01995f825d1e25485d85e9f8b5d74a1a32ad80fd kernel-headers-5.14.0-611.49.1.el9_7.s390x.rpm ab85abc3064d37bc7b1ea5de959453d6cdf4e84cd161dc33730a9e2dbb73c2f2 kernel-debug-devel-matched-5.14.0-611.49.1.el9_7.s390x.rpm c0b50cba37e5ff7d4389fac566e01bf90e357db50df8d2b4218d60ec27ccc1a7 kernel-devel-5.14.0-611.49.1.el9_7.s390x.rpm c74519827a230717c8658f839cc48d1fd50d49e5550ac73df65a399d844b3f85 kernel-doc-5.14.0-611.49.1.el9_7.noarch.rpm c83f9e13787b632d6cfad0ac4141fe053370f434b21b166409645776594249a7 kernel-debug-devel-5.14.0-611.49.1.el9_7.s390x.rpm d2d64266ab8aa22fd61cc3c68741c4f4172d33044b46340efc35cd8483a66b7c ALSA-2026:89742 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Arbitrary file deletion via race condition during temporary directory cleanup (CVE-2026-12345) * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default python3-devel-3.9.25-7.el9_8.6.s390x.rpm 34c4643b5fd6402553c54de7221471c77e65b45243e26e38e8ba83e0f1f0508c python3-tkinter-3.9.25-7.el9_8.6.s390x.rpm c7705b111b6bd28f2907fc0cf660f74421d11f4f75b46b622bab51b5c033e80d python-unversioned-command-3.9.25-7.el9_8.6.noarch.rpm d7660c7db906bc7fffe5753d719e5ceab6dd80c2c41c2054423a59fe65d37fd3 ALSA-2026:89744 Copyright 2026 AlmaLinux OS 0 1 Critical

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Information disclosure vulnerability in Unified Alerting (CVE-2026-17183) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default grafana-selinux-10.2.6-23.el9_8.7.s390x.rpm 93da83c7c336440282ebc1ab3e63e956a65723d7a689e52b42b78cdf8826ef9a grafana-10.2.6-23.el9_8.7.s390x.rpm a8d430090e6ee633b9903951d124df0c80fd5f4764efabb7a1b7ba9854214ea6 ALSA-2026:89745 Copyright 2026 AlmaLinux OS 0 1 Moderate

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind-chroot-9.16.23-40.el9_8.12.s390x.rpm 0d2518667faa5567521b7686277c585a5ee206543a34e98941ee25fb313d3b51 bind-dnssec-doc-9.16.23-40.el9_8.12.noarch.rpm 1ec77a81e81e9554abf99c7567c35b7e089b70498c5316e7d53c69cd52a2b486 bind-utils-9.16.23-40.el9_8.12.s390x.rpm 2e2a4dd83546465719a8487a8224f27e260493a3eefad2ee45061c933b5c2645 python3-bind-9.16.23-40.el9_8.12.noarch.rpm 6de8ca93f105a0fcc621d0d2acd4e1ab5ceacf73b6d0d7f23e383e5cc11a6e9c bind-license-9.16.23-40.el9_8.12.noarch.rpm adff25d2af373ee9a778eaba779bd2711f04071d69e7f6da746953a6985a70b3 bind-dnssec-utils-9.16.23-40.el9_8.12.s390x.rpm b0be21f33e32a07ac796ab0d4a06ea69c9429df2499a47dcddd7f80952dbafc9 bind-9.16.23-40.el9_8.12.s390x.rpm e6d92a51a0247c1a9a5d5f5a128d409bae586e7bb46c83710c19151c2db1b5b1 bind-libs-9.16.23-40.el9_8.12.s390x.rpm ec78528bac91120e7ff4eec09e9257535489a9a7bc82fe5305326f17fd9cca06 ALSA-2026:89746 Copyright 2026 AlmaLinux OS 0 1 Moderate

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default bind9.18-9.18.29-14.el9_8.11.s390x.rpm 0368b7ce0b3d94822473a1a49670df5115dbe7ad011c605b2c0e73d377b613aa bind9.18-libs-9.18.29-14.el9_8.11.s390x.rpm 07954f3c866dfbb460b9d8fdcc8dcf1398fd3d22f67ca8f9bfbcceba20e68b96 bind9.18-chroot-9.18.29-14.el9_8.11.s390x.rpm 742d613cd1929ebe2b13bc00b3fc70a55c7afa30f1b7af5ad1f877432085e07e bind9.18-dnssec-utils-9.18.29-14.el9_8.11.s390x.rpm c1606cc1dde27c9890bb400ef8b215cb56da3a1bfa3c4ae316ca72f11a98fb73 bind9.18-utils-9.18.29-14.el9_8.11.s390x.rpm c89b79a5997c231658d50325be331913fc074a5ad1d248b5fbc1151c05a2321f ALSA-2026:89748 Copyright 2026 AlmaLinux OS 0 1 Important

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453) * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206) * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default libreswan-4.15-11.el9_8.s390x.rpm a7b5b6fabe7c93b9934548cbbb4d77c4710a47bc65aaf78f35f99d05f6237183 ALSA-2026:89749 Copyright 2026 AlmaLinux OS 0 1 Moderate

xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default xz-lzma-compat-5.2.5-8.el9_8.1.s390x.rpm 0e45e13b9ec7ab8699a04bb319cb8eb07a948f5c23a4121c7e5dd5f346cf3924 xz-devel-5.2.5-8.el9_8.1.s390x.rpm abe6a44c40056222cd44e7a4f729f971a191ce3e7a21261add21727d165a4dbe ALSA-2026:89753 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509) * FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505) * freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508) Bug Fix(es) and Enhancement(s): * Update freeipmi to 1.6.20 to fix two potential buffer overflows [almalinux-9.8.z] (JIRA:AlmaLinux-279523) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default freeipmi-bmc-watchdog-1.6.20-1.el9_8.s390x.rpm 05da69172604ea2cd627fbdd6a3e0e55471252d18e4161c3a195dec98b39404f freeipmi-ipmiseld-1.6.20-1.el9_8.s390x.rpm 851849a9e2dcea81e98067b0f44dd793281d7dc777d4595bc4fef8735f12d214 freeipmi-1.6.20-1.el9_8.s390x.rpm c28a68a02876581c07ac40bb85b34b315d0bfd89d0df36fbe0daf8ae8a3aee31 freeipmi-ipmidetectd-1.6.20-1.el9_8.s390x.rpm ec33b4add45bffd4729deeadf90493266e1686a5669798ca701c6d0ccded478b ALSA-2026:90362 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default podman-5.8.2-8.el9_8.s390x.rpm 523fd9f8bd9135c29e8854288be7686c7130798e3864e140ab9d40b1d3fd9c9a podman-tests-5.8.2-8.el9_8.s390x.rpm 89f69c8e5dd8aa2973776c32617a5afafa6dbc14e7b99a2df086b770ec5b2e61 podman-plugins-5.8.2-8.el9_8.s390x.rpm baf766dd9ebc1565530ee6ad46ef09f2fe5d1e6e692fa9300ed847d775dfb1c4 podman-docker-5.8.2-8.el9_8.noarch.rpm bc4f09efc61f77cb445a98fbc3af42b74a7948fa155d0a5b118784d269058e15 podman-remote-5.8.2-8.el9_8.s390x.rpm e2da70048135003864d1d1ba7df60ba72586314e155bbba5b6e3f25165345124 ALSA-2026:90365 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Deal with race between UDP socket address change and rehash (CVE-2024-57974) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) * kernel: net/handshake: hand off the pinned file reference to accept_doit (CVE-2026-63979) * kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CVE-2026-72242) * kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) * kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CVE-2026-80824) * kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) * kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777) * kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262) * kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222) * kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320) Bug Fix(es) and Enhancement(s): * kernel panic at __crypto_xor+0x2 after a number of out-of-bounds read and use-after-free read (JIRA:AlmaLinux-257205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default kernel-devel-5.14.0-687.61.1.el9_8.s390x.rpm 150e829d73d333b3afe8c1ea04fa80c545cee3730da9e2e816ff68df65616cd9 kernel-debug-devel-5.14.0-687.61.1.el9_8.s390x.rpm 152bc3f0eff0b9fb5bd9f6df199e747077a43b57d31a693a56a421a5c62ba017 python3-perf-5.14.0-687.61.1.el9_8.s390x.rpm 1755395acb05ec17b0002bc17778765c04860ce7f1403da86c093005d0799d6a kernel-devel-matched-5.14.0-687.61.1.el9_8.s390x.rpm 2169549fd7ad07c18b7d08021e60286ca7b3933c81e9e9122e73054d5593d476 rv-5.14.0-687.61.1.el9_8.s390x.rpm 35c3ab493dcaf37e5e95a415e2b673e431dacdaa80c9b039cf14e2a9ce5bf254 kernel-headers-5.14.0-687.61.1.el9_8.s390x.rpm 4da84cc06869785391966f8fde0c5b0a198c23743ed43d681027e3ba02adf735 perf-5.14.0-687.61.1.el9_8.s390x.rpm 72b650c3d39fbc546472a70cfb49aa608e7e3d6e168c24f2e999868991583d61 kernel-zfcpdump-devel-5.14.0-687.61.1.el9_8.s390x.rpm ace565dad9f9febde538a3894df3e6ea1f0bb83876b5ab0fe01345c10f623968 kernel-debug-devel-matched-5.14.0-687.61.1.el9_8.s390x.rpm b1314e188789b3315b1c2ccb35c0bcb0b90441fe23edbe5abc13cc7448c37fe7 kernel-doc-5.14.0-687.61.1.el9_8.noarch.rpm ba5125771b0f2a3d3916c7e263ca579f0a14236f3aa9b11e48708e7f5483e961 kernel-zfcpdump-devel-matched-5.14.0-687.61.1.el9_8.s390x.rpm c85371acb5e00ade322e1e3af37abad1cc082311f66d3135157b3f4a57ed19f8 rtla-5.14.0-687.61.1.el9_8.s390x.rpm eaef02f176d78dca88a99079cbbb281c152ffd205750b0877c6bb4d25c62378c ALSA-2026:90424 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages (CVE-2026-56855) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default buildah-1.43.4-2.el9_8.s390x.rpm 707d6693b777e7ed87fc33149ec2940336753940dac21d51a824a39be90fad20 buildah-tests-1.43.4-2.el9_8.s390x.rpm dc94dac0f369c62441e7eaf150031d026f0becb71961730a5c69f67342e3be67 ALSA-2026:9044 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default osbuild-composer-worker-149-5.el9_7.alma.3.s390x.rpm 5bcdcf38ce84047cedb9ec8eb4318ecf239c7faeaec9f1e64f995260e6865c09 osbuild-composer-149-5.el9_7.alma.3.s390x.rpm 6c8ec499a6401a80897d7f6cf7bc00fdddba23550578cc1a65d9ca1b7e10af11 osbuild-composer-core-149-5.el9_7.alma.3.s390x.rpm e55023037f7788adf9b874ea855c60ea087e76205ce3a088788bc0cf96305256 ALSA-2026:90462 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default skopeo-tests-1.22.2-9.el9_8.s390x.rpm 49209ccd37d83a359d68affcb28ef41b0be364341876fc7918579c8dcfd25204 skopeo-1.22.2-9.el9_8.s390x.rpm e8e9ac4ea9d801b93617e2340d71d40149499e0831cf6b49f31bf0f2cb3e003c ALSA-2026:90495 Copyright 2026 AlmaLinux OS 0 1 Important

brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default brotli-1.0.9-10.el9_8.1.s390x.rpm 84722b4fda5eae8f409a3d0ba3a3c6a50ecb53c1ab5859767caeba0df42ed5ca python3-brotli-1.0.9-10.el9_8.1.s390x.rpm b4c9a18023d9715a7d52a54bc075e8a069032fb8941fd6631e6424218b5ed67c brotli-devel-1.0.9-10.el9_8.1.s390x.rpm de09443c74f15a596643e464959c219b191086d7315a6dc25346c9fd6303963a ALSA-2026:9683 Copyright 2026 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance key generation (CVE-2026-34268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default java-1.8.0-openjdk-devel-1.8.0.492.b09-2.el9.alma.1.s390x.rpm 0ccee35395ffe604d8886b639b589843677ebace71c735c1683d811512e3200f java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.s390x.rpm 3fa31ffff0763b43fbea8339176d9fdad884cf093de4a2f743321093fb020d2f java-1.8.0-openjdk-src-1.8.0.492.b09-2.el9.alma.1.s390x.rpm 5cc7093a8391bcb1585e4f1166b4f4520cb555ae53ebfced55cf1236413a1f29 java-1.8.0-openjdk-headless-1.8.0.492.b09-2.el9.alma.1.s390x.rpm 7046093c1223c9b7c4c6dfb3ca6343d521b055ff0bd475bd13d8ccf17dcc8d32 java-1.8.0-openjdk-javadoc-zip-1.8.0.492.b09-2.el9.alma.1.noarch.rpm dc79cdf7d90f68390010e0242c192dc05a92419e6943c16be514d56de4c5e322 java-1.8.0-openjdk-javadoc-1.8.0.492.b09-2.el9.alma.1.noarch.rpm f097a508a6d3cac0894d895d61163ea40cc422518b3b44b9859c670a0cc3640b java-1.8.0-openjdk-demo-1.8.0.492.b09-2.el9.alma.1.s390x.rpm f5062663f397143ee0795f14681641c000b0e003ae0c3da0a2f61b5ac3d26e7b ALSA-2026:9686 Copyright 2026 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance TLS connection handling (CVE-2026-34282) * JDK: Enhance key generation (CVE-2026-34268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default java-17-openjdk-17.0.19.0.10-2.el9.alma.1.s390x.rpm 0e184b7ab1be4104bac1cfb07b0c93fb7f0de630dc886d8a7b3adfae4e69ce56 java-17-openjdk-javadoc-17.0.19.0.10-2.el9.alma.1.s390x.rpm 2644b58722335fc9f17dbf252e7c7e0768e209e988516d60374daf39cc893eac java-17-openjdk-headless-17.0.19.0.10-2.el9.alma.1.s390x.rpm 449945fd1210db1ee1e61ce3c71f71a186c40df063b9656fbb78f9c447cb485d java-17-openjdk-src-17.0.19.0.10-2.el9.alma.1.s390x.rpm 79c4b5fc2acaf2dcb6dc9fe510c49c1472348d443e515b93cd8461cc0b139cc0 java-17-openjdk-javadoc-zip-17.0.19.0.10-2.el9.alma.1.s390x.rpm 84642bc63328f65f9c938d5599baf21d8b525e2bf60cd3c0a6909159c36fc65d java-17-openjdk-demo-17.0.19.0.10-2.el9.alma.1.s390x.rpm 97169f38da35a9a4e11fd97936bb17777039faa77c21a6a939a8ead339553482 java-17-openjdk-jmods-17.0.19.0.10-2.el9.alma.1.s390x.rpm b49dcfdd9554605894b45be12c97a90e04aadf9fd302b0add91d5ddc09f990a0 java-17-openjdk-static-libs-17.0.19.0.10-2.el9.alma.1.s390x.rpm beb19acca3075e23a78f75d5204eb421dda1f60c6a0714cf34a02e00abd25b74 java-17-openjdk-devel-17.0.19.0.10-2.el9.alma.1.s390x.rpm d7080bf1483f80e820c82c521f288b6fa20ceaa73b8a2d2078cf81f4efbe7eb7 ALSA-2026:9689 Copyright 2026 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance TLS connection handling (CVE-2026-34282) * JDK: Enhance key generation (CVE-2026-34268) Bug Fix(es): * When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default java-21-openjdk-static-libs-21.0.11.0.10-2.el9.alma.1.s390x.rpm 0b0031ad32a68b7c2d3a56f6d7d0685927f8be5cb358f7910bab90e0c78f24b0 java-21-openjdk-devel-21.0.11.0.10-2.el9.alma.1.s390x.rpm 120020aa1c6daf8daec5d298db161136ef16db30893c69451d5997bc2596c1fe java-21-openjdk-javadoc-zip-21.0.11.0.10-2.el9.alma.1.s390x.rpm 171787688399ffd95ff98449b511fa9d0b7e64354da3bc3d5f6b76a03c3b2539 java-21-openjdk-src-21.0.11.0.10-2.el9.alma.1.s390x.rpm 552b56693c35c2cb26eddc91e6bf6781a8cce294562936eee6d02e209dcd17b2 java-21-openjdk-jmods-21.0.11.0.10-2.el9.alma.1.s390x.rpm 8308885287e890ea387256394577733142fb37077c2c34287946784762dae467 java-21-openjdk-headless-21.0.11.0.10-2.el9.alma.1.s390x.rpm 84b947f05c2f3e3add0e38f97558b918e8d04ec0278547f1ebe5de87a6c39c77 java-21-openjdk-demo-21.0.11.0.10-2.el9.alma.1.s390x.rpm a7229dae40fad3bdf84eeafa75da1d7d186662e2f6dd91f36b81330deeecafe7 java-21-openjdk-21.0.11.0.10-2.el9.alma.1.s390x.rpm b5a1dc5068e3e105dc4d9d089da7e8a81168753f4867d88b1cac80de9bda645b java-21-openjdk-javadoc-21.0.11.0.10-2.el9.alma.1.s390x.rpm ea1b472bd414f29344eb5d2de7148061957d13f26174a7113fd83c31babc8540 ALSA-2026:9692 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43213) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43214) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43457) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43511) * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-46299) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20608) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20635) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20636) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20644) * webkitgtk: A remote attacker may be able to cause a denial-of-service (CVE-2026-20652) * webkitgtk: A website may be able to track users through Safari web extensions (CVE-2026-20676) * webkitgtk: Processing maliciously crafted web content may bypass Same Origin Policy (CVE-2026-20643) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20664) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-20665) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2026-20691) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28857) * webkitgtk: A malicious website may be able to process restricted web content outside the sandbox (CVE-2026-28859) * webkitgtk: Visiting a maliciously crafted website may lead to a cross-site scripting attack (CVE-2026-28871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default webkit2gtk3-jsc-devel-2.52.3-0.el9_7.1.s390x.rpm 15ecf9c3aa3e6c86fd66ab26e43bd6d44a52634ffa9ef5aec0692da1a1a54589 webkit2gtk3-jsc-2.52.3-0.el9_7.1.s390x.rpm 20b3e5a761e3da507d57e57f3f32b32da91d817254fb3483816ebc31d22bb049 webkit2gtk3-2.52.3-0.el9_7.1.s390x.rpm acb008799ea3adfd55970440cee5fac33a2bb18861293e94af8e3baead4e197e webkit2gtk3-devel-2.52.3-0.el9_7.1.s390x.rpm f4e785122a8dc6df9d7839aae4c6eb7da4c6f2c25f1b8a99c420e5a39f57ce22 ALSA-2026:9693 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improved Arena allocations (CVE-2026-22008) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance TLS connection handling (CVE-2026-34282) * JDK: Enhance key generation (CVE-2026-34268) This release also updates a number of third-party libraries included in the JDK. The libraries themselves are affected by the following CVEs, but this is not a statement that the JDK itself is affected: * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) Bug Fix(es): * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169939, AlmaLinux-169937) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default java-25-openjdk-javadoc-zip-25.0.3.0.9-1.el9.alma.1.s390x.rpm 057468ec7b712ec74d3d7935240387409293f778096580965bb4139cc42828d2 java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.s390x.rpm 0d7b95c6f527cc94764583b79f9672ea2465204ecf11d12bea53f129d7640764 java-25-openjdk-jmods-25.0.3.0.9-1.el9.alma.1.s390x.rpm 12d3ed3ba4ee6e3baf875bbcbbbad70c4ecb4171bb17b9c933b651ba793ec401 java-25-openjdk-devel-25.0.3.0.9-1.el9.alma.1.s390x.rpm 37acb35fda7bcb244c8b7b0d6114efd64bc8c79b0d7e826c4f9143820e723ada java-25-openjdk-javadoc-25.0.3.0.9-1.el9.alma.1.s390x.rpm 47ab2506a579e1274a99bb1dc3c801ba12aec15f416df980876cb4750420d9d8 java-25-openjdk-static-libs-25.0.3.0.9-1.el9.alma.1.s390x.rpm 4ba760a5ca22175953cb8ebaa5d00a698ba49ec58e619da6abb90cd59b3d0e76 java-25-openjdk-demo-25.0.3.0.9-1.el9.alma.1.s390x.rpm 5702d9ba4a81b5e9477ebd88608766162c4dffa9a3528d09b9060ca4681afedd java-25-openjdk-25.0.3.0.9-1.el9.alma.1.s390x.rpm 69d7e9c1bc3cbce3accdd671292f1abb02cb078c69a081dbbdbf350a611cae79 java-25-openjdk-headless-25.0.3.0.9-1.el9.alma.1.s390x.rpm 801f0f1d6cbbd929f43d2456f0a72c338c7757222e15bb56cf520bf671342397 java-25-openjdk-src-25.0.3.0.9-1.el9.alma.1.s390x.rpm a173b2dd77b50e9dae14333e81988b2f1ea71aa13573716fd950fb658a59fdc3 ALSA-2026:A002 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-zfcpdump-devel-matched-5.14.0-611.49.2.el9_7.s390x.rpm 094cd3bfb9e318a7d8b7781c8a15cb00aebe27de8395a41384e28bbe9cdd06b7 python3-perf-5.14.0-611.49.2.el9_7.s390x.rpm 21438e6693f8ef927de3b521dd627e20796195eb775b9e4f298b5c61ad0ee34b kernel-debug-devel-matched-5.14.0-611.49.2.el9_7.s390x.rpm 6c59f6c7a610725713c7e20655d9386e1d450156d28723d296597234b0c567d9 rv-5.14.0-611.49.2.el9_7.s390x.rpm 6c8058b301b5b8cf13063e3e2d13b533e7cafcd16f2766f28ec1e992923500d6 rtla-5.14.0-611.49.2.el9_7.s390x.rpm 7addbf99eca07ad4139c176d33e3c3a547401a85f098bdab17abb67e55d1f9f0 kernel-zfcpdump-devel-5.14.0-611.49.2.el9_7.s390x.rpm a9e190b0e1b77c9f57460c272e27f8f180b7de1b931e6ded27a2eaae1d7f8b14 kernel-doc-5.14.0-611.49.2.el9_7.noarch.rpm c459d496f39361e45ef828c9e9d77a285a7e104b37109fcdf35a4c3a543e864e perf-5.14.0-611.49.2.el9_7.s390x.rpm d2bf41f5de3bf785b06960d4da282e99eb3e1d6343f8ae798d3ecbb61c8f2a31 kernel-devel-5.14.0-611.49.2.el9_7.s390x.rpm e44109bbd4a4f0b7e670c5e5830f77db2829375ee0c10b16394386815f6cacbd kernel-debug-devel-5.14.0-611.49.2.el9_7.s390x.rpm e61155241a9468c284f3b9ee53af5960e887fdcc876a07b846d1333a63e82247 kernel-headers-5.14.0-611.49.2.el9_7.s390x.rpm efdd96eacceeb6b2f452ba53125e8d2d3bb845321285e0045086453e0ac66b42 kernel-devel-matched-5.14.0-611.49.2.el9_7.s390x.rpm f89ed967993bd7c9df85b892c97a0e8d797213a6546861c4ff12c3b5822b6235 ALSA-2026:A005 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default kernel-zfcpdump-devel-5.14.0-611.54.3.el9_7.s390x.rpm 08ba65bcd7e9a9755b5a3ab0334fbfa1551eda401cc2e02909e9a6a212c64839 kernel-debug-devel-5.14.0-611.54.3.el9_7.s390x.rpm 135891ca8a70e19151d3449045b030949472364fd428f3237266c06219f004e2 perf-5.14.0-611.54.3.el9_7.s390x.rpm 16f83756c1c1823ce57c5ef28cd7082df1b477925c709df9f0c11a25b81c7300 python3-perf-5.14.0-611.54.3.el9_7.s390x.rpm 20ef9f5228954361fbd5576ac670fb84b781b9f28954e4a8b9e7ea0ad243e9c4 kernel-devel-matched-5.14.0-611.54.3.el9_7.s390x.rpm 6fe27e5b23d074fb113de3a4a8d60eea8c642cd94c8a5d9d3f1f4f4bf2331b91 rv-5.14.0-611.54.3.el9_7.s390x.rpm 9e03e62eaabe0700dd8ec25031e053c3a6d32a3553cef7cc4005113ae74eceb0 kernel-devel-5.14.0-611.54.3.el9_7.s390x.rpm b405c5995dc3112454335520d9ee0d96d67f90d73ac5b9cdd06345dae18988a3 rtla-5.14.0-611.54.3.el9_7.s390x.rpm b7ee9af87a35b580cd1e21a0da3ebe67b0446bd71449637d70707fb95409da54 kernel-debug-devel-matched-5.14.0-611.54.3.el9_7.s390x.rpm c59495aa204aa9a324f08fe503fd7bdbac7d1facec5dc1673e35f9102d1de1d2 kernel-doc-5.14.0-611.54.3.el9_7.noarch.rpm c857e448eeed243d5021cfe724fc78eda51a21323968e1a5cd6b8cbf5c5b567e kernel-zfcpdump-devel-matched-5.14.0-611.54.3.el9_7.s390x.rpm d214553d2a884e3106e1d06a2a81949a8800ba258c952348b790c6883d4f2c81 kernel-headers-5.14.0-611.54.3.el9_7.s390x.rpm eaca52a95361bad1cd2f3cb45752416f6f8b0ada2870d43f92b3c0eedf6b9851 ALSA-2026:A009 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300) * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_7_default rtla-5.14.0-611.54.6.el9_7.s390x.rpm 27db5560dc5db465c826f8b3dba449a03f5c475a38c9ecf65d86f0564707725d kernel-headers-5.14.0-611.54.6.el9_7.s390x.rpm 744d4e30c44ee75532e81a0be735fe2d43b9866be859c8d2790379f5883c3afb perf-5.14.0-611.54.6.el9_7.s390x.rpm 84832a52fb54bb18c40957e557a628416de439052c7beff9aaa1ad3641cb055d rv-5.14.0-611.54.6.el9_7.s390x.rpm 877933b867b2c980d65715f0dea6b1a7c680a2c1679b25e2cd021ffab2c73070 kernel-zfcpdump-devel-matched-5.14.0-611.54.6.el9_7.s390x.rpm 9964ab695c7f3e296c77d89dd2260944723026a7f117e9cae40d0b8c0d76f0a5 kernel-debug-devel-matched-5.14.0-611.54.6.el9_7.s390x.rpm 9a108889520f9dd975aa3ba65a419fe23a36209e6bdccf5b31da56b8b749c394 kernel-debug-devel-5.14.0-611.54.6.el9_7.s390x.rpm b2c9cadbb1e2f8a90ee1927c57fff1c05f5df97e6afad5cf9589f999247cf330 kernel-devel-5.14.0-611.54.6.el9_7.s390x.rpm b8e9064821e1b8c4dd1ae61831fe96d4271c24ac3feafaa047128ae58b30d5b7 kernel-devel-matched-5.14.0-611.54.6.el9_7.s390x.rpm ba70695022902efc6b58ebb4f0c639931ab07eae1b93a13386a1cd52ef991a16 kernel-doc-5.14.0-611.54.6.el9_7.noarch.rpm d12fc93c820c8045347f2e74050b9a57b33e69f1d8eebdb53f3a74072c2ede09 python3-perf-5.14.0-611.54.6.el9_7.s390x.rpm eaab81cce82d9bb0f653339a907bf973e7892f4766619812236d1ebc362b6d0e kernel-zfcpdump-devel-5.14.0-611.54.6.el9_7.s390x.rpm eff641085bfe404ef0e60821b5635d339d2859b540062f7b00dc0d95a2a162bb ALSA-2026:A014 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-s390x-appstream-rpms__9_8_default php-soap-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 05c90da0e9fe0a7957a819d01fe04e68dca708984751f928b5774d216dccc53e php-devel-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 1010241246faf079de917403d9b8cd16c1a8a40bd9861abbec674bba03f415be php-cli-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 1d7f76e131a6bffbdf53f89562d54a6530a19af19bcfdd5cd54724b560e1ead0 php-gd-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 23f7cb5f0c04febf8f96f47d14ce19ef94da85f1c454dd159c75c9daedaefbc8 php-embedded-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 2431a3a61fce0443ba115e9be59009eaca9686a65a3a86f56efbe0c4394a8e27 php-pgsql-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 2547457496986be2aeb1eae194d7624d5785411075a75e573e6b9abf354b7aee php-dba-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 31d37460897ca68ac780f912fd9da773944e883326f61853d825dc030730a48d php-xml-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 4178bc3f17a3f315406f3c0117faaee6a7ed878b051d5dbaef42a35e19a4b9f8 php-bcmath-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 513e4e10be0456bdeed1e60df38d1ab96e336209a60501c337af8439082c9236 php-process-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 5f8a3292f4008c615c5efdf9bb3ffffd7824ed0a4b325aad9cf11d84b5d6629e php-mysqlnd-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 65d11dace16d0a536dd98458c0c704a0e722b0dece9c401ff157d887ca002124 php-dbg-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 6cb52bd0c79330d559a7ff54ba5797963e4d4340c63c645f4e7a571d2678e0b5 php-gmp-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 81b376fa9f702dd9ca4ec45de84b3aac28f6e86b6675bf2910fd433e3574507c php-enchant-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 87f6b7a0f20b27b5dc540ac645ede8fdd6011f7d420be80bbbe2dc848872f582 php-opcache-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 8ba421ab0ff72a139f9fa33173747b09bc8292badf5972c97576d6f9ce5f4a2c php-odbc-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 900a6eab85aabc135be2298d1f46fdcd9e929025af1c0505525e2e92d127e872 php-snmp-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm 9e231abaa26e207c1de8969082fab4a9a6d15a762cff6ad80c8e5831e262d5ed php-mbstring-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm b0287ff46b1862848519d1df6b9535f20e0c88ed32cc586a73eebe1f6302dba5 php-ldap-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm b1de1b0f91a0d94d93aacff579a8a49b61d89f929dab01cdbab89de6caef82e9 php-pdo-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm b390bc1d706ddb78e1cae17fdc6d88e5c8aa8b35f856f3cc56a1c17e91f6ae9b php-ffi-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm b54771b7791f639952e434cc311753866a590626d14dcd728c1ccdb9738ab4dc php-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm ce6a63d3068ef0d6d79d5b2a08c3cf171ae721225901bb2635c7ee9eb00b8797 php-common-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm e41727ed59f9149347fe36d62813c4e41410712dddf8f58e35685830eb379d39 php-intl-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm ea4d9aa164b016b99660966db1ac539ff3d80ac378963b82e56d7ea8ff6762de php-fpm-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.s390x.rpm ed01935b46b1f8c24b975ebb323bd81c590bbcf52c4fadf4b6cac233b8b1ee1d