ALBA-2022:8256 Copyright 2023 AlmaLinux OS 0 1 Important

qatzip bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default qatzip-libs-1.0.9-1.el9.x86_64.rpm 58dfc827df326b4ef7eed049057669403baadf41a23c5e69f72b6970318f621d qatzip-1.0.9-1.el9.x86_64.rpm b5dfcfc42908fe2ec58ec5503b1dea11e29bd5ea62f6db118468b44e26612413 ALBA-2025:20841 Copyright 2025 AlmaLinux OS 0 1 Moderate

open-vm-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default open-vm-tools-13.0.0-1.el9_7.1.x86_64.rpm 0fbe99abf09bc763abf2681104573b623b9738dd270ef79c92b42b58d644ad49 open-vm-tools-test-13.0.0-1.el9_7.1.x86_64.rpm 80adcdb89755bd5ec729b3364a506ba7e5bd34c545cc4304fae7c2f739744d43 open-vm-tools-desktop-13.0.0-1.el9_7.1.x86_64.rpm 8663bbd92877361fa78569ef58ed44d63c37fc3da6c9deedede76296a9f77942 open-vm-tools-salt-minion-13.0.0-1.el9_7.1.x86_64.rpm 8d32fa8e4c7467b855117988f6cabe2475b7bfd85fa779ccf1fa71c32ea7a49e open-vm-tools-sdmp-13.0.0-1.el9_7.1.x86_64.rpm d3fddfc93b318c3cd726ecf890c1603114c1f1ee0cf0530ce0e35007e793340e ALBA-2026:39332 Copyright 2026 AlmaLinux OS 0 1 None

kernel bug fix and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Bug Fix(es) and Enhancement(s): * XFS data corruption using reflink [almalinux-9.8.z] (JIRA:AlmaLinux-193937) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-devel-matched-5.14.0-687.26.1.el9_8.x86_64.rpm 09839a296b6f0548a172abbf69b9dd06e58f30cde260e3c0044006fb2c1b0888 kernel-headers-5.14.0-687.26.1.el9_8.x86_64.rpm 11db7da372f99b2f89bd992285c0f427bdb6eee7ffeb9d868f17556283a99a18 rv-5.14.0-687.26.1.el9_8.x86_64.rpm 59882ac897018219a26d754016b53db7edade7f580c08ddddc46a803d189f5d0 kernel-debug-devel-5.14.0-687.26.1.el9_8.x86_64.rpm 9dc5a11be5dd2eeca7c6a24ae78c205c4a26225086736658ab3ee7f340b861ce kernel-debug-devel-matched-5.14.0-687.26.1.el9_8.x86_64.rpm a46c65b19739e1f30ffc34b394aa9b98df32561c046d7a3844fb990e13489e5d kernel-doc-5.14.0-687.26.1.el9_8.noarch.rpm b5dc97de23576d0a49b9fffae82d81cdbe1dba8a478cf595b768c867f0041c87 kernel-devel-5.14.0-687.26.1.el9_8.x86_64.rpm b8bf99296f7937b973ed8e66ce3d2e65a8cb87e0d85abb51cd5395828e475bd2 python3-perf-5.14.0-687.26.1.el9_8.x86_64.rpm f5115b97a857243466ed5f22ca323d81856a086f9bf057f6e2d3a32d10ae3336 rtla-5.14.0-687.26.1.el9_8.x86_64.rpm f7ee19c827d0511d40c650a4f2ebd24e205cfa321f4e3ac178f5c0770d00526b perf-5.14.0-687.26.1.el9_8.x86_64.rpm ff3dc3e231bacf81ce3f1ffb8798951a1bf53c35511e884458625bbe3b514a53 ALSA-2022:4940 Copyright 2022 AlmaLinux OS 0 1 Important

xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * gzip: arbitrary-file-write vulnerability (CVE-2022-1271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default xz-devel-5.2.5-8.el9_0.i686.rpm 92cb6b0bf25327e4b8f76769fda5f921e930bb9a9f1e16e2b504604cd27adcdb xz-lzma-compat-5.2.5-8.el9_0.x86_64.rpm a322e8d36a1e3daa0fb71212696cc229483a11749c8e95f1d17f45d410e84b38 xz-devel-5.2.5-8.el9_0.x86_64.rpm d6a98711c423032ccec82c0fbad9926d676622bfcb94ec7e919eaedaa6036bb6 ALSA-2022:5242 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for vim-X11 is now available for AlmaLinux 9.

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554) * vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943) * vim: Out-of-range Pointer Offset (CVE-2022-1420) * vim: heap buffer overflow (CVE-2022-1621) * vim: buffer over-read (CVE-2022-1629) * vim: use after free in utf_ptr2char (CVE-2022-1154) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default vim-X11-8.2.2637-16.el9_0.2.x86_64.rpm 1523a20539229e06e50fb1871a09e816d92f09d7e00914f95af37a044dd1258c vim-common-8.2.2637-16.el9_0.2.x86_64.rpm 2a086ee10901df9f11f2b2274bfe5fcd9ce05b38bbb5b9c14c5c68842456f0c5 vim-enhanced-8.2.2637-16.el9_0.2.x86_64.rpm 4c973612f727b499dff9c8127d8f1c4d1c8db6a00fad138b8aaf7847979e3710 vim-minimal-8.2.2637-16.el9_0.2.x86_64.rpm 595351a6129a778917bd09d7114f07262b31ca6a1c32480f35bccba3b00c5f43 vim-filesystem-8.2.2637-16.el9_0.2.noarch.rpm c913d7a2e965f86e79605147e53d90808d00155ca9c626a98ae01fd32cced94b ALSA-2022:5244 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for expat-devel is now available for AlmaLinux 9.

Expat is a C library for parsing XML documents. Security Fix(es): * expat: stack exhaustion in doctype parsing (CVE-2022-25313) * expat: integer overflow in copyString() (CVE-2022-25314) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default expat-devel-2.2.10-12.el9_0.2.x86_64.rpm 95937f9587edacf6f55004b6784329e43a62e5b3daaebd0103aa7b1540174d4d expat-devel-2.2.10-12.el9_0.2.i686.rpm c07cdd3796d62662a2b077cf05786bf59fc79599b53b3c7f44cebdded5f4af93 expat-2.2.10-12.el9_0.2.x86_64.rpm dbd74a9af798bb28a849bbf0ce4efbcc72505c7800bb2baf82cdd325b7b364c5 ALSA-2022:5249 Copyright 2022 AlmaLinux OS 0 1 Important

An update for kernel-debug-devel is now available for AlmaLinux 9.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012) * kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729) * kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966) * kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * make SHA512_arch algos and CRYPTO_USER built-ins (BZ#2072643) * SR-IOV performance > 50% degradation (BZ#2074830) * fix data corruption caused by dm-integrity (BZ#2082187) * SCTP client-side peeloff issues [almalinux-9] (BZ#2084044) * TCP connection fails in a asymmetric routing situation (BZ#2085480) * Fails to boot Multiple RT VMs each with multiple vCPUs (BZ#2086963) * spec: Fix separate tools build (BZ#2090852) * call traces related to eeh_pseries observed and vmcore is not captured, when kdump is triggered (BZ#2092255) * Mark ThunderX NIC driver as unmaintained (BZ#2092638) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default kernel-debug-modules-extra-5.14.0-70.17.1.el9_0.x86_64.rpm 1d0523e5748372ee56447a080eb6c2e8800e60b578ae85a9c462c1c0fb258e26 kernel-headers-5.14.0-70.17.1.el9_0.x86_64.rpm 27fbc6c1aa3f2d1566045ba48e2cd5fc7d151017ca9ca95be7d3bc6f29ae3ab4 kernel-abi-stablelists-5.14.0-70.17.1.el9_0.noarch.rpm 6c1459fb8b333303c7d981e116ccc0720c4f02c49ad9b933a93cdd2a4dc0f103 kernel-tools-libs-5.14.0-70.17.1.el9_0.x86_64.rpm 6c643afc3c35f76c13556a13ffde3a23a0495c569dec28c11708b8f3ac0a167c kernel-debug-5.14.0-70.17.1.el9_0.x86_64.rpm 703cc481d0834409999e329b254650d2fd5e430a2cf46dbc2c704a0ae4810abb kernel-debug-devel-5.14.0-70.17.1.el9_0.x86_64.rpm 7a82cd38ca17dddb85ec3177f597c07ea38c4ac603f895691d66994749ccd7ac kernel-cross-headers-5.14.0-70.17.1.el9_0.x86_64.rpm 7b15545c222e80ac4e1957211f5d6f7f5c5125b342868f8abc8bf27bd69579db kernel-doc-5.14.0-70.17.1.el9_0.noarch.rpm 809a6a2193762c20c65675927231f196c18a5b97e6832f1fe1714467a5b785ca kernel-tools-libs-devel-5.14.0-70.17.1.el9_0.x86_64.rpm 9223c2135eee664d9e6dc47f33e1c9f4aeb8dd5c2287b8c33fa8cc3b23e86187 kernel-devel-5.14.0-70.17.1.el9_0.x86_64.rpm 9514d88db80739811d5f6a3b49752fa2a8378064a2bedd76ab754b9a7c8da5c6 kernel-devel-matched-5.14.0-70.17.1.el9_0.x86_64.rpm 9a00ccaf1e5dc1ce882a360232cc0a6bd52310f1296c4aff5c179f0e5a7c388a bpftool-5.14.0-70.17.1.el9_0.x86_64.rpm ab64e0cd950170da3d2302a6e3975b849ddc5202e3196c73f53f00b09e8ba842 kernel-debug-devel-matched-5.14.0-70.17.1.el9_0.x86_64.rpm adc8071377693720da9822f5577b72cf559db1d81c4d394d9cf5fc6843ca6198 kernel-debug-modules-5.14.0-70.17.1.el9_0.x86_64.rpm af0eddad0fe1df463a92d7353c40d79b0ab394802f28fede8aa114cfce4b2141 kernel-5.14.0-70.17.1.el9_0.x86_64.rpm b4ef1468eebca594833b8b80812485e7b32445b7e23bf6a01bb4e981cd9b4970 kernel-modules-5.14.0-70.17.1.el9_0.x86_64.rpm c44a2bc75845bc5140eecc3e7b62a493f68e35f65084c948f9c767d58c0167a4 perf-5.14.0-70.17.1.el9_0.x86_64.rpm c8463b6384dadbbc65295d295a9898c1e49f69d6f68504d926f53ce2e0ba0fc9 kernel-tools-5.14.0-70.17.1.el9_0.x86_64.rpm d81db30c061a644b1e860f8933e1b108ce7602b3e50cec935a4eaef9f54f3c17 kernel-modules-extra-5.14.0-70.17.1.el9_0.x86_64.rpm de03e4dbe3a865a310109649a2e475b54b00fc6ee3eec2b7ffef78bc4f2c5870 python3-perf-5.14.0-70.17.1.el9_0.x86_64.rpm e7c340de8f300966048a604e4c74b55d3652f9e6cbc5af747c3864fc35bfbf3f kernel-core-5.14.0-70.17.1.el9_0.x86_64.rpm e8273ab41ea0984bd7bda47a9f80193467ab968db9016db7aed91a39e542b22f kernel-debug-core-5.14.0-70.17.1.el9_0.x86_64.rpm fb653bec1defacebf556298589a18dcb899b74639443c621f9b054a480fc7ee3 ALSA-2022:5252 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for bsdtar is now available for AlmaLinux 9.

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: an out-of-bounds read via the component zipx_lzma_alone_init (CVE-2022-26280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default libarchive-3.5.3-2.el9_0.x86_64.rpm 035f3b90a81b61d846914a6953804d32e09f0c6c3b2978f783c964c0cfe2c164 bsdtar-3.5.3-2.el9_0.x86_64.rpm 042bd93df93412ecaf7c6b59137e7ab45db3f03987046b74f8da2b5375015a9b libarchive-devel-3.5.3-2.el9_0.x86_64.rpm 62d30b0fc078e27e530e051a08cf75a297905e7c495d733de96192fd15dbfb63 ALSA-2022:5257 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for libinput is now available for AlmaLinux 9.

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fix(es): * libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default libinput-1.19.3-2.el9_0.x86_64.rpm 05873e89593917b8f2242fadab3804fa8285c84637059347e092c07651a9788e libinput-utils-1.19.3-2.el9_0.x86_64.rpm 3d72a89e967db7ac7f6afb33b6c30323564340c1384b23727056c5fe36164fef libinput-1.19.3-2.el9_0.i686.rpm 717a674cba257324bf1a84057769f1e5aad55797341696a3c8aa85b245115988 libinput-devel-1.19.3-2.el9_0.x86_64.rpm b23415eda0f663ab67f71042440f204251cc98b0ff88de5e77ea8a0c276b9af2 ALSA-2022:5263 Copyright 2022 AlmaLinux OS 0 1 Moderate

An update for qemu-guest-agent is now available for AlmaLinux 9.

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * QEMU: virtio-net: map leaking on error during receive (CVE-2022-26353) * QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux 9.0 guest with vsock device migration failed from AlmaLinux 9.0 > AlmaLinux 8.6 (BZ#2071102) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default qemu-kvm-device-display-virtio-vga-6.2.0-11.el9_0.3.x86_64.rpm 1bcac624b5c84d0f9d0e022abb044dfc4f347b7205a9d70fd09d0807ef5e1113 qemu-kvm-6.2.0-11.el9_0.3.x86_64.rpm 22bf5e903bac379c38d8e9909bf9f74a10257aeb28a0e3c77ebc9c5fad3f083c qemu-pr-helper-6.2.0-11.el9_0.3.x86_64.rpm 24eaab6f64bd17b48cbdcbe98f92d05ed8c17ad5af25b27ca0bd808875ced958 qemu-kvm-device-display-virtio-vga-gl-6.2.0-11.el9_0.3.x86_64.rpm 28ece46cb2284f67c0399273b8232eb09784e516d0c9f0c7adb31c1ea7c33eb7 qemu-guest-agent-6.2.0-11.el9_0.3.x86_64.rpm 301e7326f8a949ec900de7bada4708c730d9ea69cecc25135350518e25cf6468 qemu-kvm-device-usb-host-6.2.0-11.el9_0.3.x86_64.rpm 4e44159240c55173edb4858a0828e3be17312b5c15133ff8072ef7f6f02e31ae qemu-kvm-device-display-virtio-gpu-pci-gl-6.2.0-11.el9_0.3.x86_64.rpm 5279912c4a67b2639a0e2c2a4d87c0fafaab5ef70c2a9af5c33e92db2bb13b15 qemu-kvm-device-display-virtio-gpu-6.2.0-11.el9_0.3.x86_64.rpm 53561057d2f07a5c42c71d3e1a5f9d976c80570abf014ab1f0cc71420a275a9f qemu-kvm-tools-6.2.0-11.el9_0.3.x86_64.rpm 5aa43d85e4e45f1ef0d46eea13111672673fa51866feb5e91e611bcf016c4ecd qemu-kvm-audio-pa-6.2.0-11.el9_0.3.x86_64.rpm 5bb4fd573eb946199e21dbf70f65944e316c94657060b2703ea78cd347c4b13b qemu-kvm-device-display-virtio-gpu-pci-6.2.0-11.el9_0.3.x86_64.rpm 77d05fb10429db99742cb74af08b8c02283e234af10689f0f6f1a3cf54885728 qemu-kvm-common-6.2.0-11.el9_0.3.x86_64.rpm 8ad3a32e96a02ceaef8c613c92bdf01c27317cf76bf6df716838bc2a4b7d978c qemu-img-6.2.0-11.el9_0.3.x86_64.rpm 8ef1206f15d115b3ef9b9f2659d59c49377ae974dbf780594c3e2b28701c02a6 qemu-kvm-device-usb-redirect-6.2.0-11.el9_0.3.x86_64.rpm 9597b7e23e3d5f2ccc272b4726deddf8c83821c0ba8e6a94662504ed0858be95 qemu-kvm-device-display-virtio-gpu-gl-6.2.0-11.el9_0.3.x86_64.rpm 9c5fff76c9cf2d61aeea746a075c7d3d01752027a22acd782418fcfccb8c9d2a qemu-kvm-block-rbd-6.2.0-11.el9_0.3.x86_64.rpm a67fba3114fe753bb18eb37c7621da6e014cc07315ae5fca16175ae44314c423 qemu-kvm-ui-opengl-6.2.0-11.el9_0.3.x86_64.rpm be5c024b8014bc87b267b90adc6dc12e5c29776cc16aa948683094512fd04d62 qemu-kvm-docs-6.2.0-11.el9_0.3.x86_64.rpm d2ee237865d809ca2358b1b3a6dde833b90ef91012883a3d92938f72c23316aa qemu-kvm-ui-egl-headless-6.2.0-11.el9_0.3.x86_64.rpm d33c4896a8e55789ae742ed01101a679c9142893e3d898140b05358fcbe8e525 qemu-kvm-block-curl-6.2.0-11.el9_0.3.x86_64.rpm e6f57da050fe6eb31591fab298635c1303a4c13e7ff4ed22390eac7f15ddf03a qemu-kvm-core-6.2.0-11.el9_0.3.x86_64.rpm fa47fb11d032980a88cd6af9682d6667f8d35f4ebc555562e10ab21d8038b72b ALSA-2022:5482 Copyright 2022 AlmaLinux OS 0 1 Important

An update for thunderbird is now available for AlmaLinux 9.

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.11. Security Fix(es): * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-2022-34468) * Mozilla: Use-after-free in nsSHistory (CVE-2022-34470) * Mozilla: A popup window could be resized in a way to overlay the address bar with web content (CVE-2022-34479) * Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (CVE-2022-34484) * Mozilla: Undesired attributes could be set as part of prototype pollution (CVE-2022-2200) * Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid (CVE-2022-2226) * Mozilla: CSP bypass enabling stylesheet injection (CVE-2022-31744) * Mozilla: Unavailable PAC file resulted in OCSP requests being blocked (CVE-2022-34472) * Mozilla: Potential integer overflow in ReplaceElementsAt (CVE-2022-34481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default thunderbird-91.11.0-2.el9_0.alma.x86_64.rpm 5efea5bc18a138c8bbda1d3560275a57c3b428dabcb6c4260b510f5a5d116f33 ALSA-2022:5527 Copyright 2022 AlmaLinux OS 0 1 Important

An update for squid is now available for AlmaLinux 9.

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: DoS when processing gopher server responses (CVE-2021-46784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default squid-5.2-1.el9_0.1.x86_64.rpm bcbc9f5fa02d1924f595c20ec89b62034ca0adafbe3c41aad4a2c83f9a2ce6f2 ALSA-2022:5695 Copyright 2022 AlmaLinux OS 0 1 Important

An update for java-11-openjdk is now available for AlmaLinux 9.

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-11-openjdk (11.0.16.0.8). (BZ#2084777) Security Fix(es): * OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-11] (BZ#2099915) * SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-11] (BZ#2107866) * Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-11] (BZ#2107868) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default java-11-openjdk-static-libs-11.0.16.0.8-1.el9_0.x86_64.rpm 0a0ac5d894d920db85039530c5c5171d8a825471b99daa664ca4b6a1161eca95 java-11-openjdk-devel-fastdebug-11.0.16.0.8-1.el9_0.x86_64.rpm 1edc3032bac1557c830843a6f713f7bfb240dd2857a85b0ed9e3586d92936973 java-11-openjdk-static-libs-fastdebug-11.0.16.0.8-1.el9_0.x86_64.rpm 216b7d68a9edc3da26b9f13d601a7f259d446a0eafc27a29a85903f521461ae1 java-11-openjdk-src-11.0.16.0.8-1.el9_0.x86_64.rpm 51807029220d508c792ad8c2a969a44771fb4ba57325c856c0e9fa8d7b89f13a java-11-openjdk-devel-slowdebug-11.0.16.0.8-1.el9_0.x86_64.rpm 59ad8ad40fb70c535e9c781fd3c1b8b32e70c4ad40ca83b74b3c68cdc19a39c6 java-11-openjdk-javadoc-zip-11.0.16.0.8-1.el9_0.x86_64.rpm 5d74f97cd8ecb903789a253746d1bbfe6cce2d8f6abe86fea87a190d0c37eff3 java-11-openjdk-src-slowdebug-11.0.16.0.8-1.el9_0.x86_64.rpm 5ea3aa5e146a61a45ba8a4e02ec39864a7af53dc1e21073be70954dff10844ce java-11-openjdk-fastdebug-11.0.16.0.8-1.el9_0.x86_64.rpm 6dd09796238994dc5a10982f41ebb548b327fd6695d3c281f548b392322fc44f java-11-openjdk-headless-11.0.16.0.8-1.el9_0.x86_64.rpm 6f84cca5cea55a43a8e660b3ad77e513e2838f5d57f302dff4e58f66b8bd6dfc java-11-openjdk-jmods-fastdebug-11.0.16.0.8-1.el9_0.x86_64.rpm 6fb596b27d404e76b337679ea82b108033846e659b3dbb7c6e7869ef93358306 java-11-openjdk-src-fastdebug-11.0.16.0.8-1.el9_0.x86_64.rpm 6ff595e562c28c8fbdbb449d40c5681d1a4e86f711e2a8ec652b99ecc8af7f3f java-11-openjdk-jmods-11.0.16.0.8-1.el9_0.x86_64.rpm 97b466c1c6832e6c5b3f499a776ef1a277c273f1fdf8955153d724091fbe0b97 java-11-openjdk-demo-11.0.16.0.8-1.el9_0.x86_64.rpm 99782822912b6f0a35f04c4801978a57931da12b1c218d34fb590f4c544a1ca4 java-11-openjdk-demo-fastdebug-11.0.16.0.8-1.el9_0.x86_64.rpm bd33e7ce71d56537cd705d7453d7dc2629bd946be37c860526a16ce504589ce0 java-11-openjdk-demo-slowdebug-11.0.16.0.8-1.el9_0.x86_64.rpm c1920d798805e0a8b381d0118c9d412684207e4ae3149dc5bb32257f4022a590 java-11-openjdk-headless-slowdebug-11.0.16.0.8-1.el9_0.x86_64.rpm d3f64b470f1f3392f1ede263864d80cdefb3547bcd028c2bc5bea0c635f9401c java-11-openjdk-devel-11.0.16.0.8-1.el9_0.x86_64.rpm d4259a0116f2b6c30acdd0bd33cab9f73dedb7ff4acf2b1963e5a5d35b63bf6d java-11-openjdk-slowdebug-11.0.16.0.8-1.el9_0.x86_64.rpm dde5b5fee47221b89c916a242ef62e52fc3e03138e59d84acc599ce5adcfb629 java-11-openjdk-static-libs-slowdebug-11.0.16.0.8-1.el9_0.x86_64.rpm ddec3e749f4a053eacddc3d492bcb810772c0fc49f32d96d2715edb6827615cb java-11-openjdk-jmods-slowdebug-11.0.16.0.8-1.el9_0.x86_64.rpm e2fab06765c0cf3d20362ce5f2507551bec1bfea3aed6e45cba2738d5b385e14 java-11-openjdk-headless-fastdebug-11.0.16.0.8-1.el9_0.x86_64.rpm e44a0bf1cb43abd8998b5aa09c9d38b1a270ef9eaf688202c7de261149736fe6 java-11-openjdk-javadoc-11.0.16.0.8-1.el9_0.x86_64.rpm e996a4222bba3cf049b7d03f68efa26f74f3c1e8871b2263ea44432f937c92d3 java-11-openjdk-11.0.16.0.8-1.el9_0.x86_64.rpm f11307a1530949034934a777bee1a95a8c6af462c866ade82f1e16eef9cbb349 ALSA-2022:5709 Copyright 2022 AlmaLinux OS 0 1 Important

An update for java-1.8.0-openjdk is now available for AlmaLinux 9.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-1.8.0-openjdk (1.8.0.342.b07). (BZ#2084776) Security Fix(es): * OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-8] (BZ#2099916) * SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-8] (BZ#2107956) * Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-8] (BZ#2107958) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default java-1.8.0-openjdk-javadoc-1.8.0.342.b07-1.el9_0.noarch.rpm 016c0c76cdcb9e6561492bf3c35a2cedde2695d2d3573cb0ca2a4fa753bf5a75 java-1.8.0-openjdk-headless-slowdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm 03eb47dda75235d9184b13a78115ea50895713518dd504874cba553ed3da1e09 java-1.8.0-openjdk-src-slowdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm 065b9873cf7fa717dd7872a2a9576ee555443be34ec7165793c1f29a4c2a2baf java-1.8.0-openjdk-demo-slowdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm 40c65b0e61fef85904e1761cb165ea5ac59446146ff2e53d8713b45fd694c60e java-1.8.0-openjdk-src-1.8.0.342.b07-1.el9_0.x86_64.rpm 57042bef79ed5d1466c0bdbdc86d3b5637b28c033742ef88b2082aff36cade7e java-1.8.0-openjdk-devel-1.8.0.342.b07-1.el9_0.x86_64.rpm 5a669f6cbe49e6cb57a7ec5ab377ad58f26b77822600f248c1518a80ba4f3a67 java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.x86_64.rpm 5c83987a8fba96dbc61da960e6c477a6458ed1909e89c51115e2e08e0b593cde java-1.8.0-openjdk-demo-fastdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm 71471cf8f67a038f9399c349deb2c14308f496890df9dd7f62461a102743a43b java-1.8.0-openjdk-headless-1.8.0.342.b07-1.el9_0.x86_64.rpm 8b0de8c6fd05f011810e6a30978bbe6e6c2707a9c6c9845a97f15fe571d298dd java-1.8.0-openjdk-src-fastdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm b595ccc1c91f6bac437b22003afd3663cc176cb97ac8d857df5d58b6ca69079c java-1.8.0-openjdk-headless-fastdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm b63276094dca82dbd6d6465e0e1cda8f207e33481371b50e49e91983c4b30a57 java-1.8.0-openjdk-fastdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm b6c0399c4e239896a604d1f6fc24c46df783d15b2d543603526e184257351cd2 java-1.8.0-openjdk-demo-1.8.0.342.b07-1.el9_0.x86_64.rpm b997a5f1d22ddded7324b2a7a4c048b9cdd873ed1e1891f27e7bfe15868802f9 java-1.8.0-openjdk-slowdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm e63ed2bbf5c80a63948940201d80191130780db4fa911060c537cfafa30be4ba java-1.8.0-openjdk-devel-slowdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm ee028e2b534b83f401da98d42a9b3156ae6ffc3add9841acca4368d385e09059 java-1.8.0-openjdk-javadoc-zip-1.8.0.342.b07-1.el9_0.noarch.rpm eef6d2e8806b1e7e959d8ea2224f3ff6f2aa5e4802e5b61ddcebf3adad114d9b java-1.8.0-openjdk-devel-fastdebug-1.8.0.342.b07-1.el9_0.x86_64.rpm fb470a3cb6ae1707c74840af87e131deb1b402f1f5d9b69431acd17ae56bdb4f ALSA-2022:5716 Copyright 2022 AlmaLinux OS 0 1 Important

An update for grafana is now available for AlmaLinux 9.

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: OAuth account takeover (CVE-2022-31107) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default grafana-7.5.11-5.el9_0.x86_64.rpm bb262b6754ae1591ab41a6a69aa8165457e359727ea270ba73373b5abddfad49 ALSA-2022:5736 Copyright 2022 AlmaLinux OS 0 1 Important

java-17-openjdk security, bug fix, and enhancement update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-17-openjdk (17.0.4.0.8). (BZ#2084779) Security Fix(es): * OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541) * OpenJDK: random exponentials issue (Libraries, 8283875) (CVE-2022-21549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Previous AlmaLinux builds of OpenJDK 17 altered the arguments passed to sun.security.pkcs11.wrapper.PKCS11.getInstance() in order to facilitate FIPS support. This build adds an additional form of the method, retaining the original arguments, so that applications which depend on this internal method continue to function with AlmaLinux builds of OpenJDK. (BZ#2099919) * With previous AlmaLinux builds of OpenJDK 17, Mac key generation and import would fail due to the lack of the CKA_SIGN attribute on the key. This attribute is now added as part of the NSS FIPS configuration. (BZ#2105395) * With the release of AlmaLinux, a change was made so that disabling OpenJDK FIPS mode required the use of both the -Djava.security.disableSystemPropertiesFile=true and -Dcom.AlmaLinux.fips=false options, with the intention that FIPS mode could be controlled independently of system security properties. This change has now been reverted and only -Djava.security.disableSystemPropertiesFile=true is required to disable FIPS mode, as in AlmaLinux. (BZ#2107941) * Previous AlmaLinux builds of OpenJDK 17 running in FIPS mode with a SecurityManager would fail due to a lack of module access permissions. This has now been corrected. (BZ#2107943) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default java-17-openjdk-demo-fastdebug-17.0.4.0.8-2.el9_0.x86_64.rpm 101f3f390cc113f5d642b5118f23df065de34152aaa942791f8462b9f52fccc7 java-17-openjdk-static-libs-slowdebug-17.0.4.0.8-2.el9_0.x86_64.rpm 15a8b71d1bf811bace6fc9aed7c14e18b9533a9e0d88a7632a4d7a03e471278f java-17-openjdk-javadoc-zip-17.0.4.0.8-2.el9_0.x86_64.rpm 320a0d68bd774dc16efb48cd72de6beb75125503b7d4ae23a2e84a4037ccf822 java-17-openjdk-src-17.0.4.0.8-2.el9_0.x86_64.rpm 34c2871d89cf7a0cfec5b2b7d128a70719626b234ac0b28d3766a58f264b22b9 java-17-openjdk-static-libs-17.0.4.0.8-2.el9_0.x86_64.rpm 376ef3d90fb0291a22d9845b5baea7056f8bf9f3de7b46c8f4f4dc9c5f9990fd java-17-openjdk-slowdebug-17.0.4.0.8-2.el9_0.x86_64.rpm 4c1fb8aaa3ac31029f829b39eb4fa2b5a2ec70ff2fdfccaf10762332b963460c java-17-openjdk-devel-fastdebug-17.0.4.0.8-2.el9_0.x86_64.rpm 4df4258714ff01ffadac8984fd9e892d8549454d8019ae9b54f73e8507623d92 java-17-openjdk-17.0.4.0.8-2.el9_0.x86_64.rpm 66be22c00c90bc7d5575e415b1645139e333c779c3bde4eec037d07aed270eb8 java-17-openjdk-devel-slowdebug-17.0.4.0.8-2.el9_0.x86_64.rpm 865e3bbaf6577283d3e84fa6ddb0b25c53c3dff1f64225231bb8868aa403c74c java-17-openjdk-headless-fastdebug-17.0.4.0.8-2.el9_0.x86_64.rpm 86eeea01d5b5ec2ecd4a2369297c41f220cb4a5febe034de06e7c2457a5bbcd7 java-17-openjdk-jmods-slowdebug-17.0.4.0.8-2.el9_0.x86_64.rpm 91bf49a7fd407907c0f56b96828d36a962693f03615d40a49d2fb8202565a433 java-17-openjdk-demo-slowdebug-17.0.4.0.8-2.el9_0.x86_64.rpm ad524443ba127992d594c15cd45325dff880d576eb5f6536733953a0acb37aa6 java-17-openjdk-jmods-fastdebug-17.0.4.0.8-2.el9_0.x86_64.rpm bc544038eac58b66207338c3c6074c34010edd21a3c2c2ab843f30089b329849 java-17-openjdk-headless-17.0.4.0.8-2.el9_0.x86_64.rpm c154fcd7f04b808d16a84ed3fac6cf2f7086a2621f763402b67b56e41674fb23 java-17-openjdk-static-libs-fastdebug-17.0.4.0.8-2.el9_0.x86_64.rpm c7e9e880c3223cef0726f4f4cfd66a74b067556e199a5e24f8df5a4b59c232a7 java-17-openjdk-devel-17.0.4.0.8-2.el9_0.x86_64.rpm c8a11c51f725abeb88afb7ad25cdc0b5a94f688734a927fc3d706c09b00cf153 java-17-openjdk-headless-slowdebug-17.0.4.0.8-2.el9_0.x86_64.rpm cf6013977e106cbfe8aa376c84df50ec17f99b84f314bb90e20c1b027332b60a java-17-openjdk-jmods-17.0.4.0.8-2.el9_0.x86_64.rpm d5c1918f5b7de92562702360d5faf4262f00f05bb2f910f4f0ffe3ff33cfd33f java-17-openjdk-demo-17.0.4.0.8-2.el9_0.x86_64.rpm e8772af86ba92a5193921864d3d0c138983b775c53253223b5bb45713957b457 java-17-openjdk-src-fastdebug-17.0.4.0.8-2.el9_0.x86_64.rpm ece98c00b87ce8501fdbd93fc9d56aa1df531c4e158172b39c7a1e7ebf1d3eb3 java-17-openjdk-fastdebug-17.0.4.0.8-2.el9_0.x86_64.rpm f56a226a725496954b3ffb73885ada579dbda4b49fd065460c10872ed31ab24c java-17-openjdk-javadoc-17.0.4.0.8-2.el9_0.x86_64.rpm f82aa5b6f9b3ad402c6bdef7493b661539959f69b6d0188e55f9251226858aba java-17-openjdk-src-slowdebug-17.0.4.0.8-2.el9_0.x86_64.rpm f8b4201c30f3a65fb55c1f04fddb291f6e3b1961592d74d8dd9b742a5d3e0e06 ALSA-2022:5767 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.12.0 ESR. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1 (CVE-2022-2505) * Mozilla: Directory indexes for bundled resources reflected URL parameters (CVE-2022-36318) * Mozilla: Mouse Position spoofing with CSS transforms (CVE-2022-36319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default firefox-91.12.0-2.el9_0.alma.x86_64.rpm cd89c3e6a9ead505f3f95fe9a05206040939e7fb0268a8c160016d1117a7069d ALSA-2022:5799 Copyright 2022 AlmaLinux OS 0 1 Important

go-toolset and golang security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962) * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Clean up dist-git patches (BZ#2109174) * Update Go to version 1.17.12 (BZ#2109183) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default golang-src-1.17.12-1.el9_0.noarch.rpm 0b7982ba93764e9d97bdd2937f55dbc99d9e1b594393d05ca6186d4023556dac golang-race-1.17.12-1.el9_0.x86_64.rpm 588dc6330562281eb74baec7ee436597015a2fd5acf8a7eb88d6f91eb81d620b golang-tests-1.17.12-1.el9_0.noarch.rpm 72104a38591636eb5347c52dc7fc99796145050bce5c947969d9ddfc3faa4dbb golang-misc-1.17.12-1.el9_0.noarch.rpm 752b856860d0d280cc130b91e5b23392fa0011704db90256af79fa7b6dcf10e2 golang-docs-1.17.12-1.el9_0.noarch.rpm c8197d076419d8de01726a8e6e5818593a8c2358bc4afb2843a93e69a9a69daf golang-bin-1.17.12-1.el9_0.x86_64.rpm dfe598abe2b88a2341d02e83737cdf7d918b540454e72cf0499270133acc9dcc golang-1.17.12-1.el9_0.x86_64.rpm f303459ed113508a9840e728c32d13b998985196e13903fdf67ca128b2ebf6e2 ALSA-2022:5904 Copyright 2022 AlmaLinux OS 0 1 Important

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: password of excessive length triggers buffer overflow leading to RCE (CVE-2022-31626) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default php-opcache-8.0.13-2.el9_0.x86_64.rpm 02d208900970ce88c9de809d284ee34c419fd1461ed174e825526b35056e5d35 php-mysqlnd-8.0.13-2.el9_0.x86_64.rpm 0654de7cad7066ca7cdef42546e61a48774c358abbfd84a135c35920662d5de9 php-fpm-8.0.13-2.el9_0.x86_64.rpm 126e8a9604028cccb89a7ac1f0e3e046771ce061375ccc928f31006f4d66da07 php-pgsql-8.0.13-2.el9_0.x86_64.rpm 31794493fca92bf6cdb8fbb009a1685b7d0246ab2465ff64f1c99865e14ea65a php-devel-8.0.13-2.el9_0.x86_64.rpm 38fb4367fc92144c8ee652c55e276687571af627cd3c638445f12b65d892efcb php-dbg-8.0.13-2.el9_0.x86_64.rpm 43f93b090844faf8f15860da580ceaa637a90dce0adec5c8d724660f44f59967 php-ldap-8.0.13-2.el9_0.x86_64.rpm 46c7c01cca08081300d62a28e8ea19055d0a649abaea1ffb1ec532921e4116d3 php-8.0.13-2.el9_0.x86_64.rpm 4da471fe15fe0b473f90af5b534fc96c55fd99eca2cadb3ba1735ece81491681 php-gd-8.0.13-2.el9_0.x86_64.rpm 51ccba37ce1d6751bbd45b8ccca7821498c081d1c4d876ad2bfa4479695540ec php-bcmath-8.0.13-2.el9_0.x86_64.rpm 57ec6813c9fdc9df65df867449b774668195abd2591c1c7cb3a6af39c8bbdfbf php-dba-8.0.13-2.el9_0.x86_64.rpm 6ceb97047385f75bf40a4381d66875240a0dbfd0334db92fd832a65eb0231d83 php-gmp-8.0.13-2.el9_0.x86_64.rpm 6d37703f097f050f11f53175dbc8a86070ebcde4a01fd3bc1616e8a805763abe php-xml-8.0.13-2.el9_0.x86_64.rpm 7d2a415946447d6025a3dd0686e08a3ec3f48428449b9499d271f8d4c1d11009 php-pdo-8.0.13-2.el9_0.x86_64.rpm 7d82ee63c0e3b135798de822073fcb65b52cf923a54f6d84f9f3372eb905fd5e php-cli-8.0.13-2.el9_0.x86_64.rpm 9084d16c918689da908a35cb7b803998509f78d9678dca8db37f9bb8cb81edfe php-mbstring-8.0.13-2.el9_0.x86_64.rpm 9650056969ef9e64dc014f2417a4500cb434f04367cf3e5e29acf38d80f52829 php-embedded-8.0.13-2.el9_0.x86_64.rpm ad5f94a9330f6e755d5b896cb3b7933766c8f11fad424753539d8c47d7dd8a3c php-ffi-8.0.13-2.el9_0.x86_64.rpm adb282142d1ce82b660393f16047d3cdce643f3d5bdfdec38c39873d622dc182 php-intl-8.0.13-2.el9_0.x86_64.rpm b68d131868d4f92eb54272801fa83cf0bda2e669b8db76c85d599b29e8efda41 php-snmp-8.0.13-2.el9_0.x86_64.rpm bff2187907bc6e7776960d124bbb003892699f5953b15a6e077a161b6059ed15 php-process-8.0.13-2.el9_0.x86_64.rpm d4d349ff1ee5a0e7ff09b912aacef97eafb4019d6874265ed14768e70e8dfebb php-common-8.0.13-2.el9_0.x86_64.rpm e109d06ff0cdbfd1b8408130c49448a953b4736a2f5c389009ed1390dae2ab07 php-enchant-8.0.13-2.el9_0.x86_64.rpm efaff246ebd33d84689bf95fb00c55671cddbebd66b4cea87aeb1049fc173062 php-odbc-8.0.13-2.el9_0.x86_64.rpm f7b71646ecb1d9d7e37a82962eecf8d0c89f8b4c3265c7f9280d382c633f5dfc php-soap-8.0.13-2.el9_0.x86_64.rpm fd81d5414c83bd876a6e0568bcb83f7b1108bad6bd3e3de8dba75a31859790e6 ALSA-2022:5942 Copyright 2022 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Out-of-bounds Write (CVE-2022-1785) * vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897) * vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default vim-common-8.2.2637-16.el9_0.3.x86_64.rpm 4060d5f17b11d2fb77086b017a36eea436513f40855ff127d1391bd2ed60b3d1 vim-enhanced-8.2.2637-16.el9_0.3.x86_64.rpm 5ab969d2e75c5cb78a483b2aefcbf21a9ef2b59b8187b1822d3f7146856c8687 vim-minimal-8.2.2637-16.el9_0.3.x86_64.rpm 5d005dd2b9a6ff888fc684c79404e081eb684713c3eb64e5bcb61f04863c78e6 vim-filesystem-8.2.2637-16.el9_0.3.noarch.rpm 85377e40c2d0d6abc50777ec8eb90ec6a20cc2cc106fcb471585ad16ed4f920f vim-X11-8.2.2637-16.el9_0.3.x86_64.rpm a56628904235766bca585d1b3438fb71987feca4d7336be1407b1e281cb5f554 ALSA-2022:5948 Copyright 2022 AlmaLinux OS 0 1 Moderate

galera, mariadb, and mysql-selinux security, bug fix, and enhancement update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5). Security Fix(es): * mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669) * mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048) * mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050) * mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051) * mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052) * mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376) * mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377) * mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378) * mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379) * mariadb: server crash at my_decimal::operator= (CVE-2022-27380) * mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381) * mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382) * mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383) * mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384) * mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386) * mariadb: assertion failures in decimal_bin_size (CVE-2022-27387) * mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444) * mariadb: assertion failure in compare_order_elements (CVE-2022-27445) * mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447) * mariadb: crash in multi-update and implicit grouping (CVE-2022-27448) * mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449) * mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451) * mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452) * mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455) * mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456) * mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623) * mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659) * mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661) * mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663) * mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664) * mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665) * mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default mariadb-pam-10.5.16-2.el9_0.x86_64.rpm 136e4fd832277e80c1e7a941195d3df0eb6b11ea53ed30a7e484408ed3556cb2 mariadb-server-galera-10.5.16-2.el9_0.x86_64.rpm 137dff8beac08b5669ab9d4d184af99684efc0ff55d7e2dbe091c19414e3beda mariadb-backup-10.5.16-2.el9_0.x86_64.rpm 1a36782312cfff6d745e4d75882c89cca2d91fdbbab632a17c27b402ae6f1cf9 mariadb-server-utils-10.5.16-2.el9_0.x86_64.rpm 252c7194b3af99775ed881be5b0ba4cb856e1880a903bdbcd057ea30c1c1f537 mariadb-10.5.16-2.el9_0.x86_64.rpm 3c5e5f10bfd0ca6b1ce1e93e253a573afb3b6f64c26e456742f32da45cf07747 mariadb-gssapi-server-10.5.16-2.el9_0.x86_64.rpm 43296b1cc02b13b87b4b07f95a0713e03fc6104f15cde2ec2d306983f1c281cd mariadb-oqgraph-engine-10.5.16-2.el9_0.x86_64.rpm 49b2b2fa616f9c71a95155b73877559000a75155a6b5a239a0be16c56ba308e2 mariadb-embedded-10.5.16-2.el9_0.x86_64.rpm 538edca513f598c80b2b76c6e3b039a1acfd615b82f1da2b1db6038c9c327e2b mariadb-errmsg-10.5.16-2.el9_0.x86_64.rpm 6606496ebdbcd441d472fea4d8693bdb003b9153e165ea18ee710bf3226040ad mariadb-test-10.5.16-2.el9_0.x86_64.rpm 7ccd64432f350c45d01ede492e4d3abf7ee3d94f52c52d7b76efd94d28690a39 mariadb-devel-10.5.16-2.el9_0.x86_64.rpm 7fe611ae97bd95b391d569ed68f1159848b7253653059b79fb1e1a7dc89d3c1c mariadb-common-10.5.16-2.el9_0.x86_64.rpm b97941f1930c4dae49f4327a6827497cf718253bc0bb8ec04191d89a193b4f3a mariadb-embedded-devel-10.5.16-2.el9_0.x86_64.rpm bbc665ce6563a480a408856b934a5ccb283023bdfd241fe41930eb71fb81dd87 mariadb-server-10.5.16-2.el9_0.x86_64.rpm d6070bd1aa3d306cfe83babc5422d8625d907b14b14d03457a95f10c236de682 ALSA-2022:6003 Copyright 2022 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * information leak in scsi_ioctl() (CVE-2022-0494) * use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248) * Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253) * FIPS module identification via name and version (BZ#2093384) * gfs2: File corruption with large writes when memory is tight (BZ#2097306) * i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251) * AlmaLinux 9.1 doesn't support 3rd SATA (BZ#2099740) * Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903) * Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854) * Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858) * lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085) * OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974) Enhancement(s): * iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default kernel-tools-5.14.0-70.22.1.el9_0.x86_64.rpm 058da6c60d99668ca9527e389ca31f3e5a0b6807572ca6879bbad1bfcc001dc8 kernel-debug-modules-extra-5.14.0-70.22.1.el9_0.x86_64.rpm 0a6bb3033994c42eccd2caaf2c1a0f9fa12978dfa654d09eb1b23c166b35fe87 kernel-doc-5.14.0-70.22.1.el9_0.noarch.rpm 232d05e4af484d9fb62fcffcdb7b23f898a654e8107f29507eaa1d61344427aa kernel-headers-5.14.0-70.22.1.el9_0.x86_64.rpm 269d4b5744b79c31b7840d2662d69a65a07a3daf267d9e0f1d78127bb1ce5e94 kernel-modules-5.14.0-70.22.1.el9_0.x86_64.rpm 356fb4b60399817af9c27541a786c894d72b63a4820600a5d0d5e2625dd19f57 kernel-core-5.14.0-70.22.1.el9_0.x86_64.rpm 44567301c8fcf8e9ff544612b55189e40b93e92ef0344e1ff007ca480ae93864 perf-5.14.0-70.22.1.el9_0.x86_64.rpm 4bee781763a63ad8fbf0177146fed24798d1be7ddc07664f383b203a7992104d kernel-5.14.0-70.22.1.el9_0.x86_64.rpm 4de9ce495488ecba67d20954cdf93a280b38cf90a70f2135dbdaa74f9c43bcd0 kernel-debug-5.14.0-70.22.1.el9_0.x86_64.rpm 4e7323439496dadf60ad2e6ecb8c9169550d549a6423e9be52462c2b6c05c288 kernel-debug-devel-matched-5.14.0-70.22.1.el9_0.x86_64.rpm 5af007256bad23fe247a27a40f5b3d1824837394ac911433ada995c34085278b kernel-cross-headers-5.14.0-70.22.1.el9_0.x86_64.rpm 73b9566ab8a940449df3028f7b07810ef23869261984f0958abfa24241956c27 kernel-tools-libs-devel-5.14.0-70.22.1.el9_0.x86_64.rpm a1cd31b9b9d2e80b48a123147a5474ad6c37d35e4c07406760de2018d831a5b0 kernel-modules-extra-5.14.0-70.22.1.el9_0.x86_64.rpm a33fd0e3f5e8642b1cddea8a2b17203e095b0cede69e7907d8fba3cb59b13857 kernel-abi-stablelists-5.14.0-70.22.1.el9_0.noarch.rpm a7507bb31645b36cd5120e3dee6c9f7928ea50fa4707527e8af610752ebdea2e kernel-devel-matched-5.14.0-70.22.1.el9_0.x86_64.rpm af922ec743dc3cc02cdb496b8c79ac7f28b3c2f52beb5fe85db20b1108c05d81 bpftool-5.14.0-70.22.1.el9_0.x86_64.rpm c7076c508dd6569376b95d3329534c443790fdc930bc18cf57d4cf53de0dfc42 kernel-debug-modules-5.14.0-70.22.1.el9_0.x86_64.rpm dcc4d30f300c4a37153afbe9329e3fece612a9905c9bb08f2fe3f6dfe4fb1e06 kernel-devel-5.14.0-70.22.1.el9_0.x86_64.rpm e44c1505fffc7a260189e267d52aad51e93662b9de13219fb9e0f48222789c2a kernel-tools-libs-5.14.0-70.22.1.el9_0.x86_64.rpm e741c79fd6389fc2c5197dd515fb3eb3c70b80ba46b6e80914c1e28753b97869 python3-perf-5.14.0-70.22.1.el9_0.x86_64.rpm e93ddf4c67372f75be67711e4c71ebe3fd48ccf112d3b35301d712d76fbe4c19 kernel-debug-devel-5.14.0-70.22.1.el9_0.x86_64.rpm ec6b30715ddebf429655aefd6f4d8254e11babda8aeb89f1eb2786a266b94f73 kernel-debug-core-5.14.0-70.22.1.el9_0.x86_64.rpm f7b5b4cf5bae143246da2725de4892ee360ede281d2c94b38490d64a26b6f054 ALSA-2022:6043 Copyright 2022 AlmaLinux OS 0 1 Moderate

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8. Security Fix(es): * dotnet: External Entity Injection during XML signature verification (CVE-2022-34716) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default aspnetcore-targeting-pack-6.0-6.0.8-1.el9_0.x86_64.rpm 02bb816d2a7e001386b180b65ea007d708badf3981a74ecf4bd75649807fdfe6 dotnet-sdk-6.0-source-built-artifacts-6.0.108-1.el9_0.x86_64.rpm 3c62319b33b397a6cdbaa4febac1fc42eded579be1e8af5c2e722fc6f4a250cb dotnet-targeting-pack-6.0-6.0.8-1.el9_0.x86_64.rpm 4830636c80ca508e2a5da09308070322900c405a95b7aafd9dadc54c3882a7db dotnet-hostfxr-6.0-6.0.8-1.el9_0.x86_64.rpm 497ea4ef0946e9109ac1878337b61733aec4d16a427f69a6b8a61c0dc84d4ba6 dotnet-runtime-6.0-6.0.8-1.el9_0.x86_64.rpm 9b56d7f89668f19f1fb804fc96ace6b6c119ea4b0d953308125458a0f01cc65e netstandard-targeting-pack-2.1-6.0.108-1.el9_0.x86_64.rpm a0f61341b0c2062b19d03fff21514d86a90768ea2c28e27263f33a0065b3c60f aspnetcore-runtime-6.0-6.0.8-1.el9_0.x86_64.rpm b47040ff6ea742fc0c866ccc087b40c2d5b48edb0d64247d3f4f9bec92f42c40 dotnet-templates-6.0-6.0.108-1.el9_0.x86_64.rpm d18b9f7922fdd0c4a14e7c01a284ca82c0068f3266238c112da059493de2573e dotnet-sdk-6.0-6.0.108-1.el9_0.x86_64.rpm dcdcfdd0709b8b7b97001623e68738275ce478bf7307dd637c25b7354fec1ae9 dotnet-host-6.0.8-1.el9_0.x86_64.rpm e01bee46ab6aed570a01c2990592df3ced90d35445ddd0969d429a4b3e04810d dotnet-apphost-pack-6.0-6.0.8-1.el9_0.x86_64.rpm e3bbe2ac7e2e760894eeb8909ee6548195cac05b85d4aa96888f9bb362e9e3f4 ALSA-2022:6157 Copyright 2022 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP compression denial of service (CVE-2022-32206) * curl: Unpreserved file permissions (CVE-2022-32207) * curl: FTP-KRB bad message verification (CVE-2022-32208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default libcurl-devel-7.76.1-14.el9_0.5.i686.rpm 23f2c28f2dc6f874159fd622ea094b4df7383185f8440a874fec217c411c08d7 libcurl-7.76.1-14.el9_0.5.x86_64.rpm 2d96426c0d69d091b03c65014ab2485c9b580599744618ea5d8d6f808544a010 libcurl-minimal-7.76.1-14.el9_0.5.x86_64.rpm 8952a283d1864149f73c6dd9688e33278c64667f0a0eaa96cbe4cd00453a4f22 libcurl-devel-7.76.1-14.el9_0.5.x86_64.rpm b975f675c45821d7de9b30c6d358bcf3253fc3644fd4edd813f03f197c32195b curl-minimal-7.76.1-14.el9_0.5.x86_64.rpm ed1875b39b0182f49828fa857fdf88dcd4eabdb29098fdfd46627a548356fb52 curl-7.76.1-14.el9_0.5.x86_64.rpm fb907e7b85d74622be95d44354df9081ba6897c7bc54306828da4f848fe8967d ALSA-2022:6165 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.13.0. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478) * Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default thunderbird-91.13.0-1.el9_0.alma.x86_64.rpm 1a6594b35db1ecc7a48b1f686bbec67f029db4c79c0a4cbb2cd070552ce2424a ALSA-2022:6174 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.13.0 ESR. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478) * Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default firefox-91.13.0-1.el9_0.alma.x86_64.rpm d0b798dcc09d367524d26e86c42f65c84eebf5cc1e5b25e57881ee4ba4521d46 ALSA-2022:6224 Copyright 2022 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: c_rehash script allows command injection (CVE-2022-1292) * openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS (CVE-2022-1343) * openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473) * openssl: the c_rehash script allows command injection (CVE-2022-2068) * openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323) * openssl req defaults to 3DES (BZ#2085499) * OpenSSL accepts custom elliptic curve parameters when p is large [almalinux-9] (BZ#2085508) * OpenSSL mustn't work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521) * openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554) * Converting FIPS power-on self test to KAT (BZ#2086866) * Small RSA keys work for some operations in FIPS mode (BZ#2091938) * FIPS provider doesn't block RSA encryption for key transport (BZ#2091977) * OpenSSL testsuite certificates expired (BZ#2095696) * [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044) * [FIPS lab review] self-test (BZ#2112978) * [FIPS lab review] DH tuning (BZ#2115856) * [FIPS lab review] EC tuning (BZ#2115857) * [FIPS lab review] RSA tuning (BZ#2115858) * [FIPS lab review] RAND tuning (BZ#2115859) * [FIPS lab review] zeroization (BZ#2115861) * [FIPS lab review] HKDF limitations (BZ#2118388) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default openssl-devel-3.0.1-41.el9_0.i686.rpm 01db3f0440b120c0b42ff33f625678694a0c6b9db0bac0bb8dc253407d43ce92 openssl-libs-3.0.1-41.el9_0.x86_64.rpm 1a830ad3a6dfcd671de775264a521c516bd5913837fd1a9318bddcffdeaf3ea5 openssl-perl-3.0.1-41.el9_0.x86_64.rpm 9d835a284fd7f3d7793aae5d2d30d1720587a56280c7bc567274d8dfeae3d3a5 openssl-devel-3.0.1-41.el9_0.x86_64.rpm ae7a5ee958bbe423a43289b7f4c09c9ad551ba87e4e7439d231bd1ff243536bd openssl-3.0.1-41.el9_0.x86_64.rpm e5be7dc899ff25a0e7cfaf753e434ce1fe7c0d2882667027ed0df2ec79f66273 ALSA-2022:6358 Copyright 2022 AlmaLinux OS 0 1 Important

open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools: local root privilege escalation in the virtual machine (CVE-2022-31676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default open-vm-tools-desktop-11.3.5-1.el9_0.1.x86_64.rpm 42a17fe0cfb7a607b8db576c0c4cb2f504f64838b6722461e4f1a82d4665e0f0 open-vm-tools-sdmp-11.3.5-1.el9_0.1.x86_64.rpm 86bd79e9ffa31d7870ad4fcce8bba042d0ccb509ce8484bafc9ae4df51560c8a open-vm-tools-test-11.3.5-1.el9_0.1.x86_64.rpm 9585045fa63e9a156c3e58290d1103f03a5fe3b20a2829ca02738a33cf8fd2ee open-vm-tools-11.3.5-1.el9_0.1.x86_64.rpm e358123c40e1cdfc3ef2dfbedabebf782eb125314229c22d7b9cf1cdd2d90fd7 ALSA-2022:6521 Copyright 2022 AlmaLinux OS 0 1 Moderate

.NET 6.0 security and bugfix update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.109 and Runtime 6.0.9. Security Fix(es): * dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default dotnet-templates-6.0-6.0.109-1.el9_0.x86_64.rpm 05fe19bc678c07cfa9bc2bc343c2d48655612565b8d9bfadc8d215121e1b6e8e aspnetcore-runtime-6.0-6.0.9-1.el9_0.x86_64.rpm 0ca190d2d97c6104adce88e1609168f44c9bd4a20868b6b69b6ff95f8c441f63 dotnet-hostfxr-6.0-6.0.9-1.el9_0.x86_64.rpm 206788c933836fc60695e8baa0505cd73c197be3b25c1d3ea8ea839f189bf3c9 dotnet-host-6.0.9-1.el9_0.x86_64.rpm 3bb53c3fd0e6ac57f1cfcf4f360f4a5fd171226d5af4e7054329ddadec45e99d dotnet-runtime-6.0-6.0.9-1.el9_0.x86_64.rpm 6bf7f99a7f08a248f0e5a93b5e14ec92d1fb6e154eaa695672097a45b480b89c dotnet-sdk-6.0-6.0.109-1.el9_0.x86_64.rpm 74f6879de30f2efe5541fcc18e248f346b648b572b4cf6257e3d42e64717cc9f netstandard-targeting-pack-2.1-6.0.109-1.el9_0.x86_64.rpm 98bc81a4e7b36a24603781b10a318bdde28ca2245e2e9082225fc6fdf4999ac2 dotnet-targeting-pack-6.0-6.0.9-1.el9_0.x86_64.rpm 9b28c42a5dc01848238c1d29e9ad327224997a87c6a30ffb222bcab69f65c1da dotnet-apphost-pack-6.0-6.0.9-1.el9_0.x86_64.rpm b6d9fb76a23c6a2bbabc90d33916e9fe49ed27b8033d26463536ff943d020364 aspnetcore-targeting-pack-6.0-6.0.9-1.el9_0.x86_64.rpm d9d125e157933c5bb3e15f2e7321e0b5897680018de678fd0d0ece6ba05d4db1 ALSA-2022:6585 Copyright 2022 AlmaLinux OS 0 1 Moderate

ruby security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109428) Security Fix(es): * Ruby: Double free in Regexp compilation (CVE-2022-28738) * Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default ruby-libs-3.0.4-160.el9_0.x86_64.rpm 0a855cb8437b664960deec1d6f5be9ec95d6e6661f754a60b391700382a5ec6a rubygem-typeprof-0.15.2-160.el9_0.noarch.rpm 0e4ebca19523f0dd89c46c21b776d45379ff1f7965dd423b1bcd5edd4c25760e ruby-devel-3.0.4-160.el9_0.x86_64.rpm 30a72b804c7d1f685fe6b4a942d1e147d59414aef4eda49498e9eae85d647c49 rubygems-devel-3.2.33-160.el9_0.noarch.rpm 47177d171a1e9ac58dbdbd0cfa2c2d7bfa1fbce55ee3ec6b92594bab516989d0 rubygem-rexml-3.2.5-160.el9_0.noarch.rpm 4f4959a3c7e6da46ba9d96fbdb71606c64279adf58d3a6a0911f9bfe09d6b645 ruby-libs-3.0.4-160.el9_0.i686.rpm 50f2e8fda32cb670ade83ab3e894d21286919b44766bacc284a1d1b12ed37ce3 rubygem-rss-0.2.9-160.el9_0.noarch.rpm 61a9cc11ee03f87dd24cf9437cd68a44069d279d19aec452a3cccc458dbdd4e5 rubygem-bigdecimal-3.0.0-160.el9_0.x86_64.rpm 67242c280ac3459ac26800d4ed975837eab87c5c9ba0cf408cd20d2b623a73c2 ruby-3.0.4-160.el9_0.i686.rpm 6fc27241dc2b85efa1af32c1f749bb3c148b322c5797c829f76367ae91f07c9a rubygem-test-unit-3.3.7-160.el9_0.noarch.rpm 7024ae2f1fa78bc46be4bfe7431a70487ddc3cd7b2e14fd87b6cf84f73509b07 rubygem-power_assert-1.2.0-160.el9_0.noarch.rpm 8ff3ddf87d8dd8b83b9103045a0708901a7e8092d200ca2a16df15876cadf340 rubygem-json-2.5.1-160.el9_0.x86_64.rpm 963d71c649dec454c85e42956a27e16d2b5d875003533484bb9fdeac42e0b63f rubygem-io-console-0.5.7-160.el9_0.x86_64.rpm 9e64e79bb3fef7bd97bf9f6edb82d5f36bccaa114f73bc8f1a621a53f3778a1d rubygems-3.2.33-160.el9_0.noarch.rpm aafc90f5db348d735b316df9f67be318a979cbc3f5a86526803ec1434a9211dd rubygem-rbs-1.4.0-160.el9_0.noarch.rpm ad33ce0a8b6973ad3bbfba439352d266df2e1ad21de24ab67d133d3daa53c0c6 rubygem-irb-1.3.5-160.el9_0.noarch.rpm ba2d4b5d69df5102d425754d33d39d9a3cad8fbdb4a0ea77bb8764b8abb6469d ruby-3.0.4-160.el9_0.x86_64.rpm bd844b8b8913c1c5222bc70a6ddeae8e76f656ef50a8f6863a6882f67ba02680 rubygem-bundler-2.2.33-160.el9_0.noarch.rpm d08e0feb932a0abca51a465f64dc33e1846d40c17238985766802619c2f5c9c5 rubygem-psych-3.3.2-160.el9_0.x86_64.rpm d399f79009f660b14470e99a7528fc0c42cf96e205152081bf68bcdc1ccbbc3b ruby-default-gems-3.0.4-160.el9_0.noarch.rpm d6ff792d62fb767eafc17c3adb6ab2508483465114145d720cd973c80b4678a3 rubygem-rake-13.0.3-160.el9_0.noarch.rpm dcf530d4f64670dd945be39f1740fe8b044ca91ad2b944e7da92ddf5ce441517 rubygem-minitest-5.14.2-160.el9_0.noarch.rpm ddfbf5092d973b37876796cd4edaa28501cbc73352b513e5960bbe2823892814 rubygem-rdoc-6.3.3-160.el9_0.noarch.rpm e091290bdfbdfde6d68e691c18dea88f4b765de5989f0abaa101678981fdd20b ruby-devel-3.0.4-160.el9_0.i686.rpm f71e8769eb2acfefc8077cc64681e0a494990840a7c51aaf5191606162aa8d83 ALSA-2022:6590 Copyright 2022 AlmaLinux OS 0 1 Moderate

mysql security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql (8.0.30). (BZ#2122589) Security Fix(es): * mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479) * mysql: Server: DML unspecified vulnerability (CPU Apr 2022) (CVE-2022-21413) * mysql: Server: Replication unspecified vulnerability (CPU Apr 2022) (CVE-2022-21415) * mysql: InnoDB multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21423) * mysql: Server: DDL multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21425, CVE-2022-21444) * mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427) * mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21454) * mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Jul 2022) (CVE-2022-21455) * mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21457) * mysql: Server: Logging unspecified vulnerability (CPU Apr 2022) (CVE-2022-21460) * mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21556, CVE-2022-21569) * mysql: Server: Options unspecified vulnerability (CPU Jul 2022) (CVE-2022-21515) * mysql: InnoDB multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21517, CVE-2022-21537, CVE-2022-21539) * mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21522, CVE-2022-21534) * mysql: Server: Federated unspecified vulnerability (CPU Jul 2022) (CVE-2022-21547) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022) (CVE-2022-21538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Default logrotate set to wrong log file (BZ#2122592) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default mysql-server-8.0.30-3.el9_0.x86_64.rpm 661a7dbc634c87713e20609041e820590fed78e77a41db28185d81442f45aeb9 mysql-8.0.30-3.el9_0.x86_64.rpm b6544f1a491ba5a20c6baa0c0e9e2b3fe891e21bfb6563afdf0d3763733941de mysql-errmsg-8.0.30-3.el9_0.x86_64.rpm ca26bae0d86b1a4b19ad8f0f7eccfefabbf9e7ecd31aca1903ceddfc845efba8 mysql-common-8.0.30-3.el9_0.x86_64.rpm e36ca82995127891d53618f3a1131aa632a0b21bc0388859247fbfff107c993d ALSA-2022:6595 Copyright 2022 AlmaLinux OS 0 1 Moderate

nodejs and nodejs-nodemon security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.16.0), nodejs-nodemon (2.0.19). (BZ#2124230, BZ#2124233) Security Fix(es): * nodejs-ini: Prototype pollution via malicious INI file (CVE-2020-7788) * nodejs-glob-parent: Regular expression denial of service (CVE-2020-28469) * nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes (CVE-2021-3807) * normalize-url: ReDoS for data URLs (CVE-2021-33502) * nodejs: npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace (CVE-2022-29244) * nodejs: DNS rebinding in --inspect via invalid IP addresses (CVE-2022-32212) * nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding (CVE-2022-32213) * nodejs: HTTP request smuggling due to improper delimiting of header fields (CVE-2022-32214) * nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding (CVE-2022-32215) * got: missing verification of requested URLs allows redirects to UNIX sockets (CVE-2022-33987) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * nodejs:16/nodejs: Rebase to the latest Nodejs 16 release [almalinux-9] (BZ#2121019) * nodejs: Specify --with-default-icu-data-dir when using bootstrap build (BZ#2124299) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default npm-8.11.0-1.16.16.0.1.el9_0.x86_64.rpm 39555437f50f35332d8822f44f1022cc7228bebba7dfef462e8e66190837515e nodejs-nodemon-2.0.19-1.el9_0.noarch.rpm 462159fe602c6f7494478543678b5fc66877bb11997e9633ba0b7c0279cff5d9 nodejs-libs-16.16.0-1.el9_0.x86_64.rpm 99897cfc435862cd46d9c22d959ff268e22019ae96e180946c69a3b018c61ec3 nodejs-16.16.0-1.el9_0.x86_64.rpm a204eaf57f71fc0e3c58333aa69e0f91e82d27c067e05526c215b03609c526cb nodejs-full-i18n-16.16.0-1.el9_0.x86_64.rpm a49a2af37b0b6d7dbc63455660f3d3bf6f082152731d53d02fba810917e0c497 nodejs-libs-16.16.0-1.el9_0.i686.rpm acd885218cbede5385cbbdd72d1c1a09bf892cc84949485ef60949dc135f33dd nodejs-docs-16.16.0-1.el9_0.noarch.rpm f8f6897b9cd5adec9ef29b49baf2fdc0ad181e2a04be3644c423923714e124ed ALSA-2022:6602 Copyright 2022 AlmaLinux OS 0 1 Moderate

gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fix(es): * gpg: Signature spoofing via status line injection (CVE-2022-34903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default gnupg2-smime-2.3.3-2.el9_0.x86_64.rpm 65224d74fe5a665c938f330e9cf9b0fa0b4fa7bafa1c662844973f2e1795fe50 ALSA-2022:6610 Copyright 2022 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918) * kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * RDMA/mlx5: Fix number of allocated XLT entries (BZ#2092270) * mlx5, Setup hanged when run test-route-nexthop-object.sh (BZ#2092535) * many call traces from unchecked MSR access error: WRMSR to 0x199 in amazon i4.32xlarge instance (BZ#2099417) * X86/platform/UV: Kernel Support Fixes for UV5 platform (BZ#2107732) * block layer: fixes for md sync slow and softlockup at blk_mq_sched_dispatch_requests [9.0.0.z] (BZ#2111395) * Fixes for NVMe/TCP dereferences an invalid, non-canonical pointer, kernel panic (BZ#2117755) * Adding missing nvme fix to AlmaLinux-9.1 (BZ#2117756) * nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue) (BZ#2118698) * Important ice bug fixes (BZ#2119290) * Power 9/ppc64le Incorrect Socket(s) & "Core(s) per socket" reported by lscpu command. (BZ#2121719) Enhancement(s): * lscpu does not show all of the support AMX flags (amx_int8, amx_bf16) (BZ#2108203) * ice: Driver Update (BZ#2108204) * iavf: Driver Update (BZ#2119477) * i40e: Driver Update (BZ#2119479) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default kernel-debug-devel-matched-5.14.0-70.26.1.el9_0.x86_64.rpm 04483fdbd17a71eba52b500160f6f847b3fef065d31488f935ed6f0dd0ce1029 kernel-doc-5.14.0-70.26.1.el9_0.noarch.rpm 12911419026cb6b9f2f1901502adcca16d8abb2dcbfb28e39cd07b404b2aebd6 kernel-devel-5.14.0-70.26.1.el9_0.x86_64.rpm 5d08757b500555ec14696549f92481d73c0965077c6557aaa859b922be6721b1 kernel-devel-matched-5.14.0-70.26.1.el9_0.x86_64.rpm a24ece12f739aaec730d7175bd1f2f943a2b9f9ce1abf654d8d67dd7d15bbb43 kernel-debug-devel-5.14.0-70.26.1.el9_0.x86_64.rpm db1b0839f826e560548cb3f2f95ac06f0af214cc39ea18b12085f814e9ad3c4d perf-5.14.0-70.26.1.el9_0.x86_64.rpm f40acfa3ebf489ce5a1bf87b9ebde0083ba31c982de821c02414cf04896ed784 ALSA-2022:6634 Copyright 2022 AlmaLinux OS 0 1 Moderate

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.36.7). Security Fix(es): * webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution (CVE-2022-32893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default webkit2gtk3-devel-2.36.7-1.el9_0.x86_64.rpm 193e4a3d1707cf7189d1725e3683cd1962c711b9cf673b4ebbbe4a33c54a3390 webkit2gtk3-jsc-2.36.7-1.el9_0.i686.rpm 53b79d2f0e86c692f3c14cc8b2f51f8036c5c67053504778da8c361cdf9530bf webkit2gtk3-2.36.7-1.el9_0.i686.rpm 594e706e46c2afd7cee6e8e775c992b2e891fb954ee538ebfa1d90e2c16b6c07 webkit2gtk3-jsc-devel-2.36.7-1.el9_0.i686.rpm 62068e904b37b494ca68507602749d1c10c108eed3d15c5f8b52ac283bbca39c webkit2gtk3-devel-2.36.7-1.el9_0.i686.rpm 6ad0a24cf27f731a5580ea18eff1de61512d24ce6dafaf58f60a94f2de063937 webkit2gtk3-2.36.7-1.el9_0.x86_64.rpm 76dfc21f62311b812859c1874eb43413a80bf7e1b56c1c62dccb0e922d06faa2 webkit2gtk3-jsc-devel-2.36.7-1.el9_0.x86_64.rpm e1d8320f04865869e095fa6b582c9b0490a9e86fb96fe79f46befe9957392146 webkit2gtk3-jsc-2.36.7-1.el9_0.x86_64.rpm f2465f8a5ba88bb59a644e8015109cb086858254b3e14b905fa4bc37cd8ea9b1 ALSA-2022:6700 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.3.0 ESR. Security Fix(es): * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959) * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960) * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962) * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958) * Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956) * Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default firefox-102.3.0-6.el9_0.alma.x86_64.rpm 03372a68bc911fbcbaaccfb5048c565eb04320cab4f887067ce222ed915a444d ALSA-2022:6717 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.3.0. Security Fix(es): * Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag (CVE-2022-3033) * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959) * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960) * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962) * Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked (CVE-2022-3032) * Mozilla: An iframe element in an HTML email could trigger a network request (CVE-2022-3034) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2022-36059) * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958) * Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956) * Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default thunderbird-102.3.0-3.el9_0.alma.x86_64.rpm 909d5cf47f9478342cc1e89d053d12f5603d4488aaf73fc790fbbaa7f10be82d ALSA-2022:6763 Copyright 2022 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080) * bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177) * bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default bind-utils-9.16.23-1.el9_0.1.x86_64.rpm 308098b4314dfa76bb257f01ca30b561b2502a0d257c0ce475bb4e0ab7e84c49 bind-dnssec-doc-9.16.23-1.el9_0.1.noarch.rpm 4088d5438d88486bafd546b5fb2ce066ca0050519d9080299ef4cdd16fb3b279 bind-chroot-9.16.23-1.el9_0.1.x86_64.rpm 877fe5d04389d13997ffab9fdf88a1223f21ffa4cdb27fba87327ea0d164ad1b bind-libs-9.16.23-1.el9_0.1.x86_64.rpm 9412f0058481e9e3ba312e9715e27409bcfa67ba675e9bd8cd18edd4867dbb5e bind-9.16.23-1.el9_0.1.x86_64.rpm acd11f6909b9620744a6bf7d022570fe87b6231cf7634e1b0de654d2cac4632b python3-bind-9.16.23-1.el9_0.1.noarch.rpm b4ab83c8dc85311851f565c3d71ab2af15778c57f1b1216c43ca4c896fcf2d0a bind-dnssec-utils-9.16.23-1.el9_0.1.x86_64.rpm cd48bf05c979cfd84e9d03c340ee46f547e987ad5593a86b61d05eba2c150a59 bind-license-9.16.23-1.el9_0.1.noarch.rpm e745141e636123b205e4d059aa3b57e080a29f58d014d6f6e5ca704d05093e33 ALSA-2022:6838 Copyright 2022 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default expat-devel-2.2.10-12.el9_0.3.x86_64.rpm 15a70a38e8f85e4acdfaffee87d20d4400537215f5f73dcd29de4fa94ef0e1d2 ALSA-2022:6839 Copyright 2022 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default squid-5.2-1.el9_0.2.x86_64.rpm 6250ecd2c1d86fa46a5de752024e115cfba1f03e8e2e280538ff1647f0aa4a23 ALSA-2022:6854 Copyright 2022 AlmaLinux OS 0 1 Moderate

gnutls and nettle security, bug fix, and enhancement update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space. The following packages have been upgraded to a later upstream version: gnutls (3.7.6), nettle (3.8). Security Fix(es): * gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [IBM 9.1] [P10] POWER10 performance enhancements for cryptography: nettle - incremental work (BZ#2102589) * Allow enabling KTLS in AlmaLinux 9.1 (BZ#2108532) * DES-CBC bag is decryptable under FIPS (BZ#2115314) * allow signature verification using RSA keys <2k in FIPS mode (BZ#2119770) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default gnutls-dane-3.7.6-12.el9_0.x86_64.rpm 28e23c3ed7a3fad46a6481d665708ae5a8b2edcfba7207cf6d46a210867d572e gnutls-dane-3.7.6-12.el9_0.i686.rpm 3f88c538c2d491bf6909772104ea7c10a2102e2ea846a636868a5f413ec1b65d gnutls-c++-3.7.6-12.el9_0.x86_64.rpm 3fc271072cdfbcf56aa9c71e2aab0350ddc1d1e0a36a9ec2a5a1f1a72fb02c0f gnutls-c++-3.7.6-12.el9_0.i686.rpm 920fd4a0448ceb734c313950eeeaea6ac63a17df6df766b0fa9ca646f261647a gnutls-utils-3.7.6-12.el9_0.x86_64.rpm af08f245a024f00f907728abfa6a04915b54b4b684ecffdd048823d111434ecb gnutls-devel-3.7.6-12.el9_0.x86_64.rpm bee6f240b93a5c48eeb1734b8a54ba5855b21fba6669db15111e7bc27b06f4c5 gnutls-devel-3.7.6-12.el9_0.i686.rpm cf5a84f274219d9d19a82b27706b411b39bf1db928bf9011ae257e0cc6a4d6c8 ALSA-2022:6913 Copyright 2022 AlmaLinux OS 0 1 Moderate

.NET 6.0 security and bugfix update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.110 and .NET Runtime 6.0.10. Security Fix(es): * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default dotnet-host-6.0.10-1.el9_0.x86_64.rpm 0ddf19437ea65350b602df4f1c64f2eb599932621f1770123df7b9d85d4f932f dotnet-sdk-6.0-6.0.110-1.el9_0.x86_64.rpm 1b14830f8236a3280c50ccaeeb40d02973772a8916d2e81e7af95a8f3fe51e21 netstandard-targeting-pack-2.1-6.0.110-1.el9_0.x86_64.rpm 3caaa3fe4cdbfffbaf7319a8b8a8dcab64d58e504f0409e4172bd4db906f4429 aspnetcore-targeting-pack-6.0-6.0.10-1.el9_0.x86_64.rpm 3d3e46e14ca833e57aa6519bd8f73bef3a41a43c585eec4f6d1766f8dfa22d90 dotnet-hostfxr-6.0-6.0.10-1.el9_0.x86_64.rpm 52522b23f508a115b562435f7e67c909347ef0cb471ef40da375c12e32f4c89d dotnet-apphost-pack-6.0-6.0.10-1.el9_0.x86_64.rpm ad90363ea243e80ab1439ca382bb8aa6fc401cd666cc4c99354ac064c7f176a5 dotnet-templates-6.0-6.0.110-1.el9_0.x86_64.rpm c7d3d196d76689e3316e53b97e27a5faf00435ee2b585c8f74f77f13316aa3c0 dotnet-runtime-6.0-6.0.10-1.el9_0.x86_64.rpm f5e0fac4750cf1b02034e376546432e063dbac2d0bea4471b0efd5426d6fb7a4 dotnet-targeting-pack-6.0-6.0.10-1.el9_0.x86_64.rpm fbbe264d1eb3bbdef72b953442d70d917d46632a92fd655d469c986c800f0d1c aspnetcore-runtime-6.0-6.0.10-1.el9_0.x86_64.rpm fbdee689159d600f611ec33d3897c85e9798f320b790c3c62920ca5ef1510d60 ALSA-2022:6963 Copyright 2022 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.17.1). Security Fix(es): * nodejs: weak randomness in WebCrypto keygen (CVE-2022-35255) * nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default nodejs-docs-16.17.1-1.el9_0.noarch.rpm 025d8cf2ef9c89f70a4254dae5644efaa1dfaa4f88db77dec807afd44515bd8c nodejs-libs-16.17.1-1.el9_0.x86_64.rpm 02b1fa3316afccf54f476e3107a9e856fd01bfa038f620849ebebc6ae5aa9f21 nodejs-full-i18n-16.17.1-1.el9_0.x86_64.rpm 407ab5eeeab8ca27be35d35bea480b4fcdc6ccae79788892fa4bbda5bdcc3bd7 nodejs-16.17.1-1.el9_0.x86_64.rpm 6ef77b8d72a105f2e9a94f0812cb6b02c3499a3889dbb4db20162e5efb2459cd nodejs-libs-16.17.1-1.el9_0.i686.rpm dfc9e65ea6573cc240c0840dad0d3853758223f815f5a887ee6872e0b7eca5a2 npm-8.15.0-1.16.17.1.1.el9_0.x86_64.rpm e00fdc38440c6c0087c25a0e018fd59e078f0a8f7312b3e936d2ebafea798318 ALSA-2022:6999 Copyright 2022 AlmaLinux OS 0 1 Moderate

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618) * OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) * OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619) * OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624) * OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [almalinux-9] (BZ#2132934) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default java-17-openjdk-jmods-17.0.5.0.8-2.el9_0.x86_64.rpm 24f90151c10b15bc1bc360d9ed146830ab99315c1f8a32cc7894587f55fe439b java-17-openjdk-src-17.0.5.0.8-2.el9_0.x86_64.rpm 284a0eb6a4dbfdc55e07c4719be5a1361744f06515ad2eac6b5df050d70f4e9d java-17-openjdk-javadoc-17.0.5.0.8-2.el9_0.x86_64.rpm a82f673482fc9e2b5a4b4d72bad14f1a302d260b5be02dda6d2e9c1b97583a51 java-17-openjdk-static-libs-17.0.5.0.8-2.el9_0.x86_64.rpm ae7c36aa0a795c38681c84a02c1d13700c485531ae050b18682ef5e78f9dc5e7 java-17-openjdk-demo-17.0.5.0.8-2.el9_0.x86_64.rpm afb3e574a52f3e0f69b18347c4d29ee629eb54894a678033b4731d561a2ab693 java-17-openjdk-17.0.5.0.8-2.el9_0.x86_64.rpm bc2c38691faa1336428ffe3413b930cce345540638b68839ef14fed6c5e913dc java-17-openjdk-headless-17.0.5.0.8-2.el9_0.x86_64.rpm e00972dc89c534faf615b612681388161b1e3d5dcdaaff607d5f0f9d8794dd7c java-17-openjdk-devel-17.0.5.0.8-2.el9_0.x86_64.rpm ee0cb8723f0a37821136d0ed0e1f5c7e11b07f69d9941deefb59f49b7f931c1e java-17-openjdk-javadoc-zip-17.0.5.0.8-2.el9_0.x86_64.rpm f8710b0417ee53a5cfa1c28c2e5a90613565a29de4b23c3bedf5fe6cf8f710a6 ALSA-2022:7007 Copyright 2022 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) * OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619) * OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default java-1.8.0-openjdk-javadoc-zip-1.8.0.352.b08-2.el9_0.noarch.rpm 0714bda4f7c43d4248299ccb0595b9d9ccd9eccc742c38214fb935d4e8af98e8 java-1.8.0-openjdk-demo-1.8.0.352.b08-2.el9_0.x86_64.rpm 087274e9cacae1a364063c1bd53842171532a6b2b0cc900580a966497f8c1bc4 java-1.8.0-openjdk-headless-1.8.0.352.b08-2.el9_0.x86_64.rpm 2ca17ec966524bb67c0f2b440a166e35f7e5926c5e275b08e226b9acb891e9eb java-1.8.0-openjdk-src-1.8.0.352.b08-2.el9_0.x86_64.rpm 881d3f6c09cef14c9f8134561292171a34b5c29a3f519010749ee8fd5edb97bc java-1.8.0-openjdk-devel-1.8.0.352.b08-2.el9_0.x86_64.rpm 93ecbcb6fcf8bfbe09eb7b5eb46efb4781b169a41aae4a7c857eb9bfcf28b4e7 java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.x86_64.rpm a8aabf67c3ce258e09f4746b3d99c41902f4a39117da5c39571dbf020521bfac java-1.8.0-openjdk-javadoc-1.8.0.352.b08-2.el9_0.noarch.rpm fbc0ac4bca06e1bc8994469e44bd70533e25c849c92964be80bf998d8e4359a2 ALSA-2022:7013 Copyright 2022 AlmaLinux OS 0 1 Moderate

java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618) * OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) * OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619) * OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624) * OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [almalinux-9] (BZ#2131865) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default java-11-openjdk-src-11.0.17.0.8-2.el9_0.x86_64.rpm 0eeef3cc95633c3bbe0f4a6c13ef8e61b7bb176b83186d6c3521aca4fb350176 java-11-openjdk-javadoc-zip-11.0.17.0.8-2.el9_0.x86_64.rpm 105ebc71a9533c8c7ee2f30507c76326b85ec1b7152229e17afc63a34fb26e8b java-11-openjdk-jmods-11.0.17.0.8-2.el9_0.x86_64.rpm 637b829a09ca63cc6d48036070152efa63dfb560dfa3b590793b84e122d58745 java-11-openjdk-devel-11.0.17.0.8-2.el9_0.x86_64.rpm 8c981403e47510bd544f5ae6697509d62c2bfe2dca52ce53bba9b3a7fbc7a584 java-11-openjdk-javadoc-11.0.17.0.8-2.el9_0.x86_64.rpm aa93ed5f04bf2dc46b22f5ec8fdb9905df032ffec7c33c7b5fa1530f70f5b8f5 java-11-openjdk-headless-11.0.17.0.8-2.el9_0.x86_64.rpm b666e39de9e8d46b970b6f6833ce7ed227f993d9cb37c71c2fcae56bc2c190fb java-11-openjdk-static-libs-11.0.17.0.8-2.el9_0.x86_64.rpm f318a5d5b6d2720048ea484a012edf4b3844b54cf6d7b997e3ddf752932d8b33 java-11-openjdk-demo-11.0.17.0.8-2.el9_0.x86_64.rpm f4f0f196d2eae591fd82c3cd104790b7fafb5d0f7a6eb8d3832aa432ab57eb0b java-11-openjdk-11.0.17.0.8-2.el9_0.x86_64.rpm f92aaae3c091b782a3558f851ae8da592340ac5238ad69f85b7b5682d3e14c8e ALSA-2022:7020 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.3.0 ESR. Security Fix(es): * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default firefox-102.3.0-7.el9_0.alma.x86_64.rpm 7918bd6504766faa724533507a104d6912a62180a2a6380393fbabf95577360f ALSA-2022:7071 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.4.0 ESR. Security Fix(es): * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Memory Corruption in JS Engine (CVE-2022-42928) * Mozilla: Denial of Service via window.print (CVE-2022-42929) * Mozilla: Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4 (CVE-2022-42932) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default firefox-102.4.0-1.el9_0.alma.x86_64.rpm 0fffbe244e9e135638487950960c246e86bd6dd0dbb64495228e3347c1b2719b ALSA-2022:7178 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.4.0. Security Fix(es): * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators (CVE-2022-39249) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack (CVE-2022-39250) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack (CVE-2022-39251) * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Memory Corruption in JS Engine (CVE-2022-42928) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue (CVE-2022-39236) * Mozilla: Denial of Service via window.print (CVE-2022-42929) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4 (CVE-2022-42932) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default thunderbird-102.4.0-1.el9_0.alma.x86_64.rpm 4cb4dbd7f2077edd580257791e7d23c06bdc1324f022611280d48a665aa5c968 ALSA-2022:7288 Copyright 2022 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full strength general purpose cryptography library. Security Fix(es): * OpenSSL: X.509 Email Address Buffer Overflow (CVE-2022-3602) * OpenSSL: X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default openssl-devel-3.0.1-43.el9_0.x86_64.rpm 58d00dd21d0082ef5b326531bbac83f62750c851b00bd815d4fadc32312e3c32 openssl-devel-3.0.1-43.el9_0.i686.rpm 7b665718d60062b134b9ba9b80ad3be9f74c6899e238b8cb387c7bc8733b9fdd openssl-perl-3.0.1-43.el9_0.x86_64.rpm cc87a832f9f9ce4f72056f64febda7318f51c904f06baf930cbff09b508c328d ALSA-2022:7314 Copyright 2022 AlmaLinux OS 0 1 Moderate

zlib security update

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default zlib-devel-1.2.11-32.el9_0.i686.rpm 7aeb04163853e6c1212f944a2b47749d6fc187c41716c21747df46a2aaa7d0a8 ALSA-2022:7318 Copyright 2022 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585) * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095653) * execve exit tracepoint not called (BZ#2106661) * Matrox black screen on VGA output on some systems. (BZ#2112017) * The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2121129) * watchdog BUG: soft lockup - CPU#30 stuck for 34s! [swapper/30:0] (BZ#2127857) * Update cifs to 5.16 (BZ#2127858) * Bad page state in process qemu-kvm pfn:68a74600 (BZ#2127859) * vfio zero page mappings fail after 2M instances (BZ#2128791) * The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (part 2) (BZ#2128970) Enhancement(s): * Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129453) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default kernel-doc-5.14.0-70.30.1.el9_0.noarch.rpm 0bb3d9bfc7a0fc3862ef5f8dc61a994adef7e0c034d6efe9843032ece643b8b7 perf-5.14.0-70.30.1.el9_0.x86_64.rpm 22e84321d666c3779ed6bad2ac17149cbe039df5dab2bee82472877c418ff727 kernel-debug-devel-matched-5.14.0-70.30.1.el9_0.x86_64.rpm 36e24560ed4d7cf0db2f72373d07291dda2c71f03dcf4d0bd14cfea70b316304 kernel-devel-matched-5.14.0-70.30.1.el9_0.x86_64.rpm 447d5f8103762e298af373dd2c5a218f4da890503082afcae79f3d6bf7853746 kernel-headers-5.14.0-70.30.1.el9_0.x86_64.rpm 5a28a7ae57cbd94591f18e0507e3f62933fb0cafe8f7856afb37759ef30e12a8 kernel-debug-devel-5.14.0-70.30.1.el9_0.x86_64.rpm 804e40e943c5e9218e1f78a0d38726733fcf608ed544a2e364a07e9b0c2d0da7 kernel-devel-5.14.0-70.30.1.el9_0.x86_64.rpm b0b3c9edb6511803d3d3bc33cb6cf89d9b0c198a633f92155339c0b3baf9ce3e ALSA-2022:7323 Copyright 2022 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default python3-tkinter-3.9.10-3.el9_0.x86_64.rpm 3f7dd9f9fc2b9ca4dd825a7a0237415b638bb8f2f24493ab45e8d5e56a0cfc2d python-unversioned-command-3.9.10-3.el9_0.noarch.rpm 78e87a3c80853180d4daadc3503e72fc628b08d5282685446fec795339bd949e python3-devel-3.9.10-3.el9_0.x86_64.rpm 912b6e12b85e9a7e1e4e19314c327ec7e1dfe02bcc8837cb3bcdfdc18beb298a ALSA-2022:7326 Copyright 2022 AlmaLinux OS 0 1 Important

pki-core security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default pki-symkey-11.0.6-2.el9_0.x86_64.rpm 16658d8f3f06ab41e1950ff37443508df97a900fdc100a57a459cdcf2190b896 python3-pki-11.0.6-2.el9_0.noarch.rpm 33588e2de71f461b5623c09ff8adfb2b3501e1389cb53e40417c594ee5e76649 pki-kra-11.0.6-2.el9_0.noarch.rpm 3663ecde2b327e6e9f2824d4b2e3ca103e06304c8fd027f61cc26959937ec8d0 pki-base-java-11.0.6-2.el9_0.noarch.rpm 37d249b5772c7b4be85aa3bd4f758feb90df6fbbb2f2ad42c5884784d98e9829 pki-acme-11.0.6-2.el9_0.noarch.rpm 7b1d3aedda9b7ea346d9730a6d7066fa2e1b406b4d9b0a55cb8ccce598d9900c pki-server-11.0.6-2.el9_0.noarch.rpm 81de71c2f5baa1a1a9dfd5835efeb21ec435c73b06c57646f86cd4791c1d620e pki-tools-11.0.6-2.el9_0.x86_64.rpm adbaf75bce96b1010c21d25d810d6223ac67b2749dadc832b6f1d6c5152bd4b6 pki-base-11.0.6-2.el9_0.noarch.rpm b5255a17f14305055a701fa99beabc0fa64becfd31413319cb6f77b7f57d8a7c pki-ca-11.0.6-2.el9_0.noarch.rpm e656727cd48c57a2caa56693717055ad5cc708a1a8bcb2dc3dd86d4fa5897305 ALSA-2022:7329 Copyright 2022 AlmaLinux OS 0 1 Moderate

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling (CVE-2022-33099) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_default lua-5.4.2-4.el9_0.3.x86_64.rpm 159735e62e1ca860a543615bbdc31a8d29770c727d43d963f375c02ceaf5934e ALSA-2022:7950 Copyright 2022 AlmaLinux OS 0 1 Low

Image Builder security, bug fix, and enhancement update

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security Fix(es): * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default weldr-client-35.5-4.el9.x86_64.rpm 89a8ded9a65be524146fd974c00c90628076e2d1f5d49ed4d05827471aa8d285 ALSA-2022:7954 Copyright 2022 AlmaLinux OS 0 1 Moderate

podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension (CVE-2020-28851) * golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852) * podman: podman machine spawns gvproxy with port bound to all IPs (CVE-2021-4024) * podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199) * containers/storage: DoS via malicious image (CVE-2021-20291) * golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197) * golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558) * golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default podman-remote-4.2.0-3.el9.x86_64.rpm 062c9ccb86a61a19a5329ef77f1bfefebb000598f8184cce79319b5e6a3f083d podman-tests-4.2.0-3.el9.x86_64.rpm 2187a3966825943f680f28e7b8754e5bee7086481b3fa1acde23c019f6af33f1 podman-gvproxy-4.2.0-3.el9.x86_64.rpm 3e196031aa15f43dfa10b6fa4098bd490e310be11ffb1fdf19e0691c1a07f183 podman-4.2.0-3.el9.x86_64.rpm 63e81a35373420f3e4b9a9d5fe53b1b13242a44304745f8c259b3e531f88b99b podman-docker-4.2.0-3.el9.noarch.rpm 73f67ab96051535408d365b625b0fe93169751c1b97cae0c9604aa9d9e299591 podman-plugins-4.2.0-3.el9.x86_64.rpm e3f2d1262484d5e51f8994a71f95c7b6e7d58e3ec912626e8fa19502bedad631 ALSA-2022:7955 Copyright 2022 AlmaLinux OS 0 1 Moderate

skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * containers/storage: DoS via malicious image (CVE-2021-20291) * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default skopeo-tests-1.9.2-1.el9.x86_64.rpm a87b1f2060ca200ac3f0d5ad138498a9b25eef381711b840692aeb8b3674b2db skopeo-1.9.2-1.el9.x86_64.rpm b59d268afa40118e3d249231ff900533c8a1d992dc8338db168678acc70a4ec6 ALSA-2022:7958 Copyright 2022 AlmaLinux OS 0 1 Low

libguestfs security, bug fix, and enhancement update

The libguestfs packages contain a library used for accessing and modifying virtual machine disk images. Security Fix(es): * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libguestfs-rsync-1.48.4-2.el9.alma.x86_64.rpm 20cee9158fcebadb28766c4a151835313a653fa6b40a7a6838dc3fb4d6afbdb3 libguestfs-rescue-1.48.4-2.el9.alma.x86_64.rpm 25c2c96c437e126c269b4b5543297d2ae51e49248e5bb7e013b20d6bc7761a27 libguestfs-xfs-1.48.4-2.el9.alma.x86_64.rpm 6c090fa5d077489f789da54b4988eb3fa2039e4dcbcceb3071e8b4e7651e7146 python3-libguestfs-1.48.4-2.el9.alma.x86_64.rpm a10a351fb52910eafe6d6ec25aab5691612d29f8adcc59c9765c4fe0ef94aed1 libguestfs-1.48.4-2.el9.alma.x86_64.rpm ae5c4592aeaa61d6a104bac2297e54a48987658145f2449efa62692d123a964b libguestfs-appliance-1.48.4-2.el9.alma.x86_64.rpm b9d3b015b65552e631cd9c7e5007f4937e660cf323d5018f275dc13cdabfb4b8 perl-Sys-Guestfs-1.48.4-2.el9.alma.x86_64.rpm e592527801cbbdc2ba608b8ecbc1dc6df9e954c9b56d06823f27bf9b5ea695bd libguestfs-inspect-icons-1.48.4-2.el9.alma.noarch.rpm f38562adf153fb78b7c76f54007cf32c4ce191b9b6435f581ee90ad94527fca8 libguestfs-bash-completion-1.48.4-2.el9.alma.noarch.rpm faccb71d666a91ce603f7b7350d7044cb98fbf437ea0599dc6d1ef67dee07c3d ALSA-2022:7959 Copyright 2022 AlmaLinux OS 0 1 Low

guestfs-tools security, bug fix, and enhancement update

guestfs-tools is a set of tools that can be used to make batch configuration changes to guests, get disk used/free statistics, perform backups and guest clones, change registry/UUID/hostname info, build guests from scratch, and much more. Security Fix(es): * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default guestfs-tools-1.48.2-5.el9.x86_64.rpm b3b5afadf6bbc64793e063de621dadc0d6ffa58860f48b3448bddc495613c8f3 virt-win-reg-1.48.2-5.el9.noarch.rpm cc2169b08c202855da33ed07c538af06a1102c453878b9def543e2ac7071e0b7 ALSA-2022:7967 Copyright 2022 AlmaLinux OS 0 1 Moderate

qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a later upstream version: qemu-kvm (7.0.0). (BZ#2064757) Security Fix(es): * QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free (CVE-2021-3750) * QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507) * QEMU: intel-hda: segmentation fault due to stack overflow (CVE-2021-3611) * QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default qemu-kvm-device-display-virtio-gpu-gl-7.0.0-13.el9.x86_64.rpm 1a861b87d94df0bf977e8ff534273dab5d08b3c9a744c0bf4b666564f1b131a1 qemu-kvm-core-7.0.0-13.el9.x86_64.rpm 1e9ae840faffabddc5c08b4a2e845a1791592b23d54566175ba4340f2047b305 qemu-kvm-device-display-virtio-gpu-pci-gl-7.0.0-13.el9.x86_64.rpm 312acf7a7370cadfb3485a956d8e9da3a930b7ea1203aeeb538b2b1e7f5e69da qemu-img-7.0.0-13.el9.x86_64.rpm 340c201aa29b5fbce337e2b775a17344ea928614dabc720154ab7afc7a80243c qemu-kvm-tools-7.0.0-13.el9.x86_64.rpm 55b3d071d03228d5a1728e7db765bba6790525392faf28af2e4cb48fecfb80a1 qemu-pr-helper-7.0.0-13.el9.x86_64.rpm 55dd11f8bd77be4e6f059d355049ecaedb7f0cf2cae5e9d6d0e0231626484d6d qemu-kvm-audio-pa-7.0.0-13.el9.x86_64.rpm 653438168ec12926cecc665f05b492570df50ee48e525e431624ac60d01a66fa qemu-kvm-7.0.0-13.el9.x86_64.rpm 673b2592cb7ebd63fdf94de9ac0985c8fc810953dfcb7d1705800211e65b04e0 qemu-kvm-ui-egl-headless-7.0.0-13.el9.x86_64.rpm 794dc489699907134b22c3b5dde1754c94446a036fa4a94efe64ce37d266696f qemu-kvm-device-display-virtio-vga-gl-7.0.0-13.el9.x86_64.rpm 7d0202836c825c31a3e64bb83de53c3315033c679ca5ef520244fdc85871dcf5 qemu-kvm-device-display-virtio-gpu-pci-7.0.0-13.el9.x86_64.rpm 80f7db372ef9562c5ad218eacbcd7e9a92c60ec43eed769ba1cfd7b5c6f7afe7 qemu-kvm-device-display-virtio-vga-7.0.0-13.el9.x86_64.rpm 895df880eb840be41293fd32f1f34ebde7ffa7f1a04d3081fcf4422bb1483468 qemu-kvm-ui-opengl-7.0.0-13.el9.x86_64.rpm 8fa1a8e85ebd1bd42d569f4bc5e32c499116ac7607ac0cc4cef1662b1b119be1 qemu-kvm-block-rbd-7.0.0-13.el9.x86_64.rpm 97ec11a1b11cf90f3d635cd035002bf9bff4b9b0421a85ff7f7f43a2d909f210 qemu-guest-agent-7.0.0-13.el9.x86_64.rpm 98552fbde46e81fd7c9d04b6f709347b79f0f6813ac2c8db7626ec915970836e qemu-kvm-common-7.0.0-13.el9.x86_64.rpm a1af2b8a492f4d3c58dfd369d433613586cda15b86f6a74a8d7c60ef47ffac87 qemu-kvm-device-display-virtio-gpu-7.0.0-13.el9.x86_64.rpm ae7da58219717a9ae1e61f385f78221191abf01b8d05fd64b554f694e4b03f8e qemu-kvm-device-usb-host-7.0.0-13.el9.x86_64.rpm b3c465d1efe6efb44b2b6ac03f5e5bb97562cc6865648a59acbdd05741165698 qemu-kvm-device-usb-redirect-7.0.0-13.el9.x86_64.rpm e0dc15306707759f289ba52d9a844b47870d84a12b8537e32ea74f886f49c78b qemu-kvm-block-curl-7.0.0-13.el9.x86_64.rpm e4d197f24efe1e1b74d25031e7f2a7fb0d378b8d91ebe13bf880cb5dc35b4cf7 qemu-kvm-docs-7.0.0-13.el9.x86_64.rpm f0b8dd0c8a949119ee98350cbbd2c130e4098225f60ea2a72175e24d8e503bcd ALSA-2022:7968 Copyright 2022 AlmaLinux OS 0 1 Low

virt-v2v security, bug fix, and enhancement update

The virt-v2v package provides a tool for converting virtual machines to use the KVM (Kernel-based Virtual Machine) hypervisor or AlmaLinux Enterprise Virtualization. The tool modifies both the virtual machine image and its associated libvirt metadata. Also, virt-v2v can configure a guest to use VirtIO drivers if possible. Security Fix(es): * libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default virt-v2v-bash-completion-2.0.7-6.el9.noarch.rpm bfdb27ce7a370c9420b91a3871086a8dafc4fe66cbe7057802789ddd1b8b4a4c virt-v2v-2.0.7-6.el9.x86_64.rpm c02ec3509f749ffd8d75711e2c043dfdf5f21171f6e4c94ac967e42ab9a34a67 ALSA-2022:7970 Copyright 2022 AlmaLinux OS 0 1 Moderate

protobuf security update

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data. Security Fix(es): * protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default protobuf-3.14.0-13.el9.i686.rpm 229ee97af928ed3d6289031b321a78f31625db0f09789def78ee90aa73c2cfdf protobuf-lite-3.14.0-13.el9.x86_64.rpm 3f3fc2c59d1f239d1f51aca792c51b739c94ce18f64910d6fdace883d910b0e8 protobuf-3.14.0-13.el9.x86_64.rpm 7a14afb2856a3e311811502057e5dcdfaaa0a933ae834e2d5f1a4247ec2811a9 python3-protobuf-3.14.0-13.el9.noarch.rpm 9a5664787d9851b1758b25d0fb5d278f659b56141b23cce23349fe8c58e7de78 protobuf-lite-3.14.0-13.el9.i686.rpm b0c95f452754192c1576243d34facce86e8825f782e41da679d3a4b55705f20a ALSA-2022:7978 Copyright 2022 AlmaLinux OS 0 1 Moderate

gimp security and enhancement update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: buffer overflow through a crafted XCF file (CVE-2022-30067) * gimp: unhandled exception via a crafted XCF file may lead to DoS (CVE-2022-32990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default gimp-libs-2.99.8-3.el9.x86_64.rpm 63f8f8b2b72f076fa6b2c6052b2960c917a9f88997afdcd0cbfc68151b986628 gimp-2.99.8-3.el9.x86_64.rpm b297b7f02616e8e793df5bff99c4f416e805e8997effc93b7e54beaf59f46a19 gimp-libs-2.99.8-3.el9.i686.rpm e9fc43cd3f4a0d027441300881599f506b924ee2a965293e7f99b751f5a4409c ALSA-2022:7979 Copyright 2022 AlmaLinux OS 0 1 Low

speex security update

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fix(es): * speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default speex-1.2.0-11.el9.x86_64.rpm 227f139537ed1d773c5b0c3719b7ec50414d00d95ce6569e51abec2499ad708c speex-1.2.0-11.el9.i686.rpm e081fe2c1d775d41cbd6dc793411c24d1ce1a8a91a49580f7ab1256542c6f705 ALSA-2022:8003 Copyright 2022 AlmaLinux OS 0 1 Low

libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. The following packages have been upgraded to a later upstream version: libvirt (8.5.0). (BZ#2060313) Security Fix(es): * libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libvirt-daemon-driver-storage-scsi-8.5.0-7.el9_1.x86_64.rpm 07aa8d19b4221091d6e292b29b93928afcd312ee8ffdcb313ae0febf2573ad8f libvirt-daemon-driver-storage-disk-8.5.0-7.el9_1.x86_64.rpm 28aafcb9026f15ef67933599a398ebd6865f49df2964dbbeeab6fe57e881448a libvirt-daemon-config-network-8.5.0-7.el9_1.x86_64.rpm 2d7217aabfbac5bff7906b9e8500e7fc042133c649af45a880f9c81d3e80c94a libvirt-client-8.5.0-7.el9_1.x86_64.rpm 3b4caeea864451af3756f8377ebe562e0945ab5e913a24f52ff8a5af96f167dc libvirt-daemon-driver-storage-rbd-8.5.0-7.el9_1.x86_64.rpm 5113e783a36aa426dd7d1def1b89e779cff010d91266936b641cf11f213f5816 libvirt-daemon-driver-interface-8.5.0-7.el9_1.x86_64.rpm 532ad524f799b981b4bb17f1a9b9770d3987b01d9288f216837b53e18c376afc libvirt-daemon-kvm-8.5.0-7.el9_1.x86_64.rpm 5c52db07ee7ff989281f19ec6ac34eee3708cd54163bc25bc263e7adc984d337 libvirt-daemon-driver-storage-core-8.5.0-7.el9_1.x86_64.rpm 7a90ce72db91b20543bebe37106e5e1ed7f3707bd5ab9e57409dd758364f2ae2 libvirt-daemon-driver-storage-mpath-8.5.0-7.el9_1.x86_64.rpm 7ba56f9ee288a0b3c191faf21882e978ca2ad85e54040d2b5f18ff6427e9af42 libvirt-daemon-8.5.0-7.el9_1.x86_64.rpm 83463cb69ea776104c99780bbbce9bc09b95913d85608a2769777da7c90b7ac2 libvirt-daemon-driver-nodedev-8.5.0-7.el9_1.x86_64.rpm 901a6bca225ae9783def323e0ed26e67528e5fe3e6c95cb356063312765f3c50 libvirt-8.5.0-7.el9_1.x86_64.rpm 93ce1fb97fe9ee1484d148712ed6d8ff95d60bb0d6693aa9a7d8e5716525177f libvirt-daemon-driver-storage-logical-8.5.0-7.el9_1.x86_64.rpm a80099f94fff83276a963a146c3b93d8c1e8fce0767d0dc41c226d6267017edc libvirt-daemon-config-nwfilter-8.5.0-7.el9_1.x86_64.rpm bbc2beb796d0c2ecf7bc99cc67bc704887824e2b91db25031b09a4eb874e054b libvirt-nss-8.5.0-7.el9_1.x86_64.rpm bc3acd3680f15a8c04d21edb2567c7be906fa871d119be46c64c54700d5d280f libvirt-daemon-driver-qemu-8.5.0-7.el9_1.x86_64.rpm bdc63f319589cfa67a2dd49370be79b221a5b7a89b729cbe4fb3d5acd9d91f75 libvirt-daemon-driver-secret-8.5.0-7.el9_1.x86_64.rpm bf67ad2b05a22d72e6472d32abaac53a4531ec6212a19bbeeed923b5fdae7b4b libvirt-daemon-driver-storage-8.5.0-7.el9_1.x86_64.rpm cabe1d17a646cb2f8d21f6b9f4f9c221f4dd326de8bcd8e56854fd7207c3ecf9 libvirt-daemon-driver-network-8.5.0-7.el9_1.x86_64.rpm db61060044228b90fbc1a7f03b99432c15509fe92ff236f860020ad259a43d5f libvirt-daemon-driver-storage-iscsi-8.5.0-7.el9_1.x86_64.rpm e2b5c26289cbc4105b1c62c184bd739551c645e94364f580cf52d5731d7f6da3 libvirt-daemon-driver-nwfilter-8.5.0-7.el9_1.x86_64.rpm f0dcdbd41824b9ae17c431fb92d903ce67449ea021889eb0432473ec68f4862e libvirt-libs-8.5.0-7.el9_1.x86_64.rpm f9f0ec5753db713bfb25b8b11aea9c80314d61a110c18f5482712eb4e17e9538 ALSA-2022:8008 Copyright 2022 AlmaLinux OS 0 1 Moderate

buildah security and bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * containers/storage: DoS via malicious image (CVE-2021-20291) * golang: net: lookup functions may return invalid host names (CVE-2021-33195) * golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197) * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198) * golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191) * podman: possible information disclosure and modification (CVE-2022-2989) * buildah: possible information disclosure and modification (CVE-2022-2990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default buildah-tests-1.27.0-2.el9.x86_64.rpm 8d9e70cc300ec5ac6a19ca8d25b4dfcd65e812a7bfa9f45bfb99c1bbae3cf32d buildah-1.27.0-2.el9.x86_64.rpm 9af910b67ac6a98bdab25324d1de280fa0eb355d96c41d5c9a8bfa27b65aad6f ALSA-2022:8011 Copyright 2022 AlmaLinux OS 0 1 Moderate

fribidi security update

FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order. Security Fix(es): * fribidi: Stack based buffer overflow (CVE-2022-25308) * fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309) * fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default fribidi-devel-1.0.10-6.el9.2.i686.rpm 3f5e63cdc922a7f3170c0388a468f598e6b514e94a408f295f971c93c1f57bb3 fribidi-1.0.10-6.el9.2.i686.rpm 75f808f0f5f93aceb4e477aa5f302edbed07a605a0644f0ea929d4ea609e36a0 fribidi-1.0.10-6.el9.2.x86_64.rpm b4763ca410f8479b2775efb55ba09e6722948af7526180a56309e3e090c27010 fribidi-devel-1.0.10-6.el9.2.x86_64.rpm e25eb68a0a64e26411a270c935c08d2121a51c8f17a7926508ad9e631b009437 ALSA-2022:8022 Copyright 2022 AlmaLinux OS 0 1 Moderate

qt5 security and bug fix update

The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework. Security Fix(es): * qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default qt5-5.15.3-1.el9.noarch.rpm 157264758e66fa294f4e8fc848664c03237961fe8272d6bbcddd4c87ecbced95 qt5-srpm-macros-5.15.3-1.el9.noarch.rpm 268bac6491abd68d7e65589de21a8e350d1b1bcbb01a9dde4b0bc6660431a11f qt5-rpm-macros-5.15.3-1.el9.noarch.rpm 406cf593d00751d08056abf83db867e73108cbce98d2dd78713ac925b39a9fe4 ALSA-2022:8054 Copyright 2022 AlmaLinux OS 0 1 Moderate

webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22628) * webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629) * webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26709) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26710) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26716) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26717) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26719) * webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution (CVE-2022-30293) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default webkit2gtk3-devel-2.36.7-1.el9.x86_64.rpm 137e54927a5dc1bab36fad7ee977776ad3175ba0a5fdea4889101a88a36ef162 webkit2gtk3-jsc-devel-2.36.7-1.el9.i686.rpm 1a07aa0165708036b83b1d45135516e570e49291f000707c0c31e34be451a1cc webkit2gtk3-devel-2.36.7-1.el9.i686.rpm 300944cf3f28f92bdd5a4cc8b929d500955ea72f5cedf7472d6fb869aeb7957a webkit2gtk3-jsc-2.36.7-1.el9.x86_64.rpm 5cca81135482f3bf75cc7ce10ea52ff2cf6b95685928865a680478fce7a1ca66 webkit2gtk3-jsc-2.36.7-1.el9.i686.rpm 683793f45d2ba871f1ec07b5f428a2ce2bcfdd7150991da1392b2e09915a6568 webkit2gtk3-2.36.7-1.el9.i686.rpm 6a548cfe16e0874766f736e60d5ab126ef7a343dbaf1e23649b491ec01335ca6 webkit2gtk3-jsc-devel-2.36.7-1.el9.x86_64.rpm 73d45c0262ae990849c5ad37959e594fc4539ea3396faec4eae63f3428e748ff webkit2gtk3-2.36.7-1.el9.x86_64.rpm d5fa74977313f7367ac876b58fecd35bf6bb152317fc78ee2e5a69f3cda91d93 ALSA-2022:8057 Copyright 2022 AlmaLinux OS 0 1 Important

grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have been upgraded to a later upstream version: grafana (7.5.15). (BZ#2055349) Security Fix(es): * sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648) * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962) * grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673) * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698) * grafana: XSS vulnerability in data source handling (CVE-2022-21702) * grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703) * grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713) * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default grafana-7.5.15-3.el9.x86_64.rpm 75818051cdc8cd82022cc76eb10cc313143ffcd6285a34fb0cbbba8cc8482733 ALSA-2022:8062 Copyright 2022 AlmaLinux OS 0 1 Moderate

unbound security, bug fix, and enhancement update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. The following packages have been upgraded to a later upstream version: unbound (1.16.2). (BZ#2087120) Security Fix(es): * unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30698) * unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30699) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default python3-unbound-1.16.2-2.el9.x86_64.rpm 568d43871557889acb78c2b7b3d441cb4a663e95d06186e6ad6a7f5b80429eaa unbound-libs-1.16.2-2.el9.x86_64.rpm 81028273f1fb4a72e23cf051e776b150dc10dbcea85c107376e1887a8ea05d82 unbound-libs-1.16.2-2.el9.i686.rpm 8b7ef8c88e5a4bcd778a165404a4a7234544fdd1d452dd341322836be1db6632 unbound-1.16.2-2.el9.x86_64.rpm c641d75900cc79129dabd175d6bc95e98084073a29c5c132739aaec7b45fd05d ALSA-2022:8067 Copyright 2022 AlmaLinux OS 0 1 Moderate

httpd security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following packages have been upgraded to a later upstream version: httpd (2.4.53). (BZ#2079939) Security Fix(es): * httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943) * httpd: mod_lua: Use of uninitialized value of in r:parsebody (CVE-2022-22719) * httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (CVE-2022-22721) * httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-26377) * httpd: mod_lua: DoS in r:parsebody (CVE-2022-29404) * httpd: mod_sed: DoS vulnerability (CVE-2022-30522) * httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism (CVE-2022-31813) * httpd: Out-of-bounds read via ap_rwrite() (CVE-2022-28614) * httpd: Out-of-bounds read in ap_strcmp_match() (CVE-2022-28615) * httpd: mod_lua: Information disclosure with websockets (CVE-2022-30556) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default httpd-manual-2.4.53-7.el9.noarch.rpm 16046de23e78b6ad29d370f55f942cde4a132a036d4ddf55c0e9f1c975292dab mod_ldap-2.4.53-7.el9.x86_64.rpm 1d768470ee0b684bb371c48e4a08cb57a2cad6e18e15e8311f3b008d6b5a731b mod_lua-2.4.53-7.el9.x86_64.rpm 379a0956cc0fe1c5194d693f3095cf3fd9fd979fe24aea4a7acd1a0e205b1402 mod_proxy_html-2.4.53-7.el9.x86_64.rpm 4572ce2f68cca9fee4aae10651afe66125bd82452642baa23cbda443e4125dce httpd-tools-2.4.53-7.el9.x86_64.rpm 5229ff1b43c85d85bd12caae9194ba82f648f6e0eb904d42e8b4c4bfe3a51c84 httpd-filesystem-2.4.53-7.el9.noarch.rpm 61226547b629d1bfe902193c7322ef89e09039ac4017036efa0b678183f622e5 mod_session-2.4.53-7.el9.x86_64.rpm 7f858131c90dffffba64ebe7e95ae8f9133aafb6b240b64d9c6b40d481cf5b0e httpd-core-2.4.53-7.el9.x86_64.rpm 8bd3309014597b425084becc759adc2e6a8e4d8dab2fa30ef206e53d6259b402 httpd-2.4.53-7.el9.x86_64.rpm b0e9c1537e81bb660d9d09acf75c251728e3df00a34bb22e76a3ba5c11ae47eb mod_ssl-2.4.53-7.el9.x86_64.rpm d51c579050899c43db707a4d58ca7e2237d6346e1d85850ca4a5c6b2dc2dbe88 httpd-devel-2.4.53-7.el9.x86_64.rpm e860bea409f970bff70a176a02720e4167ef6b2f2c61f870f04deaa24006f0f8 ALSA-2022:8068 Copyright 2022 AlmaLinux OS 0 1 Moderate

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220) * bind: DoS from specifically crafted TCP packets (CVE-2022-0396) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default bind-chroot-9.16.23-5.el9_1.x86_64.rpm 0c082dd36846d968a38e7c1de854ee757e0803299f1a8c72bcda49c81d80b13f bind-libs-9.16.23-5.el9_1.x86_64.rpm 1aecc9a12951b98962537efc88a7397cf25d1cdebe1395645e7450d7f8122439 bind-dnssec-utils-9.16.23-5.el9_1.x86_64.rpm 1dc98db569febbd6c4cb9e786168bc301d47d1de996856ea1e577516c8e9f5c4 bind-9.16.23-5.el9_1.x86_64.rpm 23d3ba50d84ed4dcf408541ee4ca30d9b6f37d9bf902deae1b20a3bd50908e67 bind-license-9.16.23-5.el9_1.noarch.rpm 35a7b5250c384e91ad0454725bd35261a045894999abdd382156a2af6e129c85 bind-utils-9.16.23-5.el9_1.x86_64.rpm 4c21774389ba828eaed839b6ddd5b233f9f091be9a0541ea55227c64d96e7d32 python3-bind-9.16.23-5.el9_1.noarch.rpm 7249a979c703ad386459d7ef0d5d8095939477f9ac9d35d94b81bd6ff668b8af bind-dnssec-doc-9.16.23-5.el9_1.noarch.rpm f0f9ba6fa4d79ec478f9fa0262896af005081cad8190cad5e4c975a8431f20b7 ALSA-2022:8070 Copyright 2022 AlmaLinux OS 0 1 Moderate

dnsmasq security and bug fix update

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default dnsmasq-utils-2.85-5.el9.x86_64.rpm de0b95d8cc27945e4134a49506def0763c6a1972ee7c70a51fa9563844c4b367 dnsmasq-2.85-5.el9.x86_64.rpm f465b75549e6ffbe3baa1643a4c6d0b28f996baabef0473b15e97b4cd872420b ALSA-2022:8078 Copyright 2022 AlmaLinux OS 0 1 Moderate

flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files. Security Fix(es): * flac: out of bound write in append_to_verify_fifo_interleaved_ of stream_encoder.c (CVE-2021-0561) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default flac-libs-1.3.3-10.el9.i686.rpm 00b54a4f6fca2f0f802cdbf6aff57cdc803fc1dedb0012e4b2e0f83a2d80b343 flac-libs-1.3.3-10.el9.x86_64.rpm 9fc3e1faee52ee61f0189d143bcde3ea9914b2486f53588b7cbbf6c0bde75275 ALSA-2022:8090 Copyright 2022 AlmaLinux OS 0 1 Low

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * runc: incorrect handling of inheritable capabilities (CVE-2022-29162) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default runc-1.1.4-1.el9.x86_64.rpm b1376c394dcbd1a723c34056801914324fcd4f49bdebff2bf9d71e72e0bac6f2 ALSA-2022:8096 Copyright 2022 AlmaLinux OS 0 1 Low

redis security and bug fix update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Code injection via Lua script execution environment (CVE-2022-24735) * redis: Malformed Lua script can crash Redis (CVE-2022-24736) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default redis-doc-6.2.7-1.el9.noarch.rpm 142f8f9a73b8b4e8f94dd2bd4a7cde5f54880fe6e5dd1a54ec5c41a6bd33ac58 redis-6.2.7-1.el9.x86_64.rpm 57a9f6a8531b7d443cba4c73032962da474d5cbc35e93ca9ab28929c32c45c68 redis-devel-6.2.7-1.el9.x86_64.rpm 61d0783787f472866d8adf69d7ceeb80bba0f42165675efedf4f2d22bada5f9c redis-devel-6.2.7-1.el9.i686.rpm 7aa3e793576437268a42d168c4febef9a03d425b0d5375e0d73f189024e16528 ALSA-2022:8098 Copyright 2022 AlmaLinux OS 0 1 Moderate

toolbox security and bug fix update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default toolbox-tests-0.0.99.3-5.el9.x86_64.rpm 87a82a8017d67c56e751dcf9f216f2203fafb1650ae3f94cbe58b0c02e106287 toolbox-0.0.99.3-5.el9.x86_64.rpm e03ca338e92ceaa677c403e2d45021d711a1d132a5e019a4bfe24824e4985315 ALSA-2022:8100 Copyright 2022 AlmaLinux OS 0 1 Low

swtpm security and bug fix update

SWTPM is a TPM emulator built on libtpms providing TPM functionality for QEMU VMs. Security Fix(es): * swtpm: Unchecked header size indicator against expected size (CVE-2022-23645) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default swtpm-tools-0.7.0-3.20211109gitb79fd91.el9.x86_64.rpm 6208371bb6f46047ec02f39ef890f088752ad6fa425f32fe4c2913571052db98 swtpm-libs-0.7.0-3.20211109gitb79fd91.el9.x86_64.rpm 94ad1db90b60a3fc16c95c5d17ab8a384e9d3498436f3ede3f8ad892e64eefff swtpm-0.7.0-3.20211109gitb79fd91.el9.x86_64.rpm b5aa5e41ebf345c2c5991d6d00de5a6313f8ebf4dd6f6d7264fa979a779d6df0 ALSA-2022:8112 Copyright 2022 AlmaLinux OS 0 1 Moderate

frr security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. The following packages have been upgraded to a later upstream version: frr (8.2.2). (BZ#2069563) Security Fix(es): * frrouting: overflow bugs in unpack_tlv_router_cap (CVE-2022-26125) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default frr-8.2.2-4.el9.x86_64.rpm c65c32eade3383a20ab10e29ebb9da0e29f550cd7d42068776f817a43a0c2576 ALSA-2022:8126 Copyright 2022 AlmaLinux OS 0 1 Moderate

ignition security, bug fix, and enhancement update

Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration. The following packages have been upgraded to a later upstream version: ignition (2.14.0). (BZ#2090647) Security Fix(es): * ignition: configs are accessible from unprivileged containers in VMs running on VMware products (CVE-2022-1706) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default ignition-2.14.0-1.el9.x86_64.rpm 6e20f4a1374a8e2129789d350c5fedc5155e972de05362c6fb1ecbd6a298a092 ALSA-2022:8139 Copyright 2022 AlmaLinux OS 0 1 Low

wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fix(es): * wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default wavpack-5.4.0-5.el9.i686.rpm 858d8163497a415f7d9d7404dbbd0a5d014267c8c5198a2f18bf4fc03069e38a wavpack-5.4.0-5.el9.x86_64.rpm e894da5d56143a1b6354811cc4d1c1baff37ef25857c6b268589e621cdae6f61 ALSA-2022:8151 Copyright 2022 AlmaLinux OS 0 1 Moderate

poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default poppler-cpp-21.01.0-13.el9.i686.rpm 006b812b9ddbfef56c86b4ae53e0f511100484262fce60be1b076e5e02f4b6c9 poppler-cpp-21.01.0-13.el9.x86_64.rpm 370c6c645d8a205d3d101d09d76ed28b3daf698975bb60353b29a9923e3192b8 poppler-utils-21.01.0-13.el9.x86_64.rpm 87d9f54b28ffa02fe60714898af95766bb54a2e238547b029c0e9510f689e893 poppler-glib-21.01.0-13.el9.x86_64.rpm 929e5561323b35199d27d080e7101f7bc7454b90ca0776a8d8556e6bb1069bfc poppler-21.01.0-13.el9.i686.rpm 9d6ed678a90546993ee346e046061e5e90b2ceefdbb9386af7c0ba673c846e95 poppler-21.01.0-13.el9.x86_64.rpm 9e10ddeca464a6a704892c1dca8b6a5672df95e67c6618b9f99079f24b012200 poppler-qt5-21.01.0-13.el9.i686.rpm b7163941c3c4795255a02dc8c3231adca46125e4db26185eba19839a7767cb5f poppler-glib-21.01.0-13.el9.i686.rpm ce1e806463f472af4b696a5e0bee333533d924c4ddcb17b5c18666e21589cc5e poppler-qt5-21.01.0-13.el9.x86_64.rpm f42420f9e4ceb2daa441ccaca83b9b9bbf24040253c78e33b043401befc8cb15 ALSA-2022:8162 Copyright 2022 AlmaLinux OS 0 1 Moderate

389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801) Security Fix(es): * 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918) * 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850) * 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default 389-ds-base-libs-2.1.3-4.el9_1.x86_64.rpm 39b9508d2df3d7207c27024048b34b1b6c7e18e8423bb94a1ade8b6c94cd8e82 python3-lib389-2.1.3-4.el9_1.noarch.rpm cfe6a2e6540b9a9d7046536d24a4a25cad66d232402fdb5e9951d205ecf04c6f 389-ds-base-2.1.3-4.el9_1.x86_64.rpm e95ddc672e86cf19aed9ad7895299a08cddfe72ccb4c3778c76dea5d6b61fe4b ALSA-2022:8194 Copyright 2022 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561) * libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562) * libtiff: reachable assertion (CVE-2022-0865) * libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924) * libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355) * libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844) * libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891) * tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908) * tiff: Divide By Zero error in tiffcrop (CVE-2022-0909) * libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c (CVE-2022-1354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libtiff-devel-4.4.0-2.el9.x86_64.rpm 27ffcbb49538d7b859fe61d7c0018c6f39892abcb5053aa0e4a5c501a6ec03f6 libtiff-4.4.0-2.el9.i686.rpm 73edb77eac7e0cd7b17ef7391d71830f3626fe46b45d6e80dd523bac0d5c1214 libtiff-4.4.0-2.el9.x86_64.rpm bb61a3b295aaff840a6d6ecfc2c34c60d1debcb3c14ab4ae44bc75b444ae99c8 libtiff-devel-4.4.0-2.el9.i686.rpm cd4bc038da6d3d148844eb2d3f7eb43eb11a82fb77a310281660c5817311a502 ALSA-2022:8197 Copyright 2022 AlmaLinux OS 0 1 Moderate

php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.0.20). (BZ#2095752) Security Fix(es): * php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708) * php: Uninitialized array in pg_query_params() leading to RCE (CVE-2022-31625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default php-mbstring-8.0.20-3.el9.x86_64.rpm 0664c083cbf051a773b0a111b1192d648181f07e798714192b85b6cce0e1df5f php-common-8.0.20-3.el9.x86_64.rpm 0e78df2d06c3ad834a387f3da23cfe2c3224598bca945350e0e0d26a82b7289e php-8.0.20-3.el9.x86_64.rpm 23f4542671c9b2ec9f9ab79dedf396f930d50a84a5539d57cfb1298158dccdb0 php-pgsql-8.0.20-3.el9.x86_64.rpm 3be617077523391fc169a829ab5fe62c75a8546bd4605cc1dd6b9e5d808c4933 php-embedded-8.0.20-3.el9.x86_64.rpm 432f87a82e79ab4617e95f85a5ce1c3cf4b42e8b6abe32c18341008b1556b199 php-ffi-8.0.20-3.el9.x86_64.rpm 48dabbd3bbfb6e872175bf16aa34f85be98e106591b86504081b93f0c8eb29e7 php-dbg-8.0.20-3.el9.x86_64.rpm 498e8ad6db610cb92ff2c2887bd073b7e41dffb094c2bf35afa28d2827d218e0 php-devel-8.0.20-3.el9.x86_64.rpm 4e5045faf940a16616b21465d8d62f1e70b182a4249e1f2bc338e9cc9c3d074b php-enchant-8.0.20-3.el9.x86_64.rpm 5c1f07f963048fb3056516300fe2bfecf448528cd8c3d2d328a785965abf938d php-mysqlnd-8.0.20-3.el9.x86_64.rpm 716f0674eccc17da55b084cbfd31d96f514049ed6695a108153038d3e7742d55 php-xml-8.0.20-3.el9.x86_64.rpm 7cca49637e19d35d10c2a8942386d9420b2334e59c2c210ac75445377e9ff1b2 php-fpm-8.0.20-3.el9.x86_64.rpm 85f76be4f74398b15b9564ffa8d8536bbe79f2d2f413e2aa1de5d35e12ae7713 php-pdo-8.0.20-3.el9.x86_64.rpm 9116897d2aba32fc1a086d8fb09d106bce1ec8748ec4e5becaef18efbc544e3c php-snmp-8.0.20-3.el9.x86_64.rpm 997a8542ca8b0e758d548b08d6c79d7b2133a4e4b96a42455ecf768f3dffb2cd php-ldap-8.0.20-3.el9.x86_64.rpm abfe84e358d236f818542c5ef751a631fa23d291f172715365c6af79e415c375 php-gmp-8.0.20-3.el9.x86_64.rpm b3a8c0d17d25f2de8383c564d3bc6ed1c2cd28e686ad3e56995df7773f67ad44 php-dba-8.0.20-3.el9.x86_64.rpm ce5e1dc749169c64524e998c647a83207ac640a8aa602ba60ae8c2263291208f php-intl-8.0.20-3.el9.x86_64.rpm cf8aab0cb7592c3097fe0a356f593be24e7c4ef601b0ec50a727f03a3b006196 php-bcmath-8.0.20-3.el9.x86_64.rpm cf943ce8233f64a0ed41ef1cbc4055064d898e6ee8a5351234109d8e2828901c php-odbc-8.0.20-3.el9.x86_64.rpm cfbb133859fedc3706814f57a296f67b75de255144f8ed615cce5b14154f47a1 php-gd-8.0.20-3.el9.x86_64.rpm d01c1fead48acbf392f3170b0bbecdcab7db1b235debe0637e3a8b86f6f4ad3b php-cli-8.0.20-3.el9.x86_64.rpm e54051d486c13a69b3c0db51ac3eb24c9b2f782d0c5b6862227486099289e265 php-soap-8.0.20-3.el9.x86_64.rpm e8fb6e9a68d6c63a89aeaa8a0e2678e4645dd5a0fc3dcc71c386295e7e121234 php-process-8.0.20-3.el9.x86_64.rpm f41e75e897f612013082d7ab3cdb3eff65414589f78dcba3828d49d24c6e6ca1 php-opcache-8.0.20-3.el9.x86_64.rpm f5f95cf9c44140258cce8ebd9ce5df495c4395fbdb27d37c980b5ef7c87f8731 ALSA-2022:8207 Copyright 2022 AlmaLinux OS 0 1 Low

openjpeg2 security update

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. Security Fix(es): * openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default openjpeg2-2.4.0-7.el9.i686.rpm 3e0a6d8af9d594c421dcee94308901cab5c7f19bbf43fa2c8f30571b95104469 openjpeg2-2.4.0-7.el9.x86_64.rpm ede5a4de964160e21345d5ae01cde21d3ae13cf2236138e7f83f0300b0a3d551 ALSA-2022:8208 Copyright 2022 AlmaLinux OS 0 1 Moderate

dovecot security and enhancement update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default dovecot-pgsql-2.3.16-7.el9.x86_64.rpm 0f7fb793883ac6c0be2309155ad4db4f5b13d7dd5ac44e9e952152019d243473 dovecot-mysql-2.3.16-7.el9.x86_64.rpm 2dbcf2225d36573530af08aa17482c4916f581bf4f32dca4f486aeb122ae3369 dovecot-pigeonhole-2.3.16-7.el9.x86_64.rpm afb1aeacf2683043a5ed95773d4544ceedc9b93e46d1f37ccee5bbcc44be282c dovecot-2.3.16-7.el9.x86_64.rpm b2b161d01c853284dc9b4ca1cac329938ac8e8d09a1a3b11e7dfd3f1ba4d1c50 ALSA-2022:8219 Copyright 2022 AlmaLinux OS 0 1 Moderate

mutt security update

Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP. Security Fix(es): * mutt: buffer overflow in uudecoder function (CVE-2022-1328) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default mutt-2.2.6-1.el9.x86_64.rpm 986df17bf9368f22d92d9c52f3d6d4fe633753820fcf9732036684c118832069 ALSA-2022:8221 Copyright 2022 AlmaLinux OS 0 1 Moderate

xorg-x11-server security and bug fix update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319) * xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default xorg-x11-server-Xdmx-1.20.11-11.el9.x86_64.rpm 0c1bfbc4545e4e2a609f78300355a355fa2c42ffd2ed34dbff38bbc52a4873dc xorg-x11-server-common-1.20.11-11.el9.x86_64.rpm 2fa3b1261fca5806e5a0203fc20d9f2c7f49197a7b0473001e2fcfb26a5a510e xorg-x11-server-Xvfb-1.20.11-11.el9.x86_64.rpm 4d43f24366e578adc600165abbb14546ca595794b45b86b4c8dafd2bfeeff364 xorg-x11-server-Xephyr-1.20.11-11.el9.x86_64.rpm 80a17b8ec85deca5389f7e03f97a8e6a41f1512c9ae946e8264ae9903b54a6d1 xorg-x11-server-Xnest-1.20.11-11.el9.x86_64.rpm 8edac3262266bc0c69092efaba3b9637ebf8f31d85e3f233c2e1bbbc690f34fa xorg-x11-server-Xorg-1.20.11-11.el9.x86_64.rpm d76c9c911f45648d3b20407cd98f3ead34701d4470860922865b19e75a2eb1f2 ALSA-2022:8222 Copyright 2022 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319) * xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default xorg-x11-server-Xwayland-21.1.3-3.el9.x86_64.rpm 27874991fce778378d14a1a31d24e8875e801cd028e3ba52c52c3870bceef05e ALSA-2022:8226 Copyright 2022 AlmaLinux OS 0 1 Moderate

python-lxml security update

lxml is an XML processing library providing access to libxml2 and libxslt libraries using the Python ElementTree API. Security Fix(es): * lxml: NULL Pointer Dereference in lxml (CVE-2022-2309) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default python3-lxml-4.6.5-3.el9.x86_64.rpm 8757b7d22e766770b3a70f35f0cd398efb434b3f2ba0541145193949a250b151 ALSA-2022:8250 Copyright 2022 AlmaLinux OS 0 1 Moderate

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default grafana-pcp-3.2.0-3.el9.x86_64.rpm e15a7b876ccef351315221d600cfee655fc871a6cd4fcc1a7d681f949c850631 ALSA-2022:8252 Copyright 2022 AlmaLinux OS 0 1 Moderate

yajl security update

Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator. Security Fix(es): * yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default yajl-2.1.0-21.el9.x86_64.rpm 3f7a315389d0f075b2e8b77ef6346d80563122beb2216e4323e6d260ae129790 ALSA-2022:8263 Copyright 2022 AlmaLinux OS 0 1 Important

dpdk security and bug fix update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix(es): * dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132) * DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash (CVE-2021-3839) * dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service (CVE-2022-28199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default dpdk-doc-21.11.2-1.el9_1.noarch.rpm 3768ef5a8828584af12e2b46400a3648163865d74514a1a5f6e16212a23eccea dpdk-tools-21.11.2-1.el9_1.x86_64.rpm 39f91f1284f08f56d17c1f1e2c7b1d677844a30c5a129a34a4552564c81b7e9a dpdk-21.11.2-1.el9_1.x86_64.rpm 4148a8b8a97836a173e6ca4ffde1f494072a46693a3507f34f850a0717ad4e6c dpdk-devel-21.11.2-1.el9_1.x86_64.rpm 61db799c74e45ac1995264ff76d7c7feb031b10eb15c2a55897c2e0c2a1eb9e5 ALSA-2022:8267 Copyright 2022 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516) * use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640) * smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168) * NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617) * swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854) * uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016) * race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048) * use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184) * concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280) * kernel info leak issue in pfkey_register (CVE-2022-1353) * use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679) * NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852) * fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998) * nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586) * integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639) * slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368) * incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123) * incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125) * incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166) * possible to use the debugger to write zero into a location of choice (CVE-2022-21499) * AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900) * AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825) * Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373) * double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390) * use after free in SUNRPC subsystem (CVE-2022-28893) * use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581) * Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901) * DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946) * nf_tables disallow binding to already bound chain (CVE-2022-39190) * nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default kernel-headers-5.14.0-162.6.1.el9_1.x86_64.rpm 13ebcde722dcfa99819004d45e01940e53e90becd0fd8b2dc7ff02f0d4faae2e kernel-doc-5.14.0-162.6.1.el9_1.noarch.rpm 242aafffb0039e10a1b81169569833632199da11ac1f0616c3db4abf7b37d200 kernel-debug-devel-5.14.0-162.6.1.el9_1.x86_64.rpm 991636532b824652e575f19b5fc95c8018c4a0eb34ff9694ea7eb3c872df4be7 kernel-debug-devel-matched-5.14.0-162.6.1.el9_1.x86_64.rpm a442692d861f4b2583e5b8656933179aefbf8d7415b662d20ce500ad437fa901 kernel-devel-5.14.0-162.6.1.el9_1.x86_64.rpm ac3939536dac84216f19b4a688449b092c5451b48ab6e6f2bc7cd073db91acf2 kernel-devel-matched-5.14.0-162.6.1.el9_1.x86_64.rpm beff53e4ce88ecb0fdef9e68220d90ea601ae88b597797881f816257866c979d perf-5.14.0-162.6.1.el9_1.x86_64.rpm e7991e160373f532e7a217488f8dc80c00d7052b9bf3576a817084f7bcd4937d ALSA-2022:8291 Copyright 2022 AlmaLinux OS 0 1 Moderate

rsync security and bug fix update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default rsync-daemon-3.2.3-18.el9.noarch.rpm 1b7b8d0f1db62a381e9185eebd1de7e50598cff114744e8b9f5608fc7689b231 ALSA-2022:8299 Copyright 2022 AlmaLinux OS 0 1 Low

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: bad local IPv6 connection reuse (CVE-2022-27775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libcurl-devel-7.76.1-19.el9.x86_64.rpm 8ffe12dc519f1d2f032b839a84f4a20a19c6e053fd60bf3d0ba47afa17ac039e libcurl-devel-7.76.1-19.el9.i686.rpm f2f5b39276a1eccabb865165f3c111bb62df414603f093f3465a260440c581ab ALSA-2022:8317 Copyright 2022 AlmaLinux OS 0 1 Moderate

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.16.4). (BZ#2077487) Security Fix(es): * samba: server memory information leak via SMB1 (CVE-2022-32742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default samba-client-4.16.4-101.el9.x86_64.rpm 16b378ad2c5b6871b296a885a045f8809b71b215c002c745adc49a8b35f87169 samba-krb5-printing-4.16.4-101.el9.x86_64.rpm 7f1a3f536d8630c38fa16d9304abb25b5a5d0cf58fe0db320946ebcfafabc96d samba-winbind-clients-4.16.4-101.el9.x86_64.rpm 99ec2e0f9fd04ed5cf11f17481d38eff50d87b5373ccef77a5e632c319d79d3f samba-winexe-4.16.4-101.el9.x86_64.rpm c9899f7bd2af8f889c480d1135732cf2f65b7a3501343ce89e65802a4ca5ae4f samba-vfs-iouring-4.16.4-101.el9.x86_64.rpm e8b02191f0fdd8a13e0e30ee49a1d0b9c4221d8df642f01aff97bacdd90e253f samba-winbind-krb5-locator-4.16.4-101.el9.x86_64.rpm fc729ce6ceec6f72b64e29c69b44ac5adf4f0553c86aa71a03b5fadfb213f123 ALSA-2022:8340 Copyright 2022 AlmaLinux OS 0 1 Moderate

freetype security update

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently. Security Fix(es): * FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404) * FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405) * Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default freetype-devel-2.10.4-9.el9.x86_64.rpm 34f42be077c41c4bb6759aacc95c391df3f7cdad5f5a032df6aea01510560426 freetype-devel-2.10.4-9.el9.i686.rpm 9dd2a4e0834bc3c0c6f56571a3839c7af43df9253bd4a04c34de9bfc6be05485 ALSA-2022:8353 Copyright 2022 AlmaLinux OS 0 1 Moderate

python3.9 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python3.9 (3.9.14). (BZ#2128249) Security Fix(es): * python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107) * python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default python3-tkinter-3.9.14-1.el9.x86_64.rpm 8304430ae6126f32c324730e78126ec13b84454d8da85d44904896a348863a78 python-unversioned-command-3.9.14-1.el9.noarch.rpm b860a69493c595223a36e245c9abdb7f1848f6f464a97e8f4f621d885b0f2204 python3-devel-3.9.14-1.el9.x86_64.rpm d24e27c17c81149fec75b98f6870072c422f6b15ef04f26e8ff63e3acabc5463 python3-devel-3.9.14-1.el9.i686.rpm daa332e9ac4af40454d29b4dc91fc7b0e2e641cf8a8495f2bc974156e7e1346d ALSA-2022:8361 Copyright 2022 AlmaLinux OS 0 1 Moderate

e2fsprogs security update

The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems. Security Fix(es): * e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default e2fsprogs-devel-1.46.5-3.el9.x86_64.rpm 0fa71156daf87228fb2e99dac2b155cf9b5848d57ffa20636268ca3cd1a3183f e2fsprogs-devel-1.46.5-3.el9.i686.rpm 189e47293d98fc4954c1d2fd144b38a87e8a1f94cb5bb2d3fe8a3ca2db12024c libcom_err-devel-1.46.5-3.el9.i686.rpm 748096413b45b8acebbbc3a2d8744327201a8defc21f48539c6ad324d908fb70 libcom_err-devel-1.46.5-3.el9.x86_64.rpm 755805fe1caea97edbbcd30afbc6dca5b3ea8199ea885220a62745d7a73b7388 ALSA-2022:8384 Copyright 2022 AlmaLinux OS 0 1 Moderate

harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine. Security Fix(es): * harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default harfbuzz-devel-2.7.4-8.el9.i686.rpm 1a3940c6a82ca3f3acc1844d42bd1cb40eda95127ea0650a05ffed698618425b harfbuzz-icu-2.7.4-8.el9.x86_64.rpm 9bb62395f8e1ff1bb137b1735e768b7c8c2408a4626520dd225676f876285e2a harfbuzz-devel-2.7.4-8.el9.x86_64.rpm c7b9e293e4bc405877ecd23af94a7476c3552e36b7662075d30325eddb0c31e0 harfbuzz-icu-2.7.4-8.el9.i686.rpm dc84447d71fc5781192e2a17e8098296cb8e832d733151d915ab7a887988087b ALSA-2022:8431 Copyright 2022 AlmaLinux OS 0 1 Low

podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: possible information disclosure and modification (CVE-2022-2989) * buildah: possible information disclosure and modification (CVE-2022-2990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * (podman image trust) does not support the new trust type "sigstoreSigned " (BZ#2120436) * dnf-update broken for podman/catatonit (BZ#2123319) * podman creates lock file in /etc/cni/net.d/cni.lock instead of /run/lock/ (BZ#2123905) * podman kill may deadlock [AlmaLinux 9.1] (BZ#2124716) * containers config.json gets empty after sudden power loss (BZ#2136278) * PANIC podman API service endpoint handler panic (BZ#2136287) Enhancement(s): * Podman volume plugin timeout should be configurable [almalinux-9.1.0 Z] (BZ#2124676) * [RFE]Podman support to perform custom actions on unhealthy containers (BZ#2136281) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default podman-remote-4.2.0-7.el9_1.x86_64.rpm 1c6c82f85493e7e5141fb4badeac39b552166d4a64d4bf12df94092b3eb62ae6 podman-4.2.0-7.el9_1.x86_64.rpm 5bc18e1869d04569db44eebed7600c87cd7ffbe5b3548a1dfdd7238fcc9341c0 podman-docker-4.2.0-7.el9_1.noarch.rpm 5fc18b2301ea8e5a166d1c090e387bb6aa6ca2f6037faaa08e39a50baedc42ee podman-plugins-4.2.0-7.el9_1.x86_64.rpm 7db187bef948ddd373d9a75a9f8f0935f967902be5ad5cfa54be8803619da5d7 podman-gvproxy-4.2.0-7.el9_1.x86_64.rpm 8eafadda8e37deaaac785b52e7b20943ccc9ad6ae288cc46446ecdf714768e38 podman-catatonit-4.2.0-7.el9_1.x86_64.rpm 969d3f8208bb6ca74a72c6865497e05f14cf679a026eb2f18101ae2c0a7d8808 podman-tests-4.2.0-7.el9_1.x86_64.rpm aefb5b1caf07e9ed1569d5e6e6eb774948671178210446f4645b0a704e3070bf ALSA-2022:8434 Copyright 2022 AlmaLinux OS 0 1 Moderate

dotnet7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2. The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134641) Security Fix(es): * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default dotnet-apphost-pack-7.0-7.0.0-0.5.rc2.el9_1.x86_64.rpm 049d6dcc13c1e3d062597709080493923d4a027b1e2b2c59235e143f8a1e8073 dotnet-host-7.0.0-0.5.rc2.el9_1.x86_64.rpm 5c22757aa0219dd092e8fe0fcd56b863bcda55f44b0f2acde9bdc1f8c97dc0bd netstandard-targeting-pack-2.1-7.0.100-0.5.rc2.el9_1.x86_64.rpm 60cdbc7a8a3a086c1104414c577d3d05f493fe0bdc49a376eb76f2d55f431bbb dotnet-templates-7.0-7.0.100-0.5.rc2.el9_1.x86_64.rpm 6b7805c4599758a8428354b7a7c97b8c0a425a9e7a5c44162a256d61b51e2bac aspnetcore-runtime-7.0-7.0.0-0.5.rc2.el9_1.x86_64.rpm 74342280bd30ea6e33eb699b307b644d23501f57de46cf1ba77ccecdfc3f15f1 dotnet-hostfxr-7.0-7.0.0-0.5.rc2.el9_1.x86_64.rpm 7ea62c6ac819a5aec09d2567fee8c36273079c38c2011a91ffe4ad7f9d7fb195 dotnet-runtime-7.0-7.0.0-0.5.rc2.el9_1.x86_64.rpm 85481066165f70cbef856367648cc5bdf1ba14d6afdd5cc5e037b5abfd978f3c dotnet-targeting-pack-7.0-7.0.0-0.5.rc2.el9_1.x86_64.rpm 8e5c17cbeeaad41b79ef981686bf85953106d87b37754f6d3305140d470376a4 dotnet-sdk-7.0-7.0.100-0.5.rc2.el9_1.x86_64.rpm d8e68106d4c2fd363e100121b2eaabd4e7eda154764b5488b8ef1f25f1ac4485 aspnetcore-targeting-pack-7.0-7.0.0-0.5.rc2.el9_1.x86_64.rpm ee1c873b9fef612df5d387cfd193e7def15b46535965174a18dd520c89dfeeef ALSA-2022:8444 Copyright 2022 AlmaLinux OS 0 1 Moderate

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: exception handling and impedance match in tornado_requests (CVE-2022-3500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default keylime-selinux-6.5.1-1.el9_1.noarch.rpm 31db20cc7837e7a9bb5695c2d5e9462020086d85ae634a8e96214e04a01d9366 keylime-6.5.1-1.el9_1.x86_64.rpm 48eff5173464231fe9507c03be2146eb0c409a67e35f908453942f9032492c3f python3-keylime-6.5.1-1.el9_1.x86_64.rpm 80798d16029fb43601671c075aaa802ce19c87e1dc77630070c1a4d5dbb34235 keylime-registrar-6.5.1-1.el9_1.x86_64.rpm 979114205d5d7a67bd9c6f23c9e7961ab467c7133c8df4768a10d3f337e308eb keylime-base-6.5.1-1.el9_1.x86_64.rpm b9dd117aed718ae79c8a919995b003fcedb2191186f5cc1d4111d28af7528efc keylime-tenant-6.5.1-1.el9_1.x86_64.rpm d101a1f96e8c1236c13924b19d521989cd5f822435e28dc1a67e1f3522de1e27 keylime-verifier-6.5.1-1.el9_1.x86_64.rpm ec1eb103e78bb8d6ef8277a3816844b1eb8943da1dd2b27d12827199a4a5d7f8 ALSA-2022:8493 Copyright 2022 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default python-unversioned-command-3.9.14-1.el9_1.1.noarch.rpm 3d2670507359984b3c6478d157fb65c2564225e0ffc774f3681647addfdf5e60 python3-devel-3.9.14-1.el9_1.1.i686.rpm 40bedbc81cfc12189554ae363d355440045f3b49dcb6e525ee1a5532e7194725 python3-devel-3.9.14-1.el9_1.1.x86_64.rpm 50dcc74fe6ee60310798f764789bc4173b6cb2657cab347d7fe050a508f460ce python3-tkinter-3.9.14-1.el9_1.1.x86_64.rpm 5e0401543ef7adf368d7f2e68f5fe73f20992327bde3329806747dc12a60fd51 ALSA-2022:8561 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.5.0. Security Fix(es): * Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403) * Mozilla: Fullscreen notification bypass (CVE-2022-45404) * Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405) * Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406) * Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408) * Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409) * Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421) * Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410) * Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411) * Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412) * Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416) * Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418) * Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default thunderbird-102.5.0-2.el9_1.alma.x86_64.rpm 805573fcd89f5aa167ca64ae669da7619328f3466c1c70db4a2d229bbad63193 ALSA-2022:8580 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.5.0 ESR. Security Fix(es): * Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403) * Mozilla: Fullscreen notification bypass (CVE-2022-45404) * Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405) * Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406) * Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408) * Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409) * Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421) * Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410) * Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411) * Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412) * Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416) * Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418) * Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default firefox-102.5.0-1.el9_1.alma.x86_64.rpm 51a804a36814dd68558d0eb6b20c87128cf747e6954928f4e41f2c82ee01ab2f ALSA-2022:8637 Copyright 2022 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: integer overflow vulnerabilities in PAC parsing (CVE-2022-42898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default krb5-devel-1.19.1-24.el9_1.i686.rpm 434a9c9a4a24cdfcd2b748f3e986e01a068c137dbb640282c0cc0d2f6f3c0650 krb5-devel-1.19.1-24.el9_1.x86_64.rpm b115798e4a16e7dd44c870111e08d0bfe92597be421ea43b672dbee5bb154d3e ALSA-2022:8643 Copyright 2022 AlmaLinux OS 0 1 Important

varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: Request Forgery Vulnerability (CVE-2022-45060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default varnish-docs-6.6.2-2.el9_1.1.x86_64.rpm 216a55798ad9f4cbc0a9b6adf4b5bd1b5b3d3794013953ec4be86c57f5ca4709 varnish-6.6.2-2.el9_1.1.i686.rpm 9c8e5290a36bf609612a0e87de5c0af8274e941146df35fb992f244856d5593f varnish-6.6.2-2.el9_1.1.x86_64.rpm ea26ae6dba212e47bdd9b10a1ec85b40a8dbd22dbdd7bec938b62979764afd2f ALSA-2022:8832 Copyright 2022 AlmaLinux OS 0 1 Moderate

nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (18.12.1). (BZ#2142809, BZ#2142830, BZ#2142834, BZ#2142856) Security Fix(es): * nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517) * nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default nodejs-docs-18.12.1-1.module_el9.1.0+16+91bc168f.noarch.rpm 3f130838fecb45d434956e044b5336680c97eb73104c0e478ca0e9b23353467c nodejs-nodemon-2.0.20-1.module_el9.1.0+16+91bc168f.noarch.rpm 4a7e1a042a9efbd31db5f5b4a6af0bc0b6d207a37fa374cf54dae97b4b0f09be npm-8.19.2-1.18.12.1.1.module_el9.1.0+16+91bc168f.x86_64.rpm 4f99d489b611e2dbd9f839e98de1bc6a1e6a36256e4440f596b94431bf7120dc nodejs-devel-18.12.1-1.module_el9.1.0+16+91bc168f.x86_64.rpm 64348a478c9506268c65d2e56b903164c4a36a5072f83692072d5f3fe35c460d nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-full-i18n-18.12.1-1.module_el9.1.0+16+91bc168f.x86_64.rpm a2cd565e49273f973ab9af27acd709166582e2bef29e95abaa9d29fd3b0e0585 nodejs-18.12.1-1.module_el9.1.0+16+91bc168f.x86_64.rpm a6f5fec7b39941e32d8feff6c96cd2ae1601212070b51d2f8af81e49684c0579 ALSA-2022:9065 Copyright 2022 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.6.0 ESR. Security Fix(es): * Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878) * Mozilla: Use-after-free in WebGL (CVE-2022-46880) * Mozilla: Memory corruption in WebGL (CVE-2022-46881) * Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874) * Mozilla: Use-after-free in WebGL (CVE-2022-46882) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default firefox-102.6.0-1.el9_1.alma.x86_64.rpm f88c30e44c3bfcc5a0d26d91af1291ca5f34e86c3a02bce59525e9a727faddee ALSA-2022:9080 Copyright 2022 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.6.0. Security Fix(es): * Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878) * Mozilla: Use-after-free in WebGL (CVE-2022-46880) * Mozilla: Memory corruption in WebGL (CVE-2022-46881) * Mozilla: Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration to block remote content (CVE-2022-45414) * Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874) * Mozilla: Use-after-free in WebGL (CVE-2022-46882) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default thunderbird-102.6.0-2.el9_1.alma.x86_64.rpm a033392348457627dbcb0ad1a6ca2c8eb9834ba0e8417b41c7833e9ac84cbd45 ALSA-2023:0005 Copyright 2023 AlmaLinux OS 0 1 Important

bcel security update

The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class). Security Fix(es): * Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default bcel-6.4.1-9.el9_1.noarch.rpm a39a659c1e56d24d1b8070a45638ed96873ac5e2eae6c7652ba72237212611b9 ALSA-2023:0021 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution (CVE-2022-42856) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default webkit2gtk3-jsc-devel-2.36.7-1.el9_1.1.i686.rpm 1a3f82dddbbcc49fcab5100934531d59e8892adeba2a6634d077e086250454f3 webkit2gtk3-jsc-2.36.7-1.el9_1.1.i686.rpm 32862e6fc437ea19e6eea2f45ae3bd6d38f2f54ea30e71cb821996b0c5b22dad webkit2gtk3-devel-2.36.7-1.el9_1.1.i686.rpm 3f9b9a82edff30e0cacc21230751bffb412414c3a1fda07a9a36446d330918bb webkit2gtk3-jsc-2.36.7-1.el9_1.1.x86_64.rpm 4ed96f488a6e9b4825524b1b871ccd8dbcdb716cf3c8bfb117487060cd3b51ae webkit2gtk3-2.36.7-1.el9_1.1.x86_64.rpm 7ed390f3bdda4e95fe2adda32f86cfa58c4f1122646384e6dc574bc1c20b6498 webkit2gtk3-jsc-devel-2.36.7-1.el9_1.1.x86_64.rpm 9594ce2e87d0e46afbdbed11523b2fb81bb1bd348d9379c03463b86617a0690b webkit2gtk3-devel-2.36.7-1.el9_1.1.x86_64.rpm aa824993255a7f3b3d821f8ca204dfd50f8cfeb89eee4f288eb24294ff61defb webkit2gtk3-2.36.7-1.el9_1.1.i686.rpm d45c5beea31366559e14d420f2dfa874a85cbffd9bbbeb019351e6f4a8f6b6b4 ALSA-2023:0077 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13. The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154459) Security Fix(es): * dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default dotnet-runtime-6.0-6.0.13-1.el9_1.x86_64.rpm 207ee23162afbf69c934f78411fa4f331501fd4437b97a4abd404d33bfdabecc aspnetcore-runtime-6.0-6.0.13-1.el9_1.x86_64.rpm 3599cf5c44e01c2f89478d5624d40912497cc29bda995a86ad4bc9713f9e1019 dotnet-hostfxr-6.0-6.0.13-1.el9_1.x86_64.rpm 68caf516ed410bfc2bd1b47d103ea43c504f82e81b4a8258a95f32171227fc1c dotnet-sdk-6.0-6.0.113-1.el9_1.x86_64.rpm 943d3e6463ce861bba0c579eecd4f961aced76ddd15c133cb81b2c90d776eb4f dotnet-apphost-pack-6.0-6.0.13-1.el9_1.x86_64.rpm a37d460d3092314981b4107bf36decdd70519e9efa118e38a0828c2f789fd811 aspnetcore-targeting-pack-6.0-6.0.13-1.el9_1.x86_64.rpm a5acc8f1b6b12cca5d9c79b9b29ed51039efe50baadfac42c5e5cf4673cbb257 dotnet-templates-6.0-6.0.113-1.el9_1.x86_64.rpm cbedd77d4435097f8403d39d074e1b363781c6351a4e7a387a733d8e00f3c892 dotnet-targeting-pack-6.0-6.0.13-1.el9_1.x86_64.rpm eda6e0f8584dbcf5675e3fba8512a4f3327836601b0495092ce4099d8ae8eaaf ALSA-2023:0194 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835) * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database. This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476) * Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-9] (BZ#2153097) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default java-17-openjdk-src-17.0.6.0.10-3.el9_1.x86_64.rpm 041959b9213c4fdaa7a4f444ec079ca383b0a0c6ca2b71b5980d366929c3b775 java-17-openjdk-javadoc-17.0.6.0.10-3.el9_1.x86_64.rpm 06320012ab2ed262483aec19bb1e75927f087cc4e6a096a89fb9c0eaea9927ad java-17-openjdk-javadoc-zip-17.0.6.0.10-3.el9_1.x86_64.rpm 491b7ccc956484aa5d416c602a2a80bcba04f26e3bb2b2413c2b1ac56eadc2c9 java-17-openjdk-jmods-17.0.6.0.10-3.el9_1.x86_64.rpm 4d5fe49e232185a1db3f4d6e0b154fd390bf8fae044923770e8c8ae64b420505 java-17-openjdk-demo-17.0.6.0.10-3.el9_1.x86_64.rpm 5ac3ce4aab84d304f40cbdcb7303a52deac778e19ebfed307ab08c924c1837e0 java-17-openjdk-static-libs-17.0.6.0.10-3.el9_1.x86_64.rpm 7366a3131068133bacd25bddb878d43182a8ca938e5e0c23158be8e8a5f4fde1 java-17-openjdk-devel-17.0.6.0.10-3.el9_1.x86_64.rpm 7b545b04064cebafee912a65e3f7a249de601d325159f50019f01beb9fffd5ce java-17-openjdk-headless-17.0.6.0.10-3.el9_1.x86_64.rpm ce1a1640124b808c2782c1d99af10c9034c4f7bb9b3e35f2131d3a661da87981 java-17-openjdk-17.0.6.0.10-3.el9_1.x86_64.rpm feeb40be1f865738c1b6c938577c3034cf5b3e488225f7661b249a357ab0c25a ALSA-2023:0202 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835) * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-9] (BZ#2157798) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default java-11-openjdk-javadoc-zip-11.0.18.0.10-2.el9_1.x86_64.rpm 291e9a781f3ba3feadef035622784a03f27a2c6e64cc799281e0f7e551c24772 java-11-openjdk-headless-11.0.18.0.10-2.el9_1.x86_64.rpm 74fa7f8bfb23c70ac4726c07fb17b57a7cdeffdfa058dd0e1d6de7c2c7b19b3b java-11-openjdk-static-libs-11.0.18.0.10-2.el9_1.x86_64.rpm 84357a1ea743964f909ead262bc77df2a6f91535c6e0f17554815c85a855261d java-11-openjdk-demo-11.0.18.0.10-2.el9_1.x86_64.rpm a14462aa369420641696f95038816549c0d00b684b366d569b3e59dfcc071fdf java-11-openjdk-jmods-11.0.18.0.10-2.el9_1.x86_64.rpm a7ce1f04f7c93c2f7d8e0cac1cb40bcc83fb872f8f70a5a2dfd76aa221e1b026 java-11-openjdk-devel-11.0.18.0.10-2.el9_1.x86_64.rpm b95570f2b7bd9e1e6f5510a593aab5af2d6a08c6a356409b7aea8b68751b7777 java-11-openjdk-11.0.18.0.10-2.el9_1.x86_64.rpm c9bf2e8c213156a718d9398cfb331924f4f80402ce34f30f0439499a14329cb8 java-11-openjdk-javadoc-11.0.18.0.10-2.el9_1.x86_64.rpm e79ebd1a984c5970531e02bb3f2b78da8229adbae25ef318f9d6eb6133cd8674 java-11-openjdk-src-11.0.18.0.10-2.el9_1.x86_64.rpm ea760a4522bb2643ffa13f17a7fd49c70a1301b2c57020b46944fdf5554ccab4 ALSA-2023:0210 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830) * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-01, 8u362) [almalinux-9] (BZ#2159912) * solr broken due to access denied ("java.io.FilePermission" "/etc/pki/java/cacerts" "read") [almalinux-9, openjdk-8] (BZ#2163594) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default java-1.8.0-openjdk-src-1.8.0.362.b09-2.el9_1.x86_64.rpm 005e4bef1e2696d0d1a3fef043691ad16cc9d301db5ac457a38b5d99840a2504 java-1.8.0-openjdk-headless-1.8.0.362.b09-2.el9_1.x86_64.rpm 21106b0b689ea05b62d48409996c26d55caca6e899aabe3ed458912fa2e5cf18 java-1.8.0-openjdk-demo-1.8.0.362.b09-2.el9_1.x86_64.rpm 3a3edf64f66d199e849bb626845d4712c85a3f00755af541cf988811e626d0f6 java-1.8.0-openjdk-devel-1.8.0.362.b09-2.el9_1.x86_64.rpm 5e67798f88bfb3a03e78f2165f2955a254a6f616aa5f34e623e2fb56f5abc57c java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.x86_64.rpm 8256886f101fefe3e1a61433b184facd4fb0cab27034e03c90e78ccab7252f90 java-1.8.0-openjdk-javadoc-1.8.0.362.b09-2.el9_1.noarch.rpm 8ded73fb8d6537fcb052492f868f8869e4431cc372af44f2acae3ead0a616607 java-1.8.0-openjdk-javadoc-zip-1.8.0.362.b09-2.el9_1.noarch.rpm 96a3da828b7bdb46d7b5013293328c4257b8d1907eaee35ca6041b4f014afd58 ALSA-2023:0282 Copyright 2023 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default sudo-python-plugin-1.9.5p2-7.el9_1.1.x86_64.rpm 925d1685a194ee721adda4e41050e94ebc121e1fefbc3ec6672334ea4138c5dc ALSA-2023:0285 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.7.0 ESR. Security Fix(es): * Mozilla: libusrsctp library out of date (CVE-2022-46871) * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598) * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605) * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599) * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601) * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers (CVE-2023-23602) * Mozilla: Fullscreen notification bypass (CVE-2022-46877) * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive (CVE-2023-23603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default firefox-102.7.0-1.el9_1.alma.x86_64.rpm 7adc3cfd0d79de9fe9cc321f8605fda2c5d395e0068edee218ae660ff1e78018 ALSA-2023:0302 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058) * libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519) * libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953) * libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520) * libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libtiff-devel-4.4.0-5.el9_1.i686.rpm 8e44488ae758325317bcb86ea672cfcbe81a64bcacdd7acff09d3ebf6e940596 libtiff-4.4.0-5.el9_1.i686.rpm 96fc910832e3a04088a1213e3695002881c906e8a58484906d13f199a621856f libtiff-devel-4.4.0-5.el9_1.x86_64.rpm a05a597f9a37c4d21bd6857d6c28fdccd2b5f7cccc08d5dcc1d64429f0879857 libtiff-4.4.0-5.el9_1.x86_64.rpm f07d90a02b459415757015fa2cc985c50132b4058555379f70dcc533ce6ef27a ALSA-2023:0303 Copyright 2023 AlmaLinux OS 0 1 Moderate

usbguard security update

The USBGuard software framework provides system protection against intrusive USB devices by implementing basic whitelisting and blacklisting capabilities based on device attributes. To enforce a user-defined policy, USBGuard uses the Linux kernel USB device authorization feature. Security Fix(es): * usbguard: Fix unauthorized access via D-Bus (CVE-2019-25058) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default usbguard-tools-1.0.0-10.el9_1.2.x86_64.rpm 1eac7402609fc95dd3c43ccfde5f0a4f5e35411dbc87e034a17706705207fa91 usbguard-dbus-1.0.0-10.el9_1.2.x86_64.rpm 32dde8b9d06f2a5392a97618852b670ea2365533c9ac2afb252fdc311c2fbc75 usbguard-1.0.0-10.el9_1.2.i686.rpm 3c384729d4b691d37991d4471a3553143141fd2c866f19c4d30190d7d20bf727 usbguard-1.0.0-10.el9_1.2.x86_64.rpm 92616f0b9a090883f64fbc9309fc35f3b9c2ff8b74f129f8ad11b5224c87616f usbguard-selinux-1.0.0-10.el9_1.2.noarch.rpm a415e5e1be55a36e9aad68b80ba34dc387313a81751ebc47ddf45a3ddcee81be usbguard-notifier-1.0.0-10.el9_1.2.x86_64.rpm e7e0b6c313a72e3bebc1ec8fca2c8b00d82a06fef649d9fc45d156f63843b587 ALSA-2023:0304 Copyright 2023 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: Macro URL arbitrary script execution (CVE-2022-3140) * libreoffice: Execution of Untrusted Macros Due to Improper Certificate Validation (CVE-2022-26305) * libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password (CVE-2022-26306) * libreoffice: Weak Master Keys (CVE-2022-26307) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libreoffice-help-da-7.1.8.1-8.el9_1.alma.x86_64.rpm 0080978287b3126965b3fa9e108a858b42a474bb437c859a9d4b94eb01038786 libreoffice-langpack-pa-7.1.8.1-8.el9_1.alma.x86_64.rpm 00c5e2b41829024780eea25abde673be20ab535b006431c43a2abf104da87d52 libreoffice-langpack-zu-7.1.8.1-8.el9_1.alma.x86_64.rpm 0221d1851f5ff69a0609c77330507b678eb1afc2cf09cd165998896b813a353b autocorr-lb-7.1.8.1-8.el9_1.alma.noarch.rpm 04b3acd7c4d2f57c2aca505634d631f0d1a30c08462771bc4a80ad00d1e3e79d autocorr-cs-7.1.8.1-8.el9_1.alma.noarch.rpm 08d82f12623b3185007f267c76f601f1cdfb5cbddfb4a37d87656e91cc111217 libreoffice-math-7.1.8.1-8.el9_1.alma.x86_64.rpm 0a4995e032e42bcaac1c89d5387823a3462e1b212a90b5d57326c3196ff620b8 libreoffice-langpack-sk-7.1.8.1-8.el9_1.alma.x86_64.rpm 0c9125de4a0c680162e726ca18022b94b4ab78d431efe4e808f15853cae89dc0 autocorr-pt-7.1.8.1-8.el9_1.alma.noarch.rpm 0f798d1e4f0eba57af2599e2afbdba3afdf06cda2039de87d3bda2ced3962f45 autocorr-is-7.1.8.1-8.el9_1.alma.noarch.rpm 108c5aedee8b91ca8d1b8d06813a8901d28a408f7bea7d1c8313dba8aca17d64 libreoffice-langpack-ml-7.1.8.1-8.el9_1.alma.x86_64.rpm 123429a0be8eae6f7491d9fdfe4a20ac4f74ea1772d0738a908444ba19735874 autocorr-bg-7.1.8.1-8.el9_1.alma.noarch.rpm 137f8a1ebcbbf4407188d44faaeb2c31fd1fcde1bf5e0d465c026b708a2a8575 libreoffice-help-id-7.1.8.1-8.el9_1.alma.x86_64.rpm 1398546a8ac80f39d2a0b41f448f8b4461ed7c1bc3b7cd81d283746613c86f0b libreoffice-gdb-debug-support-7.1.8.1-8.el9_1.alma.x86_64.rpm 14dc1790f4f09e1ad30ff08ad69ec9254816204ad142b84264c3b0250974b9cb libreoffice-langpack-ta-7.1.8.1-8.el9_1.alma.x86_64.rpm 158359e8210241fdd8ce6b9e4089faf5343909455aefcacd7253f404d47d86d8 libreoffice-langpack-gu-7.1.8.1-8.el9_1.alma.x86_64.rpm 15860531942e0cd687c6a9047adbf3ffed7260ce7e8310070b3264c47da75148 autocorr-sr-7.1.8.1-8.el9_1.alma.noarch.rpm 17218493c99575c9a48b4134875176fbf60d189786bcc2ec5eb6d9f68efe6de7 libreoffice-help-en-7.1.8.1-8.el9_1.alma.x86_64.rpm 17ec92088fff1ed9fb58d7e44af8f82af57c747d22b10966a81fa78c3fadba7e libreoffice-help-ru-7.1.8.1-8.el9_1.alma.x86_64.rpm 1b609842d81a8da4ac2197052de350ce7c2d0943776a6ae9b9253c63bd35eac5 autocorr-ro-7.1.8.1-8.el9_1.alma.noarch.rpm 1b7ec41c4d013e55f28fb75b49e8719f2a58ea1f0ed8f42ac6dee4b0c971400e libreoffice-help-de-7.1.8.1-8.el9_1.alma.x86_64.rpm 1bfbd5bff7d722c8cfec1462e92effe0d0fe2da2de5d7202de5bfe24d012eb07 libreoffice-langpack-br-7.1.8.1-8.el9_1.alma.x86_64.rpm 1d162ee0000807962c2d2487ba8c4b9219ef88157c38f9174918074e989e7634 autocorr-tr-7.1.8.1-8.el9_1.alma.noarch.rpm 1f16cba0243a479ba3dab7c705bbb4abba500edfaf9d42f8217f46756b9cf325 autocorr-sk-7.1.8.1-8.el9_1.alma.noarch.rpm 2081afc6cb2d470f7031224549090b272d1e0fe18bba3666b19d2291e6a71982 libreoffice-x11-7.1.8.1-8.el9_1.alma.x86_64.rpm 223b1299ef37bebd6678af95218e43cac3154e0ee02820e5c162a10fc0bc5177 libreoffice-help-ar-7.1.8.1-8.el9_1.alma.x86_64.rpm 260e736f9d478191945fe1d28d36444eec5560f400599a8b795b0520aa8fc35d libreoffice-langpack-de-7.1.8.1-8.el9_1.alma.x86_64.rpm 26eff067d90d97f4f736905cb5e3f3ca95f155d74aebfc432fe60d26a3845d3f libreoffice-langpack-st-7.1.8.1-8.el9_1.alma.x86_64.rpm 2a437702a95ac7594cd0578deb8f6ff01fabae9ee3f74046521d6697a49ef1bb autocorr-sl-7.1.8.1-8.el9_1.alma.noarch.rpm 2a61f65178e3d64964706b981d7209a13a4ac76a36a44b9cda01767b1c93ff33 libreoffice-pdfimport-7.1.8.1-8.el9_1.alma.x86_64.rpm 2bbb1adbcb83c55cce08a7794023bcf4acac64e7bda5329a7ce436d96ec3e046 libreoffice-help-tr-7.1.8.1-8.el9_1.alma.x86_64.rpm 2e4694b6b7110894b6d3ac8eb836e01e31f88f6736edd4f8bb18dab812e417b2 libreoffice-ure-common-7.1.8.1-8.el9_1.alma.noarch.rpm 2e6109f0858d12f88a00913aa2ea08803e56afefdaceeb7b39b7e0043ff1f017 libreoffice-langpack-fr-7.1.8.1-8.el9_1.alma.x86_64.rpm 2ec631bbd322e4b1986fb48d82b47a0c7ebe43db379299ad8bfa70febece6f70 libreoffice-langpack-eu-7.1.8.1-8.el9_1.alma.x86_64.rpm 2f0a1a8de29023df2d3c4967936611ba93a419bce8cfcccbe76f0a9ab2594024 libreoffice-langpack-nb-7.1.8.1-8.el9_1.alma.x86_64.rpm 2f2aa10b67db449534c4ebaeb1066c60f20e13ca66e05e961326b5a0f9e355af libreoffice-writer-7.1.8.1-8.el9_1.alma.x86_64.rpm 2fd837b36dd737735fe396a68f207e5875b56b87b60d31d00c0cf19fc051620e libreoffice-langpack-fy-7.1.8.1-8.el9_1.alma.x86_64.rpm 3000b23837287177eeba1543fd48c54a190fd09fb44ecbef9bd6c455819f7ac7 libreoffice-help-zh-Hans-7.1.8.1-8.el9_1.alma.x86_64.rpm 3029c1e2a94318772574fbe70589f4ca49ad94f46f4d5bb144557445a8c5a1e5 libreoffice-langpack-kn-7.1.8.1-8.el9_1.alma.x86_64.rpm 33eb822c87ba8ff17fca6d5da25de7c2086dac6d287e4b1d74f196626451c021 libreoffice-help-gu-7.1.8.1-8.el9_1.alma.x86_64.rpm 345b47e9df8f655380877048ca646b294847327c15f323d006f3ec2be9fe635b libreoffice-graphicfilter-7.1.8.1-8.el9_1.alma.x86_64.rpm 35eeb9277d092852fee4a5b8b8a338ede00926b38157fb5b05168976ae9baab4 libreoffice-langpack-mai-7.1.8.1-8.el9_1.alma.x86_64.rpm 36dbd04886368de6598cc4ecc3f39b00384d05827f4b2f1032eba89f25260ee2 libreoffice-help-et-7.1.8.1-8.el9_1.alma.x86_64.rpm 3786a76d3be6dc921749d1b234b346b2d1150b7a1650c2c7860188547e28844f libreoffice-help-fi-7.1.8.1-8.el9_1.alma.x86_64.rpm 38986faf83c88a94031dd2be41370bed7aa635f5f85e70a5caf14015eb573f30 libreoffice-langpack-xh-7.1.8.1-8.el9_1.alma.x86_64.rpm 395c36047ec492bb98d19b3a807f4296519915c96bcf8fbebeb00c2c0bd94fce libreoffice-help-nl-7.1.8.1-8.el9_1.alma.x86_64.rpm 3afa6e38f6bd23b2b27e8b6d3128c196285f1c4e6af8972a5ec0f714e7a8d7e4 autocorr-vi-7.1.8.1-8.el9_1.alma.noarch.rpm 3c3e668316ccc51c30f019c641e455f10c5072db5e1969120be2d9fc2c9e5cd4 libreoffice-langpack-nl-7.1.8.1-8.el9_1.alma.x86_64.rpm 3f9726a028ac120772329e7fe68f59f67a977bb442bdc077f918b2b8d2ba9acf libreoffice-help-sv-7.1.8.1-8.el9_1.alma.x86_64.rpm 4128838dc0398ce02a58c71431f9b9d172086b6bd2bee2da8956e61829477b4d libreoffice-help-ca-7.1.8.1-8.el9_1.alma.x86_64.rpm 419033739b2ded149b1e956b6726ac024fd6061a9f4dcb5662f09873a52e2d95 libreoffice-langpack-af-7.1.8.1-8.el9_1.alma.x86_64.rpm 44273204073684f6027c6d241f0dec275271fa84956adef572f1d0c6769c2847 autocorr-sv-7.1.8.1-8.el9_1.alma.noarch.rpm 44ee24a4d70f78195b69aac9fb5d6ffbd4de6b042c4fd029b0eaada5d69aca2c libreoffice-langpack-ro-7.1.8.1-8.el9_1.alma.x86_64.rpm 4575f616aa493729b266e260f04feb8acb6c41742738c2c6297f19be01206e5c libreoffice-help-bn-7.1.8.1-8.el9_1.alma.x86_64.rpm 46340e5dffe7a5506bc3bd01534c8519fa276700ddbec5cd12e059cf04c0c200 libreoffice-help-sl-7.1.8.1-8.el9_1.alma.x86_64.rpm 489b6f46460ba54b891a22e4708ef4587ac72c0f9ea135ac65cdff7f824fcaa8 autocorr-ga-7.1.8.1-8.el9_1.alma.noarch.rpm 4a55499692a6ccf81b77165c98b4c82a5497f6dd53bd6a10ea2428d8a5906b94 libreoffice-langpack-hu-7.1.8.1-8.el9_1.alma.x86_64.rpm 4f74d082da7a1ca2de46dc9b01a7fe143a418454600f299cb9043c233ddf8bc5 libreoffice-langpack-sl-7.1.8.1-8.el9_1.alma.x86_64.rpm 50009197814e7df0310cc568f545dbc1fa2364d1a3b1686e57590a282c877789 libreoffice-langpack-nr-7.1.8.1-8.el9_1.alma.x86_64.rpm 538ed769325094a9a9566f1919b64f33d8bb98f47b58135a070562d48cea451c libreoffice-help-hr-7.1.8.1-8.el9_1.alma.x86_64.rpm 543fec3c84f4a8166b1a054d1c3b25b550f560012df1398d147cd144fa2f27a1 libreoffice-langpack-tr-7.1.8.1-8.el9_1.alma.x86_64.rpm 56b33017f0f83cce0a5a00c7bcb45d98d13899d630bead63b0633f1f0008ae97 libreofficekit-7.1.8.1-8.el9_1.alma.x86_64.rpm 592203b429d5651fb7deb8ef2a6b51e179058d7a05f21450678074b7f1ce0487 libreoffice-langpack-es-7.1.8.1-8.el9_1.alma.x86_64.rpm 59a1927365d914b0e7322e2258b0ce54d86d27e6f68e7a123947bc296b0476e1 libreoffice-langpack-pt-PT-7.1.8.1-8.el9_1.alma.x86_64.rpm 5b076a50a5b34c68551ec48d70549e8ce3b5a8940ffb683fa20c4fcbe2505b1a libreoffice-help-fr-7.1.8.1-8.el9_1.alma.x86_64.rpm 5c8c647ab087bc1fbe4f9c458d3639ae41a11cdc0934ebb95b2f49e772d3a211 libreoffice-draw-7.1.8.1-8.el9_1.alma.x86_64.rpm 5cf8c02d357b3ae82016f0b3b212d3d2f7efe0733e5fee51984ef075fb8f6825 libreoffice-langpack-pl-7.1.8.1-8.el9_1.alma.x86_64.rpm 5dac26080cd489be190e1940c73f38dd757da214d5efa9d9c6b9417cb3bc7693 libreoffice-help-lv-7.1.8.1-8.el9_1.alma.x86_64.rpm 5e0766f42f07fcbb2fba22f5ce53f95491d6c198c49a46b6a890f3ef494340cd autocorr-pl-7.1.8.1-8.el9_1.alma.noarch.rpm 5e456d42c6c2cc8caa900a62dd4138d8ae5c493afab41b1443a18a6475387efa libreoffice-help-ko-7.1.8.1-8.el9_1.alma.x86_64.rpm 5ee9ca8dfcb53ea559ff3b270a3f7f23b723d2c047317434d2e1139965dad094 libreoffice-langpack-ss-7.1.8.1-8.el9_1.alma.x86_64.rpm 629e269f9f47d3ffa99e4b2f30242950a5cd3f8392eea745f35ef277bcd01d2d libreoffice-langpack-cy-7.1.8.1-8.el9_1.alma.x86_64.rpm 64ffdcd29ece8778d790a2279d740e64eeb93ce808e6bbcafae06d551987885d autocorr-ca-7.1.8.1-8.el9_1.alma.noarch.rpm 67adb4ab5787b6655cec917858534a8cdc8febcbbb835ca2eaf1be52123cb72f libreoffice-langpack-ja-7.1.8.1-8.el9_1.alma.x86_64.rpm 69c01a6da516225d8ebfa026d6bf4278fc9e36f30a0b0b31a83b824acca7c5b7 libreoffice-langpack-cs-7.1.8.1-8.el9_1.alma.x86_64.rpm 6a9074807c37a341d96e2faea9d93142b69f7645831be53cf70214f363c8096c autocorr-fa-7.1.8.1-8.el9_1.alma.noarch.rpm 6c81b66919480cf8cd63edfdaf98ad1e23445242fc46e02edf04ca75c14c1341 autocorr-dsb-7.1.8.1-8.el9_1.alma.noarch.rpm 6cd9e17e2b3cf4fd8b5c0fcc2f15d1137ed73fc37d2110a65d00fd1c57fda981 libreoffice-help-pt-BR-7.1.8.1-8.el9_1.alma.x86_64.rpm 6eb4ba00aae210031af8829049ce0395ca0eef0471cbb68f4f20b7247812d1bd libreoffice-langpack-th-7.1.8.1-8.el9_1.alma.x86_64.rpm 6ebbfd0bf4757514c0bd9d2ba179f2195f46141e81a79f813ba02b4cb3d2be32 libreoffice-langpack-kk-7.1.8.1-8.el9_1.alma.x86_64.rpm 70d1ce9720c39c844c1bf2f9c2f183124251514c0ad758010d8073360549b27d libreoffice-help-es-7.1.8.1-8.el9_1.alma.x86_64.rpm 71710cee8cbe1056a9e48362af59e029b214c69cdde27eabd18c5a9bfaf21310 libreoffice-emailmerge-7.1.8.1-8.el9_1.alma.x86_64.rpm 71b7ab9cf81969b54606d12512186fac8e1e3f7f12b014ce2f51f8ba5ecd4227 libreoffice-langpack-mr-7.1.8.1-8.el9_1.alma.x86_64.rpm 72cd600d014cf42b367d9b3ab4cee57db545db145189dac4780262c2488e62fd libreoffice-langpack-ca-7.1.8.1-8.el9_1.alma.x86_64.rpm 731392b698bd84ac387db47f4683436c8c088b88325ae222cd4133553d29b22e autocorr-da-7.1.8.1-8.el9_1.alma.noarch.rpm 782d27068da493b5d20eab479d5cbbd5ab8e0fc30f89e0e75507596a4374b866 libreoffice-help-pl-7.1.8.1-8.el9_1.alma.x86_64.rpm 789f5ecccc95740b5e13be7e6a8cfadae3e404fdfb87d0300dd467a163728981 libreoffice-langpack-he-7.1.8.1-8.el9_1.alma.x86_64.rpm 79a68fbc626ff231ddcc16deafff0826be1f1643c5b6b21adf5ec2076e74b2f9 autocorr-ko-7.1.8.1-8.el9_1.alma.noarch.rpm 7c0ff6f32cb72de0e48d1bdb4b3a16deffb51fd800fa90c396f335f956e8973c autocorr-vro-7.1.8.1-8.el9_1.alma.noarch.rpm 7d1dbb2b41a8107c4958db7fd4becd417a7944e19ebef27bfca98339c93ee7d4 libreoffice-help-pt-PT-7.1.8.1-8.el9_1.alma.x86_64.rpm 7d57f2c89f61ff726745b15e87641317eb3c65ed54fa91b60a015ef12a3a719f autocorr-af-7.1.8.1-8.el9_1.alma.noarch.rpm 7e4b810345114ede7b9a309a9383c144c34f6e114acd0a9c1815a7db3371b618 libreoffice-help-it-7.1.8.1-8.el9_1.alma.x86_64.rpm 7fe0ce94e03090b6e5d6a3d3acf19765cdc3ca5fda2371e5822fe0391825bf7b libreoffice-help-hu-7.1.8.1-8.el9_1.alma.x86_64.rpm 807c575272834cac654de801ff4417ee61874d6a6a8410338ce96ee37f433e7d libreoffice-langpack-or-7.1.8.1-8.el9_1.alma.x86_64.rpm 819867b7d93d93bc59ad661c835f50074818e15b675480914d286ff3af10794c libreoffice-help-ja-7.1.8.1-8.el9_1.alma.x86_64.rpm 84769ce8b73f1f1842a33ec85ad931a4335c7ab890d663432b34ae15a2af843c libreoffice-help-lt-7.1.8.1-8.el9_1.alma.x86_64.rpm 84dcbda154230874c6ff62e189245bb42bffc548511d32bcd6001f295afbd59d libreoffice-langpack-as-7.1.8.1-8.el9_1.alma.x86_64.rpm 8510ccd68e0ac840589fb21a4448084a7fa69c9012f1411472f7ed4be2c51685 libreoffice-help-eu-7.1.8.1-8.el9_1.alma.x86_64.rpm 8711b2a623d7fb87412071717ce6482572afffa55b679e8e5760078136a46386 autocorr-nl-7.1.8.1-8.el9_1.alma.noarch.rpm 88f0bb230503627426b2b5d667587bed48b6342640bece019c1facce59a01e7c libreoffice-langpack-el-7.1.8.1-8.el9_1.alma.x86_64.rpm 8c289f7aa9fb589cb2bf202db31f32737e7d903441d9a77d6676da01e774923c autocorr-en-7.1.8.1-8.el9_1.alma.noarch.rpm 8dac52cf4a0195fae6d521c17b6a190b5a304d7aedae9ba199ee900d2f5d9bf4 libreoffice-wiki-publisher-7.1.8.1-8.el9_1.alma.x86_64.rpm 8e2d84bc80c1a3d8c52ac0a2933cb4329145d31246609f1ed6006da2007520e7 libreoffice-langpack-dz-7.1.8.1-8.el9_1.alma.x86_64.rpm 8e5b3703fef9e6d3f94c776409f085a47303b769bff996de31352149d25b95b8 libreoffice-help-he-7.1.8.1-8.el9_1.alma.x86_64.rpm 8f88040fb58c0b33e1678abf02a6c1e645c352a214c5c03db7d5057f68646ae5 libreoffice-langpack-fi-7.1.8.1-8.el9_1.alma.x86_64.rpm 8fa7471ac23f035b189e73f3c24a04999bf55422227eba6c068b801552995f98 autocorr-de-7.1.8.1-8.el9_1.alma.noarch.rpm 9042d8599396e7117a1b428c61fc527cb0c10d8a9cabde997c2ca28f3853c0f9 libreoffice-help-gl-7.1.8.1-8.el9_1.alma.x86_64.rpm 91f419a46bcab2b5b0a8755ae011d035d905554d98dc2f3264bdd5412c834d5f libreoffice-langpack-pt-BR-7.1.8.1-8.el9_1.alma.x86_64.rpm 9336d083f876fe8d91744a810dda2d33eb2b94d1e992cb2aaef5d8d8be5a2b2b autocorr-hsb-7.1.8.1-8.el9_1.alma.noarch.rpm 935eafe3250756edfba87f3fc170d07bda7305b76f4ec3bbd258787d1b7c3eb9 libreoffice-langpack-eo-7.1.8.1-8.el9_1.alma.x86_64.rpm 968a08d3cfdde8a80b9c9a9e1d15ed4887e5de26f5e33eba92a133a4ed32b6ec libreoffice-help-nb-7.1.8.1-8.el9_1.alma.x86_64.rpm 98698cc65f58180f4465e318257b077c75c829ea2f13d2a2c2cb518d37dc4477 libreoffice-langpack-ru-7.1.8.1-8.el9_1.alma.x86_64.rpm 9be25f78d80b52b5c7d7968898d6303fef357e39d5468289e803ac1b8ddc8790 libreoffice-langpack-uk-7.1.8.1-8.el9_1.alma.x86_64.rpm 9c9d65e258eb555ffd4f8a672dad23c0e42986bd2997113e0652313fa564dd12 libreoffice-help-si-7.1.8.1-8.el9_1.alma.x86_64.rpm 9ec0695b0579d9d6500d8b6b8437526833870665e463eb1f6437c769ebd7edf0 libreoffice-langpack-da-7.1.8.1-8.el9_1.alma.x86_64.rpm 9f2d04534310210cf6d34ae493858e4f2d6a2dcbdde216aee22a32ac01178587 autocorr-lt-7.1.8.1-8.el9_1.alma.noarch.rpm 9f4130565d2ea3d19f92ba969ca9517fea40d15f2ce72d12699f88827c4e01c2 libreoffice-langpack-ga-7.1.8.1-8.el9_1.alma.x86_64.rpm 9fcf8803b5a10a9c1780c731f457cdd14115d0777df0277b90e297acd0812fb3 libreoffice-help-uk-7.1.8.1-8.el9_1.alma.x86_64.rpm a193a00e983ce81bbb6a9205159ff562ed59b4a2d4abc40e8267a40ac6ce7c6d libreoffice-langpack-it-7.1.8.1-8.el9_1.alma.x86_64.rpm a2a4b99cb85a9a0ef03b847afb83a30097b3fc57902eee65d4f6312cd63d28a1 libreoffice-filters-7.1.8.1-8.el9_1.alma.x86_64.rpm a421389fac6984d28b19f095aad68a86931267af115fa531781af2dc3b73f54a libreoffice-langpack-si-7.1.8.1-8.el9_1.alma.x86_64.rpm a49d498baa75c7910ae1563238d6314e2dbdb0f9757589c96d40e6546ca663a1 libreoffice-xsltfilter-7.1.8.1-8.el9_1.alma.x86_64.rpm a5dd9d781310f3bf6ff7be6786799ba0c38db4be6c2d5400957b9f4b0e743f4a autocorr-fi-7.1.8.1-8.el9_1.alma.noarch.rpm a67b616ff1cb7bf60a559a202f891e6da2913dc825f66f01dd28d0f03f9307d2 libreoffice-help-eo-7.1.8.1-8.el9_1.alma.x86_64.rpm a870f52d829a20ab7d237c6024675694d233a4f4e2cb69061d4c5c9a47209791 libreoffice-help-nn-7.1.8.1-8.el9_1.alma.x86_64.rpm ad3f7f9601a8fd8644113990771336d523989a2d967c42bf130e9369336afd73 libreoffice-langpack-tn-7.1.8.1-8.el9_1.alma.x86_64.rpm add4bc7de89b5a00d20bebc9fa052af7db9cf7f53c2b77534e083dea50b7cca0 libreoffice-langpack-zh-Hant-7.1.8.1-8.el9_1.alma.x86_64.rpm ae8f6cf31d90fc253fbffa586c921010e70cb82fc8abb3330d40fc10f7cca10e libreoffice-langpack-zh-Hans-7.1.8.1-8.el9_1.alma.x86_64.rpm b02ecc0be9e74693ce526fdb20ecfd41485cbae0eb8c8b4690bb245f10c2a14b libreoffice-langpack-ko-7.1.8.1-8.el9_1.alma.x86_64.rpm b06b72dea9c06c03cdaffc2ab0a9555bf77d3ca22085296d5f34644fc91df12f autocorr-es-7.1.8.1-8.el9_1.alma.noarch.rpm b07b4669d8b047db9118726afaa676050183519e6cc6a7b2b34dba25b31f0dcd libreoffice-langpack-fa-7.1.8.1-8.el9_1.alma.x86_64.rpm b2891e6f4aff36c60208185d3d4f8bca574ba1d98393b991b5a7103657e85939 libreoffice-langpack-bg-7.1.8.1-8.el9_1.alma.x86_64.rpm b31e144b84a1559b342f7e40c0490e226e48ec419a2fafeeea0cd571ea1f6300 libreoffice-langpack-et-7.1.8.1-8.el9_1.alma.x86_64.rpm b4b7a3222dd63c869a587b9d3915ecfbfad36eaa43030043ae8d0553b72f930a libreoffice-langpack-gl-7.1.8.1-8.el9_1.alma.x86_64.rpm b4c7e1eabb229cac8619c375b2d967e29eebe12b362070ba45445c797f25047f autocorr-fr-7.1.8.1-8.el9_1.alma.noarch.rpm b52344015aa39080f4e92ec6ce1f81f971bb11d9efa6aefef9d183a169ecf2bb autocorr-ru-7.1.8.1-8.el9_1.alma.noarch.rpm b6f77412865d66a179b412a6c3084fccded14c8f8a8f7a988d8744b821ecd1c8 libreoffice-data-7.1.8.1-8.el9_1.alma.noarch.rpm b787bec445391f6bc4b82b56953644b186e5582a3b309a531825453eaa9bca1b libreoffice-langpack-sv-7.1.8.1-8.el9_1.alma.x86_64.rpm ba74f441456017c95b90a1c4d192352e4548f834b52d585b7ab491af2562c4bf libreoffice-help-hi-7.1.8.1-8.el9_1.alma.x86_64.rpm bcb2c142467076c630e0718fab4ccd64fe8f3e2bd857e89260a9c87d0098fc29 libreoffice-langpack-en-7.1.8.1-8.el9_1.alma.x86_64.rpm bd26207f20add174627fd07c55c5a861b4501fc07a0eb60b6db3b87a0492450a libreoffice-help-zh-Hant-7.1.8.1-8.el9_1.alma.x86_64.rpm bdd040c5f6dc0fd17f7902b636b902d7091e3bdeaff420c6f3bb74b0aa485420 libreoffice-langpack-hi-7.1.8.1-8.el9_1.alma.x86_64.rpm bea50fcc9f3a33dd806b34805238a69ac56dcd3ac8fa7133aca3a47a3508b1c4 libreoffice-pyuno-7.1.8.1-8.el9_1.alma.x86_64.rpm c0996edbb4920bdf1a5e4e091103d11ae06711a1e7b0d5a2d8e6eecc7dc42de8 libreoffice-help-dz-7.1.8.1-8.el9_1.alma.x86_64.rpm c5142a1cf6c714fb99273f3e2312327ab51a47fb4d0fa2c6ada4c7f009d71a39 libreoffice-help-cs-7.1.8.1-8.el9_1.alma.x86_64.rpm c6495b64045f741be70ea1d7b9679a684a625b0c48ae0ed75c0ccc06c07402a1 libreoffice-help-sk-7.1.8.1-8.el9_1.alma.x86_64.rpm c7c8628a3fdfac32bf717777aa92da63968ee191e5e74232dc569943b5f2ad21 autocorr-it-7.1.8.1-8.el9_1.alma.noarch.rpm c8f56e7360b7e4af1265a2574592af8c2b3facaba813e996a7316fa0b1357af4 libreoffice-langpack-bn-7.1.8.1-8.el9_1.alma.x86_64.rpm c9f2b9fda5ef0e01d862dd91ca9548677146f6b5dab55636f09694ea2f3a1e0e autocorr-mn-7.1.8.1-8.el9_1.alma.noarch.rpm cc8686ce73c4edc93dfe123528a7324f9b0b6f3f790d12571f5805141a63cc84 autocorr-hu-7.1.8.1-8.el9_1.alma.noarch.rpm cf72968a3c1498d0e1146a91620c2f2c956b1dcb92ade3589d814d73df7dd7ff libreoffice-langpack-lt-7.1.8.1-8.el9_1.alma.x86_64.rpm d44791ced0510313738c1cc5e401bb593bb3c9c8430c8547e304a5b6a4a4757c libreoffice-langpack-sr-7.1.8.1-8.el9_1.alma.x86_64.rpm d464c4f01450fff063f032a447b2899c9c1379337cd797b1f05f27af0ea8e48c libreoffice-langpack-nso-7.1.8.1-8.el9_1.alma.x86_64.rpm d47b20fca4d0ff8d3be96dcb0f57727194366a65b4699de26318c292fe645e91 libreoffice-langpack-lv-7.1.8.1-8.el9_1.alma.x86_64.rpm d4fec2b7ba6027bc29cae9674e5630a15891d0bf2e0072734dfbf9e01b355fc0 libreoffice-langpack-ts-7.1.8.1-8.el9_1.alma.x86_64.rpm d680937aff244d893fbe1b8842b57c7e8f7c7ca9c7c1a1a792067a493c4985fc libreoffice-base-7.1.8.1-8.el9_1.alma.x86_64.rpm d84f29d86c8fdd295402c2173c890c1f48f79bba008aeadf600241ad037ba481 libreoffice-calc-7.1.8.1-8.el9_1.alma.x86_64.rpm d9fe0c72aa24edc6a0793f497ab2d04c95767344a09b6ab801c263f6e49e553a libreoffice-impress-7.1.8.1-8.el9_1.alma.x86_64.rpm dd74c2582f079e47456cb0fb41521fca1013703825ff90bcf535b57de94cd6ac libreoffice-ogltrans-7.1.8.1-8.el9_1.alma.x86_64.rpm df3a0f137071423dd26430a1620b3ccd69bc77d481bd487a8b0ecbb57a54ebff libreoffice-langpack-ar-7.1.8.1-8.el9_1.alma.x86_64.rpm df822d0ec6f6f83ec3ffbf9709a900be941b4b2b74eca07b200a4490ce3eb224 autocorr-zh-7.1.8.1-8.el9_1.alma.noarch.rpm e02d336ee3abb904c676597afe677c3ea019da36d74fc8eb0a5d22791b11f1de libreoffice-help-el-7.1.8.1-8.el9_1.alma.x86_64.rpm e18e5781571f1ec7e1fe6544daa6507bc46f59c6a3c34158c69e00eb30850dc2 libreoffice-langpack-hr-7.1.8.1-8.el9_1.alma.x86_64.rpm e27ca97912a540797812a42509485f037c1e122dc2fb8731e1b48e1909a48d31 libreoffice-core-7.1.8.1-8.el9_1.alma.x86_64.rpm e2e750ab117c193e29e6d01b87c04cac9d04e69161fdb317a074b1769e41c030 libreoffice-opensymbol-fonts-7.1.8.1-8.el9_1.alma.noarch.rpm e3829098af6e4585194f6dae23105fd20bb76ba66e8ef14b82a0c5645233d5b0 autocorr-hr-7.1.8.1-8.el9_1.alma.noarch.rpm e57b366791763ce019e2408d0be6941313098060ab683cf8da7eb0d428ee805f libreoffice-help-ro-7.1.8.1-8.el9_1.alma.x86_64.rpm e782d63685da3dfff24e3c16d57d4cc0f6f2c3af72cc1f2768fff960a7d53d6e libreoffice-ure-7.1.8.1-8.el9_1.alma.x86_64.rpm eb3ae49ff4ad6b8cc718acca09ba49e71159b580f53416458609e1fb0e4ff215 libreoffice-help-bg-7.1.8.1-8.el9_1.alma.x86_64.rpm ee42ae34bb349acf9f806f5f67160feb3d1eb57b57b0d90067c2bb2cbb950356 autocorr-ja-7.1.8.1-8.el9_1.alma.noarch.rpm f00f423978fb8681748fb7fcaa6c8b2c73445be5166ab5c4fe22d79da87f4b8e libreoffice-gtk3-7.1.8.1-8.el9_1.alma.x86_64.rpm f2b1f8c2db77dde991d4342df867acf74c754cf97013e4307bcb7c2229fc7f93 libreoffice-langpack-te-7.1.8.1-8.el9_1.alma.x86_64.rpm f2ba873b9d8c50aecd7b4e838a4c1179730282e74e235ddb97ff378efbef3939 libreoffice-langpack-ve-7.1.8.1-8.el9_1.alma.x86_64.rpm f403fd9f88c3f0cdc34643fa74d265a626b817dc8505c438d43c33fb15d32eeb autocorr-el-7.1.8.1-8.el9_1.alma.noarch.rpm f474b27d6bf4d0a7605f64f929bf49549120ea7f7d42630bd222b2acffd25fb1 libreoffice-help-ta-7.1.8.1-8.el9_1.alma.x86_64.rpm f4846eeadcbb0846d5df40244a0af28c04efb5ecda4b71a4b9313f22be85ae69 libreoffice-langpack-id-7.1.8.1-8.el9_1.alma.x86_64.rpm f7566d573a7defc618470773ffec491978cfd9ea302a12042ccd8916659fc0ad libreoffice-langpack-nn-7.1.8.1-8.el9_1.alma.x86_64.rpm fe83338ad1e569639de5bbcff8b652c9b5299a4256a9e96e19e731a393b35565 ALSA-2023:0318 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql-jdbc security update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): * postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names (CVE-2022-31197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default postgresql-jdbc-42.2.18-6.el9_1.noarch.rpm e1f3513307b00a0bb322d145d84d83a6a537d9878b59f078f89b7536ebc3745e ALSA-2023:0321 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs and nodejs-nodemon security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.18.1), nodejs-nodemon (2.0.20). Security Fix(es): * minimist: prototype pollution (CVE-2021-44906) * nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517) * nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256) * nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * nodejs: Packaged version of undici does not fit with declared version. [almalinux-9] (BZ#2151627) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default nodejs-docs-16.18.1-3.el9_1.noarch.rpm 124046435a99e559841aa8ddd18093569656cdcf6cd39c08f237736a508bfb4a nodejs-libs-16.18.1-3.el9_1.i686.rpm 42044ad22c4df58248d8928947ddfa4a68f4d97f28f1a015e1a7d5fd2a903b30 nodejs-nodemon-2.0.20-2.el9_1.noarch.rpm 609eaededba0f488032abeb94fa0bf2acb4a4b47d33f3361c396f72cdcc71abc nodejs-16.18.1-3.el9_1.x86_64.rpm 945a3846f09709c2af1520d9c462b042c7554b9ad8fb7106b104bf367ac42964 nodejs-libs-16.18.1-3.el9_1.x86_64.rpm c9a8a35f5df5117a821240b369e7e93d89bc26de5dfcc270474b7424fced0ce6 nodejs-full-i18n-16.18.1-3.el9_1.x86_64.rpm e9a341499da332f81e3fed16cab4501965bce431fbe0d610dd52b0bb21a48c86 npm-8.19.2-1.16.18.1.3.el9_1.x86_64.rpm f08fb93210d3bcfeb1bac1cbc1c717f4c8449cedf76d333c04df351c27b33f8e ALSA-2023:0328 Copyright 2023 AlmaLinux OS 0 1 Moderate

go-toolset and golang security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Internal linking fails on ppc64le (BZ#2144547) * crypto testcases fail on golang on s390x [almalinux-9] (BZ#2149311) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default golang-race-1.18.9-1.el9_1.x86_64.rpm 2303beb0b278a9724e41efd5292a193ff6ed360ad01dcfb78e56ce9abccbf65e go-toolset-1.18.9-1.el9_1.x86_64.rpm 34727486152c5b61c2af25d49230c4ac1379b431468f4df1465efc50cd3d8553 golang-tests-1.18.9-1.el9_1.noarch.rpm 36b4b46538c05b8c5b649b551364130d4d6c637b844a82e37ba54f2b20d533da golang-bin-1.18.9-1.el9_1.x86_64.rpm 36cae1794ec74054f0affbc6d88cb0c7f3afc1ee4a270e7b81c914b1adf8a4cd golang-1.18.9-1.el9_1.x86_64.rpm 7421e74603f21bfbcbaa3c05b549cadb101bfbd7bbb34a21df1fa0b6a0cdfdbf golang-docs-1.18.9-1.el9_1.noarch.rpm 90e4104f56f278b9961ee177c36d70ff4f57aceff7d580ace8033bf56d2575d3 golang-misc-1.18.9-1.el9_1.noarch.rpm b3591a2484054919826337e2b1dcc6bd766634c2117726cb9125c2445db4b217 golang-src-1.18.9-1.el9_1.noarch.rpm d67d295694d8a9a8e72089c151956c9000a6dbea9c3f0f81025cca90cc171652 ALSA-2023:0333 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: POST following PUT confusion (CVE-2022-32221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libcurl-devel-7.76.1-19.el9_1.1.i686.rpm 0a52524fd9c499fd43a0e305939c458123d63514cbe5e1a3ab30563c471f6933 libcurl-devel-7.76.1-19.el9_1.1.x86_64.rpm 9763af6510f356e208841d182dbc8d145d7e80c59be894a2d6e392a85b663056 ALSA-2023:0334 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959) * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964) * kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139) * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945) * kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077) * kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Intel 9.2: Important iavf bug fixes (BZ#2127884) * vfio zero page mappings fail after 2M instances (BZ#2128514) * nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359) * ice: Driver Update to 5.19 (BZ#2132070) * WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588) * drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619) * updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914) * DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213) * No signal showed in the VGA monitor when installing AlmaLinux9 in the legacy bios mode (BZ#2140153) * Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142168) * ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976) * fatal error: error in backend: Branch target out of insn range (BZ#2144902) * AMdCLIENT: The kernel command line parameter "nomodeset" not working properly (BZ#2145217) * Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910) * Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2151605) * DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress (BZ#2154407) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default perf-5.14.0-162.12.1.el9_1.x86_64.rpm 396b022ff714f2d935eb89f73aa6619937a2a2a526a28c3d37a8c08e9f4f696a kernel-doc-5.14.0-162.12.1.el9_1.noarch.rpm 3b99cc439dc2e719deb6fede6a076bacfb11ecfc0c5585bfd6bc2ae308d9bb86 kernel-debug-devel-matched-5.14.0-162.12.1.el9_1.x86_64.rpm 94568871def78ba9168a5a83469574bd79597f04160b8bc8c0fe07ef773bec4f kernel-devel-matched-5.14.0-162.12.1.el9_1.x86_64.rpm d483eff74ae77415937b3545f78cb1ccc329b0c0bde1635ce2b78ed4ef526b9b kernel-debug-devel-5.14.0-162.12.1.el9_1.x86_64.rpm ded1dcce740f0c0f119314635e634a299f61f6c7d4f8694e9cfa5c22015c3e61 kernel-devel-5.14.0-162.12.1.el9_1.x86_64.rpm f7bede58ecaf366660ae0b9942f4bb76017691ff40b8ab60ca1a9dcbdfc44637 ALSA-2023:0335 Copyright 2023 AlmaLinux OS 0 1 Moderate

dbus security update

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fix(es): * dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010) * dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011) * dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default dbus-daemon-1.12.20-7.el9_1.x86_64.rpm 73be12f0f0eb20913849e68e59892db8eeb8cdee2074a33a2f6350db4c9409dc dbus-devel-1.12.20-7.el9_1.x86_64.rpm b2d9698e946982a570fff94944a36feaad43686ce055530caca1bd939211f8c6 dbus-devel-1.12.20-7.el9_1.i686.rpm c97a2b53d1e239d3ee880222cfdcbdf1313303a277cf692261e303b1b3acd3f4 dbus-x11-1.12.20-7.el9_1.x86_64.rpm c9a27e7070c3c3cd43453d4600eea41e92b8ea82bee69ae3b1e8784ab96aaabb ALSA-2023:0336 Copyright 2023 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: buffer overrun in format_timespan() function (CVE-2022-3821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default systemd-devel-250-12.el9_1.1.x86_64.rpm 1a7297747807003da4d6b59fe98eb49fa09e90db637a27e1ad829e0093e82738 systemd-devel-250-12.el9_1.1.i686.rpm 7c6f4e761a67f60983681d590c48201fe3e4068f5135103b8309cbadc7b421bc systemd-journal-remote-250-12.el9_1.1.x86_64.rpm 9d796bfaf97045e4bf88576993e2d846b3b76cc546f2936a78eb4e7eaf888b88 ALSA-2023:0337 Copyright 2023 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (CVE-2022-43680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default expat-devel-2.4.9-1.el9_1.1.i686.rpm 6a353ed990dc8bd976f4ea7575bf477b585f2090c14070e60bd292dbfa262a41 expat-devel-2.4.9-1.el9_1.1.x86_64.rpm ebb62522a6b18270b8177e06ab846dc2de31ae59056580533dffb832d7b84a9d ALSA-2023:0338 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303) * libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libxml2-devel-2.9.13-3.el9_1.x86_64.rpm 08c9c29db1b5d2b8b1c9a744c0b25db06f18114359c2271c1391b7c96a0ba2ee libxml2-devel-2.9.13-3.el9_1.i686.rpm e88a32183012fa1d33c0fc41d11f6547faef3af02ed6086c58a7492a5b31fde6 ALSA-2023:0339 Copyright 2023 AlmaLinux OS 0 1 Moderate

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API (CVE-2022-35737) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default sqlite-3.34.1-6.el9_1.i686.rpm 52f2dad3c8bdd07fcf6ea66cee424117f0f1eae0412cb2f034e94fd03103a6a1 sqlite-devel-3.34.1-6.el9_1.x86_64.rpm 9c93c0e86ef23ab5323eff82d5afcc598b1a020b7b94ce0e433f8f1a7a7f2d2c sqlite-3.34.1-6.el9_1.x86_64.rpm f86a257a8f788fc08f52f3c366ef95771a8ddea2c3ed802e118adef5f4c4faec sqlite-devel-3.34.1-6.el9_1.i686.rpm fddbbd6f4326465db380b6e3b7d9589f9ae6fce3242b1804e77487854bf2b294 ALSA-2023:0343 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libtasn1-devel-4.16.0-8.el9_1.i686.rpm 12bc8e2273e2d368727a7c240b57228ff600f6637adb48b991b78f51c1da8e07 libtasn1-tools-4.16.0-8.el9_1.x86_64.rpm b40be74b688493f5a522986914ea83b272010aeeb2092008982c3639e991f0e3 libtasn1-devel-4.16.0-8.el9_1.x86_64.rpm dbebf875e5b3472149528ebdbd874f3a5d178dde71a5d6b628108d0c6a5d198b ALSA-2023:0383 Copyright 2023 AlmaLinux OS 0 1 Important

libXpm security update

X.Org X11 libXpm runtime library. Security Fix(es): * libXpm: compression commands depend on $PATH (CVE-2022-4883) * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617) * libXpm: Infinite loop on unclosed comments (CVE-2022-46285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libXpm-devel-3.5.13-8.el9_1.x86_64.rpm 2e9410d0418317e8db5a7a1af6bb09ee05d94402000b17ef83d0dd4b14e0d786 libXpm-3.5.13-8.el9_1.x86_64.rpm 5ae4cf2431eef2c0f025647bb722585d7d5bb6158c38ab3de3bd6a4b94f1424d libXpm-3.5.13-8.el9_1.i686.rpm a480fde4a4e7588afd28669f37c5d99d6fce30ca4b2242339d9f3291e10b2007 libXpm-devel-3.5.13-8.el9_1.i686.rpm fb0049df50b019cd939de8765800b76f9fa151263f27e32a1be97e5a27bc2401 ALSA-2023:0476 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fix(es): * Mozilla: libusrsctp library out of date (CVE-2022-46871) * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598) * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605) * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599) * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601) * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers (CVE-2023-23602) * Mozilla: Fullscreen notification bypass (CVE-2022-46877) * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive (CVE-2023-23603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default thunderbird-102.7.1-1.el9_1.alma.x86_64.rpm ea8bdb087784435b09404dc9fdfba44e28dd7c1519509993f38f3c954f0e6880 ALSA-2023:0608 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fix(es): * Mozilla: Revocation status of S/Mime signature certificates was not checked (CVE-2023-0430) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default thunderbird-102.7.1-2.el9_1.alma.x86_64.rpm b6c3750767309c30ddbbfd8f54bd4e662fb751d39c7acfbedf14fd299a788904 ALSA-2023:0611 Copyright 2023 AlmaLinux OS 0 1 Important

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: gitattributes parsing integer overflow (CVE-2022-23521) * git: Heap overflow in `git archive`, `git log --format` leading to RCE (CVE-2022-41903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default gitweb-2.31.1-3.el9_1.noarch.rpm 0144c7a0031331fc2005e2dcba435f383ede2326425ca610305d67af21c3fdae perl-Git-2.31.1-3.el9_1.noarch.rpm 02f67f177a8b7b68253f1a14b5ff83e1aeda91810ce2854e6fe9296bb90d4f2a git-email-2.31.1-3.el9_1.noarch.rpm 15342999f25d473595061ccbaac115c900412edd5d487f2942ea848eafe7453e git-all-2.31.1-3.el9_1.noarch.rpm 1d8420694c41b43364dda7c452660014fd9c569e41c36336b6771c41dd586477 git-subtree-2.31.1-3.el9_1.x86_64.rpm 399224579662339ecf2d34de285eca7abbc5cc6f0b9ce63b50f22959dd57c3e0 git-core-2.31.1-3.el9_1.x86_64.rpm 477db3301bde72db96b8c776173847a62ddeb9cde24440896515aa3db848baa7 git-core-doc-2.31.1-3.el9_1.noarch.rpm 596a127aedfcb5246b203f64577f643ae5bfdf71a6ca0cf17e08aef5ba567dcb git-gui-2.31.1-3.el9_1.noarch.rpm 7df98a9ba52a92c739e22cf618703d0d02d9ed5fbf5bf71eef68ba7e6a8ac213 git-2.31.1-3.el9_1.x86_64.rpm 8b34b1cbd39a76a9d9d49d44dadf77e1519103796d5deed7474e2b4bcbd911d8 gitk-2.31.1-3.el9_1.noarch.rpm 9766f7949e4c866a285c863ad738c39ae4c27c1564a37e99d40faf2de042de90 git-daemon-2.31.1-3.el9_1.x86_64.rpm 97bbb3df531fe658b8b70761f95ae71cea7f89935c07d83f88d693c653165a25 git-instaweb-2.31.1-3.el9_1.noarch.rpm 98e5682d625dcd29a2c589ea6c3baf17f04fc64946acaa6ce5f9acb6b38a5250 git-credential-libsecret-2.31.1-3.el9_1.x86_64.rpm d0bd8ba6812bce677cb3e7fdb6a61ae43366556fa9ebf4e9d8c46aaafca796e5 perl-Git-SVN-2.31.1-3.el9_1.noarch.rpm dcc7789f454ba62248fa75a95eb332badc751de25c031b89226d7092d7304870 git-svn-2.31.1-3.el9_1.noarch.rpm f1d0778ffb02312fb2ed05cce0146953c6027d67f3627a8a5bda53dfbb7f23e1 ALSA-2023:0622 Copyright 2023 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default tigervnc-icons-1.12.0-5.el9_1.1.noarch.rpm 0933d7e5d07776398f71248b5bf23351f5f549d69014a9fecf739d2cddd977b0 tigervnc-server-1.12.0-5.el9_1.1.x86_64.rpm 1ea2f0f566894cc63ab9fe405e481407d6d887bfe657c3eb1e7a2e7e466fdb81 tigervnc-1.12.0-5.el9_1.1.x86_64.rpm 42d40f7edd202555fae3103d0b749eedd98b750c0f244cd2a3d2fcbb1baf1c3c tigervnc-selinux-1.12.0-5.el9_1.1.noarch.rpm 728a52e2fc345721666a6ac2c8c7c5f6826077f7cfd550b017f78c16389b07f3 tigervnc-server-minimal-1.12.0-5.el9_1.1.x86_64.rpm 88a7f3afd94800aafebe3f5d4d51fb0c00704108f120f475a51d9122200c323f tigervnc-server-module-1.12.0-5.el9_1.1.x86_64.rpm 91415c5486ae06d12c721a09c4e91ff98a28d6104a070c9f3ed9e316034d3772 tigervnc-license-1.12.0-5.el9_1.1.noarch.rpm 9ff23dea5996323a873dd14efd719829917875164325fd50d396325dc29ed839 ALSA-2023:0810 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.8.0 ESR. Security Fix(es): * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default firefox-x11-102.8.0-2.el9_1.alma.x86_64.rpm 4d7e425479e4ad3194eececce2e6ee9542351d90d3ef0ca4c4111f7c70a2cbbc firefox-102.8.0-2.el9_1.alma.x86_64.rpm 6347aa4980a80ae3b3735a32fdef6b52eef3077b021bd132f50ab8cd65798d22 ALSA-2023:0824 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.8.0. Security Fix(es): * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default thunderbird-102.8.0-2.el9_1.alma.x86_64.rpm 61585e36c901cb932b94a3fe60382fd0dbab569af28a527f086721762ec217f5 ALSA-2023:0903 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: processing maliciously crafted web content may be exploited for arbitrary code execution (CVE-2023-23529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default webkit2gtk3-jsc-2.36.7-1.el9_1.2.x86_64.rpm 1b958ab7f70132088f41bab2e46a789a98c4e753b2e2e5ae69d06a554d4d2e0b webkit2gtk3-jsc-devel-2.36.7-1.el9_1.2.x86_64.rpm 4bf59392d410b647fb5963f303fed964eff3e815779e1884ff87b91e98c515af webkit2gtk3-jsc-2.36.7-1.el9_1.2.i686.rpm 533de69a70cd0df71bf130fefcb01d877cad39da08fa718255b0cf5a5c13eb1d webkit2gtk3-2.36.7-1.el9_1.2.x86_64.rpm 53de19eae743df5f1949eb23f236b5f513b89a1fc754ffe3ca8b5eb3d73637f4 webkit2gtk3-2.36.7-1.el9_1.2.i686.rpm 793466aae60f421c5d3e5ccd03380f5a159580268f31962d9f8f8e07d58e68b6 webkit2gtk3-devel-2.36.7-1.el9_1.2.i686.rpm a5647bd7f32ad7b1994cfca09ee88472f5cde671da69ff43a6a5e367034b9f62 webkit2gtk3-jsc-devel-2.36.7-1.el9_1.2.i686.rpm c9407063fa71017fa7b4de32d5139b465acc43de25761d3d880fb405b960ec96 webkit2gtk3-devel-2.36.7-1.el9_1.2.x86_64.rpm cff0d90abc1c69e7a3331c1d70a3677902c3164024f8f334aa814a97d9a33b7d ALSA-2023:0946 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: read buffer overflow in X.509 certificate verification (CVE-2022-4203) * openssl: timing attack in RSA Decryption implementation (CVE-2022-4304) * openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450) * openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215) * openssl: invalid pointer dereference in d2i_PKCS7 functions (CVE-2023-0216) * openssl: NULL dereference validating DSA public key (CVE-2023-0217) * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) * openssl: NULL dereference during PKCS7 data verification (CVE-2023-0401) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * HMAC generation should reject key lengths < 112 bits or provide an indicator in FIPS mode (BZ#2144000) * In FIPS mode, openssl should set a minimum length for passwords in PBKDF2 (BZ#2144003) * stunnel consumes high amount of memory when pestered with TCP connections without a TLS handshake (BZ#2144008) * In FIPS mode, openssl should reject SHAKE as digest for RSA-OAEP or provide an indicator (BZ#2144010) * In FIPS mode, openssl should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144012) * In FIPS mode, openssl should reject RSA signatures with X9.31 padding, or provide an indicator (BZ#2144015) * In FIPS mode, openssl should reject SHA-224, SHA-384, SHA-512-224, and SHA-512-256 as hashes for hash-based DRBGs, or provide an indicator after 2023-05-16 (BZ#2144017) * In FIPS mode, openssl should reject KDF input and output key lengths < 112 bits or provide an indicator (BZ#2144019) * In FIPS mode, openssl should reject RSA keys < 2048 bits when using EVP_PKEY_decapsulate, or provide an indicator (BZ#2145170) * AlmaLinux9.1 Nightly[0912] - error:03000093:digital envelope routines::command not supported when git clone is run with configured ibmca engine backed by libica.so.4 (OpenSSL 3.0) (BZ#2149010) * OpenSSL FIPS checksum code needs update (BZ#2158412) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default openssl-perl-3.0.1-47.el9_1.x86_64.rpm 4a4df0837e1159a813151ef97ca398246bf3a0188406f7fbceaa9dc8ae7218e7 openssl-devel-3.0.1-47.el9_1.x86_64.rpm 97c9a9dcda8c5d614bfb7d41103c1d44128d8ebf9727fb538e9301eba7815edc openssl-devel-3.0.1-47.el9_1.i686.rpm b2d37c816aba81b64f4ef993cad7add3c3cd631e278f1bc8eaeaf52294ff9284 ALSA-2023:0951 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564) * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378) * kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379) * kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179) * kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux 9.0: LTP Test failure and crash at fork14 on Sapphire Rapids Platinum 8280+ (BZ#2133083) * AlmaLinux 9.1 Extending NMI watchdog's timer during LPM (BZ#2140085) * AMDSERVER 9.1: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151274) * qla2xxx NVMe-FC: WARNING: CPU: 0 PID: 124072 at drivers/scsi/qla2xxx/qla_init.c:70 qla2xxx_rel_done_warning+0x25/0x30 [qla2xxx] (BZ#2152178) * Regression: Kernel panic on Lenovo T480 with AH40 USB-C docking station (BZ#2153277) * Scheduler Update (almalinux9.2) (BZ#2153792) * AlmaLinux9.1, Nx_Gzip: nr_total_credits is not decremented when processing units are reduced by dlpar in shared mode. (FW1030 / DLPAR) (BZ#2154305) * MSFT, MANA, NET Patch AlmaLinux-9: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155145) * Azure vPCI AlmaLinux-9 add the support of multi-MSI (BZ#2155459) * Azure AlmaLinux-9: VM Deployment Failures Patch Request (BZ#2155930) * The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158815) * AlmaLinux-9.2: Update NVMe driver to sync with upstream v6.0 (BZ#2161344) * CEE cephfs: AlmaLinux9 cephfs client crashing with RIP: 0010:netfs_rreq_unlock+0xef/0x380 [netfs] (BZ#2161418) * block layer: update with upstream v6.0 (BZ#2162535) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default kernel-doc-5.14.0-162.18.1.el9_1.noarch.rpm 132054043f8a786ac13369528713e8bc90a32b11706eae46f55cd94066c7cf67 kernel-debug-devel-5.14.0-162.18.1.el9_1.x86_64.rpm 4bf680fae6b44195eba92f7fad7af2fc6a516575180379d89727227c8094f677 perf-5.14.0-162.18.1.el9_1.x86_64.rpm 6cd3ae227e98383bd348a5529e3ccbf60fef6eca75c3eeacccc2a514025a0e78 kernel-debug-devel-matched-5.14.0-162.18.1.el9_1.x86_64.rpm 6ff79520c66310b35dac7fa34f6b7a3e5f64f0d27084270ab5b7cf709c8d68ce kernel-devel-5.14.0-162.18.1.el9_1.x86_64.rpm 92589afa4b11446416f0f18b6f93c4816497c65d92ca957126a3a7245388e3a5 kernel-devel-matched-5.14.0-162.18.1.el9_1.x86_64.rpm d6d1911af0db24c40cadafd2457f7a9b9ad39282fbfc32a5c6046cca7b99e1fd ALSA-2023:0953 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default python3-devel-3.9.14-1.el9_1.2.x86_64.rpm 47d02f154292ffb9c588b1fd0308eadd9ce0a1d36b6eea5da16e82c6abbde697 python-unversioned-command-3.9.14-1.el9_1.2.noarch.rpm 4c196d0362e2bfad00a4627155c295f8b60bbca8eef7be0a51c7e85c57ed1579 python3-devel-3.9.14-1.el9_1.2.i686.rpm 5daefeafda23153caa006219cd3c4fcce3c8a6d4622158df697a1422b3d1831d python3-tkinter-3.9.14-1.el9_1.2.x86_64.rpm abc63eba4cad198ac2354f46421e604a0abd4867b7ea3713bb9405e5f6278d45 ALSA-2023:0954 Copyright 2023 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting (CVE-2022-4415) * systemd: deadlock in systemd-coredump via a crash with a long backtrace (CVE-2022-45873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default systemd-devel-250-12.el9_1.3.i686.rpm 81e0b4515e6580013913f906335209b920fddb218d73fe72e60866582e6feacb systemd-journal-remote-250-12.el9_1.3.x86_64.rpm c4e190b2e4d8b2a3266b46118d14a1ecbcf81cd6900a07c1a744072601adfe3c systemd-devel-250-12.el9_1.3.x86_64.rpm dae919f21c6464ca171797a88e0f7e0cfac594d6cd4819e508400128b4e6c639 ALSA-2023:0957 Copyright 2023 AlmaLinux OS 0 1 Moderate

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: use after free allows Sandbox Escape (CVE-2021-44964) * lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default lua-5.4.4-2.el9_1.x86_64.rpm 049fc03358600131efb412e6797afa1caf91c261f6373269230e4243359e3bbd ALSA-2023:0958 Copyright 2023 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: no check if the return value of XChangeGC() is NULL (CVE-2022-47024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default vim-X11-8.2.2637-20.el9_1.x86_64.rpm 067e1e6d81c3d4e8c67ac1ff52f8022ae2406545ff2c9c330f6483906398afe6 vim-enhanced-8.2.2637-20.el9_1.x86_64.rpm 1cbc6e126a9f209614e95f2a46c87a364ba3e60c581dddcc936602eeea4dbc39 vim-common-8.2.2637-20.el9_1.x86_64.rpm 5eb4eb6e6ec037cd146f3fa4b8857286b63090e1639c72cb6b07b5c1a50cc3fb ALSA-2023:0965 Copyright 2023 AlmaLinux OS 0 1 Moderate

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.0.27). (BZ#2161667) Security Fix(es): * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454) * php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications (CVE-2022-31629) * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630) * php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631) * php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default php-gd-8.0.27-1.el9_1.x86_64.rpm 13a84bd28374abf57ec214ec4450d2bad49685aa23abea571f76c5c0307f4b22 php-xml-8.0.27-1.el9_1.x86_64.rpm 1d5f236c80aa3b9fe216ee25e52be689d7e427411b3c515498cedfd221473269 php-devel-8.0.27-1.el9_1.x86_64.rpm 245e048f0108449b951cb821b7ad6d5fa3ae9d6bb9a8fba5cac50161e4de3056 php-gmp-8.0.27-1.el9_1.x86_64.rpm 269d92617c3c0ec5e278e02428fbe8547916123481bc5ac8f01b5cf3a446937b php-mbstring-8.0.27-1.el9_1.x86_64.rpm 30d3c1793de0f132a1e37569c9dbe01b4bf0fb02952bbb53a827bd6316d63bcc php-cli-8.0.27-1.el9_1.x86_64.rpm 39670b853ecae877e2ea8ef9b7415784bd453dd9ec8d68e40c42f73e234fee13 php-process-8.0.27-1.el9_1.x86_64.rpm 4162c9e7f529e6ed3825a6f1852849b9127152b5648b943107f4c40b869dacae php-ldap-8.0.27-1.el9_1.x86_64.rpm 41700c5bbbc840152c4208a4c7cf53f72054fbc7fc74187c6c17b8013ba63d26 php-enchant-8.0.27-1.el9_1.x86_64.rpm 559b85f908bdf5fdd9a9b88f1a3b567633f2433facb00ae12cb72fe58e4028b6 php-pdo-8.0.27-1.el9_1.x86_64.rpm 71330e04cd76d6bfef40abb5618de28598b6958f986477821ab57ae42e3e60ad php-opcache-8.0.27-1.el9_1.x86_64.rpm 765fd4911bfe822aa93ccbff45af7e895b0ddd67bae4e0e1a4fec199db3fbf0f php-intl-8.0.27-1.el9_1.x86_64.rpm 864601861f6ff3bb13595ff3c16ca29ae6b762f4c663714b91d6a78f1e0485c4 php-common-8.0.27-1.el9_1.x86_64.rpm 8fd316fc0e4ccdb9abf4634459aac3e038bb01be084b3d08eb4fd7b9005b75b8 php-odbc-8.0.27-1.el9_1.x86_64.rpm 909421bce228d3a7449b9689023f4b3c8b4a2011e86e163f43a945163e63ff02 php-embedded-8.0.27-1.el9_1.x86_64.rpm 9e74f12d29dafece15a07b5b86edc374a37859473860273d0fae399c0d3cfb29 php-bcmath-8.0.27-1.el9_1.x86_64.rpm a252df851afd1fdb1b47b518545556683a2bbf8f403ea6ecad8203499b287d83 php-soap-8.0.27-1.el9_1.x86_64.rpm ae48cdbf548496389530f0f252cd6a99259aeb7c91b07b3ce5a3a50b41f1667e php-mysqlnd-8.0.27-1.el9_1.x86_64.rpm bc580fc8438ec80e9aa1530424c86ecfaa873918aaba538606b02c0806f0bc5b php-snmp-8.0.27-1.el9_1.x86_64.rpm d4bf8f649ba51182977eef676fa758fb09ca1ea12180887814a087afb8e3b8cd php-dba-8.0.27-1.el9_1.x86_64.rpm dd1607eace7481a2727f4d33609a75cd71c517ae33ade022f7eafd5ebaca3e3f php-fpm-8.0.27-1.el9_1.x86_64.rpm e0694bafc7035cc89577abf5cc24cc80bd072353883e1589cdc3c8dab90e3717 php-8.0.27-1.el9_1.x86_64.rpm e176ade1140b6cdee8e4e186bc3df7ecac891762274200f3f1a4c11431443262 php-ffi-8.0.27-1.el9_1.x86_64.rpm ebd55a83a511c6e640b26f83f9c2980b7dba1c201f75d8af52f791e1ec214f71 php-pgsql-8.0.27-1.el9_1.x86_64.rpm f01667a17ee59e017ba76e9a3c87fad2c246dd0ec7f9cd145b91aab15ba097c6 php-dbg-8.0.27-1.el9_1.x86_64.rpm fb93a5e62ac091ba63a019a78ff16ad403c8fcf5103b15578eaf90a81f6e7935 ALSA-2023:0970 Copyright 2023 AlmaLinux OS 0 1 Moderate

httpd security and bug fix update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001) * httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760) * httpd: mod_proxy: HTTP response splitting (CVE-2022-37436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * httpd-init fails to create localhost.crt, localhost.key due to "sscg" default now creates a /dhparams.pem and is not idempotent if the file /dhparams.pem already exists. (BZ#2165975) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default mod_session-2.4.53-7.el9_1.1.x86_64.rpm 22bf95d60cc96eb59de72e144964937e4aec104af5c4c42a66821e79b8b46246 mod_proxy_html-2.4.53-7.el9_1.1.x86_64.rpm 2fb4c68639f5e6051b32a15bf899778ce17c9aa5760a958573ee02fb42bd5a0c httpd-filesystem-2.4.53-7.el9_1.1.noarch.rpm 3352de6afe7653c880424816ba8d8d8cf5ec226f325f6f2548eb0a54e55eaf6f mod_ldap-2.4.53-7.el9_1.1.x86_64.rpm 682f77c6e507b5ab062f0052e9410a0520b8d19c3867b67d87e1a7ba921d301f httpd-core-2.4.53-7.el9_1.1.x86_64.rpm 7757170502b18dd7ff3682c89d77dd70eabb890b3da141442504bb111be8fac7 mod_lua-2.4.53-7.el9_1.1.x86_64.rpm 86d103d57b1811c92aa611ad8e643df3721904735154bb225024a1fcbdb538a9 httpd-manual-2.4.53-7.el9_1.1.noarch.rpm a7a5ffeedf4e3b3a6908d659b4d9982d805f81d111ed27cef9f254c7f6896830 httpd-tools-2.4.53-7.el9_1.1.x86_64.rpm aa031bcbacc26fa201ca0402a45c05c937789434603c1f08c06744ab6c7cbf85 httpd-2.4.53-7.el9_1.1.x86_64.rpm b76b58579c1833e6f6ece3a5730a8074376948f67b34eea7cadd0b54f9068a9e httpd-devel-2.4.53-7.el9_1.1.x86_64.rpm c6351bce87128f7adb7fe65e82e64f8f4e9a976d89517f2fc01bb8a4b621e68a mod_ssl-2.4.53-7.el9_1.1.x86_64.rpm c79a8873b886d98d5caaf8a6b1e0f852a7cecc6e84ed501d58f5ecc00cb8c0a1 ALSA-2023:1067 Copyright 2023 AlmaLinux OS 0 1 Important

pesign security update

The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fix(es): * pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default pesign-115-6.el9_1.x86_64.rpm 01e8243d8e85a1bbb5a9bb9e48694e4c42a552b660aba15fd3431064cd7b7438 ALSA-2023:1068 Copyright 2023 AlmaLinux OS 0 1 Moderate

libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fix(es): * libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libjpeg-turbo-2.0.90-6.el9_1.x86_64.rpm 1130b49426c964063aa029078dcc889dcf2ddd5ea68e9b06922e8522a4fa7c12 libjpeg-turbo-devel-2.0.90-6.el9_1.x86_64.rpm 36b5254201efe3491a864630220904398b197be439ef9d52bf8a77afe39bd8f0 libjpeg-turbo-2.0.90-6.el9_1.i686.rpm 55a191676cbfd9de6e51001bdeae3e85ce9464a8afdfb34d42b2c6260d33b914 libjpeg-turbo-utils-2.0.90-6.el9_1.x86_64.rpm d5f1b8386a5e26bda26678f60710193a7bc1e5dc9d869114ec6cb4ef3d14fe75 libjpeg-turbo-devel-2.0.90-6.el9_1.i686.rpm eb51bd5413810786b86cae2db75865c181b37ce53e5675fa72c2d4050fa7fa7a ALSA-2023:1141 Copyright 2023 AlmaLinux OS 0 1 Moderate

gnutls security and bug fix update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * CCM tag length should be limited to known values (BZ#2144535) * In FIPS mode, gnutls should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144537) * dracut-cmdline[554]: Error in GnuTLS initialization: Error while performing self checks i FIPS mode (BZ#2149640) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default gnutls-c++-3.7.6-18.el9_1.x86_64.rpm 50f52fe270fb2cc1b8775789c9a11c357f49535c7fbe11c63083d2bfcf3b2deb gnutls-devel-3.7.6-18.el9_1.i686.rpm 73dea9a0f92ae40d52e3dd9776ee63113e97f93d7c4b4293d453c5d360cbbdfb gnutls-utils-3.7.6-18.el9_1.x86_64.rpm 9800d5e78f5c728afbd0a1ab4902d06a4e79d62e47d8446ddb7dc95c207e6354 gnutls-dane-3.7.6-18.el9_1.i686.rpm a2b9f285632d7570f7745f72e6bbe2a17929e2b4ce0a2eb396c4433b86c112ba gnutls-devel-3.7.6-18.el9_1.x86_64.rpm ea571c2f165fba5b3f510ad00276dac05a36f00b8f0c327358eb51cf2f13e2f4 gnutls-c++-3.7.6-18.el9_1.i686.rpm f7bec8bcf00b973831b376690ac0e3f397ecc06de20999fcf191db9156cca894 gnutls-dane-3.7.6-18.el9_1.x86_64.rpm fb6c6664c5add4dff9e703f1317ad0c88faf93e4a4fbe308376f2f47bcbd8797 ALSA-2023:1337 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.9.0 ESR. Security Fix(es): * Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) * Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176) * Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752) * Mozilla: Invalid downcast in Worklets (CVE-2023-28162) * Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default firefox-x11-102.9.0-3.el9_1.alma.x86_64.rpm 4bd929cd3091b1494937bb127e78b4e8c865a5827d5a3a5518b95627d1689086 firefox-102.9.0-3.el9_1.alma.x86_64.rpm d1a634a1eb0e1cb697affb9c5f1f24b032552fc16ab98b2ba486c68947927734 ALSA-2023:1368 Copyright 2023 AlmaLinux OS 0 1 Important

nss security and bug fix update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): * nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767) Bug Fix(es): * In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator. (BZ#2177434) * Need to update FIPS review comments into NSS AlmaLinux-9. (BZ#2177875) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default nss-softokn-devel-3.79.0-17.el9_1.i686.rpm 037ed7dea41b19ccae56c44b5f3ce5ecca322aa3e159734288894a516c1bf0aa nspr-4.34.0-17.el9_1.i686.rpm 09a6cd6a30bad221aa1287050c1a3e9c99f9954728b1ca2cbbf4dce5baa3cf68 nss-tools-3.79.0-17.el9_1.x86_64.rpm 0afb7a109acf6dbcb4f95cfab102d90fc751f45ec2bbc980e7741da04764cd94 nss-util-devel-3.79.0-17.el9_1.x86_64.rpm 0cd845eabedb9322f312e6df1b33a60c40ef4c99f6ceb5e0e2464921671b4e65 nss-softokn-freebl-devel-3.79.0-17.el9_1.x86_64.rpm 19454db6e3fb93b62b311911ac6d85e0cef4e20c1ba89f7b2ab9c4df1682801b nss-softokn-3.79.0-17.el9_1.i686.rpm 1f3f98ad6c64415dbbe8069ca4db4dd8c27af1b729d9b65717580188ae6ecb16 nss-3.79.0-17.el9_1.i686.rpm 38d5d4e1d95ef169e4d09a2732404bd8b13c50e093224c397ff7fc49ad036c2e nss-devel-3.79.0-17.el9_1.x86_64.rpm 3bdc8e7c5a3b9c00023d91e0eb2d115cd3898d6b3ea7bc9174a0a13a0ab68e6e nss-sysinit-3.79.0-17.el9_1.x86_64.rpm 3e3b86bce1362597c0c3cb8ce5af0c5c53fb28b81a0d754b1485132a8550bde7 nss-util-3.79.0-17.el9_1.x86_64.rpm 4f1e198a305dbc6090d589612c57e81bc87c32a95be6332a534a5a42a1da3a84 nss-util-3.79.0-17.el9_1.i686.rpm 50b2a96ea7da80acadefddbb023423decb1da92804c266bda43f5510938fa0db nss-softokn-freebl-devel-3.79.0-17.el9_1.i686.rpm 516bac8235032912ee7498e7b90366847e1083ef46c7cb8f2163bb2012df85a0 nss-softokn-freebl-3.79.0-17.el9_1.x86_64.rpm 5dc8a9584b9fc299794b0af06bd065ffdc8d108c0c61baef67e70f7486b0b065 nspr-devel-4.34.0-17.el9_1.i686.rpm 5f06c5aa7fe9b129d3e1ff41a1b8e25bcc4cf247e89e481cd10e01df5a11da49 nspr-4.34.0-17.el9_1.x86_64.rpm 7748609bc154fbead3e29b0548e9e31ec2f02037a3482847799a30e614c73afb nss-softokn-freebl-3.79.0-17.el9_1.i686.rpm 84170d7a119d36f1056bced0eab20fc1c076d9ceb16fff4832c02e49ab4e3be0 nss-devel-3.79.0-17.el9_1.i686.rpm 8692e8f274be73fb2b69251e0eea94fb93960d0423532b0906b75b6b89bea170 nspr-devel-4.34.0-17.el9_1.x86_64.rpm bf636306f2bbcc8ca472dabc70adb15675df1481b0661f0b3e8d0fddc57d86f4 nss-3.79.0-17.el9_1.x86_64.rpm c554e02c27842046d2d4a900d891029cd004c480cb4a88978e2256d10e0a3928 nss-softokn-devel-3.79.0-17.el9_1.x86_64.rpm eb91e936e8769dca15aa42fd8df369d30f80b1b893a3c5a74e42602f4409023f nss-softokn-3.79.0-17.el9_1.x86_64.rpm f78fc7c5c4a22b7be7c6c4e3bd5df2a6ad326187da3c12d3e3b9f19bf9550313 nss-util-devel-3.79.0-17.el9_1.i686.rpm f83026297a4ee70764353f61497f8fc5a6e965e45a9c3cf820d93ae7d94a3714 ALSA-2023:1407 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.9.0. Security Fix(es): * Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) * Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176) * Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752) * Mozilla: Invalid downcast in Worklets (CVE-2023-28162) * Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default thunderbird-102.9.0-1.el9_1.alma.x86_64.rpm 31d7de266823439de1c54e624edf5905b41baa4256d098cc8e0827bcc2602aa6 ALSA-2023:1470 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux9.0 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127880) * Cgroups_v2, when creating new cgroup/container, resets the cpu affinity masks for all usr processes on the system. (BZ#2143766) * AlmaLinux9.0 - boot: Add secure boot trailer (BZ#2151528) * kernel-rt-debug: WARNING: possible circular locking dependency detected (&n->list_lock->&p->pi_lock->&lock->wait_lock) (BZ#2160614) * Support cpuset.sched_load_balance by changing default CPUset directory structure (BZ#2161105) * AlmaLinux9.0 - s390/kexec: fix ipl report address for kdump (BZ#2166903) * libgpiod doesn't seem to work with Interphase gpiochip (BZ#2166956) * Azure AlmaLinux9 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170227) Enhancement(s): * IBM 9.2 FEAT: Upgrade the QETH driver to latest from upstream, e.g. kernel 6.0 (BZ#2166304) * Intel 9.2 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168382) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default kernel-devel-5.14.0-162.22.2.el9_1.x86_64.rpm 31b7908f4499f7c6dbfb8bb34edfef144afeba679f80d926aa1bd20bf60f5867 perf-5.14.0-162.22.2.el9_1.x86_64.rpm 3620c89a1b6b499a7076754fd0af6677300b6a737f4c14782e59deb26b685bcb kernel-debug-devel-5.14.0-162.22.2.el9_1.x86_64.rpm 618290eeca13feecc6c780a4742ebd9fe2a455cfc343dcf5d1387a75580048d2 kernel-devel-matched-5.14.0-162.22.2.el9_1.x86_64.rpm 727584972966cb6553cc8e0ca6d13cf46760b784fc82d09a561c38d577d018e2 kernel-doc-5.14.0-162.22.2.el9_1.noarch.rpm 987ec41dd3e0fe1f213134794e49a14672763055ce2574b91005ced4ab2f7f10 kernel-debug-devel-matched-5.14.0-162.22.2.el9_1.x86_64.rpm f5da25652fc234fbd00c1fce2bada8ca40d39b983b33aabb7ef029fe1c3d566b ALSA-2023:1592 Copyright 2023 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default tigervnc-server-minimal-1.12.0-5.el9_1.2.x86_64.rpm 1ccc012e0359afe8cb72e67ba6d9eded47dd25b8a569db92909509136597f0e4 tigervnc-icons-1.12.0-5.el9_1.2.noarch.rpm 2ad4b6a6488ca31b057eb3cb4f6d73353faac50f363cae37fafc4d736c87114c tigervnc-server-module-1.12.0-5.el9_1.2.x86_64.rpm 665224431eabe63e613afeb5666bcaf199765b0c526844e424e2ebcb31926fe9 tigervnc-server-1.12.0-5.el9_1.2.x86_64.rpm 67f5678d6b53e029193855bf4aefd1593f2adab3bc10344fa74f0f266ba05e56 tigervnc-license-1.12.0-5.el9_1.2.noarch.rpm 75e3b6a43db5608e112099a7647d48eefe274349a7446b3a6af3bc47f50af9fc tigervnc-1.12.0-5.el9_1.2.x86_64.rpm 9bb54fa444efa5af47287a0d256eb92fa601b5790484db4055440e51bcf3429d tigervnc-selinux-1.12.0-5.el9_1.2.noarch.rpm c564a1884269c72b7ce100d33882bce39543628cc033e33f5983d64258cdc14b ALSA-2023:1670 Copyright 2023 AlmaLinux OS 0 1 Important

httpd and mod_http2 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: HTTP request splitting with mod_rewrite and mod_proxy (CVE-2023-25690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default httpd-filesystem-2.4.53-7.el9_1.5.noarch.rpm 0e18fe73ce1d645cee0c29947658d8d7cf764cd0d5dff4a9d29e549dea3ccd98 mod_lua-2.4.53-7.el9_1.5.x86_64.rpm 0f7e465398e572351d39d96dbae85122b07ec0d920ce69441919cfb6db9faac5 httpd-manual-2.4.53-7.el9_1.5.noarch.rpm 2f9fcaf5d345420c53a8c3125d3f20a94e594d2c4fc208c8f71a194624f859bc mod_session-2.4.53-7.el9_1.5.x86_64.rpm 3852f736ceebd307f3c533b41280e359b404560bfc57af7a553a3296c9f719b1 httpd-core-2.4.53-7.el9_1.5.x86_64.rpm 4041a8207ad195b59981d75e583d4a61a13dea2938addd1b7254859c9962e686 mod_ldap-2.4.53-7.el9_1.5.x86_64.rpm 8047e74d3d4a13b98bc859d26c60766de26f187b705030079319a4b68b1e2d5f mod_proxy_html-2.4.53-7.el9_1.5.x86_64.rpm 90b107262ed4781d1e6448f5da0bc288b3ed692adddf5f0ade96711528477989 httpd-devel-2.4.53-7.el9_1.5.x86_64.rpm 97c79faffb576c089d9a32244a5d2d8e8508fb8845c127a937d6079be16c8c9a httpd-tools-2.4.53-7.el9_1.5.x86_64.rpm be980464cda7f1ad3bca8b02accd5e5630e757811c192fe95e5f25bac3375b8a mod_ssl-2.4.53-7.el9_1.5.x86_64.rpm cf19b444cc14d8c8673cac551ec77831f56670c0a9caea090a2b98365385a525 mod_http2-1.15.19-3.el9_1.5.x86_64.rpm f030d12481ca39f82ea265494d14eeb3f89a46c0e1f702a8c05a8044d1c2ea60 httpd-2.4.53-7.el9_1.5.x86_64.rpm fa78282b42695b1e1626f5a7eb08a6b1e057d2e897b8e90a54ac7922919355e1 ALSA-2023:1693 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625) * postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default postgresql-upgrade-13.10-1.el9_1.x86_64.rpm 0be706da340def3db6a0e02eeb4e1655ae33002e6cdd9da7110c6d30d92ec687 postgresql-plpython3-13.10-1.el9_1.x86_64.rpm 2bea94b8dcba0bff1e349cbc8867751ec749d01da808a60a0ca28c645d9db4af postgresql-13.10-1.el9_1.x86_64.rpm 39154c358ba84f452982aac0021dd92145d17013d6a5dcadb983fde091c60cd3 postgresql-server-13.10-1.el9_1.x86_64.rpm 3c400a59f9d2b66bf40d2506164436384974bed81dd74c9f11413174c7fcf128 postgresql-pltcl-13.10-1.el9_1.x86_64.rpm 780c796110e981ff2e32b6361ffb22d73b7ab6ac1d6e73d5abc465a32f549f0f postgresql-plperl-13.10-1.el9_1.x86_64.rpm a1a0153d273e0b5d2159a3704e8bb8a7252c41780790e853a8ce0a9c50812ba1 postgresql-private-libs-13.10-1.el9_1.x86_64.rpm edce3fe8def8d60e1eea719a6ce2911db2d098c99b1c42b21a25ca26648b7966 postgresql-contrib-13.10-1.el9_1.x86_64.rpm fba0ee7881e17ed206ed34d38a24a47840afdfef4efa94821d4e100cc552d069 ALSA-2023:1696 Copyright 2023 AlmaLinux OS 0 1 Moderate

haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: segfault DoS (CVE-2023-0056) * haproxy: request smuggling attack in HTTP/1 header parsing (CVE-2023-25725) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default haproxy-2.4.17-3.el9_1.2.x86_64.rpm aadd3f3239510e6646a8e514bd196688b1bb649289f62c23af0da6e1bf5a3b3b ALSA-2023:1701 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP multi-header compression denial of service (CVE-2023-23916) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libcurl-devel-7.76.1-19.el9_1.2.i686.rpm 1f8f18922b3efd884f91c7ce4ce682024bb12d55d98679d12f16995622b457b1 libcurl-devel-7.76.1-19.el9_1.2.x86_64.rpm 859bb8063803c4c06220503116ec3f8752a503fd00bb5d7f7e770a2f051850b7 ALSA-2023:1703 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Update intel_idle for Eaglestream/Sapphire Rapids support (BZ#2168361) * AlmaLinux9: An application stopped on robust futex used via pthread_mutex_lock() (BZ#2168836) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default kernel-doc-5.14.0-162.23.1.el9_1.noarch.rpm 094def3a0784f6ca8cebd409b973dc0087cc3a39c13f7f32792e7038448f5538 kernel-debug-devel-5.14.0-162.23.1.el9_1.x86_64.rpm 16bdaca7580dbe18695aa17a14c097aa19c2893d686cbd0baffda2915fe46a8e kernel-devel-matched-5.14.0-162.23.1.el9_1.x86_64.rpm 60c1b7220146a9688e7ec97a762c6dcd014f1f0835765707c6bf8537bec8bc44 perf-5.14.0-162.23.1.el9_1.x86_64.rpm c80fe2414e414408784f06ce2903bb750ae6e94dca3cd6b94e7950dae9cf2826 kernel-debug-devel-matched-5.14.0-162.23.1.el9_1.x86_64.rpm d7b4afd2cd9359c480b26a2095aa3c4780da7daf72a8bd0aae83b1da1bdde67e kernel-devel-5.14.0-162.23.1.el9_1.x86_64.rpm e0489c9bb2840bfd49c5b282a9d8bb22fda5a27c8a86857bff3e929aeaf36524 ALSA-2023:1786 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.10.0 ESR. Security Fix(es): * MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102) * Mozilla: Fullscreen notification obscured (CVE-2023-29533) * Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535) * Mozilla: Invalid free from JavaScript code (CVE-2023-29536) * Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550) * Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945) * Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539) * Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541) * Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default firefox-102.10.0-1.el9_1.alma.x86_64.rpm 5a305c1a9cc3878bdbf1c6d7f3b60cc1ec29a691e3af289114677285eed0ba50 firefox-x11-102.10.0-1.el9_1.alma.x86_64.rpm 83ccf8212a48e63f6c4f9df0dc32b3a7bc0834c330bb2197e5364902420eb15e ALSA-2023:1809 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.10.0. Security Fix(es): * Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427) * Mozilla: Fullscreen notification obscured (CVE-2023-29533) * Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535) * Mozilla: Invalid free from JavaScript code (CVE-2023-29536) * Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550) * Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945) * Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479) * Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539) * Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541) * Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548) * MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default thunderbird-102.10.0-2.el9_1.alma.x86_64.rpm fcba53647419b8abd2bc5d83199f6aedc8b8a434c882f7e69bbe082216d0ff42 ALSA-2023:1879 Copyright 2023 AlmaLinux OS 0 1 Important

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) * OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939) * OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954) * OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967) * OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937) * OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938) * OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186804) * Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186811) * The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186807) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default java-17-openjdk-javadoc-17.0.7.0.7-1.el9_1.x86_64.rpm 635347802b69d5c499e86688e6d02bc0213c09d33deaddffe3bfd88d0323e706 java-17-openjdk-demo-17.0.7.0.7-1.el9_1.x86_64.rpm 716c85ade898ef90b2605e3d5b1e73cddaf55e10606be3839496a984d40d7840 java-17-openjdk-devel-17.0.7.0.7-1.el9_1.x86_64.rpm 8ca0ca5b560013fab627c670e92215b5155db7f86dfb565a6aa14b3ec6b93381 java-17-openjdk-javadoc-zip-17.0.7.0.7-1.el9_1.x86_64.rpm 9a9cfcf8c5e1c97c491fdd49d6cda3941dc4bc0285bf686cea480d4c21db7337 java-17-openjdk-jmods-17.0.7.0.7-1.el9_1.x86_64.rpm aeca26ae7794d89196958b5f4bef7be811e5a1c776b93e412699234320f7c51c java-17-openjdk-headless-17.0.7.0.7-1.el9_1.x86_64.rpm bac7ecea45222bc9fc78fce3b8fbf9660c02ce24b68243cc9f2ca26e2a3b96b0 java-17-openjdk-src-17.0.7.0.7-1.el9_1.x86_64.rpm c723b2f290bd645bf021e98ac1a6c48d9bef5ba30c400889fc06699cb2408789 java-17-openjdk-17.0.7.0.7-1.el9_1.x86_64.rpm cb3a4cc88fad215db8126d8bba7aa13d7c138885b5c80248d1b3ab742cbdb8c2 java-17-openjdk-static-libs-17.0.7.0.7-1.el9_1.x86_64.rpm e4913cea825fdcad79665b4ff989a7dd8e96c1c9707d9ae0b05da49b42c5f59a ALSA-2023:1880 Copyright 2023 AlmaLinux OS 0 1 Important

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) * OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939) * OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954) * OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967) * OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937) * OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938) * OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default java-11-openjdk-javadoc-zip-11.0.19.0.7-1.el9_1.x86_64.rpm 35607cda6627465e2d10114f1d8731ab05781813efda0ab62558e81065666eaa java-11-openjdk-static-libs-11.0.19.0.7-1.el9_1.x86_64.rpm 3b087d9fac90df626dbba286b5c1df3e0dac66a59431c747801aff4786a39575 java-11-openjdk-devel-11.0.19.0.7-1.el9_1.x86_64.rpm 6069baaae9a99acb21a86e405c625aa9b58b1f588d62bc2ccd6a723511cab6e8 java-11-openjdk-jmods-11.0.19.0.7-1.el9_1.x86_64.rpm 69fd29ef24c7c6393ac925b1146ec69b90ee6f107e3fa4dba79b59d16e47d54f java-11-openjdk-headless-11.0.19.0.7-1.el9_1.x86_64.rpm 73367eb9cebb1ec13eece5d04683d0dc2fe195de6943ec16427e54ee2afe7677 java-11-openjdk-11.0.19.0.7-1.el9_1.x86_64.rpm 7394b16d723d0f91a3e92e1a4e1e394c87c34d578892531a82103dbe0c576db1 java-11-openjdk-javadoc-11.0.19.0.7-1.el9_1.x86_64.rpm 7bcb311a0545dbfe7180d29a2aed4f8b8f550815d3efd9a6f63a6a4d58b4f06c java-11-openjdk-src-11.0.19.0.7-1.el9_1.x86_64.rpm c266f692fe2990c03e8af793764e2d3c75cbe94c07e30184f3a200dc41629194 java-11-openjdk-demo-11.0.19.0.7-1.el9_1.x86_64.rpm f6c04f00d413011cb3c380761ba3b7ded2951cf6eec5ac6517311d36e7948e78 ALSA-2023:1909 Copyright 2023 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) * OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939) * OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954) * OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967) * OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937) * OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938) * OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * The RSAPSSSignature implementation works with RSA keys via the SunRSASign provider. However, it did not fully check that the RSA key could be used by the provider before attempting to do so, leading to the possibility of errors being returned with custom security providers. The implementation now validates RSA keys and will allow other providers to handle such keys where it cannot. (RHBZ#2188024) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default java-1.8.0-openjdk-javadoc-1.8.0.372.b07-1.el9_1.noarch.rpm 2711ce201b3b912fdbaa892c8b55c5f91f140bc424f492a5f7bb4ff282d29d84 java-1.8.0-openjdk-devel-1.8.0.372.b07-1.el9_1.x86_64.rpm 32e80948d30c5733149b46703d971d530ad9cff860874bc8a76fccd8c294ee21 java-1.8.0-openjdk-demo-1.8.0.372.b07-1.el9_1.x86_64.rpm 4610b1783c22ae0316e0962207b447d9e01adafceb55600659a770def5cf6b1e java-1.8.0-openjdk-src-1.8.0.372.b07-1.el9_1.x86_64.rpm 6184c84d029f45f7a9339799c10ea0c7b8db95815838bcc359698a4f839077fb java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.x86_64.rpm 6af53b76c6a9469bbd823b86669c4a752c8a66f7cd4d1c65f5806bd03c02b792 java-1.8.0-openjdk-headless-1.8.0.372.b07-1.el9_1.x86_64.rpm 7e111b9f183724a38c4633d967dcbb5c55f0c67d6dbbe21ece25c8af2c1745fa java-1.8.0-openjdk-javadoc-zip-1.8.0.372.b07-1.el9_1.noarch.rpm b21ea0f06466b6f20204c59af52b08a0a5675e760f790e4c907e6d0269e6f2ea ALSA-2023:1918 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * WebKitGTK: use-after-free leads to arbitrary code execution (CVE-2023-28205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default webkit2gtk3-jsc-2.36.7-1.el9_1.3.x86_64.rpm 0cc409c728ce9a79003455fae0ecce87b3980b3a65f068c1e34aba1b4404c3c3 webkit2gtk3-2.36.7-1.el9_1.3.x86_64.rpm 1548a265a8c7eec245b419004b1078decd2a1c97ae958f04b941d7939a72d0d6 webkit2gtk3-devel-2.36.7-1.el9_1.3.i686.rpm 1c2eddd7ab399d27ed335da1e89f04918f22d9d3be8c2a5848e044ecccab8283 webkit2gtk3-jsc-2.36.7-1.el9_1.3.i686.rpm 2274d19a352d83dcb4e6d749498df877a7fe18d69ef2ddffa4f790552ffce030 webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.i686.rpm 2a62de6014e4115755802fcb25f1d2ef84a494985021fc06292f5fa47ad915bd webkit2gtk3-2.36.7-1.el9_1.3.i686.rpm 2d294379f734a9dec2130a6582b8f7344739b92be94a72174503abf97112ce8a webkit2gtk3-devel-2.36.7-1.el9_1.3.x86_64.rpm 53526391abce833971af430dfea9b1a03792abfdf559c1e00a5015664a764f84 webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.x86_64.rpm 960c594f9eb7a86bd808b0f52dd86de9c57947118f85abc0bd7bbd0de05591f3 ALSA-2023:2074 Copyright 2023 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: command injection vulnerability in org-mode (CVE-2023-28617) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default emacs-27.2-6.el9_1.1.x86_64.rpm 58175e33682dcd5dd5287918a2339db42f48256a1ec9b2aae255be84faac99d5 emacs-common-27.2-6.el9_1.1.x86_64.rpm a4935143429b0fa264eb72535b3977777f2d5ca50bded21b7b96e24d929ff1e3 emacs-nox-27.2-6.el9_1.1.x86_64.rpm c174a46c31bafd3909819838818d992357c8863d0efd5d68daeef095efa9ef17 emacs-filesystem-27.2-6.el9_1.1.noarch.rpm d6466e576a0bf2d374c78b962fa9bfc089a4041c027b49abefb0292b86d89e49 emacs-lucid-27.2-6.el9_1.1.x86_64.rpm da4d01937d3a3813f5bbc9b25d10c6482fdeb5e0cbb0cc853b5d9c21bedadbee ALSA-2023:2078 Copyright 2023 AlmaLinux OS 0 1 Important

libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently. Security Fix(es): * Mozilla: libwebp: Double-free in libwebp (CVE-2023-1999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default libwebp-devel-1.2.0-6.el9_1.x86_64.rpm 1ee01df7a0917cf82d83d7a4776a66335eef88d924221a002def737e4996b64e libwebp-1.2.0-6.el9_1.i686.rpm 4192cb88df348f6963e7becc6b897e80c548fd7ed55a970ccfe0dfe0e07aeb95 libwebp-1.2.0-6.el9_1.x86_64.rpm f44edbd1c7777252b7ac7840f606759b23016107a4c22a8a3bf63f66cfe18d39 libwebp-devel-1.2.0-6.el9_1.i686.rpm f45f4e8ec54191ed1b58a0b5c64d74aa75edf7ea8e676f3cf5635f4ee5cbabb3 ALSA-2023:2127 Copyright 2023 AlmaLinux OS 0 1 Important

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_1_default samba-winbind-clients-4.16.4-103.el9_1.x86_64.rpm 35b0bc14fb54f39c97c294ce69933d0fed6a2288e91b554443336d80c13ebd04 samba-winbind-krb5-locator-4.16.4-103.el9_1.x86_64.rpm b3097759726bd4e960e44820230c192890bcc89df90f6827acd9af92c1b14b5c samba-client-4.16.4-103.el9_1.x86_64.rpm d69645ad255a2a82b65aaf83b8e7db818c092bccfbb88c4455891ca0dceadad0 samba-krb5-printing-4.16.4-103.el9_1.x86_64.rpm dad056e6c61ab512e019b4d6efe0163e2a33de2adef5bc01739ff2c20db664ad samba-winexe-4.16.4-103.el9_1.x86_64.rpm eb89d4432eb16110725d12c7e1a4526141fdd528f6896ef39caa865c0d448c5b samba-vfs-iouring-4.16.4-103.el9_1.x86_64.rpm f1ba175f93f3b544ea475cee97e00a30596edc1d20539809b955130d04957fbb ALSA-2023:2161 Copyright 2023 AlmaLinux OS 0 1 Moderate

fence-agents security and bug fix update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-oauthlib: DoS when attacker provides malicious IPV6 URI (CVE-2022-36087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default fence-agents-ibm-powervs-4.10.0-43.el9.noarch.rpm 003ba1cd769dfb6f5b67097c7fe03923f6277475d9c23316be410989698a50e7 fence-virt-4.10.0-43.el9.x86_64.rpm 1e447345f3985c4f12461150cf1d5a2e189bd11c8d286e8290d029a9cb2bf1f2 fence-virtd-serial-4.10.0-43.el9.x86_64.rpm 2308dcf0d2fa530492aa666b1a8a06e2e10b66fe897cb182dc66f4bcb2850a97 fence-virtd-libvirt-4.10.0-43.el9.x86_64.rpm 3c7c014e8ba352cd92f38ae7e66471be7320ffe0dedf14cf2105c2b741c63db5 fence-virtd-tcp-4.10.0-43.el9.x86_64.rpm 4aa1e27286b9bc8f6816ae0d7ba88df64cb7328cd2f6bfe5a5950e8fe0c95043 fence-virtd-multicast-4.10.0-43.el9.x86_64.rpm 5d3e2672713f44c5e928cadf9be3e773f7a1e7cb238892c7730c2b6025ba3720 fence-agents-common-4.10.0-43.el9.noarch.rpm 84b299610a1c9a40dbebb1b47d93a2857b183cfe8c3a337d96e095f26b569271 fence-agents-virsh-4.10.0-43.el9.noarch.rpm a20ed002a18cb9e7f36e202b90abad255cbbce18324b2bf1e38e22d5a1c37b1c fence-agents-compute-4.10.0-43.el9.x86_64.rpm a2fc0e863a74e7e25c3f2852715aeff3b086f130692aa8e6315faf1941ea8ed1 fence-virtd-cpg-4.10.0-43.el9.x86_64.rpm c6a03d4bca1a37947b95f7eccd27738d5a64d5fc46c4977e46615abce5639c20 fence-agents-kubevirt-4.10.0-43.el9.x86_64.rpm c8fbacc43694e83180670a7affa9d7a0a99cd1f6a71c4a6e94e3751b184f0b90 fence-virtd-4.10.0-43.el9.x86_64.rpm d82770e0139d885e884afe468a0723e6d3fa45ebfe63d1e3e2549148adeb0abd fence-agents-ibm-vpc-4.10.0-43.el9.noarch.rpm fb84d450a5beaa0f0427ac9735b6cb926017afbbcf407a7a389da3cdfa6141e0 ALSA-2023:2162 Copyright 2023 AlmaLinux OS 0 1 Moderate

qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a later upstream version: qemu-kvm (7.2.0). (BZ#2111769, BZ#2135806) Security Fix(es): * QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165) * QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record (CVE-2022-4172) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default qemu-guest-agent-7.2.0-14.el9_2.x86_64.rpm 2cc20dfb02284ecb2745ad5bc6925b37c9088dbb45b97fc49b3e51b996d7d424 qemu-kvm-common-7.2.0-14.el9_2.x86_64.rpm 53192db9fe96f81387e156a6565bbf754575f3bb01cd8637fa3c37abb179f792 qemu-img-7.2.0-14.el9_2.x86_64.rpm 6048fc3f761919b0713ca4eba42fc0ee2bb79c60af536332d4fab72c5b749199 qemu-kvm-block-rbd-7.2.0-14.el9_2.x86_64.rpm 63e681375807af6b70c1d2aa90c561074551d72d1309590d85569f8e6aa18124 qemu-kvm-device-usb-host-7.2.0-14.el9_2.x86_64.rpm 766ae2f57fa49f6887520adfec4dcb5eaa42a4045eb45e30155b31dae34d34e4 qemu-kvm-audio-pa-7.2.0-14.el9_2.x86_64.rpm 77c0c28f5e4fc69241fcfc23027788f6d468f155da746ba4901cab09c4677fec qemu-kvm-7.2.0-14.el9_2.x86_64.rpm 86758efb31e8dbac876c8e22455b983c7e03b128a4b2e3dcc22bb7967df42812 qemu-kvm-docs-7.2.0-14.el9_2.x86_64.rpm 8fdced15c3931fe27e3b847b4713b67278d903778dcf9731e82cf6a8ed0dabbc qemu-kvm-block-curl-7.2.0-14.el9_2.x86_64.rpm a6eb371531ffe329ae5a1e52468bd7465b4c7a18dd83819da196e74c8d4c1f9d qemu-kvm-ui-egl-headless-7.2.0-14.el9_2.x86_64.rpm cc1d0c497e5a252c15e78cc02f0d3f9f8b9995b4b26a1bdf8e1105770167b461 qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9_2.x86_64.rpm d297f9870a7c56ab733417505d8af1fc694fb716949a5d57d141b8e1b0be14c9 qemu-pr-helper-7.2.0-14.el9_2.x86_64.rpm e7746aceb3e1a70ab06d12e83547261e25354e253011e2a3654dc29b2f810bcf qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9_2.x86_64.rpm e92753c828a389176acfcf4175b501f5d0b47677fdbc81230afe3f4b1f2dccc1 qemu-kvm-tools-7.2.0-14.el9_2.x86_64.rpm ef276264a4fbacf2274fbc9d8c602be0ca910e3fcb543357fb629ad5d970c99b qemu-kvm-ui-opengl-7.2.0-14.el9_2.x86_64.rpm f7c1a24231d7e8259ac738c31a4418c54eb568bcc34dcb88412881c0acace9d4 qemu-kvm-core-7.2.0-14.el9_2.x86_64.rpm f9c8da6e4720bd08e0c331b9c866b27cdbdfbc609e6539fd64cfe3f08892f1db qemu-kvm-device-usb-redirect-7.2.0-14.el9_2.x86_64.rpm fa1fcb5656be51a2a58c148186bdb7ff04d5fcfc853bc33ac6dc4bbddaedb251 qemu-kvm-device-display-virtio-vga-7.2.0-14.el9_2.x86_64.rpm ff48d4a5c2080da201b8fe24a6990fbed98373b6b0eff0955826ba4fca52fe40 ALSA-2023:2165 Copyright 2023 AlmaLinux OS 0 1 Important

edk2 security, bug fix, and enhancement update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) * edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation (CVE-2021-38578) * openssl: timing attack in RSA Decryption implementation (CVE-2022-4304) * openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450) * openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default edk2-ovmf-20221207gitfff6d81270b5-9.el9_2.noarch.rpm 3cf7d77ad2e87fb283447992c4f5b4474e6e3cd46f19d8416b62644de5d475f0 ALSA-2023:2166 Copyright 2023 AlmaLinux OS 0 1 Moderate

freeradius security and bug fix update

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es): * freeradius: Information leakage in EAP-PWD (CVE-2022-41859) * freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860) * freeradius: Crash on invalid abinary data (CVE-2022-41861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default freeradius-devel-3.0.21-37.el9.x86_64.rpm 23684d2d1b01a8b0817cad635958523352f150bd51a6249c4984ab0f2839b38e freeradius-utils-3.0.21-37.el9.x86_64.rpm 23a64ae79b19f991de3c3e005f84fe344cb2842bded219ecf2bc09bb90a5150c freeradius-ldap-3.0.21-37.el9.x86_64.rpm 348b344a058bfd4dbbaabb6ebbe455bb1be18302e278fea74fb81f8eea429aee freeradius-3.0.21-37.el9.x86_64.rpm 4d309cfea584bd126a2cde2e8782649817d5ce24bcff502145ccb9e8ad1c3b44 freeradius-doc-3.0.21-37.el9.x86_64.rpm 7e2b6dcbac7f6a7bfb8d871a95aac9e082833ac75406f2e64d065e83f729285e python3-freeradius-3.0.21-37.el9.x86_64.rpm b830c659cd9c95cc014cd611bb763ceab55cabaf40e67bf5ae7a07f3775e0b84 freeradius-krb5-3.0.21-37.el9.x86_64.rpm ff2d148b9a3085f9502661de8a2307075efb83941b07485fa417b6c3c1b6ac23 ALSA-2023:2167 Copyright 2023 AlmaLinux OS 0 1 Moderate

grafana security and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * grafana: Escalation from admin to server admin when auth proxy is used (CVE-2022-35957) * grafana: using email as a username can block other users from signing in (CVE-2022-39229) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default grafana-9.0.9-2.el9.x86_64.rpm 5293a07251893259d83803924071876128ddb3e5d6fc03a65c472b9c8ec32da8 ALSA-2023:2177 Copyright 2023 AlmaLinux OS 0 1 Moderate

grafana-pcp security and enhancement update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default grafana-pcp-5.1.1-1.el9.x86_64.rpm 7ac85943c70d1c19b9eb24e532c9762a86aa5308da2c7f9d90d05424ca58b24e ALSA-2023:2179 Copyright 2023 AlmaLinux OS 0 1 Moderate

libguestfs-winsupport security update

The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images. Security Fix(es): * ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790) * ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate (CVE-2022-30786) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (CVE-2022-30788) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array (CVE-2022-30789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libguestfs-winsupport-9.2-1.el9.x86_64.rpm c33fca0b84951882c4cb6df4ad952fb8e9c59e55f3e54de0e2848410b34e713f ALSA-2023:2193 Copyright 2023 AlmaLinux OS 0 1 Moderate

butane security, bug fix, and enhancement update

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. The following packages have been upgraded to a later upstream version: butane (0.16.0). (BZ#2135475) Security Fix(es): * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default butane-0.16.0-1.el9.x86_64.rpm 6bded97659b6ddb9bfd0f26b1a814d1c95bdc432b42de993deb339591b39a51a ALSA-2023:2202 Copyright 2023 AlmaLinux OS 0 1 Moderate

frr security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. The following packages have been upgraded to a later upstream version: frr (8.3.1). (BZ#2129731) Security Fix(es): * frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service (CVE-2022-37032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default frr-8.3.1-5.el9.x86_64.rpm 15c8594038d83e43481a563bb372ba880154428a0eb7a706c48a1f62f5553b22 frr-selinux-8.3.1-5.el9.noarch.rpm 48dd31748b80d33523d32a8bf40f0b9b0890940de43306fca30e429d7f8b5832 ALSA-2023:2204 Copyright 2023 AlmaLinux OS 0 1 Moderate

Image Builder security, bug fix, and enhancement update

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security Fix(es): * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default osbuild-composer-core-76-2.el9_2.alma.x86_64.rpm 3a8e3594c4cb71439b1787c892a2868f28a3b7dd14ff0d738eafd9ad77d4ebd5 weldr-client-35.9-1.el9.x86_64.rpm a6d6467f2eb2b70eb0956742de2f9988806b413dd33210dc0122f7b7ab8cbc41 osbuild-composer-worker-76-2.el9_2.alma.x86_64.rpm c494644787d817a559b1b5eeefdf2c3617093e57d55975b50eb6f955c5d8b825 osbuild-composer-76-2.el9_2.alma.x86_64.rpm daec93ddb30f35f528af8e180067d6507ee0472ffa411996cf9f227b9b306377 osbuild-composer-dnf-json-76-2.el9_2.alma.x86_64.rpm eff8826934dd1a055941e6e4f5a8f12c8360c0227ff159fc526c1fc1684ec985 ALSA-2023:2216 Copyright 2023 AlmaLinux OS 0 1 Moderate

gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data (CVE-2021-44648) * gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files (CVE-2021-46829) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default gdk-pixbuf2-modules-2.42.6-3.el9.x86_64.rpm 07ceed118a1562c071913ee1ae6fb9b30453f2187da63e4fb16c400d5583d697 gdk-pixbuf2-2.42.6-3.el9.x86_64.rpm 132bcc6662f89f94e873b2fc624761fead6930dccf168ee63b80b838ae0317d6 gdk-pixbuf2-2.42.6-3.el9.i686.rpm 24d3097da634853a811d0adbe0738a337fdb1b8c5714f77e61e350ec2d8aac12 gdk-pixbuf2-devel-2.42.6-3.el9.x86_64.rpm 6d1f86d1882b9925544a3db08dbb13ade75419fabf03c57a1d6647af5c1d9e37 gdk-pixbuf2-modules-2.42.6-3.el9.i686.rpm 7878cf620e3bd6884a7b50f039f1be69c5f973e2abf7a5a941ca49093234ff2c gdk-pixbuf2-devel-2.42.6-3.el9.i686.rpm 99c72064179e8735b791412ea4d0c1c1a65eb4a467d8973bc55cda7af6d659af ALSA-2023:2222 Copyright 2023 AlmaLinux OS 0 1 Moderate

conmon security and bug fix update

Conmon is an OCI container runtime monitor. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default conmon-2.1.7-1.el9_2.x86_64.rpm 3220fb53ca91b8df3d236f33d99fd1b7ae4e6c57ba0f801608ec363326ca5caf ALSA-2023:2234 Copyright 2023 AlmaLinux OS 0 1 Moderate

sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fix(es): * sysstat: arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default sysstat-12.5.4-5.el9.x86_64.rpm f50925d0d4a5d2f4ce873dc1480de6031f78e096787f0ebcc24a285e70e9d79c ALSA-2023:2236 Copyright 2023 AlmaLinux OS 0 1 Moderate

toolbox security and bug fix update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default toolbox-tests-0.0.99.3-9.el9.x86_64.rpm 4249f471143dfc033a371dfb39a724523003b197fd073ead5bafc102906ff2b6 toolbox-0.0.99.3-9.el9.x86_64.rpm 863548d1d0c01f32fb026d50ae90e062b06a1bb5e02df3680dcb7b260a374f91 ALSA-2023:2248 Copyright 2023 AlmaLinux OS 0 1 Moderate

xorg-x11-server security and bug fix update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550) * xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340) * xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341) * xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342) * xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343) * xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344) * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494) * xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default xorg-x11-server-Xvfb-1.20.11-17.el9.x86_64.rpm 29771502aa8c901210ba4c47c0c9f9e3f9776dd377fedcedee36f73a59131964 xorg-x11-server-common-1.20.11-17.el9.x86_64.rpm 3f3da57ff88410851538d809c6cb2bc0433ce4e7885b05b58ecec00787a5556e xorg-x11-server-Xephyr-1.20.11-17.el9.x86_64.rpm aa30de06562edf101be4a4d874d253a7ce134f7974a9f13cdab7a21a6645e6f2 xorg-x11-server-Xorg-1.20.11-17.el9.x86_64.rpm c3ca29b5423734bb9c66e1ff1bb040003b52a1eaf86f507f075c1fa9bacda6a5 xorg-x11-server-Xdmx-1.20.11-17.el9.x86_64.rpm d3f0089f91a7abde0348552433992986554f30260b954ab4026ad1834bc631ec xorg-x11-server-Xnest-1.20.11-17.el9.x86_64.rpm e7c505481772a03bf15ff24ecd2d564850b1a2e7317d20a955832964e29883fd ALSA-2023:2249 Copyright 2023 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550) * xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340) * xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341) * xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342) * xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343) * xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344) * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494) * xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default xorg-x11-server-Xwayland-21.1.3-7.el9.x86_64.rpm f69f0e919bb845f7c7250c4d4657db1c83f612b180f355f1e6e1d93c72caa266 ALSA-2023:2253 Copyright 2023 AlmaLinux OS 0 1 Moderate

buildah security and bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default buildah-1.29.1-1.el9.x86_64.rpm 996a11327780b6c638a62ed459d29dbd7b8576673acd8fc100ac35df67caee93 buildah-tests-1.29.1-1.el9.x86_64.rpm ef0c18bf71f6ffa80ebdc069c85d5fc694e28a749215cdbb7e8b15c6c3301f10 ALSA-2023:2256 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518) * webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886) * webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888) * webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923) * webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799) * webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823) * webkitgtk: sensitive information disclosure issue (CVE-2022-42824) * webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863) * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691) * webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692) * webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default webkit2gtk3-jsc-2.38.5-1.el9.i686.rpm 0680b7a6554030af93da81bed788d191463016f9869101419e2fc0e3b662e9ec webkit2gtk3-2.38.5-1.el9.i686.rpm 496f3a74cecdc62746b35ccd39b53377d258efe2d867685540d1bcd0e8e8c740 webkit2gtk3-devel-2.38.5-1.el9.x86_64.rpm 4c331bba73d58cb95cc5f670d2d36b0dca2ca7e8c4c7a77823eeeceb2193aa61 webkit2gtk3-jsc-devel-2.38.5-1.el9.x86_64.rpm 553ab6f48a7d4b5f6b814e9a9f53d6136827555d7520479e06883e3bcc121a9f webkit2gtk3-devel-2.38.5-1.el9.i686.rpm 693e6f8baba26d7b7bc89a05ade8a420704ac76337de05f840d5b1c95e2414fa webkit2gtk3-jsc-2.38.5-1.el9.x86_64.rpm 7f349ef90abebcaf46cdc7177e997729db04d04e64fe9d0d48ef523148f5914f webkit2gtk3-jsc-devel-2.38.5-1.el9.i686.rpm af709a921a1e40daba005c41fa7c08e14c4f868d580895a7e496e06d669b4423 webkit2gtk3-2.38.5-1.el9.x86_64.rpm c5bad7e05cb2dcdd472d22efe5b6ea913de383cfa23587eeda9431b65845c1b5 ALSA-2023:2257 Copyright 2023 AlmaLinux OS 0 1 Moderate

tigervnc security and bug fix update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340) * xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341) * xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342) * xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343) * xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default tigervnc-server-module-1.12.0-13.el9_2.x86_64.rpm 09ff0faea078ceff337f1d80a722926b61cb0fc5a105117660607ff7143762f7 tigervnc-1.12.0-13.el9_2.x86_64.rpm 475226d3e5c76979bfb5b62f0f4bba30b8db27d66271f6f75d5ca570feea2761 tigervnc-server-1.12.0-13.el9_2.x86_64.rpm 61eed51998d948e42fb93d8155e88dcd3e68bb9bf44ca0b249ced98080258736 tigervnc-icons-1.12.0-13.el9_2.noarch.rpm 7639bb9bfa5a418dbb416785f31cf16899a54d4618e0c83b66bfd984761ed1a4 tigervnc-license-1.12.0-13.el9_2.noarch.rpm 831eff733daac545f21e1414cc9479dfc1b50a1e9dcab5e45b24d024e7bfca3c tigervnc-server-minimal-1.12.0-13.el9_2.x86_64.rpm d2c8b05e927738cd4222b4e1f35e051b92fd8fdf4830f2496a92d59bcc16bac3 tigervnc-selinux-1.12.0-13.el9_2.noarch.rpm e9b0a7560481052f404e85eabcea26f8ddb5bf6c776c00da92545c70f2dfd578 ALSA-2023:2258 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-mako security update

Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance. Security Fix(es): * python-mako: REDoS in Lexer class (CVE-2022-40023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3-mako-1.1.4-6.el9.noarch.rpm 87df3d16e78b6d737409258c82f6cdb53c0949dfb9adeb3cd2d9d280ce255fd3 ALSA-2023:2259 Copyright 2023 AlmaLinux OS 0 1 Moderate

poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default poppler-utils-21.01.0-14.el9.x86_64.rpm 22b9c1c0d21e2c868c67ee2c3321ec18f375a8c03e39f1e25f6e5ce41dffadfc poppler-21.01.0-14.el9.i686.rpm 36324d4a9c9f50b50fbf3b5c96a6d43b231d199636f32a740ff4437a95fe09e2 poppler-cpp-21.01.0-14.el9.i686.rpm 5f191c70f5f6bbb69e1fddbb7954af09fa7c7fdc66a0433490f123401b0f7b03 poppler-glib-21.01.0-14.el9.x86_64.rpm 7f61ad60e299d6f8503caa4574c06e579af808227f8f38505ef6f490bde27bce poppler-qt5-21.01.0-14.el9.i686.rpm 824f39a643e27bacb085e48996872cfa6bb20bc5dcb57590f9686008fbdd79aa poppler-qt5-21.01.0-14.el9.x86_64.rpm 944b8d903d3cc2781afe7ea9d979a9b26300e5fdb14899f498ce82be99470446 poppler-21.01.0-14.el9.x86_64.rpm a1f3078aab802b8f51f5a76e256a57f494f8898645ef3755bfbcee67b504e464 poppler-glib-21.01.0-14.el9.i686.rpm a4bd0d02d4ec90e94c3e4f567e3ef3ccb887bebf37183b46179ce14f556fb8cc poppler-cpp-21.01.0-14.el9.x86_64.rpm bdc832bfd969b01ab2e06804b7cf117a7a794574ae618767a8d33a09f8d79d17 ALSA-2023:2260 Copyright 2023 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920) * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925) * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default gstreamer1-plugins-good-1.18.4-6.el9.i686.rpm 271b01cf9e1525e5faa56db55839f74c951db62a2b83eeb400d34c4cb8e8e280 gstreamer1-plugins-good-1.18.4-6.el9.x86_64.rpm c489cd8f327bdc9118eddaaf51b00abbc70396b01cf1bc5bd57e9dbdc8c95ef2 gstreamer1-plugins-good-gtk-1.18.4-6.el9.i686.rpm f8ba394b1d2c332fc353ed71c73908d386842d6dac4a2e4358748948754d2ee8 gstreamer1-plugins-good-gtk-1.18.4-6.el9.x86_64.rpm fb043797b8c67bc90de3bcd728c8ea3e47eea38c9a4788db3d003b17c5c614a8 ALSA-2023:2261 Copyright 2023 AlmaLinux OS 0 1 Moderate

bind security and bug fix update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795) * bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default bind-license-9.16.23-11.el9.noarch.rpm 081ed63b5d5a469a4aa4c6c6ce5becfc91d96265c13d206acaf8d4f8fcb978a3 python3-bind-9.16.23-11.el9.noarch.rpm 1015d08bfc1d080cbe3bd6df98e2fb3e44bae0abd58dc1cc47e2232a649d637e bind-libs-9.16.23-11.el9.x86_64.rpm 174b89dcd668d7953473174b90cf92ba659457a14fe60897045d3438125ad814 bind-dnssec-doc-9.16.23-11.el9.noarch.rpm 35bcaf2195ea1447d653c44080d8c2e57bb8124046c022066cd6796b4d377442 bind-9.16.23-11.el9.x86_64.rpm 51021748315575be2e763d8a85cf714c8fd3efac64f8e0e90b930bab4c92ab79 bind-chroot-9.16.23-11.el9.x86_64.rpm 6e6bd645868bc062696a3bc1c01ac8347bc01fa80651dd1c50d9d6ac48dc68c8 bind-dnssec-utils-9.16.23-11.el9.x86_64.rpm 85c8485e986ae47681e2f67fea5de6856c7a4959dbc2ebb298feb24f3f3a3bc3 bind-utils-9.16.23-11.el9.x86_64.rpm c8f7ef7af09187be67740e25ed5d164c15f007760d25542729462f8ba97b7a3f ALSA-2023:2282 Copyright 2023 AlmaLinux OS 0 1 Moderate

podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default podman-plugins-4.4.1-3.el9.x86_64.rpm 06fdb6b4e499322e189be2378d00d14ee8395ea7eb20172c1e8155b679552677 podman-tests-4.4.1-3.el9.x86_64.rpm 09bba41410effffdfd1c1dac934e5d703c2aa8ccca4f30271947706f1b9ba7bd podman-gvproxy-4.4.1-3.el9.x86_64.rpm 45fe85d9caacd23e4735f2dbf386182a624ab8be3e8a16b020458ba490c1e1da podman-remote-4.4.1-3.el9.x86_64.rpm 77dfd62b452f64e8f31eea9618e7a9b920f6c98ce8e26cf704384dcc1e73a257 podman-docker-4.4.1-3.el9.noarch.rpm e448deef45fcc9ba8e0d73412d3db5a6ac11b8efc3cecdd29f8f8f2f56e7552f podman-4.4.1-3.el9.x86_64.rpm ee4529d552be1040a3d30fe775987f92d927ed5c6dc77c3b15e7d2072fc2a8ed ALSA-2023:2283 Copyright 2023 AlmaLinux OS 0 1 Moderate

skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default skopeo-tests-1.11.2-0.1.el9.x86_64.rpm 836ae8578d5a93c18f7aa2bae383270264912ca9deb9178bcccd6894a9398c47 skopeo-1.11.2-0.1.el9.x86_64.rpm 903687d6856e66f4c6783db831bef213171f6af945f7f0e06450f954eba652ff ALSA-2023:2293 Copyright 2023 AlmaLinux OS 0 1 Moderate

pki-core security, bug fix, and enhancement update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default idm-pki-ca-11.3.0-1.el9.noarch.rpm 1aa86b42762e59396be9dfd98f1573408a841a80efcbfaaba5bd29098f8d44ee idm-pki-tools-11.3.0-1.el9.x86_64.rpm 3b6c0687528089adb063d7aaa9634e2427c8e37f8e5d72e71c95e32fd227c3f7 idm-pki-base-11.3.0-1.el9.noarch.rpm 4335559cc9154417a4c913ea4408d4b9b20fd7fbb8b02d20261f445ce17ad820 idm-pki-server-11.3.0-1.el9.noarch.rpm 699890ee224b32fee8cd5bd661087f0f81ada5e51ad88d5bfb4e22f07e334ad3 idm-pki-kra-11.3.0-1.el9.noarch.rpm 7b3ffae57c4f39d6ac35c295ff763e0de9c2c9397cc172314341b4bf78b6604b python3-idm-pki-11.3.0-1.el9.noarch.rpm 91a057affd429536485172e1256b7e7eeb490d61a090fa840f356e5bba054fa6 idm-pki-est-11.3.0-1.el9.noarch.rpm a6cd83adb3db223611ad1de515ece9ebb4ad9030520c3824a9af77f00c39d624 idm-pki-java-11.3.0-1.el9.noarch.rpm afb1c2e1f62ffc34c2afb30809ce9c0cb38245db47dd12fca4d4bff4a54bf1fe idm-pki-acme-11.3.0-1.el9.noarch.rpm b6962a25e271cd56c33a8ee8e7da33e01c55a2a41d0de1d2358be1fddc7a5dc6 ALSA-2023:2312 Copyright 2023 AlmaLinux OS 0 1 Moderate

jackson security update

Jackson is a suite of data-processing tools for Java, including the flagship streaming JSON parser / generator library, matching data-binding library, and additional modules to process data encoded in various other data formats. Security Fix(es): * jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default pki-jackson-databind-2.14.1-2.el9.noarch.rpm da28784a41fd010e96065fdf2a2dc83360004f68ea9615c72e57e671cfba7fbd ALSA-2023:2319 Copyright 2023 AlmaLinux OS 0 1 Moderate

git security and bug fix update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree (CVE-2022-24765) * git: Bypass of safe.directory protections (CVE-2022-29187) * git: exposure of sensitive information to a malicious actor (CVE-2022-39253) * git: git shell function that splits command arguments can lead to arbitrary heap writes. (CVE-2022-39260) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default git-email-2.39.1-1.el9.noarch.rpm 06c5197bbb46f5f456332cf8ec8e64c088e7d9c7bd7fbd3f5be6febe4c10e3d3 git-all-2.39.1-1.el9.noarch.rpm 0ceda64a7e43f550ddd1e929e2be7bf62c433494b764bff188f0cc82621b6d40 git-core-doc-2.39.1-1.el9.noarch.rpm 18987b26a87ea025b06738f7228b549aae2c7a10d66faff4920937e1f1662fda git-svn-2.39.1-1.el9.noarch.rpm 49ca591b4eb101559af0ad38343e245c13e7c5d76535ee67ad95ba62c86a94c7 gitweb-2.39.1-1.el9.noarch.rpm 4a3b1fcdd8bc561e13182eafa34e996725d960ecdf82ca4f67dedab9ca86f0ed git-daemon-2.39.1-1.el9.x86_64.rpm 56372fd6ea200b809b1d511bbda1655ac70b59a5f27de44c44a9b1f2c89b7378 git-gui-2.39.1-1.el9.noarch.rpm 61a3868b23dde63f4bf4e29a1e50ffe5913b89a1090b7240e908e62a71622a74 git-core-2.39.1-1.el9.x86_64.rpm 63dcd68c23e1e37c71cca5e88bedd9ac3e2340691c6ba19fcc7f85949ca391a1 git-instaweb-2.39.1-1.el9.noarch.rpm 64cf2a3ea318e2e438b6ed0dfc2bce43b86c4ed2e9a76660adfdc3f50efed40a git-2.39.1-1.el9.x86_64.rpm 755d55a3303e83733332fdec32bb85729cdfb0fe7d66894903ea0e8bbe8e4f2d perl-Git-SVN-2.39.1-1.el9.noarch.rpm 83f3a7c296f27edd51f53ee53cbe2c9a2eda0f60668f8b9d5457c2ca6431be7f perl-Git-2.39.1-1.el9.noarch.rpm aae2f2a7bc2a33e01ac61a8f0ecab7b9cd1000e72c40f882c69e84df1803b144 git-subtree-2.39.1-1.el9.x86_64.rpm b7e148727ea05edc96981dc6438a469bd80ddd12b16d6bb68ada2e9dd5cd9f0d gitk-2.39.1-1.el9.noarch.rpm cb1e0cb42193227d09ed0a15c9124493df822c8ed8aad5ee6c09965bc71287a6 git-credential-libsecret-2.39.1-1.el9.x86_64.rpm d80d4f81b32a1a30e8bb683373178cdcbb0a38763c20dcde71197d9262ea051c ALSA-2023:2326 Copyright 2023 AlmaLinux OS 0 1 Moderate

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282) * freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283) * freerdp: out of bounds read in zgfx decoder (CVE-2022-39316) * freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317) * freerdp: division by zero in urbdrc channel (CVE-2022-39318) * freerdp: missing length validation in urbdrc channel (CVE-2022-39319) * freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320) * freerdp: missing path sanitation with `drive` channel (CVE-2022-39347) * freerdp: missing input length validation in `drive` channel (CVE-2022-41877) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libwinpr-2.4.1-5.el9.i686.rpm 0b6272ec460689c760482dacb9091af3f2456a06b8c247f167437eba4b6e6723 freerdp-2.4.1-5.el9.x86_64.rpm c2850b222045142657687c2256adfdff7e4ceb57822faefa196d3fe1c67a977d freerdp-libs-2.4.1-5.el9.i686.rpm c845ed7ed89d41b16bda32c34c3df69fe6ccac361a7d04d2bdffdfcfd51fd0df freerdp-libs-2.4.1-5.el9.x86_64.rpm ceae2daa582a0f1a4f122259cd9084ea876f6a0f55a29501b711bdd1e7da3aff libwinpr-2.4.1-5.el9.x86_64.rpm ed2eac40785a1262e8cd6e4beeaf733bf392cbb844a591779b350fb762dbd2f6 ALSA-2023:2340 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: heap Buffer overflows in tiffcrop.c (CVE-2022-3570) * libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix (CVE-2022-3597) * libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c (CVE-2022-3598) * libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c (CVE-2022-3599) * libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (CVE-2022-3626) * libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627) * libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970) * libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645) * libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2023-30774) * libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c (CVE-2023-30775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libtiff-devel-4.4.0-7.el9.i686.rpm 2125e73787c744185ff33e47b658d13e55738fbc5e9d5350c6f87a8959e0b157 libtiff-4.4.0-7.el9.x86_64.rpm 54f8ea104d7c1383da191fb19f57b18aaae6fbb3e08447c08c1fbb4b7c953714 libtiff-4.4.0-7.el9.i686.rpm e32a171db1e8c4664a9e660207c7724b47ea6d11a7fa4d4669b5876d4a635026 libtiff-devel-4.4.0-7.el9.x86_64.rpm e785b42887ff5bcaa9c1d3d9ea013e72332e41e16a8b77360118a70cfba60d8c ALSA-2023:2357 Copyright 2023 AlmaLinux OS 0 1 Moderate

git-lfs security and bug fix update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default git-lfs-3.2.0-1.el9.x86_64.rpm 205862ee3ae4dd4841ca235399bf6c73f486bde572254598b3943d1aeaa88da7 ALSA-2023:2366 Copyright 2023 AlmaLinux OS 0 1 Moderate

emacs security and bug fix update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: ctags local command execution vulnerability (CVE-2022-45939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default emacs-lucid-27.2-8.el9.x86_64.rpm 0b50bdece296184a3128da91e6f51629a74c96661987605a4a2bb9287ceb669f emacs-common-27.2-8.el9.x86_64.rpm 1005d00a0e3f0f5a0907c4aae6ffa4d32e7eb13f7c89c5972c93027609376338 emacs-filesystem-27.2-8.el9.noarch.rpm 893b4d4e28600b5cc8312f686562525d4c14326e49988ca6d551d4b02b5abd9e emacs-nox-27.2-8.el9.x86_64.rpm a89c758db12c53850d35bb46a5901757987393d28bc6daa347aceb251274d59c emacs-27.2-8.el9.x86_64.rpm e81706109e3efcf1cd55db64d8b3de0f1f8c72ccf547a914674c326e5a9f939b ALSA-2023:2367 Copyright 2023 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security and bug fix update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default containernetworking-plugins-1.2.0-1.el9.x86_64.rpm e65dd2ee6a03110099f869a80b900c12c797b1815e9bfcbe18c911ca2d35c7bd ALSA-2023:2370 Copyright 2023 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack) (CVE-2022-3204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default unbound-1.16.2-3.el9.x86_64.rpm 0c7d6f9ac876abbd702baec24e3c9e59666b2f5b586f58275001f3014c35b851 unbound-libs-1.16.2-3.el9.x86_64.rpm 47edf2469daa29ae0a8f48f983a0d3b05caa63bfee8ab4098050e91f04f1d4c5 unbound-libs-1.16.2-3.el9.i686.rpm 692919b5755e2fe9621a04613875cfc4cab29a7881d8a91c44d037bd4c2922eb python3-unbound-1.16.2-3.el9.x86_64.rpm 72d584247542ad4d9c01f5e226e8bba5331acfe61e8d04667425cb65b1a4ed28 ALSA-2023:2373 Copyright 2023 AlmaLinux OS 0 1 Moderate

wireshark security and bug fix update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: f5ethtrailer Infinite loop in legacy style dissector (CVE-2022-3190) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default wireshark-3.4.10-4.el9.x86_64.rpm 604c91a7be5ec4796295334c8aa62b9210a634353a7e184d631c20cd213c2d9e wireshark-cli-3.4.10-4.el9.i686.rpm 95097b03c142f8878f94d623b58e77e493b2260f37e935612137675bc9d8b8ea wireshark-cli-3.4.10-4.el9.x86_64.rpm f9a89b92e1cc3a33c37d69259095008735baa18609b0093b5eb6e9b104081821 ALSA-2023:2378 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql-jdbc security update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): * postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions (CVE-2022-41946) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default postgresql-jdbc-42.2.27-1.el9.noarch.rpm 2913b9e4de7328484fbecee27fcabdfcb6a2632f4ba90270862c4a09fbd9fadf ALSA-2023:2417 Copyright 2023 AlmaLinux OS 0 1 Moderate

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.1.14). Security Fix(es): * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454) * php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications (CVE-2022-31629) * php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630) * php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631) * php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default php-process-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 0be6127ea0c4190b6bf1b2532fbbaccb9418ee9ec2bb79500c96598ce07b1c02 php-opcache-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 1494192cf6953f3e5b7b100de54625657930ad4cd5647a8fc775e92c456b5f69 php-xml-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 15e3719bd0d691e21198a2642f8219f38a30c06483bb4d30c7b3be771add8119 php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.x86_64.rpm 1d61584097fd68d9478f5e82d6be6d28824069372066e2373f64760a85a5187f php-fpm-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 1dd0ca80a85c63dd5ecf16a97595fe378f9ce8fef214cb16ccaf5ba29851de7d php-dba-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 22508de4eb5da0d32b1ec943eff15155e9bf3d482149e70df9dd13d9b986a9a6 php-ffi-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 27896a999e7744969af2d14ffe1ef572850d0821cba83104b09fbd592ceea448 php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.x86_64.rpm 2db6bdc28c0763904128e74c0d62d0ea0c44d261b11df928c090f42e22d03a81 php-mysqlnd-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 38e191cd792d3dbb2b637bba4f298075dbfcc5c78a784d3a435236e55aabe457 php-mbstring-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 4653833930c0dcbc0f1bb7c27f90ef5824af514b72de16a67757d6b72c20f87a php-enchant-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 4c6f4e530f6f618f2f04ed64c3cb0924669db1b93e20a96f9fb59d931990f451 php-embedded-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 52a5dbbbff509a7ab6604f833bd0e0fc07064610b9ef5a88d7c07ea77ab65787 php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 56e923341d0a17818b0e75e861abfe331162b9e38611264cc639cb0236fce1ca php-cli-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 64a2dd8fdd257f7db8cbe5e02e232d03042a1b3bd3acfe44fac2a49827b8702b php-snmp-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 64f17ffa8cbc4f504624e8664f469ebff647161f42d5257d726c02525feace44 php-pgsql-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 6f1146eb8a0631849a46bffbce54c40e0cd192032303db926f9bed9fbbfdc09e php-ldap-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 721b0d137bfe14c92e987402698798d7cfa6c8e5db8b46b90385c80c89399f99 php-devel-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 8494f1a73dcc393e41ebb9705c4c0566f209cacb45ca5e1356e8e710dd2fd1b5 php-intl-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 84e6066d262f002a8fbbb60c5ff24e5ae0fd278ce7ca2326d2d610e087bb274f php-gmp-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm 89f628a1ec6ae91c368f9bcfa8139889e642d0a58d55a56d6ab8b059bd5ab366 php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.x86_64.rpm a2464722cfe7d27cd93eab8a1161a66f29ec07e2084e6b4c523d27979d38cf33 php-soap-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm a480df60ff16a9e30b2a4a5a36fbfffac94b772183858b581fd700c203abca21 php-common-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm a70dd1f157cf55e19455548246502557441fb5814cdad9804c7a04119d1c83bd php-dbg-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm ba0aeefcc2a064a9cdbb5a9b5aa5831d125fb82618e4f0f8c1f05273fb9b368b php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.x86_64.rpm c089feb7907f70938655f4f9ae584c4a4574a3bcbaa2b956ee3d13e9da66f52e php-pdo-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm d6f8bbdacd80fc585811ceddb521f96410a0ed69133936619a00e911eafbf86d apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf php-gd-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm e382322dc98c9f193cdf530b94e40947fe11337ecfb73d7a7835b008aea0786a php-odbc-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm e8ab732b6f83969ab6636b52bcde27195e894c24c29529e1a755bf15aa79af9c php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.x86_64.rpm f148ef9c893d0c720cbeb8f383382dd98953bdc71b88d16fae276adc83daed11 php-bcmath-8.1.14-1.module_el9.2.0+24+ca6bd7c2.x86_64.rpm f6bc4def81d921630318502d607cfc1c0843f0be116eca272a51b63e29c50c4d ALSA-2023:2444 Copyright 2023 AlmaLinux OS 0 1 Moderate

net-snmp security and bug fix update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. Security Fix(es): * net-snmp: NULL Pointer Exception when handling ipDefaultTTL (CVE-2022-44792) * net-snmp: NULL Pointer Exception when handling pv6IpForwarding (CVE-2022-44793) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default net-snmp-5.9.1-9.el9.x86_64.rpm 3183dae53a3c8be55fcf44c8c21a7c2f01b140487709d24278cf09316caf2c51 net-snmp-devel-5.9.1-9.el9.i686.rpm 48b29d88ef8c7751d1a806d91013d4164a46d90ca558fc0b4077081793b3d524 net-snmp-agent-libs-5.9.1-9.el9.i686.rpm 4d54929c0e9e7cbb3d3425320cf3dfff4d614e1c6927b0baf37cbc13954f5b44 net-snmp-perl-5.9.1-9.el9.x86_64.rpm 788f8c3d1527a551ab1638afdf433f7e5bc90e1e4b0025a3bf27a5780c33178e net-snmp-devel-5.9.1-9.el9.x86_64.rpm 93499aa0b5eb19cafca9c4b436d5844dd41ab495b8d9cceb884ab0bd03821c5c python3-net-snmp-5.9.1-9.el9.x86_64.rpm a0c98cba6305514200711b2bcdc943265fc9b42fff9973519f689f777acfd501 net-snmp-utils-5.9.1-9.el9.x86_64.rpm bcb5e5dd49544665e68ced7d7d1c8819ed8144506ecb283a0541f8be7e911251 net-snmp-agent-libs-5.9.1-9.el9.x86_64.rpm bcd1bd1f49bcd231a20ba571fe25f6bb06184e9f971e45dc9e3c5eb18acd1666 net-snmp-libs-5.9.1-9.el9.i686.rpm eb873fe53db9e7ada6c38fe5618f47c95ea1ad19ccfb6b354d754a34678be476 net-snmp-libs-5.9.1-9.el9.x86_64.rpm fad2cbfd5aca42b4b17ef2143331c1bf579a18ca17825b65dfa87fea3b52b847 ALSA-2023:2453 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtpms security update

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines. Security Fix(es): * tpm: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1017) * tpm2: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libtpms-0.9.1-3.20211126git1ff6fe1f43.el9_2.i686.rpm 3aa2baa955025352d8a8977fa650c161d6047dac5ad169c07715f1c1a69d2f0a libtpms-0.9.1-3.20211126git1ff6fe1f43.el9_2.x86_64.rpm f3df32290420368c3d0fa190156458a071451d87dc05c7a6f8ff34ec8ef2344f ALSA-2023:2458 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896) * net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461) * cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341) * malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655) * possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462) * KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789) * use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882) * KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196) * netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663) * race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028) * out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435) * race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522) * memory leak in ipv6_renew_options() (CVE-2022-3524) * data races around icsk->icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566) * data races around sk->sk_prot (CVE-2022-3567) * memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619) * denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623) * use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625) * USB-accessible buffer overflow in brcmfmac (CVE-2022-3628) * use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640) * Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707) * mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128) * l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129) * igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141) * lockdown bypass using IMA (CVE-2022-21505) * double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388) * network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743) * unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188) * TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189) * u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674) * use-after-free related to leaf anon_vma double reuse (CVE-2022-42703) * use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720) * BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721) * Denial of service in beacon protection for P2P-device (CVE-2022-42722) * memory corruption in usbmon driver (CVE-2022-43750) * NULL pointer dereference in traffic control subsystem (CVE-2022-47929) * NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394) * use-after-free due to race condition in qdisc_graft() (CVE-2023-0590) * use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195) * denial of service in tipc_conn_close (CVE-2023-1382) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default kernel-debug-devel-matched-5.14.0-284.11.1.el9_2.x86_64.rpm 19ae9a5598c8955410a136b62331c915b08421dbed0e114eec25cb451082e569 rtla-5.14.0-284.11.1.el9_2.x86_64.rpm 3de14372e73f727e00fbca90f399427c6dcd244f4ee2e1aebc4685dcb6eb107d kernel-doc-5.14.0-284.11.1.el9_2.noarch.rpm 6d66749bc7a2add74a128f8d67e457498ff1eb5e5d6c0a36a3f8138444c5e354 kernel-devel-matched-5.14.0-284.11.1.el9_2.x86_64.rpm cdf9d079839649880fb26d4df0aa4c6291d6d58389a95678da1aa161d40eccd1 perf-5.14.0-284.11.1.el9_2.x86_64.rpm cfa2cdd26dfda71df7ef24ae350d407c8b83ade850e675a84269f7aa9a506fb5 kernel-devel-5.14.0-284.11.1.el9_2.x86_64.rpm cff29524e98cf3e1fc1c5c29da302a28ada1ea2335386e6b82d14d4303451d23 kernel-debug-devel-5.14.0-284.11.1.el9_2.x86_64.rpm d0b8b15df131e97a2ec87ea7e7c87f38b45f6cf0d5d5ee35faa630d99f3ffee1 ALSA-2023:2478 Copyright 2023 AlmaLinux OS 0 1 Low

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: Incorrect handling of control code characters in cookies (CVE-2022-35252) * curl: Use-after-free triggered by an HTTP proxy deny response (CVE-2022-43552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libcurl-devel-7.76.1-23.el9.i686.rpm 660818f2e31e18baa7b267885e21d2823242f516cc34c9cc6a5d163e22b4d11c libcurl-devel-7.76.1-23.el9.x86_64.rpm 69646a0e6fd8220e32c5092f85ce2f240b0e481d25cced6f4b7bb66a66111a86 ALSA-2023:2487 Copyright 2023 AlmaLinux OS 0 1 Moderate

fwupd security and bug fix update

The fwupd packages provide a service that allows session software to update device firmware. Security Fix(es): * fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34301) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34302) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default fwupd-plugin-flashrom-1.8.10-2.el9.alma.x86_64.rpm d75cbe9ed8e11392b785067b7bd3357f92f24ee2d3b47219f27783efaa6486fc ALSA-2023:2519 Copyright 2023 AlmaLinux OS 0 1 Low

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2131993) Security Fix(es): * samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default samba-krb5-printing-4.17.5-102.el9.x86_64.rpm 1287a3b9f3949349e74f1dbdd09d9fb96a1e89bc2e53f4b4618173f890ecd400 samba-vfs-iouring-4.17.5-102.el9.x86_64.rpm 35e988e3f0bf04773a34c019edb2602a261986495bfedb76873f52ca9e4455f0 samba-winbind-clients-4.17.5-102.el9.x86_64.rpm 39e7535d58267296576008816fd50ab856faa98586e046def5dbb294f63b8d00 samba-winexe-4.17.5-102.el9.x86_64.rpm a868518756ab9a4c2fbd7b8fa386d2495763eea1595d6ee14e9004ddc5964d1a samba-client-4.17.5-102.el9.x86_64.rpm f22e319b04989fe1dd5fae1d3821c09b5e3dcd8bbdec6735db111451910c5550 samba-winbind-krb5-locator-4.17.5-102.el9.x86_64.rpm f25443fcd9595bfd63e36c0068eebe9a1fe7102dc1cca3edc4770e2060968afb ALSA-2023:2523 Copyright 2023 AlmaLinux OS 0 1 Low

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption (CVE-2022-3358) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default openssl-perl-3.0.7-6.el9_2.x86_64.rpm 7cf7c3e0ae1c726f33f6f8472214360b7e29df0eac692e7b0c5302829d7d1132 openssl-devel-3.0.7-6.el9_2.x86_64.rpm be9ca460606e9fa09ef4a8b50a697445e8fefa590278639cceee3713d4a96f06 openssl-devel-3.0.7-6.el9_2.i686.rpm d55d54e5912173acb6e9d1800560a201c6a8b9ce83128c01e41235c2dc506374 ALSA-2023:2532 Copyright 2023 AlmaLinux OS 0 1 Low

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default bsdtar-3.5.3-4.el9.x86_64.rpm ddd23a488aeb3fb31196d48bd8317c9a10f1b3171562e7ae18e7351e5378f5ef ALSA-2023:2570 Copyright 2023 AlmaLinux OS 0 1 Moderate

krb5 security, bug fix, and enhancement update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). The following packages have been upgraded to a later upstream version: krb5 (1.20.1). (BZ#2016312) Security Fix(es): * Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default krb5-devel-1.20.1-8.el9.i686.rpm 498187e418c061df242225f8959b8e868a6fc0491168d6a9f27254fb7fca0f15 krb5-devel-1.20.1-8.el9.x86_64.rpm 71adc11b59284969b0053d4906052c362cb41d3f1bfb94883cfa5b9a4a1b1109 ALSA-2023:2582 Copyright 2023 AlmaLinux OS 0 1 Low

lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: heap buffer overread (CVE-2022-28805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default lua-5.4.4-3.el9.x86_64.rpm fbe9d41337f16777f313075196b5ef3398223fb58f05ea55356ab009003b49fb ALSA-2023:2621 Copyright 2023 AlmaLinux OS 0 1 Important

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177731, BZ#2177732) Security Fix(es): * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594) * mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611) * mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632) * mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633) * mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410) * mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879) * mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883) * mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887) * mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917) * mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default mysql-errmsg-8.0.32-1.el9_2.x86_64.rpm 0cc2777dfa04f3af5db8ff1465ff13e0d29abe3ad6fc68775eb1bf46fd9a0a6d mysql-common-8.0.32-1.el9_2.x86_64.rpm 354b79408f967d968ca8489bed7913c7f745af5089dbcb95e22a7a197636ee57 mysql-8.0.32-1.el9_2.x86_64.rpm 5636e40cb39b98b0f12f3658c21974f9cd839c776a071840f6cce17f77f07da7 mysql-server-8.0.32-1.el9_2.x86_64.rpm 9b131cf6aa992363301e2cfaa8bfc48903ce1049ae8847eec4ab44639d94ea96 ALSA-2023:2626 Copyright 2023 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Regression of CVE-2023-28617 fixes in the AlmaLinux (CVE-2023-2491) * emacs: command execution via shell metacharacters (CVE-2022-48337) * emacs: local command injection in ruby-mode.el (CVE-2022-48338) * emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default emacs-lucid-27.2-8.el9_2.1.x86_64.rpm 1794d10e3b75b82d3217281068bbc101e1963e96201c3138a6a51f7bda849e6e emacs-common-27.2-8.el9_2.1.x86_64.rpm 5a0ec4dca1174165b77fe8e62d6d370e4aed322538288826999bbd6a952caa4f emacs-nox-27.2-8.el9_2.1.x86_64.rpm 6e4cff043e7b41b42033aac26f22748d814445c62268963a9cad7c5a8f926020 emacs-filesystem-27.2-8.el9_2.1.noarch.rpm 8132dbe410df05ce2933a36657fa82d2e5165d3d9e32b343d6ab41a08a1025bb emacs-27.2-8.el9_2.1.x86_64.rpm dd6ea41d9f1758c15182bcdb3b89cc7927225eb12a2190344a6005b7952fc741 ALSA-2023:2633 Copyright 2023 AlmaLinux OS 0 1 Moderate

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: remote DoS via crafted TS payload with an incorrect selector length (CVE-2023-23009) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libreswan-4.9-2.el9_2.x86_64.rpm 7dc90f69a613fe47bb817b94daa66e6a1acf729c14706e081f4757669580e823 ALSA-2023:2645 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: the functions order_hostkeyalgs() and list_hostkey_types() leads to double-free vulnerability (CVE-2023-25136) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default pam_ssh_agent_auth-0.10.4-5.29.el9_2.x86_64.rpm baebe1ac8390c4d7e3cc6e90427935d75eb04c464115480d7d41a7d294ba37f7 openssh-askpass-8.7p1-29.el9_2.x86_64.rpm f804c3c719b95c5f6e9ff7dd2e6adf242bd8be9a0c3081e07565cb6048783b66 ALSA-2023:2650 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: FTP too eager connection reuse (CVE-2023-27535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libcurl-devel-7.76.1-23.el9_2.1.i686.rpm b3f35ee950e1fdbd7fa3f263a6fe2ea686668b85b330d3a8b87ed4de7662ff28 libcurl-devel-7.76.1-23.el9_2.1.x86_64.rpm b9ba92d49a5bca5dbba7decdd8117af41099df4fb301f034e98e43c7115e7f83 ALSA-2023:2653 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * WebKitGTK: Regression of CVE-2023-28205 fixes in the AlmaLinux (CVE-2023-2203) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default webkit2gtk3-devel-2.38.5-1.el9_2.1.x86_64.rpm 26893adddba89f3db7f1aa8a8685679673b138322a4556e5047b7080ab737bdd webkit2gtk3-2.38.5-1.el9_2.1.x86_64.rpm 2b63cca0f5129bef8eb988a597bebffcafc4c8cdefbf7305623b19f0eeffd2ad webkit2gtk3-jsc-devel-2.38.5-1.el9_2.1.i686.rpm 3efa2f6b24d407c23e34fb676f6919fbb3e377cb4530cebc7e11675c6523ae67 webkit2gtk3-devel-2.38.5-1.el9_2.1.i686.rpm 8640cd6faf4cf3ee7c6029435d572d2d3f45f3ebcbd4990e03bf46f856b83cb2 webkit2gtk3-jsc-2.38.5-1.el9_2.1.i686.rpm bc8203ee526053fedfb6702a0615d0e3ab37077fb7e7473896e8ad653ec1b57b webkit2gtk3-jsc-devel-2.38.5-1.el9_2.1.x86_64.rpm cb5e26e29f4b11112aa8dc6f2f11eb1d3eb4efd383f9bb5949b2a596340b9cb2 webkit2gtk3-jsc-2.38.5-1.el9_2.1.x86_64.rpm cf40b3f24e90c6d8b61c6acfdc7a4718f3d9d4183d10137d67d4f34139817969 webkit2gtk3-2.38.5-1.el9_2.1.i686.rpm ec9519e301517d9001c95e85cf08ec9e989114b526af457268a6e60739331dc3 ALSA-2023:2654 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (18.14.2). Security Fix(es): * glob-parent: Regular Expression Denial of Service (CVE-2021-35065) * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904) * http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881) * Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918) * Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919) * Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936) * Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920) * Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default npm-9.5.0-1.18.14.2.2.module_el9.2.0+29+de583a0b.x86_64.rpm 1f94c5c30d3554dd5d6772e495978875f6b3aaee6699579e97e1699babaf894e nodejs-docs-18.14.2-2.module_el9.2.0+29+de583a0b.noarch.rpm 2b9c75be404b8541ff176ec0b10e2290663b50aeadcd3991b4826604a03689e6 nodejs-18.14.2-2.module_el9.2.0+29+de583a0b.x86_64.rpm 535d5e3863d7b035a3e46d65b8a5616b634b7660dd0a3c6344668724ab5faa17 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-full-i18n-18.14.2-2.module_el9.2.0+29+de583a0b.x86_64.rpm d7be1281a56b7f2819835be3d7eec42a238907d75a141e8bbc7fa1a20541fd4e nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d nodejs-devel-18.14.2-2.module_el9.2.0+29+de583a0b.x86_64.rpm f9d9f4346e0e4299783eec640311c094bfef9f66e63134748357afab043346b9 ALSA-2023:2655 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs and nodejs-nodemon security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.19.1), nodejs-nodemon (2.0.20). Security Fix(es): * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904) * http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881) * Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918) * Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936) * Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920) * Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nodejs-libs-16.19.1-1.el9_2.x86_64.rpm 6d2aae99a1950446554cf9dfe7e075a5376ba71e6f5e977b0ddfb43b4bc08569 npm-8.19.3-1.16.19.1.1.el9_2.x86_64.rpm 72623d25f395d99e6826d1267e131d063a1b933ae607de84046b97df5a7ea053 nodejs-full-i18n-16.19.1-1.el9_2.x86_64.rpm 77bcb7f9716fca429fecc1db2a489306be22d2db3e9dcb0671b975595856fc2e nodejs-16.19.1-1.el9_2.x86_64.rpm 927394e1e17f583b8f85ae245948a2175352fd8048fa5d34873790bbd37fa3de nodejs-libs-16.19.1-1.el9_2.i686.rpm 9d099399c3b2092bce0f4c2af5ea40886743bf96af2825cf8c90f11c86770bfa nodejs-docs-16.19.1-1.el9_2.noarch.rpm f11bb41fc5bd941d6b4ceaabcbd5a55df759beac7e34945b8cd3a3f52838fe29 ALSA-2023:3143 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.11.0 ESR. Security Fix(es): * Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205) * Mozilla: Crash in RLBox Expat driver (CVE-2023-32206) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207) * Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215) * Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211) * Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212) * Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default firefox-x11-102.11.0-2.el9_2.alma.x86_64.rpm a1105c3b6d6f5ec8abd3440456e7be1fce27d772602e0c16fdf65f5494729a5a firefox-102.11.0-2.el9_2.alma.x86_64.rpm e3935eeb3b8c706b85c0f001318989af42b0452f0b3d425a3ab780112fcb9afe ALSA-2023:3147 Copyright 2023 AlmaLinux OS 0 1 Important

apr-util security update

The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. apr-util is a library which provides additional utility interfaces for APR; including support for XML parsing, LDAP, database interfaces, URI parsing, and more. Security Fix(es): * apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default apr-util-bdb-1.6.1-20.el9_2.1.i686.rpm 0d0974ebca324f99479c0625baff0a5fdd6b1fd8923b263947c3a365d8ee7ae4 apr-util-mysql-1.6.1-20.el9_2.1.x86_64.rpm 2f74d1dc422aba3ac56bb62056adca2b60adf14b60e1c89d22e72b53a36d6beb apr-util-1.6.1-20.el9_2.1.i686.rpm 3df37f9a502f9470ddc2f017b83f6f1d82f3ae4de5e258c900bbb5cdcdef6017 apr-util-1.6.1-20.el9_2.1.x86_64.rpm 5063d7cd45d47b4b3f5fc63c6f8cae26380e548a45fb2daff264625b7eb7b32f apr-util-openssl-1.6.1-20.el9_2.1.x86_64.rpm 571daf8ca3c2843fe6439baa4dafb710f5283da8b99df38d2c05cdc2e6f097c1 apr-util-devel-1.6.1-20.el9_2.1.x86_64.rpm 796c54c8b93bd9c153e268be55c2d82fe0f2e50a1831936d634cd32c02d40eee apr-util-sqlite-1.6.1-20.el9_2.1.x86_64.rpm 89dfca7ae36b716a6fecefb5d9ba67d308d5d5d9e09d912e4004b52c7f6d7cbe apr-util-odbc-1.6.1-20.el9_2.1.x86_64.rpm 9f1997cced472309801d91189f16db42137b19802bffba5e5c163bc5d5a7ef7e apr-util-bdb-1.6.1-20.el9_2.1.x86_64.rpm a5dfb936c1045ebea26ddc97088eb5d0b63b0e8b3a337e682bd2baee45f41e2c apr-util-pgsql-1.6.1-20.el9_2.1.x86_64.rpm c6bba68bc5386253cad64cbe38e6bbe79eb7d829eb839a06c65f553682c64370 apr-util-ldap-1.6.1-20.el9_2.1.x86_64.rpm dea48fdbfeee3912d2ba99c417ef2861337084cd63c070aee49faecab425b251 apr-util-devel-1.6.1-20.el9_2.1.i686.rpm f8aab82b06d2634eea967938fc0af27bf4d0ed3e29780a0c578466982f8caf2e ALSA-2023:3148 Copyright 2023 AlmaLinux OS 0 1 Important

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Regression of CVE-2023-30570 fixes in the AlmaLinux (CVE-2023-2295) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libreswan-4.9-4.el9_2.x86_64.rpm b1f8d3a7b9d8425eab84d16c0c94975a473967fa708ebea05edb24c7ffb198b8 ALSA-2023:3150 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.11.0. Security Fix(es): * Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205) * Mozilla: Crash in RLBox Expat driver (CVE-2023-32206) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207) * Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215) * Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211) * Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212) * Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default thunderbird-102.11.0-1.el9_2.alma.x86_64.rpm 5db3dcc3aa049f261210231e878368c983009ca9f7ab39a5f8966877539e0cbd ALSA-2023:3245 Copyright 2023 AlmaLinux OS 0 1 Important

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652) * git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007) * git: data exfiltration with maliciously crafted repository (CVE-2023-22490) * git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946) * git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default git-core-2.39.3-1.el9_2.x86_64.rpm 01c4926056145fa0a1dc3af10da1eb60776dedf5cdc80bccc06648f26194cf4e gitk-2.39.3-1.el9_2.noarch.rpm 04a2388d3e9ffb30522f40ace6f0a951d5a7c576dc9eb97225a20e1aa4e04bba git-svn-2.39.3-1.el9_2.noarch.rpm 0636562f42e814d92392db782ba76cfe9c1390d452d16d989a351a09a0d63b33 git-core-doc-2.39.3-1.el9_2.noarch.rpm 163f5c8d6e84b4be3f209c33183e0a11de041adfc4b3b14a5d57bcbe0a4999b4 git-all-2.39.3-1.el9_2.noarch.rpm 3e1dbc5f1874088b71b915fae08f416a113b12439c096cdeb0725da8e8bb5bf3 git-subtree-2.39.3-1.el9_2.x86_64.rpm 52a4d3f35ea82bc7e92023efcb12f5e14805e48a4d8132bc6f680396a8fcf7e7 git-daemon-2.39.3-1.el9_2.x86_64.rpm 64bd9755e469a0b42f3250a6311c2059d24391280d7e25531a5eb4ba71b9cebc git-instaweb-2.39.3-1.el9_2.noarch.rpm 905ff58172d1fd914ae9bfa839b21d0fa622ace54e5d9318e007f48605bdfc0f git-2.39.3-1.el9_2.x86_64.rpm 975527f621eda1a3bcb3f128b2a2cb29c017434648dbd952a783129742cb825e gitweb-2.39.3-1.el9_2.noarch.rpm a4131b18978fa1c3ae539342fb16889a1189fd4f66e1210dafec949a3808fbb8 git-email-2.39.3-1.el9_2.noarch.rpm b2adac3046b74cb33b1ff0fd2dde28421f58088c9d0d35d861ea0785a61dacd5 git-credential-libsecret-2.39.3-1.el9_2.x86_64.rpm b310b40cba7cf2c9460d23d2bc4fc116d76f75ed6c1828a08b25157bf0624c91 perl-Git-2.39.3-1.el9_2.noarch.rpm bfebb49bf3fb5a4fd336c3447944475c29edc7a16f24ff3b781909cb83d0d952 perl-Git-SVN-2.39.3-1.el9_2.noarch.rpm c72e222bbb014814f18e10de524d317e82589fa7e6680080cd21ae03036ee5d4 git-gui-2.39.3-1.el9_2.noarch.rpm d329b8f22f182b3b06ee32639fb3345bef1d82435f89e58c5c35a90a2a239a1c ALSA-2023:3318 Copyright 2023 AlmaLinux OS 0 1 Important

go-toolset and golang security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default golang-1.19.9-2.el9_2.x86_64.rpm 0317e04e954810df4d3efe1135600c1ced4f77c8a88392bdf1e9d29ff3938a23 golang-bin-1.19.9-2.el9_2.x86_64.rpm 360da52a32b5aff2154795336831bc1f157bc2fe30b0309cf00af1137e44a437 golang-tests-1.19.9-2.el9_2.noarch.rpm 3e7a3d789c3a201595d49dd61196170be4b9b2bec6598550984e221e517f6b13 golang-race-1.19.9-2.el9_2.x86_64.rpm 61fd9718508aa4891c63c3a21fd6f6abb558823862a28f2cfc2d487823402340 golang-src-1.19.9-2.el9_2.noarch.rpm 7a755e7bf01e8d100983fd3a21695878f2ade5268c1bce6fcfcbaf25265be3a7 golang-docs-1.19.9-2.el9_2.noarch.rpm 928cd427edc001871d6a1c7be4e1ea058d43c44d4ae45de88ce0c6179ab590cb go-toolset-1.19.9-1.el9_2.x86_64.rpm ae26abf9f3fea917f375482068c0626f173da66cd43b47f23a48f7b12c8646c2 golang-misc-1.19.9-2.el9_2.noarch.rpm b2a1acbb405b126bb4db37df44985d8056d79aedbc92cdc592dfbb6bfa2f9664 ALSA-2023:3423 Copyright 2023 AlmaLinux OS 0 1 Important

cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. Security Fix(es): * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default cups-filters-libs-1.28.7-11.el9_2.1.i686.rpm 91aabba866078d81ea9e7fcb2429d20142f39b2ffde9b21f5f9a2c07d14d377a cups-filters-libs-1.28.7-11.el9_2.1.x86_64.rpm a0f3a711a755e7dae73be98f914ae6dfdd9db3c9a9f205ea39fecc8978beb6ed cups-filters-1.28.7-11.el9_2.1.x86_64.rpm abd1c7eed57dc831c50fea26aac1034039a8d1f1dfa3bfe2523aa81e1835d235 ALSA-2023:3432 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: a use-after-free when processing maliciously crafted web content (CVE-2023-32373) * webkitgtk: an out-of-bounds read when processing malicious content (CVE-2023-28204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default webkit2gtk3-2.38.5-1.el9_2.2.i686.rpm 03a25730efc9beba991223df63ae1f0aaa4522729bec9c16ff842697b1eeca06 webkit2gtk3-jsc-2.38.5-1.el9_2.2.i686.rpm 03e515978e68f179f5f0c85a68792785dd671c5fa1fa807514bde8ef3e45a54d webkit2gtk3-devel-2.38.5-1.el9_2.2.x86_64.rpm 39b32d5b9e3d84ef284e8b38b1e8e2011dbc55eea5d8cbdc5c4a5796a71a56a9 webkit2gtk3-devel-2.38.5-1.el9_2.2.i686.rpm 8c822e1a73e647eb9cfbb6f63f6f08db3f516dd73892cda62efd17a2f41b0c5a webkit2gtk3-2.38.5-1.el9_2.2.x86_64.rpm 98d50a211bfd0e71832a449fd7a9084ecfdcdf8b419436b2b5cb7844610a6938 webkit2gtk3-jsc-devel-2.38.5-1.el9_2.2.i686.rpm bc8265143e2e19f2e57ea790031afc04bc5ebb78297d4287fdba181750030b64 webkit2gtk3-jsc-devel-2.38.5-1.el9_2.2.x86_64.rpm e185232115a2bc295bd7367369e1f3fd214527c814b2afb90a1ef40a43fb5f5b webkit2gtk3-jsc-2.38.5-1.el9_2.2.x86_64.rpm fc26be55286742ac7bf74b8579d94ad7180afa632e6bb954fafaa89e3901239e ALSA-2023:3559 Copyright 2023 AlmaLinux OS 0 1 Important

c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default c-ares-devel-1.17.1-5.el9_2.1.i686.rpm 17ecffc9bcea8cc602025acbb4a4f278e0c61ba1e81bf73f2223154190658a5c c-ares-devel-1.17.1-5.el9_2.1.x86_64.rpm 85ed19ca9a52616e14d7bdd47a79ec8ad5f153c3be91413da2a20efd63cc9382 ALSA-2023:3577 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130) * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147) * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nodejs-docs-18.14.2-3.module_el9.2.0+30+e3312493.noarch.rpm 2ad3268cdabd44f1fe5271f5aa2641b5e7eac4649848a4529d5aeaf5cf9a98fa nodejs-18.14.2-3.module_el9.2.0+30+e3312493.x86_64.rpm 5dc07f582dfe5785f5083451f282a49d5a84fd0005d696538760b646667c57d9 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-full-i18n-18.14.2-3.module_el9.2.0+30+e3312493.x86_64.rpm b51b8ff69b977ca0854df9a3d06ee45dc197b0166bf74aa62f9bed9572ba7d5d npm-9.5.0-1.18.14.2.3.module_el9.2.0+30+e3312493.x86_64.rpm bd22a46c1de71ce0f82f600a8cc060ac1062d648d94152f49070f54eb37c6020 nodejs-devel-18.14.2-3.module_el9.2.0+30+e3312493.x86_64.rpm e3af30a3e379808411c176d0c03a5d70c77b2a6fa644119572a568748cafe542 nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d ALSA-2023:3581 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.118 and .NET Runtime 6.0.18. The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212379) Security Fix(es): * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331) * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337) * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128) * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-targeting-pack-6.0-6.0.18-1.el9_2.x86_64.rpm 0256d2f2f0caffae56325e3c024f886f9c3748069faf44e614016c44f374df55 dotnet-apphost-pack-6.0-6.0.18-1.el9_2.x86_64.rpm 1bbce9bbdda3b5fca1ee2cfb741af68b4f55c25ccd8afa73a3e488bab3d28613 dotnet-sdk-6.0-6.0.118-1.el9_2.x86_64.rpm 5d4fc894021fe1bec0255a4192ea868167c4daa7e49948da0643d198f647b13b aspnetcore-runtime-6.0-6.0.18-1.el9_2.x86_64.rpm 6cbb0f7f1b03e9aa3a8073cdd4cba43a7e344049251ae6c461def53c00043b50 dotnet-hostfxr-6.0-6.0.18-1.el9_2.x86_64.rpm 9e36d150672127121e01dcb02726b0328a3e984c7b209bd93558372d49f8e8e1 dotnet-templates-6.0-6.0.118-1.el9_2.x86_64.rpm b708752ee90290bab118f3b6d3a99cd020e1b673b647ba89ccf435a87dc78ec4 aspnetcore-targeting-pack-6.0-6.0.18-1.el9_2.x86_64.rpm eb91e8b89ef2635b5b0d88f317d8f538591aecdb6f9ed7352faa5f8db15bec3a dotnet-runtime-6.0-6.0.18-1.el9_2.x86_64.rpm f122a920a2042ec80270e1cc3afa95cd6c8ec8d0cad342d99ce2c2aa96b120c0 ALSA-2023:3585 Copyright 2023 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. Security Fix(es): * python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3.11-tkinter-3.11.2-2.el9_2.1.x86_64.rpm 2f7a0c8748a5fb7d5729b6af0782439ebb3a70581029f80de59cbe94b1bfa362 python3.11-devel-3.11.2-2.el9_2.1.x86_64.rpm 47de567486fb903764519ac8e1785721443d970e4a14429930ea0ebe49543d60 python3.11-devel-3.11.2-2.el9_2.1.i686.rpm 7b8812c150f86c55f390b5b8f304d782d5d7ff0c290e9acbc8d9a292e5412903 python3.11-3.11.2-2.el9_2.1.x86_64.rpm 95c60e4cd1a90630a6f38a7c5a0a713c75a785c9ce75405a47676983b55bf1e4 python3.11-libs-3.11.2-2.el9_2.1.x86_64.rpm 98d303f6ae7a774005194d727691bd41f6b7aaef8a63ddd30f89061a3fef0305 python3.11-libs-3.11.2-2.el9_2.1.i686.rpm b5909312d1d8d99679d43c10ce6813d884139687b6d532b96f2bc3d48a751162 ALSA-2023:3586 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130) * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147) * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nodejs-full-i18n-16.19.1-2.el9_2.x86_64.rpm 2faf7a31000c9576ae04be3638511aa102464ecff1dc8616b494311ab24a04ba nodejs-libs-16.19.1-2.el9_2.x86_64.rpm 3de1537f4344e8f203531d739b48b09ef7b5306429b927a53c0cd540ced61668 nodejs-libs-16.19.1-2.el9_2.i686.rpm 4f6c9558da020f1782da99eb1fe4d70f42e6ead39fc571361ebeb2ac99cbf611 npm-8.19.3-1.16.19.1.2.el9_2.x86_64.rpm ad8bc26e591260d929705c567b4c7928e9f54494eed5f7e2b04d41198cba4035 nodejs-docs-16.19.1-2.el9_2.noarch.rpm d1f77d444195b730f9ffb538a9426aba8ee41a9d5fb373cc4db872046e2cf19b nodejs-16.19.1-2.el9_2.x86_64.rpm ec8e8b0d055da15161483dba2ee6f836b03d5fe057592cacb43e3e392ac56b14 ALSA-2023:3587 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.12.0. Security Fix(es): * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414) * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default thunderbird-102.12.0-1.el9_2.alma.x86_64.rpm 3901900ee2fc50e09c7a29a1e3b447352319367835f09ae0c4a61a9072162434 ALSA-2023:3589 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.12.0 ESR. Security Fix(es): * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414) * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default firefox-102.12.0-1.el9_2.alma.x86_64.rpm 7edb477236062d718065459dc3854884a96b3372066b38e64ecbacf18aaee0c5 firefox-x11-102.12.0-1.el9_2.alma.x86_64.rpm c3849f1bef027c42bd16cedcfe8a4106e4b0a558cac71c75c77809959af2de6f ALSA-2023:3592 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.107 and .NET Runtime 7.0.7. The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211877) Security Fix(es): * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331) * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337) * dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument (CVE-2023-32032) * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128) * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-runtime-7.0-7.0.7-1.el9_2.x86_64.rpm 011de104ab692b508809e4b0040684667af6aeb1014b713e743236c60ecbdafc dotnet-targeting-pack-7.0-7.0.7-1.el9_2.x86_64.rpm 0c71688443bfe3b4de61ee066f335f1da67440e047d14100697f59ff8d41f9e5 aspnetcore-targeting-pack-7.0-7.0.7-1.el9_2.x86_64.rpm 14e41f433b7a4a4e8331b55b24db29954b2531d73cbdceb188af8e34c34c54e0 dotnet-templates-7.0-7.0.107-1.el9_2.x86_64.rpm 6ae8e0b3734ac7b4d184fc490884a2930e7e4e5d33d69ff737c5030ca4ff0ebe netstandard-targeting-pack-2.1-7.0.107-1.el9_2.x86_64.rpm 6cd447a8668a464d3afe323fcdf74176b5a9e6a7032d59f8dae3e82521defa86 dotnet-apphost-pack-7.0-7.0.7-1.el9_2.x86_64.rpm 8d94ebe4a59b3c537000aafd6b667f760978f46e708f52a54c9c998b08bcc75f aspnetcore-runtime-7.0-7.0.7-1.el9_2.x86_64.rpm 9ed193b883fc35a2d3be87c50e0a513c5db6f482792f148bfeb7ca83ef3805a9 dotnet-host-7.0.7-1.el9_2.x86_64.rpm b543fd70d71906e3fd342d98ea33cb29fe0245963e3ab4078ff7adc381f5d858 dotnet-sdk-7.0-7.0.107-1.el9_2.x86_64.rpm d202457e09e5d7272f4cbcb1df78586f40a667c6f3446ea7728f79da2733cdd8 dotnet-hostfxr-7.0-7.0.7-1.el9_2.x86_64.rpm e0d1131d9ec1a0332e47e19185ac0ffab1642671c7672afb654e4cf52751d1e1 ALSA-2023:3595 Copyright 2023 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3-devel-3.9.16-1.el9_2.1.x86_64.rpm 6be2480c941a1cbffc99671406fcdffcd65a95176828aee04ab241b9613d975a python3-devel-3.9.16-1.el9_2.1.i686.rpm 71da8fc6c79661ec0233233c33e5a16ab1e4bb176c4fdca0eca2885aed76bf57 python-unversioned-command-3.9.16-1.el9_2.1.noarch.rpm b345ad21c1a737673f51b09aaa1c7d2dd0b1cd3e180136b26e7caa6af3ec09bd python3-tkinter-3.9.16-1.el9_2.1.x86_64.rpm f31bc10e76248d24bbdeaab39d07152c18518f3bc81cdcb443e60c37989d41b5 ALSA-2023:3661 Copyright 2023 AlmaLinux OS 0 1 Important

texlive security update

The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems. Security Fix(es): * texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default texlive-cm-lgc-20200406-26.el9_2.noarch.rpm 008921f02911ae9af1e3e15b1e71f820a8804fd5283e3e88c3d43614fff8ce14 texlive-tex-ini-files-20200406-26.el9_2.noarch.rpm 00fc988886f10012b6c4f8fcd423299bee6a435b26a6b70c160b945cb10a6471 texlive-texlive.infra-20200406-26.el9_2.noarch.rpm 01a73233df2c026e50e5426fd296698f3982876002579101a57024022d1ff696 texlive-soul-20200406-26.el9_2.noarch.rpm 03a3edf75b3636a312ade056ecb65ad93016c8a35c5e6444c74d934fe25e6bae texlive-colortbl-20200406-26.el9_2.noarch.rpm 03d5faf7a25adcdf1ea22cc42e813df4538f8eeb2fc8a052027163de93ad38d4 texlive-textpos-20200406-26.el9_2.noarch.rpm 046a2d05382b3024f3df344ac50434c702ed545c184a31b191b61eba9553e993 texlive-marvosym-20200406-26.el9_2.noarch.rpm 0492773bbb18fa758233e291b6d98862457b86df8e381e50ad226e8a16bfa967 texlive-tex-gyre-math-20200406-26.el9_2.noarch.rpm 0567fb9dee7f89aaf638e8365af6d1e5faa421fb2b79fac09cb855381047b29f texlive-jadetex-20200406-26.el9_2.noarch.rpm 060f0b98b563da426bd438ac2c416ef7bb364249473b16b8272b7d83eea60369 texlive-fancyhdr-20200406-26.el9_2.noarch.rpm 0612e316410c4d8b8232198f8c12b54873c0c8482594c1181d7bbf9821bd2f95 texlive-mathspec-20200406-26.el9_2.noarch.rpm 0634d60991669f85ede8af34330a550b5a59511bcaa51f244ddf698e7cc3fc7e texlive-koma-script-20200406-26.el9_2.noarch.rpm 06624788aea8c593d0987affdef8e30437dcd88ce1272049527e55195b7f82d2 texlive-ulem-20200406-26.el9_2.noarch.rpm 067e68b0c210c22dd2cff18ad0791ed435ad2a04613dfffdd452aedf8bb97d5f texlive-makeindex-20200406-26.el9_2.x86_64.rpm 06fe0a8213f0a75a8df911bdafbdd1c5c97b47a969a422b3d92916c4df27389e texlive-sectsty-20200406-26.el9_2.noarch.rpm 094a9f82895ecb203a6bafedc54fe0fe51891bcc4f696bae19dfd4de9226aa19 texlive-mptopdf-20200406-26.el9_2.noarch.rpm 0a1c738bea991a6de4cf7dfa08fe8ff5f19c057c0fcd0f73ce9419d8d1747ce5 texlive-infwarerr-20200406-26.el9_2.noarch.rpm 0b0d16b3370ac2df00563cb4ddce9044f80e57e2c2fffeca5e7799e93c3cdaa8 texlive-helvetic-20200406-26.el9_2.noarch.rpm 0b81e1accbf64549b458c4b0af086553f81b902b9a79ada1e10ebfa1cdd195e1 texlive-svn-prov-20200406-26.el9_2.noarch.rpm 0c8d424cf06a55e8f94a96a708c356713104efef028d278cebe419d4832e0caf texlive-pst-coil-20200406-26.el9_2.noarch.rpm 0ca71d388d4881090a9bd537830cefb44cb31e2d1533b5ad32caa7399fc84020 texlive-threeparttable-20200406-26.el9_2.noarch.rpm 0d863bdad37c6fa4bfef7eaf7265dc917eb60e47fda5ea48ffc7a7898a404f45 texlive-tabulary-20200406-26.el9_2.noarch.rpm 0ea34ea8845dc4ca8515e41c6ba85db816ef885db66a1c61221230343ffa8141 texlive-fixlatvian-20200406-26.el9_2.noarch.rpm 10879ecf7470319206be3ca1ed4d9beb400ad706147665dae95d5831b0363af5 texlive-footmisc-20200406-26.el9_2.noarch.rpm 109db5afd8e3f00cc4ecbb916a24c94793775aba9a9733af381c372c2f37d778 texlive-import-20200406-26.el9_2.noarch.rpm 110f10f96f4d13cb81c69688fb9a3d5d01d0d31bc1420be895a121bcb2315e3e texlive-titling-20200406-26.el9_2.noarch.rpm 113720ce4e40ab881fb9e9bf6b017988cb22e583a93150a7e3dfb9174a7a7f2e texlive-hologo-20200406-26.el9_2.noarch.rpm 11c9645d8aa4a754af8312d929367df722013ead3c2f889f4be09cfe7cbc146a texlive-needspace-20200406-26.el9_2.noarch.rpm 11fbe12bd907aba101d2bd9ba46d03c6b525b50cbf6fab9739637468e8fe007f texlive-mflogo-font-20200406-26.el9_2.noarch.rpm 123b7917b2bda6ddf2cddb18a293973ecbb559554bbeb8d05ab09ffa1544388b texlive-hyph-utf8-20200406-26.el9_2.noarch.rpm 14c3fbbd66ad91ff2fe14595edda7d48733de591190d09c7e671699da2b42d73 texlive-knuth-local-20200406-26.el9_2.noarch.rpm 1646b3dddacaecb9311361ebac9bfefa79c04d2b9184487cece2ae5b4151b8e3 texlive-txfonts-20200406-26.el9_2.noarch.rpm 17d873f3457788674c3c4ae3cb039d72c7c435641c3a8f2dc8dfc57f77ae47d5 texlive-ragged2e-20200406-26.el9_2.noarch.rpm 17de9bc1afa0ce3b5b3b6cdf68a6a9e1728025d892dbd2bcb35e1c0facbcd9f9 texlive-hobsub-20200406-26.el9_2.noarch.rpm 18036b80304f61f165e4817017e4b223f1316033d1e9389e355d5ec2b24decc5 texlive-showexpl-20200406-26.el9_2.noarch.rpm 18ec49ccb66c07d97ed14331a337017565ebc26bf76effd1af35bc5cff7916fc texlive-xifthen-20200406-26.el9_2.noarch.rpm 19493a2fa91bf9e5b95b4407b155a691f59d7b141c5043186abc97288443d58c texlive-latex-20200406-26.el9_2.noarch.rpm 196f9af392b84b70f4461877495d1208ac4894d484f64e0f1f288ecc830f9c9a texlive-linegoal-20200406-26.el9_2.noarch.rpm 197fb4010fb2aacfe7f554a341991292173aca07ad8b5582d8eee1eea0e4e6a9 texlive-context-20200406-26.el9_2.noarch.rpm 19ca382d209bc5200b479ea44c820cfc0b3d79a0d228f8715f24432cd57f61cf texlive-luatex-20200406-26.el9_2.x86_64.rpm 1b8abfd1ad301bbf8908c0484b9794f6212073b0d268aba3de91cd2a4c15fd7b texlive-appendix-20200406-26.el9_2.noarch.rpm 1be77cfba81b5e6b446f6bda4ff6c01861e557c8939734b7f9ebaa8445d98194 texlive-eqparbox-20200406-26.el9_2.noarch.rpm 1c5e152323d4318172765efcadbdac6f1de62d9c819be6e62c45f8cb20526b97 texlive-realscripts-20200406-26.el9_2.noarch.rpm 1c93892d7f44a8471bea3f29f14ae565a67028a9119e41ad3ccb329eee32f1e9 texlive-tocloft-20200406-26.el9_2.noarch.rpm 1d4656936cccb45349aaf140cc1a83b5ce6c724c4369744d162faa127ea709d4 texlive-collection-latexrecommended-20200406-26.el9_2.noarch.rpm 1e7107b24cf5b765859dd8882a3c7a6d30e68af24bd24b291b394e076fcfff50 texlive-l3backend-20200406-26.el9_2.noarch.rpm 1e8a72df7774e93029ce20d8a2a1e04769e17bed47871f841b1416e172c3bf0f texlive-amsfonts-20200406-26.el9_2.noarch.rpm 1f1cac2f6c6082dfbd86cab59c9cc3a436803ae1a7093eac3a945fc8c63cfb5e texlive-pst-slpe-20200406-26.el9_2.noarch.rpm 1fea8e8408d26580d97402b2bded9b3c469e99cc73506077586d707c1b9a9e5d texlive-modes-20200406-26.el9_2.noarch.rpm 202049a49b9a5adfc102587d2f06557a2fe202335179370440f189222980d969 texlive-philokalia-20200406-26.el9_2.noarch.rpm 20470a3ad072629e868f7ba008a7186f6178ee586ad63d18a25e3d5e98de4fae texlive-ms-20200406-26.el9_2.noarch.rpm 2080ab2eaff13b1a85e633ed4861eb1b1921dffca830e63177ce2c977731d948 texlive-xdvi-20200406-26.el9_2.x86_64.rpm 2097f85db4413d2606688f4166c6fe7eb271ba3a653625ca034b91688af011bc texlive-notoccite-20200406-26.el9_2.noarch.rpm 21c20102cad39c458aef1820eb47f649cf1d036b4558266b8dc2991b44137753 texlive-texlive-docindex-20200406-26.el9_2.noarch.rpm 223c3e99fc171bd681cb4898347aee3f66d6cb19000fa3c7293017ed49a6b967 texlive-lib-20200406-26.el9_2.x86_64.rpm 26b7d5e245342b94f8301c418e74c8c3db3d66aeccdae18028ca159b4aee3796 texlive-mathtools-20200406-26.el9_2.noarch.rpm 2764db8e807c79d5ec522d042e2e1522cb2bc9e6313260545d3d8480b34cce48 texlive-anysize-20200406-26.el9_2.noarch.rpm 28e15ddb2d6b107890cc55837fe1e51d778f70a73536fae69e6cd53acb78f4fc texlive-classpack-20200406-26.el9_2.noarch.rpm 2a6b9a64fad829f027a2b184ee4d45dba5790b7e5c6ea9cb78a5ba96353d6726 texlive-hanging-20200406-26.el9_2.noarch.rpm 2bd4dc1fac394e2368590cece7fa2f72d2928d6a617d32dc0de8f8fe472e0f71 texlive-xmltexconfig-20200406-26.el9_2.noarch.rpm 2beba6a7d20f6e9eb2927f241f57e254c9ffc4c9c58f286bf294fdb70b7da2de texlive-mflogo-20200406-26.el9_2.noarch.rpm 2fb476082c8bcc4d204be2ff40120135ee5fdb561ec8af06dc28e3947146ca51 texlive-upquote-20200406-26.el9_2.noarch.rpm 308f6cc918fdd672be8425f1eeb04329256421349796bac2223f72c89b5be821 texlive-kastrup-20200406-26.el9_2.noarch.rpm 322627e28ebcb579afaba7114197f739990511b3e1b0e40e8e1bfc6e40191438 texlive-hyphenex-20200406-26.el9_2.noarch.rpm 3229fda674fb7c28b1fff40d9d83eaf82ea46e64a202e66352e6c4239fd4079e texlive-extsizes-20200406-26.el9_2.noarch.rpm 32af1364245ddc53379a8557a535255b24a7d53cb101647327bb40a2efdc7dff texlive-kvdefinekeys-20200406-26.el9_2.noarch.rpm 32ba8b042adc2c5aae8db7895ea73e40e32ce6b36ec8622ef8defb981f271e06 texlive-booktabs-20200406-26.el9_2.noarch.rpm 333724d19fb37357bcdbc2d4c2303bcee56701feda7621ef1080df3f2ca1ec41 texlive-amsmath-20200406-26.el9_2.noarch.rpm 33c29ea6140c64140c25d0f4a7a64949d6e8cc9961b6c58dcf5bb57d54b8d231 texlive-xetexfontinfo-20200406-26.el9_2.noarch.rpm 33ee2fff66793f20005154903f976cee8136da5028db0aff2e1170cbf568da51 texlive-times-20200406-26.el9_2.noarch.rpm 345c6df0ef4bbe06ceddb85f45a8ad9ea214888253093456d1a4f88139a5df55 texlive-texlive-en-20200406-26.el9_2.noarch.rpm 3461aa9d3f587e18d0ef51ecd8e54ed7f791845c557971f8de9ab46dbaef67e4 texlive-datetime-20200406-26.el9_2.noarch.rpm 3487709006d59de93155775f9e76c5c7c4684514d1c80bf7e8b0d2a753e8f2b9 texlive-atveryend-20200406-26.el9_2.noarch.rpm 3742f2da7231306a33c1bc88bb28494cc4bf00e0c0fbd509a223d35472ab1b71 texlive-bigfoot-20200406-26.el9_2.noarch.rpm 38343aef3e24d8ca3c914a32387b99f50d322bc682ac64b86d69336e9ebbb9b3 texlive-parallel-20200406-26.el9_2.noarch.rpm 3892188e08f2d8d6c52ec661e9f4199c23a1772383d87b84d7ed23e0af707084 texlive-powerdot-20200406-26.el9_2.noarch.rpm 39ad6a25e381c314e82bb9b8e247df8d148d7f5906b93407d54366e5bf38982c texlive-euler-20200406-26.el9_2.noarch.rpm 3a2d69c650be8d742536a180be6040a3605ea7f4bf6d1b906b051514a86f2868 texlive-pst-arrow-20200406-26.el9_2.noarch.rpm 3a632816b03c0f41b7ac81cd96a0f1bf0be2b2fba5b58d0d45333a4a13201851 texlive-fontawesome-20200406-26.el9_2.noarch.rpm 3a7334e01d3ffd8daff9692de4e2bdedfffd083d025922e49bf303fe16b94b0f texlive-gettitlestring-20200406-26.el9_2.noarch.rpm 3afecdb04dd50162478c3ae50e157c9f1795675ef4b5ad70f3f294e77ff2e97a texlive-pxfonts-20200406-26.el9_2.noarch.rpm 3c0241bc76ad75d6cd7777fec8ce9ab8490fc598c0e407183f6af9133920f441 texlive-fp-20200406-26.el9_2.noarch.rpm 3c61538c8deb28baa38b64a9f5d4d438b0d92431ec371c28f2ec6641bc3622ed texlive-etex-pkg-20200406-26.el9_2.noarch.rpm 3ccb993408be681662a5bf34073f5ba2b7395a258109418b0d98320510715108 texlive-metalogo-20200406-26.el9_2.noarch.rpm 3cf9bada2f5fa3bc9c26d267528fabf2de20c6eca82a0cff3dde49db37a8470b texlive-passivetex-20200406-26.el9_2.noarch.rpm 3d4cfef8ac600efcd7e611d6f3db9c36adea2bb7eb8d388050c7876b2cd49a25 texlive-texlive-scripts-20200406-26.el9_2.noarch.rpm 3e73627f0afc2b248d6f41d280e59505f0bb44f5f3f64efc1aa92c17e7d1b273 texlive-latexbug-20200406-26.el9_2.noarch.rpm 3f24bb761fd759608e95427b9758062cded75a144f98c3cadea9ab4a84404f8f texlive-thumbpdf-20200406-26.el9_2.noarch.rpm 3fcd84ae018de793ac8a7cd7532e6214b106d073a76ebfea89c52bddfb4d5061 texlive-fancyvrb-20200406-26.el9_2.noarch.rpm 4013749eab8fe6ca518f04ce1366a899ffd219b0ac3b564b09a30f462d907e49 texlive-xesearch-20200406-26.el9_2.noarch.rpm 409228515606416ac35b940b8a472d9375c729cc5f5102cd7389a5029679c73f texlive-multirow-20200406-26.el9_2.noarch.rpm 426ea9ab52b220f8b862bdb8ffeb2cd116bea0ee226714869cbb07e2cb6742e9 texlive-xetex-itrans-20200406-26.el9_2.noarch.rpm 42c014b8a51e28c4734a9c0e79e6a510b4912ccfd2d99f3f9f792bff0586a30c texlive-mathpazo-20200406-26.el9_2.noarch.rpm 437a9d7674ada1f0e38a6f2319a32412eca74969dd1c1a25812d68045d609e72 texlive-manfnt-font-20200406-26.el9_2.noarch.rpm 43979684d22ad31c66044aecf815acab4b92dc855dc55a340e5bda809f3de164 texlive-ifplatform-20200406-26.el9_2.noarch.rpm 44c463dd227818c330265d3722154b069e98e2670bcaebd56db9ba619b156cb8 texlive-collection-htmlxml-20200406-26.el9_2.noarch.rpm 450a7b6d8b84be559a161bb425bf974fd1c4a5849324ce79692fac30fd5e138a texlive-pdfcolmk-20200406-26.el9_2.noarch.rpm 45ebb20c5ee28836e9696c39b78e59c1e8fd654b15032c487c89fdb723222f24 texlive-babel-english-20200406-26.el9_2.noarch.rpm 46c1f631860d6e31e5781bd53faa9e965c4c690c1d66a45b9884aca634490486 texlive-filehook-20200406-26.el9_2.noarch.rpm 478c938c6ee80bd4bb22121f5c3107cf795da81dac49e44c2cedbf47c1340d51 texlive-sansmathaccent-20200406-26.el9_2.noarch.rpm 4922852eee4206323d9e1677e053922c6e957631ad1c6aea78bed78a2b45f77a texlive-pdfescape-20200406-26.el9_2.noarch.rpm 49fdf71de0a25c06e2b2083d7d4dc9ea621a1afd908da548bd109c855400eb91 texlive-metapost-20200406-26.el9_2.x86_64.rpm 4af1e208b2fedaee9ba2cc762ac136b6ba446cac229b35eb2f7414882d3174e6 texlive-bookman-20200406-26.el9_2.noarch.rpm 4b2bcfaa3fc2a82a080c746b54318dd9cbebba4c046a52c125ee2bb4d6b907dc texlive-pst-eps-20200406-26.el9_2.noarch.rpm 4b433714fcb92bb0a0d52356fa5e2d4a962d93f4924f7a19ad15d28f03ab95ac texlive-alphalph-20200406-26.el9_2.noarch.rpm 4d2980a193d6303a58c37925f0f985f4e5f9f3cae2efb4dd45d5444e46dfdd32 texlive-cns-20200406-26.el9_2.noarch.rpm 4d8621c03a38e0d2bf3fea3a746df7f7ff0388f50faf2df0d94eb2d386cf9744 texlive-enctex-20200406-26.el9_2.noarch.rpm 4da17d9c3c479dc15401f330cc11691c20ae1ae8067b1b33167103e1d21e4cc9 texlive-pdftexcmds-20200406-26.el9_2.noarch.rpm 4e617977eeeb6de3846fa85b2b9f27718675dea3d86773ce10a317a415f12c2b texlive-xeindex-20200406-26.el9_2.noarch.rpm 4ecf3ea38c01f71ec9c4013bb7247be91b71307d71b45c4c48f17ba062cfbcc1 texlive-babel-20200406-26.el9_2.noarch.rpm 4ecfc0943c9f98b279bd8b85b2a9a86ac2210c09b7adbbceb5ca5dc950e10787 texlive-luaotfload-20200406-26.el9_2.noarch.rpm 4fec9f7771af59d7393aca167c5646d588d88f0f56bd69240919fad990aac9a4 texlive-xetex-pstricks-20200406-26.el9_2.noarch.rpm 513843974eedf0da4c9b0beaec914f5ccbb8e6e83c04c970c475b143dc4efb38 texlive-norasi-c90-20200406-26.el9_2.noarch.rpm 515e9172605fcd8501aa60c880cc0904531358c1615a60c4905eec2c4e7f174a texlive-currfile-20200406-26.el9_2.noarch.rpm 520021ada3555f6aecae8d205627758bf0d72bee817ca5a9f0bcd3f6571f9a47 texlive-graphics-20200406-26.el9_2.noarch.rpm 54f176e46b1941a8762bdcdbe6e857a9012478f283eeabe96689c457287a18d9 texlive-epstopdf-20200406-26.el9_2.noarch.rpm 5501f17087bd7ba8ee0941d02832b0d286613c4ae7fd103a973d1c1fbbfb62f5 texlive-dvips-20200406-26.el9_2.x86_64.rpm 55656a780484db3ab77349b67eee6095ab14a1e49bd4da0bb2db86424ba87308 texlive-fancybox-20200406-26.el9_2.noarch.rpm 55f4a84250f0aca1ea46c322e4c869f4af971aa9038aa78fdf6f01ee23bf7393 texlive-enumitem-20200406-26.el9_2.noarch.rpm 56fc23f41fad306c075914ad459bbdec1234db4143fa66a26e511d68385b98a9 texlive-l3kernel-20200406-26.el9_2.noarch.rpm 577006b173d9499f179ad705732e9800e4720d44bebb3a94cc9bada684007ec6 texlive-pgf-20200406-26.el9_2.noarch.rpm 5858cc5c0ceb9308e31366b824bfbb48e6ae07d40574fd3b9237d34e4a8f1c14 texlive-newfloat-20200406-26.el9_2.noarch.rpm 58cfe91d68ee63cc54f0697e461d8984df79d567d84303d1a0536c9c15a41782 texlive-pst-3d-20200406-26.el9_2.noarch.rpm 59eb1d0468f9d11103f11e591ac539f31eb57876bca1e98a68261b9dd83f5647 texlive-etoc-20200406-26.el9_2.noarch.rpm 5a29000f8e87a62dcf05279904669712b8714e7b45ee456e9e0096c09e885ea5 texlive-zref-20200406-26.el9_2.noarch.rpm 5b1b4a550ad2af721868445780ba070871943d31a75e388b9ce910e5db29404d texlive-utopia-20200406-26.el9_2.noarch.rpm 5c31c37f4006a82ec0f3a6a7d9c360edf1a45ad2490e3267d73b34d31352cfac texlive-l3packages-20200406-26.el9_2.noarch.rpm 5c7023c94eed5b8eb8ed000449b78000a8d4f3cb993227079b207325a663cc5c texlive-ncntrsbk-20200406-26.el9_2.noarch.rpm 5d452cb0d73af0f10df7163ea9e4e70216492de3a5df809b819d2312560cf387 texlive-pst-node-20200406-26.el9_2.noarch.rpm 5d53d99c7e1a90c6a54f6fe3dfba15135cf7bf12c21a88f1eb53dc225f4063aa texlive-atbegshi-20200406-26.el9_2.noarch.rpm 5dbc658240402850721abcb25584dd769849f6be884db760bf7f5deeb13d6e9a texlive-fontwrap-20200406-26.el9_2.noarch.rpm 5eb59e04d191b222d7147cbd644cd15714dad7fd882f623f18bbee39d01c7e3d texlive-charter-20200406-26.el9_2.noarch.rpm 5f217a569bc31f5bd4ce0edf2c2a632a303bd00e0701cd96d4479b1808635cea texlive-latex-fonts-20200406-26.el9_2.noarch.rpm 5f4c56da3b4eb721a464cc8e7b6352ebf73c924fb486c490606e6f59c1ab6fa7 texlive-hyphenat-20200406-26.el9_2.noarch.rpm 5fcb617c23652f08306ce0df82452bd1d6404d71384c356b4dcfc3df7150bf36 texlive-epsf-20200406-26.el9_2.noarch.rpm 603923b09683e92a11914342dfedfc4a6bb471cf08cfc5a43984380070606016 texlive-caption-20200406-26.el9_2.noarch.rpm 603f6e8c0dc6f764331beb164fe4cbc586720368d30e9e5a960bb1dcda521d29 texlive-mparhack-20200406-26.el9_2.noarch.rpm 613b83634ed62e25ac9765736e8849c6f22585d4c392d02db96df41754b3a8a7 texlive-mfware-20200406-26.el9_2.x86_64.rpm 62b21a28f8c3ca0d7b31a2f850d6ce67da7546bfcdb984bc41194c5ff42cfc9b texlive-xetexconfig-20200406-26.el9_2.noarch.rpm 6325bab9112091a826e469fd3133a153891666bb96b6d37140acedd08575d754 texlive-euenc-20200406-26.el9_2.noarch.rpm 64b72904dc1684e65ad2d8ae4a2d8db3b574ee5b6aa59fb7fc44ecdfd06c7926 texlive-ec-20200406-26.el9_2.noarch.rpm 64f12a17b8d4fa54a127e8b443e433df5e365fde1ddaa8ef1c70f41ab2350d7b texlive-attachfile-20200406-26.el9_2.noarch.rpm 64f470ee8d527eb379079acf8ec84b64d83774fe39fb049eefa3d0bf1daf2612 texlive-cm-20200406-26.el9_2.noarch.rpm 65fcf2af1ff703ee5c26318ea5468860abece0dc6073d0c73cf62d8cbf25eb72 texlive-setspace-20200406-26.el9_2.noarch.rpm 6690b2013e92d4c1826efeac11726742db77bf48cb6d81664835d0820a91a742 texlive-pdfpages-20200406-26.el9_2.noarch.rpm 69441b376667d7dac36f67af174044e457abd66f9e9f8dd42110dae44229e842 texlive-footnotehyper-20200406-26.el9_2.noarch.rpm 69beee6de0d7b13b686597349f82ff09020bfecad207132b8d8649b7a1819c2b texlive-texlive-common-doc-20200406-26.el9_2.noarch.rpm 6adde86808163cdaf50b62344a9a559e80dd5743dea15e824aed367a552fa5fe texlive-pdftex-20200406-26.el9_2.x86_64.rpm 6d253fe0e190bf66b7f101854ad9dd558d70e0b05d6637f056e18398fafdd37f texlive-psfrag-20200406-26.el9_2.noarch.rpm 6d9c59a17ee8b78ddf59f3e237786ebe6c1c58ea8f89cbe6dd975e26ce2c6566 texlive-eso-pic-20200406-26.el9_2.noarch.rpm 6df327b010cd8bed7710a8dfdef31ccc512bf4c16690b26478f5691322718b43 texlive-psnfss-20200406-26.el9_2.noarch.rpm 6e0d5f4552e1e9d6c379e893e27f54035f46638370dcfcce3f28c27816ad1dbe texlive-pst-blur-20200406-26.el9_2.noarch.rpm 6ee5eb1cedcddc5f86b916a6994015018459f86d19c5cd23070c8fedef527098 texlive-xmltex-20200406-26.el9_2.noarch.rpm 714c93de6d245b6b778467c6818cab5b0315b4ef4c4ed659e9f54ec92430f717 texlive-graphics-def-20200406-26.el9_2.noarch.rpm 71a9f77790ff8036bf832e8004642fa4a28a930f9cdfac4977058121d4e5fae9 texlive-fncychap-20200406-26.el9_2.noarch.rpm 72589c06f68701a17f8aa7f98d38fbffadf50d34ddeb10569f34207541814e31 texlive-babelbib-20200406-26.el9_2.noarch.rpm 731f511e5e0b53baba885f7ae4ee81a798cf2c78de16bfbaa4715bbb27dac0b7 texlive-colorprofiles-20200406-26.el9_2.noarch.rpm 741099917df3d791c835b8aa577cf790a284719236600bc481078973b7c4d3c9 texlive-hyperref-20200406-26.el9_2.noarch.rpm 7460b2f316be03aee9166db5246a321a19c28f54cc43fd6ed7f183dde3ef5373 texlive-amscls-20200406-26.el9_2.noarch.rpm 74656909703e4d20db2efd2796fd926b0cb1264051a62df2482fa20b13fe885f texlive-wasy-type1-20200406-26.el9_2.noarch.rpm 74779b416a2d48646157a76aab532a59a4b25a4b66b5ee3dcb76f75da9bd0cd5 texlive-cm-super-20200406-26.el9_2.noarch.rpm 750a9d9fd4fcb79da1ad556ccab0d59b5c1a5fc1e02726fc1b79ca2b53b5b9ed texlive-etex-20200406-26.el9_2.noarch.rpm 7642c5e37492fd77bef02443b6ad83e16db624ec41657d43987b54d071e42517 texlive-preprint-20200406-26.el9_2.noarch.rpm 771dd71ff3eee8ec7f990da4743a3be0192a2c9d5a191826d3266844487e8d74 texlive-cite-20200406-26.el9_2.noarch.rpm 7835ab02b453fedffa3bf249211a86cf39695cb0f04c4c86d8f2f4368cce99c7 texlive-kpathsea-20200406-26.el9_2.x86_64.rpm 789711210b07214f1b5ced624105103db54bc1d8d562d66fee40d0f6ddabda5f texlive-collection-basic-20200406-26.el9_2.noarch.rpm 789a760c3e9c3e72da87be79bea330b43046ab7a6ac3176407257c952c323ca4 texlive-fpl-20200406-26.el9_2.noarch.rpm 78bf5d6294cb09ee1ffc9040fa12b41e16b1e0f41db6e830ec092b21e5893083 texlive-ucs-20200406-26.el9_2.noarch.rpm 79fdc28786365b1a0974d51cfcc71efba4813f985d71c181dd6a8d38a7d4fb2c texlive-wasy-20200406-26.el9_2.noarch.rpm 7a4b9c5e47bc8c4ae5bf0233e6d6366b9cc7cae81002b76721d0acffc590cf2f texlive-latex2man-20200406-26.el9_2.noarch.rpm 7b5eff7f2b46735af10e75399298987185622544af8dd09d4c0fbf4753739d9f texlive-catchfile-20200406-26.el9_2.noarch.rpm 7cfcc34741aa2518b791db150ef3c3bb01a3106025530917aa9b265c150998fb texlive-pdflscape-20200406-26.el9_2.noarch.rpm 7d62cc4443bb94f42358f277ad402abeb9617058ca5ed7ed2ba52ee675f3092e texlive-bookmark-20200406-26.el9_2.noarch.rpm 7d8706e69cac8f545a9e1dbb1672d1d56a98d0057dd1bed876bc305f05a48e8b texlive-lm-20200406-26.el9_2.noarch.rpm 7e0f5a90fd4e77b263314769d2e1e7b65f035f0ad40615ce58d742d88563d893 texlive-pst-grad-20200406-26.el9_2.noarch.rpm 7f0503dd551f7701ae4894f2d126df0e0b7491a06b489cc3bf25b0bdb0e9f887 texlive-kvoptions-20200406-26.el9_2.noarch.rpm 7f0f8a6f55629f99c0b708d1b95ce8ac44f4f72304fdd826877bdba3fd685e2d texlive-adjustbox-20200406-26.el9_2.noarch.rpm 7f1c527815e9eccadee6af0d4b08693269bc48b39b5d06c3de024c80295ca690 texlive-unicode-data-20200406-26.el9_2.noarch.rpm 7f534de52dd37f424545c340184ec70fe7ebc0ecdaa7587712af4f1fd2bb5769 texlive-microtype-20200406-26.el9_2.noarch.rpm 80578853876270fea627b7a942dc2cfe99e7816f6f2dc2388587489b2d70efe6 texlive-pst-tree-20200406-26.el9_2.noarch.rpm 806e5cbc1393811dd4a6c54f513be3853e4115a2aaa85fa3fe920ec22dfe8283 texlive-awesomebox-20200406-26.el9_2.noarch.rpm 8131049d08bba3e87d06ba1ac19dcf96c273848521cb36b4de4ad428aa86f270 texlive-auxhook-20200406-26.el9_2.noarch.rpm 81f817b8af1bf9ea2cee69e7cb1c9d7c993b3716e9f90da6121f6c4d74498b36 texlive-paralist-20200406-26.el9_2.noarch.rpm 82b6f9e0f085c2568a46f7ec37a432f28fe573f93f9bde83805e4fec6fba9617 texlive-wadalab-20200406-26.el9_2.noarch.rpm 83a3f9b83564a20ce0bf371fca89e88829edbe1f0ef90edf844ee146bddc5fa6 texlive-pst-tools-20200406-26.el9_2.noarch.rpm 8484e07c278107e5d26be4627235579a14cc15b5c62254305d723e02c52bab33 texlive-rerunfilecheck-20200406-26.el9_2.noarch.rpm 851f10c5ad9929f5598d7450e39916b25c76a8f901c02440d3fdee8ce7e2040f texlive-ctablestack-20200406-26.el9_2.noarch.rpm 8554f4a1b503a079cd538946a4eedb667863bfdc2e395403212444f68889d0bb texlive-breqn-20200406-26.el9_2.noarch.rpm 8591debf7deec90e30f1ea87c553ffabfa992e2eb67afef86965dd6412b858f5 texlive-dvipng-20200406-26.el9_2.x86_64.rpm 85a76033c7a129732bdc290ee7af81beee671177076856a44ee9ca2f38217427 texlive-pst-text-20200406-26.el9_2.noarch.rpm 871edd2fd438fab8220cbe0edcee53a7b992d89fa7ebb16a2b755af9919572c1 texlive-kvsetkeys-20200406-26.el9_2.noarch.rpm 87f9f46129e95075f2cfbdab86ec038276c396d704f0530ce6f117dfe0e10725 texlive-stmaryrd-20200406-26.el9_2.noarch.rpm 887aa5d81bdca1c5678e9f644ab508f26322a2e2228b68ac500e49b34a105642 texlive-euro-20200406-26.el9_2.noarch.rpm 88bfb2ca880acc4110900162756c2c2a3437bb1c0ec98d8c427c4a370a95fd14 texlive-newunicodechar-20200406-26.el9_2.noarch.rpm 897a587b2b08cf1e8396515371382fce0102f8ff096a9cef6b244a9a7496ebcb texlive-csquotes-20200406-26.el9_2.noarch.rpm 89828125ebd5515a18e7e025d62e300c21770a14a44f852a68590302ec2da6c6 texlive-beamer-20200406-26.el9_2.noarch.rpm 8a197233efafe7e6f6552a6c437ec761cad658513626bf44d14d5baac7fd0323 texlive-sepnum-20200406-26.el9_2.noarch.rpm 8a99523bff266ed2ca76c1554ee6590b31c539242bd4177ec7f731caf8113d5b texlive-etoolbox-20200406-26.el9_2.noarch.rpm 8bbb1c68785314841cff04dcb7b2d9445b09572a58db24513303984017f3af4f texlive-section-20200406-26.el9_2.noarch.rpm 8d4185aa5ad2db94723fd6cc954757c06f848599c074ed3187d0672f250d6f56 texlive-rcs-20200406-26.el9_2.noarch.rpm 90a1dceea6ffe76041ab21c03e462e5787e2cd659c333d1785dea4eb35199c9b texlive-pspicture-20200406-26.el9_2.noarch.rpm 90efce61114f6fe2dc4a77a90fd4862979820607d222f415d2ab013a84d30218 texlive-iftex-20200406-26.el9_2.noarch.rpm 911ba8c3de0f185c04cce8e10f16072179b4fe3ca4277039d7963cb41813fb85 texlive-scheme-basic-20200406-26.el9_2.noarch.rpm 912dc2eae522ba2e001085eae361aa6f41b91bd2dbeb9068a3e6a8fcb5ae3f72 texlive-underscore-20200406-26.el9_2.noarch.rpm 92577886accd0bf0cab6ee14668b073e310ddd374f6e47fed7e38733f555fc8c texlive-luahbtex-20200406-26.el9_2.x86_64.rpm 928d2eb8b8458c565c68ec3584604f2fdc8989ba5a234e1d1e40d3167e0772d9 texlive-letltxmacro-20200406-26.el9_2.noarch.rpm 95fe1d1b464a6f85a5e46476fe764af8f806b695f5fee33baebe8ecba35db58f texlive-seminar-20200406-26.el9_2.noarch.rpm 964b0082b32154a40f2b80b21c8f27ff2c66fd6ea209d4953b145eed0208cfa9 texlive-filecontents-20200406-26.el9_2.noarch.rpm 972d72190fb35e1df049bd726064d2bca64cd951064df0cf7c3b7fe213f818fa texlive-ctable-20200406-26.el9_2.noarch.rpm 983fb96ce687ed29586cbf3c1e62785a738eba8f5f1333bcba7609dfe73ae3e4 texlive-collection-fontsrecommended-20200406-26.el9_2.noarch.rpm 98ca4203709aa50c9f014b031ff880349338a767bf95720d7dcdb22b30a7ba5e texlive-varwidth-20200406-26.el9_2.noarch.rpm 98d66378c704ec5359913c043df6897194c9d3056734059531d986a4368fd4cc texlive-ucharclasses-20200406-26.el9_2.noarch.rpm 992da7d1a90d7e82f983d8d103454574949c392975a5028283153be2d7ec527d texlive-tex4ht-20200406-26.el9_2.x86_64.rpm 99721f60ee8819115b33f24af41bdc42e314dc00de870e425bb7c7869ecb3f5f texlive-fix2col-20200406-26.el9_2.noarch.rpm 9a6fa951ff3af7c043fa81a0545cb559c29d101ea85926657df24337b7a2f99b texlive-cjk-20200406-26.el9_2.noarch.rpm 9ab30f817b26993cfebc73ff9825127909cdd9590480d64fe725800cd2c8c855 texlive-lua-alt-getopt-20200406-26.el9_2.noarch.rpm 9ba07e033f95d3b6f85a235672793f8f8541aa4ad52c1cb00bc3f50e39efd458 texlive-polyglossia-20200406-26.el9_2.noarch.rpm 9bb9f67bf304f837bb456633c8f99fc65f067f4c17b826b249cc2771caf79dd8 texlive-pst-math-20200406-26.el9_2.noarch.rpm 9c26e2c0ff332c803b3a23da122c442520a1a18c8cd5b4f932e530f6e62377e4 texlive-bibtopic-20200406-26.el9_2.noarch.rpm 9c59bb26eb3efe1d1b1041a8ecb11eef954b1688699cabd7873626cc70f336e4 texlive-makecmds-20200406-26.el9_2.noarch.rpm 9c7b9c8f1c800866124fc3813f9e4be1d7e870e7e164e3cd8850592b843b4c5a texlive-bigintcalc-20200406-26.el9_2.noarch.rpm 9e302d0bbaeb07d457fad543e62d2671be27e88edc3f392e4362e10a521a445c texlive-ucharcat-20200406-26.el9_2.noarch.rpm 9f711bca193acea38c68a4778d93afa91ad111b4d402dc62268e9738dfb9d7f6 texlive-pstricks-20200406-26.el9_2.noarch.rpm 9f73c2244fb93bed3644634fef708398270401530fdf3d77efaac325146821a2 texlive-luatex85-20200406-26.el9_2.noarch.rpm 9fc44057453c7fb58e24bfad43c77895e7ea9006b3c5c757f57e510a0d9fdc94 texlive-lwarp-20200406-26.el9_2.noarch.rpm a106523b2db8a0c042901e54bbf4a96dce59f95e7e21bdb197c86f8a2fde40ac texlive-arabxetex-20200406-26.el9_2.noarch.rpm a1ecc74e02ea7109e19865560ec4ca76502fca12117fbcd4884f987d23fecca8 texlive-minitoc-20200406-26.el9_2.noarch.rpm a1fa806c139115e902b1b44de9e355909568e4bc8d126162de1af0723a99f97f texlive-epstopdf-pkg-20200406-26.el9_2.noarch.rpm a24e57fae731378f93d64753b3c36866aa372476d87e779bb8652abc92ac8b78 texlive-changebar-20200406-26.el9_2.noarch.rpm a2cfb2ce553d4e2c6b2193f31a4c9235b4032bb4cf1058fb0f0b3b2694b63eac texlive-wasysym-20200406-26.el9_2.noarch.rpm a49f8ae49328b198e59bd5003af64546b389ff7f7cda22e25051ea4fe18375fb texlive-xecyr-20200406-26.el9_2.noarch.rpm a4e0f9ffaf19ecbc44c0929f1450fdf91f0bdb4ba3db2f97a39b64a6aa531f8e texlive-collectbox-20200406-26.el9_2.noarch.rpm a6bdf36c3ddd831f5342d32c05089945f8c6ab7770558fcf810c0da594161329 texlive-pst-fill-20200406-26.el9_2.noarch.rpm a6cf9bed29efd30d5d34d24958192ed816f50d0a14cea00ba3de1c4349c1ca98 texlive-cmextra-20200406-26.el9_2.noarch.rpm a6f4eab2b49c3e688330e9cb4eacfb8559c20126847e590f76b2dfaf06cb7bcf texlive-bidi-20200406-26.el9_2.noarch.rpm a788236424bedca41af1f79f50eacdeb720e018b6aba2784877cf8e919325844 texlive-zapfding-20200406-26.el9_2.noarch.rpm a7c609b1584b777b0f75613b450f3a7462f6985f5f20d9ec3314767975718ea4 texlive-environ-20200406-26.el9_2.noarch.rpm a7f62d2d894f775a5050d19468597190d5f765f66e34aaa229c63df4cdbc575a texlive-sauerj-20200406-26.el9_2.noarch.rpm a89166419f54dbcaab16a161de7050c7d89466e405c4ff9b7237817b8ecf4c53 texlive-xepersian-20200406-26.el9_2.noarch.rpm a8f946f399b5644db2e63328e87f82ce57aa6a58851be40b44b567b50d38e991 texlive-jknapltx-20200406-26.el9_2.noarch.rpm a994628d620c87da2b8bbee98906f899a7ce2c58cb1ec6032317f23d64eafd69 texlive-xetex-20200406-26.el9_2.x86_64.rpm aa07bdb5a0e094062192208be44eaaa49bb0532a55a87a431c291483b54bcece texlive-xstring-20200406-26.el9_2.noarch.rpm aa631a121627b7bf4ffea64fdbe7f224c861f47e30b49feb213e44659fba4cb2 texlive-beton-20200406-26.el9_2.noarch.rpm ab7096cc1bc378dd0537da1e8362647ffc555c368766bdcd7ea54fc6fe4c217f texlive-collection-xetex-20200406-26.el9_2.noarch.rpm ac840419a8ddbe63dae9b43dee8d3d293e8e1d6c93df24cf5e4abbcce35241bf texlive-rsfs-20200406-26.el9_2.noarch.rpm acb118774e19d9dea067b1115dbd9ce0a5ddcfb96e3fb62df76185761823f271 texlive-tools-20200406-26.el9_2.noarch.rpm ad2f73894fe407121a2fbd58ac630fb9c5a1cb52c22d640da0535d6b85e9d9a1 texlive-palatino-20200406-26.el9_2.noarch.rpm ad4de7669baf30cb0883f608c50d68c6f44b2fa3bbd1aae6445e06b2a370f79c texlive-tex-gyre-20200406-26.el9_2.noarch.rpm aeb82fc415c53d779ac0c463288c1a13188514d7df67f310235f75369a90f70d texlive-xecjk-20200406-26.el9_2.noarch.rpm afbb55388c2cd8020994439bbe5ebf6a110dd3914c520941758e30ce58a2c023 texlive-ptext-20200406-26.el9_2.noarch.rpm aff5b91bd6a9004e539625f282202b26d035ae11f5aec129243e445c35726f52 texlive-lineno-20200406-26.el9_2.noarch.rpm b09ef9f8d4219daf980a0b896ba90e1cf6695395a8d9daa96d9a16ce719bb245 texlive-courier-20200406-26.el9_2.noarch.rpm b0bb37c1e8c12a2dd4ed2d96a6242c65a4f394a18bd4423d5b916224f378499f texlive-symbol-20200406-26.el9_2.noarch.rpm b0e271c87a04d086336ea0a7e5cca2c8037368005b009b2fdf61a073f2f88335 texlive-dvisvgm-20200406-26.el9_2.x86_64.rpm b1822ec963385efa5a81bb2dca86749003e5b0f2bd4e184525d2fbc43985c714 texlive-listings-20200406-26.el9_2.noarch.rpm b2644ed566d50fec703530a362015f7d7869da15c512288ad7ea2a1544f80f23 texlive-fancyref-20200406-26.el9_2.noarch.rpm b26f6c98727089c7ca668a360e97bd413cf089bee8fd553ac25a443eff1ed0c3 texlive-garuda-c90-20200406-26.el9_2.noarch.rpm b3b86efea0c1174e5f7a18b16ca145b9ffd40e8fd96229372dfbf198f3aca71e texlive-subfigure-20200406-26.el9_2.noarch.rpm b40477d68e6050e924b0840d09a8bd9e2a8bbe3a1c394f3891e39a2d9763f448 texlive-graphics-cfg-20200406-26.el9_2.noarch.rpm b59e0486cc0ce66e731d3fd294e7b1e786c58c242e229cc43e36af43ca6bef97 texlive-xecolor-20200406-26.el9_2.noarch.rpm b5c27b35703c9291e996b5683dd2a4338eb99347b08d851885642aee3ec8a4ed texlive-avantgar-20200406-26.el9_2.noarch.rpm b62b3a35a8c10b1715fb2c3123b3cedf8592cfe3e519ead1dac55f30cd827bf7 texlive-tabu-20200406-26.el9_2.noarch.rpm b677d412315657fb247e375e20c69c57780725d7a35e93f9c51f745267da6210 texlive-ifmtarg-20200406-26.el9_2.noarch.rpm b694c187eda29017cae239a4e4d23a89db7ac6428e4c7b1b6f72f3c03ac4db14 texlive-sansmath-20200406-26.el9_2.noarch.rpm b8667fd2a14f5202781b73f2f4840a19deda45d4e1e8b2772467e1802b5847c8 texlive-qstest-20200406-26.el9_2.noarch.rpm b8884bc438df961d5e145865234fd98342842d7c99491352ff4bab5854dd38e2 texlive-lastpage-20200406-26.el9_2.noarch.rpm b97476a605c9bcd297213aba0c8ed3d02b11216ba7b67b108467c844ba0958f0 texlive-crop-20200406-26.el9_2.noarch.rpm b976c5a19fb610d5b4e4c49e92e9f1a75fc3be91c220e064847195ba6dff5e5f texlive-ncctools-20200406-26.el9_2.noarch.rpm bbd87a80a14c639fbf28bbf460df5f6273b7122169f408c54a729e283283d335 texlive-t2-20200406-26.el9_2.noarch.rpm bbefdc75c9f6abbcc85d9f5fa2bda8e3d2217c7de1b490b96b0e5814c1799db9 texlive-xetex-tibetan-20200406-26.el9_2.noarch.rpm bbfe844cd09eedcd69d59e3e7f5fb343b0b34f51e01dce076832525468afd6b7 texlive-url-20200406-26.el9_2.noarch.rpm bcc54c72132bb389bd4f135e4b0b23abfda2e8b149f8a820b8538bec930b6473 texlive-fontware-20200406-26.el9_2.x86_64.rpm bccba212cb4758aa41bb7ba95d9105be449e6ed019939f7f136d16bb90124216 texlive-mnsymbol-20200406-26.el9_2.noarch.rpm bcfff293f7d4cad2a8fc13c308cb068cdf363bd20f5b192d4133c9028f7297f7 texlive-zapfchan-20200406-26.el9_2.noarch.rpm bd9bffd17699364f1e28e7cede697a0ab90a3a586c97c4cf392372d823f4c3a2 texlive-multido-20200406-26.el9_2.noarch.rpm bdf61fbc63647dcf6e6737d9adbc265d56548bbedd6204778428eb24a249e40c texlive-lib-20200406-26.el9_2.i686.rpm be3843e725260ae7d48501bfbc2e36b23d19f8dc91103c15177d2098bc53758e texlive-fmtcount-20200406-26.el9_2.noarch.rpm bf7a1a348d8fa54b21b1cad20802091bb96368bf1bdc758e53a7423a489da8d0 texlive-refcount-20200406-26.el9_2.noarch.rpm bfaa7273a8823096c2d9d7c2d3f7154d17f71c16495fce30edb906bc61395b6d texlive-updmap-map-20200406-26.el9_2.noarch.rpm bfdadd84881312ba74714d45c055e33c4a53ac6ca222b8335160fb9d9cea8e76 texlive-listofitems-20200406-26.el9_2.noarch.rpm bfe7aa707d56fb24359309f115b3203b1e3bb838a8da1e29bcbe52db141fd296 texlive-attachfile2-20200406-26.el9_2.noarch.rpm c0268a1ad17513e8c3175067c0ee96da7799f5c86288a5b9505ffe1d2f5d83fc texlive-hyphen-base-20200406-26.el9_2.noarch.rpm c06d3bf95a1c09008b6486f489eeff6f5c73b97b830d5c5f66304410b1f7a2c2 texlive-dvipdfmx-20200406-26.el9_2.x86_64.rpm c08371387eb0852d4dd850580482227477c9e707e75addf7971f05f22e1fe01f texlive-grfext-20200406-26.el9_2.noarch.rpm c09829cb06ec24536c06d6cf7305e386aba104c863d6e12dce0c8a1dfe6267ae texlive-titlesec-20200406-26.el9_2.noarch.rpm c12aede70e68b6257c1b5cfab0081468b11dbcdef01e96d9f90ca19b16828827 texlive-obsolete-20200406-26.el9_2.noarch.rpm c27284da6e47df95bc66342c2f8f8bc94b420e16b5d57ea797897ca22080b461 texlive-stringenc-20200406-26.el9_2.noarch.rpm c2b631b43f25221f1cba632456ca9392024314c720b4bd332c18ac61ca9f3e1b texlive-wrapfig-20200406-26.el9_2.noarch.rpm c32bd089646dcaa7de384aac762340f1d64b78854ce62e1cd2c3d35a31223e62 texlive-mdwtools-20200406-26.el9_2.noarch.rpm c33f5cc1ac5070774b78e97dd0bd03de11c599bda637af11658800ebf8de7613 texlive-xunicode-20200406-26.el9_2.noarch.rpm c34b60b33a4991abd1a768f59e7cd855642b519ec4f26d6c746318508e0f239d texlive-fontbook-20200406-26.el9_2.noarch.rpm c35de19520c123444ea2479dcc45d850e4d8b9c202a6267f26f0422d23c7700f texlive-xltxtra-20200406-26.el9_2.noarch.rpm c42d0af0182c90d6d7ed4cb8a7fc2f6c1d8822d767f45c7aedaa10a30af26929 texlive-finstrut-20200406-26.el9_2.noarch.rpm c44450af6c8aed9fd53f4333d42c36928448728f4b0e6485d1fb1cb19a31158b texlive-overpic-20200406-26.el9_2.noarch.rpm c449004aa992502d0611f2423710df0d9e60b47307482975a62266b9481d6037 texlive-base-20200406-26.el9_2.noarch.rpm c542b40eb9a535d24c08fa882bbaf3ae8725d32e30d041de0db1f214e0bcd472 texlive-typehtml-20200406-26.el9_2.noarch.rpm c6301dd36d23b1f7469bbbc728ccd2e1aefad4ae716b94c3f4870ec15f60e620 texlive-lualibs-20200406-26.el9_2.noarch.rpm c6c19286a15dbfad4a0dc0d459e90268b2f891e5fc75c51c741cb8e31c923aae texlive-lm-math-20200406-26.el9_2.noarch.rpm c6c1d3f189713fc86a318a1fa1fed33004d6b3ddf1d9f99e135a320e0bbf707e texlive-intcalc-20200406-26.el9_2.noarch.rpm c6dc24e03fae6ccc0f22d4ca9077b41ca40f565c900ebac4dfa316225b1273fd texlive-chngcntr-20200406-26.el9_2.noarch.rpm c779dcd0f3c3bc08f3eeac43715a3703d08cfe48a64add27c65f39249481e20b texlive-texlive-msg-translations-20200406-26.el9_2.noarch.rpm c80b2730c3e3f5f4dc0487c0e9a156147ba83d800ac88b403735e4df8de552bf texlive-mfnfss-20200406-26.el9_2.noarch.rpm c97519e981c15d85249a4665e6a78b6a17e3dd1ae98147afdf1c9160c59a6a7c texlive-ltxmisc-20200406-26.el9_2.noarch.rpm cb3874aa5a69f6a9be02400c0cda7625fb2f36398da1885591ed4216ce904b09 texlive-trimspaces-20200406-26.el9_2.noarch.rpm cb5f02fabaed3db170dba517927aa2881abd922fcb62da2ba235a180175055be texlive-lettrine-20200406-26.el9_2.noarch.rpm cdfa4f74b9ef1ba60ed8f3f7e5bce6260344a67ec3b3d58a75fff5b8131d567c texlive-textcase-20200406-26.el9_2.noarch.rpm ce2419851b408bfbeb3bde1ebb1ccf1ceafa9dfcfd4ff0de28185eaee1eddf1f texlive-glyphlist-20200406-26.el9_2.noarch.rpm ce3f871d4baaf64376d7af0e86cb3586ed819e93704a3c6eab62511fd996c02b texlive-algorithms-20200406-26.el9_2.noarch.rpm cfdf19bca7b8957a07a5832d8b84c1274d31eb44ef566560218cc9caa1cd50cc texlive-fonts-tlwg-20200406-26.el9_2.noarch.rpm d0389ce08381a30e5965d19e1d874809f7ee6e2c1f1f65699f961016fea9c185 texlive-pstricks-add-20200406-26.el9_2.noarch.rpm d0922a514d40b821bb8232c6ede6ec165f666ebb77da7cdbfa1fc65057eb408f texlive-cmap-20200406-26.el9_2.noarch.rpm d0efb27781c39c88cd223c499166d348b20a9dfc94dec61d4f2eb2fe9e1d35e5 texlive-carlisle-20200406-26.el9_2.noarch.rpm d11a49e6879d84f0f57e4226a19a9ab7d47288cef4d26f7677f4e24789cd3ed7 texlive-tex-20200406-26.el9_2.x86_64.rpm d1dcec0bec0372f49ee11d1fec07744a877989ee7d979ca857e2ab5d32ca105c texlive-translator-20200406-26.el9_2.noarch.rpm d1ea129391755cd0da6541c07177ad0adb2fb5d6507aa43e25df937f8598147f texlive-hycolor-20200406-26.el9_2.noarch.rpm d3d04210017bed54fa5d149033c57b725bc0301c163444c417568d2efdeca2bf texlive-marginnote-20200406-26.el9_2.noarch.rpm d45223237c87a5a123ca6aecbe6e1f35ea8909d8728a3996e0c977bcf9bcb593 texlive-ntgclass-20200406-26.el9_2.noarch.rpm d54f4be5e972dc28e9717dd1d0394bd80ef35c43ea5c3ae4eff61c5d743c948d texlive-framed-20200406-26.el9_2.noarch.rpm d65edc8ca1f5b08153aeb6b27ee487751c33068085fea5dacbba97da7ee27c92 texlive-memoir-20200406-26.el9_2.noarch.rpm d7102774e3345e24563551c8a6c7efec3dbe95c4a8ae2c46329cebf261aff1e5 texlive-arphic-20200406-26.el9_2.noarch.rpm d78ebfd5ee7c1a0d20fc38c53adefe71dcdb36eb38558d2e5423921ab6f0df4c texlive-geometry-20200406-26.el9_2.noarch.rpm d8f22570896f54b31e20a5ad3caba5b2ea7ffba140552cfd000ab79b6f64982c texlive-xtab-20200406-26.el9_2.noarch.rpm da3e07f92cee9ac0e8dbfb20ab635f3cded34f0826a3e8ff836aacf9507799cf texlive-uniquecounter-20200406-26.el9_2.noarch.rpm daf7293d6c22acd50f703dd777705899f6274c79602f10ed305998faf07bba0a texlive-knuth-lib-20200406-26.el9_2.noarch.rpm dbb0385b8055eb00eccf7cf2241759686b80b9d59319783429e2ee573600c2f4 texlive-l3experimental-20200406-26.el9_2.noarch.rpm dbf253a4904b0d83d897d1c3f1e73e07b886fafe052d338d91db9c2598ecc078 texlive-oberdiek-20200406-26.el9_2.noarch.rpm dcc87eab6f90275eefc0130366d1e29523652401e4f64afa6acf38a474e23f24 texlive-eurosym-20200406-26.el9_2.noarch.rpm dd710f4bb041473f6bbe9d0e59c9de761a2239439ace5f82858bc384496153a7 texlive-gsftopk-20200406-26.el9_2.x86_64.rpm deac44fb984a9b6c05d2a68fb05c8637201961c9a48a445c0d285b98f0908915 texlive-kerkis-20200406-26.el9_2.noarch.rpm df9ebecfd1b2c28317e5b3bc14af1c60cb8badf7684cb0f5d6a1f1122d2c5777 texlive-pst-plot-20200406-26.el9_2.noarch.rpm e0c764a4cec89b35e2530b79c27a6d109ee7fae022a9731f86f19c650c653a8a texlive-20200406-26.el9_2.x86_64.rpm e19a5c4fad0ef21494fe31c1e5abfe5a3d83850137174da11d20bbcb111c53fe texlive-bibtex-20200406-26.el9_2.x86_64.rpm e3307539e3e4ee631133f29e26e7a680d7316cec634041876f74e41197b055e7 texlive-type1cm-20200406-26.el9_2.noarch.rpm e336445d5603c258bfb0894d5d0cdd6336eb8946839bec73859a928d9281e977 texlive-collection-latex-20200406-26.el9_2.noarch.rpm e36099f43145c4a046416a1e234a7728315fa1d1132b3b60b361b2e754c3955e texlive-ltxcmds-20200406-26.el9_2.noarch.rpm e4c4696c172b55275f30b7997dcbdbb41cc3ea47ba31a6626b39ee0a21a5e9d6 texlive-plain-20200406-26.el9_2.noarch.rpm e4ef0dacc1c16718f0e949716e38f34f1d63d6d0862fa2b30efb079a7197555e texlive-index-20200406-26.el9_2.noarch.rpm e5da1ebcb84ab8534dbe685584a475ad92fe5f2f86aa865655341ce5ab1a5a4d texlive-pslatex-20200406-26.el9_2.noarch.rpm e8fddce9dd4b3b9a6e72c0ec3adce6d7e37e65bb239d33316b90aabb4023306c texlive-luatexbase-20200406-26.el9_2.noarch.rpm e9074700b3e683591de487127743305509acb35cf79d30f3f6a2cc8cdbb64e5f texlive-stackengine-20200406-26.el9_2.noarch.rpm e949aed20e5d9c05d81fa47dbbc1eda8df3bc271d63bd80d846e3905d7a2ce36 texlive-ae-20200406-26.el9_2.noarch.rpm ea833163e167c4cea689aca559ac17064ea92c8167c9b7913bf5f089954bbe8f texlive-ltabptch-20200406-26.el9_2.noarch.rpm ebc583c59d29704135136260c02498dbaf0b83cc591c3af691618ec9c1393e16 texlive-float-20200406-26.el9_2.noarch.rpm ec65454cf4fc6b26ebade1cc1a94a9a9b1423b6dcfcfb59dc371ac4e9cec8ebc texlive-uhc-20200406-26.el9_2.noarch.rpm ec73292376909a7373fb1ac2c13d609c3b92e43dc7437c17602d5f72f82e191d texlive-bitset-20200406-26.el9_2.noarch.rpm ec8e569c4901a722da5ff5091326c9653159ea194b5c53064a39a0ad064940da texlive-natbib-20200406-26.el9_2.noarch.rpm ef9c0285c469a57abf4548a0a2017a0096a5e32031849a3e1cae96759600cc59 texlive-metafont-20200406-26.el9_2.x86_64.rpm efabf714e97a02e290118a3ff063a4c53e24c5cfe541fb7288c4eb343726a99a texlive-anyfontsize-20200406-26.el9_2.noarch.rpm f044450ae13b444e3f99daeb439cc05d65bf0e12ca13ee10fb5ab41af9693b90 texlive-texlive-scripts-extra-20200406-26.el9_2.noarch.rpm f195b14ed3269e1fdb0148709a1b0cd8c1fb46ca4e674cf251f26fe3a1267ed9 texlive-ifoddpage-20200406-26.el9_2.noarch.rpm f1de9c92edb72c2f88f497aa790afb7111c13dba3f9ff22826b410649add3014 texlive-etexcmds-20200406-26.el9_2.noarch.rpm f26062b88a450d9048f38f81e161b0423a9d13bbd13b9d1be72dda8f213fcf8e texlive-eepic-20200406-26.el9_2.noarch.rpm f3c012ae9c2ea8bb36f5fcf4face7f9cc80e8fe9b8b0097a9cc84c1f3c695c3f texlive-fontspec-20200406-26.el9_2.noarch.rpm f3c8e560ce0a31b0c7605316a9b197efab0c0b8236a3ba5649ea3196bdb0f2d0 texlive-unisugar-20200406-26.el9_2.noarch.rpm f42ea74dcae45f653912fc3126ce1c74b73708a3608d05cab0f6c519c6883011 texlive-xkeyval-20200406-26.el9_2.noarch.rpm f4acf2e8100cac4a0a492bece6ad5bc32236945778dbaa6a97668eba8fe2d9d9 texlive-was-20200406-26.el9_2.noarch.rpm f66b5ecadcf835122bd6645dc46e0bed3f3092fc68e7d816b428c17cdf7512d5 texlive-dehyph-20200406-26.el9_2.noarch.rpm f7e6a9d6ea08fc3303ef724e38c5bc85952a3a62b70c5985b81d311b093e235d texlive-unicode-math-20200406-26.el9_2.noarch.rpm f8c4a798a071a20e0ec1ae444e38a759b05d63259ecad67a744bc6316c16abe7 texlive-lualatex-math-20200406-26.el9_2.noarch.rpm f8ee0b5fe1efb7db2d14e977873cbc80867a424f4f6c6599e97d140cdb766fb4 texlive-bera-20200406-26.el9_2.noarch.rpm f959c01b1f69379b26b65991df9b51cd003469169bd3b3d5df794cd2ddcb1ee9 texlive-breakurl-20200406-26.el9_2.noarch.rpm f9b33cc5bda81cee7df5ecdfd0d8aeaed1ae193bb9082d5b400d71824fc6dbea texlive-xcolor-20200406-26.el9_2.noarch.rpm f9e9bfdab36f0e31d5c9fffe7f4258b8d52226da55713c4f58b93e185d52a822 texlive-subfig-20200406-26.el9_2.noarch.rpm fade2d23c084ed47ac24275e60ec0ead00c5490b70a0a9a10005af44a4f06345 texlive-latexconfig-20200406-26.el9_2.noarch.rpm fadf87b47c9586c5f2c7202ca33a8174a74fd3970cb00018df65a97b80aea8f5 texlive-placeins-20200406-26.el9_2.noarch.rpm fb101b046207f755433af8976b7b2c6ea2d1723d0197a61853814552c3e93870 texlive-tipa-20200406-26.el9_2.noarch.rpm fb5314f416b0d1620f9be0ac9831b469f236850246d8b01c3a312b6938f4a224 texlive-grffile-20200406-26.el9_2.noarch.rpm fb7437751da0f1d9b18537fbf3b4964433173661ac6368f5b139dd9d88484234 texlive-capt-of-20200406-26.el9_2.noarch.rpm fd6779eac52f70e0620d6e78c74713d3030107fefcc1c26aa1c9eec1faf2408b texlive-changepage-20200406-26.el9_2.noarch.rpm fdd562d91c1cdd56193c886379dea47b650cb587c3b5b0b499fc7df317fa8d63 texlive-parskip-20200406-26.el9_2.noarch.rpm ff9649c004481c386f9d73f2a44d2176100414159752a25a0f92335b0622c38b ALSA-2023:3711 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281) * libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795) * libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796) * libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797) * libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798) * libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800) * libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801) * libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803) * libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libtiff-4.4.0-8.el9_2.i686.rpm 0944a63bcf08ca8b7e7af8264a53769d53e3b04068c5ac9d78665f545cde443d libtiff-devel-4.4.0-8.el9_2.i686.rpm 10a8407cc64b34eb6009fd8bd93718a12f844a68bdbc7968fc0bb4dd6c705482 libtiff-devel-4.4.0-8.el9_2.x86_64.rpm 14d571b910b87876f9476fe6ffa9711afd5a71cdb3e3c5528be1e780520a28e6 libtiff-4.4.0-8.el9_2.x86_64.rpm 1bf3471710b1b89b2a1b468b0ea4656fd3ee1276aea72cee1ddb676e986d08ae ALSA-2023:3714 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454) * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default postgresql-server-13.11-1.el9_2.x86_64.rpm 17569f749ce926fb78be2b444a9a9019ceece87ed7c27bc9649bda71bc9cea2a postgresql-private-libs-13.11-1.el9_2.x86_64.rpm 26acf4eb8c27e651d52ed465d03bd748d7af8b6720586d9c0ed9caac3f4ec0ab postgresql-plperl-13.11-1.el9_2.x86_64.rpm 4dd616686d05af9c7a0b9896246ab843eb344cbde4cf80456083948f37e74ba5 postgresql-13.11-1.el9_2.x86_64.rpm 611f7864e144c876cb83452c1353dafe8948c9ad8d7cca278903de6930dd9ee3 postgresql-pltcl-13.11-1.el9_2.x86_64.rpm 6a987c0c9c0c50567f9de74d7b574df8697295d4464eec9aeba84f256086cec5 postgresql-contrib-13.11-1.el9_2.x86_64.rpm af183605b645dd97748804b245152de6d53e8e050be7b0a3ebe1fc358019cb59 postgresql-upgrade-13.11-1.el9_2.x86_64.rpm cbcb83015cef8dc4f57411a0ac2b54f207e24f997a0aaf2974f70578058f2861 postgresql-plpython3-13.11-1.el9_2.x86_64.rpm f07c0cc5d077f6382f03dd51e9bb86aa4a51efb7a44231e862f2ab7d65edfb29 ALSA-2023:3715 Copyright 2023 AlmaLinux OS 0 1 Moderate

libvirt security update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fix(es): * libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libvirt-daemon-kvm-9.0.0-10.2.el9_2.x86_64.rpm 0b77ec0e5c425ca61de631b42cadf64b3b62bc838ec16e232d5eed0f10131724 libvirt-daemon-9.0.0-10.2.el9_2.x86_64.rpm 0f04fe67586ae927027cc2e6c013c64f8f2c439c5ced492618b50e82c7d50035 libvirt-daemon-driver-storage-iscsi-9.0.0-10.2.el9_2.x86_64.rpm 11828db09aa27c991808a85e41293eb6b872676ebdec55f6d871bc5afade5931 libvirt-daemon-driver-storage-disk-9.0.0-10.2.el9_2.x86_64.rpm 1f254b433e8a41602e8ed5dd15003febe5638b87f35a53a14c5897b55686dba7 libvirt-daemon-driver-storage-9.0.0-10.2.el9_2.x86_64.rpm 23d7184bcb4c36b7b31af39dc88438b33fc2a8666168da19a50e6e3fe06d5c6a libvirt-daemon-driver-nwfilter-9.0.0-10.2.el9_2.x86_64.rpm 3ad5ccfcbc7f0e8436a7e911dd6b90c18bd47b2de9e1fe38ec529ea06df99fa7 libvirt-daemon-driver-storage-logical-9.0.0-10.2.el9_2.x86_64.rpm 421aac1fd4f4d37cc85e26d77bfb997cdeeb6583b57a53efc716cd4b48e40142 libvirt-daemon-driver-network-9.0.0-10.2.el9_2.x86_64.rpm 5a6e1526e9ac1c7f9ce89ade8b0eb51b5736b4a207262f19c156dea656b53bef libvirt-daemon-config-network-9.0.0-10.2.el9_2.x86_64.rpm 68219447c02570714fe080ef9b7446ae5bbdb21c3213be4d59a15a13100945c3 libvirt-9.0.0-10.2.el9_2.x86_64.rpm 79eafd3055d36e6057b776e5355a2aded72572405c87e27526148cadcb7ffab9 libvirt-daemon-driver-storage-mpath-9.0.0-10.2.el9_2.x86_64.rpm 7dcd844bcf39c50260a2ece8350d62416c8499d19f79ab284c2e5b7a85540182 libvirt-daemon-driver-storage-rbd-9.0.0-10.2.el9_2.x86_64.rpm 82b0f39908e7bb11d52183a986e5cbd101fe5d65bd8b5fea29ebe6344127765b libvirt-daemon-config-nwfilter-9.0.0-10.2.el9_2.x86_64.rpm 9171c11ffa8417d172e3c9dfffb18ee9a8f26daba20639cbfa8e0a040bb4ce68 libvirt-client-9.0.0-10.2.el9_2.x86_64.rpm 99d2d4b764db2351617d8b7e25502223e24dfc3bac3eeb90c87c28bb9b2b8713 libvirt-nss-9.0.0-10.2.el9_2.x86_64.rpm 9ac5287e32677d6c9a6788d6749b4a3fb857e8fcb93ad2ef96e4e24d6e65fa62 libvirt-daemon-driver-nodedev-9.0.0-10.2.el9_2.x86_64.rpm add0e2f9b2fd0535c398e13983d9b54b68e05cc49777ec57a146dbeec7944547 libvirt-libs-9.0.0-10.2.el9_2.x86_64.rpm b51c79199dc03502819f3a2ee89482051e81cd8dc579d9a1e14d3074965596fb libvirt-daemon-driver-secret-9.0.0-10.2.el9_2.x86_64.rpm b6ee917ae8a2fa11bddf3a6c467695a9526e09190124901abd9cd66ca1de599b libvirt-daemon-driver-storage-scsi-9.0.0-10.2.el9_2.x86_64.rpm bcb871f9902a3fd1afada3e0ccc4cfdadb5ad2223684375c03aa0abe253d6a91 libvirt-daemon-driver-interface-9.0.0-10.2.el9_2.x86_64.rpm d18e036952c12bbc820fdcb57dde38ff174273df6aa25b0c6bbb8fce1d397866 libvirt-daemon-driver-storage-core-9.0.0-10.2.el9_2.x86_64.rpm ecc511589165a4375565c10c88e9da4ed290685a56c0c6101b70888e4076a3bf libvirt-daemon-driver-qemu-9.0.0-10.2.el9_2.x86_64.rpm f3700d4154660d2217a61310752f6f65891251cf25333331abd39785cb6f6a47 ALSA-2023:3722 Copyright 2023 AlmaLinux OS 0 1 Moderate

openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650) * openssl: Denial of service by excessive resource usage in verifying X509 policy constraints (CVE-2023-0464) * openssl: Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465) * openssl: Certificate policy check not enabled (CVE-2023-0466) * openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In FIPS mode, openssl KDFs should only allow selected hash algorithms (BZ#2175860) * In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator (BZ#2175864) * In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally (BZ#2175868) * openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c (BZ#2175873) * In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator (BZ#2178029) * In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator (BZ#2178030) * In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests (BZ#2178034) * In FIPS mode, openssl should enter error state when DH PCT fails (BZ#2178039) * In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1 (BZ#2178137) * Support requiring EMS in TLS 1.2, default to it when in FIPS mode (BZ#2188046) * OpenSSL rsa_verify_recover doesn't use the same key checks as rsa_verify in FIPS mode (BZ#2188052) * AlmaLinux9.0 - sshd dumps core when ibmca engine is configured with default_algorithms = CIPHERS or ALL (openssl) (BZ#2211396) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default openssl-devel-3.0.7-16.el9_2.x86_64.rpm 9b83522d3b0b5f888d41ea99809726ec2f587a96006a8b7fff6313b630f8ecfc openssl-devel-3.0.7-16.el9_2.i686.rpm 9ce5fee153d14301d140f1e61801f09893700cadb49e76393f949949303220b6 openssl-perl-3.0.7-16.el9_2.x86_64.rpm a687497485466fd0de12822f74b05b8ff8e2021a8edb8e6d215448d5a2142243 ALSA-2023:3723 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235) * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233) * Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002) * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124) * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194) * kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Intel QAT Update - (kernel changes) (BZ#2176846) * RPL-P IOTG/RPL-S IOTG: cpu frequency issues (BZ#2178857) * In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181727) * Kernel BUG in iwlmvm wifi driver when used Mesh systems (BZ#2186723) * Azure AlmaLinux 9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due to uninitialized current_vmcs] (BZ#2186822) * AlmaLinux 9 blktests nvme/047 lead kernel NULL pointer (BZ#2187536) * Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2187709) * kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188655) * fix page end in filemap_get_read_batch (BZ#2189349) * AlmaLinux 9.2 hwpoison: data loss when memory error occurs on hugetlb pagecache (BZ#2192348) * wdat_wdt watchdog timeout triggered unexpectedly (BZ#2192585) * ice: high CPU usage with GNSS or ptp4l (BZ#2203154) * AlmaLinux 9 "smpboot: Scheduler frequency invariance went wobbly, disabling!" on nohz_full CPUs after long run (BZ#2203178) * Dying percpu kworkers cause issues on isolated CPUs [almalinux-9] (BZ#2203229) * FJ9.2 Bug: [REG] NFS infinite loop of COMMIT call and NFS4ERR_DELAY reply. (BZ#2203335) * perf errors - "event syntax error: 'unc_p_delayed_c_state_abort_core5'" b'_ value too big for format, maximum is 255' (BZ#2207471) * AlmaLinux 9: Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208242) * cifs: backport small patches to bring us close to 9.1 - backport commit aea02fc40a7f cifs: fix wrong unlock before return from cifs_tree_connect (BZ#2209045) * AlmaLinux 9 x86_64, kdump 2nd kernel will randomly panic on "kvm-08-guest25.hv2" (BZ#2210614) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default perf-5.14.0-284.18.1.el9_2.x86_64.rpm 33658369d1459d2e10092558f1b2dd7c0e97014347dda2c27dabe673afa3bb0f kernel-debug-devel-matched-5.14.0-284.18.1.el9_2.x86_64.rpm 9d9258eea66f10c6c318af49c9c50831ebb9da289541b073f24a95a0a604ab0e rtla-5.14.0-284.18.1.el9_2.x86_64.rpm af122408bb2367cb5b4d843e27c9db8039e20966c7aaa75c858bea8e2e80ad8e kernel-devel-matched-5.14.0-284.18.1.el9_2.x86_64.rpm cf4d679ebf455e68dd0cb7ca4ab3fc6e15987e1509fadd4dfd0eadb695a81be9 kernel-devel-5.14.0-284.18.1.el9_2.x86_64.rpm eecdb4f94b2bc9bf406bee4187a10eb96d74054c23228fb5073894d48801f4e5 kernel-debug-devel-5.14.0-284.18.1.el9_2.x86_64.rpm f884e087a7c90b055d485388f5abd8a53cb7c9cdfef1cf907a4a6ab0324610aa ALSA-2023:3923 Copyright 2023 AlmaLinux OS 0 1 Critical

go-toolset and golang security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402) * golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404) * golang: cmd/cgo: Arbitratry code execution triggered by linker flags (CVE-2023-29405) * golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default golang-tests-1.19.10-1.el9_2.noarch.rpm 30ab1bd4291b0272e257958461bb72023bef4257ecd6d4b5eb97a27bd8d6379e golang-docs-1.19.10-1.el9_2.noarch.rpm 71dc9cc489e6edf78787a78b99884deaa694d1d3f821c446c375a4219a2b729c golang-bin-1.19.10-1.el9_2.x86_64.rpm 7ec2f2884fbc856287d5ca7db57f4ea9379f4d94c8f91bd8fec045ec30b518fa golang-1.19.10-1.el9_2.x86_64.rpm 9558ae94396e5db40cc70ea5f9ab4d4cfd03096af30e5f7b7be442c3848260e9 golang-race-1.19.10-1.el9_2.x86_64.rpm be897a9af8aed37e20083aa34912bd092eeb650baf61abadc40611afedc8feae go-toolset-1.19.10-1.el9_2.x86_64.rpm cb9fa931d448c9605b6c04c4bc794cde4af804a2942fe8cb37f90528d95a00a1 golang-misc-1.19.10-1.el9_2.noarch.rpm ce25db99e39e7ce0e75d9c795762a5246ef955db97b3030fdda7c25aeecd0561 golang-src-1.19.10-1.el9_2.noarch.rpm dddbe14e399987dedb35b95a495ec72088fba6d56b01d95ae75c7be4f4d899f8 ALSA-2023:3948 Copyright 2023 AlmaLinux OS 0 1 Low

open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default open-vm-tools-salt-minion-12.1.5-1.el9_2.1.alma.x86_64.rpm 177d427d686af7663d66616f53b16450be88fdfe88ab3dca58410db1d6f0ba4f open-vm-tools-test-12.1.5-1.el9_2.1.alma.x86_64.rpm 1bc11ba78bf9701b61bb7a5a42234c88b24a66fbbfb2445a13ac630b7404cc69 open-vm-tools-desktop-12.1.5-1.el9_2.1.alma.x86_64.rpm 735dcb1eec1fd61bcbdd892f4525cb94844e7aed5ff35cc03efadd52d902d106 open-vm-tools-sdmp-12.1.5-1.el9_2.1.alma.x86_64.rpm c5318d7d7adad6ad7766c788a82620a61d91176e7efee55742b581e198f5df81 open-vm-tools-12.1.5-1.el9_2.1.alma.x86_64.rpm fb1c66834d27c1a245460e5ffdd88cc7a95bd2954578320a12361dac5a8fed19 ALSA-2023:4030 Copyright 2023 AlmaLinux OS 0 1 Critical

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default grafana-9.0.9-3.el9_2.alma.x86_64.rpm 0e0bcbe51ac6acd258958f873b4ae8c01dc1458495f79f0d305ed8b719635742 ALSA-2023:4057 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219634) Security Fix(es): * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-sdk-7.0-7.0.109-1.el9_2.x86_64.rpm 026cd6f43225b8c44c9740cd43bfd6c8c04ff44a02aa0885bd484e78e9986e74 netstandard-targeting-pack-2.1-7.0.109-1.el9_2.x86_64.rpm 0dd454f647d537bd87ca9f775df2233f3a47d5c6188827dbf292a8244fbd25de dotnet-hostfxr-7.0-7.0.9-1.el9_2.x86_64.rpm 46cc9228cc3e7fb53a743f9cc61a1278f1b67ae4c5eb304a70c800cc2d43b1ca dotnet-runtime-7.0-7.0.9-1.el9_2.x86_64.rpm 4f8fc899bdb3340bea19c7cb70a6bf5e8079ced31c6dc29f87629f7589d9fc30 dotnet-targeting-pack-7.0-7.0.9-1.el9_2.x86_64.rpm 565f7f74e7c323aaa0ab681cccac63062feb28f7bded87f0ed930baed58b2633 dotnet-apphost-pack-7.0-7.0.9-1.el9_2.x86_64.rpm 584df02176fd6d53f3544a6a0db810554755f3492975b680c1805abc339c6a4e dotnet-templates-7.0-7.0.109-1.el9_2.x86_64.rpm 8c59cf9231c70376b6894ce2b97cf49aceab90505266f977446e3b01a8409a29 aspnetcore-runtime-7.0-7.0.9-1.el9_2.x86_64.rpm ab37edbcb8dcd943fca9be13bf23b4bd4a6c6276c377f75437cc1dd759df996a aspnetcore-targeting-pack-7.0-7.0.9-1.el9_2.x86_64.rpm b48677f680f2148e45530b77843faafb780dd0256ac1ab3d0c82027979176700 dotnet-host-7.0.9-1.el9_2.x86_64.rpm dc2e9dbca3f6bc2facb58cb43bf9a50806f58bf4037241926d5dc6cf15eea621 ALSA-2023:4060 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219640) Security Fix(es): * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-runtime-6.0-6.0.20-1.el9_2.x86_64.rpm 1fe1cac72c59cb3445f50d0fa1e9e249f319dec243ed366e69e0d6b176fcd0e3 dotnet-hostfxr-6.0-6.0.20-1.el9_2.x86_64.rpm 354028571aa102fbf90d3219f6051e7d84403a5b5bd0533c1536e81b086aa3fe aspnetcore-runtime-6.0-6.0.20-1.el9_2.x86_64.rpm 3d90bf8d7fc80f50ffd2a0d894fff27746b85b4474d43c579c0cd85cda32aeac dotnet-targeting-pack-6.0-6.0.20-1.el9_2.x86_64.rpm 658924fc3b01b2d330f29d15c75d9056f118b0554d033f17015cfc0147303d13 dotnet-apphost-pack-6.0-6.0.20-1.el9_2.x86_64.rpm 659a6ca95d9983b95d8c67b31aaf22649d8257ef0370db9f059e300f7f76e74b dotnet-sdk-6.0-6.0.120-1.el9_2.x86_64.rpm 8658c32bd901aa6e264a2c0f175ba3e708c6ad43dffac390621521fd4aa2add2 dotnet-templates-6.0-6.0.120-1.el9_2.x86_64.rpm ee5042fc4cb3abbd5ec86ce253fcbb3c97f21905b88e9bf68d7cfbb2fa99cfaf aspnetcore-targeting-pack-6.0-6.0.20-1.el9_2.x86_64.rpm f521fd741e7240a2c9701e9d1f21af5164fbcdb646f3ffd0b93fbc5828847a93 ALSA-2023:4064 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Security Fix(es): * Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202) * Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211) * Mozilla: Fullscreen notification obscured (CVE-2023-37207) * Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default thunderbird-102.13.0-2.el9_2.alma.x86_64.rpm cceaa054b79c567f51ad8f11c432e39a76c1d04e521b484b5711d3cdeef5b934 ALSA-2023:4071 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.13.0 ESR. Security Fix(es): * Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202) * Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211) * Mozilla: Fullscreen notification obscured (CVE-2023-37207) * Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default firefox-x11-102.13.0-2.el9_2.alma.x86_64.rpm d14892a7bce824d614762b4416ae558377a8faa677f914aa11d65739931ea32f firefox-102.13.0-2.el9_2.alma.x86_64.rpm feec975b8dada516ce73f778664a91332d74cdc967a216b244def9e7c7b35ff4 ALSA-2023:4099 Copyright 2023 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default bind-libs-9.16.23-11.el9_2.1.x86_64.rpm 2cf2d9ab5c087c71a8fb43f9aacc0b030c1c02770ddaf180fcc30061528326de python3-bind-9.16.23-11.el9_2.1.noarch.rpm 3c62bdb3bc6fac3e5332f94bff3875dd89419e9849d8b1de13eea0f4ed4f1bdc bind-chroot-9.16.23-11.el9_2.1.x86_64.rpm 48118ce820cfe122ae3d6ebaeaab9b86585362e925594f4bfaa17378d716b82f bind-license-9.16.23-11.el9_2.1.noarch.rpm 6cc24f3f2bd69377e9a6976c76a03a16df5d3afb4e73571daf17fb098ba7cf6a bind-utils-9.16.23-11.el9_2.1.x86_64.rpm 71e564c598cc79d192ae255a284641c5c32d9d8a3a23165156f0456e53e9a4cf bind-dnssec-doc-9.16.23-11.el9_2.1.noarch.rpm 9e8ab6697ea398f41342da502c9130cc4d73503f0922c0d3ed0a6aa39285ae73 bind-9.16.23-11.el9_2.1.x86_64.rpm aac1d8d6e3dcea4ee5e4435584280a5c68684da90763d0a0d8bc49f07c3e0dc5 bind-dnssec-utils-9.16.23-11.el9_2.1.x86_64.rpm ef817293dfa9a31347b9c278c3dcb29eb4a30618b407608cbeaae0e04de1a2dd ALSA-2023:4158 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-9] (BZ#2223100) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default java-11-openjdk-static-libs-11.0.20.0.8-2.el9.x86_64.rpm 05fc2e9e35d7d40761756891ef827aa3ac89916d4fed235ce993e992eb4f3ccc java-11-openjdk-javadoc-11.0.20.0.8-2.el9.x86_64.rpm 375c1242a7ff4deb87973367e63661b73bcf214b0feb5e0b09334b72018e822e java-11-openjdk-jmods-11.0.20.0.8-2.el9.x86_64.rpm 39c18b8ea4c08bda9ab8046b7ce71682d936847e130b3404345a77a83e3ca779 java-11-openjdk-demo-11.0.20.0.8-2.el9.x86_64.rpm 530df7edb9006d0041f7b856b10b859cbec60cd1d785bd812c602b66a871c387 java-11-openjdk-devel-11.0.20.0.8-2.el9.x86_64.rpm 6389b0ff14f57f0819e18241109a5b9f2230a355d1eab33b3d9cfe2aeb2c5c0a java-11-openjdk-src-11.0.20.0.8-2.el9.x86_64.rpm a8a4074061fb6f5726bc6146e8fb2af2099f37e291abeee27a6dce8c65dae084 java-11-openjdk-11.0.20.0.8-2.el9.x86_64.rpm d19e993b6c89dd18e68ee8798d8dfa9a89c8ee1e60d1d522af0fe0f0ad5e4d34 java-11-openjdk-headless-11.0.20.0.8-2.el9.x86_64.rpm e298f632d1c1e4a800d7db22824917f6c19775d8881c95ba98d660d58e7ba193 java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el9.x86_64.rpm ee66fe23439182d473c53c8ea9008b4eca8f4685c3e60c41bf565ce8d58860f9 ALSA-2023:4177 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) * OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221653) * Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-9] (BZ#2222852) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default java-17-openjdk-headless-17.0.8.0.7-2.el9.x86_64.rpm 083f5fb0bc40da00d97106ce7ca2dab0ffa30de827c2586242764e4c1957177f java-17-openjdk-demo-17.0.8.0.7-2.el9.x86_64.rpm 0d922b2e5f6cdc5d0db45f4db8d08fc8608e38e0ff4375e3f22eb4ff9b35a70e java-17-openjdk-jmods-17.0.8.0.7-2.el9.x86_64.rpm 4ddf4fc2c30f80a1a3c7f77d1fca9fbd352a4744ee94e2f525c1840054b5ba92 java-17-openjdk-src-17.0.8.0.7-2.el9.x86_64.rpm 6930354599dcf30e03b3ea9d05c54c7df1a4a2c3b04867417857e6ba627827a3 java-17-openjdk-17.0.8.0.7-2.el9.x86_64.rpm 7938b7819e92d09c545369998602c76296dc39f343390d0020a5d8c3ee8d1409 java-17-openjdk-javadoc-17.0.8.0.7-2.el9.x86_64.rpm 8b02a4a050cc33b72256e8eaa7a0f150fd8f9e371663886e2649b17f2643294a java-17-openjdk-static-libs-17.0.8.0.7-2.el9.x86_64.rpm 97bf4e8e015225dddad326507f8a961f5e9909671eaecb9029238f906624ac9a java-17-openjdk-devel-17.0.8.0.7-2.el9.x86_64.rpm 99e2d85ac08b854da7283c16e4d11342a567eb81033773f56fb69e7b7bea51a4 java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el9.x86_64.rpm e78cf16f363bef4e4d347775d58f5110954eec552edeead835f9702ff5da34c8 ALSA-2023:4178 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [almalinux-9] (BZ#2220662) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default java-1.8.0-openjdk-devel-1.8.0.382.b05-2.el9.x86_64.rpm 2ca08d8600c44051de1636ae0013567c742608b5a9c437a521623ec80d5d66e3 java-1.8.0-openjdk-javadoc-zip-1.8.0.382.b05-2.el9.noarch.rpm 629b4e0b7e9dcdd7422347c79f5b1761e2c5e855465ad44af7692d12bb836326 java-1.8.0-openjdk-demo-1.8.0.382.b05-2.el9.x86_64.rpm 8574eac7abf12e876dbc276f93285a9ebf704f9463003f7d8cabd961806dd6a3 java-1.8.0-openjdk-1.8.0.382.b05-2.el9.x86_64.rpm a6b9c1b7251021c80f14d256fe03d2f4d10eafd297d23f51f7c1e62528dae2e4 java-1.8.0-openjdk-headless-1.8.0.382.b05-2.el9.x86_64.rpm cac7d9298e1e33ae6847b812f45da85aafd663e605c9bef230699c99c4abe3d5 java-1.8.0-openjdk-javadoc-1.8.0.382.b05-2.el9.noarch.rpm da780a2487f6f8cecd6c76fc7272e62d9f49158df6f8e23dd5b1d1ef9fc2774a java-1.8.0-openjdk-src-1.8.0.382.b05-2.el9.x86_64.rpm f6fddf28145baff8a7db4b2b2c528ea6d50d29cfdda4527c6a167e6b6f25ce76 ALSA-2023:4201 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-32435) * webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2023-32439) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default webkit2gtk3-2.38.5-1.el9_2.3.i686.rpm 0ac737d062011c404452b4cb5c02728234ba767c4c95b0d4b20ba8ecb0725545 webkit2gtk3-2.38.5-1.el9_2.3.x86_64.rpm 4403fbb8613def01120e2ce67bdef3fbd80f6531ea007859129a1e6e90d71a6a webkit2gtk3-devel-2.38.5-1.el9_2.3.x86_64.rpm 4477dcd3f1c508545b94255442e537bc2d76aebdf015523171637608020d8899 webkit2gtk3-jsc-2.38.5-1.el9_2.3.x86_64.rpm 701309e59c4cb939b5e80c666307379f764f5f959142f870fa9238ff96c21d7c webkit2gtk3-jsc-devel-2.38.5-1.el9_2.3.i686.rpm a9a657cb3bb734d1ac31d4eb2223df9be85c62dd8b79c69f8be8c0028ccfccb1 webkit2gtk3-devel-2.38.5-1.el9_2.3.i686.rpm aa22a077c925064d75c94a05e9b551af52e91990bdd6ed151f6f83281c05d539 webkit2gtk3-jsc-devel-2.38.5-1.el9_2.3.x86_64.rpm cf13c4245e16bad7f4a93984811c1df0bdf625e1a94d5582514c28909b24a209 webkit2gtk3-jsc-2.38.5-1.el9_2.3.i686.rpm d3d0a8a02a329e0556a1caff8b3500324f2396b6760dda218d0f9af1f7955ad7 ALSA-2023:4325 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security and bug fix update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * The trust relationship between this workstation and the primary domain failed (BZ#2223600) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default samba-winexe-4.17.5-103.el9_2.alma.x86_64.rpm 3be2855e397b710e232fb092214a3d22a94ac72b3db89f82def7e642a0661d87 samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.x86_64.rpm 523cd018152329d85f9c489a46499d178e84291e35660f8160f3749c109927c9 samba-vfs-iouring-4.17.5-103.el9_2.alma.x86_64.rpm 63dcf1f3d1bd4f8311ddec93c6db609a9a35691a4f930fbd42d819f13f003183 samba-krb5-printing-4.17.5-103.el9_2.alma.x86_64.rpm a53211c92279d4267d26131b3430cf20d86265676a1aba4e1c36a2c914ebff8a samba-winbind-clients-4.17.5-103.el9_2.alma.x86_64.rpm d8c5b3141c7546e96fa6b8c2128fc73378e619f7ab2147c714a50f5a256fcd65 samba-client-4.17.5-103.el9_2.alma.x86_64.rpm f66a9aa0280831d7b5ecdfa26affb4defaefdfeb52c2991ad3d3b148cf435121 ALSA-2023:4327 Copyright 2023 AlmaLinux OS 0 1 Moderate

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454) * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default postgresql-private-devel-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm 0950e75e88e5c1aba821391bb85fcdd474c5446dd79c94b833474712e7245c3c postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.x86_64.rpm 0c54728acb7eabf7a7ba774b18e109ec59a59a5e2dfe3c7ee328b1d471e0d77e postgresql-server-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm 1b71ad80bee19f85efa1d9a091bafb8a2b3781cdb9611fb08e65cc1a033176cb postgresql-static-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm 31492873dfdd99a04c442e982b22c31ef8099d20baf743ebae51022573cb7853 postgresql-upgrade-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm 35018a1a085acd8b2595827a39d1fe291012dd705b086855c3b297caa0e7d1fb pgaudit-1.7.0-1.module_el9.2.0+22+09653793.x86_64.rpm 350cd8f8c2ca35f5ac5c4922666ffe2443b5e6d2dddfce355289de8a24d7417e postgresql-contrib-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm 4309e6c3eaab46af0817453201a3621670f27a3c34040edd25fcc7546f704323 postgresql-plpython3-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm 46e83252f1f2bb3925b94704feba43ac3bee6ad0d3f00d57402b69f94a00d8fc postgresql-private-libs-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm 5da54789d0b9a7e3d1f8c76a11b2963aa86fcfd1e2dd3071ed57479f680386ee pg_repack-1.4.8-1.module_el9.2.0+22+09653793.x86_64.rpm 87d022a740ce8e28aa41659d2946eb158057cf6fa80801cbd5c3cc8e2868da92 postgresql-docs-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm 9ce502c90b7fbeb5c3854ca97ce4b236e6679500d038c319e36d762c5791fc49 postgresql-upgrade-devel-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm be6ece9b19164e5d1c74e80d2b42287c10c7ee0cbe181869cdd18d7a996277e5 postgresql-test-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm cbfd3be1071afd9c570b121ccfaacdb560ad7de34159782256e770843f0301dd postgresql-server-devel-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm d09363117792f5dcc598b197f3e2df62ec7bb9ef1f2e59c34d309b16eaaa6fe2 postgresql-pltcl-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm db2bd0743415bb4ffa7ff8e29fb0e1ed01aabb94336ee151dc4969862cf78b07 postgresql-plperl-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm e1c71861cbf5e049b704b89d12116e7da42c578257a6b9fbf943f20ff52f1aa4 postgresql-test-rpm-macros-15.3-1.module_el9.2.0+32+f3c125b5.noarch.rpm f48cc577d80b43cbc2f817ed08da4cdadb58b7d207b0158ec7be5f3ee3ee21b6 postgresql-15.3-1.module_el9.2.0+32+f3c125b5.x86_64.rpm f5b7d40ed3fef2363209e5f75f4da0bfd7a7ccb74dc85856eec15ade97114936 ALSA-2023:4330 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The package has been upgraded to a later upstream version: nodejs (18). (BZ#2223314, BZ#2223316, BZ#2223318, BZ#2223319, BZ#2223320, BZ#2223354) Security Fix(es): * nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581) * nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588) * nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589) * nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default npm-9.5.1-1.18.16.1.1.module_el9.2.0+31+cbae0c8e.x86_64.rpm 1ef77589fea74091db051fa06c949e74e8a4782474ee07b4e8c00b4ab3b3dfb7 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-docs-18.16.1-1.module_el9.2.0+31+cbae0c8e.noarch.rpm 8c3fa3cb42ef5df1bf9ca20ec5f9cc2c56e702231b236e37670681e241c5fa63 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-full-i18n-18.16.1-1.module_el9.2.0+31+cbae0c8e.x86_64.rpm 9d7e81a5270701ec3281cb8ac73d0b029873c011372530ec475cb933e7b5a847 nodejs-devel-18.16.1-1.module_el9.2.0+31+cbae0c8e.x86_64.rpm b331487ddcb18f5ae3794837b4e10034b3d4c6bb388dabd0fd192c25787aa087 nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d nodejs-18.16.1-1.module_el9.2.0+31+cbae0c8e.x86_64.rpm fd99cfe2facf731f4e849658088dc1a09cf6028f08266eaace1eabc0e0db0173 ALSA-2023:4331 Copyright 2023 AlmaLinux OS 0 1 Moderate

nodejs security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The package has been upgraded to a later upstream version: nodejs (16.20.1). (BZ#2223334, BZ#2223336, BZ#2223338, BZ#2223340, BZ#2223342, BZ#2223344) Security Fix(es): * nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581) * nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588) * nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589) * nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nodejs-full-i18n-16.20.1-1.el9_2.x86_64.rpm 2565fcc22b13d0153c5cdf3babf52e115d25da55b50994e2159b9860a408d990 npm-8.19.4-1.16.20.1.1.el9_2.x86_64.rpm 4a55caa9a166f3050ae8368d2023ca5c58c5675391336e30f269456b11f751a3 nodejs-libs-16.20.1-1.el9_2.i686.rpm c5619b77ae163d49dd1739205b10c086cb322bbf462fe2780d45ceb3e522c307 nodejs-libs-16.20.1-1.el9_2.x86_64.rpm c8978ece98a1aa547eaf2b13272502441fcae12e049ee71399edb4eb9faa2153 nodejs-docs-16.20.1-1.el9_2.noarch.rpm e06d71fd417fd39b1765657dd8cc90ec19f42cbe1e479373f337e9e8c57df2df nodejs-16.20.1-1.el9_2.x86_64.rpm ee14bed3df259482297d2e232db4877a72fcca889be536ee316d141144df6e37 ALSA-2023:4349 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484) * libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libxml2-devel-2.9.13-3.el9_2.1.i686.rpm ac7601549f55c9eea32c9807508dbfb09372e24990f6f45901ed5236f1918d8e libxml2-devel-2.9.13-3.el9_2.1.x86_64.rpm e676f53819518930ea288ff14edf938676ac323bbcb83dbabe2397b5445a73a5 ALSA-2023:4350 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-requests security update

The python-requests package contains a library designed to make HTTP requests easy for developers. Security Fix(es): * python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3-requests+security-2.25.1-7.el9_2.noarch.rpm 3e24ebe477beb77a17f2aedb06e9312bef3771af9a0e11266b05774485bf9e76 python3-requests+socks-2.25.1-7.el9_2.noarch.rpm 8a27ca1c7eebbfd292640cf4d76adeeb9487862fd39ca3124cd03898c70da5e6 ALSA-2023:4354 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321) * curl: more POST-after-PUT confusion (CVE-2023-28322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libcurl-devel-7.76.1-23.el9_2.2.x86_64.rpm 0705cf4dfb56e6b0afa120a9d16f7319ad8aff46406099e6b070e3b823b45113 libcurl-devel-7.76.1-23.el9_2.2.i686.rpm 1bfe596e01907f71bae1860b6e984ad528632b5fbdd4aa88a0b8d1e5fbe47047 ALSA-2023:4377 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090) * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788) * kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869) * kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458) * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default kernel-debug-devel-matched-5.14.0-284.25.1.el9_2.x86_64.rpm 089cd65747be90494669b9b110e223ec7fd3cd4c36473e8a903a28dfa73ac4a4 perf-5.14.0-284.25.1.el9_2.x86_64.rpm 1e1914779782c1412357abfd60b52ff524b06a13713c31b1a583902d121b0364 kernel-debug-devel-5.14.0-284.25.1.el9_2.x86_64.rpm 367e0cb9c686eec14b715d21778213112019b75bfb3dcc6ec7a88fd0a6120d04 kernel-doc-5.14.0-284.25.1.el9_2.noarch.rpm 8eba8be1d7bcfa73611b13790706a35b22ba614e1fbfffd60e60f6451ea1255c rtla-5.14.0-284.25.1.el9_2.x86_64.rpm d4e0de68ec875b7f08a6bb5ec55179d91de1c2909ea101ea2e710e496b226b86 kernel-devel-5.14.0-284.25.1.el9_2.x86_64.rpm e4c5612250e7d298275a963f983d3ee40958a2f6e0e5bba95465521ae4990a89 kernel-devel-matched-5.14.0-284.25.1.el9_2.x86_64.rpm f1149612c190cac304ea85d96c885d22987b446d3c561a11fb2051a95beae438 ALSA-2023:4411 Copyright 2023 AlmaLinux OS 0 1 Important

cjose security update

CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE (CVE-2023-37464) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default cjose-0.6.1-13.el9_2.alma.i686.rpm 82ac6e178f4a174521fe630b0a7151bcef641ec4698bc0fecde1fdb6d4877c95 cjose-0.6.1-13.el9_2.alma.x86_64.rpm ec92fb40f6ff1dcdb8f991a55494a943dcea3091d8bd828cade2b9b28e7df251 ALSA-2023:4412 Copyright 2023 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default openssh-askpass-8.7p1-30.el9_2.x86_64.rpm 1684ec83ca56bea43c5ca7cb7bef4b0feb34fcb2e59c5ce3801fb71cf4db9f05 pam_ssh_agent_auth-0.10.4-5.30.el9_2.x86_64.rpm bdbd4e0ebf92f09e771ae18e64ab89719218f1654b8c8c4ef90a78258e3c4cef ALSA-2023:4462 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.14.0 ESR. Security Fix(es): * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045) * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047) * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048) * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049) * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050) * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056) * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057) * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default firefox-x11-102.14.0-1.el9_2.alma.x86_64.rpm 433e420fea5fd879d35fed749562b31ea02b60cdaaf187f77466a8d177391fd9 firefox-102.14.0-1.el9_2.alma.x86_64.rpm fa38cf905e9283cffe8bb5d07f52e338964bb50a9de0142efeaed9bcd5aef9b8 ALSA-2023:4499 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.14.0. Security Fix(es): * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045) * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047) * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048) * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049) * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050) * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056) * Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057) * thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417) * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default thunderbird-102.14.0-1.el9_2.alma.x86_64.rpm f77301fe39e10e06c145d6b103818098555f2186c82c1612a6a4e947e6b9283c ALSA-2023:4569 Copyright 2023 AlmaLinux OS 0 1 Moderate

dbus security update

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fix(es): * dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered (CVE-2023-34969) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dbus-daemon-1.12.20-7.el9_2.1.x86_64.rpm 5c5eec39932ee8596a78d309cc58f7c95551a308a64b03528978363ea321cc56 dbus-devel-1.12.20-7.el9_2.1.x86_64.rpm 9761a1d955d1e9d43eb5d7c07dca94f13d0411e7fd546459911425a5ac25882f dbus-devel-1.12.20-7.el9_2.1.i686.rpm ad257cb1cc200865902b4abd6e86a48c4119db98f7628e52db56fb2ce8f67212 dbus-x11-1.12.20-7.el9_2.1.x86_64.rpm be35f3285649b0a52ba3506d86aaae7bae8ba171a01887f0efb2a524fe02043b ALSA-2023:4571 Copyright 2023 AlmaLinux OS 0 1 Important

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: memory allocation hazard and crash (CVE-2023-38403) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default iperf3-3.9-10.el9_2.alma.i686.rpm 07de491b10151efcad25b686ace1bb2095e9097659cdcf148c44b225e3265775 iperf3-3.9-10.el9_2.alma.x86_64.rpm 23fecc9de597f216f8f8dd62cf42775d77d219b08675499ae1fa902963b080f8 ALSA-2023:4634 Copyright 2023 AlmaLinux OS 0 1 Important

rust security update

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. Security Fix(es): * rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default rust-doc-1.66.1-2.el9_2.x86_64.rpm 14a0683fe45c91d4fcc7e6a78b216e61ad43c10027975bacdc2b8fc5f644a004 rust-src-1.66.1-2.el9_2.noarch.rpm 1facb7484f74dbb22012883cfc6ee052b7e533e636fbde7d657d6534cc802b6d clippy-1.66.1-2.el9_2.x86_64.rpm 22f1bfaefb627c3a2f60e99ea0924ed4c422e1cf9abb041e8ea1bf8e0e1b2ec6 cargo-1.66.1-2.el9_2.x86_64.rpm 2ae869a9421c4060411103eb39e7dd4dbf0a274af6698452e44c344f69fc841b rust-analysis-1.66.1-2.el9_2.x86_64.rpm 37517a89a2f5468f5053a88c2c55d0c6f85bfdb7cedb887fd0be9b9cff1c7c4a rust-std-static-wasm32-wasi-1.66.1-2.el9_2.noarch.rpm 60459374ae943f9914cbd8a14ee1b4e19b843661a50eeba370c0663d8df56a73 rust-lldb-1.66.1-2.el9_2.noarch.rpm 61a689c097cafd7e8275c8a5c27000e3fdacdabeac111935ece27faff7583904 rust-std-static-1.66.1-2.el9_2.x86_64.rpm 68e6ec08e8430a8167b37965c068a1fe96eb05be6b1f7eca3f7353942228ba81 rust-gdb-1.66.1-2.el9_2.noarch.rpm 6df55647414454c1ec1e8ea2510536e446da01d792d336812a0540265a97521b rust-toolset-1.66.1-2.el9_2.x86_64.rpm 6febad59d56e558973664197cdc10e1aacb5c4445086bbaa5723abef3e2a6a45 rust-1.66.1-2.el9_2.x86_64.rpm 8a8efea7116b17f66370aabc3bb7086ce9667154266b66f79f4d7a124508f770 rust-analyzer-1.66.1-2.el9_2.x86_64.rpm 9ecf1dcac5f07c66e89389ea25d64bc966839597c9fb0321ec6d1cade48d1584 rust-std-static-1.66.1-2.el9_2.i686.rpm b74fab891ef7ed14147ea8d04d1b7b6a2de3d22748c9652e1d40b6305dbbeef9 rust-debugger-common-1.66.1-2.el9_2.noarch.rpm c08735b6178beb86b9405fdbb11dac9b0a71a0271459b4073745461efeba5ecd rustfmt-1.66.1-2.el9_2.x86_64.rpm efc4b367fdc149737315b6e8b8b71f08f8840659ead2637d24353a42c49e8bb2 rust-std-static-wasm32-unknown-unknown-1.66.1-2.el9_2.noarch.rpm f1c83991316d5b6218e5af9e5d0f9e18b71196ddca8fc9abb06849c2ca8d6616 ALSA-2023:4642 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10. Security Fix(es): * dotnet: RCE under dotnet commands (CVE-2023-35390) * dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-apphost-pack-7.0-7.0.10-1.el9_2.x86_64.rpm 08af77b61a9d5c97123192170af2cebda9edd89feac0dd335ac097c8db75ee90 dotnet-runtime-7.0-7.0.10-1.el9_2.x86_64.rpm 21235affb6f919bcb5ce1e0a5f034c34e75cb47fdcca9abc6cf33cd6f4bde608 aspnetcore-targeting-pack-7.0-7.0.10-1.el9_2.x86_64.rpm 22b5abeb7165af6c1a4335d5be1da894ae549d781afdeee6db7ebbdca1105e96 dotnet-hostfxr-7.0-7.0.10-1.el9_2.x86_64.rpm 22d2d0bed681cbd784bfcf6eba33b64cfbdda008d170782f51abffbae97dfff9 dotnet-sdk-7.0-7.0.110-1.el9_2.x86_64.rpm 53edbebb5af75aa62a71df1bfbdabdc1a3f02e82686e5e48bc686eaf9f3ac87b dotnet-host-7.0.10-1.el9_2.x86_64.rpm 6ab05ae50fd0615ccd32e701cc9bf53b0b5786579a5d204878ab54ce97020933 dotnet-targeting-pack-7.0-7.0.10-1.el9_2.x86_64.rpm a477e120b27059c4f076f528aa13fc105f2a0fc5e46d0a4568c303ce0fff0591 aspnetcore-runtime-7.0-7.0.10-1.el9_2.x86_64.rpm cbf021b6fe3c81361772914ce7810241b27d2963df0f5f385f80445a975b5be2 netstandard-targeting-pack-2.1-7.0.110-1.el9_2.x86_64.rpm eebb3be7bb44099767f2d22457ae938491e28cf4362e00b63c592fea251c1489 dotnet-templates-7.0-7.0.110-1.el9_2.x86_64.rpm fd8c47e662f57d2c1d9cc65a10dba570ff50e1931f3c642fc836ce150444e8fb ALSA-2023:4644 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21. Security Fix(es): * dotnet: RCE under dotnet commands (CVE-2023-35390) * dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default aspnetcore-runtime-6.0-6.0.21-1.el9_2.x86_64.rpm 2d6fdae701dbafbd214d5b61ec1313c281a68da822588dcd887d6c1716ff6c91 dotnet-templates-6.0-6.0.121-1.el9_2.x86_64.rpm 5849c27cceef1670796021fe25cb98575c83c03a199f93ba8a08dded79fad393 dotnet-sdk-6.0-6.0.121-1.el9_2.x86_64.rpm 690198c65e61b634845b93d43223919d2ea34f3babcc3294a2465a4296d4724f aspnetcore-targeting-pack-6.0-6.0.21-1.el9_2.x86_64.rpm 8e10a0bdf6a3865812f114034610a9320d3fe3936e1cdc111791de2a92d217a6 dotnet-runtime-6.0-6.0.21-1.el9_2.x86_64.rpm c29e07a4090e9caa4de8ebc9d495d410bb3f9a89d8f7bbcc122a71b903602464 dotnet-hostfxr-6.0-6.0.21-1.el9_2.x86_64.rpm c8294e2b6e9e861d88fd1fabd775296d408558950f1876978c1bb888dc8eaae9 dotnet-apphost-pack-6.0-6.0.21-1.el9_2.x86_64.rpm f8b9fb3a14d331bd208a2582a75feedf2775f664f2eca82f2874c8aae6c9078b dotnet-targeting-pack-6.0-6.0.21-1.el9_2.x86_64.rpm ffff3987096f6572f2733b110951ebe852a0820b54febaf55c413498eb973d07 ALSA-2023:4838 Copyright 2023 AlmaLinux OS 0 1 Important

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Information leak through Cups-Get-Document operation (CVE-2023-32360) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default cups-ipptool-2.3.3op2-16.el9_2.1.x86_64.rpm 3124d730a026c43272f20f42f27401c6a667baa5607bbf6881a897efaf8917e4 cups-client-2.3.3op2-16.el9_2.1.x86_64.rpm 4328d4346628e5b5e18cadc9178c5c225766865939013f623f6d0e61a6dba903 cups-lpd-2.3.3op2-16.el9_2.1.x86_64.rpm 6f9ac85d1fae47f63de1850a51942906988c6f65d196f0333098844247145f81 cups-2.3.3op2-16.el9_2.1.x86_64.rpm 89e3ee2a68c31ba7fcbe3ab773fc7a70903dad0474855c47c15ccd93ca399948 cups-devel-2.3.3op2-16.el9_2.1.i686.rpm 90f97d00c92fe8b67824effb9b32aa1edc63cc314315c0c24b43695926634479 cups-filesystem-2.3.3op2-16.el9_2.1.noarch.rpm aa04bc93b6930f3be08d7fcef1b901e910e5638414afe1eeed997ed3360b6477 cups-devel-2.3.3op2-16.el9_2.1.x86_64.rpm ab9f2b5282ebaff4ba802bf906eca8568b44fe3138a5c0f0faf56aa81f674160 cups-printerapp-2.3.3op2-16.el9_2.1.x86_64.rpm fbf1ef4431060352f4c82ce89497a41ebaea29785ae66c4c59f03163857e8e15 ALSA-2023:4955 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.0. Security Fix(es): * Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573) * Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574) * Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575) * Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585) * Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051) * Mozilla: Full screen notification obscured by external program (CVE-2023-4053) * Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578) * Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580) * Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581) * Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default thunderbird-102.15.0-1.el9_2.alma.x86_64.rpm d8d55f54cbab289d4e0374d8be4798a6aeb4d1dfba58887efcb62d437e31cdfb ALSA-2023:4958 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.15.0 ESR. Security Fix(es): * Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573) * Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574) * Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575) * Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585) * Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051) * Mozilla: Full screen notification obscured by external program (CVE-2023-4053) * Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578) * Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580) * Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581) * Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default firefox-102.15.0-1.el9_2.alma.x86_64.rpm 6e6dc7020aee129daff043e1d91d496540f40078c8fdc224c21add57bb9c43e5 firefox-x11-102.15.0-1.el9_2.alma.x86_64.rpm f98922864aa7c6fa4ce56bc25b1bb15bc359d9b29b559a086c82c6ac711798c3 ALSA-2023:5048 Copyright 2023 AlmaLinux OS 0 1 Important

flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files. Security Fix(es): * flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default flac-libs-1.3.3-10.el9_2.1.x86_64.rpm 2e49709324253ebf6526fa54fe0c3ecc5ec11ce2b10b970ed41220e7e963290c flac-libs-1.3.3-10.el9_2.1.i686.rpm ea365e953fa5fd40129ea306f0aad3a3935b45079574d697614469b8842aac64 ALSA-2023:5069 Copyright 2023 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel (5.14.0). Security Fix(es): * kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390) * kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610) * kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776) * kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004) * kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147) * kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248) * kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001) * kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637) * hw: amd: Cross-Process Information Leak (CVE-2023-20593) * kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [Intel 9.3 BUG] [SPR][EMR][FHF] ACPI: Fix system hang during S3 wakeup (BZ#2218026) * [Dell 9.2 BUG] Monitor lost after replug WD19TBS to SUT port wiith VGA/DVI to type-C dongle (BZ#2219463) * rtmutex: Incorrect waiter woken when requeueing in rt_mutex_adjust_prio_chain() (BZ#2222121) * AlmaLinux AWS ARM Instability During Microshift e2e tests (BZ#2223310) * AlmaLinux 9.x updates for SEV-SNP guest support (BZ#2224587) * Lock state corruption from nested rtmutex blocking in blk_flush_plug() (BZ#2225623) * bpf_jit_limit hit again - copy_seccomp() fix (BZ#2226945) * libceph: harden msgr2.1 frame segment length checks (BZ#2227070) * Temporary values used for the FIPS integrity test should be zeroized after use (BZ#2227768) * Important iavf bug fixes July 2023 (BZ#2228156) * [i40e/ice] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228158) * lvconvert --splitcache, --uncache operations getting hung (BZ#2228481) * perf: EMR core and uncore PMU support (BZ#2230175) * NVIDIA - Grace: Backport i2c: tegra: Set ACPI node as primary fwnode (BZ#2230483) * NVIDIA - Grace: Backport i2c: tegra: Fix PEC support for SMBUS block read (BZ#2230488) * [Hyper-V][AlmaLinux 9]incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230747) * Kernel config option CONFIG_CRYPTO_STATS should be disabled until it is enhanced (BZ#2231850) * [AlmaLinux 9][Hyper-V]Excessive hv_storvsc driver logging with srb_status SRB_STATUS_INTERNAL_ERROR (0x30) (BZ#2231990) * AlmaLinux-9: WARNING: bad unlock balance detected! (BZ#2232213) * NVIDIA - Grace: Backport drm/ast patch expected for kernel 6.4 (BZ#2232302) * [Lenovo 9.1 bug] AlmaLinux 9 will hang when "echo c > /proc/sysrq-trigger". (BZ#2232700) * [AlmaLinux-9] bz2022169 in /kernel/general/process/reg-suit fails on aarch64 (/proc/[pid]/wchan broken) (BZ#2233928) Enhancement(s): * [Intel 9.3 FEAT] cpufreq: intel_pstate: Enable HWP IO boost for all servers (BZ#2210270) * [Dell 9.3 FEAT] - New MB with AMP Codec Change on Maya Bay (audio driver) (BZ#2218960) * [Lenovo 9.3 FEAT] MDRAID - Update to the latest upstream (BZ#2221170) * [Intel 9.3 FEAT] [EMR] Add EMR support to uncore-frequency driver (BZ#2230169) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default perf-5.14.0-284.30.1.el9_2.x86_64.rpm 24d365d68151f60397e2b99cdcc9c3511e5bb07a61a05b18a9876b9948c6055e kernel-debug-devel-5.14.0-284.30.1.el9_2.x86_64.rpm 39a6222a720811aea3d743f18e226167a8a794adddea03395ff1e10485d3e8f1 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.x86_64.rpm 73be3c957a668556ecbbaac5eb5827a51a26cec4e76958df339ac69bbfa9f068 kernel-devel-matched-5.14.0-284.30.1.el9_2.x86_64.rpm 977ea87d292c7958b9667fbfce29745aa711759256a2d493cd84e09dfe079400 kernel-devel-5.14.0-284.30.1.el9_2.x86_64.rpm a46d33edaf09e5bcdbdb594468a3649f12122bebed567c20fe3546c78ce2e213 rtla-5.14.0-284.30.1.el9_2.x86_64.rpm a4714db23aa5ac589e1bc5c449fbd1bfe76db654382e07bc7662334f35d10c99 ALSA-2023:5071 Copyright 2023 AlmaLinux OS 0 1 Moderate

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603) * libcap: Memory Leak on pthread_create() Error (CVE-2023-2602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libcap-devel-2.48-9.el9_2.x86_64.rpm 6b3b694f1351d6bcf9aab0ae4abf294f614d9d6461f0710ead0c2753a1e85a07 libcap-devel-2.48-9.el9_2.i686.rpm 8bf2d94b9a8b213a3de93b37c2ff170607f385c3c98ecc2263557c51f29b67f6 ALSA-2023:5080 Copyright 2023 AlmaLinux OS 0 1 Moderate

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: registrar is subject to a DoS against SSL connections (CVE-2023-38200) * Keylime: challenge-response protocol bypass during agent registration (CVE-2023-38201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default keylime-base-6.5.2-6.el9_2.alma.1.x86_64.rpm 310d09507febd1c3e7d8aded9ba6aa58e1336a3b700576d02e692ef5c3a87dfb keylime-registrar-6.5.2-6.el9_2.alma.1.x86_64.rpm 3e8c9261a9c9c1d4fcdd90e8067ea308057b5654e26f47c08634cddfbd125c90 keylime-tenant-6.5.2-6.el9_2.alma.1.x86_64.rpm 50160b9df32c22c2a454debbdb50a0df8a8b8a7f400ed5596ffc3d6058d3f507 python3-keylime-6.5.2-6.el9_2.alma.1.x86_64.rpm 7953eb33188434dc2b3ae9fcf3b903d4e2b0e1339bd2b79b0de7b9bd92368538 keylime-selinux-6.5.2-6.el9_2.alma.1.noarch.rpm 7d2cd2926a2a1055a094e35ace1481c09033033a86e78e656745ce16d58e4d61 keylime-6.5.2-6.el9_2.alma.1.x86_64.rpm d43e8b63bff5890ac833f366f0fd90d36218f5464bd5e6742cb8c5c46206e966 keylime-verifier-6.5.2-6.el9_2.alma.1.x86_64.rpm dc6974bfb3cdf392d184412525cc5e9f3e57234343c9903a3b2c204dbbf84f1a ALSA-2023:5081 Copyright 2023 AlmaLinux OS 0 1 Moderate

librsvg2 security update

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default librsvg2-tools-2.50.7-1.el9_2.1.x86_64.rpm 245ec9ef107ef60738e885bf1753cac73d7690caf89ceea79c6cbcee88d4a9fe librsvg2-devel-2.50.7-1.el9_2.1.x86_64.rpm 607854b8fb5744e923622fd9a21b3de927857ce5f5e84898f4d2a8ac9a66a0a3 librsvg2-2.50.7-1.el9_2.1.x86_64.rpm 8ca474f1c323f0c812698a86240f5c2658cbb8f3579d21831d9829aff23a7f93 librsvg2-devel-2.50.7-1.el9_2.1.i686.rpm b0c680bedf9c7d5f47f859f0bcd7e801e9f4cbf201f233d23e2f3ae7e371dd86 librsvg2-2.50.7-1.el9_2.1.i686.rpm da621af3db7a54881219bd3eaafe1b42f4248a8318dff3d7c7d61635a6b377f8 ALSA-2023:5094 Copyright 2023 AlmaLinux OS 0 1 Important

qemu-kvm security and bug fix update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [qemu-kvm] rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization (BZ#2211923) * [almalinux9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest (BZ#2227721) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default qemu-kvm-tools-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 0e8d8c555c2a816f80a172390814269dfa6483997ffdd3de557a89a5316dcf2e qemu-kvm-core-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 0f6f16b05ef1705e9df7639510f9f19613909dd32955491468550b4f4df474b9 qemu-kvm-device-usb-host-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 17cde67d85bd60dd85d96f65bcb7f6ac44026f55088a72f97488396cc0395997 qemu-kvm-ui-opengl-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 20c1c3b974796a69b45d5880b01295dcb45fd50f439867a682e0953e8842d0c5 qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 238b4dea2d532d69bde873a20848958007c285ddcd1d2841d527d49312770ecb qemu-kvm-device-display-virtio-vga-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 2660c8fd1dbdb3a6ab42b8dc164acd1343b86fed7845d1fc652a4385a1693e49 qemu-kvm-common-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 3656b066dfba709a0e503a1d1447a8969a836d6b979cff196c7b160889b14d77 qemu-pr-helper-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 38cd55ffec099a9a8ad5e33f4a09025e1d27a67838cbbb62100843a53adbcc9f qemu-img-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 458fa0eecd3365549b3fcee45c449a1be3f8c6ec907bb80f4611eeb39615e8b0 qemu-kvm-ui-egl-headless-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 550012b3c4e3c47adae3bf85980bb91e6c6d0f88def066a7c915f8ceef4618b5 qemu-kvm-block-rbd-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 6af26696a8547f9411521d030c0d4bcbc1b36748e03a2371d2573a046a3daba8 qemu-kvm-device-usb-redirect-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 6d25281fce82babeb35fb2613e642d55385b55785af08bac5dfebd1ac8ed9842 qemu-kvm-docs-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 79d74ccd4e63e6907cc429618c7129806083602cb8f76ef278283f8827fe82e7 qemu-kvm-block-curl-7.2.0-14.el9_2.5.alma.1.x86_64.rpm 8c0460c4188bcc61c9fbcc91446b1b2d67af1f5f11686750986e952e54ce30d1 qemu-kvm-7.2.0-14.el9_2.5.alma.1.x86_64.rpm a9bbc250ab4b07190f9d7b3058828ec8686652263a5245a3fdf210ea07f3b443 qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9_2.5.alma.1.x86_64.rpm d061c678689a6a52bd701e966e76a72adf1ec3f9e85382858e6302af5f5b75d3 qemu-guest-agent-7.2.0-14.el9_2.5.alma.1.x86_64.rpm d2c028fc4b02a1cf26fa51c6af2df9d72470ae3c74b8df8d13b01ac80f000d49 qemu-kvm-audio-pa-7.2.0-14.el9_2.5.alma.1.x86_64.rpm e98110879175b8c3b5dcf217b19bbc8242fe01b1e3f75805db4e90dc585e18ae ALSA-2023:5143 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-hostfxr-6.0-6.0.22-1.el9_2.x86_64.rpm 048421a34e61560340429d919da615536051e7fe33c2d391128b55566cb04d83 dotnet-targeting-pack-6.0-6.0.22-1.el9_2.x86_64.rpm 1bd14b10c386a3269e60788bfa14e3b0fa19c5e00f5dac392bdb2bd69f74b874 aspnetcore-runtime-6.0-6.0.22-1.el9_2.x86_64.rpm 37f3cca579905f42992363e31fb900b22c96f17fa98054b4c67f0c058278f35f dotnet-templates-6.0-6.0.122-1.el9_2.x86_64.rpm 6fc6fef24d1dfb9ac1fe84e8c8b01fcfee29b014fec0b4defa6da33917f36c65 dotnet-apphost-pack-6.0-6.0.22-1.el9_2.x86_64.rpm 79ec4ac61e833adb630044278f93bb88d592bcc7f606b82a2e25434d630efc65 dotnet-sdk-6.0-6.0.122-1.el9_2.x86_64.rpm 8edc25765e6fca1b9f6aa74ba4c8ece812c6e1a791c7fb5e4a065b880301fd5d aspnetcore-targeting-pack-6.0-6.0.22-1.el9_2.x86_64.rpm cc43aff8d6f1425e6b1943f359d7b0efdded0b986d7200a2645ef3049be15e95 dotnet-runtime-6.0-6.0.22-1.el9_2.x86_64.rpm e63580f16e5186621c17008f711cbfcd256ae68a000fa81e7f0b868b0746494b ALSA-2023:5146 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-host-7.0.11-1.el9_2.x86_64.rpm 2b27e75a65e1ff4f2198080665ddeac8d852c0decdc77956fed8b72646b32ac3 dotnet-targeting-pack-7.0-7.0.11-1.el9_2.x86_64.rpm 3a532c53fe5b57f941ef63f3e17111e0c9196a24e58d0ea18a7dd2eac49349e4 dotnet-hostfxr-7.0-7.0.11-1.el9_2.x86_64.rpm 4e105dce5d04b379b88d222f09366eeb9c87358da056ff922dad891ccbbf8082 aspnetcore-targeting-pack-7.0-7.0.11-1.el9_2.x86_64.rpm 5175d5466677e76c9f3625fe733f2d62049c9701dfe1473c69c640ca15cacf20 dotnet-templates-7.0-7.0.111-1.el9_2.x86_64.rpm 89a72999b44850ecba47c6d1505f4e831a4e717d2514cc8f2e7c826435f3e9c6 netstandard-targeting-pack-2.1-7.0.111-1.el9_2.x86_64.rpm a860b8a2a9b75d56e6331e3c01507457487ec855121a71515f7155a8054620a4 dotnet-apphost-pack-7.0-7.0.11-1.el9_2.x86_64.rpm c43e409f1829c536a76d05abac5004ffc55d61636d01c081e662566b214752b6 dotnet-sdk-7.0-7.0.111-1.el9_2.x86_64.rpm c531a6da6024258561ee1f3866fe8ddcc4769985929cf5c614ea4b5220453999 dotnet-runtime-7.0-7.0.11-1.el9_2.x86_64.rpm dfceccf34a8dc068641d659a743eee6fc0bcefefb40666caa5dd5d8d32f26e47 aspnetcore-runtime-7.0-7.0.11-1.el9_2.x86_64.rpm ecd0e854d0aeabaf96fbcaff37b56e497724da90c41dcbfa158b9f1512ea4949 ALSA-2023:5194 Copyright 2023 AlmaLinux OS 0 1 Important

frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router (CVE-2023-38802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default frr-selinux-8.3.1-5.el9_2.2.alma.noarch.rpm 9f2cdde8e80c69a0ccfaf75e0a5547962330d34480d455d467beb0e0ddd801b8 frr-8.3.1-5.el9_2.2.alma.x86_64.rpm be40e5b1f271d0fd77b9856026112ca7a11f1996f931de0b361223d0e590ecda ALSA-2023:5200 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.15.1 ESR. Security Fix(es): * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default firefox-102.15.1-1.el9_2.alma.x86_64.rpm b2525f7755891c3b907cffe3641e87e067d786d218fb891bd44b6454278679b9 firefox-x11-102.15.1-1.el9_2.alma.x86_64.rpm c2a1d5e1aa4e9d714dd008f402ea41a80330e4fc18f3e4f21c82e4aaa19dd86d ALSA-2023:5214 Copyright 2023 AlmaLinux OS 0 1 Important

libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently. Security Fix(es): * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libwebp-devel-1.2.0-7.el9_2.i686.rpm 105a1b2b49f384d0407af36dcd1278bcdedbfba423a34e2aaa81a9f4b88564b6 libwebp-1.2.0-7.el9_2.i686.rpm 6e118ca666da1347a1610b3fb791c0a6725c6c037df42c40aaaa1eef74d3b6e0 libwebp-devel-1.2.0-7.el9_2.x86_64.rpm a862c1111fbef79c605bbd4d844c612557072fc29784d858039749ccf8739a72 libwebp-1.2.0-7.el9_2.x86_64.rpm cf9a291c64689e45df37dfa435fc2d79e119f68e109a4b2ff15624bae6707070 ALSA-2023:5224 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.1. Security Fix(es): * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default thunderbird-102.15.1-1.el9_2.alma.x86_64.rpm 06534789dd84edae2f4eec9bdd20385d8b6a30b0f5b25d78aa76a239d6b36f7c ALSA-2023:5313 Copyright 2023 AlmaLinux OS 0 1 Important

open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools: SAML token signature bypass (CVE-2023-20900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default open-vm-tools-desktop-12.1.5-1.el9_2.3.alma.1.x86_64.rpm 14cd92cb434579ab2c30e30710e60ce220a0d23a741da0d91954d90f92e6440d open-vm-tools-test-12.1.5-1.el9_2.3.alma.1.x86_64.rpm 7cff9120fd3cf1f7733193593a1d1405e652becc11e4c5719c30c086b02449da open-vm-tools-12.1.5-1.el9_2.3.alma.1.x86_64.rpm b4485eec46f9914e2fec586648a4894b0817e1db752d04b4c0cff9d8fc888547 open-vm-tools-sdmp-12.1.5-1.el9_2.3.alma.1.x86_64.rpm bf596773166ccb76faaf0bc21e5cf0ab6644509f6d51c3bbd6deaf97c2470a44 open-vm-tools-salt-minion-12.1.5-1.el9_2.3.alma.1.x86_64.rpm e4d22ffc2eced1047391b0c512551178e6010fee0bb1937ac30315112054a5ce ALSA-2023:5363 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (18). (BZ#2223313, BZ#2234404) Security Fix(es): * nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002) * nodejs-semver: Regular expression denial of service (CVE-2022-25883) * nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006) * nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default npm-9.6.7-1.18.17.1.1.module_el9.2.0+36+853e48f5.x86_64.rpm 390ccf89fc0e9bfbc630e9b1937053f0ace12b27550b8e6c1e90391183211c6e nodejs-full-i18n-18.17.1-1.module_el9.2.0+36+853e48f5.x86_64.rpm 57a153cd75c72fe6c174dd6b6943c571dc21d93a8b9e65a752d9e3606779ff52 nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-18.17.1-1.module_el9.2.0+36+853e48f5.x86_64.rpm 6ed236aa0539db981ab056c6d9a9d5e12f0726e8b32994c9ef19db88545a92d2 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-docs-18.17.1-1.module_el9.2.0+36+853e48f5.noarch.rpm c88feff14205e859cd2c765c6acb71f2b608773fddc3b6ebdb1247243500c6c0 nodejs-devel-18.17.1-1.module_el9.2.0+36+853e48f5.x86_64.rpm fbcc74c958adc5eb5acb151b1856687450ab281b69322a6575a2ab4275043b16 ALSA-2023:5434 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.3.1 ESR. Security Fix(es): * firefox: use-after-free in workers (CVE-2023-3600) * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169) * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171) * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176) * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default firefox-115.3.1-1.el9_2.alma.1.x86_64.rpm 2ace722e103c40f18f5db55a4991427785d60079d10d6c1069dbc60fc64bf7e0 firefox-x11-115.3.1-1.el9_2.alma.1.x86_64.rpm d891158d9c1e4983a45a6c3fff0f458cf2e3b1087f936aa2c77ce44f42e5db9b ALSA-2023:5435 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fix(es): * firefox: use-after-free in workers (CVE-2023-3600) * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169) * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171) * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176) * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default thunderbird-115.3.1-1.el9_2.alma.x86_64.rpm 1c980ce5052c198836ca6cd6367afd3556cd0ea1a139f06b122d366faeae9449 ALSA-2023:5453 Copyright 2023 AlmaLinux OS 0 1 Important

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911) * glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527) * glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806) * glibc: potential use-after-free in gaih_inet() (CVE-2023-4813) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default glibc-locale-source-2.34-60.el9_2.7.x86_64.rpm 36e39cc10173bf80f5f1776dbc85937a33a97f072075a6a3a88c1463688a70d9 glibc-devel-2.34-60.el9_2.7.x86_64.rpm 4d67b524d773cb956b62789997e47e60eae08dcd839cd59392edac4c7504aba4 glibc-doc-2.34-60.el9_2.7.noarch.rpm b815dc8db3dc8d6e123d6718685d319dde9832dbad92f00d6f6b5d24f161bf18 glibc-utils-2.34-60.el9_2.7.x86_64.rpm ca983f6c167beba273931b2e009a5819f361573ecca56e95782299f418068c84 glibc-devel-2.34-60.el9_2.7.i686.rpm d7471973e5c94064116c5ae057cf612fecd9f518fdeed7afcba2bf9d9a31a06b glibc-headers-2.34-60.el9_2.7.x86_64.rpm ed6ee86edb6953b3427e421af1a5bad7ad62de924193c7298d35dbba26f97e79 ALSA-2023:5456 Copyright 2023 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3.11-libs-3.11.2-2.el9_2.2.i686.rpm 23d9c747b2653152becf6d413437105d1dcc9646dcdafe7ab311ec2c8d953d0c python3.11-3.11.2-2.el9_2.2.x86_64.rpm 3c31cd5b10509f0136d32f964400f16127340ab5767e7705204d41f962ba9f74 python3.11-libs-3.11.2-2.el9_2.2.x86_64.rpm 58c711bb7297b71c02c91098d4de561ffc0cee4b87617008042c7407476ff631 python3.11-devel-3.11.2-2.el9_2.2.x86_64.rpm a333e5dce6ec284b30f6d3725113868f4690571ae43be83fb18414b02726de36 python3.11-devel-3.11.2-2.el9_2.2.i686.rpm b18b6fc5cc271dcd1c2394bb51011a66dc293f5ddb5470d58d8b1508acd45e26 python3.11-tkinter-3.11.2-2.el9_2.2.x86_64.rpm caa53920052bda373e8cdecfc11159cb6f9b06ee41ff8b28f400d8c00321d6d8 ALSA-2023:5459 Copyright 2023 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default ghostscript-tools-fonts-9.54.0-10.el9_2.x86_64.rpm 22be9dbf1407f990b02e56acc7675f37b70e7a492157eeed91a75616ba0e2d3e ghostscript-9.54.0-10.el9_2.x86_64.rpm 2473d08f96ad5340e007151bc98faff445541294242d938b36810132a4719e26 ghostscript-x11-9.54.0-10.el9_2.x86_64.rpm 30473cce746b2ab4c9c8ecf00e10ad69fc1adb51805ccdda52d7eba0e08f4908 libgs-9.54.0-10.el9_2.x86_64.rpm 4d265886c1ef7e733081e0efeefbb6ad0b6f91fd9a49654ca17e54b7f7cfda3e ghostscript-doc-9.54.0-10.el9_2.noarch.rpm a9fbde0874ce6eceb343bd037c297ee445d98fc1185fedda26a3cc72fe9f2450 ghostscript-tools-printing-9.54.0-10.el9_2.x86_64.rpm bbd89f99da8fe359f4824e7edf577fa37a65468e42a6b560c393c65fcfd0f2dc ghostscript-tools-dvipdf-9.54.0-10.el9_2.x86_64.rpm d6825f470922e00afdcfa507e8da27ef5737c771131f9815deba079c1453274d libgs-9.54.0-10.el9_2.i686.rpm f9bcbd613a1c8755c73d62bc7ac37c984aa5a927f2183bff2022cf87a9e55773 ALSA-2023:5462 Copyright 2023 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python-unversioned-command-3.9.16-1.el9_2.2.noarch.rpm 005b770b08188fbf2ab1fe356f947cca65f6aa836ecc6ec48769203034898af9 python3-devel-3.9.16-1.el9_2.2.i686.rpm 696c06fca975bd4b0512e23ca064664cefff428ee7daaa6164c44280f27fc5d1 python3-devel-3.9.16-1.el9_2.2.x86_64.rpm d3415af7335aa22f7466203467ede4079ad4a8fba8183cdf25a47b343faee3cf python3-tkinter-3.9.16-1.el9_2.2.x86_64.rpm dd59519f321687c5f63c247c1b97d71b6d8c2739c786d7477baecce85a0bf6cf ALSA-2023:5532 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002) * nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006) * nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * nodejs: Rebase to the latest Nodejs 16 release [almalinux-9] (BZ#2236434) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nodejs-16.20.2-1.el9_2.x86_64.rpm 014d6a8dc96837c198f863d06bd88015bd650c7a55949a15e1e6b836a286b000 nodejs-libs-16.20.2-1.el9_2.x86_64.rpm 32f9b4465d84f74ccc1e9602595b27c5917aaffb894460cc40e3eb09f91f83d7 nodejs-full-i18n-16.20.2-1.el9_2.x86_64.rpm 45d80c006a24eed7a2fc24580f19eb3bbb62898f8723cca3af82dafb54c6919e npm-8.19.4-1.16.20.2.1.el9_2.x86_64.rpm 466d9013090334807d3c0c44bb4243d867413ba4737bf60f2a500ef2f944a4d1 nodejs-docs-16.20.2-1.el9_2.noarch.rpm e9b2779d80a707dc7add98c8b2e875b6ce047e4af60f689ad6b78da46cb089ff ALSA-2023:5539 Copyright 2023 AlmaLinux OS 0 1 Important

libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libvpx-1.9.0-7.el9_2.alma.1.i686.rpm 43ac6a8e1233e52b34a5e59d05c048c64cdf0e662b8b5c8eba60204063ff614c libvpx-1.9.0-7.el9_2.alma.1.x86_64.rpm 76649070726f2d374e967764d907a360c93abfcaa804326bbdec855105abbe4c ALSA-2023:5684 Copyright 2023 AlmaLinux OS 0 1 Important

galera and mariadb security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.14), mariadb (10.5.22). Security Fix(es): * mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157) * mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081) * mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082) * mariadb: segmentation fault via the component sub_select (CVE-2022-32084) * mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089) * mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091) * mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791) * mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default mariadb-embedded-10.5.22-1.el9_2.alma.1.x86_64.rpm 3d4610471703bf869960ecd511cf5b41979e827faf8309b8992ee8d217edf794 mariadb-10.5.22-1.el9_2.alma.1.x86_64.rpm 64dbc8c61204e7432a963de7a704e4a4cbac5196bef3710ff3dea5152e976641 mariadb-oqgraph-engine-10.5.22-1.el9_2.alma.1.x86_64.rpm 67c9b1a02fdd374f59f1ddb139bc3d461b472e051e5af74090d8202a2a2b0204 mariadb-pam-10.5.22-1.el9_2.alma.1.x86_64.rpm 6b9205f238b23d0df7a0b99b2165341f2276b067fd9ecfe8f19801d9623a7f6c galera-26.4.14-1.el9_2.alma.1.x86_64.rpm 8a95d9c37139c0d37b0840506805b4f5b35181c13ccae3dee57b4c9ddd081fae mariadb-server-galera-10.5.22-1.el9_2.alma.1.x86_64.rpm 8aacd252a435ecffd7d162b878da6c62a063f28b09adf93bed61e05a7d6dcdd5 mariadb-server-utils-10.5.22-1.el9_2.alma.1.x86_64.rpm 8e06ca3db641ebb3a7e2efcdd731b058af81738d44635f0323b0378770e9d8b0 mariadb-common-10.5.22-1.el9_2.alma.1.x86_64.rpm 9d2bd602bc35b044dabfbbcbcd25f3d9b9f8d37461014293fe8fd9e56ffba7db mariadb-backup-10.5.22-1.el9_2.alma.1.x86_64.rpm aed483e2fc377993cbe7e19af34a110bf6fa38c8ce83ca6d85ac38ddcd3fb8ab mariadb-gssapi-server-10.5.22-1.el9_2.alma.1.x86_64.rpm b142ca9dbfb2aaba5e9145dd1e558575e823c12cca002b5f8cc834cfaa96eb21 mariadb-server-10.5.22-1.el9_2.alma.1.x86_64.rpm d0ed3f55251abc82ddb3ebf8c3d54970287abc4a847f09126a5cbca9105746fb mariadb-errmsg-10.5.22-1.el9_2.alma.1.x86_64.rpm dd2a76f31a05da107a14f00130683c570a5f5e2963c9e5ba6b832783dd79ec17 ALSA-2023:5689 Copyright 2023 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default bind-license-9.16.23-11.el9_2.2.noarch.rpm 286a8760584b8db8241d9ca5eee6f08555ccc133659a4edf4c0976291ec10000 python3-bind-9.16.23-11.el9_2.2.noarch.rpm 68add8db9f08d920be81a334a49c98a4ad4475725c0cbed03414757ca6c70198 bind-dnssec-doc-9.16.23-11.el9_2.2.noarch.rpm 6ccf0a2650f08758150be4498d10a6885e217045eeecdb6569f1d7225ab6beb1 bind-chroot-9.16.23-11.el9_2.2.x86_64.rpm 8222d3ff3950a627a82c81c1f4673767a28637889e762f3a6010b2dfe36b0c01 bind-dnssec-utils-9.16.23-11.el9_2.2.x86_64.rpm a69de0f3f7395d3fbd529063e95ae612595920333ca3725dd18f4f50f0986051 bind-utils-9.16.23-11.el9_2.2.x86_64.rpm c2e366bc442b5a9ab9b61dc754c31edc5fbbe320b26e0f124ced311f5cb45dbc bind-9.16.23-11.el9_2.2.x86_64.rpm d97a60a975654e0cc26b95f9b832968399be0f7a746b639d5467488aae0def7b bind-libs-9.16.23-11.el9_2.2.x86_64.rpm f26386306f5c4a8b5016018b600d3b517baa6a13f1a24a132e9682aec3fd1e0a ALSA-2023:5708 Copyright 2023 AlmaLinux OS 0 1 Important

dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-sdk-6.0-6.0.123-1.el9_2.x86_64.rpm 1051803b4048d6436283195d72197871f5f3e1fc3e8a7ae5bc56e80ca4b97500 dotnet-runtime-6.0-6.0.23-1.el9_2.x86_64.rpm 13966a6f6ad6fb7682d3b347d2a22ef2b205333679b9465a12d08b5f7d2dd5ee dotnet-templates-6.0-6.0.123-1.el9_2.x86_64.rpm 2b3b6ca913bc7255c495c6bd3874f11036bb016dc18f3c4db2f0d975cb76d380 aspnetcore-runtime-6.0-6.0.23-1.el9_2.x86_64.rpm 6b56e7cfdc4b1e4ac7e351f258a95cdfc480745a189f8fcae7b90c13e5438e88 dotnet-apphost-pack-6.0-6.0.23-1.el9_2.x86_64.rpm 6c18ea446b0f304840ad7c4975727060227f63d41c58e34f152758b8c6bf66fc dotnet-hostfxr-6.0-6.0.23-1.el9_2.x86_64.rpm 7bf26f8ff5096ac28a67d227bb45897a7adb0360af88d7674ac15cb80c4d08ee aspnetcore-targeting-pack-6.0-6.0.23-1.el9_2.x86_64.rpm 820f52d6ad910a7bb4063e11b00a6337a6a69f4753d2439947b86ed846d966b3 dotnet-targeting-pack-6.0-6.0.23-1.el9_2.x86_64.rpm be5ae0f737b256b6c280148596fba398288c16d43d44e2b1c22f4c076c655daf ALSA-2023:5711 Copyright 2023 AlmaLinux OS 0 1 Moderate

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nginx-all-modules-1.20.1-14.el9_2.1.alma.1.noarch.rpm 224ccfde13a54c23ce3cbe0c073f8f26257baabf4776a292f519f69dbce4166b nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.x86_64.rpm 2d4b19593eb4c4a214afea47587bbf019d888506c9ef3ac3a0032f60d50b34df nginx-core-1.20.1-14.el9_2.1.alma.1.x86_64.rpm 48062d2e4f9f9600a706e6323f9c3721a8aa8602f0d5104f13ca48439758a7f8 nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.x86_64.rpm 57ee95788de4c8125377cffdb673b3f79ada9c689f7ebf873682ed5fec7107ce nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.x86_64.rpm 597bff4a86d76a6e54a23b95c4843ef872739afc4e27d387ba5c112d9c0e28fc nginx-filesystem-1.20.1-14.el9_2.1.alma.1.noarch.rpm 6eaa0e536cd84cbdd37d9c8634d8cdf4c575e532e35d0331db02fed271820662 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.x86_64.rpm 9767e9d7a1d2335dc692143206f1724a552b9c0d34ef005979f7bab06e11a507 nginx-1.20.1-14.el9_2.1.alma.1.x86_64.rpm 9ff0800ba4fa2b9bb21a0f503ddb174df9b2afb3e03ae6b3bc82f8e672a30dd1 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.x86_64.rpm ee9b01bf41a4d15effcf83428a2d1e37d0c8e1b8ceaa3fd65c41ffbb0f7056bf ALSA-2023:5733 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) * OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067) * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13593) * The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13583) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default java-1.8.0-openjdk-src-1.8.0.392.b08-3.el9.x86_64.rpm 271a1d1fc28d0372799976c9e3ce65404ff16ad0338b76cb03c2963862d39c04 java-1.8.0-openjdk-javadoc-zip-1.8.0.392.b08-3.el9.noarch.rpm 7b5b54be0f5c7a3fa0f7cc64e6644af44af3bbbb0aa67c20c7e66b854fb54d70 java-1.8.0-openjdk-headless-1.8.0.392.b08-3.el9.x86_64.rpm 89ac9dc02b1b5ed883f03e3f210ffa5b4816c99166cdbc80e54591fbcf22956f java-1.8.0-openjdk-1.8.0.392.b08-3.el9.x86_64.rpm 8cec8facdf11944123258df39e6ea9e68e1884f522a7c780a73dbea250caadc4 java-1.8.0-openjdk-demo-1.8.0.392.b08-3.el9.x86_64.rpm c999ebe071dee79005e3ade73af47b2f0233e3e139e82ae7c62156c93abadf87 java-1.8.0-openjdk-javadoc-1.8.0.392.b08-3.el9.noarch.rpm d3353184281947d0544c3d05f8bd4d92cf07f53194a08ba90a42ca89c75fe534 java-1.8.0-openjdk-devel-1.8.0.392.b08-3.el9.x86_64.rpm d4136976424d5821f10043e82fe0b85f1c84d10965aa236ee8f191ed9a507761 ALSA-2023:5738 Copyright 2023 AlmaLinux OS 0 1 Important

go-toolset and golang security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: net/http, x/net/http2: rapid stream resets can cause excessive work [CVE-2023-44487] (CVE-2023-39325) * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Midstream dist-git patches (BZ#2223637) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default golang-src-1.19.13-1.el9_2.noarch.rpm 1e00a0e6c32111d4eb15bf27ea45f0ee5448e7411a7cb6b96516f1c22c1146c3 golang-1.19.13-1.el9_2.x86_64.rpm 24935c99b8242e3b06aab57ae0123509b018455dd2a485ab8c2171ce2650e87a golang-bin-1.19.13-1.el9_2.x86_64.rpm 88e0b815e6da3f6de0e4a242d254d5bfa0cd340a8360e33799d3dce323a41546 golang-docs-1.19.13-1.el9_2.noarch.rpm b5aac5c2d4cf88d4e4317c72aa8c6d0668231a8fce484ad8baf75ee90e706b7a go-toolset-1.19.13-1.el9_2.x86_64.rpm cd7bea71ac97a31ae9649e2bacbae5380a20834c2cbbb6ecd39550812513d1e2 golang-race-1.19.13-1.el9_2.x86_64.rpm e4a5f0872b1875fa7c080ece7edc45c3a6e585f18b373d6b549d2b092f5ac975 golang-misc-1.19.13-1.el9_2.noarch.rpm f6dec5d72b4fe83f0c561cd7d019d7a3357c497a92f890d90bdbdbe227f57fc1 golang-tests-1.19.13-1.el9_2.noarch.rpm f8fb3e03768edd80525b2ac8e65807ef49defae23da467d9d6341427e2e2dccd ALSA-2023:5744 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 11.0.20 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 11.0.20.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237175) * A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 11.0.20.1, increases it to 16 MB. * The serviceability agent would print an exception when encountering null addresses while producing thread dumps. These null values are now handled appropriately. (JDK-8243210) * The /usr/bin/jfr alternative is now owned by the java-11-openjdk package (AlmaLinux-13532) * The jcmd tool is now provided by the java-11-openjdk-headless package, rather than java-11-openjdk-devel, to make it more accessible (AlmaLinux-13536) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default java-11-openjdk-javadoc-zip-11.0.21.0.9-2.el9.x86_64.rpm 04328d6bfd542c892663b657f0f6743af88c9f8a7de35edb2104cb1e90e37ff1 java-11-openjdk-devel-11.0.21.0.9-2.el9.x86_64.rpm 05245aee8a2a7cd74189153c52be90f88c9a773fe582cd58cc335cbd3b9db487 java-11-openjdk-demo-11.0.21.0.9-2.el9.x86_64.rpm 4177ed1283474827f287ea58b3c8f9e6c6c3e534d46433e94027069d9e02a82d java-11-openjdk-static-libs-11.0.21.0.9-2.el9.x86_64.rpm 6b7f4b563496c4dda50e369d3df8ef1c4982541ea831ef5a6fe1dfe4f429d989 java-11-openjdk-javadoc-11.0.21.0.9-2.el9.x86_64.rpm 72951e09c30754836d31a976a20e0ee89f6e0a1ace9023ff3c23c36077c69d37 java-11-openjdk-jmods-11.0.21.0.9-2.el9.x86_64.rpm 75f7cdd013c79de62576cfd1022b5c1cf9e45ffa182a260ec96e552e145ec8c4 java-11-openjdk-headless-11.0.21.0.9-2.el9.x86_64.rpm a495f2ee1c4247926cfa9057074af87129802a8f8de3a9222487e00179ffc052 java-11-openjdk-11.0.21.0.9-2.el9.x86_64.rpm d6bd534f17503890a38ad44fb1510f5ddebbf3cf01a84a70d6c517f6d12121f7 java-11-openjdk-src-11.0.21.0.9-2.el9.x86_64.rpm d87c5dfbf12c6fd4f37028cfea1d2b2f480b010a1fae9697de84290f13132dbf ALSA-2023:5749 Copyright 2023 AlmaLinux OS 0 1 Important

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-hostfxr-7.0-7.0.12-1.el9_2.x86_64.rpm 221dd1483376eeb9fb76fc2f725ab91ae59c1d963cbec2251dc544a80f2411d8 netstandard-targeting-pack-2.1-7.0.112-1.el9_2.x86_64.rpm 50815ffb68d3b81f9e0fe27acf75209ce308589fdeb44df2477e1bc812115c98 dotnet-runtime-7.0-7.0.12-1.el9_2.x86_64.rpm 527e1014c243d397e8c14804bebdc8b5c640db53a4147c68bd5ebd934def76e6 dotnet-sdk-7.0-7.0.112-1.el9_2.x86_64.rpm 60ec950f265af6bbefd6dd629ed1909da657a4560417f9932959b4034ef086d0 aspnetcore-targeting-pack-7.0-7.0.12-1.el9_2.x86_64.rpm 8e434b0bc6018ed0e8dd97ecd8ca2b0970108af8fa4c523a59e3dd7129328dd3 aspnetcore-runtime-7.0-7.0.12-1.el9_2.x86_64.rpm b48941a0765f053a75744fac73dc4f3254ac96e531c8e6a570d3b06c32bc279b dotnet-templates-7.0-7.0.112-1.el9_2.x86_64.rpm dcc30fed10174b2cd4fed2b91e5e5a2442c303f3029ba0104b284815b57bf0dd dotnet-host-7.0.12-1.el9_2.x86_64.rpm ebb4017aaf0202db1d770e4558f260116e069f72c60650b76d7ae562db0f8d96 dotnet-targeting-pack-7.0-7.0.12-1.el9_2.x86_64.rpm ee20ecb16d097c8251a10f941e136d9b070b2020000564fc6ecb9a554a672bfc dotnet-apphost-pack-7.0-7.0.12-1.el9_2.x86_64.rpm f5960200a4ce4996d2a25dd7fc6ad90f5cb5127e0a58e357c7202f5c6006aefd ALSA-2023:5753 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025) * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 17.0.8 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 17.0.9, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237185) * The /usr/bin/jfr alternative is now owned by the java-17-openjdk package (AlmaLinux-13648) * The jcmd tool is now provided by the java-17-openjdk-headless package, rather than java-17-openjdk-devel, to make it more accessible (AlmaLinux-13651) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default java-17-openjdk-javadoc-zip-17.0.9.0.9-2.el9.x86_64.rpm 5ab759a3d8abac610e50ed3a6bf3bf157053c466b18be02bc70dd78c58adcdd6 java-17-openjdk-jmods-17.0.9.0.9-2.el9.x86_64.rpm 71369ef120a779258bc805bf45decef05a02debda102d68b5a98fcda86be92d1 java-17-openjdk-headless-17.0.9.0.9-2.el9.x86_64.rpm 7626e9cc4facb557eff1b9e69750d12790682b063e729e5fed388f047a6adff2 java-17-openjdk-javadoc-17.0.9.0.9-2.el9.x86_64.rpm a0bfa3099a5964664265b6ba0890142706432515b0c7ceafd913ea97334b3d9b java-17-openjdk-devel-17.0.9.0.9-2.el9.x86_64.rpm cce12f494f24a124e6fc5b34f7f2a6a72f3c1a4b4268e60571f1af70745b909b java-17-openjdk-src-17.0.9.0.9-2.el9.x86_64.rpm ce80481c65f21d0dcddf90784ce7dfb54dc21b7dc7f708e255bb3b04400189d4 java-17-openjdk-17.0.9.0.9-2.el9.x86_64.rpm e20978ec57277146639ef5a49014950961a30a0850498534c64266a298a986e8 java-17-openjdk-static-libs-17.0.9.0.9-2.el9.x86_64.rpm e612071d1385db96d3acb68c13b1cbfc7ce706ce483363796256a6e09e09e041 java-17-openjdk-demo-17.0.9.0.9-2.el9.x86_64.rpm fdb3c80f73b70ad25f5e3c260670d1f07296faa70d39d0b4dc745c85c5fda9af ALSA-2023:5763 Copyright 2023 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545) * curl: cookie injection with none file (CVE-2023-38546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libcurl-devel-7.76.1-23.el9_2.4.i686.rpm 6a56b92dde0f6852cf0f1c014ac6f63bbb8548c577a6d3a1d51396f414d7aab4 libcurl-devel-7.76.1-23.el9_2.4.x86_64.rpm f7cb1209a6fe249c150d12190e2b8b61d0780efbfab17f777f2c0799c34dd996 ALSA-2023:5765 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nodejs-docs-16.20.2-3.el9_2.noarch.rpm 0f5a5069d621f91301233c0819939ce698d99f80cd018abe7bf1c67e8cc9b50e nodejs-libs-16.20.2-3.el9_2.i686.rpm 11dbaa3c54be241e365eed756ccb9eed84b1893752f712bcdb51f553749dc9e6 nodejs-full-i18n-16.20.2-3.el9_2.x86_64.rpm 79d0d6b80a3573081b824ddc60f842abdd7787af59536cded12230634b92a8b3 nodejs-libs-16.20.2-3.el9_2.x86_64.rpm 7af8fcb0914d80bd7d233f4d567bb266f649e80b378f5453292557a3649c2c7e npm-8.19.4-1.16.20.2.3.el9_2.x86_64.rpm bdd26bfd0c9a398271b4df72d9f7fed545b821c9ce962659961bf387ccc553b8 nodejs-16.20.2-3.el9_2.x86_64.rpm deacd7782ec8dab7cd6ea2c20359552dfd5b2b4648587b292c88c8f036793cdd ALSA-2023:5849 Copyright 2023 AlmaLinux OS 0 1 Important

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) * nodejs: integrity checks according to policies can be circumvented (CVE-2023-38552) * nodejs: code injection via WebAssembly export names (CVE-2023-39333) * node-undici: cookie leakage (CVE-2023-45143) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nodejs-full-i18n-18.18.2-2.module_el9.2.0+43+3ebc9e20.x86_64.rpm 20ee08538327ad1dd74c5575f72e092d9f080c67642e6ecfdfa2634793b6d1de npm-9.8.1-1.18.18.2.2.module_el9.2.0+43+3ebc9e20.x86_64.rpm 491f02dc43e2a66e26c7a0732deb619bdeb01d62ce736832781362358fc33fff nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-18.18.2-2.module_el9.2.0+43+3ebc9e20.x86_64.rpm 7b780d917d535c7f0dff9b5f2645195a299e95d01b2c0282191ffd25d20a5588 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-docs-18.18.2-2.module_el9.2.0+43+3ebc9e20.noarch.rpm 85883791e1d2b0d7c9b6926a8d15707c75b2b0fad25aa1ebc7700f9d5f4145b2 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-devel-18.18.2-2.module_el9.2.0+43+3ebc9e20.x86_64.rpm d021d530fccc943de07acce99dafe5e873ded42f0d818c10daa1a4086d6725db ALSA-2023:5867 Copyright 2023 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) * golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default grafana-9.0.9-4.el9_2.alma.1.x86_64.rpm 08583c3d4e7c5e3bb668461b99c0d85cd2f6c372eb8285d597f574eb564885bd ALSA-2023:5924 Copyright 2023 AlmaLinux OS 0 1 Important

varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default varnish-6.6.2-3.el9_2.1.i686.rpm 3ea12d71bfd788dcb1f8af61ec02e76eaecc290bb084ec91ad10106f14b44f0a varnish-6.6.2-3.el9_2.1.x86_64.rpm 74b149f708fe554563385557cb3da8f6df5de413d9127b3ca2f54d04c7116b42 varnish-docs-6.6.2-3.el9_2.1.x86_64.rpm fb9a628913d4db7818b14711d25463da2d71caa4cfce421ede94a917430b2089 ALSA-2023:5926 Copyright 2023 AlmaLinux OS 0 1 Important

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: XML loading external entity without being enabled (CVE-2023-3823) * php: phar Buffer mismanagement (CVE-2023-3824) * php: 1-byte array overrun in common path resolve code (CVE-2023-0568) * php: DoS vulnerability when parsing multipart request body (CVE-2023-0662) * php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247) * php: Password_verify() always return true with some hash (CVE-2023-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default php-pgsql-8.0.30-1.el9_2.x86_64.rpm 057e2f92913181f7c7e14e8c0bb3a4bd662b177acc123a4006cad435acf24320 php-enchant-8.0.30-1.el9_2.x86_64.rpm 08559ddd8660e06be105acb87d1285bd39c79661dc1927b2e62ea57879be5ea7 php-embedded-8.0.30-1.el9_2.x86_64.rpm 2d1cf4919ea2cfc6c8dd78d6afff1988ddf98afb4be9dd32397b63f2458c6994 php-ffi-8.0.30-1.el9_2.x86_64.rpm 3a09ae94a787452631f2a9de5b07080f85bb4bd6fa0ce75164039118fa786a55 php-dba-8.0.30-1.el9_2.x86_64.rpm 4fd3a7c46fdaa1faf48a963c8ab917406e3427e7f3c7b4cd2b96f840b269c5bc php-fpm-8.0.30-1.el9_2.x86_64.rpm 64c6c1f6dbf44d74a4fb8db4d785fc7bdbf8407adfe122af77bb98334f95b150 php-8.0.30-1.el9_2.x86_64.rpm 6bfa820b55a260d799a8cece4f0f14493500765a99adfde724e5048f92ba760e php-ldap-8.0.30-1.el9_2.x86_64.rpm 6f1664419ff3a96458ad64d5af45e645a8b2055d29e5e6a712bc04d0f0e53ad4 php-soap-8.0.30-1.el9_2.x86_64.rpm 7f3d4cb50a2d73b2784e91cc2ab9f3b32c0f88cafb08bc02a3159788b243d164 php-xml-8.0.30-1.el9_2.x86_64.rpm 8479d8a325a8aace661b948e97daf47834d800910d43b2e8162f9b38e99de245 php-pdo-8.0.30-1.el9_2.x86_64.rpm 87995fde5dfdfe8ab63457cd50c9a8a31cd742787c5f591d08d9bb48ad737082 php-cli-8.0.30-1.el9_2.x86_64.rpm 8fad17864033e76328b67f2249f6f7f602b4ae6751f612cb390ec01b60296518 php-snmp-8.0.30-1.el9_2.x86_64.rpm a3751f0d8ad8c74a856bab7944b5e636212fc7f8d07ef74198dcc04a1a152afd php-dbg-8.0.30-1.el9_2.x86_64.rpm aa9348bafc720d8bfd27eef8c72f512f9a4a4e9f5bfa75cd83c609a401ace65a php-odbc-8.0.30-1.el9_2.x86_64.rpm b0992c9dc113f3a588fec9419efb4941a2b1eadd538cac1ce467b1a85107c837 php-bcmath-8.0.30-1.el9_2.x86_64.rpm b7dca412c4f18216a2d33c60c6ecf9f5e2b24b60d4314ac98f88c5724075aa09 php-opcache-8.0.30-1.el9_2.x86_64.rpm be13c19f1c56ee579f7bef5374d258b780467097808ea44bfcaea8fdae1f907e php-process-8.0.30-1.el9_2.x86_64.rpm c474acfd77e470bb322fc7df2b5628d939094aabe24946ca3e2d3e3e7ce1889e php-gmp-8.0.30-1.el9_2.x86_64.rpm ca5034547fab5904a836629e9eb856402abc61cbae6bf216b47044b8f615d731 php-common-8.0.30-1.el9_2.x86_64.rpm d3b6ac2075fd6de74781e90c285b94a1117c71e647e420209fb58a387e738179 php-mysqlnd-8.0.30-1.el9_2.x86_64.rpm de6806178ac1accf381419389e5126a97e8a2eb8ee30adbf3f1b7b1fa27d1c21 php-intl-8.0.30-1.el9_2.x86_64.rpm e6ff1a3e7e2defd329f94243e4623aadea26d417fdc230b3bebdafd61b5d191f php-mbstring-8.0.30-1.el9_2.x86_64.rpm e827cc7ded22ddb227f2bfe4868ae914745e2a3d5db86b2c42d4b4f1fb504870 php-devel-8.0.30-1.el9_2.x86_64.rpm ea3c66b193013a664de0f3ef88a386d776d8b6467e5ac9615a41e1c24a42b117 php-gd-8.0.30-1.el9_2.x86_64.rpm fd0f779941b21cd20bb7df22099fae75f55f5677ba0c1ffa5b2e67c1cca804eb ALSA-2023:5929 Copyright 2023 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default tomcat-docs-webapp-9.0.62-11.el9_2.3.noarch.rpm 15052a457e5a02c13b632e40d663552c7eeaa43949f4188f913d5fcc35530961 tomcat-lib-9.0.62-11.el9_2.3.noarch.rpm 2840a620c450c5cc1f26d502731a50db4f9a87765500b20e82b585ffd3f75a3b tomcat-9.0.62-11.el9_2.3.noarch.rpm 3f046469ad314431c93dbeee6b078949c4b9196c11e29e9ccf9afe0dd9cddcc2 tomcat-webapps-9.0.62-11.el9_2.3.noarch.rpm 5e8cc805aa41b20d650fa527d072c026129eb795df7176522e4d03c271443686 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.noarch.rpm 87ec492c0f03a96fab9e1ce8e7101eeb3d678e793faab35a1f1b75e6367912fd tomcat-admin-webapps-9.0.62-11.el9_2.3.noarch.rpm c54b65accf697229b7c23a36122c4b44acb172c36a1e60d13488c6099d47daa0 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.noarch.rpm ddf0cc650d2bc16bdf0aa3074264608925c24fe8e34cc61e5a7db3d11d1a1444 tomcat-el-3.0-api-9.0.62-11.el9_2.3.noarch.rpm e6f600319b870be925018c7741b514a3a49670686a5938608e844ea170397251 ALSA-2023:6077 Copyright 2023 AlmaLinux OS 0 1 Moderate

toolbox security update

The rhel9/toolbox container image can be used with Toolbox to obtain AlmaLinux based containerized command line environments to aid with development and software testing. Toolbox is built on top of Podman and other standard container technologies from OCI. This updates the rhel9/toolbox image in the AlmaLinux container registry. To pull this container image, run one of the following commands: podman pull registry.AlmaLinux.io/rhel9/toolbox (authenticated) podman pull registry.access.AlmaLinux.com/ubi9/toolbox (unauthenticated) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default toolbox-tests-0.0.99.3-10.el9_2.x86_64.rpm 43ab6debadbee4cf6d3c3fc64ff3caf9c9778f05e61a34e6b08454e4649580fc toolbox-0.0.99.3-10.el9_2.x86_64.rpm b962b53a690ab8c9ec781169d6bc16f2de3f68755d9dbd4a2202660ad0d788ec ALSA-2023:6120 Copyright 2023 AlmaLinux OS 0 1 Moderate

nginx:1.22 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default nginx-mod-http-xslt-filter-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.x86_64.rpm 251031cfdca8121e41d14bdbd1af0b437a594fd8ff8ef1277b71601d8be936c2 nginx-mod-devel-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.x86_64.rpm 2c87fa63db6b904224820ca02479b562a8fa55c8369eb454e6ed3051e366c976 nginx-core-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.x86_64.rpm 3b506503f691bf9b749f22de0f232b1be7e702fd959ff8bae1c616cf295a14d2 nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.x86_64.rpm 84caa88b190eb28f5d28eb8bbb9714caef2311d7674eb4c3b680fc9fdd7ddd38 nginx-mod-stream-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.x86_64.rpm a83733156c00d84939c8f27cc01137840f17224888ec8baebf694ea16609a780 nginx-all-modules-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.noarch.rpm aeb3236fb1a6ffd6ec0357beebae256ac1f87040d77ced91fa90e7ea61e1ee79 nginx-filesystem-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.noarch.rpm b6958158249f745572cda8ea2b11a8392750626ca99a882dea00d9ef34ffc439 nginx-mod-http-image-filter-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.x86_64.rpm b98884db537ecd7ff2775ecde35788711d02b2da1069cc0434f2746aba30a552 nginx-mod-mail-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.x86_64.rpm c98a2c9d1b0b04c7baa93a48ffc08302647515a8d4eaacd3ed480c6ca8d080d4 nginx-mod-http-perl-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.x86_64.rpm f3df4321ad5562604eab787475197c480d2041169d70db23e388b0f74e30cd90 ALSA-2023:6167 Copyright 2023 AlmaLinux OS 0 1 Low

libguestfs-winsupport security update

The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images. Security Fix(es): * NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libguestfs-winsupport-9.2-2.el9_2.x86_64.rpm 3da4548d1ee27cb4e09aebfd16d68e93018fa5cbfb49b6e4c6330db179c0653f ALSA-2023:6188 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.4.0 ESR. Security Fix(es): * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721) * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724) * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725) * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default firefox-x11-115.4.0-1.el9_2.alma.1.x86_64.rpm 46f129bf720ad973b78d0e69ad275555eb35be2d3fdde4167b471e0627a3ab6b firefox-115.4.0-1.el9_2.alma.1.x86_64.rpm a476c0403b8f38c269c37653929874d29f6be77a298c8846eb81929f7d17d57f ALSA-2023:6191 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.4.1. Security Fix(es): * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721) * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724) * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725) * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default thunderbird-115.4.1-1.el9_2.alma.x86_64.rpm 2782e62ef26f3bfdcba54e0eb9ecf13e64c3ccc31342c8979460a13abf049016 ALSA-2023:6242 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-templates-6.0-6.0.124-1.el9_2.x86_64.rpm 48ffbaadbfdf4237f7934da809a82f268b16c59eb801c02f83c574241bf630c0 dotnet-targeting-pack-6.0-6.0.24-1.el9_2.x86_64.rpm 59f05afc270158347ca8369a64c226356ac52018b08e5c1b785688ff4905da41 aspnetcore-runtime-6.0-6.0.24-1.el9_2.x86_64.rpm 931acdf48eea3d6c5c22aa11b513d648927568b0a21c9a017f782ae3fdffc89b dotnet-apphost-pack-6.0-6.0.24-1.el9_2.x86_64.rpm 9e41ab7c9f78515dd80c2b0564873cb6b95f37c8baa5be56176643cfb09767d1 aspnetcore-targeting-pack-6.0-6.0.24-1.el9_2.x86_64.rpm 9f0efcd46c47b6927675887ee51276ff853814722c5960d3de9efa0f42ed956b dotnet-hostfxr-6.0-6.0.24-1.el9_2.x86_64.rpm bac6512b462bdbf3eedc4f51743b06e6fad34448bbf2def1926420c971f364a2 dotnet-runtime-6.0-6.0.24-1.el9_2.x86_64.rpm c2be1f2341710f65a3977dcc3dc5b0c0554bbe69d475e2adb5284cc5fc8bf2c0 dotnet-sdk-6.0-6.0.124-1.el9_2.x86_64.rpm c641becd0326049f37772fa88efd823a8911a77995513ca428b7d57bc5e50d08 ALSA-2023:6246 Copyright 2023 AlmaLinux OS 0 1 Moderate

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dotnet-hostfxr-7.0-7.0.13-1.el9_2.x86_64.rpm 034812883915f4da3ad2b7c6bebb05eb3717ff01155df100c7c12adefb6a368b dotnet-sdk-7.0-7.0.113-1.el9_2.x86_64.rpm 2afc561e33dfcbd3b4a1afbd5ece9e326769c120f75e6bb1c588339f7369f37e aspnetcore-targeting-pack-7.0-7.0.13-1.el9_2.x86_64.rpm 3e6d25d68a9188996e42b9eee94e73a6144a9834dda199507f169dc77dde2cf8 dotnet-apphost-pack-7.0-7.0.13-1.el9_2.x86_64.rpm 445a884517fc66dc55734a0b7dc3f935a9f16da70ba0ae6a440986986334d4ad dotnet-targeting-pack-7.0-7.0.13-1.el9_2.x86_64.rpm 68ed3ea4314e00b34060c6c8e5f73646ed0ae4b92d2063f85bc773d91205a4dc dotnet-runtime-7.0-7.0.13-1.el9_2.x86_64.rpm 85dd9048ef0fd60757a42453db424f2b8fb63ad060bad04b1c59c2bf9f1d0950 dotnet-templates-7.0-7.0.113-1.el9_2.x86_64.rpm 8dec15519d13afa09b4095362c55b6d073113e3bf2a91f63a0f9a6d5b6b26300 dotnet-host-7.0.13-1.el9_2.x86_64.rpm 9b89b1abbf791a254ac36b0155c6eedbabd247c89f35fa8854ba3fb0fe0b2c45 aspnetcore-runtime-7.0-7.0.13-1.el9_2.x86_64.rpm b219e08f595521bb54c4089b652c3b420d501e67c55596b304f0464782bdd2b4 netstandard-targeting-pack-2.1-7.0.113-1.el9_2.x86_64.rpm d533fd9e7428f1ef9e4f4c4f8f80ecc5ad21518c69ea3b6d89f60714c387b5db ALSA-2023:6265 Copyright 2023 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libgs-9.54.0-11.el9_2.x86_64.rpm 13ca15fa11da1fbffdb023c54e24061fd5d6750f5bbe536e11c123a27d4cfb4e ghostscript-tools-fonts-9.54.0-11.el9_2.x86_64.rpm 212383fcfbc055a35a68c1e987706385ed552ae78df4c4a5c00b35187427af6d libgs-9.54.0-11.el9_2.i686.rpm 3ef194264959a30e368bbcc6d5b552e025afeff9af19300be6d811abab208149 ghostscript-x11-9.54.0-11.el9_2.x86_64.rpm 4d999e1af91635dc47f95cf9a0cb10edb5727045ffd1a5f541e52518d8c0d2fb ghostscript-doc-9.54.0-11.el9_2.noarch.rpm 5b8dfd10c092ca54f56c949f274b6669bafa753c0520d65e13991351018884e5 ghostscript-9.54.0-11.el9_2.x86_64.rpm ae740445dc454b1e57322e08122f12b8934b8c3316bb0143f4477a8c9fbfc774 ghostscript-tools-dvipdf-9.54.0-11.el9_2.x86_64.rpm cbb2a644f480d7267a28da594097b2bebd968b190482a2a3a96c4f116e7e4820 ghostscript-tools-printing-9.54.0-11.el9_2.x86_64.rpm f1eccde1383b25980fc12c31cdf7288629c5806fa5744383983a912eb1f14c7d ALSA-2023:6266 Copyright 2023 AlmaLinux OS 0 1 Critical

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) * SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846) * SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default squid-5.5-5.el9_2.1.x86_64.rpm 3e8a06d31e0c5cf15e42d466c954f3ff15433ecefda07ade4ac50cdbf8803d61 ALSA-2023:6324 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.11-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3.11-pip-wheel-22.3.1-4.el9.noarch.rpm f7537bf8b9a5a45c95276f850dc1856a345144d4bce317f62c67d67e764f531d python3.11-pip-22.3.1-4.el9.noarch.rpm fd34722a1fe8e4736de5eaeb450f8b85fb79323b61846de58407d9df71ab1ad8 ALSA-2023:6330 Copyright 2023 AlmaLinux OS 0 1 Moderate

edk2 security, bug fix, and enhancement update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() (CVE-2019-14560) * openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default edk2-aarch64-20230524-3.el9.noarch.rpm 7f420a2e6902aa83721973936da687385ce3f9a318f79cec650eaf58da03c9ed edk2-ovmf-20230524-3.el9.noarch.rpm cf00362ca3ecc9d6ce43ec1f21168c8524b96b2675854692c3afd7bf709e0918 ALSA-2023:6340 Copyright 2023 AlmaLinux OS 0 1 Moderate

xorg-x11-server security and bug fix update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default xorg-x11-server-Xnest-1.20.11-19.el9.x86_64.rpm 22fbe6facbfb006ee036bd41fda5af1d62dc02532512119bc8c061b7544aac6f xorg-x11-server-common-1.20.11-19.el9.x86_64.rpm 622f94ff1840d2e6f2bce1d7902b0b30e36747ff3f794019c7e8f636d1ea7612 xorg-x11-server-Xorg-1.20.11-19.el9.x86_64.rpm 6b8b16245ddf1d9f6fa6e0d86498a6d390fff82a8a96fad0ada2d06c0e6e1744 xorg-x11-server-Xdmx-1.20.11-19.el9.x86_64.rpm 7b2e008ab0c4912bbf375e4675f212dead1a2473e8fcf2cbcfa85cf09bf49f1c xorg-x11-server-Xvfb-1.20.11-19.el9.x86_64.rpm a3a71643b3df79d0f287707d2ff1f90def26fcb33d63abe25cae4a8478936c8d xorg-x11-server-Xephyr-1.20.11-19.el9.x86_64.rpm b0ab954a0eae06b856b8b00d9fd7093f55a4c3617b379d3ddc11088fcfb9dcf4 ALSA-2023:6341 Copyright 2023 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security, bug fix, and enhancement update

Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland (22.1.9). (BZ#2158761) Security Fix(es): * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default xorg-x11-server-Xwayland-22.1.9-2.el9.x86_64.rpm a17093beb779f67e1c3f269e710e3a86dba0e9cad7f95fa602208f559c4daa8c ALSA-2023:6343 Copyright 2023 AlmaLinux OS 0 1 Moderate

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp (CVE-2021-32142) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default LibRaw-0.20.2-6.el9.x86_64.rpm 626170b4cf00a2e7525d1b0cb0fcce4a4ad751ff22bd76471234cc28502fed6e LibRaw-0.20.2-6.el9.i686.rpm 66d6f19a1f3ec43e8f36553d6b3bdb2134b41207f4047b69e00a4427deb44168 ALSA-2023:6346 Copyright 2023 AlmaLinux OS 0 1 Moderate

toolbox security and bug fix update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064) * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default toolbox-0.0.99.4-6.el9_3.x86_64.rpm 461edd29647551d997fe4732bf4ee565b6a1fb4310f63db7c087a01ab8233ad7 toolbox-tests-0.0.99.4-6.el9_3.x86_64.rpm 4d56dcbf34f20e64089677511ef37220cd382c284a4aefd86b1d66f79756d648 ALSA-2023:6363 Copyright 2023 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: go/parser: Infinite loop in parsing (CVE-2023-24537) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default skopeo-tests-1.13.3-1.el9.x86_64.rpm 13b300b78d2c2bfaca6ca499bc94648f3a79c4d9cfa81347be52552ff2cd030c skopeo-1.13.3-1.el9.x86_64.rpm d1c4801fd5ddaf86963f140a4414ea6c42b1dc249530cba4f0a6e1cfda7d6c9e ALSA-2023:6365 Copyright 2023 AlmaLinux OS 0 1 Moderate

mod_auth_openidc security and bug fix update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character (CVE-2022-23527) * mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied (CVE-2023-28625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default mod_auth_openidc-2.4.9.4-4.el9.x86_64.rpm 7e93469e82148934c763c1bd09e279157ec5af8e2766d196cc4af4339b9fc219 ALSA-2023:6368 Copyright 2023 AlmaLinux OS 0 1 Moderate

qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a later upstream version: qemu-kvm (8.0.0). (BZ#2180898) Security Fix(es): * QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) (CVE-2023-2680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default qemu-kvm-block-rbd-8.0.0-16.el9_3.alma.1.x86_64.rpm 0ae9d08890b6513e2ad05b8dfe1bcd0b5077afc2e04f0287fd0b70f86ffb78a0 qemu-kvm-ui-egl-headless-8.0.0-16.el9_3.alma.1.x86_64.rpm 10ce51f927187ccd91849ef530d8b820d8a61e537b0b16651f44cdebd84cf9ea qemu-kvm-8.0.0-16.el9_3.alma.1.x86_64.rpm 141ac4aac050e8e62e8b560dc10137b9acbd277981e15fff2ef22882a5ebabc6 qemu-pr-helper-8.0.0-16.el9_3.alma.1.x86_64.rpm 21c35339ae50ee9c4c368c5479783f441dde8d8ccb85702fd3cb6e72a4ddbda7 qemu-guest-agent-8.0.0-16.el9_3.alma.1.x86_64.rpm 298ebd56f293c21b3b923a685dc66140c6470e238bf36635f95eb454905b8874 qemu-kvm-device-display-virtio-gpu-8.0.0-16.el9_3.alma.1.x86_64.rpm 33b98446374550c333e872518ca5f930697f25c6897babdf28b68f784a3377fa qemu-kvm-common-8.0.0-16.el9_3.alma.1.x86_64.rpm 3bd726ae66a45c16de2782974514116c5c4faf7157c2d56a57b76dc29f922a11 qemu-kvm-audio-pa-8.0.0-16.el9_3.alma.1.x86_64.rpm 3e400a1ee1546c12d5ef88c408541bb9dc481f0e1e88a1a96bd5ddf8597f8d83 qemu-kvm-block-blkio-8.0.0-16.el9_3.alma.1.x86_64.rpm 4cb9532691e74fa37b0e43bfb05fbf3bd719545c89d8936a37c72d713748e9df qemu-kvm-device-usb-redirect-8.0.0-16.el9_3.alma.1.x86_64.rpm 5fc33e5a400f74a6664a17d70c64f77214e2e35038fefe80bac06787155d430b qemu-kvm-docs-8.0.0-16.el9_3.alma.1.x86_64.rpm 62fc9ebe44e8fb120a32532f429c6e3c68b69652add6f3fdf79c0ecde250eadf qemu-kvm-device-display-virtio-gpu-pci-8.0.0-16.el9_3.alma.1.x86_64.rpm a03f93868915f09b842194255d469be844a79dd832f11c2b6075593a58755745 qemu-kvm-device-usb-host-8.0.0-16.el9_3.alma.1.x86_64.rpm a373b25c98b4ad9967aba1ea3dc773d41751f8124837fd6365f6dc584da6f457 qemu-img-8.0.0-16.el9_3.alma.1.x86_64.rpm c180f002e241ad8692bfe2cab5b34c1a309fec1b87e25092ae4a30a77daad86d qemu-kvm-ui-opengl-8.0.0-16.el9_3.alma.1.x86_64.rpm d17487d818d608bc50bae25a6c7ef8015a5b15adbd74a3992947f49038415fea qemu-kvm-block-curl-8.0.0-16.el9_3.alma.1.x86_64.rpm d9375ab87fd83d94a774275b552ff26ed9c08e5f13c1fdac85476d3a24a5ee4f qemu-kvm-device-display-virtio-vga-8.0.0-16.el9_3.alma.1.x86_64.rpm ddd652dfe1deb832879231f386bf35b6c4bc17c35582f7546f0c2f200cb9d151 qemu-kvm-tools-8.0.0-16.el9_3.alma.1.x86_64.rpm eb78e88d12a4a09fa379ebb7bb77d9e8e239228523a5c550c17bef13e77d32a4 qemu-kvm-core-8.0.0-16.el9_3.alma.1.x86_64.rpm faab111963530020e14b01519b02b9b1bfdc1bf8a9cc69b8e0491a7729dbd7db ALSA-2023:6369 Copyright 2023 AlmaLinux OS 0 1 Moderate

qt5 security and bug fix update

Qt is a software toolkit for developing applications. Security Fix(es): * qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285) * qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) * qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369) * qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197) * qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default qt5-qtbase-postgresql-5.15.9-7.el9.i686.rpm 06da4030bac33a9011c851439e72f0d7f0153bea0e7ba0ec3feb200cdb573f83 qt5-qtbase-devel-5.15.9-7.el9.i686.rpm 12b7de1429b07a73d55ca8f1398d85b13a6895b0f2f0d06868e00a82e6b86bc7 qt5-qtbase-gui-5.15.9-7.el9.x86_64.rpm 1549ec825be4a466874fd83ca7a29ed9a6dacbcc91d9c2171a0b356167070ca6 qt5-qtbase-5.15.9-7.el9.i686.rpm 1ae3ef56a4623373b0c220ef4938095a13c678463bfaf7c62bd2f246650c117c qt5-5.15.9-1.el9.noarch.rpm 1f03d500ce4714c52ed14b451049fb3d7f5102f275757c4803eeb326399f2988 qt5-qtbase-mysql-5.15.9-7.el9.i686.rpm 2d29fa012c051f8291fdfa4b9fd2b3d09c5d159d89a09d0358150ec0874479ca qt5-qtbase-odbc-5.15.9-7.el9.x86_64.rpm 41f3c870851fa3d9c05258cccb6e5e9e68d3066554a9f498d0d955dd2e884887 qt5-qtbase-odbc-5.15.9-7.el9.i686.rpm 7431960e17fcd08970c5e5a123c6962d78339ef8da727cdfaceb1dafc9318680 qt5-qtbase-private-devel-5.15.9-7.el9.i686.rpm 7a9aed79ea006460b2421568eef342f4edd0797f4eb74a379a0b68301abbe357 qt5-rpm-macros-5.15.9-1.el9.noarch.rpm 85144a67944d2d6c361c5da835b48399ff7ca39422027661915f58d0a7389f65 qt5-qtbase-postgresql-5.15.9-7.el9.x86_64.rpm 9fbb015f9f3ec2f00e8934905c831a7e19438fe1d3cb686ee1efbfab281e35a6 qt5-qtbase-common-5.15.9-7.el9.noarch.rpm b4c263414cb34747e04caa5ec17718554621b059ac6e2aec604a7834cb244a03 qt5-qtbase-gui-5.15.9-7.el9.i686.rpm b8366a26346ed5063b2774ef7a96f51a037dc3c8fbd1c05a217ff36757e0450b qt5-srpm-macros-5.15.9-1.el9.noarch.rpm c1f1403eebef89590fa960c668ba4b970b2cd83ca98034e4528831c1a05e8e78 qt5-qtbase-5.15.9-7.el9.x86_64.rpm c27deaf45b8842a4105c2e258d4e29967a8a346f8d1ce3434b25bd0d1e65a604 qt5-qtbase-private-devel-5.15.9-7.el9.x86_64.rpm c63d601bfb2c4c5ec1ea52e5311f4d701c1bcea6d876bc927db435c9b67bb999 qt5-qtbase-mysql-5.15.9-7.el9.x86_64.rpm cf42c56c016ffeb0a8b331041441dae12ce49db1bc5cb1d603e9401a35b33cb3 qt5-qtbase-examples-5.15.9-7.el9.i686.rpm d11c1b653a9fd3379d424434635819ab6f8c564f777e405fc02094031a862480 qt5-qtbase-devel-5.15.9-7.el9.x86_64.rpm d313094af613168ed0687e5fb8d97fe13294a9b474b5dc252961df46fea7d491 qt5-qtbase-examples-5.15.9-7.el9.x86_64.rpm d85fb820a5bf0ae341b0701a5cc1aa7df82db06d124b0a49108884882dcbfefa ALSA-2023:6371 Copyright 2023 AlmaLinux OS 0 1 Moderate

cloud-init security, bug fix, and enhancement update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Security Fix(es): * cloud-init: sensitive data could be exposed in logs (CVE-2023-1786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default cloud-init-23.1.1-11.el9.alma.1.noarch.rpm 6543f9ac6dcf5896078fa6905c1b1017b73bd5ecc60d43d41be4af868aff8d4e ALSA-2023:6372 Copyright 2023 AlmaLinux OS 0 1 Low

gdb security update

The GNU Debugger (GDB) allows users to debug programs written in various programming languages including C, C++, and Fortran. Security Fix(es): * libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c (CVE-2021-3826) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default gdb-10.2-11.el9.x86_64.rpm 3521f618bd971a5f214627d17ed82036f68c07c182aedefc7bef1eddecda390a gdb-headless-10.2-11.el9.x86_64.rpm 442548635eea8d38082a5150eec8a3c23d3ccbf963c9632ce09e166a6b34bc26 gdb-doc-10.2-11.el9.noarch.rpm 4f4578cb4c9bb950fd98a4091523de664e12486835a8a6f75653a2e05c5d0f21 gdb-gdbserver-10.2-11.el9.x86_64.rpm 681b6c05d22317a4bac5a661a7d8b2351165b659427e21d795d132c76429123a gdb-minimal-10.2-11.el9.x86_64.rpm dce2eaaf0a51d0aab30ae56288fd89472a0321529e6be454ce1b66cdaee8fadb ALSA-2023:6380 Copyright 2023 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809) * runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561) * runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642) * runc: integer overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration (CVE-2021-43784) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default runc-1.1.9-1.el9.x86_64.rpm c0429c7fe2ad7bdd76fc6e46b2625c44221267766ab886a265a9ed0c7619ecd7 ALSA-2023:6385 Copyright 2023 AlmaLinux OS 0 1 Moderate

liblouis security update

Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg). Security Fix(es): * liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767) * liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768) * liblouis: buffer overflow in Lou_Trace (CVE-2023-26769) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default liblouis-3.16.1-5.el9.i686.rpm 0b8b80505f602660555f45951bc75aeb06b303dce975d4ccad61195130ac6b38 liblouis-3.16.1-5.el9.x86_64.rpm 4c6b56204aa51c7ccb1a98b2a383785ec351d7a8cba926ecbfd1018eaa1e204a python3-louis-3.16.1-5.el9.noarch.rpm dd703bb9638c42a1ee89c9b39b2a03a38401268451406ff132cd8470daa88d78 ALSA-2023:6402 Copyright 2023 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security and bug fix update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default containernetworking-plugins-1.3.0-4.el9.x86_64.rpm bd71dc584a8e67a61aa07666f1cdcc94a276728b0c4c9e68e6f001f6cd61961a ALSA-2023:6403 Copyright 2023 AlmaLinux OS 0 1 Moderate

httpd and mod_http2 security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following packages have been upgraded to a later upstream version: httpd (2.4.57). (BZ#2184403) Security Fix(es): * httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default mod_ldap-2.4.57-5.el9.x86_64.rpm 0d8c8657c2732d08abfa2edeace6291cadace0a12063bd9fe3ed15916ce95897 httpd-filesystem-2.4.57-5.el9.noarch.rpm 32e094505ffe7810a951b4ad337509c1d1dfda74acf8509405d2053e224a57e9 httpd-devel-2.4.57-5.el9.x86_64.rpm 3b798455d09121a9b1602c9be76df161b126bc36c3dbfce1104d4b35a3c7498e httpd-2.4.57-5.el9.x86_64.rpm 3d7ab3ddad3180cc315cda2df7e180925569a4847067132cd2daabd7d36b958c mod_proxy_html-2.4.57-5.el9.x86_64.rpm 5b7b7edb4c36dc0a1bfab4ae8c24cfd73d7820625c9ec38a6407e81b33234c23 mod_session-2.4.57-5.el9.x86_64.rpm 68d55661acdb0eb07a762a2a38837f234c6277099da3cd6f887c1e019f6741a1 mod_lua-2.4.57-5.el9.x86_64.rpm 901308d23d9d828ce7e1f13672eeb9859438338f6f54a17045f827b4c6926bd5 httpd-manual-2.4.57-5.el9.noarch.rpm b242a56538be35818ce6fd9ce455c42ad770d5e54f8cc7c8d1b8d971b70f7972 mod_ssl-2.4.57-5.el9.x86_64.rpm de12c872a495793879ac3b0b94036ff36dbcb4be30dfa32961ec54aa3cfdaf10 httpd-tools-2.4.57-5.el9.x86_64.rpm e2945015e7cfc2cba98f9dd10fd2cb264583f672dd56428f969863cd311c11fb httpd-core-2.4.57-5.el9.x86_64.rpm f9e8e748b676bbdc585e6361bf09e676c212e75f357819bcb343d1d92f0cc345 ALSA-2023:6409 Copyright 2023 AlmaLinux OS 0 1 Moderate

libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785) Security Fix(es): * libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libvirt-daemon-driver-storage-disk-9.5.0-7.el9_3.alma.1.x86_64.rpm 021647829fa4c3d5893f0f49b1229892f66e47807f2fe6140516eabbe06bf285 libvirt-daemon-log-9.5.0-7.el9_3.alma.1.x86_64.rpm 02eb7a4dd06a9db7e054b648232baf9ce2b2480ab07807f133386f35e2fa183e libvirt-daemon-kvm-9.5.0-7.el9_3.alma.1.x86_64.rpm 16dc21bbb4de09c0f4b3214765d40380083e9b0c1e5b88d904b10246eb6566cf libvirt-daemon-driver-storage-rbd-9.5.0-7.el9_3.alma.1.x86_64.rpm 2360b30721ac63f00e7d1a2a3372de522df3539303180c2b8379e224cb84102a libvirt-client-9.5.0-7.el9_3.alma.1.x86_64.rpm 2477e36538425a6ca7849a364aaa693eb41a96401447e4709d1db43afc1a69cb libvirt-libs-9.5.0-7.el9_3.alma.1.x86_64.rpm 24f3ec9fd347a4374a06ec57c65118d4e1846d86559a23db646f325ae8e32827 libvirt-daemon-config-nwfilter-9.5.0-7.el9_3.alma.1.x86_64.rpm 25b44eb980b4e3ab33996f2dad151d183c027b5986af7f8c2a7aba219c9b8fa3 libvirt-daemon-driver-interface-9.5.0-7.el9_3.alma.1.x86_64.rpm 3c7034042de66fff0ec83f5d2f54781eb194698977c9ebaa69aadee18c06b9d7 libvirt-daemon-9.5.0-7.el9_3.alma.1.x86_64.rpm 3d26d3c54a3e8ae69d4d33982e7c3f751e4901065a6f2205ac55b84f4fcd0371 libvirt-daemon-driver-storage-scsi-9.5.0-7.el9_3.alma.1.x86_64.rpm 4648f47bede295aacf5956c8ebf7716a05818403ccf0d8ac6befdbeb27c64691 libvirt-daemon-driver-storage-logical-9.5.0-7.el9_3.alma.1.x86_64.rpm 4d15d805c986584f147219b42fb477e2c75d87bf7e85d6d6aa7c2c8ab7da6472 libvirt-daemon-driver-secret-9.5.0-7.el9_3.alma.1.x86_64.rpm 58a84cd0338132d5c431a3ee1a34e18827bdfe1031304f71005ba47b8daac4db libvirt-daemon-common-9.5.0-7.el9_3.alma.1.x86_64.rpm 6599e6bbc416ea8925bdabb5a371b2c515de6c36b5b9a8efcbe78712c44e382c libvirt-daemon-driver-nodedev-9.5.0-7.el9_3.alma.1.x86_64.rpm 6cd89d90d6f620811ebe5fda21ccde0b7d515dbe04a8afd8a2f0313ca8bc6db4 libvirt-daemon-config-network-9.5.0-7.el9_3.alma.1.x86_64.rpm 80d9c0c570022b098258d16382c25b706f0382a3bb39543a92edcdd02b66c375 libvirt-daemon-driver-network-9.5.0-7.el9_3.alma.1.x86_64.rpm 8bbdbc412d88a94c9fa03a24420438520db98d888dc0ed12647b1fca70cb9ee0 libvirt-daemon-lock-9.5.0-7.el9_3.alma.1.x86_64.rpm 8be2321d9340be5fd735c100743066645d5917405672de21c01af9442fca448c libvirt-9.5.0-7.el9_3.alma.1.x86_64.rpm a65fdcb729cec5209d39b5e1713ce50a792cab046a43ceac49c6318f51f7c25f libvirt-daemon-driver-storage-9.5.0-7.el9_3.alma.1.x86_64.rpm bde068c5f499f7943205dcbcb8ccc4adce67197054b59b6de6a70cd7e599bd73 libvirt-daemon-driver-storage-core-9.5.0-7.el9_3.alma.1.x86_64.rpm c0933db395d6bc83a061c376eaa0223579006ab4974878b6778bcbb17f6bfeaa libvirt-nss-9.5.0-7.el9_3.alma.1.x86_64.rpm c7c5d1016b26728b99ebf512d30e8bf966f7408ed4ed733a27ba275bfe75fe1c libvirt-daemon-plugin-lockd-9.5.0-7.el9_3.alma.1.x86_64.rpm ceb95442bfb8f0276d9d73e7e23b3a0eb347949ad36c0cd115f873099952dfb4 libvirt-daemon-proxy-9.5.0-7.el9_3.alma.1.x86_64.rpm ebd35d4d48a9ca2ea4f689d54fc28218fc86c176aff97fdf6c876cc48db60b8f libvirt-daemon-driver-qemu-9.5.0-7.el9_3.alma.1.x86_64.rpm eec41227b03a6f33e7e2ef9d5e74aba9ada2e378f8fa9dc8bf52f127f0f2926d libvirt-daemon-driver-nwfilter-9.5.0-7.el9_3.alma.1.x86_64.rpm f1df14e5f9fa39a7eba0a3375725dd0b0090e62796b04cb003ae3da0dcdb5033 libvirt-daemon-driver-storage-mpath-9.5.0-7.el9_3.alma.1.x86_64.rpm f947984f534ed5779150a0180fcfec4d52cf233184901b8ca67be9aff1b5bd8e libvirt-daemon-driver-storage-iscsi-9.5.0-7.el9_3.alma.1.x86_64.rpm fdde7f04fa9266a14cb344346e74c61f12aacdd1b1bcf8b39bd781124245bc16 ALSA-2023:6420 Copyright 2023 AlmaLinux OS 0 1 Moderate

grafana security and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: persistent xss in grafana core plugins (CVE-2022-23552) * grafana: plugin signature bypass (CVE-2022-31123) * grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins (CVE-2022-31130) * grafana: Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins (CVE-2022-39201) * grafana: email addresses and usernames cannot be trusted (CVE-2022-39306) * grafana: User enumeration via forget password (CVE-2022-39307) * grafana: Spoofing of the originalUrl parameter of snapshots (CVE-2022-39324) * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default grafana-9.2.10-7.el9_3.alma.1.x86_64.rpm 79ba80aefdd8291999cfeaa1d3a19e309ee162216b148ca86200ea4935c0af35 ALSA-2023:6429 Copyright 2023 AlmaLinux OS 0 1 Low

libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libpq-13.11-1.el9.i686.rpm 07a0cfd17af6336a83611a46c4555652344b2c45f26b83e7501902fb5705cb48 libpq-devel-13.11-1.el9.x86_64.rpm 6b473d2e208dd380320d26295a1f140403cd84973c5f3dc0c7ce91610e585709 libpq-devel-13.11-1.el9.i686.rpm 72df89a91cc614ce5c1c015a4a4ced3bf0fbf1f492b56fdace8ad87d21d40a06 libpq-13.11-1.el9.x86_64.rpm b678679df83ef63c67277134379f6f46885438b7e87d42b8cb6abe5c69c6a581 ALSA-2023:6431 Copyright 2023 AlmaLinux OS 0 1 Moderate

libfastjson security update

The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects. Security Fix(es): * json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libfastjson-0.99.9-5.el9.i686.rpm 1e74c7d6ad097677157863d4cc259bf3c45a7b6e2de7e15673dcb385dba3f0cf libfastjson-0.99.9-5.el9.x86_64.rpm 9fde7e1944cd59a388d257511d89b0431c8409189d4020a702fcb818dc9a8ad7 ALSA-2023:6434 Copyright 2023 AlmaLinux OS 0 1 Moderate

frr security and bug fix update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: Reachable assertion in peek_for_as4_capability function (CVE-2022-36440) * frr: denial of service by crafting a BGP OPEN message with an option of type 0xff (CVE-2022-40302) * frr: denial of service by crafting a BGP OPEN message with an option of type in bgp_open_option_parse in the bgp_open.c 0xff (CVE-2022-40318) * frr: out-of-bounds read exists in the BGP daemon of FRRouting (CVE-2022-43681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default frr-selinux-8.3.1-11.el9_3.alma.1.noarch.rpm 870b0f8fe1790980445cc04b697f5bc1d76221d1f374500912df87374d47bb49 frr-8.3.1-11.el9_3.alma.1.x86_64.rpm a1b2a43d20c46a8653536154d2c0e7c79acab500d995edce206abfd368a49a7a ALSA-2023:6469 Copyright 2023 AlmaLinux OS 0 1 Moderate

wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: RTPS dissector crash (CVE-2023-0666) * wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668) * wireshark: Candump log file parser crash (CVE-2023-2855) * wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856) * wireshark: NetScaler file parser crash (CVE-2023-2858) * wireshark: XRA dissector infinite loop (CVE-2023-2952) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default wireshark-cli-3.4.10-6.el9.x86_64.rpm 70e3ec86577a4d27054d84cf2827cdc15135dc49acb509d06fac00860def1592 wireshark-3.4.10-6.el9.x86_64.rpm e313181d7e891c6801f414af6b26fe9c3025ce0dde26f93497990ed980ec930e wireshark-cli-3.4.10-6.el9.i686.rpm f9807c65159aa0e1d03d2f8c93ece61aa9ae11ddcd657d61914abbb3974f4834 ALSA-2023:6473 Copyright 2023 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * containerd: Supplementary groups are not set up properly (CVE-2023-25173) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default buildah-tests-1.31.3-1.el9.x86_64.rpm b033d8d848956b135b20b6c695d84981a84ee22b5d2c63ae15eec9917fde1dd4 buildah-1.31.3-1.el9.x86_64.rpm cef09cd8f61aba3f56ffd3b5b9a45b59488d1d085042100c3bb3c9ecb2f0329e ALSA-2023:6474 Copyright 2023 AlmaLinux OS 0 1 Moderate

podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang.org/x/net/html: Cross site scripting (CVE-2023-3978) * golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534) * golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) * golang: go/parser: Infinite loop in parsing (CVE-2023-24537) * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538) * golang: html/template: improper sanitization of CSS values (CVE-2023-24539) * containerd: Supplementary groups are not set up properly (CVE-2023-25173) * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) * golang: net/http: insufficient sanitization of Host header (CVE-2023-29406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default podman-4.6.1-5.el9.x86_64.rpm 04fc87e6275c29790c9d8e9c9a120dd0944c2b665cc3d0944b743168d09448ff podman-docker-4.6.1-5.el9.noarch.rpm 26f969f6a921d0cce1dc6f9a5627c4710c59afb8598dad1ecc10b200fd5ebf9c podman-plugins-4.6.1-5.el9.x86_64.rpm 483b8086815ac3a3bed2579ef130eaa3e7e21330b19508122eb9850ab3e3612c podman-gvproxy-4.6.1-5.el9.x86_64.rpm 5435eb2819a3f244631963c9a3e10c50accdaf41fba512aed6b21c4a4d2318c0 podman-remote-4.6.1-5.el9.x86_64.rpm c5a32f7d1a5f6a124185a19519acf4e3d1b502d8dfe2e8afad0fe72bf4a40277 podman-tests-4.6.1-5.el9.x86_64.rpm c72edd12c9a6b75f0bc82fa64a4da2e28c4bb734e2d36441f684c6355927bacf ALSA-2023:6482 Copyright 2023 AlmaLinux OS 0 1 Moderate

librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default librabbitmq-tools-0.11.0-7.el9.x86_64.rpm 632ea79712aa20079359d3e728a4b9f9c2aa7d323ba1d7a79f746485e50d9ec8 librabbitmq-0.11.0-7.el9.x86_64.rpm fa27171c27447d95d8655bdcd7c30d14cda80b841acf9c2b1d1edc5c1c463aad librabbitmq-0.11.0-7.el9.i686.rpm fe386f6d10c8787d132677906d9a8915ea57fed941460dcfba3f18800ba0b2e0 ALSA-2023:6492 Copyright 2023 AlmaLinux OS 0 1 Moderate

tang security update

Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The tang package provides the server side of the Network Bound Disk Encryption (NBDE) project. Security Fix(es): * tang: Race condition exists in the key generation and rotation functionality (CVE-2023-1672) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default tang-14-2.el9.x86_64.rpm df4a81862c840876cf78ed64de19a40a02de6d088d0ae2e7e02f8b38b3ad8a99 ALSA-2023:6494 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python3.11 (3.11.5). (BZ#2210785) Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) * python: file path truncation at \0 characters (CVE-2023-41105) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3.11-libs-3.11.5-1.el9_3.i686.rpm 1be35f7ea0d385df290eaeda546fabd964d8f8b029b39d6a6c26be0b06b12d41 python3.11-tkinter-3.11.5-1.el9_3.x86_64.rpm 25828b52da504e00403bf41d0a0121f0a3b0d0a02b4f33437c1fdae27238fa03 python3.11-libs-3.11.5-1.el9_3.x86_64.rpm 3c8a75e365dafaa2058d51f6a4a5c7ad63532d3d7dec5ae152b91689bc9f9288 python3.11-devel-3.11.5-1.el9_3.i686.rpm 3e8755481d7fe68716224c3e9f7768c86589c7497b92b0a16b632e7664070611 python3.11-3.11.5-1.el9_3.x86_64.rpm 3f004448953633da513f60a84162826de29b6619bc9a1799385628c38525dd26 python3.11-devel-3.11.5-1.el9_3.x86_64.rpm 498753ceeb4e430b41bdfd6d539241a5237d828e0e7981299301b3c41f8711f8 ALSA-2023:6496 Copyright 2023 AlmaLinux OS 0 1 Moderate

haproxy security and bug fix update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: data leak via fcgi requests (CVE-2023-0836) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default haproxy-2.4.22-1.el9.x86_64.rpm 68dc2ac9d44a4e4e359ddedac4ad239460e797dbc8be719eea742f97c167a3b6 ALSA-2023:6497 Copyright 2023 AlmaLinux OS 0 1 Moderate

libX11 security update

The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow (CVE-2023-3138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libX11-common-1.7.0-8.el9.noarch.rpm 0cbe5dfc32d4d9fd68abb0d3e4e891a8dc0382f63aca1d7ba16dc3ee21fa971c libX11-devel-1.7.0-8.el9.i686.rpm 63207c18443796ea200735e43d9d7250575bc4699366f8c078e6650fd69b2548 libX11-xcb-1.7.0-8.el9.i686.rpm 7786dff5e7316bb021e736e51fbc43c657de1bd6900926d1a6ca69f0fd8706cd libX11-devel-1.7.0-8.el9.x86_64.rpm 78d79239ef1cc166e957a1a016b19f950466b8c40331c4ecfbb2578ca415067c libX11-1.7.0-8.el9.i686.rpm b3f1f78af93fc0d326b4b23c4b39d3c3638dddc86d084ebb886025fb402877dd libX11-1.7.0-8.el9.x86_64.rpm cb573a2963cb9d749247248a1e695bde9a941ef560e83d759965fe3231b2c9b3 libX11-xcb-1.7.0-8.el9.x86_64.rpm efeaee346b5cc4484e710ec99dd792515c335bfe654b5f15efbc7cd3af4d99cf ALSA-2023:6508 Copyright 2023 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: Empty entry in Java class path (CVE-2022-38745) * libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950) * libreoffice: Arbitrary file write (CVE-2023-1183) * libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libreoffice-help-si-7.1.8.1-11.el9.alma.x86_64.rpm 017db7de76ec00fd1d0b3d9fb5700e789eae651d2fbc577bb3b37618ad4ca438 libreoffice-langpack-nr-7.1.8.1-11.el9.alma.x86_64.rpm 03a06a61645003431cc5411eaa146748031dc0e2a832b23f4c488ec4ec706082 libreoffice-langpack-pl-7.1.8.1-11.el9.alma.x86_64.rpm 0455b761025a08e07f838d666ef30d490dccdfc08037fd46ad451ab4b8b8331e libreoffice-langpack-or-7.1.8.1-11.el9.alma.x86_64.rpm 0973f50dafbcf27c982e1f8e9001b2d850e55d615f664c12315e15646bb70bdf libreoffice-langpack-lt-7.1.8.1-11.el9.alma.x86_64.rpm 0a464e5f32408206cedd75664b779c6aa1058f6a6dfb7c94dcee5d7bf2d53abc libreoffice-help-lt-7.1.8.1-11.el9.alma.x86_64.rpm 0cd20ce72fc1a3490115921882015d464a6bf68f02892c843aca7ee690842f16 libreoffice-help-nb-7.1.8.1-11.el9.alma.x86_64.rpm 0dce5785b4d56cdc88f3315a68bc5ada2cff6d0e9737a1fbeebe11c1908158c0 libreoffice-help-de-7.1.8.1-11.el9.alma.x86_64.rpm 0e04104c5f7b3c8915b8bbbdca4f5dcdada81ff9482fd46af53059da4b2bfbc0 libreoffice-langpack-te-7.1.8.1-11.el9.alma.x86_64.rpm 0e74a875ca9363246cccf2cf50fb2ea44f77050c0461bf99bed1370b59838734 libreoffice-langpack-id-7.1.8.1-11.el9.alma.x86_64.rpm 0f591305b05f3f2678b9b53425c9a03eb7e162b6b79bde0ab5909af2b6564460 libreoffice-help-ar-7.1.8.1-11.el9.alma.x86_64.rpm 117171e08f2a7aa26121ab8ad017b06cc7128c6b356f1b92617bd01eeeb7788b libreoffice-help-cs-7.1.8.1-11.el9.alma.x86_64.rpm 133e7e82edbe235355e7f2a175e887881c133d2453f69afc73f491bea42fc5ec libreoffice-help-nl-7.1.8.1-11.el9.alma.x86_64.rpm 135f151e976075d499e084860930066e3a70a36563841f66000760d86c61bf9c libreoffice-help-et-7.1.8.1-11.el9.alma.x86_64.rpm 16fbfc5f62187b782eb80a454d1886920d9172963dc83ed39e36350618a4eed3 autocorr-it-7.1.8.1-11.el9.alma.noarch.rpm 175366613442c2ede926c09391f3770d8eb7ccb977987d9d20c3e8da9660988d libreoffice-help-ko-7.1.8.1-11.el9.alma.x86_64.rpm 195ad096eab10477a4d72841927644602786ca1cf71e4f38e8c03db77e9a7597 libreoffice-langpack-ts-7.1.8.1-11.el9.alma.x86_64.rpm 19876da010e7503a3bf1286fa1b6bf014caef8b3bc8c823f2047495176e2d9e6 autocorr-sv-7.1.8.1-11.el9.alma.noarch.rpm 1b7dd0cd6bb741b1562ac7be47182262e78d08c6f2ee20ac115bfde2f7ab8423 libreoffice-langpack-fi-7.1.8.1-11.el9.alma.x86_64.rpm 1d07df2fe4968d02f5689a0f21f5cb289388bf47551560154c6966b1dbb120a0 libreoffice-7.1.8.1-11.el9.alma.x86_64.rpm 1da3b56e566a70a86a769544ee6c167867477037677eac359f66e84772db376e libreoffice-langpack-ca-7.1.8.1-11.el9.alma.x86_64.rpm 247c0522eac05c962e4a33e857b506f4db55e4383bc1c9a29df558c215561b12 libreoffice-writer-7.1.8.1-11.el9.alma.x86_64.rpm 2b88f456b9f9696085e777f614cdc8f44bd9ac5a0e9fd3896d73cfef4df8e807 libreoffice-langpack-et-7.1.8.1-11.el9.alma.x86_64.rpm 2c1530d978233f941582d02d1cee973fd01f05499de2f74aea10414e48385d23 libreoffice-help-bg-7.1.8.1-11.el9.alma.x86_64.rpm 2c327ac33be70f8fbe06a5b06cd8d10d00cd9304dfd50c5dbd5de644f5ea519d libreoffice-help-ta-7.1.8.1-11.el9.alma.x86_64.rpm 2c42e90c911b6c6ee09832c0cda9eebee58a706a9a728125f6a1ee2672ad24a0 libreoffice-langpack-ga-7.1.8.1-11.el9.alma.x86_64.rpm 2db536aa32660b0786a6e1815a61099763c4ff7192400474a0b7dc0d980c7df5 libreoffice-langpack-eo-7.1.8.1-11.el9.alma.x86_64.rpm 3006c1a6a6ce17afe988f964c9f632c6861e64b5c7150c933820b75d83c8cd0b libreoffice-help-lv-7.1.8.1-11.el9.alma.x86_64.rpm 30896e830852a161e1137254501d0ad3956725063f489223152b26adfb61582d libreoffice-ure-7.1.8.1-11.el9.alma.x86_64.rpm 30f31c9c6dc80dcfce1d4d1a201791504ec0384110b6fd17ff0ccdd829867a1c libreoffice-help-sk-7.1.8.1-11.el9.alma.x86_64.rpm 32edffd5f871d2e2d4218a0feac9c55e83461e7f94a6d149c3162c7452994da5 libreoffice-data-7.1.8.1-11.el9.alma.noarch.rpm 33ef81fbfdaec7ebca6459a959adfc5c49c9dbb53f751e330fcc3e0ee525602c autocorr-fa-7.1.8.1-11.el9.alma.noarch.rpm 3469e833acb24319587667bc6104ddc4fc10eb8e0e6d73abdb9f2fe34fe8c0a3 libreoffice-help-hu-7.1.8.1-11.el9.alma.x86_64.rpm 351f01b56ef70a6fff2eca171beea079230016ff6b28fb67947a66aaf28d276e libreoffice-langpack-dz-7.1.8.1-11.el9.alma.x86_64.rpm 35664c266dab4c82c9a1bdff9d5eadf35cdccb6c9fd722852cec11becd95fbb5 libreoffice-langpack-bn-7.1.8.1-11.el9.alma.x86_64.rpm 3764ce63496150ba2b352065eb404ac8fb9995edf8ce8ec8545d6aeb0024da29 libreoffice-ure-common-7.1.8.1-11.el9.alma.noarch.rpm 39f23bab4dd7afbd82b9ec80279ec948c75b5a5eff554c0296bd1f94aa2c4bdd libreoffice-langpack-xh-7.1.8.1-11.el9.alma.x86_64.rpm 3aa389e4658d2a3a5779d062a161c237c39ad86918881568d51464cf96d016d4 libreoffice-langpack-sk-7.1.8.1-11.el9.alma.x86_64.rpm 3b669d1d5dbbf3c03ab4bc976a30973d9f65c21aeab347481f71f87af01a6168 libreoffice-langpack-ko-7.1.8.1-11.el9.alma.x86_64.rpm 3bb0dde717612543859eedee6de83d459bc3d129f90d7de08b636905bf15fb5a libreoffice-help-eu-7.1.8.1-11.el9.alma.x86_64.rpm 3e0b4ecec3643718f996316cb34c552fdc755eace08cc24f3aee3e25fcedb419 libreoffice-langpack-fr-7.1.8.1-11.el9.alma.x86_64.rpm 42aa633ec091842b92307650a6c53e48b03cef700bb4afb0727170cf691c09aa libreoffice-help-ja-7.1.8.1-11.el9.alma.x86_64.rpm 43bafa9825b91652c5b8482f1449f797f7529a3c1df85ae8d14edf5c8f13d36f libreoffice-langpack-sv-7.1.8.1-11.el9.alma.x86_64.rpm 45e88dcc20ef006bf8b0b731a5e3c536694be4cf2e20c51774f7999f8b325c38 libreoffice-help-gu-7.1.8.1-11.el9.alma.x86_64.rpm 46d84c38cc927e44008c0285288eb5731c24ae204233ed3e4055078889fc3ee7 libreoffice-langpack-de-7.1.8.1-11.el9.alma.x86_64.rpm 486ecc2a26e3b2ca3014448e1664b5ac0fede4d18ea180a02b7abf984c8f3a5d autocorr-dsb-7.1.8.1-11.el9.alma.noarch.rpm 48dcfc54fad03b1e2c99903b276fcafc6c853000db1e1c50e6fa0067b3db25c0 libreoffice-langpack-as-7.1.8.1-11.el9.alma.x86_64.rpm 4a05d18e3d13cf68272a5ec7f47b2bc0935a34c14bafdd59af4b3307812c2ed0 autocorr-vro-7.1.8.1-11.el9.alma.noarch.rpm 4bd307452231df9c79f3d319e8b90a39a6fdfdb9f580064aa55870acfe37c597 libreoffice-langpack-af-7.1.8.1-11.el9.alma.x86_64.rpm 4d5666c4953b7f874b44ae79e519890ecabe821149f80c7aaf7e79431eacefc7 libreoffice-emailmerge-7.1.8.1-11.el9.alma.x86_64.rpm 4da4065140f3df1d24251dce42e671e1ee092fdaf8913cb366ea6612ee6b68a5 autocorr-en-7.1.8.1-11.el9.alma.noarch.rpm 4de5a01d8a169ea663b8abc6ce726ccc47687d4c329364934db81179cb50c9a3 libreoffice-langpack-hu-7.1.8.1-11.el9.alma.x86_64.rpm 4ea1535edc6c02928d0f17d4a6868c99ffd88ca017a9e1186f382e8aced72365 autocorr-mn-7.1.8.1-11.el9.alma.noarch.rpm 52ec501acbfc74b8c268aea934283ae1a4e744b6f6074d6922172f041fac1aaa autocorr-hsb-7.1.8.1-11.el9.alma.noarch.rpm 530beb7dd3075435af495db66c9aae85735e2d90f02613e5181df1ee93fa4784 autocorr-bg-7.1.8.1-11.el9.alma.noarch.rpm 543673bc32f764072de6dd9d1b705f28fdb12b7371ab80946b0d200ec2aeda1f libreoffice-langpack-el-7.1.8.1-11.el9.alma.x86_64.rpm 5606af6138781aa7af29fd50b6ac0c12ddb44902f69676e8b9e36ffca755522b libreoffice-help-el-7.1.8.1-11.el9.alma.x86_64.rpm 576d9905641e3a4a7885efb64bd45b744c7be80c16167e5f4002b7119f7ee98b libreoffice-wiki-publisher-7.1.8.1-11.el9.alma.x86_64.rpm 57be8320cc880ec4a529fa861305c9602e91dd29fc0ac8f8750a5f24e328ef6b libreoffice-help-eo-7.1.8.1-11.el9.alma.x86_64.rpm 5995f912be94e3ef98d0e73eaee24f4d23e3760a5b85ac8770da8e52b373d688 libreoffice-langpack-nso-7.1.8.1-11.el9.alma.x86_64.rpm 59ebb29137c41381d4bba22f81ef8cb2e4fa53eaa27328a6ab89aa5a7ec0932b libreoffice-opensymbol-fonts-7.1.8.1-11.el9.alma.noarch.rpm 5b28f3e4cc56536c59b7ee350ed1842389600a960bbf800f4f95f955fbafb2cf autocorr-ko-7.1.8.1-11.el9.alma.noarch.rpm 5b700bf1b80045ba9cf77bdba5e96c1bf73d7fb815f735afac33c3257d163bb9 libreoffice-langpack-pa-7.1.8.1-11.el9.alma.x86_64.rpm 5d4c081bb37cbafd93d2b39e48c85b96590f1e1287004e46e7ff914c7a338ae4 libreoffice-langpack-eu-7.1.8.1-11.el9.alma.x86_64.rpm 5de2bdacda126a60fbc01ed54e65f9afa706c94a4b925092eef7b03710f73a07 libreoffice-langpack-fy-7.1.8.1-11.el9.alma.x86_64.rpm 61fe80a4157f8a7b34c4b3aa7e70261f8da1e00fd609f6479838e4ab59ff9cba autocorr-sk-7.1.8.1-11.el9.alma.noarch.rpm 63a8bb4eab3dd91cc979d5fe389e4abc614b0fb700531af4350283926635bb19 libreoffice-langpack-nl-7.1.8.1-11.el9.alma.x86_64.rpm 6582e73b5f3d59e588f2b3d1246dc4085c7b01ac0efcdec7dbac637763496940 autocorr-tr-7.1.8.1-11.el9.alma.noarch.rpm 684ceb063ed841f665d74c6925c00fe435b6a98c0a989bc7a9424f44f0c13e6e libreoffice-help-ca-7.1.8.1-11.el9.alma.x86_64.rpm 68a0b5ef1a1a349368d1ef5d495f2afa7a22b5564bd58fa2903000ab234d86cd libreoffice-help-hi-7.1.8.1-11.el9.alma.x86_64.rpm 6abded759242785dd2ddf2c1bb93f1d3a506bceb92f1088927d978d7d15e1016 libreoffice-help-en-7.1.8.1-11.el9.alma.x86_64.rpm 6bb66375fc691e166e51f6d8199c86805675992350f7603ba87f40c17621e9e6 libreoffice-langpack-uk-7.1.8.1-11.el9.alma.x86_64.rpm 6c4761bb73368980cadcbb68c316c3496748a333c778548cebeab9b65f3c7dde autocorr-vi-7.1.8.1-11.el9.alma.noarch.rpm 6d075ef8345ff0d72a6becb9c3f39ee2338d4584f84987d3ac43022b55508628 libreoffice-langpack-ml-7.1.8.1-11.el9.alma.x86_64.rpm 6ea4e5501b31b75fb37919f36c630a129e2df6ca26513070ebcdc0141d942fca libreoffice-help-sv-7.1.8.1-11.el9.alma.x86_64.rpm 70a54e9828fe00b3e315aa5ce78da0b40235679f14a44632d7faf26cc3fa20bb autocorr-nl-7.1.8.1-11.el9.alma.noarch.rpm 735ec826a1750551969f7c4e0a21f075edb10f73a702e51652b2d662f4ba31a6 libreoffice-langpack-en-7.1.8.1-11.el9.alma.x86_64.rpm 7639772033336f414d0698b3a1a3221e9490ea73003d05ed3984548ec27f6d31 libreoffice-langpack-hi-7.1.8.1-11.el9.alma.x86_64.rpm 76ba8f96f4f104c82f7b999151290b5e2c6ce2e297323da343d241aebd5a0457 libreoffice-gtk3-7.1.8.1-11.el9.alma.x86_64.rpm 76e68592ec5b415af8a0e837cd812f2a263987b177962f933496bf02404bbbdd autocorr-fr-7.1.8.1-11.el9.alma.noarch.rpm 7b3540e49ba44d6e7bd752c65712e9d669fce10f3d1862411859c6038b4210a0 libreoffice-langpack-cs-7.1.8.1-11.el9.alma.x86_64.rpm 7ba743ff4b5dca850dbe151e2fea21849fce0f42a5aee2d2a03c23428ac5c85e libreoffice-langpack-sr-7.1.8.1-11.el9.alma.x86_64.rpm 7ded646ed01abe81e13c2de62f6b795c91c6c4977be4c65539d5bc86d0f7d1c8 libreoffice-help-zh-Hant-7.1.8.1-11.el9.alma.x86_64.rpm 7e0fa5d74c8a1dab8db527c6b26106fefeaf8b3c1e677297db5860a22c2ef118 libreoffice-pyuno-7.1.8.1-11.el9.alma.x86_64.rpm 7e48018e084cd76ebdd3c61000a2a99bb3969fd1b5e4b64383508f44c3b8ec52 libreoffice-langpack-mai-7.1.8.1-11.el9.alma.x86_64.rpm 7ec796228847c642c3507a17cfc85875493758e8852a3950a5002d2b39520f41 libreoffice-help-hr-7.1.8.1-11.el9.alma.x86_64.rpm 80123431d2e083eae044fca8008aed648ca2a128e027b6d90f8067e54a838226 libreoffice-help-id-7.1.8.1-11.el9.alma.x86_64.rpm 8058babd0574ea9d3b2bb35216038aa38ac48b880d6e1c9f6b137c1912fcc9af libreoffice-help-dz-7.1.8.1-11.el9.alma.x86_64.rpm 8112d75b0ccad4e384d6a1871307c3a4e680fe7523d089258fbd89b60bdd16ea autocorr-pt-7.1.8.1-11.el9.alma.noarch.rpm 813a8cf68523d78b9eae96c4b264a829af9fbb3f727188332cf2134075c7b873 libreoffice-xsltfilter-7.1.8.1-11.el9.alma.x86_64.rpm 82a326f4933a058f1f57eeebfe90d18b54798d81cebb67dce56c4cfc134e6caf libreoffice-langpack-st-7.1.8.1-11.el9.alma.x86_64.rpm 82bf1f06a81d5defbef90e1015c4bfb7e92e622bf714ea78c31db9752247a59f libreoffice-graphicfilter-7.1.8.1-11.el9.alma.x86_64.rpm 836f98963a84871593d0fb99055c990f41ac6ca220d99e42cc76c6a092171c49 libreoffice-core-7.1.8.1-11.el9.alma.x86_64.rpm 84ad3dfbc2fdbb0300e54a42a10579fabfda481ce430539635a135b8ef6012b1 libreoffice-langpack-gl-7.1.8.1-11.el9.alma.x86_64.rpm 877dac4ac5575a3cea2b08ff04f7590b477444ddda89d99e4d57a5655d5df0b5 libreoffice-langpack-da-7.1.8.1-11.el9.alma.x86_64.rpm 878e60d6d3990e66cdd9eb049dbb23fd02088db38e84c83121cdba69fc67a2d1 libreoffice-draw-7.1.8.1-11.el9.alma.x86_64.rpm 88a70e72577278cc2f1839d148c1e0623d394970cabb2abd840b2ae46d96ac62 libreoffice-help-bn-7.1.8.1-11.el9.alma.x86_64.rpm 891134fd22a30be75c7a6726cc17f58f4508d73118d61f0964fc7c41247cdd59 libreoffice-langpack-ja-7.1.8.1-11.el9.alma.x86_64.rpm 89ead63e2e063a93c56e6d36f14c44ff647614a5cd03bbc75d8f855af0161225 libreoffice-x11-7.1.8.1-11.el9.alma.x86_64.rpm 8aaff6b95adc2bf866b90020cddae6a913b90a25baee70f138927309f7ca048b libreoffice-langpack-nn-7.1.8.1-11.el9.alma.x86_64.rpm 8b2993c7e7feaa8c75ea29f97486691d917105066790bd6ec9203165fd69c033 libreoffice-langpack-ve-7.1.8.1-11.el9.alma.x86_64.rpm 8cb5fe74b60a036772d027406805d1f7a9801544450cc0ff3f993eb71cad855a libreoffice-langpack-kn-7.1.8.1-11.el9.alma.x86_64.rpm 8d233f98682eb7751f4dc4bb70f94ca41132135c6a6cfad05d1da7a8a168d0f4 libreoffice-math-7.1.8.1-11.el9.alma.x86_64.rpm 8d7ef017c7589b5a7431262ae7ab9ba527a5c0b45003a6b05cdfe0f980449933 libreoffice-langpack-bg-7.1.8.1-11.el9.alma.x86_64.rpm 934993da77a9642fd2dc4e7e53fa6a772a9bc21ff0764188470d5e76f204861f autocorr-zh-7.1.8.1-11.el9.alma.noarch.rpm 943065ae9e2fa45011926673c7a4c32322022ac35cef6d01519b60de9bcdef3e libreoffice-langpack-it-7.1.8.1-11.el9.alma.x86_64.rpm 967d2ede148d4396827003e853e791897d1c23a09b01bf959dd57a20e8fa9b7b libreoffice-langpack-hr-7.1.8.1-11.el9.alma.x86_64.rpm 97ba0c248ee35ca5077ffedfce4c56fb29e153f91a3567b5da77eabf9f5a0e75 libreoffice-ogltrans-7.1.8.1-11.el9.alma.x86_64.rpm 9913ad20966c5dfa885d22506ad484431065664b62edb1b75c81024264c3c4d9 libreoffice-langpack-pt-BR-7.1.8.1-11.el9.alma.x86_64.rpm 99a2e5c7a8fb628aea077e1577e6ce94647c347790a3c5b119ab6f909686ecb3 libreoffice-langpack-si-7.1.8.1-11.el9.alma.x86_64.rpm 9bc1344b847a54f6066ee9ee273f91b8adbe04a8d45997886e5ccdc7b2a52d3a libreoffice-filters-7.1.8.1-11.el9.alma.x86_64.rpm 9d3905177d6231c8a3a64043cbc16d326957cf55a7290bac94088fac458e729e autocorr-ca-7.1.8.1-11.el9.alma.noarch.rpm 9eef4bc73d018a2d37117604831513c28c675ae04696516c8fd7ca97d4862199 libreoffice-help-it-7.1.8.1-11.el9.alma.x86_64.rpm 9fabc4ad9924617589b9559947c6ad88a220ead53f02e46b89ee89cdffbb52a0 libreoffice-langpack-ta-7.1.8.1-11.el9.alma.x86_64.rpm 9ffc942f6829023cb75eb24c72ed479076d04169b7d4e6cd6ca69404786069d4 libreoffice-langpack-tn-7.1.8.1-11.el9.alma.x86_64.rpm 9fff3ae402560d30f13a2a94f84372c47791f70ce65096196533220b1b8a3f98 autocorr-ja-7.1.8.1-11.el9.alma.noarch.rpm a0c1a4012459a0fba90f97fea21b6090be5dbdddc0d66d484c63934698db01f9 libreoffice-gdb-debug-support-7.1.8.1-11.el9.alma.x86_64.rpm a38b262e9eae9426fb8db2365ea57e9ae0b4d13755bd5e1b18a5d4c543d380f1 libreoffice-help-nn-7.1.8.1-11.el9.alma.x86_64.rpm a5c06298e395ca95fef6f1ba721756978b31d4d88e96ab66a624b581d3ec55d3 libreoffice-langpack-zh-Hant-7.1.8.1-11.el9.alma.x86_64.rpm a6a9a78592556165a4fcf46df28d9455e9b49ac7cd207633b246811cad9b46dd libreoffice-help-ro-7.1.8.1-11.el9.alma.x86_64.rpm a745391f3139ccc8a86a4ef4ac4c9005e6a6b536707e58716d2bb80d877d5f80 libreoffice-langpack-he-7.1.8.1-11.el9.alma.x86_64.rpm aa339a23c28a30c6ca1ed42ed80fe5f21a4259a537cadd8b83992e1d859d4721 autocorr-es-7.1.8.1-11.el9.alma.noarch.rpm ab9cae4a10acab2dd52902c7273524a42eb5dacd9c95bcc1edc1d967b3a07dc2 autocorr-lt-7.1.8.1-11.el9.alma.noarch.rpm ac9e9de72308ed585d84a7093e990ea558fcddaa4d0a7b2743cd2639cdab1a31 autocorr-ru-7.1.8.1-11.el9.alma.noarch.rpm ad20f0ea316d4f4daa91d5cdd9c09c833e6e2a1268f128ca1d143f77875400e8 libreoffice-langpack-pt-PT-7.1.8.1-11.el9.alma.x86_64.rpm ad60135627e1c640ce0c9d6e80dfd6d7a88c643f5a4672f1e6052395b433dbf2 libreoffice-langpack-ss-7.1.8.1-11.el9.alma.x86_64.rpm af35c1c5fde04bbe3ef9b24777babe95e3b14cb470d20f136c622bc1e91e4889 libreoffice-langpack-ro-7.1.8.1-11.el9.alma.x86_64.rpm b003b041b1a22bc32a32bec17ce1c3f3f100efbe111231f0f88af1638729f05a libreoffice-help-pt-BR-7.1.8.1-11.el9.alma.x86_64.rpm b193d11d1ed790ef77b5f929f9e479a00c4d972d62073919c5482c8ce6a2ca66 autocorr-ro-7.1.8.1-11.el9.alma.noarch.rpm b3521bd527a264ed471153afd472eaaab433c9bdd0e350ddfe1c215aabb049e2 libreoffice-base-7.1.8.1-11.el9.alma.x86_64.rpm ba276bbbad84490296cd2923ba7f2e3964a356edfeb8da4f3170b0922e522b0a autocorr-ga-7.1.8.1-11.el9.alma.noarch.rpm bc52fd1e8ce77b0b42f81254f3078f892ad15681ae3426f0586e61c82650ccb7 libreoffice-help-tr-7.1.8.1-11.el9.alma.x86_64.rpm bd49e1e42c1f04d2d3e581ad73bc523f236bfa198381e4086e7f15409015f8c0 libreoffice-help-sl-7.1.8.1-11.el9.alma.x86_64.rpm bdac5da730111e062886b7f99d37db895aa0c9dcfccd8a2b7f468ed01794eba9 autocorr-da-7.1.8.1-11.el9.alma.noarch.rpm c29d880be4ff60f317ea011908dbada4f6bb2d3350960c0a0f1e2214805e6529 libreoffice-langpack-es-7.1.8.1-11.el9.alma.x86_64.rpm c42df8af03e4e43ec9980d470a39eb1a45a293d075674bebe02909c627da8368 autocorr-hu-7.1.8.1-11.el9.alma.noarch.rpm c4d854ae03e2d534b76343f984635b668a4a0cad506c4247fd298bcc26f33ee7 libreoffice-langpack-gu-7.1.8.1-11.el9.alma.x86_64.rpm c62c931b48da050da821e35c957e05bde854d140957714a20481a2404b46c859 libreoffice-langpack-lv-7.1.8.1-11.el9.alma.x86_64.rpm c8010e61621b1c692a1e87cc915d731658105b7d1fce6ce7c8cfeea3004f59ae libreoffice-langpack-kk-7.1.8.1-11.el9.alma.x86_64.rpm c842d0c2fa03de5389ab5d5923948a44f16e4717f873629b37c667148d05fcbf libreoffice-help-gl-7.1.8.1-11.el9.alma.x86_64.rpm c915c9d92c5c7421d02a2afe571d4ceabd616a92f4a739fec146dc1e642d1e60 libreoffice-help-ru-7.1.8.1-11.el9.alma.x86_64.rpm cf66dc9ec818b29ce32254ef5dd475a75a5a8c09d814e4b8fc4677f6d0f9fd94 libreoffice-langpack-fa-7.1.8.1-11.el9.alma.x86_64.rpm d050c854e509c32fe18e3289e6a41542332018d912f88f1f254b125740ad16d7 libreoffice-langpack-sl-7.1.8.1-11.el9.alma.x86_64.rpm d0cf8c07b1bb0d15e41d53021ce2bf12c1d42d5396922e5428e140c1569566e3 libreoffice-langpack-zu-7.1.8.1-11.el9.alma.x86_64.rpm d18e7b1f8d156da27dccbe896f8c4a91b4c576f61c7abdc730fa827d75e13b25 libreoffice-impress-7.1.8.1-11.el9.alma.x86_64.rpm d42443cd80c7a915f27017863cfd6a946298b765e2387d3798139f7805f379fd libreoffice-help-zh-Hans-7.1.8.1-11.el9.alma.x86_64.rpm d51b5912e945864fe9f7a2d998f0efa2366c04dd7e2dbb10ea79c3c4d1150c7e libreoffice-help-fr-7.1.8.1-11.el9.alma.x86_64.rpm d54daa729e84e08ffdf8dc7701160a0a40433981ec5a1e71b3e83eef118338e7 libreoffice-langpack-tr-7.1.8.1-11.el9.alma.x86_64.rpm d5ae05a1ba7631ee9c78194909b16ec7832215388803d7341b5f03eaa9f1281c libreoffice-langpack-th-7.1.8.1-11.el9.alma.x86_64.rpm d60f49c0c8b976baaba118c1e9437d618150827058d260b3f69f1bffd2b30ba5 autocorr-fi-7.1.8.1-11.el9.alma.noarch.rpm d6d7ddf2c5faa150d7787614b6e9512e1a33ee5dcc22ddbce72b3aa58c3ae9ff libreoffice-help-fi-7.1.8.1-11.el9.alma.x86_64.rpm d79c5dac4dd110de8dddf4154a27a43c8e62630212d0c8838e0b1b74bbf748f2 autocorr-pl-7.1.8.1-11.el9.alma.noarch.rpm d897bd02f9e8e568f98bfe7ea457cf51c1a2bf5b408e1b1fe8e573ef2f83aa7f libreoffice-help-es-7.1.8.1-11.el9.alma.x86_64.rpm d91254c37592231176edff72360147e7b8396455deb2f3d94bdd9a920cab3161 libreoffice-langpack-nb-7.1.8.1-11.el9.alma.x86_64.rpm dc16531fff77605e967e972a40e56c4fd29f4f92fbbf2296bcf101baed556c2a libreoffice-help-pt-PT-7.1.8.1-11.el9.alma.x86_64.rpm dd434230a9e6e872f2131c55f465b3c16e01263ff9f5591f7849495e9ba433ea libreoffice-langpack-br-7.1.8.1-11.el9.alma.x86_64.rpm ddfa6264b2ae52bddf76ef36ea6bad821a0ab5c3f8b46105e1bb607c04f77733 autocorr-lb-7.1.8.1-11.el9.alma.noarch.rpm dec8021dbf8838add15047f1895854db02f93780710ed2d66f6443cec4586601 autocorr-de-7.1.8.1-11.el9.alma.noarch.rpm def31f18bc4602638f92dc8c53943d3d03c143939755578d2d03507d26ee2e68 libreoffice-help-da-7.1.8.1-11.el9.alma.x86_64.rpm df6cfa025694f2abef08e4830b7aa0701adcbcc50582838986851f7954b22107 autocorr-sr-7.1.8.1-11.el9.alma.noarch.rpm e08fb79399ed02920258871ef350b50d4a765590d51642f477476c67c4199f99 libreoffice-langpack-mr-7.1.8.1-11.el9.alma.x86_64.rpm e0f63fee7b53336b728c67de21ccd54d64452e535c0e5829c5dc62f8543ac282 libreoffice-langpack-ar-7.1.8.1-11.el9.alma.x86_64.rpm e38a003df6c7c427c7c02f1103f8acb6e59d3158b89b5c6c7c391d1da8ffea4b libreoffice-langpack-cy-7.1.8.1-11.el9.alma.x86_64.rpm e3a9e6d94a4aed430ad5f1065c1bbe9ab76cff90fdf4c7eba494a7fd044c105d libreoffice-calc-7.1.8.1-11.el9.alma.x86_64.rpm e4deeca9c2eba261bd31358367438f8065bbee0c00b2c88b7b683687f46b388c autocorr-is-7.1.8.1-11.el9.alma.noarch.rpm edb227bce18d4470146352cfa9e005c6352aeddee395763053df573d97955551 autocorr-cs-7.1.8.1-11.el9.alma.noarch.rpm eeb25ecbd3b47032b3ae0fb5ec05c0f7d398355ddaa6bdc6e2200f8e95ac9cf2 libreoffice-help-uk-7.1.8.1-11.el9.alma.x86_64.rpm ef6642556f62de6a4daccc8f38417e1ba654dd27eb11069e01d1906e76eb805b libreoffice-langpack-zh-Hans-7.1.8.1-11.el9.alma.x86_64.rpm f0a13a05c73264435e0266352912edfd78aaaf017a2241b06e0c1985102b5ee7 autocorr-el-7.1.8.1-11.el9.alma.noarch.rpm f50a89aac67adf16a4a53e31aa8c4202e4e9a3cb578167c45c37a30cc52cd21d autocorr-sl-7.1.8.1-11.el9.alma.noarch.rpm f63f30ca38e3c93fc45541c883de0885082f55c94ea3aa6f5a54a7292bd4622b libreoffice-help-he-7.1.8.1-11.el9.alma.x86_64.rpm f70463511deeec8200cc8c398630b30be803927dcb6860fdb573334838edf413 libreoffice-langpack-ru-7.1.8.1-11.el9.alma.x86_64.rpm f927b7540aa52cefb61b287ad8849f514c9851f640ff851fbeb1097359be7771 autocorr-af-7.1.8.1-11.el9.alma.noarch.rpm f97b454dee535efa7fdbd052f774f6d9257f005e30a95bb58530902541af2880 libreoffice-pdfimport-7.1.8.1-11.el9.alma.x86_64.rpm fa2d5f9d756d5fb0022bb2a38682c32e7deff7378aa53c6711fa42cebeae75fe libreoffice-help-pl-7.1.8.1-11.el9.alma.x86_64.rpm faec18878ed2ae6786f069f88637a2b5396e5c10ff9660286e044c2f782e8f54 autocorr-hr-7.1.8.1-11.el9.alma.noarch.rpm fbdc82b17b37c124f11c490bc24eff7eb489fcb6c1bb19e4dcbd05c7b97b271b libreofficekit-7.1.8.1-11.el9.alma.x86_64.rpm ff4723a7e5d6036cc7814ab653c10cb259d683be773986555b53b7367f295779 ALSA-2023:6518 Copyright 2023 AlmaLinux OS 0 1 Moderate

flatpak security, bug fix, and enhancement update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. The following packages have been upgraded to a later upstream version: flatpak (1.12.8). (BZ#2221792) Security Fix(es): * flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100) * flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default flatpak-1.12.8-1.el9.x86_64.rpm 0939deb625ad04aaf064a58025908b5e1d7a15e5a4b8a28f5c068b453b613d3d flatpak-libs-1.12.8-1.el9.x86_64.rpm 3fc04d9bd733a2b1e30ced289ff5fbda93329eab05c4fd73e14bb9ee0a21edc7 flatpak-selinux-1.12.8-1.el9.noarch.rpm 469a239d4c34eae8e286edb3de5360898eb563a04d20528e0b45360fd1b89d9b flatpak-session-helper-1.12.8-1.el9.x86_64.rpm b2255bd88cef9450234fd4c7468c94a8f794ad0886a6fddd59be0a9530104248 flatpak-libs-1.12.8-1.el9.i686.rpm f8f06d4bb90e0ffd8d9da6893f12631ae1e65882a023db5174a84e7d642a07bc ALSA-2023:6523 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-tornado security update

Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools. Security Fix(es): * python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations (CVE-2023-28370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3-tornado-6.1.0-9.el9.x86_64.rpm f6886c4ec0cbcf8018aceaa88ee11d6ca09addfa7d561fea309471896042fab8 ALSA-2023:6524 Copyright 2023 AlmaLinux OS 0 1 Moderate

dnsmasq security and bug fix update

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-28450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default dnsmasq-utils-2.85-14.el9.x86_64.rpm 75915c09baf134a491b97bbc50a812283ab699d2609cef354a9f1f4032d544ba dnsmasq-2.85-14.el9.x86_64.rpm b673a34e4431799559c52b573f99e8c8d91ae32f53c501d421d17c947b2e284a ALSA-2023:6535 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: arbitrary code execution (CVE-2023-32393) * webkitgtk: bypass Same Origin Policy (CVE-2023-38572) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592) * webkitgtk: arbitrary code execution (CVE-2023-38594) * webkitgtk: arbitrary code execution (CVE-2023-38595) * webkitgtk: arbitrary code execution (CVE-2023-38597) * webkitgtk: arbitrary code execution (CVE-2023-38600) * webkitgtk: arbitrary code execution (CVE-2023-38611) * webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885) * webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932) * webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954) * webkitgtk: use after free vulnerability (CVE-2023-28198) * webkitgtk: content security policy blacklist failure (CVE-2023-32370) * webkitgtk: disclose sensitive information (CVE-2023-38133) * webkitgtk: track sensitive user information (CVE-2023-38599) * webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434) * webkitgtk: arbitrary javascript code execution (CVE-2023-40397) * webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default webkit2gtk3-jsc-2.40.5-1.el9.x86_64.rpm 159f981e44a20737585890c87fad4ed17a70e90a7f8726ea2b71673c739fb7ef webkit2gtk3-devel-2.40.5-1.el9.i686.rpm 293d45917e56deefd017af027d13c3252cc3d6c696a8b91a4152bce475f9fab0 webkit2gtk3-jsc-devel-2.40.5-1.el9.x86_64.rpm 3cdadeb8c28f3a24228e80125165124402ca1544e262d97b2036f46e21c61130 webkit2gtk3-jsc-devel-2.40.5-1.el9.i686.rpm 51032c09431612ccfea20bd37554f8e18c10441ef710db0468ebcf502b8cef57 webkit2gtk3-jsc-2.40.5-1.el9.i686.rpm 627c28b9f28d6d42cf44e9438eb9d2fbaab1e1980abcf131dddf28c2c9877a5e webkit2gtk3-2.40.5-1.el9.x86_64.rpm 73c1d2c49c1775861a5423962ef82a6bebb2c2cacd3710e184e8f083d35abc52 webkit2gtk3-devel-2.40.5-1.el9.x86_64.rpm d446304384ab43cd8694054d5921d77a4f6e4b64ce896b8c97eaeb004939bbfd webkit2gtk3-2.40.5-1.el9.i686.rpm de451125099577a69700194cf0e57967912e487d533ad3d2272bf613dfaa1120 ALSA-2023:6539 Copyright 2023 AlmaLinux OS 0 1 Moderate

perl-CPAN security update

The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fix(es): * perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS (CVE-2023-31484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default perl-CPAN-2.29-3.el9.noarch.rpm 74c55c9829b2161089335da08c942be8fa4c4b1d87fd84aa16e43dce8d99071d ALSA-2023:6542 Copyright 2023 AlmaLinux OS 0 1 Moderate

perl-HTTP-Tiny security update

HTTP::Tiny is a small and simple HTTP/1.1 client written in Perl. Security Fix(es): * http-tiny: insecure TLS cert default (CVE-2023-31486) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default perl-HTTP-Tiny-0.076-461.el9.noarch.rpm 7bc67a98cd73eb292036741d6e88925e35656650c75416b4c835cc9d61666798 ALSA-2023:6544 Copyright 2023 AlmaLinux OS 0 1 Moderate

ghostscript security and bug fix update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879) * ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default ghostscript-tools-fonts-9.54.0-13.el9.x86_64.rpm 2e0f11ede0ee70174ea490e8a5ad4bea102d3e98e5c3e18c8f70335656f8bfc8 ghostscript-doc-9.54.0-13.el9.noarch.rpm 6222dc6fd993f4ebb21d1855184a5ec133bcf11a08260984a4cebec91fde644d ghostscript-x11-9.54.0-13.el9.x86_64.rpm 69849a73eed3dfc35de479ba343ac8d93cb134d041f20e24e07c22c95e94a199 ghostscript-9.54.0-13.el9.x86_64.rpm 72081290d9ef3c5375396b01d8a8597d2c926eb50e34f62a43c0224aff06b95d libgs-9.54.0-13.el9.x86_64.rpm 8901b6bda42b0475c0e03bc987ec7dae114fff7592c537a051119bb0c5ef03d3 ghostscript-tools-printing-9.54.0-13.el9.x86_64.rpm 8b1a8b3fc0a1c918f698da8d16fff1d4db9b7be3e85815960896193617d1db20 ghostscript-tools-dvipdf-9.54.0-13.el9.x86_64.rpm bb0d2e62fa90c45dd15db8b097aadb7ff16e5be4c5467849aee15a9977508633 libgs-9.54.0-13.el9.i686.rpm d6e3e7eb3e2df0896612d7633655275a33e613a9ce70e9082eb91a4b6825bf33 ALSA-2023:6549 Copyright 2023 AlmaLinux OS 0 1 Moderate

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Invalid IKEv2 REKEY proposal causes restart (CVE-2023-38710) * libreswan: Invalid IKEv1 Quick Mode ID causes restart (CVE-2023-38711) * libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart (CVE-2023-38712) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libreswan-4.12-1.el9.x86_64.rpm c3af794afab9456c0b42336317db6f9c92069d73479fe56f5a8034849bed6778 ALSA-2023:6551 Copyright 2023 AlmaLinux OS 0 1 Moderate

yajl security update

Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator. Security Fix(es): * yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default yajl-2.1.0-22.el9.x86_64.rpm 537c1e046d5e68ac6f868f30fdca0a19909de29400dfbe326f29f0d5a48c3928 yajl-2.1.0-22.el9.i686.rpm f2078fc77350398baebee186dc8d79eca803efc50148ec0f59378b491a2a0bb0 ALSA-2023:6566 Copyright 2023 AlmaLinux OS 0 1 Moderate

libmicrohttpd security update

GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application. Security Fix(es): * libmicrohttpd: remote DoS (CVE-2023-27371) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libmicrohttpd-0.9.72-5.el9.x86_64.rpm 730607fa8fb6cbb8c95726b766a2542ba860ca640cfc1e3ed93c57d235ff54e3 libmicrohttpd-0.9.72-5.el9.i686.rpm ad3725cb8498ef79218f6cba51744c4af78f1a84282d2eb227b820aab797a839 ALSA-2023:6569 Copyright 2023 AlmaLinux OS 0 1 Moderate

sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fix(es): * sysstat: check_overflow() function can work incorrectly, which could lead to an overflow (CVE-2023-33204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default sysstat-12.5.4-7.el9.x86_64.rpm 86b01a3611fd45103272352983363c54cc05854b5842be2442c33670eb9995d7 ALSA-2023:6570 Copyright 2023 AlmaLinux OS 0 1 Moderate

tomcat security and bug fix update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998) * tomcat: not including the secure attribute causes information disclosure (CVE-2023-28708) * tomcat: Fix for CVE-2023-24998 was incomplete (CVE-2023-28709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default tomcat-9.0.62-37.el9_3.noarch.rpm 3243a5704e3756790a643180f73e6db416803a40c8121a29b02b63f7c09f15b4 tomcat-docs-webapp-9.0.62-37.el9_3.noarch.rpm 631738483d1c8a4a83ce44a7c2dfbbe6629f04d2ae1669f548f08310077b32dc tomcat-admin-webapps-9.0.62-37.el9_3.noarch.rpm 7dbf1bd58a807f362e68132507b310d6a9d71b02568d2442aa26c7f8d2161d49 tomcat-el-3.0-api-9.0.62-37.el9_3.noarch.rpm 9c937a2e67dd58371fd0ea3f9fdc0505c7fdc3aff6a521207c3ebe86879f7243 tomcat-webapps-9.0.62-37.el9_3.noarch.rpm b2b91cde77fa70d9f73654a89078e535a3d9bce64b1b28a06c3032707dc73089 tomcat-lib-9.0.62-37.el9_3.noarch.rpm b88307c078e6c360f31cf6274204b4c117363cd36c0daf1067805a883bd79f34 tomcat-jsp-2.3-api-9.0.62-37.el9_3.noarch.rpm c1a61b95274a92645b2a93cb200d35d5b7a06654261aca78c9684364381edfd4 tomcat-servlet-4.0-api-9.0.62-37.el9_3.noarch.rpm d4cde5b93ec9345cd3b3d3c8b851be99c6dcb7cdccc234e588f8045c52a56faa ALSA-2023:6575 Copyright 2023 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: null pointer dereference in LZWDecode() in libtiff/tif_lzw.c (CVE-2023-2731) * libtiff: tiffcrop: null pointer dereference in TIFFClose() (CVE-2023-3316) * libtiff: memory leak in tiffcrop.c (CVE-2023-3576) * libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c (CVE-2023-26965) * libtiff: Buffer Overflow in uv_encode() (CVE-2023-26966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libtiff-devel-4.4.0-10.el9.i686.rpm 154c86411b9baa7bc6a7318c2046a93cb273e72b04b9abc1ed00366300fe58fe libtiff-4.4.0-10.el9.x86_64.rpm 2896d3e8cab3609f2a982306c61665acc6b55d8dc8b34914358a07d08d946053 libtiff-4.4.0-10.el9.i686.rpm 6c2f2d72e298a686b8f1025b1f8c2c79ca8aaf30fca919b07a7f33acdfb318cf libtiff-devel-4.4.0-10.el9.x86_64.rpm d7b218db5589d1bce10cd8295a5683f3b39848b887390677fd751ba12a471039 ALSA-2023:6578 Copyright 2023 AlmaLinux OS 0 1 Moderate

libqb security update

The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling. Security Fix(es): * libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libqb-2.0.6-4.el9_3.i686.rpm 01ef5c9e6939a1374d422b157f1c824ff06e89c5ddc4c855ae364f1de033cc0e libqb-2.0.6-4.el9_3.x86_64.rpm 4a0bafd3c67e0a48c422f5a6e04a9e5ac8b35f2d72a43c4337ff363dda9d8f29 ALSA-2023:6593 Copyright 2023 AlmaLinux OS 0 1 Moderate

binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix(es): * binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default binutils-devel-2.35.2-42.el9.x86_64.rpm 5e28bc940718ecc5955697e721cdae9e1139dc4726999f085a105a5c1700946f binutils-devel-2.35.2-42.el9.i686.rpm bc897234de29cccd603dc6017250733b6c76561e38be1a1664240960f4e3f5bc ALSA-2023:6596 Copyright 2023 AlmaLinux OS 0 1 Moderate

cups security and bug fix update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: heap buffer overflow may lead to DoS (CVE-2023-32324) * cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default cups-lpd-2.3.3op2-21.el9.x86_64.rpm 0afc726838dffa6fbd3d57b23e483f3ff4e6beff2dad7794ce7515825cd1ebd7 cups-ipptool-2.3.3op2-21.el9.x86_64.rpm 0e2d214688e1857246cd5c8f37f4765b2dfe6acbab0e6d478d0a4644755cdea5 cups-2.3.3op2-21.el9.x86_64.rpm 1690d649b47d7ef309d632145b60aa68e0aed423cedc586382d60769147b6ea6 cups-client-2.3.3op2-21.el9.x86_64.rpm 1c75177968ca13a131417cbaa766992cc9380eb33ebdf481a9d7381a169a16c3 cups-printerapp-2.3.3op2-21.el9.x86_64.rpm 33c68dd20be9e187b7fd6c94b3957eb84a2783c84564c69712fece53157ba007 cups-devel-2.3.3op2-21.el9.i686.rpm 51bc3958df76f2b519295992ed77dfbd7c1d2bea323443b0331e041443dfed44 cups-filesystem-2.3.3op2-21.el9.noarch.rpm 68962dc1928b74302b651ac4230b67d5a0b12abd55225dd5b8d0ede2c3c1cfe0 cups-devel-2.3.3op2-21.el9.x86_64.rpm 8b6946c2bc440b37a4f8c5627c3b9da9ee93f6fba63bb558f4d40cbf4303dbb6 ALSA-2023:6631 Copyright 2023 AlmaLinux OS 0 1 Low

glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499) * glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611) * glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default glib2-devel-2.68.4-11.el9.x86_64.rpm 476d42bd28a2d941579e3ce145492fea83af9a822fd5f36d503628a7f3ec860c glib2-tests-2.68.4-11.el9.x86_64.rpm 912c595313128dd8af9ae89bbdb3c6f8cb6bd98b4779347d4a2be2f5cb8af3d9 glib2-devel-2.68.4-11.el9.i686.rpm 93ccac16492d1adb3f0a1658bb844c7efebc8e3c48d3b7410078537e3b8cec66 glib2-doc-2.68.4-11.el9.noarch.rpm 9d711ffafd75abebaf87048ec7616c332c8dd24f88398c746a5e8be14f921329 ALSA-2023:6635 Copyright 2023 AlmaLinux OS 0 1 Moderate

c-ares security, bug fix, and enhancement update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. The following packages have been upgraded to a later upstream version: c-ares (1.19.1). (BZ#2210370) Security Fix(es): * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904) * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130) * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147) * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default c-ares-devel-1.19.1-1.el9.x86_64.rpm 50e32614632b5106d8e4b5e3876f172ab1b00db5583c37967121c7457fb078a4 c-ares-devel-1.19.1-1.el9.i686.rpm a03a76627ea2a190e55767f81b40327d44ea7c6a86d17db9741d0edb85cc9f2c ALSA-2023:6643 Copyright 2023 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667) * libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libssh-devel-0.10.4-11.el9.x86_64.rpm 23ca0b54c048343d6add474d6a6902827f0f0036de32e17b3b72499bb1e2ef96 libssh-devel-0.10.4-11.el9.i686.rpm 4c9f895f50df7e0134a2bb8585a6efad136499bc8821d04975bbb93d876f6186 ALSA-2023:6659 Copyright 2023 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python3.9 (3.9.18). (BZ#2210783) Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python-unversioned-command-3.9.18-1.el9_3.noarch.rpm 681d1b2a7e3cb78b4ad8467a5e8a7a406b3d2243b81d782539b45da8aa805088 python3-tkinter-3.9.18-1.el9_3.x86_64.rpm b13267270fcb78f3d9edddfa97ed84efc5a1539c1e2b9bf029f7f9fcff209d86 python3-devel-3.9.18-1.el9_3.i686.rpm ebbcd43c26ab71ed6f864289e5c11d7b400650c9e2c3c9492241100f174c899e python3-devel-3.9.18-1.el9_3.x86_64.rpm ebfc0c00e23e3067cf367c7c453e41a71a503b40ab13516ab6b5e44773444f18 ALSA-2023:6661 Copyright 2023 AlmaLinux OS 0 1 Low

gmp security and enhancement update

The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. Security Fix(es): * gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default gmp-devel-6.2.0-13.el9.i686.rpm 4b9372bf1610818f0266cd2987693d715e238651839a04571673a0773f7e204d gmp-c++-6.2.0-13.el9.x86_64.rpm 5a1f855738c39815466a1c4d6c2d0545a04d28c3db449425fe93f50c10905fe6 gmp-devel-6.2.0-13.el9.x86_64.rpm 86253d0384c3a009cf19369a584dd18487bec2b4f384d4c3a8815ebea6b81bf8 gmp-c++-6.2.0-13.el9.i686.rpm e264b735f72ee1959c0d0a524e64d8d47a9cfa7326447b30c8737a17c5d54aad ALSA-2023:6667 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415) Security Fix(es): * samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127) * samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966) * samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967) * samba: spotlight server-side share path disclosure (CVE-2023-34968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default samba-winbind-clients-4.18.6-100.el9.x86_64.rpm 02649cd9e77af9bd210e12e3553731465c014ba2c35c5944f13ffbf8c2f95939 samba-winexe-4.18.6-100.el9.x86_64.rpm 581745dfa16af0a124dc8175bd4b7ffd1e4b4957685771acbf80a450e8dbe4aa samba-vfs-iouring-4.18.6-100.el9.x86_64.rpm 9c66c198c9e591762118b39222849825fc1f62a7b2101592ad71335f763dff15 samba-krb5-printing-4.18.6-100.el9.x86_64.rpm d6a74f42cca84d6593eee52c74b75f3c8eb59831c803d818fa8d61b461a3abb6 samba-client-4.18.6-100.el9.x86_64.rpm e60af7c0c8dfcf170df73b71169f8360c0ead24eabe14b78d3056a2a0d947dd5 samba-winbind-krb5-locator-4.18.6-100.el9.x86_64.rpm e63c43632a2a1a1d7b03e16623602624851bdbc5aee512447f06b43898752200 ALSA-2023:6679 Copyright 2023 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: GSS delegation too eager connection re-use (CVE-2023-27536) * curl: TELNET option IAC injection (CVE-2023-27533) * curl: SFTP path ~ resolving discrepancy (CVE-2023-27534) * curl: SSH connection too eager reuse still (CVE-2023-27538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default libcurl-devel-7.76.1-26.el9.i686.rpm 8770bbb6d2ae7a61f270ba56dac9589b8d383bc654f3fabc0b889ca81898909f libcurl-devel-7.76.1-26.el9.x86_64.rpm f1c2eb5efd0df8575d712180537532f174f43fbd6d807f329e1f61c8170c6d6b ALSA-2023:6694 Copyright 2023 AlmaLinux OS 0 1 Moderate

python-pip security update

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". Security Fix(es): * python: tarfile module directory traversal (CVE-2007-4559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default python3-pip-21.2.3-7.el9.noarch.rpm 0de03acbbb820b2371a37ac544cd894a921d1682dbfe94c8441c44172607f09c ALSA-2023:6698 Copyright 2023 AlmaLinux OS 0 1 Moderate

ncurses security and bug fix update

The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo. Security Fix(es): * ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default ncurses-term-6.2-10.20210508.el9.noarch.rpm 35e1bd78bb33c310be53e5163f4e464607de7423cb31515685d7239383c49596 ncurses-devel-6.2-10.20210508.el9.i686.rpm 4901fce81f6d705cf3ccfc5a281d6a985256077b8a69f93182608747249ce6e8 ncurses-c++-libs-6.2-10.20210508.el9.x86_64.rpm 7f1d57cc3cbf65d0db3c758e11c8456777976d49841f446f59478167bef05255 ncurses-devel-6.2-10.20210508.el9.x86_64.rpm 98d4604fd1667c6b433d66043c8e1789b60bf683b330249f7e45b3af76f38c9f ncurses-c++-libs-6.2-10.20210508.el9.i686.rpm df70c518b3dbd531c9a7bf3e4bfd28315ffdb408f222556bc502f84c28104586 ALSA-2023:6699 Copyright 2023 AlmaLinux OS 0 1 Moderate

krb5 security and bug fix update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054) * krb5: double-free in KDC TGS processing (CVE-2023-39975) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default krb5-devel-1.21.1-1.el9.x86_64.rpm 10c8d439451533b9df0120153acfe86127aa025ec6908a657b477c65f88ac155 krb5-devel-1.21.1-1.el9.i686.rpm 67912f8c565edafa7309c6426f571182e55b4ab75bffee6b4e74fcf99a4ab7a8 ALSA-2023:6707 Copyright 2023 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468) * avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502) * avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default avahi-tools-0.8-15.el9.x86_64.rpm 1674d7de8dd390dcd5aacad62a7bb1423c5f10544f7c00856f363f255753762c avahi-glib-0.8-15.el9.x86_64.rpm 395463e89096e2190d8d0ad6d82d593ee2a3266a9d1fd470ff2ca210a7b2899d avahi-glib-0.8-15.el9.i686.rpm d6f9fb7ed65aed5fd7cafc3ea9371030c72fccc78342c92f4e1e736b72178e10 ALSA-2023:6732 Copyright 2023 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libgs-9.54.0-14.el9_3.i686.rpm 0bac33824662a5fb38d7a657325ee82aec3019972861f1a8bebad528058d1f3e ghostscript-x11-9.54.0-14.el9_3.x86_64.rpm 190c561ddc21fab5f454e4a74505573632b03c66303531c4e6d195fd0f71c64a ghostscript-tools-dvipdf-9.54.0-14.el9_3.x86_64.rpm 1a05dd27c64eed7a88be1d5f754d3a092668f1be951303fe95707d15ebe1fea0 libgs-9.54.0-14.el9_3.x86_64.rpm 1e0b92c1e542d4cf839926f9b5d1e99a1e6f379e9872caa4a6a3337b505029e0 ghostscript-tools-fonts-9.54.0-14.el9_3.x86_64.rpm 3169382873a90300f0a0f1ea69290f12e8f5ad740410478407708ae7bc050866 ghostscript-9.54.0-14.el9_3.x86_64.rpm 7efc72a4a7de15e20e3008e570b2f5379943dd89cacfbbd6b0ba70a7ff684983 ghostscript-doc-9.54.0-14.el9_3.noarch.rpm 9479e1053be3d3d0a781bce60d6ffe0f971c920018f73bc35ee04d29fd63322e ghostscript-tools-printing-9.54.0-14.el9_3.x86_64.rpm b43feabf495f61114b28e86bc91f30c5c5465b1d23a9e33e01805314da6e67ea ALSA-2023:6738 Copyright 2023 AlmaLinux OS 0 1 Moderate

java-21-openjdk security and bug fix update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025) * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 21.0.0 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 21.0.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. * A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 20.0.0 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 20.0.1, increases it to 16 MB. (AlmaLinux-14954) * When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-14962) * Installing the same java-21-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-21-openjdk-headless package. This prevented the use of the dynamic dump feature, because the checksum in the archive would be different on each system. This release resolves this issue by using the .jsa files generated during the initial build. (AlmaLinux-14946) * The /usr/bin/jfr alternative is now owned by the java-21-openjdk package. (AlmaLinux-14959) * The jcmd tool is now provided by the java-21-openjdk-headless package, rather than java-21-openjdk-devel, to make it more accessible. (AlmaLinux-14948) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default java-21-openjdk-javadoc-21.0.1.0.12-2.el9.alma.1.x86_64.rpm 3ddaa6be40f8adbd04aec8fb136bb51e49887115508c49dec68a6e09b567c8f4 java-21-openjdk-demo-21.0.1.0.12-2.el9.alma.1.x86_64.rpm a0ec0359f94532b5c1d3004f53f18aaeefee1d2269f07d71917d0d845bed8fe9 java-21-openjdk-javadoc-zip-21.0.1.0.12-2.el9.alma.1.x86_64.rpm af0abe0c617b2630877c7177c52c21e50beea64c6f836b00a287dc932ff8a896 java-21-openjdk-jmods-21.0.1.0.12-2.el9.alma.1.x86_64.rpm b0d581bfe6fb57d10230ab9b06b21287cb4f772f827d1e20005e17978b8ed00a java-21-openjdk-headless-21.0.1.0.12-2.el9.alma.1.x86_64.rpm b872d1bf0ad5834bf81ff028403391f43cb60e0161882ccfdd55699f798be31a java-21-openjdk-src-21.0.1.0.12-2.el9.alma.1.x86_64.rpm c2d6b925691702ee08754b7faa078e7a972f5e56fc4c076d681769b2b77c03af java-21-openjdk-21.0.1.0.12-2.el9.alma.1.x86_64.rpm d0eb36146c3f665bd09360abe8d7f11a617fdde65f9d1055758aa61b9deec95c java-21-openjdk-devel-21.0.1.0.12-2.el9.alma.1.x86_64.rpm ecce3bce3f523fca92ba68e2e98b6ecf9c1cab76fcda26f28e1bb7d33f804de3 java-21-openjdk-static-libs-21.0.1.0.12-2.el9.alma.1.x86_64.rpm fdcddce79ebdf0bd9e048a90df77d7b084c5336e65b44bfd0e1786a5e4b414ea ALSA-2023:6744 Copyright 2023 AlmaLinux OS 0 1 Moderate

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961) * samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091) * samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default samba-winexe-4.18.6-101.el9_3.alma.1.x86_64.rpm 48d4c9cdc86cbfe91de8886bcff7add858996b33993e808d18c3af1472b9187f samba-winbind-clients-4.18.6-101.el9_3.alma.1.x86_64.rpm 5eb2d42dfad538fe51e6c3d5d881a1d66bdf8136660062cf40bfaf39615b486a samba-krb5-printing-4.18.6-101.el9_3.alma.1.x86_64.rpm 7718e5794a5db248faf8171b0a59460cccb636d94b9e3a82b6b31b5cc0ac6f1b samba-client-4.18.6-101.el9_3.alma.1.x86_64.rpm a8591c173c2c5b3f8a4b43622cc4313097191a8b63f5532f92df7879c7965238 samba-vfs-iouring-4.18.6-101.el9_3.alma.1.x86_64.rpm b3896938b0c5c61d31af4daf50380c1b6f55df5279ab87c04e67cc0943b85d89 samba-winbind-krb5-locator-4.18.6-101.el9_3.alma.1.x86_64.rpm be4942579476ea506f8eff5e2adfbe41a58b693e2a754fbd0b948bad1d0013f2 ALSA-2023:6745 Copyright 2023 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545) * curl: cookie injection with none file (CVE-2023-38546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default libcurl-devel-7.76.1-26.el9_3.2.i686.rpm 75acd9f5ab4089a943181110875cca9c9c5b648302c588a368ea050af9950439 libcurl-devel-7.76.1-26.el9_3.2.x86_64.rpm a588bcca5150b37046b5a3f839781b924203473929a075327a4180fa770c7bbc ALSA-2023:6748 Copyright 2023 AlmaLinux OS 0 1 Critical

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) * squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846) * squid: denial of Service in FTP (CVE-2023-46848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_2_default squid-5.5-6.el9_3.1.x86_64.rpm 0bd303d5751f106cece2e014ea60fa6082ee308bfe7677e56b08dd7e9ac27237 ALSA-2023:7253 Copyright 2023 AlmaLinux OS 0 1 Moderate

dotnet8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Security Fix(es): * dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049) * dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default netstandard-targeting-pack-2.1-8.0.100-2.el9_3.x86_64.rpm 07c362d9cf9f2ca1a67978a18e77d9e1053f7b0a0fc005d68072c88485bf208d dotnet-hostfxr-8.0-8.0.0-2.el9_3.x86_64.rpm 110d2650b2bbae10f4b80e8b66f3e39d98f676bca754017aca5302eb3516d3c2 dotnet-runtime-8.0-8.0.0-2.el9_3.x86_64.rpm 25799d64df187dee0c13d52fd1e1f38b51a08cc2f7d92a532d332ed525e91aa0 aspnetcore-runtime-8.0-8.0.0-2.el9_3.x86_64.rpm 266cc888428f49e9a7a05bd07ebe6c97cf3dd4f2a4e4b527324e623511ca6070 aspnetcore-targeting-pack-8.0-8.0.0-2.el9_3.x86_64.rpm 3caa83f61a624edcc9b9232c4c7bdc3598c12d1a11aed1d04a499046aed6811a dotnet-targeting-pack-8.0-8.0.0-2.el9_3.x86_64.rpm 4941dbb97eaaf92a9e45e546644ab2bd9651e54cf018fb0b04be2cba7aae7c76 dotnet-apphost-pack-8.0-8.0.0-2.el9_3.x86_64.rpm 900880601d08bacaeb5785fbdb2d1f2278b21360428e2bf985f0ab06589f0401 dotnet-templates-8.0-8.0.100-2.el9_3.x86_64.rpm a9a9c3d0f5470c08037eff9a9ce77016eb0e875f6d6a61e0c4ab7945a08ed3d2 dotnet-host-8.0.0-2.el9_3.x86_64.rpm e6fe3ff103c9e740eef2f67e3a6970be036fa015b9047cff2b7e07ded02950be dotnet-sdk-8.0-8.0.100-2.el9_3.x86_64.rpm fc8607f0ea00292293dc6d1cf75d7ad84c19a4d0302b6ae0514ddce6c2555f8a ALSA-2023:7255 Copyright 2023 AlmaLinux OS 0 1 Moderate

dotnet7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14. Security Fix(es): * dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049) * dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default aspnetcore-targeting-pack-7.0-7.0.14-1.el9_3.x86_64.rpm 326bc495c5438a6ebe12162d458beed748bc3c5a6aaadaf384ce176ae8ad90cc aspnetcore-runtime-7.0-7.0.14-1.el9_3.x86_64.rpm 42ca2ad10b3adbb74b88ff3f823df47a930e2db6ba6dc79db599b132e082987e dotnet-apphost-pack-7.0-7.0.14-1.el9_3.x86_64.rpm 5417f24f52a3a752b2bf2d4fb0fea5c6d1e661c3b50b77d5030c7b126046c2c1 dotnet-hostfxr-7.0-7.0.14-1.el9_3.x86_64.rpm 629b9a4e159b57f4924f06d1ae33bfa07f7c665507028cdc9110d3dc6b72229e dotnet-sdk-7.0-7.0.114-1.el9_3.x86_64.rpm 9aafb63e226d93e23e2d34ccf7f0b405583756f5fa8e7bc19693f358f07b6708 dotnet-runtime-7.0-7.0.14-1.el9_3.x86_64.rpm b14957e3c76d27254861b36c20007d829f93239a70fcdad76291a16c5f1f4c70 dotnet-templates-7.0-7.0.114-1.el9_3.x86_64.rpm b6f7c7c235a51c55ae203a5ef6394651019d378aaf08e20681fc1c942b582770 dotnet-targeting-pack-7.0-7.0.14-1.el9_3.x86_64.rpm e5e82762faefe2a126bc2f9c5269d63e06773f6b99ccd08664208c8cdb32518b ALSA-2023:7257 Copyright 2023 AlmaLinux OS 0 1 Moderate

dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25. Security Fix(es): * dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049) * dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default dotnet-runtime-6.0-6.0.25-1.el9_3.x86_64.rpm 27d3b6a381586e6540d87b00c41a5d578ec9d6f8ac2a299efcf38b6ed551ee7a dotnet-hostfxr-6.0-6.0.25-1.el9_3.x86_64.rpm 51199abed23397c31f06f2f274d1c165a4b99450b232858887908af1f2c07205 dotnet-templates-6.0-6.0.125-1.el9_3.x86_64.rpm 51ed113a0fb9d8790b2386e4be61e24f985f54133c039caf2a7c55fba18a7d58 dotnet-sdk-6.0-6.0.125-1.el9_3.x86_64.rpm 54fdeb31a66a1489b1ed2b9592cd34f18974cd3756de1451f820fedac3a6be49 dotnet-targeting-pack-6.0-6.0.25-1.el9_3.x86_64.rpm 657940b169275d5554d0f862a21f9d57c2cb7e46b7f87ec0c918b342a30be147 dotnet-apphost-pack-6.0-6.0.25-1.el9_3.x86_64.rpm bbaa987a2bb00fbfa715c4287399855ef7713bb3317c38b2ab571136d50b2625 aspnetcore-runtime-6.0-6.0.25-1.el9_3.x86_64.rpm c8c2e87fa181c0f5d9869e8a894d39bdb1ec3cb15bc61b03cc4419614810eff9 aspnetcore-targeting-pack-6.0-6.0.25-1.el9_3.x86_64.rpm fbdfb2437d425bcec674341e1c09850620451b2ac76af6089bf8fa961d8fb163 ALSA-2023:7277 Copyright 2023 AlmaLinux OS 0 1 Important

open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools: SAML token signature bypass (CVE-2023-34058) * open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default open-vm-tools-desktop-12.2.5-3.el9_3.2.alma.1.x86_64.rpm 00264659fc0e0cfeaea1232782e496ee96d571f66566cf9e8e27a4d19f9af93d open-vm-tools-test-12.2.5-3.el9_3.2.alma.1.x86_64.rpm 22395d56c8e25947c4bb785b16c6e8d3586550f447eaa4d42ed666162425d694 open-vm-tools-salt-minion-12.2.5-3.el9_3.2.alma.1.x86_64.rpm 2f03d0a85d434d52977a64432fd5cdbcceecdae659b86ad58270fa3eb11b3a15 open-vm-tools-12.2.5-3.el9_3.2.alma.1.x86_64.rpm 88d91581166ba971cebd21c88128fc2ed2f7ecf0f06f945f0c351dd2d8f7f531 open-vm-tools-sdmp-12.2.5-3.el9_3.2.alma.1.x86_64.rpm 98d74f1e365c39b2a77b5ccd38d7617dfbc34f7b388f2f26895347fe9b0f92bc ALSA-2023:7465 Copyright 2023 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: DoS against HTTP and HTTPS (CVE-2023-5824) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default squid-5.5-6.el9_3.2.x86_64.rpm 81679e7b2fb2a1fdc744d5f03299791e0d26a988cfd9b6aa6be0c4eb3e9b3dbe ALSA-2023:7501 Copyright 2023 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.5.0. Security Fix(es): * Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204) * Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205) * Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206) * Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207) * Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212) * Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208) * Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default thunderbird-115.5.0-1.el9_3.alma.x86_64.rpm 823f85952938f2a34848eb53501af8a382b7f176c92ac94346629be48b0dde94 ALSA-2023:7507 Copyright 2023 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.5.0 ESR. Security Fix(es): * Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204) * Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205) * Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206) * Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207) * Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212) * Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208) * Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default firefox-115.5.0-1.el9_3.alma.1.x86_64.rpm 079a530d20dd141cdeccd9e63d27e425876673f6ca1cd6e37d64a49378e1c189 firefox-x11-115.5.0-1.el9_3.alma.1.x86_64.rpm 6c63cd3ed3668149d84ab407906b785326b0e5ebeae64475a4b41483f6fe46e9 ALSA-2023:7711 Copyright 2023 AlmaLinux OS 0 1 Moderate

apr security update

The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines. Security Fix(es): * apr: integer overflow/wraparound in apr_encode (CVE-2022-24963) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default apr-devel-1.7.0-12.el9_3.x86_64.rpm 689bb45990d2b3dac888cc967d20fe3b4cfeb980025619a744e62ec8edc05b5e apr-1.7.0-12.el9_3.x86_64.rpm 7c6db55bd938cb3aa58ef4df34c7d2418591659b50fc83f9a697c41460e116f7 apr-devel-1.7.0-12.el9_3.i686.rpm 901036b5c5f99ee349ebc76720e67e63c0ce82b7fe0089549c73bc7b1f66978f apr-1.7.0-12.el9_3.i686.rpm a1f81bf4834143d4db214f0120b310d3121ebe7b686887f923fc7c3e1f223217 ALSA-2023:7712 Copyright 2023 AlmaLinux OS 0 1 Important

tracker-miners security update

Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker. Security Fix(es): * tracker-miners: sandbox escape (CVE-2023-5557) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default tracker-miners-3.1.2-4.el9_3.x86_64.rpm b49f2909673f769cbf822be38b4a5218ddd44a9c3be0ceb46fa7332d62719b79 ALSA-2023:7715 Copyright 2023 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default webkit2gtk3-jsc-2.40.5-1.el9_3.1.i686.rpm 13f08bd9e09bd322d146e2b756e647f076c1e95956c8678949f5587af17af1ca webkit2gtk3-jsc-2.40.5-1.el9_3.1.x86_64.rpm 253b6548d5d2e94d85ccdf6e65d43cef90e1c1ba3f5db2998df952a85ba5aadd webkit2gtk3-devel-2.40.5-1.el9_3.1.x86_64.rpm 49ffd39444114a036987f32ed119fe52061463d8b7026cd2a2796c80ec174564 webkit2gtk3-jsc-devel-2.40.5-1.el9_3.1.i686.rpm 833a0fb0e8816ee6fa2927c79883cb91906f664e46986146b7f75c64ab55d364 webkit2gtk3-2.40.5-1.el9_3.1.x86_64.rpm 8398d2abac359c536d9c5e092b7fe9e65d4ea8ba249a86acc719808341c4742b webkit2gtk3-2.40.5-1.el9_3.1.i686.rpm bd8eaed525cc0a759739a6ccb475e1081a20ad1657b25d738f550d3f652933d7 webkit2gtk3-devel-2.40.5-1.el9_3.1.i686.rpm e60130d6c3d19744a7ca0bf0d0028270b215654e97118c22164896290baf7fdf webkit2gtk3-jsc-devel-2.40.5-1.el9_3.1.x86_64.rpm ff2c3988a95df3e73b78a34d03a86f6f0dbd9badedc0f11af7758db040d48d84 ALSA-2023:7747 Copyright 2023 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default libxml2-devel-2.9.13-5.el9_3.i686.rpm 568462487f0c436c041521c69f8a640889c272593f4668fb5b4993785f40842c libxml2-devel-2.9.13-5.el9_3.x86_64.rpm b335837b21b7e5a66f81ee5e0c742e2a98c74944727f7d236e48d1d7fd4b5400 ALSA-2023:7753 Copyright 2023 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920) * python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default fence-virtd-multicast-4.10.0-55.el9_3.2.alma.1.x86_64.rpm 15c76fd2fa16a463665dfd1d4188fa1f4031fb9bf65fde7fa6781b02e1585f79 fence-virt-4.10.0-55.el9_3.2.alma.1.x86_64.rpm 313f4153f71f601cb2d59ca69e7a06cbc50ad91745e91e1cc9e7da0de80c1a34 fence-agents-ibm-vpc-4.10.0-55.el9_3.2.alma.1.noarch.rpm 7945b340fe328494dd4f3e89fb3ceb0c36fb0a70648bc9bbbf1a938ff741b364 fence-virtd-tcp-4.10.0-55.el9_3.2.alma.1.x86_64.rpm 7fe006fc2ddcc7e05a04fa8c44ab8c32c9034bb192a9738ce1e7533f0a02db10 fence-agents-ibm-powervs-4.10.0-55.el9_3.2.alma.1.noarch.rpm 80eff58a1a89b97995a951a4efcecc45eefbbc90757a0c4d7d1024bae7fa2edf fence-virtd-libvirt-4.10.0-55.el9_3.2.alma.1.x86_64.rpm 886ca54431808400c58d6ea27a845fd4829332ecbf8bd3c512de1f0e69110447 fence-agents-compute-4.10.0-55.el9_3.2.alma.1.x86_64.rpm aabda79b79071deb8fcb14dbcd6d73d3cdc3c169602cf7d7e8cc98e24613853e fence-virtd-cpg-4.10.0-55.el9_3.2.alma.1.x86_64.rpm ade071622015880c95c7601eebf55797eaf6fb1760536b6fff5dcc11c40dcef8 fence-agents-kubevirt-4.10.0-55.el9_3.2.alma.1.x86_64.rpm c81521ed3b5504b92619464484d6c9f0901557c624e5965ad70482528bbed1b5 fence-virtd-4.10.0-55.el9_3.2.alma.1.x86_64.rpm cb316bc6a9827fac2f8765f6b2f1913b151606eea828f76bd087ef2f35a0e976 fence-virtd-serial-4.10.0-55.el9_3.2.alma.1.x86_64.rpm cb42e8322111e712952c321b1b31ccb2cd8918c99414b514734cfa1a9080d8d9 fence-agents-common-4.10.0-55.el9_3.2.alma.1.noarch.rpm dc2d621180d9db27968919115009987ddf187fba19a3589f99e1186e8040865b fence-agents-virsh-4.10.0-55.el9_3.2.alma.1.noarch.rpm ef5db45357e983592d039b048539ec273e77876282975353eb099a6599f9b9c5 ALSA-2023:7754 Copyright 2023 AlmaLinux OS 0 1 Moderate

pixman security update

Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fix(es): * pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default pixman-devel-0.40.0-6.el9_3.x86_64.rpm 1346f382550391cc85a3812dc37e86861b6a593538790505cb4409914e4672e6 pixman-0.40.0-6.el9_3.x86_64.rpm 5bfa3f4e7cd187e39d9cd5f8f52f910ce1a49b1f998d5948a7fa872d35670ede pixman-0.40.0-6.el9_3.i686.rpm 6ede8cc128fc9945133f25aee2f0830cfa737ac140d44ab2b860c621f2831e5a pixman-devel-0.40.0-6.el9_3.i686.rpm 853bebdd6bb87a0cb7652be72016f62c73a781467d7b144988fd9c07b7fcf1a3 ALSA-2023:7762 Copyright 2023 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default skopeo-1.13.3-3.el9_3.x86_64.rpm 08e9b10967f7f505b9e15541bff9b17aa64a314b452f860e95d9451d94706449 skopeo-tests-1.13.3-3.el9_3.x86_64.rpm 65172c7d0d2747143e1128e8a5098f451a6d0c2292532e64ebed66a315b9ff6e ALSA-2023:7763 Copyright 2023 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default runc-1.1.9-2.el9_3.x86_64.rpm 074bdacce30b7266aec255a5c040e49b3a2b7d9de55eac6d8f0ef39ad3ad7612 ALSA-2023:7764 Copyright 2023 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default buildah-1.31.3-2.el9_3.x86_64.rpm 5f0aa3001075d7c1627c376f3897ae174a59c117e81e49b5220522180ecc0b30 buildah-tests-1.31.3-2.el9_3.x86_64.rpm b61dfeaa93295fe5e91c1b4d4cc3fe7db90dddfd4833278c0ab62102fc5c625b ALSA-2023:7765 Copyright 2023 AlmaLinux OS 0 1 Moderate

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default podman-remote-4.6.1-7.el9_3.x86_64.rpm 2fb160fe20fef5de6ba7a67a28df479f0fd33c96f766bd15fdb49945e83fb063 podman-4.6.1-7.el9_3.x86_64.rpm 550d54f0c0bdf136b76a184a29e82f36e5354dcf744228093a0f3b6388669c6f podman-tests-4.6.1-7.el9_3.x86_64.rpm 694f639532e1fdd66d8e3fa441b8dccbd33cf3c25742b8829e270dda7d29dc66 podman-plugins-4.6.1-7.el9_3.x86_64.rpm b9d31ce7362cf84cd3d7ff9845eeb529d4b0adab193b14c0f5fc6b4bdbef3e00 podman-gvproxy-4.6.1-7.el9_3.x86_64.rpm bc021811751fd5571c6bc5b16d3e49f6db254480c83a42586de568481b854054 podman-docker-4.6.1-7.el9_3.noarch.rpm e04db657a2b32f8ed6237a285a6a374c16fa32b0c4359d0aaaf7473b962e109d ALSA-2023:7766 Copyright 2023 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default containernetworking-plugins-1.3.0-6.el9_3.x86_64.rpm 8582b72210e0dc98664caf5c9306738a1062d6b135aa8f4fbfac835bd64375df ALSA-2023:7784 Copyright 2023 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869) * postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868) * postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417) * postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default postgresql-pltcl-13.13-1.el9_3.x86_64.rpm 5260aebde8c39d688e36ff269ee82961d96610fce451a4832839ec257794b582 postgresql-contrib-13.13-1.el9_3.x86_64.rpm 639d0d6817c897f5e79ea813dd10e41a995c4edbff96eec5635566483407854f postgresql-private-libs-13.13-1.el9_3.x86_64.rpm 7044f7310fefcfb6edb93017d5df777232285f77a7663a14b3298fe769f147e4 postgresql-upgrade-13.13-1.el9_3.x86_64.rpm 7c93e6ba5d0642143437d130cfbcc9a1c1ce4ef6a408f98c691d22943ddb3ed8 postgresql-plperl-13.13-1.el9_3.x86_64.rpm 829233f85ab4a9f014f6a7b3a1828d01870567f6c4ea89e60c84d0d611ebb43c postgresql-plpython3-13.13-1.el9_3.x86_64.rpm 9abc95cc4e3fe4ce83ec6ea0d1b98cb3fbea8eab5e67a2550173d700c1e16f81 postgresql-server-13.13-1.el9_3.x86_64.rpm c7bd8fa5e612555a221acfd296d67c052ba4cbb6469a3dddd38c93af2fca3128 postgresql-13.13-1.el9_3.x86_64.rpm d6d5e55de600b373a58c8bd4df0a6ece608c9c2de7bb50fe80c4f5b2bb8dd255 ALSA-2023:7785 Copyright 2023 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869) * postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868) * postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417) * postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870) * postgresql: MERGE fails to enforce UPDATE or SELECT row security policies (CVE-2023-39418) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default postgresql-pltcl-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 05f0bdd96599759012f33bf06e55b31bb9c4016060a179e5d0493fa710f27a31 postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.x86_64.rpm 0c54728acb7eabf7a7ba774b18e109ec59a59a5e2dfe3c7ee328b1d471e0d77e postgresql-test-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 0f1d96f102ad19bedd1736315d863d78553983ade840a08393438a321a08b5bb postgresql-server-devel-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 10491b078737757474899c3f546e48c061dbb5e34fa67a17339f232f59a73c11 postgresql-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 180115830ef4837b13013bf1023a3118d0f15e1d2389a277549e6e60b188a0a1 postgresql-private-libs-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 28f68e625e47731b60991c854d5a318c746313edd1f194d2dbb6c408a64c9ad3 pgaudit-1.7.0-1.module_el9.2.0+22+09653793.x86_64.rpm 350cd8f8c2ca35f5ac5c4922666ffe2443b5e6d2dddfce355289de8a24d7417e postgresql-server-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 37957bb341d1a275b8f9e964298a9c2c762ea383e0e9eba1fa62d24f3bac7211 postgresql-static-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 579ddf4f159b5a06fcee61741b5d0cd18b83505782f005fa211d6c04ec5d1617 postgresql-docs-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 5b4a2c054e69b1d11e84a577a6a137111d404b115c5fa5ee956507bde0426f8a postgresql-upgrade-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 5bdc264c464765ebe7b3fda63c005bae13ab5f9343b4d15ed6155a9e813d2049 pg_repack-1.4.8-1.module_el9.2.0+22+09653793.x86_64.rpm 87d022a740ce8e28aa41659d2946eb158057cf6fa80801cbd5c3cc8e2868da92 postgresql-plperl-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm 89a57813fb01236ffd2acfec5761b5f503b65e03b9a304b28548f42ddbe6fe3c postgresql-contrib-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm a579a85afa6b60acc517d2a42ced6fd6f25cb7a4eb06db52fb79c743833248da postgresql-upgrade-devel-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm a8c6b43cd4c52972d4f7cfa2e2ad57cd8b60d88537fb10c818980e3d23d48e45 postgresql-test-rpm-macros-15.5-1.module_el9.3.0+52+21733919.noarch.rpm af65d718e2abe6c7280c9eabb0ca53120f62f0c2941b6d1c76bc6dd9aef13a19 postgresql-plpython3-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm bc8965ceb83a7b48e5663e9aeef134a99fbbc5fa2f58d7cd964278a67c8fc5ac postgresql-private-devel-15.5-1.module_el9.3.0+52+21733919.x86_64.rpm d152ede41db64fc84a7ab837d4c4408a3ef48dff318eeac6ee4b4dd182197936 ALSA-2023:7791 Copyright 2023 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429) * gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default gstreamer1-plugins-bad-free-1.22.1-2.el9_3.i686.rpm 12d3e7338628430eccb2e6ecd6b5d2600dcaf79936cfeb7dce2ff62ba9180753 gstreamer1-plugins-bad-free-1.22.1-2.el9_3.x86_64.rpm deb3ccf43c33c60bd43b203d7c0b41888f7b375db010edf5bbaeb72b2eb123c6 ALSA-2024:0001 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.6.0. Security Fix(es): * Mozilla: Heap-buffer-overflow affecting WebGL <code>DrawElementsInstanced</code> method with Mesa VM driver (CVE-2023-6856) * Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864) * Mozilla: S/MIME signature accepted despite mismatching message date (CVE-2023-50761) * Mozilla: Truncated signed text was shown with a valid OpenPGP signature (CVE-2023-50762) * Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857) * Mozilla: Heap buffer overflow in <code>nsTextFragment</code> (CVE-2023-6858) * Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859) * Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation (CVE-2023-6860) * Mozilla: Heap buffer overflow affected <code>nsWindow::PickerOpen(void)</code> in headless mode (CVE-2023-6861) * Mozilla: Use-after-free in <code>nsDNSService</code> (CVE-2023-6862) * Mozilla: Undefined behavior in <code>ShutdownObserver()</code> (CVE-2023-6863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default thunderbird-115.6.0-1.el9_3.alma.x86_64.rpm 2db5559c11bd68ec549bc96385ea9681632b3c20c876faf9c0ef9499e5f64d6f ALSA-2024:0010 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default tigervnc-license-1.13.1-3.el9_3.3.alma.1.noarch.rpm 24e7c7b936310a7431a75cd4667a29a921adf4498d6b590d9d39f8bfc6b04e4d tigervnc-icons-1.13.1-3.el9_3.3.alma.1.noarch.rpm 3a9e687b068bc354e443cf57ab3543461ec41d8cb40b8746dd3c3582b55ca406 tigervnc-server-module-1.13.1-3.el9_3.3.alma.1.x86_64.rpm 9b97878d507e9efc30ed97c6fdab5ebcd27a11418765c79f5914033d5bbad642 tigervnc-1.13.1-3.el9_3.3.alma.1.x86_64.rpm 9ed29f62f9997d7cd2323f1142e1b6ec12d5429650e5bf614acfcf0a2325893e tigervnc-server-minimal-1.13.1-3.el9_3.3.alma.1.x86_64.rpm be85686d13303788cd8799efb3c3e891717591e50bd659c8ce0ca02cc0f40b09 tigervnc-server-1.13.1-3.el9_3.3.alma.1.x86_64.rpm f9ceef9b348942adb5aec11ea78deef2fa48a76cadc537f059eb0649ed6ca728 tigervnc-selinux-1.13.1-3.el9_3.3.alma.1.noarch.rpm ff518f13e65a4aca8f744ae459296109897598014a61b9acfb792901d7f37af7 ALSA-2024:0025 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.6.0 ESR. Security Fix(es): * Mozilla: Heap-buffer-overflow affecting WebGL <code>DrawElementsInstanced</code> method with Mesa VM driver (CVE-2023-6856) * Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864) * Mozilla: Potential exposure of uninitialized data in <code>EncryptingOutputStream</code> (CVE-2023-6865) * Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857) * Mozilla: Heap buffer overflow in <code>nsTextFragment</code> (CVE-2023-6858) * Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859) * Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation (CVE-2023-6860) * Mozilla: Heap buffer overflow affected <code>nsWindow::PickerOpen(void)</code> in headless mode (CVE-2023-6861) * Mozilla: Use-after-free in <code>nsDNSService</code> (CVE-2023-6862) * Mozilla: Clickjacking permission prompts using the popup transition (CVE-2023-6867) * Mozilla: Undefined behavior in <code>ShutdownObserver()</code> (CVE-2023-6863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default firefox-115.6.0-1.el9_3.alma.x86_64.rpm 48a6e6e4048864be1a27cdc564b2bfeb2f0f9cbfb2aec1162574ed5e8a4091b7 firefox-x11-115.6.0-1.el9_3.alma.x86_64.rpm 6c5ed6ae4f6a1ca9cad39c660904cc191adbdd366e68c667ff90fbbd4eb2a5e7 ALSA-2024:0071 Copyright 2024 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service in SSL Certificate validation (CVE-2023-46724) * squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728) * squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285) * squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default squid-5.5-6.el9_3.5.x86_64.rpm c845e04b6bdac94bb5cced03ca2c6017368270ab9641d77a5bf029471a207d72 ALSA-2024:0108 Copyright 2024 AlmaLinux OS 0 1 Moderate

nss security update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): * nss: timing attack against RSA decryption (CVE-2023-5388) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default nss-devel-3.90.0-4.el9_3.i686.rpm 0194e46545a72b3e0f79dcfe8655636ea7b5d4305261914ff751aee5b75922da nspr-devel-4.35.0-4.el9_3.x86_64.rpm 104f41d7eb7a740bc8530d1a1b1695bede1e2127a3cec7d9f5e37245f2262aef nss-3.90.0-4.el9_3.x86_64.rpm 1302b80a7e66c8f9803803f26dcaf4458b0fa043ffcfe696208a8899e6fc5b09 nss-util-3.90.0-4.el9_3.x86_64.rpm 1db144c4f96e090f4f76db65bff6c12beb4bea8547a7c54031d0f8e3c9d5e7ae nss-util-devel-3.90.0-4.el9_3.i686.rpm 27c2058c1bb65a02d90957959ec7b982978cb85c5ebc1f713614eb4255c0dfc9 nss-softokn-devel-3.90.0-4.el9_3.x86_64.rpm 34a6d33ee80bfbec83ed0dbcd1aaaa360154522b997c9d10d4be980468046daf nss-softokn-freebl-3.90.0-4.el9_3.i686.rpm 4efdfff24aef2f10e661cad2ead1dc18f95b6f271c0cb8fe4957bb1bd1bce007 nss-softokn-freebl-devel-3.90.0-4.el9_3.i686.rpm 5ce0e19bb17fd902ca5769d60c031230d2d7e58f76f78fb2aaef2c1d2455f391 nss-devel-3.90.0-4.el9_3.x86_64.rpm 5d2c568c3d41627aba7ed97af0d858d70ce246464a59504a76db88d7968c2e90 nss-util-devel-3.90.0-4.el9_3.x86_64.rpm 76d07bde2523dcc0a965599b69e1fb6598d3ca2053e49f83e14fe61c07886936 nspr-4.35.0-4.el9_3.i686.rpm 77db3b409aa419d3bac44985a6ca167961a3b1c642ef1ff960f8b80ae2f000ff nss-softokn-devel-3.90.0-4.el9_3.i686.rpm 7c3951496a26f880d6d4f7195807cfa72a58014bb57786c9dc0d5b705e656d67 nss-softokn-3.90.0-4.el9_3.x86_64.rpm 81a2b4193ee59c9c4a0fab9100a5fc88c0682cbc90d5901f499a5d852b06d287 nss-tools-3.90.0-4.el9_3.x86_64.rpm 82b69182e296872399214907563ba8c6b9843f735eed60cd1d76972f3bb4b6a1 nss-3.90.0-4.el9_3.i686.rpm 8afcca8b532f7e2a3aacfa0b6e5dc5c4eec43822482982c0bb3d2e8d6bfdb3f1 nss-softokn-3.90.0-4.el9_3.i686.rpm 9138edab897cd1589829ebed9bbb012646642311456421766d66e90367e9ee1f nss-util-3.90.0-4.el9_3.i686.rpm a9102bade23570c6dc841db10eca824831904b4205f8149db36650b1a1a15850 nspr-4.35.0-4.el9_3.x86_64.rpm be0d1c0dd5d83820fddf7843557520b03b1a181cdb90728f0195ff20b793d185 nspr-devel-4.35.0-4.el9_3.i686.rpm d59a447dc6c75a84216c546f0e3a65b7fa8cfa7b288fc388e08c088d003e95c3 nss-softokn-freebl-3.90.0-4.el9_3.x86_64.rpm e9e10e380f739d40710d6e31034184f3bbf6f3ff92f0666598361877aca49a51 nss-softokn-freebl-devel-3.90.0-4.el9_3.x86_64.rpm ece56d595c0f449aacab9795c416a1b6af588dfefe80e046fd4e0a79a637c2e4 nss-sysinit-3.90.0-4.el9_3.x86_64.rpm feb4facb03df2ad6436e38c005737f8538ed4dabbe6cc3448221d3b1cf479aa6 ALSA-2024:0141 Copyright 2024 AlmaLinux OS 0 1 Moderate

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: Invalid CSRF protection (CVE-2023-5455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default python3-ipaserver-4.10.2-5.el9_3.alma.1.noarch.rpm 16ba8eee5c0d9852ed9e72219f584538341dee5ea25bb6516795a45ace760256 ipa-client-common-4.10.2-5.el9_3.alma.1.noarch.rpm 47e408569d39979a7e0bc85876446739514c22e803b2adb110ab4989fc748081 ipa-client-4.10.2-5.el9_3.alma.1.x86_64.rpm 48120ca5159cf992de6907ed96ec64920708983d35b6c58514e64ba8808bbaa4 python3-ipaclient-4.10.2-5.el9_3.alma.1.noarch.rpm 5c9cfe33c8f5a6d616229f3751b5326b564f1f638c39c9cdd906066c12eed42f ipa-common-4.10.2-5.el9_3.alma.1.noarch.rpm 899c686d45b06648513fd66138046fe952364dabd24625e1016c7049f8e8cc35 ipa-server-common-4.10.2-5.el9_3.alma.1.noarch.rpm aa2e06c49a204f9b9a9ac830153f944aa52e4885106b843e9f13c2cc53ba889c ipa-server-dns-4.10.2-5.el9_3.alma.1.noarch.rpm b7125da0a7b970fb6faf006f057b98d45136c632a0043b06e122ffeae16eab25 ipa-client-samba-4.10.2-5.el9_3.alma.1.x86_64.rpm b8860a93c1b20578cc56adc2280a6f39185aa30fd005e84474f11e9e3cf64b78 ipa-selinux-4.10.2-5.el9_3.alma.1.noarch.rpm b9a988d8af1d65976cbf6e2ce80a35d0e094d530f2d34afc08bc4f245fa4c0c4 ipa-client-epn-4.10.2-5.el9_3.alma.1.x86_64.rpm d7cbffb0e590fb8c09738247ee7de0ef4fb9e1f3677b2f76763a81f146adb930 ipa-server-4.10.2-5.el9_3.alma.1.x86_64.rpm ed2db29c67f75fe4f16645bebd029b16facdda31465f92d9766154823d2a0619 python3-ipalib-4.10.2-5.el9_3.alma.1.noarch.rpm f0238ad6d6803455fc358a90a251128f1954518357c0e811d1fa3b91ffccbea9 ipa-server-trust-ad-4.10.2-5.el9_3.alma.1.x86_64.rpm f921424939f6a084060767419268844e9dc5b84c263411d1f38475932fe966c8 ALSA-2024:0151 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15. Security Fix(es): * dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS) (CVE-2024-0056) * dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057) * dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default dotnet-targeting-pack-7.0-7.0.15-1.el9_3.x86_64.rpm 0e662be0a01d0c54d5a8fd1d178a9aea38dfea6889c2134d35cee2ae525a09c5 dotnet-runtime-7.0-7.0.15-1.el9_3.x86_64.rpm 3037631f92737dc4a0df9f1db98e3cd060ac08554337ad3b5ad0730db8446b43 aspnetcore-targeting-pack-7.0-7.0.15-1.el9_3.x86_64.rpm 5edbfe8d9a6a62f01bfcbc5a81c2994ab0c94c84be19d76dab91d8b7a157ec7d dotnet-sdk-7.0-7.0.115-1.el9_3.x86_64.rpm 5ff950a130252a65419ec23126cca09481a15451087c5b1e8c580afdd917a1d7 dotnet-apphost-pack-7.0-7.0.15-1.el9_3.x86_64.rpm 96e955f6dc792a17aa4a015fbe58e33db20c0b5d9fb37bae9e1089a4c091b856 dotnet-templates-7.0-7.0.115-1.el9_3.x86_64.rpm a063b39bb5bcba13aca7b63547c1cfbc607a1842d283b3d896b5b728fe72cf22 aspnetcore-runtime-7.0-7.0.15-1.el9_3.x86_64.rpm bac9bbac25103a4a7a2ca8c776bfde14aead2939cef7ec5276def9cff43a082e dotnet-hostfxr-7.0-7.0.15-1.el9_3.x86_64.rpm ee148ad9966dbcdd5afb4a2fd662f838599bb9050eb568bbfa4dadae3ffd0026 ALSA-2024:0152 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1. Security Fix(es): * dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS) (CVE-2024-0056) * dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057) * dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default aspnetcore-targeting-pack-8.0-8.0.1-1.el9_3.x86_64.rpm 2e92e3098bc8ebe7dc1d3458c5918e5c30d665973201cd5cb116106873206304 dotnet-templates-8.0-8.0.101-1.el9_3.x86_64.rpm 39213f4d34c7c545ac78d3a160dab21c714ec288d054f905c6af61573ee9c20d aspnetcore-runtime-8.0-8.0.1-1.el9_3.x86_64.rpm 63d54a08782e544a8c902d23cedcd7ec6ed03cf5ea829ad8cd9fd4b7a91a8175 dotnet-sdk-8.0-8.0.101-1.el9_3.x86_64.rpm 713ee02079b47d9979e091c66f4fd9c5e356442de148335c07202b10f596f089 dotnet-apphost-pack-8.0-8.0.1-1.el9_3.x86_64.rpm 78538b60008e6c488c50b51011840cef9577d87c0eb0bba490d937d8bf57f49a dotnet-targeting-pack-8.0-8.0.1-1.el9_3.x86_64.rpm 7aedac8766f6ac989b9738534622c8cde3d4d378496efd5149adf0f59abd1612 netstandard-targeting-pack-2.1-8.0.101-1.el9_3.x86_64.rpm 8852473337cd8096755115f0091bd9629fe6715463ce7a2abcb3537c80816761 dotnet-runtime-8.0-8.0.1-1.el9_3.x86_64.rpm 993f73ba63b66b2bd86ea80bfcb9974bd3c7721d71eca14e1d0379baa3c8a1df dotnet-host-8.0.1-1.el9_3.x86_64.rpm d371b7572c4e777d8ccf769a9a7ab79702bea5bd37a9e295ac6fa5219829f2c8 dotnet-hostfxr-8.0-8.0.1-1.el9_3.x86_64.rpm dea21dcaa2c0e94e9bc21bb382eeee03ef15de69d31dd8d5e22f10ec9a288c60 ALSA-2024:0156 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26. Security Fix(es): * dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS) (CVE-2024-0056) * dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057) * dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default dotnet-targeting-pack-6.0-6.0.26-1.el9_3.x86_64.rpm 1b710e421231ea392f47aa426916843430c38e6b714fecacc6cfcca91015a450 dotnet-hostfxr-6.0-6.0.26-1.el9_3.x86_64.rpm 28b7b22311634f83290bf5b71d558a5d9ae7da6a42a485dd3f49987fedfdb6e7 aspnetcore-runtime-6.0-6.0.26-1.el9_3.x86_64.rpm 8f468c39695c4a5f703820420ee4746a33915ef3ad4d96377ac24c42db479da3 dotnet-templates-6.0-6.0.126-1.el9_3.x86_64.rpm 93d3fb5a049c4b9d3ca29e2d9507872e32544c3b8942101cc05cd5c5ae2c4517 aspnetcore-targeting-pack-6.0-6.0.26-1.el9_3.x86_64.rpm ad13f69b7f11e0b37a7ddc90d95644c35895ac8ecf5b9f832a559fc2486e9954 dotnet-sdk-6.0-6.0.126-1.el9_3.x86_64.rpm c51f16ed361ce26b9c6e7e01bb2d042e1b2e03a15ef31c18787ffc73d52cb45b dotnet-apphost-pack-6.0-6.0.26-1.el9_3.x86_64.rpm da07c37ce9271dd8714a5872b95f26cfda2245bc73f0f04b805c6d82e9942248 dotnet-runtime-6.0-6.0.26-1.el9_3.x86_64.rpm e1c9b691a4cb76cf9e89583a69ea6da83c01fbaa02e3c38e34d9a3b64f26c9b1 ALSA-2024:0249 Copyright 2024 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918) * OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952) * OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919) * OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921) * OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default java-21-openjdk-21.0.2.0.13-1.el9.alma.1.x86_64.rpm 330762a66d5bb4d404e9a6bac69177e7cf72ef39e4b3f958ba057a47936864e8 java-21-openjdk-src-21.0.2.0.13-1.el9.alma.1.x86_64.rpm 4990f74326057e2bb30a52e80acecf486dd47f217d6c4fe4fba87a52306398ec java-21-openjdk-devel-21.0.2.0.13-1.el9.alma.1.x86_64.rpm 77019fdcf50f48ad0558f0df7948690878a39c17e2e416f4168dbf8b1d9eb881 java-21-openjdk-jmods-21.0.2.0.13-1.el9.alma.1.x86_64.rpm 8f5a6d967977e6f0cfd749e55140c547ff3a46f66b0d6baad206a0bd44e4b06b java-21-openjdk-demo-21.0.2.0.13-1.el9.alma.1.x86_64.rpm 9764a1756d8a8a0f82951c2f67df518137450c58c176040a21ecedee7db290f6 java-21-openjdk-javadoc-zip-21.0.2.0.13-1.el9.alma.1.x86_64.rpm 9af550d3cf7c80621145954fe8744ba797cc4c0b00778307943d08d915e998bd java-21-openjdk-headless-21.0.2.0.13-1.el9.alma.1.x86_64.rpm aedd9ac6de1010dbfd266398f09fcfce438a842d5d1c44a6e821469545671085 java-21-openjdk-static-libs-21.0.2.0.13-1.el9.alma.1.x86_64.rpm af999c9a1fdd7f8c3aa08382a10e4f3f216f54f80f82f7ee8fc89c4bb6141e3d java-21-openjdk-javadoc-21.0.2.0.13-1.el9.alma.1.x86_64.rpm e08d8371b2db7bf88ef2573588aa30cf319d94fda867dd375e543e6ea51fd31c ALSA-2024:0265 Copyright 2024 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918) * OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952) * OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919) * OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921) * OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926) * OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * In the previous release in October 2023 (8u392), the RPMs on AlmaLinux 8 were changed to use Provides for java, jre, java-headless, jre-headless, java-devel and java-sdk which included the full RPM version. This prevented the Provides being used to resolve a dependency on Java 1.8.0 (for example, "Requires: java-headless 1:1.8.0"). This change has now been reverted to the old "1:1.8.0" value. (AlmaLinux-19636, AlmaLinux-19637) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default java-1.8.0-openjdk-javadoc-zip-1.8.0.402.b06-2.el9.noarch.rpm 321e6f480c0e0a8bcd4df7d6e262158acc423c387414d1af3fb522afb0d25532 java-1.8.0-openjdk-1.8.0.402.b06-2.el9.x86_64.rpm 422dbf1e214636a7fd67b4faf0322c73ce2ca957a6c34e374872ce01816ddce2 java-1.8.0-openjdk-demo-1.8.0.402.b06-2.el9.x86_64.rpm 54d554cf1329be04406d5ffcd00e2eae7e5f854ecc4912df1a88c84effc8311a java-1.8.0-openjdk-javadoc-1.8.0.402.b06-2.el9.noarch.rpm 7dc4b796bf3a7f0012edb49e48b4fa8ee46fc26d795c45d7bf4852fd0af34dd7 java-1.8.0-openjdk-headless-1.8.0.402.b06-2.el9.x86_64.rpm 7f03709c0a321e7d205056c70291f9f06201668cf8350ba1f5ba745b32f8fc70 java-1.8.0-openjdk-src-1.8.0.402.b06-2.el9.x86_64.rpm 86e2447ae7a5defdef8d6320d83dfd3a18a6b11f4f089186e5ebfba482513e3e java-1.8.0-openjdk-devel-1.8.0.402.b06-2.el9.x86_64.rpm 90ee305e6ddf25213bb875ee9b5790c075e0b758755e71e3778316f4fc4d8693 ALSA-2024:0266 Copyright 2024 AlmaLinux OS 0 1 Important

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918) * OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952) * OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919) * OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921) * OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926) * OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default java-11-openjdk-src-11.0.22.0.7-2.el9.x86_64.rpm 0f8c1c2feaa536f84bbf90fc424a0b990f5a271dc519026f291e10c753890ae0 java-11-openjdk-11.0.22.0.7-2.el9.x86_64.rpm 1175d7cebd9ed00b8a3d639ccb9c1b52fdf1a2aa10a61e3eda3148471b8af6fd java-11-openjdk-devel-11.0.22.0.7-2.el9.x86_64.rpm 3deae7816f8bf3e5e60ef5f20483d3aa0f1b5da4801c799184cdb3c652497c9b java-11-openjdk-javadoc-11.0.22.0.7-2.el9.x86_64.rpm 51fb0ee236294d7e3530671dc4aec56e85935a11e34d9cbee0e9379ad6c07625 java-11-openjdk-demo-11.0.22.0.7-2.el9.x86_64.rpm 86cdc8d05713219e75bac3e2550b5044e1a4e25607e66c57dd45dac3f9a077fb java-11-openjdk-javadoc-zip-11.0.22.0.7-2.el9.x86_64.rpm 979177a32c4b0b9b2ff07aa59fef8adb01579bdf94d573b34ad2ade5d729fc48 java-11-openjdk-static-libs-11.0.22.0.7-2.el9.x86_64.rpm d8264fdb0818559f2ba29ec0931247a7502a29108a9da78e090bb066a44359ba java-11-openjdk-headless-11.0.22.0.7-2.el9.x86_64.rpm d8c44d8b251a322590a81926a51d144386eadb7276c81f3e020a015c7348ea10 java-11-openjdk-jmods-11.0.22.0.7-2.el9.x86_64.rpm dde59ed53c142560ef4f897282c3b093df21464f1393d4e0513de40431c9429f ALSA-2024:0267 Copyright 2024 AlmaLinux OS 0 1 Important

java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918) * OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123) (CVE-2024-20932) * OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952) * OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919) * OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921) * OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-13930, AlmaLinux-13931, AlmaLinux-13934, AlmaLinux-13935) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default java-17-openjdk-static-libs-17.0.10.0.7-2.el9.x86_64.rpm 014de88a18c894cb7cb916ad8f9c300c70f0d8e3abb6ddbbced8c838a03da923 java-17-openjdk-jmods-17.0.10.0.7-2.el9.x86_64.rpm 29bf8c6e3528e91a4262ed9a71b44de06c296f22c589ef81c52876c8f168a77d java-17-openjdk-javadoc-zip-17.0.10.0.7-2.el9.x86_64.rpm 5cf422a573cbfa00a8f60713d31ffe008ae1f9a3ae1f28b988e3872dbab5aecf java-17-openjdk-devel-17.0.10.0.7-2.el9.x86_64.rpm 6e1e9b79c589b5defb89bbdba79559d9ceb8decc02178301fe24817cc9977337 java-17-openjdk-src-17.0.10.0.7-2.el9.x86_64.rpm aa96d1d535b6bf350ce4763786f0e1a4805913db0ae944598ced6a32fb68f245 java-17-openjdk-javadoc-17.0.10.0.7-2.el9.x86_64.rpm b65ab82a97a8c272685e11fb607ed9d51d3683ebcd6d7022f89c5be80a751c17 java-17-openjdk-demo-17.0.10.0.7-2.el9.x86_64.rpm b8e194baa52c372a102df13ca24399737140898e4bd7b80d204fdb4bce595f27 java-17-openjdk-headless-17.0.10.0.7-2.el9.x86_64.rpm da2ba6245a9ef1d970634fb85bf5b4e6ff8f39f8e3a9d385b41e77ca84ec08d0 java-17-openjdk-17.0.10.0.7-2.el9.x86_64.rpm e27a0d9dbc17144244931c19f2e1a0201e491210a13c3e40e5abede1f56cf48b ALSA-2024:0310 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Incorrect cipher key and IV length processing (CVE-2023-5363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default openssl-devel-3.0.7-25.el9_3.i686.rpm 545f7f908f47eb0e8d61abd7fb4d019b360344e468559edc6ad8385d58144f0b openssl-devel-3.0.7-25.el9_3.x86_64.rpm ad12d2f5e5045c127da827e5502c2694ffc5741c69b20ea9a1b372744cd992a4 openssl-perl-3.0.7-25.el9_3.x86_64.rpm f0a11baf5764b0fc3205ff16d5728a82ca43ba15c3a988d0db9d7f8f89bbe8b5 ALSA-2024:0387 Copyright 2024 AlmaLinux OS 0 1 Moderate

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: 1-byte array overrun in common path resolve code (CVE-2023-0568) * php: DoS vulnerability when parsing multipart request body (CVE-2023-0662) * php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247) * php: XML loading external entity without being enabled (CVE-2023-3823) * php: phar Buffer mismanagement (CVE-2023-3824) * php: Password_verify() always return true with some hash (CVE-2023-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default php-fpm-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 059fd520590dabf48f75d448a47fa827a308c09e42865dbc8804426f8c7921bc php-dbg-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 17f6fc2ca3cb6eb0fd252ff8723d0f3cbe5dd3165c229fc6bdce22555c2232c0 php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.x86_64.rpm 1d61584097fd68d9478f5e82d6be6d28824069372066e2373f64760a85a5187f php-snmp-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 1f8c6b459fcf1dd9cbdd5437a2968bccfe354ae83ff2237ba099b3c1669720f9 php-ldap-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 28b497c19d45bf6b13275a3f7044030435147829f82e53cde41059ac2b0873d3 php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.x86_64.rpm 2db6bdc28c0763904128e74c0d62d0ea0c44d261b11df928c090f42e22d03a81 php-intl-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 4d0ab92b1263321f4c5c281a2a581cc828ee1163616cea9cb2b8cf2f1d8753df php-pdo-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 523c4daeb5f856bc312e9ead2642b4d9483da0b6abea79ed78ea40c80b4cf0aa php-gd-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 52da5d9025a2a4897d837cc045dba39f50c32be6f8b34df68ef7ba7236f5183e php-common-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 5b407c2b3bd0abd80d0339ac1fcb5db67e2d31198974cf075a9abb34b3c33e38 php-devel-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 5fbfba2df3311b1f20f4104aaf8f5958e9580db6867410f7af02218e9acadee4 php-process-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 634828ddacbcc7642f73755a950703543d16c4599ddd1de5d86d085a3a93c33c php-enchant-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 66aca2cd8f496617d36064f278fc607fe0e7bb5bbd4ca977c9c98319ceb634f7 php-xml-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 70c9d85e861430deec02c4080d787941f44515f3bd17ec4b86cf080f1520c6e7 php-bcmath-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 8cfe7003c89d850e4145c64f1caf65044c825c9f68d1d7757fa70104d013a520 php-cli-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm 9a0f5ff6b9025666bf37134528f22d4ed16764f83b7e0961679db5100ed6115a php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.x86_64.rpm a2464722cfe7d27cd93eab8a1161a66f29ec07e2084e6b4c523d27979d38cf33 php-opcache-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm b8ac3a6a246a423a3c7e64c2ae0b9213b1d71ecdc38c84545bb7e20483546231 php-ffi-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm ba03daa33091d86792957d488655080187255727882923603326fe7aeae00363 php-mbstring-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm bec153a75b859a6da10af686fc15edf2824047e0126affa2e642e533cfe5f5da php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.x86_64.rpm c089feb7907f70938655f4f9ae584c4a4574a3bcbaa2b956ee3d13e9da66f52e php-mysqlnd-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm c112b14631fa32cc67550d076452467956c7c0d65a1aeb219ae90814f793bcca php-pgsql-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm ce63d1f04914fe54478552ac6a388787363d281a0a4a25e220d4448854b29053 php-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm d94a9761b354b13a1115679a89ab7f2072a22b3a69870973328576921916c309 php-soap-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm da0f0d3c5422f15b5443b831f85440c537d1bf24866679345b909feabe915c22 php-dba-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm db737644ffde170de4971379368509814e7e178488b71c18dcdd15421c44c4d0 apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf php-embedded-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm ea9a60ecc248bae2ad6e85f0b70c97e2dfc5adc33168ba5aa3834fe393c4ae69 php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.x86_64.rpm f148ef9c893d0c720cbeb8f383382dd98953bdc71b88d16fae276adc83daed11 php-gmp-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm f66e0bf57c92abf10f86ccdb3f813062af1cda9840dfac0c339e571d2c67c5dc php-odbc-8.1.27-1.module_el9.3.0+53+44872dd1.x86_64.rpm f713e56c8393bf1a2cb87a8f3d493e92c3571cfbfcbad4753bd945c700b2ee59 ALSA-2024:0463 Copyright 2024 AlmaLinux OS 0 1 Moderate

rpm security update

The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Security Fix(es): * rpm: TOCTOU race in checks for unsafe symlinks (CVE-2021-35937) * rpm: races with chown/chmod/capabilities calls during installation (CVE-2021-35938) * rpm: checks for unsafe symlinks are not performed for intermediary directories (CVE-2021-35939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default rpm-build-4.16.1.3-27.el9_3.x86_64.rpm 1aaf2a2a3993573cd9a46c4ceb0b859df6e229190ef3404f5e5950328be76e36 rpm-devel-4.16.1.3-27.el9_3.i686.rpm 487a1461591683f3900d7efee350a53a15ca226e3ae0037784939a0d1f4bdd59 rpm-plugin-ima-4.16.1.3-27.el9_3.x86_64.rpm 60fa4fb54045d944fde696c63a1d339630815b72e85091fa865e92664339b500 rpm-apidocs-4.16.1.3-27.el9_3.noarch.rpm 67e8f8b71bc7a80e8ed58a470d3a1c8b10f2d0e8cbf9ba1d201eebd28fe06644 rpm-plugin-systemd-inhibit-4.16.1.3-27.el9_3.x86_64.rpm 934b8e9593e81f909f8134afc719ec6590feff2c6e32e9a27c5378bc02a0cec5 rpm-devel-4.16.1.3-27.el9_3.x86_64.rpm a63c034be5c6cf36ae9cf4f3be0113aeddb62f92b5406543dc06473ad847b326 rpm-plugin-syslog-4.16.1.3-27.el9_3.x86_64.rpm c0030048922a04f2495a090027785c2b2c81dee23a68f52c30f1a1f13a8821d5 rpm-plugin-fapolicyd-4.16.1.3-27.el9_3.x86_64.rpm cc13ba05c85476714f76f884092bd29dda194962ddf7ca3822a91aa7178a6b4e rpm-cron-4.16.1.3-27.el9_3.noarch.rpm e9685fd6dfc5db1d769b202635c622a6b4204c7abfbb2d676f0194d433b36990 ALSA-2024:0465 Copyright 2024 AlmaLinux OS 0 1 Moderate

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: heap-buffer-overflow at sessionfuzz (CVE-2023-7104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default sqlite-devel-3.34.1-7.el9_3.x86_64.rpm 4e9a03d34e207f6c63ad933c32a6d5aef2e71ca0e6c5a44cbac4d1199c8ba1d1 sqlite-3.34.1-7.el9_3.x86_64.rpm a38f4781c2efe40edd37b8a4720c09e3b1dbebf4275d8cd2e50ac144f863e77c sqlite-3.34.1-7.el9_3.i686.rpm caa0f1675f5b77d17edfa67559890f44cac20ba5d8a0e1980b887afdfa3f9f05 sqlite-devel-3.34.1-7.el9_3.i686.rpm f0f35eb8bb7d279ea134a12a53c414d7290a8561a2cfb9d8458b07ba03268bef ALSA-2024:0466 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default python3-tkinter-3.9.18-1.el9_3.1.x86_64.rpm 12d21d953e710246f05ed8c9775a0808b4dba4ccf6218c23c03d286c4c1d05bd python-unversioned-command-3.9.18-1.el9_3.1.noarch.rpm 1c2b78fa731c304752a4c4529ee0fa14111f20108bab5b5ac8d6c956e7a4879b python3-devel-3.9.18-1.el9_3.1.x86_64.rpm 1d13a133ae8e8fca7f36e8c10550863664a9cd3b6f810b2604694f372d62c85b python3-devel-3.9.18-1.el9_3.1.i686.rpm 87a409de3c00cbac70de6f0ad1e0597266e8e3ba9f5eec65c45fde7355d8f03a ALSA-2024:0474 Copyright 2024 AlmaLinux OS 0 1 Moderate

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080) * tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794) * tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795) * tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default tomcat-jsp-2.3-api-9.0.62-37.el9_3.1.noarch.rpm 0740bf8f9f669285ab9f32acbd00c60ffdac9f643ec7ca257797f3878748a606 tomcat-docs-webapp-9.0.62-37.el9_3.1.noarch.rpm 0f6fcc41fecfff1c5e74ab45f73d3c93f3b1b8e15f08198de22581f7ea5de756 tomcat-webapps-9.0.62-37.el9_3.1.noarch.rpm 1054d85fbdd1f970e62f81799df523b5dd9fb5e86bff51f2601a8f227150082d tomcat-el-3.0-api-9.0.62-37.el9_3.1.noarch.rpm 1883c285bd8f86d8e5937477b56d687bc781b12c01195108be1b7586b4a2e786 tomcat-servlet-4.0-api-9.0.62-37.el9_3.1.noarch.rpm 2629dc7851140c221fa3f6c19cb521e5b4ae5e17120c92a84370d043d45395c7 tomcat-lib-9.0.62-37.el9_3.1.noarch.rpm bb84943939e62408a8f8c11586a47d1d715b85c5b38eeb8227b6f8eabd3ff37b tomcat-9.0.62-37.el9_3.1.noarch.rpm fb4fad075c4f5f58f1840ba3f384c5716ed00ca0bc5e64780f0502acdd08e1a6 tomcat-admin-webapps-9.0.62-37.el9_3.1.noarch.rpm fb6cdc5d8a141074745d75390ee119a99b6f7727246c901d2128b8f6ecd0271f ALSA-2024:0477 Copyright 2024 AlmaLinux OS 0 1 Moderate

frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406) * ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407) * frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234) * frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default frr-8.3.1-11.el9_3.2.alma.1.x86_64.rpm 2d13386c6808c9e9b29e4ca2815d4a3caf281a8a1b1ceb1e3f82e5af13c11d27 frr-selinux-8.3.1-11.el9_3.2.alma.1.noarch.rpm 8160c36eea1ef7ad5822f3878e2c4208786dd99887b0e1526e97519743d5ad4d ALSA-2024:0533 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981) * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553) * gnutls: rejects certificate chain with distributed trust (CVE-2024-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default gnutls-dane-3.7.6-23.el9_3.3.i686.rpm 1348b4f05f2959f7d9af564d82b0e8d70ca9b1083c58c7f18dc2a7a386d130e4 gnutls-devel-3.7.6-23.el9_3.3.i686.rpm 79c9547c54e78057e4eed301abc0deda166641b35c2da88cc69f9fe07d5f41b5 gnutls-c++-3.7.6-23.el9_3.3.i686.rpm 84df875a0aae07ea943fccb91fb524c5482c42750253569a3e2b43a7ad24937e gnutls-utils-3.7.6-23.el9_3.3.x86_64.rpm ba05ebf82d146c57cc85fe3b953342ff2c9721709a50003ea71a08043eb1492c gnutls-c++-3.7.6-23.el9_3.3.x86_64.rpm baf542d3f343fc36857ea5109a38971ff7a35797d405cc3448651afbb0f807fc gnutls-dane-3.7.6-23.el9_3.3.x86_64.rpm ebf0963cfaa8c7cdd8c19aa878679ef387cbe061dcd69784df4081879af4b737 gnutls-devel-3.7.6-23.el9_3.3.x86_64.rpm f6012d17f2141db2969c708836d9b3494ae110416262ee6286c496b2acc2283a ALSA-2024:0557 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default tigervnc-1.13.1-3.el9_3.6.alma.1.x86_64.rpm 16cde6196c0123c6102b12dd140445a956efcbe52714d96519a35a54938e8130 tigervnc-license-1.13.1-3.el9_3.6.alma.1.noarch.rpm 4c5f5ac26ea3fd5c86eb2a2ead5617a4c3afeab2d61239ba0e4144a6fc242cf9 tigervnc-server-1.13.1-3.el9_3.6.alma.1.x86_64.rpm 512e928edcca8d3e3028aeaf75f74389c9d303ab4e796e3d0f03e6c7926942ef tigervnc-server-minimal-1.13.1-3.el9_3.6.alma.1.x86_64.rpm 592244a12046c8082930bb15fc3eb288a08d92e9c0ac9939bb8f9cbcd2cbfaa3 tigervnc-server-module-1.13.1-3.el9_3.6.alma.1.x86_64.rpm bdbe935bd5f004c2e161e50651be455fccb0a5eac8821331bb7f86a77b6b5e52 tigervnc-icons-1.13.1-3.el9_3.6.alma.1.noarch.rpm e1af8361e82b513ee2f2fbbbd88156a499467cba27ddc1423e92d94293cbe255 tigervnc-selinux-1.13.1-3.el9_3.6.alma.1.noarch.rpm fec12fd04cc7d5cc50381ca18c190ad46a5cc938f296f16e3b6aa24d17e75b07 ALSA-2024:0602 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.7.0. Security Fix(es): * Mozilla: Out of bounds write in ANGLE (CVE-2024-0741) * Mozilla: Failure to update user input timestamp (CVE-2024-0742) * Mozilla: Crash when listing printers on Linux (CVE-2024-0746) * Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set (CVE-2024-0747) * Mozilla: Phishing site popup could show local origin in address bar (CVE-2024-0749) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2024-0750) * Mozilla: Privilege escalation through devtools (CVE-2024-0751) * Mozilla: HSTS policy on subdomain could bypass policy of upper domain (CVE-2024-0753) * Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 (CVE-2024-0755) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default thunderbird-115.7.0-1.el9_3.alma.x86_64.rpm 06b7955fcd7b1ae70536c401e6de21a07c166aa788697bc0909f803711465a43 ALSA-2024:0603 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.7.0 ESR. Security Fix(es): * Mozilla: Out of bounds write in ANGLE (CVE-2024-0741) * Mozilla: Failure to update user input timestamp (CVE-2024-0742) * Mozilla: Crash when listing printers on Linux (CVE-2024-0746) * Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set (CVE-2024-0747) * Mozilla: Phishing site popup could show local origin in address bar (CVE-2024-0749) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2024-0750) * Mozilla: Privilege escalation through devtools (CVE-2024-0751) * Mozilla: HSTS policy on subdomain could bypass policy of upper domain (CVE-2024-0753) * Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 (CVE-2024-0755) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default firefox-x11-115.7.0-1.el9_3.alma.x86_64.rpm 17e694fabb4bef0fcdb5c5c06ce4642687918d40fbfb01a2ffc4506e7d4a95ca firefox-115.7.0-1.el9_3.alma.x86_64.rpm b4ae85dc027028dfd57a0355a986bb78e15207322ac30a0587a6e58434bc2f00 ALSA-2024:0670 Copyright 2024 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * runc: file descriptor leak (CVE-2024-21626) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default runc-1.1.12-1.el9_3.x86_64.rpm e0ad2fed169a4faed8b3fc60fd6116c7114c7640cf986268e4ac28ec3dda0082 ALSA-2024:0675 Copyright 2024 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: dds buffer overflow RCE (CVE-2023-44441) * gimp: PSD buffer overflow RCE (CVE-2023-44442) * gimp: psp integer overflow RCE (CVE-2023-44443) * gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default gimp-2.99.8-4.el9_3.x86_64.rpm 3ac9c3aec661cd7df7b9d312c2f1d94bf1a8ce64249b07711135050f12554c44 gimp-libs-2.99.8-4.el9_3.x86_64.rpm 9b9b3cacf0405f834cd7751df939da1a0f0e0a106694263136e39a02fefd6170 gimp-libs-2.99.8-4.el9_3.i686.rpm fc3a63c1155b16a34e3890a8e737e28ee079a31b0ac51fa188eab446e1507671 ALSA-2024:0790 Copyright 2024 AlmaLinux OS 0 1 Moderate

nss security update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): * nss: vulnerable to Minerva side-channel information leak (CVE-2023-6135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default nss-util-3.90.0-6.el9_3.x86_64.rpm 05162e2067305cb8a9e5aca22c7483d5af2af0c0acf0ecc86a55bd70a0840f2f nss-util-devel-3.90.0-6.el9_3.i686.rpm 0a19eebdba012375e5df6e18a4cb92c56d17d5b3b38387b75e981c4ee19080cb nss-softokn-freebl-3.90.0-6.el9_3.x86_64.rpm 0e5d007e3432d36c0f06038cd7799507c72a139c7b1c9b50aa953e28488e9a66 nss-softokn-freebl-3.90.0-6.el9_3.i686.rpm 118ce131dd7444f4c96e9493c99760023df99199824731da75e917dd892ef0ae nss-softokn-freebl-devel-3.90.0-6.el9_3.i686.rpm 13fca705f7ca516725cef12f16ec100e009f0b5e93721ac361292accbda3f7ff nss-softokn-devel-3.90.0-6.el9_3.i686.rpm 158968b53e2c341369dd3235ec43870c730427978bb6ce0abf00972b00b46a75 nss-util-3.90.0-6.el9_3.i686.rpm 25ea1a93663e4f149d28a7aa1c054828d73a4170b34fbd8d842b79df7e8efb53 nspr-4.35.0-6.el9_3.x86_64.rpm 29e0cc405953947e36c4a51911323991f22c43a4a8aab701b0af40e70c32677b nspr-devel-4.35.0-6.el9_3.i686.rpm 4920677232f2ac95869f91b904c7b1c8242d5a24ee8c4cbdbccb9af41e6f4101 nss-softokn-devel-3.90.0-6.el9_3.x86_64.rpm 61d97717d947a9dfc30feee739250c1a3f604285e269eec74a4591b4250c1464 nss-tools-3.90.0-6.el9_3.x86_64.rpm 69ca15739e7c53b0d6f827fc693796765ca96f0f28d69fcc212fdeb1382bdcd9 nss-3.90.0-6.el9_3.i686.rpm 8a96c40055e50e5116b3ca8d3f3e79b4f9d9be57a0b40315f101cc86bd180075 nss-devel-3.90.0-6.el9_3.x86_64.rpm a3ed7b7cbad5978d3af14056bb468cc6eaf169bd578333f227243c8e26886c51 nss-sysinit-3.90.0-6.el9_3.x86_64.rpm ac4e22fb6e32de62e9811de5dd73128016f92616790f58722fcf7faa05335303 nss-devel-3.90.0-6.el9_3.i686.rpm af2146fb8b85a4d287b8fd67ac33220ca03e491635aae3fb50d4a16efefe919d nss-3.90.0-6.el9_3.x86_64.rpm b343a3cd362f409d45b983cfa1f2086e0d06bbd14959dc37c70bf4f529da035e nss-util-devel-3.90.0-6.el9_3.x86_64.rpm bf2cff200e0500249ee4d114fa63733816ffd70189a1ab2a3af5b878c2417a93 nss-softokn-3.90.0-6.el9_3.i686.rpm c5378356d170ad3523fbb02f6e4f03f57f10f99e964e85a377895f0c0aa97e3b nss-softokn-3.90.0-6.el9_3.x86_64.rpm c9a7bb7794269448af09506f035e4c63a87f5693450d11a11ff6c95cf4d68597 nss-softokn-freebl-devel-3.90.0-6.el9_3.x86_64.rpm d2c009738f05fd86d7c51ec2854ce0960abe53d8c683335c250e0aec1f2a321f nspr-4.35.0-6.el9_3.i686.rpm deef848f9e917d193071d8a5d0cf9d2ea853aaee1de00fe832d4a658ef3f1620 nspr-devel-4.35.0-6.el9_3.x86_64.rpm e36163fd2095eeebe0aeb1bad0d5f341a1504fa4f10332a2929365cc1080de64 ALSA-2024:0805 Copyright 2024 AlmaLinux OS 0 1 Important

dotnet7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16. Security Fix(es): * dotnet: Denial of Service in SignalR server (CVE-2024-21386) * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default dotnet-sdk-7.0-7.0.116-1.el9_3.x86_64.rpm 47848ee9cfd4d28f84e4b1677ad23c31555595d30ad13f6dc075a3dc05a9bd40 dotnet-templates-7.0-7.0.116-1.el9_3.x86_64.rpm 479e29eef372be213ef80db242f5318cb585d5055a4f44656890dd6676edb36c dotnet-apphost-pack-7.0-7.0.16-1.el9_3.x86_64.rpm 4faaa46018a266ac12f8846c9f51f9d6b4c98567b07d72d8b5f970edea0311df aspnetcore-targeting-pack-7.0-7.0.16-1.el9_3.x86_64.rpm 7a0d51ff15bd7002325458486baeb43779f586d9ec3bde7b0d0c2fa5b7b8241c dotnet-targeting-pack-7.0-7.0.16-1.el9_3.x86_64.rpm 81250f1d00f324ba79074f5965a52250bbcaab32d313ef7b7d05772ee00c73cd dotnet-runtime-7.0-7.0.16-1.el9_3.x86_64.rpm a746e5e49fb6bef5f56af6cb3598515828ed5e3ccafaa8bc6e34a1a5c6778ef4 dotnet-hostfxr-7.0-7.0.16-1.el9_3.x86_64.rpm d8a30549a6e8766e19c2a6f95ef0e9f52a95f55747e06b5909a89e80e6741f92 aspnetcore-runtime-7.0-7.0.16-1.el9_3.x86_64.rpm e59e6c06f2316d896ebaf95caa139a667b823ab7bdab692213d508af2f829027 ALSA-2024:0807 Copyright 2024 AlmaLinux OS 0 1 Important

dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27. Security Fix(es): * dotnet: Denial of Service in SignalR server (CVE-2024-21386) * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default dotnet-sdk-6.0-6.0.127-1.el9_3.x86_64.rpm 2a94c4eb2554f62ca5af75bafe8216231b5c04f16ec105146dc536c655a43ed0 aspnetcore-targeting-pack-6.0-6.0.27-1.el9_3.x86_64.rpm 385ec62974380d98eb50682181ea992f3edab58fdbb2c69e4e575123f847e84e dotnet-templates-6.0-6.0.127-1.el9_3.x86_64.rpm 4b85fc5825bdb0583962a1e937d3a386aba42b3f3d840e45487f1f8151f8b1cd aspnetcore-runtime-6.0-6.0.27-1.el9_3.x86_64.rpm 6d39f3fba8e079bf9caf225bbd53208130b5b5d40939b8b84bc304346a540633 dotnet-targeting-pack-6.0-6.0.27-1.el9_3.x86_64.rpm baa62fe4ce08978e34033bf8a20b9595296fea2095e34d49ed2bb521a6caaa71 dotnet-apphost-pack-6.0-6.0.27-1.el9_3.x86_64.rpm cec35888cc82de5da70df403f28ce9777c12a507cf9b2c565bb572b5372dca25 dotnet-runtime-6.0-6.0.27-1.el9_3.x86_64.rpm ee575c0292a832c9068f49b3128d5dda15bc34e28028e27ae597ae7f0266a495 dotnet-hostfxr-6.0-6.0.27-1.el9_3.x86_64.rpm f0a842ab179071c305db34229a9503c5f4a75e25372764d72ef29703eff87ec7 ALSA-2024:0811 Copyright 2024 AlmaLinux OS 0 1 Moderate

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Bug Fix(es) and Enhancement(s): * CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output * CVE-2023-28486 sudo: Sudo does not escape control characters in log messages * CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default sudo-python-plugin-1.9.5p2-10.el9_3.x86_64.rpm b4a06531c42fce8cfcf87d59780839a5262ff2988824822f7e0535b9fd1a4dec ALSA-2024:0848 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2. Security Fix(es): * dotnet: Denial of Service in SignalR server (CVE-2024-21386) * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default aspnetcore-runtime-8.0-8.0.2-2.el9_3.x86_64.rpm 105bc2c35ec2dc0a13d3d7c09cd76b4998c6aa8624ccd00059f7f989dba47fc1 netstandard-targeting-pack-2.1-8.0.102-2.el9_3.x86_64.rpm 1466786d06154bdd92795436422ee6cf62e1ae22b9bf91331217e5371eb948a5 dotnet-host-8.0.2-2.el9_3.x86_64.rpm 31bf6a5ae9bc99f7b526bc357e5e89e9e51b0e4908940eff97461484f2a9b6cf dotnet-targeting-pack-8.0-8.0.2-2.el9_3.x86_64.rpm 76b845510e141249e6d35298d63373e1f48e1a5b70a2c8917e4a85b982221119 dotnet-templates-8.0-8.0.102-2.el9_3.x86_64.rpm 82df7c96ecd503228f78f9749ee8ceee5453c29437fd4f91fa5a83c95ffb68af dotnet-apphost-pack-8.0-8.0.2-2.el9_3.x86_64.rpm 8a56998c377cee8deeb361e567c57fb33a2dfbdc410a199edf844fa67933163c aspnetcore-targeting-pack-8.0-8.0.2-2.el9_3.x86_64.rpm 8d9a056c536831cd338f26567d3a6768df234c49acfed80bab78522d02b9656a dotnet-runtime-8.0-8.0.2-2.el9_3.x86_64.rpm c0a69b5632c9aa14f76c5bed2f3816a25b230c8d184d55fc1eeedf2a36e98f24 dotnet-hostfxr-8.0-8.0.2-2.el9_3.x86_64.rpm d779450146f079eae0809d7a6e2e7da10a4f836da07ad174eafbf06789d4d630 dotnet-sdk-8.0-8.0.102-2.el9_3.x86_64.rpm dd8445c8312371a2e5557b8c9a23ec60248fda02c62cf90944cd5587a116d278 ALSA-2024:0950 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.x86_64.rpm 0c54728acb7eabf7a7ba774b18e109ec59a59a5e2dfe3c7ee328b1d471e0d77e postgresql-upgrade-devel-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 301ef77df18103623b22ff4f4d9cb4d33184e539f3e2ae05ef21d195e3d46e13 pgaudit-1.7.0-1.module_el9.2.0+22+09653793.x86_64.rpm 350cd8f8c2ca35f5ac5c4922666ffe2443b5e6d2dddfce355289de8a24d7417e postgresql-pltcl-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 437dd4baf50a1d84eb7a8fa921902034bedd08d39ea94743d17d5adc4d1d3b26 postgresql-private-libs-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 43dd927e9523a07a62766f5ad33abc0d25e57470a5db18120cbe4ed00da6dc07 postgresql-test-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 4fa1f6fb2ee2b08c66c8aa3e285a531b9dd843225cc0a774abf243b38fe79f11 postgresql-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 5efa72b9e2fe5c0a8855ae2f88e2b64906024d4ca6e29a301e10a10691cdfbf5 postgresql-contrib-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 6815f698a0af628f91c757db759959a23c385c19d16ed37fb40faf06fac59212 postgresql-server-devel-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 6c5214a8f97cfdd96eb859bf7c197d2f5ce1e73513d753bb8adad74b6649a092 postgresql-server-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 6e81b5d4aa500ab35d21eb27726b87368b351183cecbf51d2275dc1d02e7cf46 postgresql-upgrade-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 78cf747eb9de4c8d25462dc005eded8e88b5c385f1c67ac1b88bf96e5d00a3ab pg_repack-1.4.8-1.module_el9.2.0+22+09653793.x86_64.rpm 87d022a740ce8e28aa41659d2946eb158057cf6fa80801cbd5c3cc8e2868da92 postgresql-docs-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm 9d619eda37ea3531d91f7c3f1f8de4c2e8ec5dbda38608377b0ed1f057e469fb postgresql-plpython3-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm a3c0d98185a3d20cc40a0a2875a866ed0234c9aa9e8fc9995c63c559edd5d6e9 postgresql-test-rpm-macros-15.6-1.module_el9.3.0+55+d62f4779.noarch.rpm a99959d67d3f83cfd6d4631d8925639ef28bee0a0709e6101740776712f3e5bf postgresql-plperl-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm b5d751abdf9d94c2140f8fe2b324df1b90e08ab125bf29ef868474cc244fcf70 postgresql-static-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm d26af5b4e7da3d945356f22b5d8f41cab63eed3bcc9333b4806b6da5f7c4618a postgresql-private-devel-15.6-1.module_el9.3.0+55+d62f4779.x86_64.rpm f28d6928224fd58557630c946b5a32ff256f451a08e1be7c2b33fcf4e2fff622 ALSA-2024:0951 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default postgresql-13.14-1.el9_3.x86_64.rpm 0b435eda5d872fc09cee3320eb06ce050b2340d0a7e031c1c5930d9e464ce7f8 postgresql-plperl-13.14-1.el9_3.x86_64.rpm 49bfecbb6f4d439685e0bbb704935a3ff140dee74f3c38c35cfa43528c028648 postgresql-contrib-13.14-1.el9_3.x86_64.rpm 69b4bc6807484e2dd1d142fa3bf87dfa9433510418429a1b7f1f18d92f6ab2ac postgresql-plpython3-13.14-1.el9_3.x86_64.rpm 7c2ed497e726fbfe79fb9562ba20a10b2e4132af5dc80e66bbfa389b55a634e2 postgresql-upgrade-13.14-1.el9_3.x86_64.rpm 804c28358a625ac2163e77b59dfcfcc2d21c32c276a84f60b70104517f978f4f postgresql-server-13.14-1.el9_3.x86_64.rpm 87306e9d78bc0677b2433b6a25c9af06d9292e198da2e6e9d69ad3b481771005 postgresql-pltcl-13.14-1.el9_3.x86_64.rpm b42186a2f47607ab6f265fca4b769f0279f1478c8a7bf11bc8b6e71aabee229b postgresql-private-libs-13.14-1.el9_3.x86_64.rpm d2be0a59746a17cb7df1cd2730d6183c5f63d62026bdfc6047cccab6dcb8ada8 ALSA-2024:0952 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.8.0 ESR. Security Fix(es): * Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546) * Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547) * Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553) * Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548) * Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549) * Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550) * Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551) * Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default firefox-x11-115.8.0-1.el9_3.alma.x86_64.rpm 78a08c87dafdb9c1fcb1e7c5eb6a152d51803a77217cf602436e2e617da91d39 firefox-115.8.0-1.el9_3.alma.x86_64.rpm fb4bc7f190748c62a532a6572fb23f333c6760f82a14f14cf4f3044f7d3fb67d ALSA-2024:0963 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.8.0. Security Fix(es): * Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546) * Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547) * Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553) * Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548) * Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549) * Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550) * Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551) * Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default thunderbird-115.8.0-1.el9_3.alma.x86_64.rpm 700ae1ba5e311f0dbfeb4d2838e03d6c23e375b9f379eff347d06c7cca4eb7d4 ALSA-2024:0977 Copyright 2024 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default unbound-libs-1.16.2-3.el9_3.1.i686.rpm 700c95d3bfd740faaf48e8ab7861e396a0ddefaebaeee5f818c6924d54b247ae unbound-1.16.2-3.el9_3.1.x86_64.rpm 7c1e7442c37287de8fe0539c8ee6e0d9b8e4064240929338b17d438e7175632f unbound-libs-1.16.2-3.el9_3.1.x86_64.rpm b5ab5f7f866e68d1246247f5ef1f21e83bd02f5a1efa38c6baf8058d40897e5b python3-unbound-1.16.2-3.el9_3.1.x86_64.rpm d95c8293979254e9da239b63dc9b7fa77b6629ee4e742a77616f25e5887783fb ALSA-2024:10090 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default tigervnc-selinux-1.14.1-1.el9_5.noarch.rpm 49a61a3344e8e4098d4df30e2e8aa25437cb433d2f58ddc65cfe1302368fc24a tigervnc-1.14.1-1.el9_5.x86_64.rpm 49e8c14e3e1ab1b546a2272b2be337c38a0c41de6b2cdc38d8e5a09a7aa244bd tigervnc-server-minimal-1.14.1-1.el9_5.x86_64.rpm 98641332f70e32acf0fa33430bcbf39d335a273f3ebcc9411e150e601fe03e23 tigervnc-server-1.14.1-1.el9_5.x86_64.rpm c18b6550975f0c99aed5796989c288be7bc11e874d4c48113b7cb0d5abd55851 tigervnc-server-module-1.14.1-1.el9_5.x86_64.rpm edee192e09c8bcdf364404ff23aec03aabb54c0c01f0e86e6847cf8ef6f49ecd tigervnc-icons-1.14.1-1.el9_5.noarch.rpm ee26e357ff2d42b1bd2468655eaa404b092d080495fd1d96787bca99a536a9af tigervnc-license-1.14.1-1.el9_5.noarch.rpm f1165f116f4ccbd8f20aa8dd69405fc83c427289b86364cf455f6bb6b3ddd498 ALSA-2024:10218 Copyright 2024 AlmaLinux OS 0 1 Moderate

perl-App-cpanminus security update

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM. Security Fix(es): * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default perl-App-cpanminus-1.7044-14.1.el9_5.noarch.rpm 1bb7350c514fdbde975c47b1ce48c2769919fd326b413281eff367cc12a2d05c ALSA-2024:10244 Copyright 2024 AlmaLinux OS 0 1 Important

pam:1.5.1 security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default pam-devel-1.5.1-22.el9_5.x86_64.rpm 00ecca129e16a02dc9539ca2bb7d1617ee7e90fd59654b74f1e0d9e9d4c0db45 pam-docs-1.5.1-22.el9_5.x86_64.rpm 13ff5f4e20bab3807cc4b35d969b1eecdd17cee00add021320485a885b53f60d pam-devel-1.5.1-22.el9_5.i686.rpm 522807e724d21ea351328a6eb5a1173ca0cd738c9f49cdfbdff5b7eac96085c7 ALSA-2024:10274 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244) * kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CVE-2024-50226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default kernel-doc-5.14.0-503.15.1.el9_5.noarch.rpm 15f48479217cfeda3e5af1d7a11c496d17a672565ce5f90cc67239d461ff7c28 kernel-devel-5.14.0-503.15.1.el9_5.x86_64.rpm 338182e4d8f7808a304a4294c2f47c5e32b760121d626e779e2157b0b6ce21ac kernel-debug-devel-5.14.0-503.15.1.el9_5.x86_64.rpm 39cb4c57eab9f07b12f31715fa21c3d93c48ca89775a21be2cfa80ebfdaa84b0 kernel-debug-devel-matched-5.14.0-503.15.1.el9_5.x86_64.rpm 55d78738421f969404f92fb8722cd3865c57fe1a1b9db334fec40908252652c5 kernel-headers-5.14.0-503.15.1.el9_5.x86_64.rpm 7cafefc56ec29e0c9080ab5c3b040431a21fc86ee591ea133a17d772b8cb3091 perf-5.14.0-503.15.1.el9_5.x86_64.rpm 96080e8b33e4374fb7a4d122f428c59de0243e454485f86d48451eab438644f7 rv-5.14.0-503.15.1.el9_5.x86_64.rpm 9b1b3a3002f2da7ee2bddba3873bf5dbe4c840d456ca0bd7398cfda13d6a0984 rtla-5.14.0-503.15.1.el9_5.x86_64.rpm d70e8ce44fd4b32c6eb208bd6373125eceb8f5cc79975df8b24d74a0fae68c4b kernel-devel-matched-5.14.0-503.15.1.el9_5.x86_64.rpm dd1573525b22ba222cbf7aac541cdd2d660382bf3624391dd6680d5190569bf5 ALSA-2024:10384 Copyright 2024 AlmaLinux OS 0 1 Important

tuned security update

The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es): * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336) * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default tuned-utils-2.24.0-2.el9_5.alma.1.noarch.rpm 09b59391e3473513e1addac366c878caeeb4bd06a0a57fbe916b8cc72ef13685 tuned-profiles-oracle-2.24.0-2.el9_5.alma.1.noarch.rpm 1806d907006a2d77f2dabb6a981d347c46708ec1c580c2a47a91445d9e7fb2bf tuned-profiles-postgresql-2.24.0-2.el9_5.alma.1.noarch.rpm 4cdcf3d82ed9f90b61c15e1310f3dbf79203c07fa3ab8716cf87158345d6ba0c tuned-profiles-spectrumscale-2.24.0-2.el9_5.alma.1.noarch.rpm 643c091463125f5caa6792f17f2a68f9460ccd82f467a1a4fb0a8804276ecedf tuned-gtk-2.24.0-2.el9_5.alma.1.noarch.rpm 75bfc56b8e81c72d66a913b653e73517ba2e299863613d0c0d2b6d78e1558829 tuned-ppd-2.24.0-2.el9_5.alma.1.noarch.rpm 7640e7338f26ada7da9161c634dbc048bfd86b4bd9f42b1f4f740ed80137ef7e tuned-profiles-atomic-2.24.0-2.el9_5.alma.1.noarch.rpm 84fb648623a1324a3119d642f3fd8f478ff3b15a635c83ca3b3561e32f2d00ec tuned-profiles-mssql-2.24.0-2.el9_5.alma.1.noarch.rpm 97c9546dba5c8b4ed1da440303ec668f2e7b8f73ebaf3cd35159eab6cbc2b7d2 ALSA-2024:10472 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: data isolation bypass vulnerability (CVE-2024-44309) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default webkit2gtk3-devel-2.46.3-2.el9_5.x86_64.rpm 0003f0502c67d9ed9d8eacbb71b01870a9de6be59d166ea4779246b9f18ed118 webkit2gtk3-devel-2.46.3-2.el9_5.i686.rpm 0efba80650a09d2d8a6eea77807b855f84cd0bbe33b2201f918ac26564b8a232 webkit2gtk3-2.46.3-2.el9_5.i686.rpm 3de91d565db35784daa7ad8e69e66c047936ae26501d1a5b1a9c9050bb01c3a1 webkit2gtk3-jsc-2.46.3-2.el9_5.x86_64.rpm 4703ad5fd597ca3d1116635ec04192e12dc5cb12873ef1ee2bbbc817806403a6 webkit2gtk3-2.46.3-2.el9_5.x86_64.rpm b209074ce0b6de1c8dc077683abc6b417a72f17355d213ab894ed4349fe8058f webkit2gtk3-jsc-2.46.3-2.el9_5.i686.rpm c09fa89eb1eeb79116094f34b4807096c898962e45e04f72487e0de934246f8c webkit2gtk3-jsc-devel-2.46.3-2.el9_5.x86_64.rpm f1b2d26a258c91e1c3278017591391ddeb3d84e2d9eda0b74cdc6f2361ed7634 webkit2gtk3-jsc-devel-2.46.3-2.el9_5.i686.rpm f614e1058d670207372ae9e6e5cdeb71bd8ffbf7a796f9ad1cdecbf387dbb302 ALSA-2024:10590 Copyright 2024 AlmaLinux OS 0 1 Important

python-tornado security update

Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools. Security Fix(es): * python-tornado: Tornado has HTTP cookie parsing DoS vulnerability (CVE-2024-52804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3-tornado-6.4.2-1.el9_5.x86_64.rpm b302da14e217b2cb5d0a471c141274103d9d88167248ae18cc4f6c0e91cd1395 ALSA-2024:10592 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message (CVE-2024-11159) * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694) * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696) * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692) * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699) * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695) * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default thunderbird-128.5.0-1.el9_5.alma.1.x86_64.rpm 1f0def7419996b456b7086ff7050b94ba7a39aa1d537f565c0efb59316dc18da ALSA-2024:10702 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694) * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696) * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692) * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699) * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695) * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default firefox-x11-128.5.1-1.el9_5.x86_64.rpm 81edf22468ce606da05535bc2eecac68383cbf99ae503d65698a934c72f580f2 firefox-128.5.1-1.el9_5.x86_64.rpm d3a7c9ab30ea9149f298ee3ed7eb2c94bd73351d05fcefb851b7c4bbb787b350 ALSA-2024:1075 Copyright 2024 AlmaLinux OS 0 1 Important

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230) * edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message (CVE-2023-45234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default edk2-ovmf-20230524-4.el9_3.2.alma.noarch.rpm 672357e5f22af5021147da1e6ea2940970361d3219b3256dc24010fdaeeb1424 edk2-aarch64-20230524-4.el9_3.2.alma.noarch.rpm c344e31df64e7b01343cb0aed155d8145237772f7f844a227dd8eda235c3368c ALSA-2024:10787 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default postgresql-test-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm 11252a43bf4e9d71cb7d9ec9d1c84023026b36736c97d5954da8ff4832288cb1 postgresql-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm 1156bfbddb5c7808ca1840c77b231d2966ff2c8785e41b4a82bc69a0b3ff0428 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde postgresql-plperl-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm 25eb0d2fcc55fe3d5bd85c70c880f89a0a99f2d0f220f488e72b17a3f8645c23 postgresql-static-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm 392a54faa7283cb4c6eda0928f22b7b8dcd64d024db6e8d724b24192c5ac8dfe postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba postgresql-test-rpm-macros-15.10-1.module_el9.5.0+126+03d48c9f.noarch.rpm 546dfc0f0293f8590de6b31ffdac573a7d08b8cc21fb464b18f7cdd638276326 postgresql-server-devel-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm 5d9b1eb924f5b89e70cdb187a278a6d1b2fde48ed7ab447f46b48de6d5b0a398 postgresql-upgrade-devel-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm 986841e27edad207d7ab1d25f2956f6f7f67647a7f100fcf690ce2685b373092 postgresql-pltcl-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm a4936da69b910a3b1c33c235e8e5b7da97097d29dd2e8d7b6db66028f1561a61 postgresql-private-devel-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm ac7136ab50fe55bce29d1ba69f818851db4ea4a01ec797cebbb0c478b0b994c3 postgresql-docs-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm af54bd1d76f74d7927d14d1188714ae0aac578a847a7ba3b8eff20675ba469f7 pg_repack-1.4.8-2.module_el9.5.0+120+4533eb20.x86_64.rpm b72293f24944cc89bc4f31843d5ffa2d414bfa8d7bc0c8c8fb15ea5fe09cef36 postgresql-plpython3-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm b8b8e2ccbeb3466ba060a5f4935ac34ce203bd34f7b861a8d14d577b50bc5487 postgresql-contrib-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm c1032d53b7995ad11d7ee815a5857155c6166dd7254412eff0b42ac5d8ce49c4 postgresql-server-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm c39d50903d7ff9410e1ac8d7c223d2e3ff4d269d87c9c431d77087591210dd0a postgresql-upgrade-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm eae91fe364f6601ad03a092119c7b7dca755013ca12b28a6fb2665f1b202e6c1 postgresql-private-libs-15.10-1.module_el9.5.0+126+03d48c9f.x86_64.rpm f4fc1eb28533e4bb9bebfd61237d88664b514a1f36d4a6bb93fb6019ef493b33 ALSA-2024:10788 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default pg_repack-1.5.1-1.module_el9.5.0+127+50ff03a9.x86_64.rpm 10b053cee26062124a070468e8468a7848fd60065455d3c3c409089dd4d738bd postgresql-server-16.6-1.module_el9.5.0+127+50ff03a9.x86_64.rpm 284ef1293507ef8a7fbaba7cf9c7af61d50285dd44a7574ef3a8c69abecd3bed postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgresql-private-libs-16.6-1.module_el9.5.0+127+50ff03a9.x86_64.rpm 47af2dfa567b320a2e5be32a0f6942945723b236ebe85b3d72a9a0f531e139d9 postgresql-server-devel-16.6-1.module_el9.5.0+127+50ff03a9.x86_64.rpm 64a418a13f72645530bd2a6bf23dee5244b8122870ac26f62e2bb53e0d90ae64 postgresql-test-rpm-macros-16.6-1.module_el9.5.0+127+50ff03a9.noarch.rpm 7187c10a9d4422053b4301be6a2ec5d52b4ffac6d2739b224c0f759e1e2118ae postgresql-plperl-16.6-1.module_el9.5.0+127+50ff03a9.x86_64.rpm 7e2b402e5f6e6a4cfdfed807a6b3dab5a300e021a3d7a56da62170f0c5824c0e postgresql-pltcl-16.6-1.module_el9.5.0+128+1095dce2.x86_64.rpm 7f0638c15424ef426345fc1ed81b91e9d3564f1129bb9a67abbaf258501ff22c postgresql-test-16.6-1.module_el9.5.0+128+1095dce2.x86_64.rpm 94b28f6100596dca78030c8f21095601849ba78f8ff1bd479cd1d8dace7d18e6 pgvector-0.6.2-1.module_el9.5.0+120+4533eb20.x86_64.rpm ab3b151390d63d4362748ec347fd96a8fd8ed45b097d158f01b8b5cdc421603e postgresql-contrib-16.6-1.module_el9.5.0+128+1095dce2.x86_64.rpm acc1d78ba6fd1cc8f33d76e2c988e7d35cc5aecca4211d93c52b061776339621 postgresql-docs-16.6-1.module_el9.5.0+127+50ff03a9.x86_64.rpm b3bd89f9a70811318960bffb6c4e8fed8e76dd286c4446b0431221a323bf165b postgresql-plpython3-16.6-1.module_el9.5.0+128+1095dce2.x86_64.rpm d90abfe5a3fb7a05b27c5ee821f1a48596e049d047bb0b72d2514b5d7c875baa postgresql-private-devel-16.6-1.module_el9.5.0+128+1095dce2.x86_64.rpm e038cfcda55ea5b4ef892508e2bb4a563d9182cda8a628ad2cd8bd09812f85db postgresql-16.6-1.module_el9.5.0+128+1095dce2.x86_64.rpm e312b7bf6b31bb3bf912fb6e9cf22ad6bad62a35395f44120af5358fa3eceb15 postgresql-upgrade-devel-16.6-1.module_el9.5.0+128+1095dce2.x86_64.rpm e68ae6b3d19178aa20966c0ef29909ad37156a0908a71ce34f4051cb00398e28 postgresql-static-16.6-1.module_el9.5.0+128+1095dce2.x86_64.rpm f5d4eaccd82eb67bd68ba06ef084f45ac2d3f2f8ce8af2fad9f1647750909692 postgresql-upgrade-16.6-1.module_el9.5.0+127+50ff03a9.x86_64.rpm fbf7ae1b008af0691950554df1d83ac221ce7f419596877cbebe8c864b153ed9 ALSA-2024:10791 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default postgresql-13.18-1.el9_5.x86_64.rpm 42dbe5e784cde87793263a7f406f7488c7160e3218d595a241e901e36a8c9f07 postgresql-plperl-13.18-1.el9_5.x86_64.rpm 7ea57ef0f23b5c4446ed506490326a130c22b264ea99add6c39f11440c5e2ee2 postgresql-private-libs-13.18-1.el9_5.x86_64.rpm 8b6173ff3efe5cc08af1478fced7df03d11cf8e3403f59d767c546c7201d0062 postgresql-plpython3-13.18-1.el9_5.x86_64.rpm b20dfe4f067e213f94c7a501fe91e56f5771026c23b57a79484e4aa060dba469 postgresql-pltcl-13.18-1.el9_5.x86_64.rpm c8e666feeabfe3071088c93982e98b3ce4f59f36194b2faa28664ec32267e8b4 postgresql-upgrade-13.18-1.el9_5.x86_64.rpm d42152525a804e707c825ccd2aa6472b8257dd313c38a9ce46c73532c38ae987 postgresql-contrib-13.18-1.el9_5.x86_64.rpm d9837d56d58b947f77b0af5ab98293fb5c034992424f05e9a13f66823bd137bc postgresql-server-13.18-1.el9_5.x86_64.rpm f3ce43ccbb0ffdda6e8e425717b54b85183b01802a48b9085ae5f4a2bf3fd342 ALSA-2024:10858 Copyright 2024 AlmaLinux OS 0 1 Important

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: REXML ReDoS vulnerability (CVE-2024-49761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default ruby-devel-3.0.7-163.el9_5.x86_64.rpm 0fb0a6680dac88cc9d546ce91e65bf43dc61f7f25c0ed61a3183b618fdc71ad5 rubygems-devel-3.2.33-163.el9_5.noarch.rpm 232bb85471c443772c091826c8eb9c354526fbe212ee1f8ee24bf1ce54b33c96 ruby-libs-3.0.7-163.el9_5.i686.rpm 23b16ecb27c34e58585669e73b35bc620f6de16cd0d38b256c65a62f98670334 rubygem-irb-1.3.5-163.el9_5.noarch.rpm 29dda18157bd7764cff8221139a51148cb14bc3814a22e6a9d8eff528ba12a52 rubygem-io-console-0.5.7-163.el9_5.x86_64.rpm 344ee304485328e03a1512884c11ee9cca016033a19c1e6ea89e45487e0341e7 rubygem-psych-3.3.2-163.el9_5.x86_64.rpm 37cf0a81a1a91c7a86b19142aa7aef74cfe66001782ada05659356f12f3c41fa ruby-libs-3.0.7-163.el9_5.x86_64.rpm 40936ea11538a5bb4046e4f1a2bf40ef0ce1f9c08104efb22534e9f80fb595b3 rubygems-3.2.33-163.el9_5.noarch.rpm 5268018305828e4b7743975781e28c022486c906072f91025f19a783f79e6b7d rubygem-rake-13.0.3-163.el9_5.noarch.rpm 5e1180085b455e8b0eabed26b73ad6c3d0c359b3ef1063de167ed353b0bd8cc3 rubygem-json-2.5.1-163.el9_5.x86_64.rpm 6d812620f3d140ee165ff9d118eee9c52370ddb43f5ccd023dad307370da8a4c rubygem-bundler-2.2.33-163.el9_5.noarch.rpm 743129be5a0de70b0f0dfabdf8466b904edea7a16e6bf28aadd9417af97eed2c rubygem-power_assert-1.2.1-163.el9_5.noarch.rpm 7d41d9a9be6e6bfb145cf1b916804f00b75eb90766ad602298d41cb02365d413 rubygem-minitest-5.14.2-163.el9_5.noarch.rpm 7ec1f80250541c6650bc9e4c5dac0e40b8e7449869feedb92bc598c6be1ed2f4 rubygem-rbs-1.4.0-163.el9_5.noarch.rpm 7fab3b59c4cd69003c8f0f070f2541b7469e9867c77550b5a8eeec9e226607c0 rubygem-rdoc-6.3.4.1-163.el9_5.noarch.rpm 9a53b4745b144325874e08442fd4dc81a43a51af1eab0f7e69e16b9a665eb01c ruby-default-gems-3.0.7-163.el9_5.noarch.rpm 9eb7a316c0a7e413f9305edd39b03226160fb075943ad12d32c05147d312f4cc rubygem-rss-0.2.9-163.el9_5.noarch.rpm 9fb6ffc54dc5c69ffc6cc0b245257b774e148b4b91fd1692f776c0d12be63f7a ruby-3.0.7-163.el9_5.i686.rpm a5b6d17a7411b66f4952723728478646c8b08db0c0645931eb8ffebd5e042eae rubygem-bigdecimal-3.0.0-163.el9_5.x86_64.rpm bb8993b1fad1fb4640c622346dc5e85485aae636f4177867337f2f55df4c9b78 rubygem-test-unit-3.3.7-163.el9_5.noarch.rpm bf8e74d7f7c866c796ac54cd22e0baaa4706f8c5e5e89a2f32c8a96149c6158f rubygem-typeprof-0.15.2-163.el9_5.noarch.rpm d1f54f1cd4085e69c4c00259e0cee5844b9ef27179f9b3a350b47f451d29dae5 rubygem-rexml-3.2.5-163.el9_5.noarch.rpm e0cd43fac49e8e7810a48b3c7302853fbca89ecc81677eb71cc216b2a4f48db0 ruby-devel-3.0.7-163.el9_5.i686.rpm e32abe6aa737233b316df6ae838c19e19b7ede77983fe240c830dcdb98a28acd ruby-3.0.7-163.el9_5.x86_64.rpm f5e26450a34e430d6bd2485a5ce5946c93f1f58db2e42328058e6cb79dd52fad ALSA-2024:10860 Copyright 2024 AlmaLinux OS 0 1 Important

ruby:3.1 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: REXML ReDoS vulnerability (CVE-2024-49761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default rubygem-bigdecimal-3.1.1-145.module_el9.5.0+129+9ba7e8b1.i686.rpm 0460f0fcccab75de913fc6e5dfdd271a8655fef084a594c82354e5db0579273c ruby-devel-3.1.5-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm 1212aa12dfba26aecd9ffaff0855e5bf4d36e37c60082b44263fc5755460fab2 rubygem-power_assert-2.0.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 1a87118a897a317b8d91cb3ff5b0bdbc6c46a1e01a48eada9d704ba780a7da37 ruby-bundled-gems-3.1.5-145.module_el9.5.0+129+9ba7e8b1.i686.rpm 1c26c84a9f1391be2a19ea590a4a2c39ab096ddd232c6b0217599deb5b5cf3d8 ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm 2214c61074ff8ccb77a7dc0f6d472f3b2ab1fd99eb35a4a444db5cfba59c3759 ruby-default-gems-3.1.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 46c3117101c6a2f6ab77792b87553f8a8753a22e33e2dd4a5a7d62fb2db3c8ac rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm 47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8 ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.i686.rpm 525501fdef006d9e16a5b8d66cea3b711fe0f2ecd1181cdc6c85efabcba53612 rubygems-devel-3.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 5a5635bb37284e7f8944e22edeb54996bc2bb874fa24e2e4d1d7af2040d64c47 rubygem-irb-1.4.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 609f96b6b4fbb4fd81e843ab154793bb83a9fdc834ceda4ac8fdae8971a99917 ruby-libs-3.1.5-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm 67dd295abc0f3b0f4e09e3cc36db40d38165614c16f7232857f5c67ddc4c709f rubygems-3.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 7866c7856d0910478354276361b0c7a0b04c84210b488c20e438d5a2bf74c6d5 rubygem-io-console-0.5.11-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm 82a90c7af94c423f1af427d5880c3ab4ca6c930856b733f77bf3981f523278eb rubygem-bigdecimal-3.1.1-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm 840378ab9e93a3c34c0b1e16d1167a4a97f4bf963b0744b61e0a2333753f7972 ruby-bundled-gems-3.1.5-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm 9042b56cc333b36d6ca234af0161ec4f355540430dfb7213d53dc76b14ff4778 rubygem-json-2.6.1-145.module_el9.5.0+129+9ba7e8b1.i686.rpm 976067e367ffb0253c90d86686fd3b1181a6880ac03c51e0cfba9bbf3704879a rubygem-typeprof-0.21.3-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 9d8b840c834b7ca34b9b639786928be8d668ada058261cb4f696cdcc2400aa32 rubygem-psych-4.0.4-145.module_el9.5.0+129+9ba7e8b1.i686.rpm 9ef2a172239b48f3e38d36abc58dd03628d1fd686c584e728dfdb1975c969259 rubygem-test-unit-3.5.3-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm 9fe8a32f2ca123c72339b450da0b96eee6793236e1ae8f96d35707ef1c53c556 rubygem-psych-4.0.4-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm a5c1cbdea8a212d0c56daf996c33ac5594c06461517e93c02eb5eb3e7e675b31 rubygem-rdoc-6.4.1.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm ab6f0392f046f1332b8b3c9e94d9f2d127038293ef8ac6a4d3eb1e92500e4370 rubygem-json-2.6.1-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm ad5fe6cde480f945cc0e903c80e352b4c1b5068947bc68ccccf04de0bdacaae1 rubygem-rbs-2.7.0-145.module_el9.5.0+129+9ba7e8b1.i686.rpm ae8b82f0bc0cc91bd747aaa4a349255dec8031eeaf13239c51198a4bef0211af rubygem-rss-0.2.9-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm b628e996934d9fa3728b37b8c0946755593c8689299c68050bd8df8f208c179f ruby-devel-3.1.5-145.module_el9.5.0+129+9ba7e8b1.i686.rpm ba5c6ea36a1c731c778315dc74737f24ee7cc4640fb311a8298bdab92638c353 rubygem-minitest-5.15.0-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm c0239a3c3442f7c918113b398f0e86bc2a382410c806e07d12dc830840fee5ec rubygem-rbs-2.7.0-145.module_el9.5.0+129+9ba7e8b1.x86_64.rpm c17cccd0a6eb918c2b4397a714652024dfc435053b74536f61c40259539a2d9f ruby-doc-3.1.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm c1a416acf12e7f80637f28006fc764047a3cbc1d801b8c2751584b9889fd1a07 rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4 rubygem-rake-13.0.6-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm d0e601cb3008cbf15b85ce311496b08ff2cbbcec47b9eb7fc246f33ddca18360 rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.x86_64.rpm dab19da2b0c280cf81790d96e39c50f37e61ff0e70a7b591600f76f8cc8d96df ruby-libs-3.1.5-145.module_el9.5.0+129+9ba7e8b1.i686.rpm ddc45615bca39fcfed5b498dcc4c1cd2bf1ed8356e634c3ee729c55bbae98e9f rubygem-io-console-0.5.11-145.module_el9.5.0+129+9ba7e8b1.i686.rpm e19ae513bba0a39abdb70d00ee1e6065c5e16cf15818cca58f5b8517e884f17a rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.x86_64.rpm f19ded1c673d7431f2562b768ca31c5d92eba38bb0ec8fe3aaf608b1e63e36d0 rubygem-bundler-2.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm f2dcf8aa2d59f7e4bb04f61f9624b06b29c6a0fa93e93c48459f07d23af932f1 rubygem-rexml-3.2.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm ff85ec821bb13c2a71eb6073e8387b5d068ee21398bbaec0897c8db7da4c98ca ALSA-2024:10869 Copyright 2024 AlmaLinux OS 0 1 Moderate

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis SORT_RO may bypass ACL configuration (CVE-2023-41053) * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145) * redis: Denial-of-service due to malformed ACL selectors in Redis (CVE-2024-31227) * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449) * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default redis-devel-7.2.6-1.module_el9.5.0+130+36ae7635.x86_64.rpm 0edbcccb0a5c63f82e402899bee58876ae8b9e2c7836d6c8398171085b94a2f1 redis-doc-7.2.6-1.module_el9.5.0+130+36ae7635.noarch.rpm 2c114e5e77004ee28712b857f95f1006f0b12a6df95654291887750a37cca3c5 redis-7.2.6-1.module_el9.5.0+130+36ae7635.x86_64.rpm bc739ec69ee86954f024ee5011ab9ac778b9a0f96f363ccbc38e9eae2bd459be ALSA-2024:10939 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615) * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854) * kernel: iommu: Restore lost return in iommu_report_device_fault() (CVE-2024-44994) * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018) * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695) * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949) * kernel: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default rtla-5.14.0-503.16.1.el9_5.x86_64.rpm 053765ce654c8739ed8d5382e2f2b9b58073f1fa4697398b0b1c6019ce69acfb kernel-doc-5.14.0-503.16.1.el9_5.noarch.rpm 202e63c678f26f51ec0ceb07070eb3742177bf1bfb7f8045aff4d293645a8939 kernel-devel-5.14.0-503.16.1.el9_5.x86_64.rpm 49fe733d5bb3234b2611dda1a686f593ea82be9b6f1e20f3172f10b6d77b4771 kernel-headers-5.14.0-503.16.1.el9_5.x86_64.rpm 4abbcdc1206f32f1c6736ef468fee0114eafa3c086294df77fd6714389b274b6 perf-5.14.0-503.16.1.el9_5.x86_64.rpm 750cfbfcb8b42d9dc48a4874aa5640259cf1571d232fe1993708474d00144d5c kernel-debug-devel-matched-5.14.0-503.16.1.el9_5.x86_64.rpm 78de127365349444eaf04b22dc98fedf871aed42af85cfbb8e44e1dcbaaf62bd kernel-debug-devel-5.14.0-503.16.1.el9_5.x86_64.rpm 9d6a984e35fa792dac6d070f83d76f0c7d3006e49815c6323debf8274b247120 kernel-devel-matched-5.14.0-503.16.1.el9_5.x86_64.rpm bea11d902cff8303b614c8ab2ab1e366d5729f2843a0f679fcdfbb515ebf8744 rv-5.14.0-503.16.1.el9_5.x86_64.rpm d1f5f8a5f5c82c435a553e8aa2b885af18eab8dde9dcb112df6ad4cdd670b8db ALSA-2024:10949 Copyright 2024 AlmaLinux OS 0 1 Moderate

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756) * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096) * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458) * php: Erroneous parsing of multipart form data (CVE-2024-8925) * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927) * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default php-soap-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 0a97cde856863c8769ac0592ee0631058f8df019865f35c8e2bb44c90e1547e2 php-process-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 0f1e4b5696c82d596c6306cdecc70c2c0607e056d58e514893e29b6d3929b06b php-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 26b858ba6dbb624d9cb9437e63b1b2d6a7851d778513f21a29d4a3cb1cfdfc51 php-snmp-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 281219f6d2301cc07d1998270094f9f9e9874ed8f7fa2bc472819a6df0001336 php-odbc-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 2ee3abfb334cf232194e65704a16a4f8e0825d100cc4769e6b214b9fa90a86e6 php-opcache-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 4085883bd4c4762351c02a7b1a89dce79d1d40eef22f6ff9a16b1f38ca043da4 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-mysqlnd-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 569c8b80e393010b2a0b2b23cd7395d66539d9e80fe3bda42d515f01e95a8e1c php-intl-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 5bfc5027bf6bb181fda415114b1471282b0d9f3dca0933f46e41ebb13462deee php-dba-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 5cc32ca57bc33c92131c32ad08b31a7c2ed7b9174259e175f19821ca4872acdd php-bcmath-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 659b33164bebca323f4fb271e229ad5fd0068948b263d52e4f47ab5742622dc7 php-enchant-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 70288fad429d5bf24168c153c9b9941c56a1eb4dc3adbbab00ede5c930c794a1 php-ffi-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 76dfe07cdcefe649b0c72083a9e8b760ca29be68bd14f4643a415e1703e3abc4 php-xml-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm 7d90d0fcd4661dd868075765dcfc111a867f4b06e46bd62ef633890584069be2 php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm 96cc987054e929ded9dfb18f35b9c6912a9df307b6e6ffee3c409f85bafa2181 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.x86_64.rpm a05a23d56973cbb28cd6df434887268ea519defa51e9176928b1f6859bdd33f8 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.x86_64.rpm a0c7dad446e919bbb42213de89f00d65f58b08c51e4e1ab382707c3324627f7a php-cli-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm a4811b768b2ecf322121b895f15a9b1d719771661cc8e08b2b4b0505cc5f2f8f php-mbstring-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm a4938ed2eae8a8ecc6f50f76121ed06d4fedbc72abe79e696f48636df829fd73 php-dbg-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm b194690d955aaf3ef670e6170d1a1539acc249df0f0cbaa6aba7978a4012e88b php-fpm-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm b2f7369510afc0fc3c5133f6a0107a5fa5267c4dd7df6e3b3efa005fb1d1a6d8 php-gd-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm b30fb58cd3e0f5540c5748d6979bac98a11ff9d022c7eccaf89e6f4b7df1a47b php-devel-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm b4310cbd5cfa2a043dc08fbe9f736c5ae7f657f0d1ba1e94ebd5278d4ab536e2 php-pgsql-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm c3ca8dbaca912eea5bff682c5b29440480f44d7dda6bfa79acc89f4b0722b052 php-ldap-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm d1ed1140488553b6f75db6e3c8cafdfe6939b0beaddf512a91ec70519e1f4471 php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm d4536864003ca10535ac907cbcc199da8c73c8b16a66b52aaeb1431f587b1ea0 php-pdo-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm d73b10492b10c1b8baaaa15a9e8915798ea06fd86ecc6f0ac207075872923a74 php-embedded-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm df8247d4be59da794ae8c736518771302616e0000942742e4ef24893cdb58f1e php-common-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm fd1baf3870df6e1cf9b63a64e655911cf2c8eb05e28ddf26fdd0a9b89102c781 php-gmp-8.2.25-1.module_el9.5.0+132+adb0ae7a.x86_64.rpm fffeb12a859ca6108c629141efd4d297210ba047843ac302a5a89c785525370b ALSA-2024:10950 Copyright 2024 AlmaLinux OS 0 1 Moderate

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756) * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096) * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458) * php: Erroneous parsing of multipart form data (CVE-2024-8925) * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927) * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default php-bcmath-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 0344b2521b9e407d562ef766d5982b6c7ca72ec3c0b51dbb6a33b3081afed6e6 php-ldap-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 1628928ff489f68556595c266402e443444376e33b573c41168eb48036e7f061 php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.x86_64.rpm 1d61584097fd68d9478f5e82d6be6d28824069372066e2373f64760a85a5187f php-opcache-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 2034157629ee2c4a4009df7eccc8ade91f3ca250720e595d7e97bf630294bc0a php-xml-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 2f8a0086d45ff23eb3573bb4920624a89161d6777ada969bbdc874f89152843e php-gmp-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 3be4a23255bd9c91594e3f4e3d0063e19995cc62e6d8fd8385f536689c6732f1 php-mysqlnd-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 3fd2899f5da9bf5a856cf84fb07276bf40dd60a932812083dbe1df124205ef0e php-embedded-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 408749222b91294425f4772057c5feec28b4c198e15e90b156d434f37f6ffe15 php-enchant-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 42bf93ab101b60b9113534fa2d59c461b9664bb45be33f253af9bc443bac8354 php-devel-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 507cec5996724bb6b0fc7f0d26a0d90010c9d872394b1783eb87471285bda798 php-soap-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 51a79720a9a8460e0930358ee35e239ec6d6db7f3393cde9b8fb2ccb2978886f php-fpm-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 592f20650ef31037f42cf65341eb3dd1957ce39b387720f8c707166f77362435 php-dba-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 69aa99f94ae24791811463b2273dcca1884487575406de9a7ebd424f1a83f8ad php-process-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 71285a2aa6c9b8f0639aa919f6f10c46702ec776f6a0dd09099c3bdb278e986e php-ffi-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 76027bdf75457a8ca1fb1e0de3aa139f5583c09b8607478a53c506142c2fd15e php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff php-pdo-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 88e24fce74c55807f68a8f91102372dd4915b5f92386f98b3c07bc3349085d93 php-common-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 8bbe1494c195e39ce567d7c5299c9c56ad82c6f36021a1d1e8b1567491ac90a3 php-pgsql-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm 90d75d6c12e638ada2f9f9ced8e2cb9957e893e0f44cea2110e706185c5326e7 php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.x86_64.rpm a2464722cfe7d27cd93eab8a1161a66f29ec07e2084e6b4c523d27979d38cf33 php-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm af85ffa6572ac099e4f438de4c11cf7a74912c3aded9d46ebcc2f322366cce93 php-dbg-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm be0a4b9ffacec96691a4937f9a0498975a8977a3593dced48dc878940b099235 php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.x86_64.rpm c089feb7907f70938655f4f9ae584c4a4574a3bcbaa2b956ee3d13e9da66f52e php-cli-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm c1380c7096035e9c25a3457ac2ef8d4b5857f205559f15ae3d8413a0bc1c736f php-intl-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm c8fa5556d1e653fecd09b5c6917fb98a2528959b0bc78202fe05c35d665ba986 php-mbstring-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm ca24df6fc65d08db012e1d737c262f688c0f1469141549269dba47d050d41f0c php-gd-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm d2611e2658c9e53136682fdcbe2c3b30b315f75a32d5f2de454920310704d6ad php-odbc-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm d78c15bbe71155dae8229781d698289bad0035fd4d55d63d3e2969177eb05755 apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.x86_64.rpm f148ef9c893d0c720cbeb8f383382dd98953bdc71b88d16fae276adc83daed11 php-snmp-8.1.30-1.module_el9.5.0+131+62ecd687.x86_64.rpm f4af47d582977f52f56d4a0a49b2c84c416e5c96ab30f43b57197cc178834022 ALSA-2024:10978 Copyright 2024 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287) * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3.12-devel-3.12.5-2.el9_5.2.i686.rpm 0fce127c30883a44a245454a9244e65f20518a6660276edfeaedd255b3679617 python3.12-tkinter-3.12.5-2.el9_5.2.x86_64.rpm 445edb2fb373708b36b48ea5e781c0fbdb80848d8b374e5a666c43fd254e5378 python3.12-3.12.5-2.el9_5.2.x86_64.rpm c6f8b6d2be48baf0cd6a821f3adfab7244d0c03032fb931c88049e7700198df8 python3.12-libs-3.12.5-2.el9_5.2.x86_64.rpm da7522ea2e82dfaa727b35b59c4c9f9e02a6fb2a792a5d8375bbd00ab84287f5 python3.12-devel-3.12.5-2.el9_5.2.x86_64.rpm f39f9c91a002ef73af35cb7aede066018c7da92d1e0fba18e8c13fccf8a4f576 python3.12-libs-3.12.5-2.el9_5.2.i686.rpm f567b022ef0d003d4cfc86f64d67aa90c0203da32858ba6ed75da09b16d7144a ALSA-2024:10983 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9:3.9.21 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287) * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3-tkinter-3.9.21-1.el9_5.x86_64.rpm 2a65cf6b741b973577695b0b765db5b7a01972e049215068aeee365b87c8b437 python3-devel-3.9.21-1.el9_5.x86_64.rpm 577695c248ea02aafc9d4f00b2fc8e2c831ba0f350e07da60827e5996f11d49b python-unversioned-command-3.9.21-1.el9_5.noarch.rpm 6e77041eec0c001b2a4131bf54ac4e15b0b06f4e3d103493ac45edfb1e20d42f python3-devel-3.9.21-1.el9_5.i686.rpm b3f296770e2cf465b43066d6d374bd5b22adaa21d47baa4323b98189624d6a5b ALSA-2024:11111 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3.11-devel-3.11.9-7.el9_5.2.i686.rpm 62bc7d33d4479d1315fe9623c6e5a4dd096cdc153ddcd44c9771d5141f957eca python3.11-devel-3.11.9-7.el9_5.2.x86_64.rpm 6b57c7afb15463af0ca5f5c4acafce2e5546525dcb479ddc6f7dc84bfb84123b python3.11-3.11.9-7.el9_5.2.x86_64.rpm 6feaab5eb555fda86cfed806fc5b80895d2f8d50fb5f45a628fe9b3f7b91ebce python3.11-libs-3.11.9-7.el9_5.2.i686.rpm 86b01175423d24acff71f200929b0519d55a121f69755958c7fa8548717313e0 python3.11-libs-3.11.9-7.el9_5.2.x86_64.rpm 929dab5f2b557f51b74dc7635b4540014d02931cb9917cc09c6a72a72f2fe446 python3.11-tkinter-3.11.9-7.el9_5.2.x86_64.rpm c7075360c5cf4a1817a35575bbdf9edabec39b2f56c047273e88833a6bebe2fc ALSA-2024:11122 Copyright 2024 AlmaLinux OS 0 1 Important

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540) * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537) * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539) * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613) * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVE-2024-47606) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default gstreamer1-plugins-good-1.22.1-3.el9_5.x86_64.rpm 15855456f74ab715930858dad97113eb168ea54e551c27a5c441ce93883e98fd gstreamer1-plugins-good-1.22.1-3.el9_5.i686.rpm 8c27a8a1e1c28a69f021e698b33b6440a715c88f448ef10fa1a535e75c8447a6 gstreamer1-plugins-good-gtk-1.22.1-3.el9_5.i686.rpm bbf79de3ee14b35b2a6a69821d88db9d24346cead7391d388063856839d67e17 gstreamer1-plugins-good-gtk-1.22.1-3.el9_5.x86_64.rpm f2f2a97452b8afa62dc06e8b09750c339b1f8bd5fde26123c81ce473a64feda0 ALSA-2024:11123 Copyright 2024 AlmaLinux OS 0 1 Important

gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538) * gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer (CVE-2024-47615) * gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default gstreamer1-plugins-base-devel-1.22.1-3.el9_5.i686.rpm 188d1bbf74d68403dad3f61528842867b0ad4e60971af88ff2a8604baf470fae gstreamer1-plugins-base-1.22.1-3.el9_5.x86_64.rpm 2c04d1f4fbd0aaedb1d30e4e21c94b65fff49516275b3f7dd9b527573cd7eeee gstreamer1-plugins-base-tools-1.22.1-3.el9_5.x86_64.rpm 36a1d3f309e98daf223b21dd641da52022798aac4355bba10b608976162fcdf9 gstreamer1-plugins-base-1.22.1-3.el9_5.i686.rpm 5d4265184853b45ecb04da72cedfd755c7a441346ebb35753ba081c7f43f4bb5 gstreamer1-plugins-base-devel-1.22.1-3.el9_5.x86_64.rpm e5d01b586fed245ddbca2d67449fc5dd3a302b80271e32c657a4539e59f51022 ALSA-2024:11219 Copyright 2024 AlmaLinux OS 0 1 Moderate

edk2:20240524 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default edk2-ovmf-20240524-6.el9_5.3.noarch.rpm 78c94982627bd8d6000410fa5f470a76850f56d9d10d3b989fdf8cc767e6221e edk2-aarch64-20240524-6.el9_5.3.noarch.rpm b4113deecdfdfe37d6e0009c5471b1d36782fb5ed693b1ca0c64dfd4f940de66 ALSA-2024:11238 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3.11-urllib3-1.26.12-2.el9_5.2.noarch.rpm d90ef51c63a9593846f6fa88cbbbb78e9856da80ae47f8bddff48b3a1fc94d8c ALSA-2024:11242 Copyright 2024 AlmaLinux OS 0 1 Moderate

mpg123:1.32.9 security update

The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries. Security Fix(es): * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default mpg123-libs-1.32.9-1.el9_5.x86_64.rpm 18fcfecf53a1c5c6054519bdd03f0ba2cba2b0e70c5554d3433b97750e7867d2 mpg123-plugins-pulseaudio-1.32.9-1.el9_5.x86_64.rpm 875436e9b226a1a4807cf4b86f27d7564fa4948fb3ce62f8cb5125ab1dcde08f mpg123-1.32.9-1.el9_5.x86_64.rpm a767d7add43520e5f9d45be066f87be9396518a120c0ba278d2cf8bbf0a289b2 mpg123-libs-1.32.9-1.el9_5.i686.rpm ae2a046537f0248fbee85e21ecf0638d0516f20dc301125878d73f8022b88b51 ALSA-2024:11250 Copyright 2024 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: libpam: Libpam vulnerable to read hashed password (CVE-2024-10041) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default pam-devel-1.5.1-21.el9_5.x86_64.rpm 3596a401111b62cf13cb8c3a7546565561ebe702d81578535b57b5bf094bfce5 pam-devel-1.5.1-21.el9_5.i686.rpm 3703134baa83ba39550e285b8ae7de38271b79a4c1d8b237b516df4bf86f35f2 pam-docs-1.5.1-21.el9_5.x86_64.rpm f810370bb76e4c375d43967b4698fadf651c6c2e3d3966664a1ad8145f841064 ALSA-2024:1129 Copyright 2024 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: information disclosure by exploiting a mixed case flaw (CVE-2023-46218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default libcurl-devel-7.76.1-26.el9_3.3.i686.rpm 4bee876d1f7c73c35ae696ab04ccea719a0b0fd41452ae35612238406cf61245 libcurl-devel-7.76.1-26.el9_3.3.x86_64.rpm c625ff30c0e96e12bbba2ace7b22a8109a55bfadf717d15a62b9c3892ae65958 ALSA-2024:1130 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) * openssh: potential command injection via shell metacharacters (CVE-2023-51385) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default openssh-askpass-8.7p1-34.el9_3.3.x86_64.rpm 92026b9a2509564cf676048474def6fb1884663eb0c9c0c2cc80c73a075437f6 pam_ssh_agent_auth-0.10.4-5.34.el9_3.3.x86_64.rpm f60cab5a98e39135da2e02bc22edadfaab4a38020572c2b0d7fb3711da6924d1 ALSA-2024:1131 Copyright 2024 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: cmd/go: Protocol Fallback when fetching modules (CVE-2023-45285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default golang-misc-1.20.12-1.el9_3.noarch.rpm 18b5741c98702dceb2fbbe32d91ef09c212b01349c7294b51dd43633854553ab golang-docs-1.20.12-1.el9_3.noarch.rpm 1d75032b3ba6c05155bb06eee5c1c243ef875c089d2463e917e98d6c73183614 golang-src-1.20.12-1.el9_3.noarch.rpm a2e7b607d02fe97390525c4e2a232778d3440d36d22a0d1fca8390e5dd5bbf57 golang-tests-1.20.12-1.el9_3.noarch.rpm adc11fe27a3a4f8626366ad43720f29f0349ab0c3b187743c0ce8a4d6b70dd7e go-toolset-1.20.12-1.el9_3.x86_64.rpm be9495e46fb98bb7f584deb54587de844107ae2bb7b749642011368044945db5 golang-bin-1.20.12-1.el9_3.x86_64.rpm c4c9c6e4c8d75fcab68cf80386fecfb45f6a44dd32620b7c25d922415b7d364b golang-1.20.12-1.el9_3.x86_64.rpm ccbdf287b04faa25d855dd8c737cb8bb1e9ef311f4624f5df0be42c2e3bce05d ALSA-2024:1134 Copyright 2024 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default tomcat-servlet-4.0-api-9.0.62-37.el9_3.2.noarch.rpm 0164c92d3cf4769a215e18fec3fa4b459c82c6e6e52871e59c4a579b28eea94e tomcat-admin-webapps-9.0.62-37.el9_3.2.noarch.rpm 069c57fa81e2858166dca96c08e1c93f1259f11a411ad7cbfa82440d6375830a tomcat-docs-webapp-9.0.62-37.el9_3.2.noarch.rpm 76e70ae7ed64ac414de842c8dc61854879a92aa326155aea740a3edf0c4357a3 tomcat-webapps-9.0.62-37.el9_3.2.noarch.rpm 7789ab9419a6025cb459178543673fb5c992ce228b8b48240518be740909b1d5 tomcat-jsp-2.3-api-9.0.62-37.el9_3.2.noarch.rpm a744337038859ecd3f416462a7170a174807534c8b7f4d4c86467990ae256edf tomcat-lib-9.0.62-37.el9_3.2.noarch.rpm b21f1a2fd0eaa58172ab691b12f90e7d6c42fa0988ccb63007e4e0a2ba6c8d6c tomcat-el-3.0-api-9.0.62-37.el9_3.2.noarch.rpm c77cf32cc2001aa81bf17b88076d291e28e4af6ac43dbf41e9fc28465906dba7 tomcat-9.0.62-37.el9_3.2.noarch.rpm e7f160a9ff4aca2f762025d1c74fbe968415c9b8bd4f0ccdc206e148c89b895d ALSA-2024:1139 Copyright 2024 AlmaLinux OS 0 1 Low

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: Attestation failure when the quote's signature does not validate (CVE-2023-3674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default keylime-registrar-7.3.0-13.el9_3.x86_64.rpm 0a636443047a68a7f47c81e025329e8e433915839b7808a425497d1c9404eeec keylime-verifier-7.3.0-13.el9_3.x86_64.rpm 0b61e3a822660b34f60fc9127afce90b42623a953543e3d62cc4f80263e87114 python3-keylime-7.3.0-13.el9_3.x86_64.rpm 150088420d606c544d80280acccbf7afd6e3c0f8cc27f803d16adb83a6af010a keylime-7.3.0-13.el9_3.x86_64.rpm 4333042bc5e2e71c9da7873af3cfa1903aff8fea06acd0748562834d8d832ae5 keylime-base-7.3.0-13.el9_3.x86_64.rpm 57c49f1ed876ae05b24cec5701888a201f805ba9cbc59069a2579e8667553bdc keylime-selinux-7.3.0-13.el9_3.noarch.rpm 6fa1d17da5ef5e543bc7f876d5a207d4b9fc577d0190f6f5db1a8d9b917a7342 keylime-tenant-7.3.0-13.el9_3.x86_64.rpm d5463035d1a291ebc4a50a13e0f3aadbb21dc6ad76db8ae2a1453a5e40699d48 ALSA-2024:1141 Copyright 2024 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911) * mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933) * mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982) * mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962) * mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953) * mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21955) * mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966) * mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972) * mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980) * mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057) * mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112) * mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033) * mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046) * mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053, CVE-2023-22054, CVE-2023-22056) * mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058) * mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114) * mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111) * mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115) * mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960) * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-2097, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964) * mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967) * mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968) * mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969) * mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981) * mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983) * mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984) * mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985) * zstd: mysql: buffer overrun in util.c (CVE-2022-4899) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038) * mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048) * mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113) Bug Fix(es): * Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (AlmaLinux-22454) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default mysql-errmsg-8.0.36-1.el9_3.x86_64.rpm 0c62ced831a240b8ac4ed0574490bc4e6d5b2fd29b605aea56100fba815b55bd mysql-8.0.36-1.el9_3.x86_64.rpm 166321bb48670a3942b268e28136082b24fa341681644e60c3561ca4d0bc7ab9 mysql-server-8.0.36-1.el9_3.x86_64.rpm 4a5e3fcc1af80651f2f4dc38dbcff79a8576a034b5470b9aeba6c10cba3dc85c mysql-common-8.0.36-1.el9_3.x86_64.rpm 6ea43d2a89f425135439cee6edeebdc2e1d7df9b41ab7354e8a04ba60d1aee73 ALSA-2024:1142 Copyright 2024 AlmaLinux OS 0 1 Moderate

haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: Proxy forwards malformed empty Content-Length headers (CVE-2023-40225) * haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers (CVE-2023-45539) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default haproxy-2.4.22-3.el9_3.x86_64.rpm e6950760c647e83fe460a7bae2964ee3d1277fabe38124d4001df9a261315a75 ALSA-2024:1147 Copyright 2024 AlmaLinux OS 0 1 Moderate

rear security update

Relax-and-Recover is a recovery and system migration utility. The utility produces a bootable image and restores from backup using this image. It allows to restore to different hardware and can therefore be also used as a migration utility. Security Fix(es): * rear: creates a world-readable initrd (CVE-2024-23301) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default rear-2.6-21.el9_3.alma.x86_64.rpm f47e4cf047aa546afddf48cdca2bac52a18c841e406ac4e61297e6ee2ba02d74 ALSA-2024:11486 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564) * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020) * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697) * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675) * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888) * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099) * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110) * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125) * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124) * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115) * kernel: xfrm: validate new SA&#39;s prefixlen using SA family when sel.family is unset (CVE-2024-50142) * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148) * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192) * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255) * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223) * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default perf-5.14.0-503.19.1.el9_5.x86_64.rpm 18ce8f202b281b98eb20d9fd5edb9aca2bc99e14cb7742715ea4a2f4f6c941a2 kernel-doc-5.14.0-503.19.1.el9_5.noarch.rpm 5dec4edc8c35fbac0c780704373af0450eed349877746461fbc300ab50247abd rv-5.14.0-503.19.1.el9_5.x86_64.rpm 631a9bc61d11e199c458346e98ec76b1f3707604dd2e5a37579c5e78c2a14572 kernel-devel-5.14.0-503.19.1.el9_5.x86_64.rpm 747d34a7b97d0ce349e4c7f33d6a0113f431044b6f688e04b93a8008ebf8105c kernel-devel-matched-5.14.0-503.19.1.el9_5.x86_64.rpm 84cfc37fa4f3f17dbd306959c9b1fcbae7992d90fc3cba1cb1bcb48df9f580b3 rtla-5.14.0-503.19.1.el9_5.x86_64.rpm c3edef1c708d4136545c8be1e686cad38d2e9588f61fbe9bf12def7bf34e5163 kernel-debug-devel-5.14.0-503.19.1.el9_5.x86_64.rpm d6ee6e99b47ac967def9784cf2c71dd55ed8447156ce008b4ae70d09e6ab8064 kernel-debug-devel-matched-5.14.0-503.19.1.el9_5.x86_64.rpm e5593fed45d8b5d9690e9dc41f127605800da61793066c5401bae7334c0589d9 kernel-headers-5.14.0-503.19.1.el9_5.x86_64.rpm e98dcfa82600b2f11afcb3e0819bb7a0bc271d04198d2531ddaa3f1c1a4fd6d7 ALSA-2024:1149 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default skopeo-tests-1.13.3-4.el9_3.x86_64.rpm 115b493eafd5e45d8df948202c266881924fd18a6ee254e0b4dfd3f11b3b5c66 skopeo-1.13.3-4.el9_3.x86_64.rpm 79f4012fe750ec8a96c5bc1006f53c744533e77dc887a65558666e8404dfb968 ALSA-2024:1150 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default buildah-1.31.4-1.el9_3.x86_64.rpm 8138e37ba2df0ddd806fe258d88f21e64430c45ef95ba28032c6a5f46cc79802 buildah-tests-1.31.4-1.el9_3.x86_64.rpm e8ee9e8adb796098a356d4399ec21f6d4fb80de552b3012aefcad06ff973912c ALSA-2024:1309 Copyright 2024 AlmaLinux OS 0 1 Moderate

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17. Security Fix(es): * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default dotnet-templates-7.0-7.0.117-1.el9_3.x86_64.rpm 04bd8bc74bb184d64f0dabc78c10f77a2d45ff2cc37d9a231b47f99676bf6c93 aspnetcore-targeting-pack-7.0-7.0.17-1.el9_3.x86_64.rpm 305ac37a79a92389ac05ef32bea0c9d97f067c72514c1ee187e561aecc87099a dotnet-sdk-7.0-7.0.117-1.el9_3.x86_64.rpm 3f1b03ffd1e721104cbf3b4987201b4327bddf820653ee7e58d5d25accf89b30 dotnet-runtime-7.0-7.0.17-1.el9_3.x86_64.rpm 4d69a3f022de89ab6060186f317a370ea938e85def74f9f22c6be59a507f2ccb dotnet-targeting-pack-7.0-7.0.17-1.el9_3.x86_64.rpm 813b07c0ed3b1a4231a5e97536ff8dd210c00a7f3385db689a37b47e73250f05 dotnet-hostfxr-7.0-7.0.17-1.el9_3.x86_64.rpm b6f4b28838158c6c11bf215c004640428e1ad6699bf4e33f8c21132f95d254e4 aspnetcore-runtime-7.0-7.0.17-1.el9_3.x86_64.rpm bec742ac4f39c0d80be8b655f2abc93193cb90c9acc766ce6e19e9b37a70d5c0 dotnet-apphost-pack-7.0-7.0.17-1.el9_3.x86_64.rpm df02487d6a6b1083166608623566f265ef0f4754ef20b029d99b73e2a3396b42 ALSA-2024:1310 Copyright 2024 AlmaLinux OS 0 1 Moderate

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3. Security Fix(es): * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default dotnet-apphost-pack-8.0-8.0.3-2.el9_3.x86_64.rpm 2c30c84982d5b34e1dd1bac7bfb772c220a6ee1b36242131754452e7ddd7ddc7 aspnetcore-runtime-8.0-8.0.3-2.el9_3.x86_64.rpm 2f9774d49ed996ce41f4f6dd35fb146da3653ef746ef5cc6038b50322f799729 dotnet-templates-8.0-8.0.103-2.el9_3.x86_64.rpm 330cbdc049ce2ac5dca13e4d6fcbfbe5bb262e336ec4ac233bd4279de7342998 dotnet-runtime-8.0-8.0.3-2.el9_3.x86_64.rpm 38cc09b9cb9b35aa35a6561185c128fc64e6a896a27a0da86d3f9bbb2b9e0749 netstandard-targeting-pack-2.1-8.0.103-2.el9_3.x86_64.rpm 5127a06390dc54e998339e7b12b540359ff2f6e6d7b35aaac51f139f2ec54eb9 dotnet-hostfxr-8.0-8.0.3-2.el9_3.x86_64.rpm 52343a61a5493644ced3e0155b7877b3adb016a299af7e4c0b3a86013d4c780d dotnet-host-8.0.3-2.el9_3.x86_64.rpm 6c0c9b084d998797c8dfda55cc71f3176713b65257c87ba9178b19cae7511a40 dotnet-sdk-8.0-8.0.103-2.el9_3.x86_64.rpm 6f8511b3f349d839d75faf97cc2d584a9a7faca045a53bf4285d10700c63216c dotnet-sdk-dbg-8.0-8.0.103-2.el9_3.x86_64.rpm 802ecd3f22c367e197de4fcc76a977f8c4039463c2866d22e641be1d90eba50a dotnet-targeting-pack-8.0-8.0.3-2.el9_3.x86_64.rpm 8bcc219ca03b3c4dc57e812c5bc84d41b77ee3bcedffd456c226383a97e39c92 aspnetcore-targeting-pack-8.0-8.0.3-2.el9_3.x86_64.rpm b9ef8aa319e8af49fba431a6bca2f9bb65e7ab38410fe730237a352eaa2c69fa aspnetcore-runtime-dbg-8.0-8.0.3-2.el9_3.x86_64.rpm e057e9509db1f09f2e141c3b7a87e42cefde771f7e21cf413dbac4c5caa02d65 dotnet-runtime-dbg-8.0-8.0.3-2.el9_3.x86_64.rpm eaecd0c7cea5658ca1735aa4f2278e704bf3e894000466570601af9c30ddba08 ALSA-2024:1334 Copyright 2024 AlmaLinux OS 0 1 Important

dnsmasq security update

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * dnsmasq: bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default dnsmasq-2.85-14.el9_3.1.x86_64.rpm 1be42e2272eb00162c9261745ef97fa20694529c17694643034b46463dcbf66f dnsmasq-utils-2.85-14.el9_3.1.x86_64.rpm d3efd95eae85ed1dca1717ba87951449324c7f4ef2382c2cfbc007f863263314 ALSA-2024:1376 Copyright 2024 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: denial of service in HTTP header parser (CVE-2024-25617) * squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111) * squid: denial of service in HTTP request parsing (CVE-2023-50269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default squid-5.5-6.el9_3.8.x86_64.rpm 55e510981a7a706152a6bf349da44df30d0ca6c92835021675e7e83886b2d23d ALSA-2024:1427 Copyright 2024 AlmaLinux OS 0 1 Important

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * CVE-2023-6186 libreoffice: various flaws (JIRA:AlmaLinux-20657) * CVE-2023-6185 libreoffice: various flaws (JIRA:AlmaLinux-20657) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default libreoffice-help-hi-7.1.8.1-12.el9_3.alma.x86_64.rpm 002f14b59d7d96ec8107a1e4f973c1a2c56f5bacc3c89bcfc005fd6f10f24c39 libreoffice-langpack-si-7.1.8.1-12.el9_3.alma.x86_64.rpm 021573f03232799f94c6a3e30bad0a4d8b15b5f624d5100b4a2cfc7751d8c014 libreoffice-langpack-ru-7.1.8.1-12.el9_3.alma.x86_64.rpm 0751c037b954b09203e16a328e52707be4370d248d89db1db51af718627b4b52 autocorr-nl-7.1.8.1-12.el9_3.alma.noarch.rpm 08d23ef7bab3840c5dcca2b34caaf986b82366d6ef71da6c38ef14a7523807b8 libreoffice-help-it-7.1.8.1-12.el9_3.alma.x86_64.rpm 0a405ed4b6ee6edfe49b63ddf64b3efe21a19151c7b74cd8d9e45d538bbac892 libreoffice-langpack-et-7.1.8.1-12.el9_3.alma.x86_64.rpm 0a9ac68e4dff0c3089f3c9cbc52e21ddaac9f3fb646e5790e3fb372ebcd82655 libreoffice-langpack-nb-7.1.8.1-12.el9_3.alma.x86_64.rpm 0ab7a897e4b5d92fcdccdf6524a11abacd8390649941f292bfd54517946c809b autocorr-vi-7.1.8.1-12.el9_3.alma.noarch.rpm 0c44737c1eba25bf6c5c541d963671d8e3e710242a2aa142af5bd9a381b20b02 libreoffice-help-id-7.1.8.1-12.el9_3.alma.x86_64.rpm 0cab470e129d929f313d5d9e59a32666e02a310eaabf49aa629421d511a74fdb autocorr-sl-7.1.8.1-12.el9_3.alma.noarch.rpm 0fb8e5eaceabc9cb3c719554714920cba021a64e59f1b8e2059aa0788fce834c libreoffice-langpack-it-7.1.8.1-12.el9_3.alma.x86_64.rpm 103d42042e0b79a2fe0c312d8293d0702ecba349b552ae56b895a91fdeb1fc8b autocorr-bg-7.1.8.1-12.el9_3.alma.noarch.rpm 118b0fbbc4e091515752d31e04be3204fcff1160572e937955fed522524757a3 libreoffice-langpack-ta-7.1.8.1-12.el9_3.alma.x86_64.rpm 132d1ee9185d3dd5fb834b04799914f219b0655a658a5911faf7d613f724e263 libreoffice-core-7.1.8.1-12.el9_3.alma.x86_64.rpm 157d975a23816f0998f0a780a12f2a1fbca5a914a671f5a70331b7872def9ef1 libreoffice-langpack-zh-Hant-7.1.8.1-12.el9_3.alma.x86_64.rpm 15c7bc639faac4e67873526ee7b307193ff75153e8d20cf73f0ce3f787b3dbea libreoffice-help-he-7.1.8.1-12.el9_3.alma.x86_64.rpm 162d1ebbeea5cf8627d921dfe265ca6684c6b9f2367bd5ddd8ae21e7dc90817c autocorr-af-7.1.8.1-12.el9_3.alma.noarch.rpm 1806d8037b474f59dbbd45c52cfda357d8194ff2d475dae07c9d0f7edb3e364f libreoffice-ure-7.1.8.1-12.el9_3.alma.x86_64.rpm 18662307d628ac895ea85919bbb1698ed6a75594c204ee5c690442102e453d5a libreoffice-help-zh-Hans-7.1.8.1-12.el9_3.alma.x86_64.rpm 1892b8129dda0a2f8d5a2534fa6815f478015e791728fb2cd2755d96bbf486de libreoffice-help-ru-7.1.8.1-12.el9_3.alma.x86_64.rpm 1f2f7c3ab68fe4841fc553af2e07153a266a7f4cbb0219e94feddd138cb37764 libreoffice-help-lv-7.1.8.1-12.el9_3.alma.x86_64.rpm 208d454f5fa1413d4df59fb6f8b1fe48555e7489805cb4821759b112a0111449 autocorr-da-7.1.8.1-12.el9_3.alma.noarch.rpm 20fc20e9bd6252b9f9ab7c1e827b3820d2535fd557b2768c2da388628965072f libreoffice-langpack-kn-7.1.8.1-12.el9_3.alma.x86_64.rpm 223b845f1f0aa8fc25bc4a1a34c7dbad593f42184562b48a0849db0e96ae4a6b autocorr-sv-7.1.8.1-12.el9_3.alma.noarch.rpm 230ab2ba0fb6e0e9e3c80a8f31cf33bf4d60ff9db7737074e3cd4c53eae6e2d5 libreoffice-langpack-tr-7.1.8.1-12.el9_3.alma.x86_64.rpm 2584d491f9eae1086dd65fc44214c22a40eea1ba337c52e2b453d599a3cf0846 autocorr-tr-7.1.8.1-12.el9_3.alma.noarch.rpm 2597b44f6b24c08d6843c3ec6595fefc483fe551be4e8d5fc2c038a666530b7b libreoffice-langpack-xh-7.1.8.1-12.el9_3.alma.x86_64.rpm 26b94cc6eb2ba6ef589c06c454b723ba30b6992fcce80f240bf69f18538f4d9e libreoffice-help-uk-7.1.8.1-12.el9_3.alma.x86_64.rpm 27516e465789c822c1f4244d459ea87cae9e0903fb4d123a8be8523d5e5629be libreoffice-langpack-br-7.1.8.1-12.el9_3.alma.x86_64.rpm 27a3c2a4a90a735d92dd0aca8e8bb09fbe5c333e9b71ea2469a320484caca8b4 libreoffice-langpack-fi-7.1.8.1-12.el9_3.alma.x86_64.rpm 29a35f6dc20a4d6943af8741391578f7a86fd7da0be6e50fc2fd5548d841e4c2 libreoffice-langpack-pt-BR-7.1.8.1-12.el9_3.alma.x86_64.rpm 29b7ef05466b932eb8e165d39b759e877eb00096c9a03a80db0dc7e12e1147dc libreoffice-help-et-7.1.8.1-12.el9_3.alma.x86_64.rpm 2adad27929f67c96beb7c3619c5331afa6ba8994ab57c96744f17d5ed3fad602 autocorr-es-7.1.8.1-12.el9_3.alma.noarch.rpm 2b16fb16eccba308daaa04ea884fdf430a16917f232eb9b91de15d71505451a5 libreoffice-help-dz-7.1.8.1-12.el9_3.alma.x86_64.rpm 2b4090715c7eb922c6f5d68a714a4f45a674c67b48e6b05ceb28b3c37a5f1cba libreoffice-help-de-7.1.8.1-12.el9_3.alma.x86_64.rpm 2df419523456d290a2c5c8140b6edca32113592b16b9a413e7e82caf9ac2c3e0 autocorr-lb-7.1.8.1-12.el9_3.alma.noarch.rpm 2e866e039965cf8501dbffe2663318abf8226b595d7ad69ec65017044245b6df libreoffice-help-nl-7.1.8.1-12.el9_3.alma.x86_64.rpm 315a3f96893ff2f12416ea438053f4be713798345ff9a6921d56df6c287ec29e autocorr-dsb-7.1.8.1-12.el9_3.alma.noarch.rpm 33045ede9a455ec31e8f06c00fc80efeb3a7e1c24e6322196022f180f8ae361d libreoffice-7.1.8.1-12.el9_3.alma.x86_64.rpm 331101b2da5bac90f467ae6f4d0cb870797a52d199512baf025a6edb93be37b6 libreoffice-langpack-bn-7.1.8.1-12.el9_3.alma.x86_64.rpm 34e0963fc33f618c2080b48625bc910f1b01ab24a10080fcd3f1752030b671ff libreoffice-draw-7.1.8.1-12.el9_3.alma.x86_64.rpm 357fc3b2928dcc6362d4bce392ebc4b330972be36b9acbf06d7176045d3cdc55 libreoffice-help-pl-7.1.8.1-12.el9_3.alma.x86_64.rpm 35be48d0eb7e0ccc6c72ecab1ae209b3153fd6749d998a29dd7e27f958be6572 autocorr-lt-7.1.8.1-12.el9_3.alma.noarch.rpm 3783fa3193b37f6aca6e6c8f7f874e0646687cca1bd71b7a05fe48c139bd9543 libreoffice-opensymbol-fonts-7.1.8.1-12.el9_3.alma.noarch.rpm 3b494f26d28fe89f88dafed79282a07c28e27a7158e44b75e396afc43bd0534f libreoffice-help-pt-PT-7.1.8.1-12.el9_3.alma.x86_64.rpm 3b5855d4cc630f46e9a67a140d474db4fd85991adbdcb95a932572707d15eea8 libreoffice-ogltrans-7.1.8.1-12.el9_3.alma.x86_64.rpm 3b97f7f5cf873decdbc623a37ea4358a255c34ae5d3f6a7c2bc50f5afebc7112 libreoffice-langpack-en-7.1.8.1-12.el9_3.alma.x86_64.rpm 3c1837f03b5a9164e3a02f963dc27a5241bc9eb7ecb42475515aa1a9a6ce447f libreoffice-langpack-nso-7.1.8.1-12.el9_3.alma.x86_64.rpm 3d34ec33d4cd03088d1b5ae773b2b6ba9e28b03614535f8a10ccee2553d94a17 libreoffice-help-cs-7.1.8.1-12.el9_3.alma.x86_64.rpm 3db9e9d2ce6a50799481b1aacf1ab719c470d5d1140ac6a8e142e7a3ec4c0c5e libreoffice-help-hu-7.1.8.1-12.el9_3.alma.x86_64.rpm 4053bc09856a7dd7b552e8d16ce7fcdbd9ea9a088c2e37946c1f6cc475f6d4f3 libreoffice-langpack-uk-7.1.8.1-12.el9_3.alma.x86_64.rpm 437b497a2d5db0ae7c042c82929ab688c314ccdffa9edb54c3825c283d568f11 libreoffice-help-nn-7.1.8.1-12.el9_3.alma.x86_64.rpm 4462ef153969c82fe0a8ef60ed52510c03e50305a20af7e436e4aa9d6fdda2cd libreoffice-langpack-pa-7.1.8.1-12.el9_3.alma.x86_64.rpm 48dfd64139cc706723729e3312edb0099899018f2f94a7a8a6b810363b32da64 libreoffice-pdfimport-7.1.8.1-12.el9_3.alma.x86_64.rpm 4c3b1c3aa0ff05fbae7c9b3f65a448133c631e306f77378887a024bef0560d4a libreoffice-langpack-nn-7.1.8.1-12.el9_3.alma.x86_64.rpm 4dbc977bba7949676cc85e8c0ac85944f5638655ece96851c2ae610c901dee7f libreoffice-langpack-ts-7.1.8.1-12.el9_3.alma.x86_64.rpm 50ed5f22d08a7f43971929f35f22b384c37cb671035a700023096e959270eaee libreoffice-langpack-fy-7.1.8.1-12.el9_3.alma.x86_64.rpm 514c7fbf9760d45f70e07e63e663deeaf85e6e65bf96de1cbf19af98c9d8103d libreoffice-xsltfilter-7.1.8.1-12.el9_3.alma.x86_64.rpm 54c09a407e6ef665d5db3c036f4a77da4ff1bd2a72ce0ffd69b57c871a4c3d83 libreoffice-langpack-zh-Hans-7.1.8.1-12.el9_3.alma.x86_64.rpm 57cfa5370865966654ab8bdcc430ad0c4069d8eb92eb3f5cbd4148761a6ff109 autocorr-ko-7.1.8.1-12.el9_3.alma.noarch.rpm 58dce1072c790448f6481d826d8025e01b9f10539a243a8873ecdfd52bd76783 libreoffice-help-ro-7.1.8.1-12.el9_3.alma.x86_64.rpm 5bba82077a07b13f28a0b7235d1c65fd4401ae6c726f0ac633f6b4f6f1cbfbf7 libreoffice-filters-7.1.8.1-12.el9_3.alma.x86_64.rpm 5eea243c381c1191c7e670bdac6b845d4bab238b3204950e634b7bbe09839863 autocorr-pl-7.1.8.1-12.el9_3.alma.noarch.rpm 61c58dccdfc3dfd9d4328d34b7403d5676948f3f18a3928c999b8f6a8a75ef9a autocorr-zh-7.1.8.1-12.el9_3.alma.noarch.rpm 61fff1fcd7df1af00d5d6c7edda8f98bfa652cbbf65ddc62c8c7a5267325d43b libreoffice-langpack-as-7.1.8.1-12.el9_3.alma.x86_64.rpm 62d29ecf32a0d6ff526e28d209ca054e4f256a00f2b05aec0e88f501101f5ab2 autocorr-mn-7.1.8.1-12.el9_3.alma.noarch.rpm 630038b93013dd1f89b12cfd8c29486c9ba7f6a3a60d7a4028e1400e42c00d79 libreoffice-langpack-gu-7.1.8.1-12.el9_3.alma.x86_64.rpm 63da9531ff97818d0c5abb0e20687f15fdd4a8be8592a2166c68bc8a84f833e2 libreoffice-langpack-sv-7.1.8.1-12.el9_3.alma.x86_64.rpm 643f4f20d28c6636cd92461f94d2c28f2fe16c528f9ec6b98c34d473bb9e38f5 autocorr-fr-7.1.8.1-12.el9_3.alma.noarch.rpm 6687ed962e115acd82e3533e054693ab304511b59f4bbc034872e1ebaeb7b814 libreoffice-langpack-id-7.1.8.1-12.el9_3.alma.x86_64.rpm 6743414433d477b436a911d260a04aee7a2d9347a44e3bfd4dda94c4ac40f82a libreoffice-langpack-mai-7.1.8.1-12.el9_3.alma.x86_64.rpm 692ee91445093a44f70f1be663d6d524af3330910f49e62789984479274ae51a libreoffice-help-nb-7.1.8.1-12.el9_3.alma.x86_64.rpm 699c1341f2a955e9e25864d996d4a6723fbb2cf53512f10e4e8e759ed412b664 libreoffice-langpack-or-7.1.8.1-12.el9_3.alma.x86_64.rpm 69a2e725cfbc8373160e239c7528c5105564c208c1ffd80c0acf31334d87af04 libreoffice-langpack-es-7.1.8.1-12.el9_3.alma.x86_64.rpm 6edf2ed8a934972b5f25487682b1a0ba75bcf797f68ba6fae94cacba8b5296af autocorr-sr-7.1.8.1-12.el9_3.alma.noarch.rpm 6f8e0fd08eaa9213b11ef462a8781be67af58db4871f78b4d643ced3d6e16b94 autocorr-hr-7.1.8.1-12.el9_3.alma.noarch.rpm 72b312df6fea1f47c59d28235216f55ff131b09fe6ca3c00414583842047ebdc libreoffice-langpack-hr-7.1.8.1-12.el9_3.alma.x86_64.rpm 7533a20b87d09958896e5d4c3506241ac0b7148d81757eb02c22c896eaa35d5e libreoffice-help-si-7.1.8.1-12.el9_3.alma.x86_64.rpm 77f4f39c74884ae4794d7eae5cf8e5bad0ae3af88a330d23149df6ae953ee8bd autocorr-en-7.1.8.1-12.el9_3.alma.noarch.rpm 7a2ed313abab50b3b7db27887ee2c93f68f529d97cde680c1d3858e28a693dbd libreoffice-emailmerge-7.1.8.1-12.el9_3.alma.x86_64.rpm 7a4d5edc8bf565c42cb46b81f4e635d7f70a4711db0c39a016056adcbb39369f autocorr-ru-7.1.8.1-12.el9_3.alma.noarch.rpm 7a56df09c247090cb16dfb91271779ba169d0a067be0733f491f7ae21c2052c1 libreoffice-langpack-kk-7.1.8.1-12.el9_3.alma.x86_64.rpm 7b32d50ede7fade550b996ea0eb19aa866aeaa043f33ec41fc5e8d3e635812af libreoffice-help-ca-7.1.8.1-12.el9_3.alma.x86_64.rpm 7c13a320ffd60152ceb952446582ed6dda3dee898b6218971c0a6f548bc23ae0 libreoffice-langpack-fr-7.1.8.1-12.el9_3.alma.x86_64.rpm 7c246cde93640f2628cd25ac3901a1018563a622ebb78f3f12b75b157f629ca6 autocorr-de-7.1.8.1-12.el9_3.alma.noarch.rpm 7c9d3ad11a105ee6cbe8b77a5e3d14d355ab0b097b0179ce893f1ce7f9f812ad libreoffice-impress-7.1.8.1-12.el9_3.alma.x86_64.rpm 7f1d9eb38a34dccad71e5b02f9a20e6e62d98de80854908cc6dec5fb3e8a21b9 libreoffice-writer-7.1.8.1-12.el9_3.alma.x86_64.rpm 80a77f332d4a6e3d7d8ea25fcb863ee059a6efd60a8d8eac8e09d795f2e514d5 libreofficekit-7.1.8.1-12.el9_3.alma.x86_64.rpm 81031f8bd420bdb8cd850247fef6ab50915d963826c970394526d0987bd9dc4c libreoffice-help-eu-7.1.8.1-12.el9_3.alma.x86_64.rpm 8171290a77614042a2aeed57c03697665f1e00bf214589465d195c19c5c8f137 libreoffice-langpack-pl-7.1.8.1-12.el9_3.alma.x86_64.rpm 827b7c05a2e5fabbbfe3540d192ba9d75bbadb72e561b8aa16a561d5ca2a7dd4 libreoffice-langpack-ml-7.1.8.1-12.el9_3.alma.x86_64.rpm 8596c0bbb7aaa168b73e05977f0bdb61a16110ac123c6de814aca770dcbe68ed libreoffice-langpack-eu-7.1.8.1-12.el9_3.alma.x86_64.rpm 86da9438379037acf8406c4a13f3d1ff2fb9b4a8500dbe43e167dea17b268332 libreoffice-langpack-he-7.1.8.1-12.el9_3.alma.x86_64.rpm 879cbb5de20b56c281a97c268d18cb85694a8c7fd39a63193687044d0be8f2c5 libreoffice-help-ja-7.1.8.1-12.el9_3.alma.x86_64.rpm 8a6a39f9bd599b3f0b07614128f64d3f43e57c3764ee9244a03486b2765ab65a libreoffice-help-ta-7.1.8.1-12.el9_3.alma.x86_64.rpm 8af314c8e9269a10d4b8310f1a8bcbacfca526b0e9496226fd07fafc8e86ec8c libreoffice-langpack-nr-7.1.8.1-12.el9_3.alma.x86_64.rpm 8c86b5bd0f0c7f6b6679ad30cc3bd761c28e2b7b61f9242453e01690c825932f libreoffice-data-7.1.8.1-12.el9_3.alma.noarch.rpm 8cd38b22398373c438d62f74af633b3146cbe883def50f26b0200d13d0f32a39 libreoffice-help-en-7.1.8.1-12.el9_3.alma.x86_64.rpm 8d7ba121f01c7beee8d9b264a7d225c3240a4596ff7dcf9d99596e1f55c167c2 libreoffice-help-gu-7.1.8.1-12.el9_3.alma.x86_64.rpm 8e105a39d50bd736a19d921e35915501da74b922ec1a3da174e8790f229c3197 libreoffice-langpack-de-7.1.8.1-12.el9_3.alma.x86_64.rpm 8eb58574988c8aceeb6747b3cb73237e82f6dcc86c04901d05b2ef29b777832c libreoffice-langpack-ca-7.1.8.1-12.el9_3.alma.x86_64.rpm 905d125997b384805933bcdea2e03e5d9834eb8d34589320e9f0507293205060 libreoffice-gdb-debug-support-7.1.8.1-12.el9_3.alma.x86_64.rpm 90c142e0f2cbedb0aae2931f50c5458cdcffd04657adde2fdb13c6d2de7ce674 libreoffice-langpack-pt-PT-7.1.8.1-12.el9_3.alma.x86_64.rpm 9135a77fab6f95df54d9d0e6de62f07aa47313ddeb26880a1741d50db1fb71fd libreoffice-langpack-st-7.1.8.1-12.el9_3.alma.x86_64.rpm 91b690d5a385bf36661b44659ba2275b4dba601ec00b9a8fb5a5a8943897e43e libreoffice-langpack-cs-7.1.8.1-12.el9_3.alma.x86_64.rpm 94cec23c74724a34282f3e5f0b39dbdc4e1b14d3116a89bff21c224215cc3aa4 libreoffice-help-gl-7.1.8.1-12.el9_3.alma.x86_64.rpm 978943f5de9577f1a3db36a765b25a58e2b72c48e7102eeba25118230119ba53 libreoffice-help-sl-7.1.8.1-12.el9_3.alma.x86_64.rpm 98ef8135be46c28da120e6927b107092e11dd6212f74b5db26c4773808e95078 libreoffice-langpack-th-7.1.8.1-12.el9_3.alma.x86_64.rpm 9aa4e22890490f647b1d0ba71175c0c2595e2c98e9c0f5851f796cad5bd1cc88 libreoffice-help-es-7.1.8.1-12.el9_3.alma.x86_64.rpm 9ab6eb630739492bb3bf44de6e292d45aff0fbef05f82df9f09a0f8abb5f451f libreoffice-help-tr-7.1.8.1-12.el9_3.alma.x86_64.rpm 9d7d06f1e4d301e511eed83bc830d1b0840fc16457504ae7b1fefb928ccf8685 autocorr-it-7.1.8.1-12.el9_3.alma.noarch.rpm 9d82a3bb3b7dbfec694c1fb7e232d2deeefff1e58544321e0c57241c34726030 libreoffice-langpack-mr-7.1.8.1-12.el9_3.alma.x86_64.rpm 9dd88d48aa076af1378623057b22982c09d916bed4b4b5015d0063cc18e1f24e libreoffice-calc-7.1.8.1-12.el9_3.alma.x86_64.rpm 9fe285b3971dc2bc95080ddfda9fea2b6ec58f2d9cb8f1a1a799089fc8b5066b libreoffice-langpack-sk-7.1.8.1-12.el9_3.alma.x86_64.rpm a1c15b96a0b0727fca65e41c3d634129a29f6a0352b75de56d1c0540343b267c libreoffice-langpack-bg-7.1.8.1-12.el9_3.alma.x86_64.rpm a6e99ed5c1f5e8e98efc5a0004daf6b69ab62b7500cb1d39c15c036c0e999766 libreoffice-langpack-eo-7.1.8.1-12.el9_3.alma.x86_64.rpm a7e9c12fa2c2f681d5c02139e1972939f70852c1a474868ffbf570039224423c libreoffice-langpack-sr-7.1.8.1-12.el9_3.alma.x86_64.rpm a857375434e540e8688237c91b782bb3b9b57fb5883337036a440cdfcc9abc10 libreoffice-pyuno-7.1.8.1-12.el9_3.alma.x86_64.rpm aac4c30ec9469fb4c13b04e1092f989a8301bcba20c9d188c0904e6cce9cc59a autocorr-fi-7.1.8.1-12.el9_3.alma.noarch.rpm b0cfd1f17e89b734a001e7c0b2d977ca26d256d98f081d9b0e871408a3db7dec libreoffice-help-eo-7.1.8.1-12.el9_3.alma.x86_64.rpm b0f585c2ba88a87f2fcf867edf5dea740885dd9564ea175b71c9f4de74e0734c libreoffice-graphicfilter-7.1.8.1-12.el9_3.alma.x86_64.rpm b13c1d6325eafe39cd54a51f7717a1632d0d87d02b386c9f04b669b2b8f4769d libreoffice-help-lt-7.1.8.1-12.el9_3.alma.x86_64.rpm b1d02db36d74d735a445115acc7902951cbf35d8852aa5d8823eaff23c6548a8 libreoffice-help-bg-7.1.8.1-12.el9_3.alma.x86_64.rpm b27928926dcae252b8e5d3efae5757ce40ab830b036e6ec48dab7df6d88a8175 libreoffice-langpack-te-7.1.8.1-12.el9_3.alma.x86_64.rpm b3584431a868b99ee5abf6d6b99a89f431e9f69da03204e78bdc4562e3797f69 libreoffice-langpack-fa-7.1.8.1-12.el9_3.alma.x86_64.rpm b3866f356df695ec2c78b0d90319d0991cbfc47d4c1b2f3b6f80ed033608d88d libreoffice-langpack-ga-7.1.8.1-12.el9_3.alma.x86_64.rpm b4c0f22d152cb250fe45678877647e3ec012994567ddf7dc6a91723e550b996e libreoffice-langpack-cy-7.1.8.1-12.el9_3.alma.x86_64.rpm b64fa5a1969e02b78c77566261adf128d028c8bdccca37157ed73a57f74f3ee9 libreoffice-langpack-ja-7.1.8.1-12.el9_3.alma.x86_64.rpm b66a49a36a3e9cc42d226abd98263f205a8166fc72a792b41fe55e10cb769b0f libreoffice-langpack-gl-7.1.8.1-12.el9_3.alma.x86_64.rpm b836c6341404c392e88c8719bb2f6f50168aa8fe81fb821323a4dc0c142db178 autocorr-vro-7.1.8.1-12.el9_3.alma.noarch.rpm bb6ff11484cb161880eb05b1dee8081bc16bb9661e39a2bcf9a43fd4360e927d libreoffice-help-pt-BR-7.1.8.1-12.el9_3.alma.x86_64.rpm bf3a0f1cba1fcec3832674b132983844257f254f7fe870b00901f3449f12b9b7 libreoffice-help-fi-7.1.8.1-12.el9_3.alma.x86_64.rpm bf97e2f576316b3d1b6e4b4a76a98624b5b1c62ebcc2fe3f8dff34ad5df6b094 autocorr-ja-7.1.8.1-12.el9_3.alma.noarch.rpm c353b1e8487b4d01d285eead85017963ad9758e42fb38492a65a9dd6b0ac3d6b libreoffice-langpack-ar-7.1.8.1-12.el9_3.alma.x86_64.rpm c3723a4491782e14adbcd66821dcf2e052eaba604e268caff596e6b9c928c12b libreoffice-help-zh-Hant-7.1.8.1-12.el9_3.alma.x86_64.rpm c392d062b8c881e83632de340022bde5c9490ab962495d1f602f10b78fc6caa7 libreoffice-help-ko-7.1.8.1-12.el9_3.alma.x86_64.rpm c73d15193d39fcc8bcaa6141dfa0c0c8113a2d1a2fdf27a47155e54ccf397890 autocorr-el-7.1.8.1-12.el9_3.alma.noarch.rpm c7954c54ed7edc1e44c53c7f85d09fef8a629e56f7419ebc67110b6fce820990 autocorr-ca-7.1.8.1-12.el9_3.alma.noarch.rpm c946634f731ab834eb3febcf1bd195577cb6cbff7ef20d6f043a908471dcaf1b libreoffice-langpack-ss-7.1.8.1-12.el9_3.alma.x86_64.rpm c9bffce6c90f013b92a500001076a3658e63b2f45b459412b4933c1223614905 autocorr-cs-7.1.8.1-12.el9_3.alma.noarch.rpm c9d68cf543c5fb64840e116215373608b682bf34145bdfd8c6247e3713377852 libreoffice-help-da-7.1.8.1-12.el9_3.alma.x86_64.rpm cd4cdb8684eab9d56e4154c44f0d6fa87ae205376144dbca8c7ec0940f5552f6 libreoffice-langpack-lt-7.1.8.1-12.el9_3.alma.x86_64.rpm cf36def76bb39dcb51911e2527811dd59788193433a0fe4ce99cffa40a839e16 libreoffice-help-el-7.1.8.1-12.el9_3.alma.x86_64.rpm d069b1353aaa523dbbd867139969112e73bcc76d4eeddec664fda7b599078334 autocorr-is-7.1.8.1-12.el9_3.alma.noarch.rpm d14c4423133f6f4f55cd99c91b670e4c16c1be9442b475d85378d05927605eac libreoffice-help-bn-7.1.8.1-12.el9_3.alma.x86_64.rpm d25a7484d126ec7d615f68b3c07155a6d05686fcc0e56cc6aa72f0eea3f1e9d9 libreoffice-help-ar-7.1.8.1-12.el9_3.alma.x86_64.rpm d819d95890890e48e58ba9be7eeaa27db87de21900d31ccb302536617c384f15 autocorr-ro-7.1.8.1-12.el9_3.alma.noarch.rpm da05acadfae89900a9497468b6669c485a2d9452efb7c1b0096747c185133c3e libreoffice-help-fr-7.1.8.1-12.el9_3.alma.x86_64.rpm dcd519075f7e25fa1eba20f101445f9fa8c6031cdf95f857bab1ee858e7904bf libreoffice-help-sk-7.1.8.1-12.el9_3.alma.x86_64.rpm e3ce289096326981c25f1e09e2948b4a469bdfc198cd6e9320d3040d61d64408 libreoffice-math-7.1.8.1-12.el9_3.alma.x86_64.rpm e553905855e100e4da5577b03d1a75b18249f8e85ca97063f00a3b7c4f50014b libreoffice-langpack-af-7.1.8.1-12.el9_3.alma.x86_64.rpm e5cfa34271fc5d46687cdaad41c1b30ca9414e78cda8d9185be411d1ecf8afe5 libreoffice-wiki-publisher-7.1.8.1-12.el9_3.alma.x86_64.rpm e861146a267e4926893dadb8da0294266a683e77d9e4aa00b0c005121c555376 libreoffice-langpack-el-7.1.8.1-12.el9_3.alma.x86_64.rpm e871065f61210934a4231162feb8ab1a439c0dc4b6abc3d1132869629170e697 autocorr-pt-7.1.8.1-12.el9_3.alma.noarch.rpm e8a3269e71204ad6807700e6a52d8b62943008a30ec3c2fa511cbda7e4c98e53 libreoffice-langpack-nl-7.1.8.1-12.el9_3.alma.x86_64.rpm e9938f2c44a066a38ef14183d946e3e8728576620b49488381b70a59506816a3 autocorr-hsb-7.1.8.1-12.el9_3.alma.noarch.rpm ea3806eb6567f006ec8e34c3b23dfc2181a4006a42197ade2aebb2eb69130513 autocorr-ga-7.1.8.1-12.el9_3.alma.noarch.rpm eb845ad1759a1fe500228f326fa8b0d04f2d43c075fd9043d0644d39eb6e9ce5 autocorr-fa-7.1.8.1-12.el9_3.alma.noarch.rpm ebdea9f87e8dfef53e96c64b69972e8f7e66cb7c4ec79a55134d53a45261439e libreoffice-langpack-sl-7.1.8.1-12.el9_3.alma.x86_64.rpm ec1be4ce8daf3780f5a634d64f36abd0b089280000720ccc57b50a698a73943a libreoffice-langpack-lv-7.1.8.1-12.el9_3.alma.x86_64.rpm ec7074e6b53b33f972bbf34e8c72f3a38ff4b0e86eb7a8a8a1299c0020dee991 autocorr-hu-7.1.8.1-12.el9_3.alma.noarch.rpm ed10b0e859a522a8db3f719e829121e0679923596d89a89ea01ba80453ed0fc9 libreoffice-base-7.1.8.1-12.el9_3.alma.x86_64.rpm ed5b53f800fab89847fc619f9a28f529e06af0c1df93a6d548dad83edf9dd256 libreoffice-help-sv-7.1.8.1-12.el9_3.alma.x86_64.rpm eed5f962fdbc52c48a04d1512035681c0adecdeec46b3437e58ff3e4d12ff55e libreoffice-langpack-hu-7.1.8.1-12.el9_3.alma.x86_64.rpm ef04ccf145596282bf6427b21fd0237cf8dad02e28d21d56a1ed9db7134c8e17 libreoffice-langpack-hi-7.1.8.1-12.el9_3.alma.x86_64.rpm f0cd93e68c6854ca798b4a81c0a10da7198e72de11f09c945dcb871dbffc77bb libreoffice-gtk3-7.1.8.1-12.el9_3.alma.x86_64.rpm f39feeaf2c2e10c9aa9b0f2f832f315de8300396f6c5c795333d85e397f40442 libreoffice-ure-common-7.1.8.1-12.el9_3.alma.noarch.rpm f5062dd13e58e696c48a3468beff78f31caa418004d61893e764d26267e30977 autocorr-sk-7.1.8.1-12.el9_3.alma.noarch.rpm f6215956af060a69506cb82458e31b3762500bb29bb55ac10f5b8eae961890ca libreoffice-x11-7.1.8.1-12.el9_3.alma.x86_64.rpm f66897a83d18e663e46214898c9c742d24408ac41c2d6ca91b37800f36c29ffe libreoffice-langpack-ve-7.1.8.1-12.el9_3.alma.x86_64.rpm f8eea1456f7098f88f6a6e7948e006439469837298d3093471516a4fadb5ff66 libreoffice-help-hr-7.1.8.1-12.el9_3.alma.x86_64.rpm f955c2ce60cd13982f253bbb68d268ce11ce8ab6e4b8dea58bfb4715ea95d3b1 libreoffice-langpack-ro-7.1.8.1-12.el9_3.alma.x86_64.rpm f9e6008a8b41dae857cbdd08dababf95692cfb15821bd7689753370ba17bf179 libreoffice-langpack-zu-7.1.8.1-12.el9_3.alma.x86_64.rpm fac5a5a99d5f9554db7fdc712540541b670a31f7df1e0320e1c8a6709ee82a5f libreoffice-langpack-ko-7.1.8.1-12.el9_3.alma.x86_64.rpm faf5f348b8b9c114596760e0b1c27de683f6be00173ec67989ba8aa53fe4ec2f libreoffice-langpack-dz-7.1.8.1-12.el9_3.alma.x86_64.rpm fc305af22cf9ff8882a73ad0c8706c39936014e9955f8795e6c3356c5a3f5d2a libreoffice-langpack-tn-7.1.8.1-12.el9_3.alma.x86_64.rpm fd3bed7c1a2536b57a7e5cd468c5d2e6c6d193d18cb306de6e521585e3692852 libreoffice-langpack-da-7.1.8.1-12.el9_3.alma.x86_64.rpm fd3e58860c48774409a0bce5da9a5f3c88b7a1e18d5c59ccdd0270859e4b566e ALSA-2024:1436 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql-jdbc security update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): * PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default postgresql-jdbc-42.2.28-1.el9_3.noarch.rpm ede3b40e7fe11086a3e183d3dd0be658c1fb5aea6a86fe91f30954f142a0b602 ALSA-2024:1438 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default npm-8.19.4-1.16.20.2.4.el9_3.x86_64.rpm 2e9902a47132c12b66f9fc78e33d897b565cb21e769dc66a1f6c42a54d7a43be nodejs-16.20.2-4.el9_3.x86_64.rpm 39c873b622adaa53fb1abbf6ae98a0699f2ea580902228ebaa4351a6295435bb nodejs-libs-16.20.2-4.el9_3.i686.rpm 3bea2c60394d181cb6626dc01c656ff13728e7c40f1575adc56c846da35a8a31 nodejs-full-i18n-16.20.2-4.el9_3.x86_64.rpm 92635cca971db6cd7106aabd427eede415a2645b734a22e401461932f2b65a2c nodejs-docs-16.20.2-4.el9_3.noarch.rpm b7665cdefdd2b7370eacb21f03b8da394621bc6ab63e1a16bb5d2d7b0e6beaf1 nodejs-libs-16.20.2-4.el9_3.x86_64.rpm cb1972e5d747f117e90758779603e1e21a2e55c83453f07db51b24c3e2bad22c ALSA-2024:1462 Copyright 2024 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default golang-tests-1.20.12-2.el9_3.noarch.rpm 104540960dc9de9d90d719da97b145bb0a1c23cf777e6c2fa2b454f9034f0a89 golang-1.20.12-2.el9_3.x86_64.rpm 11612b52ee2958220af3c83bd0ab52e47054621d6586831fe6a33c2c0a7d7add golang-bin-1.20.12-2.el9_3.x86_64.rpm 1e04f765b1e4d68f169683e9758c930729b326758b4271f08571e7dbc08b9eff go-toolset-1.20.12-2.el9_3.x86_64.rpm 49e53f23b37a750d32a00e79bf307d1f8ae6b896bf51ea33ebafeab8468a32b1 golang-misc-1.20.12-2.el9_3.noarch.rpm 9d0669662e5356a48ac139afa0098e31f30e38bb227aa9d35ecd6ed898ad2799 golang-docs-1.20.12-2.el9_3.noarch.rpm d4242bc4a26b65d6054ce70a3bdcc8a83a696d44dfb4b9d4bb2521478157f6d2 golang-src-1.20.12-2.el9_3.noarch.rpm fe1b76488759989192765f595c8ac6a1864ef6afab2cb8ad8f32e6bf32f0ae56 ALSA-2024:1485 Copyright 2024 AlmaLinux OS 0 1 Critical

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.9.1 ESR. Security Fix(es): * nss: timing attack against RSA decryption (CVE-2023-5388) * Mozilla: Crash in NSS TLS method (CVE-2024-0743) * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607) * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608) * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616) * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610) * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions (CVE-2024-2611) * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612) * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (CVE-2024-2614) * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default firefox-x11-115.9.1-1.el9_3.alma.1.x86_64.rpm 15d65c1e0b36d015cb9759f4850011cd164478dcabf92ef9bc8561f403c8f80f firefox-115.9.1-1.el9_3.alma.1.x86_64.rpm dbd848b001a1984085f6e557e7e938c8cd85c8ad09b72c757f90d771356fe597 ALSA-2024:1493 Copyright 2024 AlmaLinux OS 0 1 Moderate

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fix(es): * nss: timing attack against RSA decryption (CVE-2023-5388) * Mozilla: Crash in NSS TLS method (CVE-2024-0743) * Mozilla: Leaking of encrypted email subjects to other conversations (CVE-2024-1936) * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607) * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608) * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610) * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions (CVE-2024-2611) * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612) * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (CVE-2024-2614) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default thunderbird-115.9.0-1.el9_3.alma.1.x86_64.rpm 1e1cfa46fa373e9b7f052c3e2a9ac8999fbbe3aa64ff1df0d7eb775edb45fb7b ALSA-2024:1501 Copyright 2024 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default grafana-9.2.10-8.el9_3.alma.1.x86_64.rpm 0a72b15f91807c7042e93861164eaa83643bb9f3c570c9b8c6c32a9319f4254e ALSA-2024:1502 Copyright 2024 AlmaLinux OS 0 1 Important

grafana-pcp security update

grafana-pcp is an open source Grafana plugin for PCP. Security Fix(es): * grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default grafana-pcp-5.1.1-2.el9_3.alma.1.x86_64.rpm 0ceaec524273c5438b6dcf4eaa081b5408c79c867a14190072d2840011997ee9 ALSA-2024:1503 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892) * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019) * nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) (CVE-2023-46809) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default nodejs-devel-18.19.1-1.module_el9.3.0+59+28b95644.x86_64.rpm 21e83dd1bed1e74126e10ba8bf578b192a9a3a8a5b98952e2f556d17186039f7 nodejs-18.19.1-1.module_el9.3.0+59+28b95644.x86_64.rpm 664bc5d43ba2330c7902306be84be2b5f42d6163d2839f8e84f109002e7afb7d nodejs-docs-18.19.1-1.module_el9.3.0+59+28b95644.noarch.rpm 6d03eb3baa9c6cffd0a6b69aba5f9734712d9468356216b59e1c3249b0339ede nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-full-i18n-18.19.1-1.module_el9.3.0+59+28b95644.x86_64.rpm 7e104b66ddef362a4bf889e7539716947f1d159d2b0dc5548c1c5a54813bd7c1 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 npm-10.2.4-1.18.19.1.1.module_el9.3.0+59+28b95644.x86_64.rpm c88fed3b588175712284c1ad9e119111fa9874b23330eed1de9b521c43c1ff4d ALSA-2024:1530 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: parsing large tokens can trigger a denial of service (CVE-2023-52425) * expat: XML Entity Expansion (CVE-2024-28757) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default expat-devel-2.5.0-1.el9_3.1.i686.rpm 27553505fdf62c76e02655fbd684f0f7d9b190f3931caf2a29f548c4d91eb885 expat-devel-2.5.0-1.el9_3.1.x86_64.rpm e8bac24e1c91c41ca60055d299d60f02b85cee0f4dc6bb673781fb19c320c234 ALSA-2024:1576 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-29052) Security Fix(es): * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621) * ruby: ReDoS vulnerability in URI (CVE-2023-28755) * ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617) * ruby: ReDoS vulnerability in Time (CVE-2023-28756) Bug Fix(es): * ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-29048) * ruby: Ruby cannot read private key in FIPS mode on AlmaLinux 9 (AlmaLinux-12437) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default rubygem-psych-4.0.4-143.module_el9.3.0+60+5ebc989a.x86_64.rpm 05e7e1e31e5c925f28d9a69e727332ea3193f0d586a67464a6be21cc6e6356c6 rubygem-irb-1.4.1-143.module_el9.3.0+60+5ebc989a.noarch.rpm 0905ea50c6cc6d5a681460c632ba0a74e5f6d2ba1db15071c6898ecbecc2a245 ruby-default-gems-3.1.4-143.module_el9.3.0+60+5ebc989a.noarch.rpm 0c918bfd80963513ed8ebf939151fdce1a95440655605c2d67f99cd84d216be4 rubygem-bundler-2.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm 0cfb15f8920c73930c5fec462727ff8bd0d4d1fc94390b2ad491b78cc0c212cf rubygems-devel-3.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm 0e7ff1f07e4a144615a899bd26379a895339f798bd29586c0fe8c704eec129c9 ruby-devel-3.1.4-143.module_el9.3.0+60+5ebc989a.x86_64.rpm 11976d1dd7e261fcb30b638592e3e7b80fc604e5ae8b22ed307dff5d7570cda2 ruby-libs-3.1.4-143.module_el9.3.0+60+5ebc989a.i686.rpm 11a224fa06c24b99c053efbf054acf9f575499ebd211f0c5848a85794cc061aa rubygem-typeprof-0.21.3-143.module_el9.3.0+60+5ebc989a.noarch.rpm 12b6d49f2eb37de64c5359d95338466e4c556af74df4adef525b75843d89190e rubygem-bigdecimal-3.1.1-143.module_el9.3.0+60+5ebc989a.x86_64.rpm 2a546cfa11ee0b1af7ffff7ce09b8e12ee8f5b57cbf4943e56f2ff06d125debe rubygem-rexml-3.2.5-143.module_el9.3.0+60+5ebc989a.noarch.rpm 354d1ca60ce97d60e2fb600c86afd727f668446370edb2394ee2935d4e106798 rubygem-rdoc-6.4.0-143.module_el9.3.0+60+5ebc989a.noarch.rpm 36f9528fb53df33c14bfec0c0b6cd001923bf8d59b7664a7e0110b900e83d99b rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm 47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8 rubygem-test-unit-3.5.3-143.module_el9.3.0+60+5ebc989a.noarch.rpm 48b4cecfa787eb441b96cb238ac59a92721e0e96871882a0c99535a41dce07ad ruby-doc-3.1.4-143.module_el9.3.0+60+5ebc989a.noarch.rpm 4eb51d23c8c72f8e460bd2914c19f7cd5dc68f46bbcbaa950473677350a79597 rubygem-json-2.6.1-143.module_el9.3.0+60+5ebc989a.i686.rpm 53a91f238f09f5857b68ba527c90a353382309f61289c0bf6f5c20f8b6d7cfe9 rubygems-3.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm 60fd72d151b2e2783689c5d4470411ffa6c39cbf7a4e4bd079e17fb95dc357e4 ruby-bundled-gems-3.1.4-143.module_el9.3.0+60+5ebc989a.x86_64.rpm 6143e954be60749f9756f62fb865a5be3dc5e9cf9f2a2b239e2b90f8832fe84a rubygem-power_assert-2.0.1-143.module_el9.3.0+60+5ebc989a.noarch.rpm 63219994c30877b59061770b580914f572efec91b2b19317f2060f0f9bd91827 rubygem-psych-4.0.4-143.module_el9.3.0+60+5ebc989a.i686.rpm 753f068a1a1ab544ad990e4a749aa651eee62986eb03e912bf090e7efc02ef8e rubygem-json-2.6.1-143.module_el9.3.0+60+5ebc989a.x86_64.rpm 7736920171f665084a203c8a2580386a23d0ba6866c2bf979af154775cfaac8f ruby-libs-3.1.4-143.module_el9.3.0+60+5ebc989a.x86_64.rpm 7a3d1b2bc8087aa07072024fe9a2e7298f6c8f912a765d022badc38db6dc5a86 ruby-devel-3.1.4-143.module_el9.3.0+60+5ebc989a.i686.rpm 8694f80920d499a321c7f92f8ca42830765e7ae6a76bdf98d12172014097093f rubygem-io-console-0.5.11-143.module_el9.3.0+60+5ebc989a.x86_64.rpm 8f73968349858adabc29cdbbbb389b4edeaf47405fcf96d74b5d5e7e3bafa19a ruby-bundled-gems-3.1.4-143.module_el9.3.0+60+5ebc989a.i686.rpm 9d86bd09a5f3d93ec82703401396afae5162a917c5cdb8c759a45850af9d048d rubygem-rbs-2.7.0-143.module_el9.3.0+60+5ebc989a.i686.rpm 9f5d26656f65c94cebea5a89c1ea51394f848473c91cddda5d27fa3cd5f8a896 rubygem-minitest-5.15.0-143.module_el9.3.0+60+5ebc989a.noarch.rpm af3a3fc67bab63fc8271d1228f3d722e5d3eec8eb7b03b43a664aff57944e18a rubygem-rake-13.0.6-143.module_el9.3.0+60+5ebc989a.noarch.rpm b6ae9ba983978a8dcb31c5a552e2ebe3d3871ada40297c0a50a3709151689b62 rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4 ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.i686.rpm c3b422c0c257097dfaf2f4328f471df8d0c09a3fabf14c72d884118586364b4d rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.x86_64.rpm dab19da2b0c280cf81790d96e39c50f37e61ff0e70a7b591600f76f8cc8d96df rubygem-rss-0.2.9-143.module_el9.3.0+60+5ebc989a.noarch.rpm e81933427fea30393c52bb8cff7b70f07e284fcee5be0e2e14cca0c33afb82e9 rubygem-bigdecimal-3.1.1-143.module_el9.3.0+60+5ebc989a.i686.rpm ea6ff5872cc45c505d2c890f23f3c19336b17f9be8f1ecf8fe6e86e4057e1a9c ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.x86_64.rpm ec12b8fc13490bc81027dfb175e9fdd413daf368199c59f8830124230f7b1cfa rubygem-io-console-0.5.11-143.module_el9.3.0+60+5ebc989a.i686.rpm ee565894988b215a9722197e8d85bf6837110cd0174bc4a69d22c559c8e51551 rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.x86_64.rpm f19ded1c673d7431f2562b768ca31c5d92eba38bb0ec8fe3aaf608b1e63e36d0 rubygem-rbs-2.7.0-143.module_el9.3.0+60+5ebc989a.x86_64.rpm fea8188c0ce150b31196b85817daceb2c391e97d8f31225485ba73be1239b972 ALSA-2024:1688 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) (CVE-2023-46809) * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019) * nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892) * nodejs: path traversal by monkey-patching buffer internals (CVE-2024-21896) * nodejs: multiple permission model bypasses due to improper path traversal sequence sanitization (CVE-2024-21891) * nodejs: improper handling of wildcards in --allow-fs-read and --allow-fs-write (CVE-2024-21890) * nodejs: setuid() does not drop all privileges due to io_uring (CVE-2024-22017) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default nodejs-docs-20.11.1-1.module_el9.3.0+88+29afeaa2.noarch.rpm 0a539992ceaebbdf59f37fcbeacbeb18b6a3fed31399e6b9cc248c7c888a888e nodejs-packaging-2021.06-4.module_el9.3.0+48+1cf146a1.noarch.rpm 35eb2a8230c495f14db654d04d574da1fcbda4788ab3b15100aa045fc30b01c3 nodejs-20.11.1-1.module_el9.3.0+88+29afeaa2.x86_64.rpm 3bef490adc178092d563c4a835c4792d41950d09906fda03d29007ec74b78727 nodejs-devel-20.11.1-1.module_el9.3.0+88+29afeaa2.x86_64.rpm 6b7954875a7e7d80ebd89ff70409d7fcd5cea5a72b9ac8b8dabb28c75545a527 nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm 6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa nodejs-full-i18n-20.11.1-1.module_el9.3.0+88+29afeaa2.x86_64.rpm 8533ea11be5e0be5c841b4c4cdfa1a9e95e8103e3f0c72e60c9d2c9769bc7a3a nodejs-packaging-bundler-2021.06-4.module_el9.3.0+48+1cf146a1.noarch.rpm cf69099af4a291d5887aa79f025868a557e50c9f7d2b18b5e0e5f3e2a9624fa2 npm-10.2.4-1.20.11.1.1.module_el9.3.0+88+29afeaa2.x86_64.rpm d1992da911aa85dc177f1f782836021fd67325d16029cb3ee036e049cc5146f3 ALSA-2024:1691 Copyright 2024 AlmaLinux OS 0 1 Important

varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default varnish-6.6.2-4.el9_3.1.i686.rpm 01b11485fec56ef4420134702a5101b78a32c86fe6ccd51d5b7aaac1e4d80c26 varnish-6.6.2-4.el9_3.1.x86_64.rpm 5d71ea71fb8f330fd8d6712ed6d1a915c99de0a8bf19973c4adc5365f3435dfd varnish-docs-6.6.2-4.el9_3.1.x86_64.rpm f52ed10f4de01a280adec14877a1fa86b515ccc6e80af73ab544881a527736d0 ALSA-2024:1750 Copyright 2024 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. The default combination of the "control-use-cert: no" option with either explicit or implicit use of an IP address in the "control-interface" option could allow improper access. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged local process to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether. To mitigate the vulnerability, a new file "/etc/unbound/conf.d/remote-control.conf" has been added and included in the main unbound configuration file, "unbound.conf". The file contains two directives that should limit access to unbound.conf: control-interface: "/run/unbound/control" control-use-cert: "yes" For details about these directives, run "man unbound.conf". Updating to the version of unbound provided by this advisory should, in most cases, address the vulnerability. To verify that your configuration is not vulnerable, use the "unbound-control status | grep control" command. If the output contains "control(ssl)" or "control(namedpipe)", your configuration is not vulnerable. If the command output returns only "control", the configuration is vulnerable because it does not enforce access only to the unbound group members. To fix your configuration, add the line "include: /etc/unbound/conf.d/remote-control.conf" to the end of the file "/etc/unbound/unbound.conf". If you use a custom "/etc/unbound/conf.d/remote-control.conf" file, add the new directives to this file. (CVE-2024-1488) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default unbound-libs-1.16.2-3.el9_3.5.x86_64.rpm 137afd200aa2136dd8d4c550bd079b709db858cd4756ef314d93c6eb020c0c99 python3-unbound-1.16.2-3.el9_3.5.x86_64.rpm 97762676dea518a4cdfb9249e0f7b918379cbcb2b8a7acb4d737ee11f3820e87 unbound-1.16.2-3.el9_3.5.x86_64.rpm cea24f4f2b54029d2f9d0d3146c58e5b8282c590de49823e7f131fc596fc0793 unbound-libs-1.16.2-3.el9_3.5.i686.rpm ecec382c085a8b0de4fb52bed6f17bf48ed9732bf5f7ad21f8cd2b74c4ded321 ALSA-2024:1789 Copyright 2024 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868) * bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516) * bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679) * bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517) * bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default bind-license-9.16.23-14.el9_3.4.noarch.rpm 012982f0586afa53de7d12064b54b611c6aa3996136ae529dafd184fb5a1d4b8 python3-bind-9.16.23-14.el9_3.4.noarch.rpm 170453af55c64d7384969b646894606ed2f1c355646c5fd9c3af89cd4d2eb837 bind-9.16.23-14.el9_3.4.x86_64.rpm 2d01a1481bddf1626c3dfd2f0d809717e7b0e94b2dac3610023b72bad77650af bind-dnssec-utils-9.16.23-14.el9_3.4.x86_64.rpm 41adb193b5134a1a9471c89b863077e0ad757278b750ff5320b3a17fead15202 bind-dnssec-doc-9.16.23-14.el9_3.4.noarch.rpm 8d0966d77d817acd3ef8ba3560ebc38f42057b8f42362fbf4c75953e90c7e7cf bind-chroot-9.16.23-14.el9_3.4.x86_64.rpm 8f80bcb809878227754abf14560baa073a7c16e40f2cfcdb2821181047e4f442 bind-dyndb-ldap-11.9-8.el9_3.3.alma.1.x86_64.rpm a9680d6c0778c97d236a5deef643163efba46db98e5b0a7d8641b4170cb2a012 bind-utils-9.16.23-14.el9_3.4.x86_64.rpm e12cbb46e01f251b8e8e644e2d936da00e7a05db14944af2f9ea35b3e6db7cad bind-libs-9.16.23-14.el9_3.4.x86_64.rpm ed04dc31b7bd24aa2260f4e0aafe7d7407966a5cbb717ee22a6c614c4d2eebd4 ALSA-2024:1818 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085) * OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default java-1.8.0-openjdk-javadoc-zip-1.8.0.412.b08-2.el9.noarch.rpm 0bf563394bac944235c1daa621390ddcd68e797f78bdc4a37707332579a7e18d java-1.8.0-openjdk-src-1.8.0.412.b08-2.el9.x86_64.rpm 45e2c75be932ffeca7d2ab0fcd9588dc6a36c9ba125118d324a0018077115ef3 java-1.8.0-openjdk-demo-1.8.0.412.b08-2.el9.x86_64.rpm a253121c0822ce9a7229c809b2d4b1cc1d126fdac63c57227feab15c5e152dae java-1.8.0-openjdk-headless-1.8.0.412.b08-2.el9.x86_64.rpm ae9cf290b3a1eef9705ebd5489b2d203e1eff3dafb817cd9dde4bf4a60e8dcba java-1.8.0-openjdk-devel-1.8.0.412.b08-2.el9.x86_64.rpm bfcccdca1a48ce337ac1f8e4e61a840a9f361e9c499214b898fdbdb1fa2c27d3 java-1.8.0-openjdk-javadoc-1.8.0.412.b08-2.el9.noarch.rpm cfc03711b0e7391441a8eaf6315973873c62d9b533bdcac02be4201aa9311579 java-1.8.0-openjdk-1.8.0.412.b08-2.el9.x86_64.rpm f39754bc8aaadd1cc0177b481bd5b4aff214c905b1a444cb41fb282343500371 ALSA-2024:1822 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085) * OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094) * OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default java-11-openjdk-javadoc-11.0.23.0.9-3.el9.x86_64.rpm 2e2985214d4e08ca59fa2b5219eb4b6d2b2c9afdaba18376339180bd2470b081 java-11-openjdk-headless-11.0.23.0.9-3.el9.x86_64.rpm 3eae5911188bcfaae8cd0ac77e8648b53266d1b0bfff6c3e2da6b7c3c09ce85c java-11-openjdk-src-11.0.23.0.9-3.el9.x86_64.rpm 402d417330b44cf0f60af8f276a83652cc022747d77d705bb726a45b5fa27870 java-11-openjdk-devel-11.0.23.0.9-3.el9.x86_64.rpm 5448493e8780365b6b7e708159a09748482380a9d1b06c1417d834388725f1af java-11-openjdk-demo-11.0.23.0.9-3.el9.x86_64.rpm 58a333edbdad8cca4b1b521ade4dba462d0629b4a711c668dda11f963557e4b7 java-11-openjdk-jmods-11.0.23.0.9-3.el9.x86_64.rpm a668c4c6730bd07d2ea7e8535302014819ee8b758528db422915e3f7f2a6a5f9 java-11-openjdk-static-libs-11.0.23.0.9-3.el9.x86_64.rpm b41f7234668d66257ca3a21d33f8f6754a92395e728f079ecdd23fc7ab3e1621 java-11-openjdk-11.0.23.0.9-3.el9.x86_64.rpm cffff7656229200cdd00f4717b43d87afc51908f7f43c15923d643c428e964b3 java-11-openjdk-javadoc-zip-11.0.23.0.9-3.el9.x86_64.rpm eef6addf6802c5ce22e78095fdfd4786c1e9c72688e667ee4fbaf3cc367863c4 ALSA-2024:1825 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094) * OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default java-17-openjdk-demo-17.0.11.0.9-2.el9.x86_64.rpm 22556ebcccb36b811623360e3f49f9fe91de71de7d6f75b278edbe9d8f725c4d java-17-openjdk-devel-17.0.11.0.9-2.el9.x86_64.rpm 309978273c52b3d302137f65b3d8ef0f06dd7c9a7e472deeff1e76b172278211 java-17-openjdk-src-17.0.11.0.9-2.el9.x86_64.rpm 75b204f8799801de979d0f96285b0e6fc08e074abbb58175d1d854b71aa43fd4 java-17-openjdk-javadoc-17.0.11.0.9-2.el9.x86_64.rpm 8d2a9c2112e112112a2022e4b9d540b55dc15428b50068e7f8026f397ba6dbd9 java-17-openjdk-static-libs-17.0.11.0.9-2.el9.x86_64.rpm 9bee84a94e9736cd3cc02bb41fd0aa315a9afb15b855fe46814b25be8daec23b java-17-openjdk-javadoc-zip-17.0.11.0.9-2.el9.x86_64.rpm a3a78d867ffe5e8ffc1f702017b9e5b1d48beafb116f558664d04a6c3e2bf7bd java-17-openjdk-17.0.11.0.9-2.el9.x86_64.rpm b2aecf75a892e12b78d5617dc44538b2419a72ac9e2b5fde66146f5d994cb9b0 java-17-openjdk-headless-17.0.11.0.9-2.el9.x86_64.rpm e222dc53c7034e017dc62891bab6332d03daa2527d801614fdfeba15028c0bad java-17-openjdk-jmods-17.0.11.0.9-2.el9.x86_64.rpm f120a5d6194de648d6fb7c7da12cc61adada7457219c20fa8256ed0436a2f5fd ALSA-2024:1828 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default java-21-openjdk-headless-21.0.3.0.9-1.el9.alma.1.x86_64.rpm 11d0b86a9a44b471121f3a54dc2f7dcbacddf8400f239e6dd79c3e242492ca1a java-21-openjdk-devel-21.0.3.0.9-1.el9.alma.1.x86_64.rpm 1e78ea2ef8932894cc5e1b235c7ff25fe3f960da8d1ac1dba138277c615ddaea java-21-openjdk-src-21.0.3.0.9-1.el9.alma.1.x86_64.rpm 2bca481e1e5ff1b13ce2db40a43701895d9a7d3765a00a27d83b048e9614ef34 java-21-openjdk-javadoc-zip-21.0.3.0.9-1.el9.alma.1.x86_64.rpm 4bbda5935e97de8af431f92def88d4291433c393286d5011e8dd754a12139c71 java-21-openjdk-jmods-21.0.3.0.9-1.el9.alma.1.x86_64.rpm 559271f89a41d2a20dc6382d5f5326f4a5d23ef97b272bc7d6ac2fffd943930d java-21-openjdk-static-libs-21.0.3.0.9-1.el9.alma.1.x86_64.rpm 7ce149e051299e22e3eb7c759279b2632821ed0b6137c381981807657b1748f1 java-21-openjdk-javadoc-21.0.3.0.9-1.el9.alma.1.x86_64.rpm 9f3dcf1ca776677d40a66eb61464d3e20d8d369b8fc5cb1eac6d70152f039bc9 java-21-openjdk-21.0.3.0.9-1.el9.alma.1.x86_64.rpm b66a9d270b12f1d679f71a2144555ce74360451339a8c653ece528084727b761 java-21-openjdk-demo-21.0.3.0.9-1.el9.alma.1.x86_64.rpm d8b8f6543cbcdf4dbff340c8540a6a65d118b638e9188cec06a21cd594a629fb ALSA-2024:1872 Copyright 2024 AlmaLinux OS 0 1 Important

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: CONTINUATION frames DoS (CVE-2024-27316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default mod_http2-1.15.19-5.el9_3.1.x86_64.rpm eb8ea2f7f3146b030a2668a97b60b34d4c2990ca7508d2a18b323dc2c0670f49 ALSA-2024:1879 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) * gnutls: potential crash during chain building/verification (CVE-2024-28835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default gnutls-dane-3.7.6-23.el9_3.4.i686.rpm 04420f038f63b2b7e9c710721264eb479ec1e34349da3df3149c92a825df053f gnutls-devel-3.7.6-23.el9_3.4.x86_64.rpm 3558a0a97b9c17c4b8769d0ed8aa740ceaeb1c5781cf5f80d0beeb2ad0e3dc0a gnutls-utils-3.7.6-23.el9_3.4.x86_64.rpm 42e0c2301d2a1d4e650f43d89d68d6c3360f64cb28850253b0899ed2d88fcf79 gnutls-devel-3.7.6-23.el9_3.4.i686.rpm 59226069f284b5ed749cce7e267301e6729df83fce59b03e666f4cc6685b06d4 gnutls-c++-3.7.6-23.el9_3.4.x86_64.rpm 71f12a775926fda3873ba37d54a0893c978bc48285c4ae8e6b8ca628b9504c76 gnutls-c++-3.7.6-23.el9_3.4.i686.rpm 7aee58510b8e52c0fdbe78c8bdb820ef0754fdb8455dc2ded605539dbd964257 gnutls-dane-3.7.6-23.el9_3.4.x86_64.rpm e810b6136e9b55ed69a3a81c426c4c58eb97822de220f7dd89342c4a473ef1a3 ALSA-2024:1908 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.10.0 ESR. Security Fix(es): * GetBoundName in the JIT returned the wrong object (CVE-2024-3852) * Out-of-bounds-read after mis-optimized switch statement (CVE-2024-3854) * Incorrect JITting of arguments led to use-after-free during garbage collection (CVE-2024-3857) * Permission prompt input delay could expire when not in focus (CVE-2024-2609) * Integer-overflow led to out-of-bounds-read in the OpenType sanitizer (CVE-2024-3859) * Potential use-after-free due to AlignedBuffer self-move (CVE-2024-3861) * Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 (CVE-2024-3864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default firefox-x11-115.10.0-1.el9_3.alma.1.x86_64.rpm 6000b689d2563704b6afba12d0f601283a080a01e7feb999b954358c020fd7b9 firefox-115.10.0-1.el9_3.alma.1.x86_64.rpm a053879009114c3919d77b0dc4dd31c4d73e12432917f47f16d77b3fb456f0ed ALSA-2024:1940 Copyright 2024 AlmaLinux OS 0 1 Low

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.10.0. Security Fix(es): * Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default thunderbird-115.10.0-2.el9_3.alma.1.x86_64.rpm 48030f5bad6c7a022cf029dea627e897573d3eae73b37a7d36c5a8ce5699b6bf ALSA-2024:1963 Copyright 2024 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default golang-1.20.12-4.el9_3.x86_64.rpm 25d4d7e28af3bebb6ce6253581664a846fada21d4a15a449d7bea493cd769298 golang-docs-1.20.12-4.el9_3.noarch.rpm 2ee34144c6fa1a12f1ac5f287d3860b0728042489fe9f5fa18b39670bde4f55a go-toolset-1.20.12-4.el9_3.x86_64.rpm 399829a3f0f254c5d1607712401ff6c1951ee1600d87a4416c80bc7fbb7a0e68 golang-tests-1.20.12-4.el9_3.noarch.rpm 3a5fd7b0bc28197c3bb3c85bd87cd5b1746f9c32d95bbff8336b8d5312b211f7 golang-src-1.20.12-4.el9_3.noarch.rpm 4b3d61aa441caf36d71dde4418f41bd83783de9edc317744fdab14760bd6a72e golang-bin-1.20.12-4.el9_3.x86_64.rpm b1e74f495213cd4b4f5918f504afc785119b432428c67a7a644f7b5eee4f076a golang-misc-1.20.12-4.el9_3.noarch.rpm e9c351910d43ecbe09ede3a784bd3e855a4f2396f4c5240fc83180b95cf69c96 ALSA-2024:2033 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreswan security and bug fix update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default libreswan-4.12-1.el9_3.1.alma.1.x86_64.rpm 31066c43b5a4ab6cabc40568ba174e13d57e8210e33837cdc89a9859654a853d ALSA-2024:2055 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * buildah: full container escape at build time (CVE-2024-1753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default buildah-1.31.5-1.el9_3.x86_64.rpm c86ff17df04fe1d70e5a9d05052fb43d7672e37ddd40a6e000271b13901ff138 buildah-tests-1.31.5-1.el9_3.x86_64.rpm ea9577bdf314026d24b51ae39f0eb66ad3d2764049e241fe0e6d225ee8557604 ALSA-2024:2079 Copyright 2024 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288,VU#421644.3) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_3_default git-lfs-3.2.0-2.el9_3.x86_64.rpm aff750975a1a1da2602cfa8f3c55386a08f71d57882967d08b075e606770b70c ALSA-2024:2119 Copyright 2024 AlmaLinux OS 0 1 Moderate

Image builder components bug fix, enhancement and security update

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security Fix(es): * osbuild-composer: race condition may disable GPG verification for package repositories (CVE-2024-2307) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default osbuild-composer-core-101-1.el9.alma.1.x86_64.rpm 6bc113de8646aa75a02e62da7f5db29229a3718506ccbe32068e025a0ee62971 osbuild-composer-101-1.el9.alma.1.x86_64.rpm a52a35562ad929a5e492a84cb7d696a8c08058531062563bbab56db5f16a18a5 osbuild-composer-worker-101-1.el9.alma.1.x86_64.rpm b418a4541b03e35dd757436d2409cb7eed635ed579b17a31dbc0a4a8cf75821e ALSA-2024:2126 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213) * webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745) * webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359) * webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928) * webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983) * webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883) * webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default webkit2gtk3-jsc-2.42.5-1.el9.i686.rpm 04bc161ebf79dab1518ebb9be5f5528ef46ddaec3190953a67439cbf1aeef462 webkit2gtk3-2.42.5-1.el9.x86_64.rpm 2c668ffc51a2b83d3c0df7904ab749188169057cb455e093a16f118044aacb64 webkit2gtk3-devel-2.42.5-1.el9.x86_64.rpm 656f07dfd1152b90a9bd407f1eafae86d1dfb55ee2fb53057651cf14b12d59f3 webkit2gtk3-devel-2.42.5-1.el9.i686.rpm 813898782743768ff62325fe88181afe9111c6e45f9a615bdc0f87dc90cf3ded webkit2gtk3-2.42.5-1.el9.i686.rpm 86188ff858a29e34c898b319872cbc9e49366f200655df983b23dcbd2ab4fd87 webkit2gtk3-jsc-devel-2.42.5-1.el9.i686.rpm 9cf1890eb1f359668901237231d895d4d64ef4580b00a21f6174c09e57ef9398 webkit2gtk3-jsc-devel-2.42.5-1.el9.x86_64.rpm e080742046fe704c873dfaac7e15a74cfc14472ba3e16c0e4a898b0dc04676b5 webkit2gtk3-jsc-2.42.5-1.el9.x86_64.rpm f8b8e5e7402343d76652ad2970fab15ddf313fd91856197bdb59122fcdf1def8 ALSA-2024:2132 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security and bug fix update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) * pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) * jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default fence-virtd-serial-4.10.0-62.el9.x86_64.rpm 0026f5bdedf0312e6e0cdd62bb434a61197448b8e924d9bb4aae3afaf1791576 fence-virtd-4.10.0-62.el9.x86_64.rpm 05232234f29b325c72348968a6e9db0639624226736c5c1537d96b4abc80b415 fence-agents-kubevirt-4.10.0-62.el9.x86_64.rpm 0c84c357edb3ffb6dd42b6b78ee19f0c2eef14b6e950bc3df3c67ee358d64490 fence-agents-ibm-powervs-4.10.0-62.el9.noarch.rpm 210fde9bca7cfa78ea2a0af44508b12e00780dfbe06e95c394765aa7b43a02e7 fence-virtd-cpg-4.10.0-62.el9.x86_64.rpm 696e7f944ce1656f1c54d6df5d9428a24253d0c6dca24f7beeeb7585e38292ed fence-virtd-multicast-4.10.0-62.el9.x86_64.rpm 755dcb6ea916391e64800d758237df64bb5e17c6a1d2284a46b7c77da4da51a6 fence-agents-ibm-vpc-4.10.0-62.el9.noarch.rpm 7de2e69a7d2f0cec06dc88b851e2b7e7fa3ee45cab5e8a927a5aae59d6af837b fence-virtd-tcp-4.10.0-62.el9.x86_64.rpm 9aff18fe2149014371f95215287c87de8908e54b2d92d2846c87942bb5443bec fence-agents-virsh-4.10.0-62.el9.noarch.rpm a1d8d69a0d0ef8fe7ea1589214340121fee9cf64ad705a9b859086356b5cebbe fence-agents-common-4.10.0-62.el9.noarch.rpm a5867c0ce0bdae504b066f42a12ff1903ac5d918bc03fca12a3ab48242558673 fence-virt-4.10.0-62.el9.x86_64.rpm b027ad072b98976f222038e5f08a58a25d2e22add218b327e76d36b2166dc354 fence-agents-compute-4.10.0-62.el9.x86_64.rpm ced2648be652ffea936331fef11cb9b61527c0817a42eb165ebfcd43237ee263 fence-virtd-libvirt-4.10.0-62.el9.x86_64.rpm d71bb746867ac1b31a5df2994ae687fe01ed58bc5c69e66d88762fc6d9c9b60d ALSA-2024:2135 Copyright 2024 AlmaLinux OS 0 1 Moderate

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() (CVE-2023-3019) * QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service (CVE-2023-3255) * QEMU: improper IDE controller reset can lead to MBR overwrite (CVE-2023-5088) * QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() (CVE-2023-6683) * QEMU: am53c974: denial of service due to division by zero (CVE-2023-42467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default qemu-kvm-block-curl-8.2.0-11.el9_4.x86_64.rpm 087b694ac76c4033b5ca4c02e0b0f3e63b3769104425fe4140b07ac5a152d0c4 qemu-kvm-common-8.2.0-11.el9_4.x86_64.rpm 31295a6f2a3dadac2cfe33be46725fd4afe5258886ef10b4fe361b801f823c9d qemu-kvm-ui-egl-headless-8.2.0-11.el9_4.x86_64.rpm 3840d63bb06938fdf2dcf337cc4f5b47a29a0e2860d69761409c4de8e7cda530 qemu-kvm-device-display-virtio-gpu-pci-8.2.0-11.el9_4.x86_64.rpm 3e5bd4ad9ab20bd2c147d4e89a36b33057ffcf953f7a876ce9ea4691a7594bd0 qemu-kvm-audio-pa-8.2.0-11.el9_4.x86_64.rpm 4f94ae82a04403be751d060398ad502bac0c1f949ff70bb31f40d4c580f699ca qemu-pr-helper-8.2.0-11.el9_4.x86_64.rpm 51e3106810283b017a643e7692975190962fa33096f04eb583f7f5b0eb5d9dcc qemu-kvm-tools-8.2.0-11.el9_4.x86_64.rpm 657fb0f6a9c3c5fc7f6f97562244ad4f8d92cbf29855dca9c3e04d6bf807d01e qemu-kvm-core-8.2.0-11.el9_4.x86_64.rpm 663ee1dd5d1cc982d9b5c30e1e32b6d7727440206771bddcbbcfc6462e98ddef qemu-kvm-docs-8.2.0-11.el9_4.x86_64.rpm 6d69a7af2cdaa67375070caafe14c50bcd4ff4b5e3adbc61addd9b2bd8d3e83a qemu-kvm-device-usb-host-8.2.0-11.el9_4.x86_64.rpm 6f8bac444f6997ff0a0317f540f80e0b03210f9166197a2d6b1d1461fe9a9567 qemu-kvm-ui-opengl-8.2.0-11.el9_4.x86_64.rpm 7f20fe37f1750ffd91214b1f018935e85a714cc7a1e43e46348aa860007f150f qemu-kvm-device-usb-redirect-8.2.0-11.el9_4.x86_64.rpm 7f2449142b2635a48f978e9aa36ec335b410269de290cbbcfee3b1c7616693fa qemu-guest-agent-8.2.0-11.el9_4.x86_64.rpm a8cc61554f9742900c2abaf9ce38b6becd9939ea167e6ee76ca50f5196652ad8 qemu-kvm-device-display-virtio-vga-8.2.0-11.el9_4.x86_64.rpm d05d48fc479283bb36c8fcbd4375d932a9a743ecfed779738a360d9a83a5f9a7 qemu-kvm-8.2.0-11.el9_4.x86_64.rpm d970815f79ee886e09fe6f9512eedcd43b27f928f03980542844c81dbe084bcb qemu-kvm-block-rbd-8.2.0-11.el9_4.x86_64.rpm e7d8259b4973389f44ae517972ad85e36134cf3d81cd765c0db782e5a686140c qemu-img-8.2.0-11.el9_4.x86_64.rpm fa1023f75b032e8021837f8b1f3a069105e0411f5ff056a82f76daa9d0f56686 qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4.x86_64.rpm fa70a53d1e8674191cc8ad568ccc9d8c388ca2657698be1774e67a14dca0bd6a qemu-kvm-block-blkio-8.2.0-11.el9_4.x86_64.rpm fbcc9048685098c0a2256ac43cfc29c992b71698c5ba5b7e86e8d8b4fe0e170a ALSA-2024:2137 Copyright 2024 AlmaLinux OS 0 1 Low

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default LibRaw-0.21.1-1.el9.i686.rpm 5e11a0703badeecbd07ff78c648fd04567d10820a1e05ad8d4dcf781ff2902e5 LibRaw-0.21.1-1.el9.x86_64.rpm 94c017255c7aad6b620e66eb541b16f6fd7dbe0af535971eb072f26af06c2548 ALSA-2024:2145 Copyright 2024 AlmaLinux OS 0 1 Moderate

libX11 security update

The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785) * libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786) * libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libX11-devel-1.7.0-9.el9.i686.rpm 28c33f59aa1ff42444d4ff617a1547acf63432d999089f2b42de52338d78f4cc libX11-1.7.0-9.el9.x86_64.rpm 4c382abc012d0aac93d993591032165488c5f8798fb50accbdb25923831092a2 libX11-devel-1.7.0-9.el9.x86_64.rpm 936e2724840d3d7592173cee97d9b5c03298907f00004a6adb0fe5f026dd5222 libX11-common-1.7.0-9.el9.noarch.rpm 9db43557989cf17a44ff936cd59d632d0105f4c231f41317fd063de21d9ec0e7 libX11-1.7.0-9.el9.i686.rpm c8907ab5dd52193ff9973f5676a90c7ba957df9cd5109f2577a4e7b1fcbe120d libX11-xcb-1.7.0-9.el9.i686.rpm cb78fed074b20d07924fe2bb82a9707002da44c34e2e4a29ccb53594da9e27f8 libX11-xcb-1.7.0-9.el9.x86_64.rpm ffef859d9b686a279ce2f63df732f3fbf540d7fe9353104051bf9be49e5e2d68 ALSA-2024:2146 Copyright 2024 AlmaLinux OS 0 1 Moderate

libXpm security update

X.Org X11 libXpm runtime library. Security Fix(es): * libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788) * libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libXpm-devel-3.5.13-10.el9.i686.rpm 05228e0f7f5961e8dff502bce8b0bfeb7708c588efe00ddb6af8a28b10f7f483 libXpm-3.5.13-10.el9.x86_64.rpm 7afaf5f51dd3eb0d8daa965a2e06b0b1913033ce9dbe251264607eaffaec24f6 libXpm-3.5.13-10.el9.i686.rpm a959bddc4f02bb1c1c0838c432d4919c157860c8cfc3273e144f5bedef17e557 libXpm-devel-3.5.13-10.el9.x86_64.rpm bae144a9fee8fb943a51213a854716fb2bab490e82e946fec30fe2dce0ca80dc ALSA-2024:2147 Copyright 2024 AlmaLinux OS 0 1 Moderate

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default ipa-client-epn-4.11.0-9.el9_4.x86_64.rpm 033843791e59c59aa2e32a0b6606cdc138e6245332babfa68c90432058f9ae0a ipa-selinux-4.11.0-9.el9_4.noarch.rpm 08e9c818b6865cd30fd5ab517fe50c550f6a148d9ca30ed86066e8ef6c4b4c0c ipa-server-trust-ad-4.11.0-9.el9_4.x86_64.rpm 0b23d87cc9c2082652b4eebdddecfb746264a6b173ef7327e91f50f684b13aaa ipa-client-common-4.11.0-9.el9_4.noarch.rpm 1ab0480879b73c23e4cbdb845320a83e387ba2625089f785e7cb8e52195a1067 ipa-client-samba-4.11.0-9.el9_4.x86_64.rpm 45c9ef0a1230d5f7dcd1a029735bc82a53ebc77000f94af84d9576d43ca17833 ipa-server-4.11.0-9.el9_4.x86_64.rpm 71abe2faf3af711c22dc15a5dbe62396e53d52ae44989526b7ecdbf1a3b09a90 python3-ipaserver-4.11.0-9.el9_4.noarch.rpm 76e822e20c9c40335530199c5769e7144883bd9506cc44cc7aaf16a96d5764d9 python3-ipalib-4.11.0-9.el9_4.noarch.rpm 7bcff5ae7212f01d767c97102900c6362dca72812f54fa211c8d41b28bff7afe ipa-client-4.11.0-9.el9_4.x86_64.rpm 7c0961a1af5f290debb0585be51f620bec616586affc2cae8cdad722c2186e32 python3-ipaclient-4.11.0-9.el9_4.noarch.rpm 8f7f9bfc29aced9dc2e0bd72d04b9cd14638283efcc496bcfabec9ffea9b3ca1 ipa-server-common-4.11.0-9.el9_4.noarch.rpm 97beb0eb751268c2f53651231270b943d4d4735a085c59c47a445edf2d8218b8 ipa-common-4.11.0-9.el9_4.noarch.rpm cdf47c0e6f60a0bfd2a30c694fc302e0e7ad41f77aef5befa2cea3653404a481 ipa-server-dns-4.11.0-9.el9_4.noarch.rpm d1f4d0ec69f218a9cee7dee67a4e91b7da227cf843abbe2a153532ed78979a35 ALSA-2024:2156 Copyright 2024 AlmaLinux OS 0 1 Moderate

frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: incorrect length check in bgp_capability_llgr() can lead do DoS (CVE-2023-31489) * frr: missing length check in bgp_attr_psid_sub() can lead do DoS (CVE-2023-31490) * frr: processes invalid NLRIs if attribute length is zero (CVE-2023-41358) * frr: out of bounds read in bgp_attr_aigp_valid (CVE-2023-41359) * frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c (CVE-2023-41909) * frr: mishandled malformed data leading to a crash (CVE-2023-46752) * frr: crafted BGP UPDATE message leading to a crash (CVE-2023-46753) * frr: ahead-of-stream read of ORF header (CVE-2023-41360) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default frr-8.5.3-4.el9.x86_64.rpm c81c623d5ef6777a3827743681e4885c0e88f856551d630ff6b92cba04253f94 frr-selinux-8.5.3-4.el9.noarch.rpm f85f64a1fb71053e0f2877d7703451ebadd7b820fa527fd6d06fe4022eb842c2 ALSA-2024:2159 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-urllib3-1.26.12-2.el9.noarch.rpm d8112f2b32b9d20ea46dd3d97d879f50ea39a56b348424644f799b5aa7ef7ccf ALSA-2024:2160 Copyright 2024 AlmaLinux OS 0 1 Moderate

toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318) * golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319) * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default toolbox-0.0.99.5-2.el9.x86_64.rpm 495601d579ebe2c41e8c7a941ffd9aca99449c505d01e86a606438b54c417e61 toolbox-tests-0.0.99.5-2.el9.x86_64.rpm 4da95255ba247639ddf8ebb3aab18ed7f19668fe3533748c9f94d11bc734d19b ALSA-2024:2169 Copyright 2024 AlmaLinux OS 0 1 Moderate

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229) * xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408) * xorg-x11-server: SELinux context corruption (CVE-2024-0409) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886) * xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default xorg-x11-server-Xvfb-1.20.11-24.el9.x86_64.rpm 1fc6dd68521b3c868bfb5648ba0a4817393ca7a2c2a202bd5e83fdac58cb40c0 xorg-x11-server-Xorg-1.20.11-24.el9.x86_64.rpm 5127cd5d9946acdddbfd5a31a4ddc4668a524a44d0800517856fe18bb7252355 xorg-x11-server-Xnest-1.20.11-24.el9.x86_64.rpm a5937b912595e85e3068bd562021530e500eefb22f19919f3f1e624d21722855 xorg-x11-server-Xdmx-1.20.11-24.el9.x86_64.rpm cadee4e3d6fedfd59a664675030551e3b1575ff08e16a14adeba2ec5dd06531c xorg-x11-server-common-1.20.11-24.el9.x86_64.rpm e09a25ef8db6803e323616b92374b00867558dfe24f626c5cc40bbdefb129f0a xorg-x11-server-Xephyr-1.20.11-24.el9.x86_64.rpm ee00ad49a8096217db9a8a365a52093db300dc896a68c497efdb2b269dea6df7 ALSA-2024:2170 Copyright 2024 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229) * xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408) * xorg-x11-server: SELinux context corruption (CVE-2024-0409) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default xorg-x11-server-Xwayland-22.1.9-5.el9.x86_64.rpm 59d6fc3c05b4ce227c70e4bbc5bd172b8203042adeaa3e537a2c5450bd226605 ALSA-2024:2180 Copyright 2024 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default runc-1.1.12-2.el9.x86_64.rpm 7b45d4a16c4e05398e374bb8a5a2386b909b836e75d9b8215180efaa627a6606 ALSA-2024:2184 Copyright 2024 AlmaLinux OS 0 1 Moderate

libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libsndfile-1.0.31-8.el9.x86_64.rpm 24d124f85877b68696a0569bcac283ea4bfbd826c4c541a28716bd28381fbc05 libsndfile-1.0.31-8.el9.i686.rpm 99b6a4d46f959bfe62cc48c3d1ac4ea888e5a313e07a54c9a8a3473742fe8c7b libsndfile-utils-1.0.31-8.el9.x86_64.rpm ba1427818fc0c327e00bd237c6a83dc6edc7aa021d3fbda0e3d5a12a6006913c ALSA-2024:2193 Copyright 2024 AlmaLinux OS 0 1 Moderate

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default podman-docker-4.9.4-0.1.el9.noarch.rpm 04afa407dea5eda0adee572d48983857be667cfa665ef8f5d9ad1479e385e0c0 podman-remote-4.9.4-0.1.el9.x86_64.rpm 54825cad546971f43297a2c0a7dc7a75c418af6ee8e74ce065d70a9bf9dced23 podman-plugins-4.9.4-0.1.el9.x86_64.rpm 82e917c7bdcd28dc661270a825ea1febee24d82ae168275320d76c4f96a938b9 podman-tests-4.9.4-0.1.el9.x86_64.rpm 83e409100809d95ee6d607f12928f2fa9959434999ae10db00a15ddeed86e603 podman-4.9.4-0.1.el9.x86_64.rpm 89d736a6171128bf9839d4e00915ea7b5d0b0eeee36ccc6e77d055eecc0b2d3e ALSA-2024:2199 Copyright 2024 AlmaLinux OS 0 1 Important

pmix security update

The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes. Security Fix(es): * pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default pmix-devel-3.2.3-5.el9.x86_64.rpm 119ddfecfacd7416fb0d715aa6354e67c7f69ef2af1734e82508c01c7a4a2eac pmix-pmi-3.2.3-5.el9.i686.rpm 31d95099ad930ed28d7584a061c4384558a8069b6b7dd96be69e25d98d2f4467 pmix-3.2.3-5.el9.x86_64.rpm 6012b6ddc1137fbb8d5d4add256108268f6c94a18b9add000b6706641cc03294 pmix-pmi-3.2.3-5.el9.x86_64.rpm 9344bc7b4bcc36227cf9a07b6465b4d0ed2c924388966206f949981f2a9fff42 pmix-3.2.3-5.el9.i686.rpm d1bc0b0c0be362abb82031764c79e4c4746531473b2d86ba36c4054b4045dc5d pmix-tools-3.2.3-5.el9.x86_64.rpm d8ecf11b062d05afa73b2fe5ea13ca320cad2b720022130869280cea76222926 pmix-devel-3.2.3-5.el9.i686.rpm fb588e536efa0f16d3f127c0bdc5d48295818d8387cd00af12a45131570a5d43 ALSA-2024:2204 Copyright 2024 AlmaLinux OS 0 1 Moderate

libnbd security update

Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients. Security Fix(es): * libnbd: Malicious NBD server may crash libnbd (CVE-2023-5871) * libnbd: Crash or misbehaviour when NBD server returns an unexpected block size (CVE-2023-5215) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libnbd-1.18.1-3.el9.x86_64.rpm 1c551ebdf458c08b35326c1a0046b7d5e244a1e658c4c2e8d4bddacbacbfcc39 python3-libnbd-1.18.1-3.el9.x86_64.rpm 27d4c87aa49437efc13eadb0db73525bfe6e70f0eadb2805f3a8852a55413b86 nbdfuse-1.18.1-3.el9.x86_64.rpm 29fc99c42328690a78fd5ef0b819ee0c82ad2483cb2a02f9d863e093b5ad336d libnbd-bash-completion-1.18.1-3.el9.noarch.rpm 330bac53c5f772da224cd145269ed56ddc486fd5b7a66fedfc609ea0869e0e24 libnbd-1.18.1-3.el9.i686.rpm 4830494e0f6e205c497d8e4cc287e3b09ac9fe2dc8499e22c4da52b9041e3918 ALSA-2024:2208 Copyright 2024 AlmaLinux OS 0 1 Moderate

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: Incorrect offset calculation leading to DOS (CVE-2023-39350) * freerdp: Null Pointer Dereference leading DOS in RemoteFX (CVE-2023-39351) * freerdp: invalid offset validation leading to Out Of Bound Write (CVE-2023-39352) * freerdp: missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect (CVE-2023-39356) * freerdp: Integer overflow leading to out-of-bound write vulnerability in gdi_CreateSurface (CVE-2023-40186) * freerdp: Out-of-bounds write in clear_decompress_bands_data (CVE-2023-40567) * freerdp: Out-of-bounds write in the `progressive_decompress` function due to incorrect calculations (CVE-2023-40569) * freerdp: buffer overflow in ncrush_decompress causes crash with crafted input (CVE-2023-40589) * freerdp: missing offset validation leading to Out Of Bound Read (CVE-2023-39353) * freerdp: Out-Of-Bounds Read in nsc_rle_decompress_data (CVE-2023-39354) * freerdp: integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment (CVE-2023-40181) * freerdp: Out-of-bounds read in general_LumaToYUV444 (CVE-2023-40188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default freerdp-2.11.2-1.el9.x86_64.rpm 3522b754ce06cd5b906d7023a2a6e83502a2f134f6fa571cdb9aaba562775db4 libwinpr-2.11.2-1.el9.i686.rpm 62f6a8596fd15990a032ddc5d030dee1c120a99ad9688aa74566e8afb7d78a58 freerdp-libs-2.11.2-1.el9.x86_64.rpm ba75ff544a79566cd6b3582c33fba193546fe32fcb693e836cffddbe6dbec0a6 libwinpr-2.11.2-1.el9.x86_64.rpm c882b084fe6c8598240f29b3169c3b03a77522d851b00ddfdefaeb7ab598dbec freerdp-libs-2.11.2-1.el9.i686.rpm cffad50f8ce5f298e6752e3bc496a43d69b78044e0cc65629bb8145e06949038 ALSA-2024:2211 Copyright 2024 AlmaLinux OS 0 1 Moderate

tcpdump security update

The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces. Security Fix(es): * tcpslice: use-after-free in extract_slice() (CVE-2021-41043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default tcpdump-4.99.0-9.el9.x86_64.rpm 76e9936d01ec5147ee0bdec2d69e9057cc30f6582a0865198cc19f518e49b5ad ALSA-2024:2213 Copyright 2024 AlmaLinux OS 0 1 Moderate

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * pcp: unsafe use of directories allows pcp to root privilege escalation (CVE-2023-6917) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default pcp-selinux-6.2.0-1.el9.x86_64.rpm 00abf4f75e790f7091667b68ea2a66a71b15ef2abea787ff3c1b26c44a288eda pcp-pmda-gpsd-6.2.0-1.el9.x86_64.rpm 016810e310e572038723f6517f334d0bfbecbef0a79678e55767a7005ace2259 pcp-pmda-weblog-6.2.0-1.el9.x86_64.rpm 080564180922341f14487dc56c0d944d200a465d2ce90d82147f5b63994391b3 pcp-pmda-podman-6.2.0-1.el9.x86_64.rpm 0a0f7bb5b2ffaafda48b95766bba701b3175b9607f49a4dac234c689d1942d9c pcp-pmda-bind2-6.2.0-1.el9.x86_64.rpm 0b9610555633ab383a470194da8f8d35576cd3b335974300e37c28e4052b1412 pcp-pmda-libvirt-6.2.0-1.el9.x86_64.rpm 0d247edc70d747c2cdffeba4de3ff52168c13f5e6c2f1d39cfea0aa42809af69 pcp-pmda-memcache-6.2.0-1.el9.x86_64.rpm 14853ac5856f49ed04b530c6f9de949f3d1ce2ae127b69ae4c3bde879a026c40 pcp-pmda-ds389log-6.2.0-1.el9.x86_64.rpm 1c60a9298c6382257ddaf8d339cf528be4f1945e177c5c6d72ae546a3d39a1b6 pcp-pmda-dm-6.2.0-1.el9.x86_64.rpm 1f582232dc4f2c5195611419065578426c78eb7da87e81ac1558b13b01c0f152 pcp-import-iostat2pcp-6.2.0-1.el9.x86_64.rpm 202be48ee58647b1b475674c4e019ad3938a3f0e54e7dad8f450bf7b328c6cf7 pcp-import-mrtg2pcp-6.2.0-1.el9.x86_64.rpm 26735d3f128aaeb917ab716d1624c1cf1b3ccbddb1741d48b633444110b5e27e pcp-pmda-slurm-6.2.0-1.el9.x86_64.rpm 2e1f4a3f20f85a4834f35ba4b979807f74113a2f669d5608b1be035c92961b81 pcp-pmda-mysql-6.2.0-1.el9.x86_64.rpm 319c7f214f26b0734938e6af09b9d42d25c36f064b8650c03f09643bc26de9de pcp-conf-6.2.0-1.el9.x86_64.rpm 320f7b7b9d5ff713807664be519fd92f0f35c0c8433990cbd06e6c447f47703d pcp-testsuite-6.2.0-1.el9.x86_64.rpm 32f76cf6fea8d35b52ddc0eec1c2e5e200305f85bbfc4e68c16df99819ac2c2e pcp-pmda-oracle-6.2.0-1.el9.x86_64.rpm 3396b731bc1bcbfadb9699c342bf3ff0968873852e6c3e28e54d0d20dd64ac11 pcp-pmda-nvidia-gpu-6.2.0-1.el9.x86_64.rpm 3642925836e98764f28b7651caf70afcfad82658acfade150da6f17b8c8ae188 perl-PCP-PMDA-6.2.0-1.el9.x86_64.rpm 3a720bbda65101981d6bcac58d1e365bb83dcc4e270dbe016ae0b49df4d1e7cc perl-PCP-LogSummary-6.2.0-1.el9.x86_64.rpm 3d64f93061518b7b610078480e2ff5c4beed9fd0e6c59b1decf46601fe56536c pcp-pmda-named-6.2.0-1.el9.x86_64.rpm 3dd16da92c4a0e86072a5c2f999d16fc1590e57ddbf97808131e14daf5ec5ce9 pcp-pmda-zimbra-6.2.0-1.el9.x86_64.rpm 3ef69df20596731aaadd4f3099f992a1f81c1dd8a78e5998e6643144876f6d1d pcp-pmda-nfsclient-6.2.0-1.el9.x86_64.rpm 3f85e0dd0194fecf793934619cee71396f32ab65e5dc30b1b2613324fbf6f84f pcp-pmda-lustrecomm-6.2.0-1.el9.x86_64.rpm 4095e37fbb7a36baeacd9f9d233b09991e65ce039f39b6e299d4f6c4f07a9c76 pcp-pmda-gluster-6.2.0-1.el9.x86_64.rpm 421e22298400f762efaa91adff4050d89c5480ed49d460f768462b3d2526e7b9 pcp-devel-6.2.0-1.el9.i686.rpm 43a662a1e3bc02dac632f2265fd3d7252be3d90c87698f17fafd2f32fed53de6 pcp-export-pcp2elasticsearch-6.2.0-1.el9.x86_64.rpm 4618906c0075938e18ae09041716d0c29e768871af6de903ba7258b84e93da01 pcp-export-pcp2graphite-6.2.0-1.el9.x86_64.rpm 47f5f99bacafa33347ad682d260053ea740e866a3221734916cfcbe7044b6aea pcp-zeroconf-6.2.0-1.el9.x86_64.rpm 48be5c19d40f1bb1c92b6aea338476d7b5c6237c2dd1ac4e8e60f3311668fee6 pcp-pmda-bpftrace-6.2.0-1.el9.x86_64.rpm 49ced2c6034b55e84bdf62c874f968a27ccd36c714e92bd4823f5eed7a0b55a8 pcp-pmda-roomtemp-6.2.0-1.el9.x86_64.rpm 4a50fac56e4018e464ce7e702a8cba85aa08d4a1a9ddafe7a48728917b249e67 pcp-pmda-perfevent-6.2.0-1.el9.x86_64.rpm 4adcd0764ff89f612895201ec52c2c06ef72a6adb090a525dc280af7697b47cf python3-pcp-6.2.0-1.el9.x86_64.rpm 4ce29dade8b0f83b058d93895a747951c4a878f86a942b814ab47d77a4c726bc pcp-pmda-rsyslog-6.2.0-1.el9.x86_64.rpm 4fb5a47729753c5a0897041ffa6abfb48dc7816be1fb1cf1faa8e58f4b966f74 pcp-pmda-json-6.2.0-1.el9.x86_64.rpm 51cbc5d71fd750b625fe122387a3108cf19d8728c09eed2a53fd55edd030acf2 pcp-export-pcp2zabbix-6.2.0-1.el9.x86_64.rpm 52735c5f39ca15c61ffa386d160ea34526ae799f83a6d8f3777594cf9184f4fb pcp-pmda-farm-6.2.0-1.el9.x86_64.rpm 54839cf1317d893511b6f77aee528dc8e9a5650e60989e15436002ae707cb090 pcp-pmda-postgresql-6.2.0-1.el9.x86_64.rpm 57315b0b1522e0fdf22b37ef256e2bae06f63e7e423b0f46038489b1af6cab05 pcp-geolocate-6.2.0-1.el9.x86_64.rpm 5796896dba9d476cbaf42ff456c9faa1fb9dfe1328bedb7b93beb1dd52716796 pcp-pmda-cisco-6.2.0-1.el9.x86_64.rpm 5a3042ff0b318a25e523bfac3c9e40a7b02cc9b783019fe56742e6f2b589098b pcp-pmda-statsd-6.2.0-1.el9.x86_64.rpm 5ce5afdbc0943a8020efd4467c682bbf6d45ce72563ab8f229b83ba58aecd7a2 pcp-devel-6.2.0-1.el9.x86_64.rpm 5d4b27749b90d5b1778c5282b88b8a21d550677a840fa8eba55f0ddc9239677d pcp-6.2.0-1.el9.x86_64.rpm 60cfd4a449424117f381864fd97ed552daa393cfa2d6a90714d4ab94faaab9a9 pcp-pmda-redis-6.2.0-1.el9.x86_64.rpm 63276d426d09433e2825ca94ca74e57acc8db9ec4bae62c21f1f492c84949cdf pcp-pmda-nginx-6.2.0-1.el9.x86_64.rpm 66a1d91eeab32fbc599f740049538906bfc822ce7c1feb256ddda1d2a80c9e68 pcp-import-collectl2pcp-6.2.0-1.el9.x86_64.rpm 685ff131cae2e286b95c20b1a0fa0ed36e0431f621251a975240f50edc0b3fb3 pcp-pmda-smart-6.2.0-1.el9.x86_64.rpm 688822871b27ce399ca276e9d14f8fb7b84f1bdb5c1b1e40dcc7f52929704cb5 pcp-doc-6.2.0-1.el9.noarch.rpm 6af8b6815243e2a33ef5683259c3a8217cd1a2826ff0d5a021caff2e0377a593 pcp-pmda-pdns-6.2.0-1.el9.x86_64.rpm 6f8ea3499ce84918c76d313f83ce9dc0e1700584587a2942d2f13112b3f7f3e8 pcp-pmda-resctrl-6.2.0-1.el9.x86_64.rpm 70f38bfd6e8bc073b515b31d97a63e6a34e08bd6d59ebef1b3b4d5ce292871c1 pcp-libs-devel-6.2.0-1.el9.x86_64.rpm 72bb9648d14041419b68557b86305800d10b31a928852478b9e68d55edbc60b9 pcp-pmda-samba-6.2.0-1.el9.x86_64.rpm 74cb0fcb6f391e26f17ec7d6361fa3e2ed5356b62de4930701dbaf013733f5ed pcp-pmda-gpfs-6.2.0-1.el9.x86_64.rpm 75a796cd6d9c1ab4fa854b70f8cabc2f2c649ed321a70e629f8ec63e8baee5e8 pcp-pmda-haproxy-6.2.0-1.el9.x86_64.rpm 7a4ec05482425bf975e882412f7e74b97a5b8f718d0c223a068a5e7a1145a689 pcp-export-pcp2json-6.2.0-1.el9.x86_64.rpm 7b2f03401169707540aab8d504726e40e312c64d12e10883e030466a35e9d87a pcp-pmda-bcc-6.2.0-1.el9.x86_64.rpm 7c211c68cddbf13fafb3837246714ff8720b5c4e2fa212036a5ea345ef4723e7 pcp-pmda-mongodb-6.2.0-1.el9.x86_64.rpm 80b17b2f0e77e01ddd202970d7f17a4f50bbd0f66f9bddd3e5ff4e2d0781a2d2 pcp-libs-devel-6.2.0-1.el9.i686.rpm 87e3fa481b283359c508db1266295001a6fce6e63bd02520b371223d12b0395f pcp-libs-6.2.0-1.el9.x86_64.rpm 8bd9c0be63500dd6a0e783a4adfab0ef4ffaecfa086d23650719892b24343714 pcp-pmda-lio-6.2.0-1.el9.x86_64.rpm 8df574f038a9cdb50717087669b3b4e0ec9d9a8b63020442c30fa19f0496eb22 pcp-pmda-netcheck-6.2.0-1.el9.x86_64.rpm 8e47cdd02405799a767a2444c5ff71b4b5c0a4f9f6a49388507b98eb88821032 pcp-pmda-shping-6.2.0-1.el9.x86_64.rpm 915b9a9295cb6a668fbfee3376c83743790670aca3407724c86dde808a50fe12 pcp-import-ganglia2pcp-6.2.0-1.el9.x86_64.rpm 955a212448b13f739e73ad4e447f2b2065a6e0377af765316071bd55ec7bd6d3 pcp-pmda-bonding-6.2.0-1.el9.x86_64.rpm 95befd47b854d66b5c8905c0ef75e8c648537afd08e79ed5fe4bc0073f8a4742 pcp-pmda-netfilter-6.2.0-1.el9.x86_64.rpm 96ee41f591b50b7de5dfa3638536adb518e4897c65a59b5127ffdb5036c0a489 pcp-pmda-unbound-6.2.0-1.el9.x86_64.rpm 97fbe0a20cd0810fcf1258d756575257046ac549db88bf0aedab9fb800254cd3 pcp-system-tools-6.2.0-1.el9.x86_64.rpm 99040049e90ff5cb660b061ffe3be701d3c7ece409107ae86ba06405003504d9 pcp-pmda-infiniband-6.2.0-1.el9.x86_64.rpm 9e165913166940e6a3fbccf37078f93db3e428c5660676e5d970330c4b3bdb12 pcp-pmda-sendmail-6.2.0-1.el9.x86_64.rpm a56a9bd623da618454d51bfd79707d8a683f561449c6e1dd22f159a8f4dc528a pcp-pmda-docker-6.2.0-1.el9.x86_64.rpm a6bfc46e199b8b84e7a54cdce9d24d72e1f3e03c5b78aebac9388b995959238d pcp-export-pcp2xml-6.2.0-1.el9.x86_64.rpm a856e49320d490d747a99350d31601d1db252a38dd92eb4fcade33ff2e28d538 pcp-pmda-mounts-6.2.0-1.el9.x86_64.rpm a8615aa21ab9cd6fcb22f3b82caa60ec8e7da87f5e3298410d593ac12821f5ab pcp-pmda-denki-6.2.0-1.el9.x86_64.rpm aa2437617a934ee3244c6f313923a67e988653c45588300b1b05baed77e7caa0 pcp-pmda-mssql-6.2.0-1.el9.x86_64.rpm ab5be40ed5dd120ce3be8122b83e9310431810c1b93fc36e20576b577502ba76 pcp-export-pcp2spark-6.2.0-1.el9.x86_64.rpm b0712001d55167b5fdfdb7c45ebd81a558563457a89d204907add52b4a30e21f pcp-import-sar2pcp-6.2.0-1.el9.x86_64.rpm b7b193d9583f26c51eb3a8ed1bdb1bdaec84a8689c1f6c780bbb76afd21e049c pcp-pmda-activemq-6.2.0-1.el9.x86_64.rpm bd35725e47fbb796dbb571dfbbe764cbbc1642a51a999ba50de5f28c2667c2b9 pcp-pmda-trace-6.2.0-1.el9.x86_64.rpm be062910313e3d40fedcf3c691764e9c530c3ddbbcd0a7ab6baba867c94b1da3 pcp-pmda-systemd-6.2.0-1.el9.x86_64.rpm bea4e243d3f2ee50bbe005b791ccc16b009405054a814017c26028a31758e6f5 pcp-pmda-apache-6.2.0-1.el9.x86_64.rpm c045058d2c0e28f4f644b4d0d5e314d977d1cd09fbff4998ba2bbfb70a432fdf pcp-pmda-openmetrics-6.2.0-1.el9.x86_64.rpm c1d7227ac02efe8f8ce6a70f2100089de038b36a8135b5eaa003acd69070d156 perl-PCP-MMV-6.2.0-1.el9.x86_64.rpm c21fcf6c08413f416680a137079a5ba5fcd7669137e570ba08f49b84a08f1520 pcp-pmda-snmp-6.2.0-1.el9.x86_64.rpm c3099cfca864d353aa9f3365a1ce0801c95545ac40af283fd722edb41d32da0b pcp-export-zabbix-agent-6.2.0-1.el9.x86_64.rpm c43e17d67cbbfe5597f4dcdfe34b083d15754636bcefcd9cb30fd224b51565d4 pcp-pmda-bash-6.2.0-1.el9.x86_64.rpm c58813c560a25769f607dd572a405168886803ac6090dbe602eec309d9e25959 pcp-pmda-elasticsearch-6.2.0-1.el9.x86_64.rpm c7de97f445d498b32ed36af8d7fa1de60927080b5cf2e2f36a596df9f09f2398 pcp-pmda-news-6.2.0-1.el9.x86_64.rpm c8ee2f0ea62ea00034af9d3bd753ea6d6c5486d501a7a05557030f98febbb693 pcp-pmda-summary-6.2.0-1.el9.x86_64.rpm cef71e6175c2dd4343e2306b1d761d046ac93c437b3dada6c9d0ef7bb993bacb pcp-pmda-ds389-6.2.0-1.el9.x86_64.rpm cfcfcce6d50c92fb64b67eb3a5e191157c5e3df141d722228fe78dc7c25637bf pcp-pmda-zswap-6.2.0-1.el9.x86_64.rpm cff0621176eebe215f4cf984d2c7f68511d23bea772d77ef9456286ada1f5ce8 pcp-pmda-bpf-6.2.0-1.el9.x86_64.rpm d0b904f17b3180a7b2b9022aabdbc65f3835f3cb391a1d909127415ade2bfea1 pcp-pmda-hacluster-6.2.0-1.el9.x86_64.rpm d0c77eae0c7dd52dca59a23f644ae085da31dc315584b20406c6fa54244a4e10 pcp-pmda-openvswitch-6.2.0-1.el9.x86_64.rpm d1eb5bf26ad7a4cdafaea3a2f14fd05beec71ea538b9fdfd44a18e11dce7d40a pcp-gui-6.2.0-1.el9.x86_64.rpm d301140df5b42f96be2f1fa9a612d4911c4c439c8a91e1bc0655d832526a684d pcp-pmda-logger-6.2.0-1.el9.x86_64.rpm ddba766837d269328ef2b8eef7cfe9436955cfeeaddeca5bf6bf2dd66dffec74 pcp-pmda-mailq-6.2.0-1.el9.x86_64.rpm e6a191fc6607acd31e4e30299f8df932d55e810a00b88cfeb494b7c13e16802a pcp-pmda-sockets-6.2.0-1.el9.x86_64.rpm e9f5cbeb048a97f0d633ee852557c7b9de1adbcd98fc83b38702d1ac2e70522b pcp-pmda-dbping-6.2.0-1.el9.x86_64.rpm ea4964f024b2429b6468ce804c45c700355e652b159fc5d1619e69a0208e9ef0 pcp-pmda-rabbitmq-6.2.0-1.el9.x86_64.rpm ebe5f6cc92a6e407e3c15e2e9dcc74d24eafeefdce6878fbca6307f5418046f5 pcp-pmda-cifs-6.2.0-1.el9.x86_64.rpm ee2fcc64705e01aa9b52d37656ec9e6fc30aaafe16ac0243f03d0cdb895acb3d pcp-testsuite-6.2.0-1.el9.i686.rpm f61b04252ca7ad05fd4ed93d1c59dd2aad7eb87158062e52efd081afb262cb94 pcp-libs-6.2.0-1.el9.i686.rpm f7119b0b815c7c57c42d663c0f181ea083900167d18d9b34f14701b945853950 pcp-pmda-postfix-6.2.0-1.el9.x86_64.rpm f71dc793b79bda0cd7426f7409d2e261a7a3c79bb06119ac496775eb3c21613b pcp-pmda-lustre-6.2.0-1.el9.x86_64.rpm f9328e069815e8e446f2d307af16f3438905c0252fe747e41bca590514b00068 pcp-pmda-mic-6.2.0-1.el9.x86_64.rpm fe8f9b989b504c5fe965f35f2a85a122f04a928cecdf22639165578dda46c0ae pcp-export-pcp2influxdb-6.2.0-1.el9.x86_64.rpm fea07dfd5c64e2db69d29731dbf97fa6b167cecb602a2f16ef1bd33c263864ae pcp-pmda-lmsensors-6.2.0-1.el9.x86_64.rpm ff29400dd7f005950367c4f91d7904ad1ce0f0cab0c8300cc3d6781f2c3bf800 perl-PCP-LogImport-6.2.0-1.el9.x86_64.rpm ff6dd0a6ad817d489b0e5c133bf2b5cf91a2b56678132eeca403a46dc90712c9 pcp-pmda-gfs2-6.2.0-1.el9.x86_64.rpm ff72ad77358955f06c70859c1bc999a912ea51a638e1ee55b1e4c059ccb56f33 ALSA-2024:2217 Copyright 2024 AlmaLinux OS 0 1 Moderate

motif security update

The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager. Security Fix(es): * libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788) * libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default motif-2.3.4-28.el9.i686.rpm 0bccf948b337d045e94b2fddf2c0944c0a3236956dc88ff83764840607b1fab6 motif-devel-2.3.4-28.el9.i686.rpm 2913644926cebcbe0acdf9ed77e515d0bbc0356b40a3138efd4efa40dbe918c7 motif-devel-2.3.4-28.el9.x86_64.rpm e9024264302afc631e432449b582d37082756dd5d7177b9b3a43c7ef2ff46eba motif-2.3.4-28.el9.x86_64.rpm eb8775e67a68c7f9583b6515083f6ea245be3967f658e9d8090143b24d5413e8 ALSA-2024:2228 Copyright 2024 AlmaLinux OS 0 1 Moderate

perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Write past buffer end via illegal user-defined Unicode property (CVE-2023-47038) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default perl-NDBM_File-1.15-481.el9.x86_64.rpm 0122288f83e1081768133d04f38504b514e2c830900d7e027ba1629efd5942d9 perl-Net-1.02-481.el9.noarch.rpm 0295d4efd94f1aa32449f49679998d099991304621ed967b1ad39db3937f619b perl-ExtUtils-Constant-0.25-481.el9.noarch.rpm 03f212aabeb68f36c57a3cadd93df43e03cdaf1db099aa9b7a2d54ea8b76033c perl-IPC-Open3-1.21-481.el9.noarch.rpm 048ab2c41c1cc5c4d3448c08f7e816d21fc3ae79fd55bb3b0a1aa5aafcc52868 perl-Attribute-Handlers-1.01-481.el9.noarch.rpm 05a00399c7d57ad34ac370de118853fd6e95cedbc8d87ef80bdbd74d5dac8961 perl-libnetcfg-5.32.1-481.el9.noarch.rpm 071a1b5609d19209e2f6b27ef19b43fb2057dc0d76c9f8a68ab141fec7d53add perl-less-0.03-481.el9.noarch.rpm 0856348b54de84fa2d177f5e114d1614f3f9d13fecfeb360f31a3e6e09d1b5bf perl-AutoSplit-5.74-481.el9.noarch.rpm 09559d72c64f9d21e611855dd2cda5164b5c5e765ada4d549ccecc8e234c9cc4 perl-vars-1.05-481.el9.noarch.rpm 0e90c6b801bee7e2662b8494f92c0d797e7d70f47e1735b8ff59a2dd2aa4ef47 perl-Devel-SelfStubber-1.06-481.el9.noarch.rpm 0f1255c0a57676ff9f3fde8908b3f1e07c144467d924ffe9751c415ca1078b82 perl-Tie-Memoize-1.1-481.el9.noarch.rpm 0fdfd1bad7dcbb4e49e9e4d6bfe17d25ca98d2547d1e1fafb738d0059a2b318a perl-Thread-Semaphore-2.13-481.el9.noarch.rpm 10ce3f264230a2cef197b020a0b928bc8e35929cc9e2a074ee2b74eb9adb74ed perl-ExtUtils-Embed-1.35-481.el9.noarch.rpm 129dd08fac6da18b36c95aaef428b148ffc8551e86b631fa7114b290891b3b91 perl-interpreter-5.32.1-481.el9.x86_64.rpm 166a096fe97ad673ac5de8801ed9ed12c618cbef98575f7376e298258171f38c perl-I18N-Collate-1.02-481.el9.noarch.rpm 16f98404d16a8232eb130cdba2897ad1bf6693ec0ee5639f79f100727459c20b perl-FileHandle-2.03-481.el9.noarch.rpm 1928bd2377994731d104a6243c0d433827a7ec60db40da1a9b690dcf34d285ea perl-FileCache-1.10-481.el9.noarch.rpm 1c1748786d3843a0dde874f2319b6e953d201513abd7889358e92851cea369d5 perl-filetest-1.03-481.el9.noarch.rpm 21f01893899a1325f39a96d386a71cde22fb9f5a76d63f5b26e13770a751a493 perl-overloading-0.02-481.el9.noarch.rpm 26dc2bd86aff3ad8957271b6938dce89f32b09e3766eeaaa4c7abaeb05a40398 perl-libs-5.32.1-481.el9.x86_64.rpm 28654be0884341366f62684ad10292ae810662064824e97a1553f58fbeb60651 perl-POSIX-1.94-481.el9.x86_64.rpm 28c5b1e50f0291c5ffce493025af81b83d726c5e843e62a6cdeb1b5c97d0ed4d perl-Hash-Util-FieldHash-1.20-481.el9.x86_64.rpm 2958bd54bcb645141b4f6f7f1f93cfaf1419c6d51fdbc99d7eb258f887c2253b perl-Text-Abbrev-1.02-481.el9.noarch.rpm 2a89cfb4c0b2e11c383f5c76c8f780cc686b773d6b35f6c065a645f3f51ff480 perl-DynaLoader-1.47-481.el9.x86_64.rpm 2e13459b22b244267d35d2f0fd24327363ac03d247b224a985e3f8d46ab3b4fc perl-Memoize-1.03-481.el9.noarch.rpm 2e469414c2611244736ec9ff6af2154f0db69f87e7fa15ab295f84f46ebf21a6 perl-DirHandle-1.05-481.el9.noarch.rpm 3398f1bc7771927ad29f8d1f07f18cd2f289c197f702b8317cb15b7418160125 perl-Pod-Html-1.25-481.el9.noarch.rpm 38211f7cd5ea62f597220bf3c5eec6c4eb01e7bce988fba52a3d799c136f558d perl-Module-Loaded-0.08-481.el9.noarch.rpm 3bc3aacd40a3003131485ba13b483103bfefdb41a5272dfe1a89a94024c9e564 perl-Symbol-1.08-481.el9.noarch.rpm 3f15673449eba60988dbc72b8ae84c05d3f173fe2a7ab9894888d011a448b2e9 perl-lib-0.65-481.el9.x86_64.rpm 3f78da3e6a2a4b6402b12920be958a0ce3fe681f4002bfbd6ff5a9a8b14530dd perl-autouse-1.11-481.el9.noarch.rpm 3fa35ceb4fcddf6e952dbdeb5d3b5dde5a98dc7a7c6593721a12e3e494d14c5b perl-blib-1.07-481.el9.noarch.rpm 413710c092e8f9245e20c4ff4ce3254f5383a5452e0ea9e7b9cddd4d8ff72da2 perl-libs-5.32.1-481.el9.i686.rpm 44d4fa75fe2d6710dce79b13e642d040b72dda33a495205822be236f12bf077e perl-Locale-Maketext-Simple-0.21-481.el9.noarch.rpm 4851313939f69a96a268e6ba728d2ba3cf0ba7dd56eafce29831b7fbef5ff00c perl-encoding-warnings-0.13-481.el9.noarch.rpm 4949291b5916d2a1f30e44c641c2d16ae7a16d51f7ebb28d464c71e80e96468d perl-File-Find-1.37-481.el9.noarch.rpm 4d26e91151827aa4731cc93e100398ca87931559cb6a63be4177543876f66e0c perl-locale-1.09-481.el9.noarch.rpm 4e41195ed8687a39f55a386a864d58de055c25ac036e7e508d723cac46953906 perl-Pod-Functions-1.13-481.el9.noarch.rpm 4ede75a3c1b342b5298ab2821d1716d495d847ffd1e0129e9bb3b65417f59ba1 perl-Fcntl-1.13-481.el9.x86_64.rpm 4fc973309042508a677e51cb041aae590f38e1e1e788069e30172339680ddbee perl-File-DosGlob-1.12-481.el9.x86_64.rpm 505618140b286f911128a94d96288f223bd07eeeeed3743791099403f6e07a82 perl-Class-Struct-0.66-481.el9.noarch.rpm 5059a16b850db181c9ca0a1c1cc4666fdda9fa1a45f7d15509524b3c7d5aa891 perl-Term-ReadLine-1.17-481.el9.noarch.rpm 52be7ec09600471121a699ff1e4364b93ca2aea950dc7921a646e3d519c0f79e perl-macros-5.32.1-481.el9.noarch.rpm 55191b08752197779dfe4264173d441209433b0bb97942c9e2d9b2957afc0fa0 perl-debugger-1.56-481.el9.noarch.rpm 57a817f4f9812c0d64d7c5151e1b03388466f6a78ac277e47a1bc901ee64bb20 perl-Getopt-Std-1.12-481.el9.noarch.rpm 588affa63d25b60e837eb14736226a4db5bf89f6a010507373dc01f754263ccd perl-if-0.60.800-481.el9.noarch.rpm 58e386b02173a7823b40a263b150fb0289c6732c482d9b880ea29341ca2ca341 perl-ODBM_File-1.16-481.el9.x86_64.rpm 5c90438b68a6133aeb7e75d4ae582897908ac68ac7ad76f3e34b8df6ecafb385 perl-DBM_Filter-0.06-481.el9.noarch.rpm 622279dbaf4bbd4de9d1a67996179daf2af598c527fdac73b8c15fa01ab8dad8 perl-sigtrap-1.09-481.el9.noarch.rpm 63c07920e9df66934c402860ade150186547fe9b922699b77b34d6067c451726 perl-User-pwent-1.03-481.el9.noarch.rpm 68791d69ca71125fdd6586e405c119d6ee467fede56aecc7be0f846683ba1b48 perl-File-Compare-1.100.600-481.el9.noarch.rpm 6c89e0ec688d1eb101bdbc0a0b179d972663775066c0f68855ae218c5bd833ac perl-GDBM_File-1.18-481.el9.x86_64.rpm 6caedff706e122a2ba80a8fecedce2c2ec046b6c591a41970ed0111191435e96 perl-File-Basename-2.85-481.el9.noarch.rpm 70d472e930c25d30a6d00789e007a8d8bb01ac763f4fb64639fdf2b3411be0b4 perl-Safe-2.41-481.el9.noarch.rpm 73eddfbbff6d7cd9c7bb95d2fe6952c3b72e090520c2d24f8b193de8d5f3cbd9 perl-Search-Dict-1.07-481.el9.noarch.rpm 76c09695f26829bf3c4815b88bfb549365adec70bde5f8c961fe58c5c27f70b2 perl-AutoLoader-5.74-481.el9.noarch.rpm 78acac1cee3dcfce077b1474cc395f9cb4c698661fac9a80df3cc39178e07b31 perl-sort-2.04-481.el9.noarch.rpm 78fc4ebb75866f96293d4bd7e3d14df82b656d6197dc76a0e118b6cf4a8452b8 perl-Dumpvalue-2.27-481.el9.noarch.rpm 84cfaa6a0448b84b69fb88eaf1613001bbde059fd707f0346326f970a83c4b50 perl-SelfLoader-1.26-481.el9.noarch.rpm 89055b10cc909c9762bd667914dae7b33fe2acda18681c269d0f1ffa0dbdcc90 perl-ph-5.32.1-481.el9.x86_64.rpm 8c0419162d93ee530c1731a51dba146f50b20e486b44a302914921ca7aaaf435 perl-doc-5.32.1-481.el9.noarch.rpm 8ce04a23d3ae8d2e7676336497de5dfb0ee10f57fe4604b779261d948d52d073 perl-File-stat-1.09-481.el9.noarch.rpm 8df3190ef1f912154ac613fada8872fbb13d9e53b006d98e287a8c87f66995c9 perl-devel-5.32.1-481.el9.i686.rpm 9447c4e24d577392c1b2490e4254ae18bf09f17b86771eccfaecc1f7fa2ec653 perl-Term-Complete-1.403-481.el9.noarch.rpm 9a57fc846b8636f954a934cbf1257d04cfb5fb4cb8297e59f5b0fcc7899ac502 perl-diagnostics-1.37-481.el9.noarch.rpm 9b3800238bb25cf90044dd60f4fd374c203947d98084505180437b0107cc8a21 perl-ExtUtils-Miniperl-1.09-481.el9.noarch.rpm 9bebd70a3655f17218aa3fd88eb2fed72ca77530d3b79383e561f87fd65f7ab1 perl-devel-5.32.1-481.el9.x86_64.rpm 9c7f4cfcd85030771749f6e83b1aec6497e34a7f93f0cef65129f3756c08e2f7 perl-fields-2.27-481.el9.noarch.rpm 9e815f46e9144a3beee8eb9f09ff69d1f96c35425c50a1b2ae034c205a873b24 perl-meta-notation-5.32.1-481.el9.noarch.rpm a2ae305c426191cb53c83de2fc46e7e9eeec2fe194a8c0ca90fec074b0376c7e perl-Benchmark-1.23-481.el9.noarch.rpm a5182d64773f6b71d6afa91aaa1458c80574a1e298efde7498c1b74f413f66d6 perl-Devel-Peek-1.28-481.el9.x86_64.rpm a5dafba1240eefeb93d52c356a808bed457c038cc10b0e7166e00719256fb7e0 perl-utils-5.32.1-481.el9.noarch.rpm abb9f8f255a3deefb7489b6a5d5c8d404f913cc311f9b9be6ad8ed4b1ff5d8d0 perl-base-2.27-481.el9.noarch.rpm b388bfb7221c509e8c7024e0438750006b1b0292344e134fd8b89084e6a0fc75 perl-Thread-3.05-481.el9.noarch.rpm b3a0034bdc617ead7a18b713770e4d4edaaffc8d44d6be79ab7606bbe18d8215 perl-B-1.80-481.el9.x86_64.rpm b4e830920906bdf01659b0181a3ce7466abb34735f0daf0a27e7587ce5ca7cb9 perl-mro-1.23-481.el9.x86_64.rpm b7ac5f4de1189b49d406e65d1b7c7c0f585eab3e85f9501d58cdce4c31b41db2 perl-Errno-1.30-481.el9.x86_64.rpm b80e8398e48da1d6224feb0569e65701e7f9620953dbe128c799fe3001524781 perl-Test-1.31-481.el9.noarch.rpm ba5c4b0cb74d4329deefb73721dbecdc620100706eabfa9973f4eb398ddb3c2a perl-subs-1.03-481.el9.noarch.rpm bcb72c58761890cb5ca2a95e9b89fdb3571f49a0a69a2468e8ceb12e4003b859 perl-Config-Extensions-0.03-481.el9.noarch.rpm bcd3645ab7adddea2c04915d2e8d762adc6f676410f7bc10662f9a9e6b461c97 perl-Hash-Util-0.23-481.el9.x86_64.rpm c107b3fc7390aca1406daebec17e0474c92bd11113314b6b997542ca449247c4 perl-Time-1.03-481.el9.noarch.rpm c50ed531cbabd7400676731c8dffae2e95d38f54f7107a5020aa38c2f9f1c443 perl-NEXT-0.67-481.el9.noarch.rpm c84e0a083f201ef71327a5e81431ac6e95bb3ea6dfb9d5535ba3110b4d3b3978 perl-deprecate-0.04-481.el9.noarch.rpm cae0c283625809d1121eb2f3302a4fef4082f4f51b54fd22910f3ffd50d3bd2f perl-overload-1.31-481.el9.noarch.rpm cc7ed3ccbb90c2e8f7f2f1a6acfd618e4451c3c5d32b8382f40a2ba8960438c1 perl-Sys-Hostname-1.23-481.el9.x86_64.rpm cef062a01f9e7c2b428e17ade956bb6bd7cae489549136d26e997d7d09680f0f perl-Math-Complex-1.59-481.el9.noarch.rpm cf6df12e7e1f5f154fc2d4a69413546d66a7cb8283a76c3bc85da1dcd8cf9d83 perl-Opcode-1.48-481.el9.x86_64.rpm d38ddd11cf5f050ea7670a9666a3135cbaca1b3658516d8d8d41067fd55c7705 perl-I18N-LangTags-0.44-481.el9.noarch.rpm d3b3e5dbd32a44b9b09f5e641a31c150b0529dafca151ae072efec5b8c98944b perl-5.32.1-481.el9.x86_64.rpm d4d15589d5182550a4b458de294ef9932739e7a2e98092412a1f2cf4afbb4faf perl-SelectSaver-1.02-481.el9.noarch.rpm d5cf2a24cc26f50ac5c51ee8ae3fffe8e010061fbb90d8eb9e37d11065b1a95d perl-File-Copy-2.34-481.el9.noarch.rpm d7d52064da450830fd69aca6ad725f49910df7b0ea889453330dcc5a9b8eccaf perl-Tie-4.6-481.el9.noarch.rpm dd3ca47bb9825c83de9fded399a6e10aaee7d7a5b206266cf1e3540e53cf3554 perl-FindBin-1.51-481.el9.noarch.rpm e6d94cae502308a6c73082e3a129534a9f53039ea5d1c140a41bb31e6f9066b7 perl-Tie-File-1.06-481.el9.noarch.rpm ebf10d2b643333271e0c0f59840c6d3ea9a4a763bfaceb701ee7919fb4175834 perl-I18N-Langinfo-0.19-481.el9.x86_64.rpm f246ba6a76469b02052d753652dcc8828b7da7cbda669923b4b4f833b9bc5da4 perl-open-1.12-481.el9.noarch.rpm f4a9340b12509bd2533772f358d0a3f16358fd4ded743f4f12f26a86de351c76 perl-IO-1.43-481.el9.x86_64.rpm f84399a1f950841a85f6fa84ee87c7ef01498fb8b73cf0ea7a4d556a68de461d perl-vmsish-1.04-481.el9.noarch.rpm fb332fbb8e44e8b07e4e67f11eddb425d9b0780e9a8ed186d8423a41e20ec1a8 perl-Unicode-UCD-0.75-481.el9.noarch.rpm fd21c4087b050631d8d1e120893fd07de627cd9ae0c8f48a8646ed631c44520c perl-English-1.11-481.el9.noarch.rpm fd7ec0810b6bd863ebfacfcc146c0416688f9df380c43790c32a515ac8750e7a perl-Time-Piece-1.3401-481.el9.x86_64.rpm fdcbdb0b0344e9e95d605fd9adfe37abe62d450593edebfc346bc7ce58c3e6f4 ALSA-2024:2236 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvirt security update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fix(es): * libvirt: NULL pointer dereference in udevConnectListAllInterfaces() (CVE-2024-2496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libvirt-daemon-lock-10.0.0-6.el9_4.alma.1.x86_64.rpm 0df843860557e84135feecda36fa59ea0d6cf4cdbaac811c800e6198b8e4e725 libvirt-daemon-driver-nodedev-10.0.0-6.el9_4.alma.1.x86_64.rpm 12473f6055507333221f40dd435b5cbaa55ff3ceaf4b85584ed60ac92efe8196 libvirt-daemon-driver-nwfilter-10.0.0-6.el9_4.alma.1.x86_64.rpm 190790e0d9aa8abdf2f4d345e434bce55c74b386b096f487f4fb0ac9909022b9 libvirt-daemon-driver-qemu-10.0.0-6.el9_4.alma.1.x86_64.rpm 2ca7cea627305d43ee8117a73a65c03a3dcca47c82455124532cdf1531ec3b73 libvirt-daemon-driver-storage-rbd-10.0.0-6.el9_4.alma.1.x86_64.rpm 3f480b348ac0dc8bada79a5aa974993f1b39ec0b5fe5394ed470b1b421330dc6 libvirt-daemon-log-10.0.0-6.el9_4.alma.1.x86_64.rpm 48bd7439aca2c6bdc30cd4eeedfdf577e84e10072b97ac26c0700813dbc0d4f4 libvirt-daemon-driver-storage-10.0.0-6.el9_4.alma.1.x86_64.rpm 52b516034af3d6836401495f771b2da0989076185d47a1bc8a4730288e50121a libvirt-daemon-common-10.0.0-6.el9_4.alma.1.x86_64.rpm 59250c094dcac4cac38611435d8867937986f1a9c83aa638f41d19c476cf8950 libvirt-daemon-driver-network-10.0.0-6.el9_4.alma.1.x86_64.rpm 5f0113c983938fc9a4e9d356d6379a79c5c94f93ee6c3013614ea978a6ca425b libvirt-daemon-10.0.0-6.el9_4.alma.1.x86_64.rpm 7602ece28b46b60baae6e80b0c9dc3b17e13413bc2e135f3f5a5dcd494fb3d09 libvirt-libs-10.0.0-6.el9_4.alma.1.x86_64.rpm 7ebd19ee73e99067e0227bd1e8099b7d1498ebfd917a8f85783af435287aea9d libvirt-client-qemu-10.0.0-6.el9_4.alma.1.x86_64.rpm 860352556840a066d861245a9b819907259850a82882390ea68ebe276007657d libvirt-daemon-plugin-lockd-10.0.0-6.el9_4.alma.1.x86_64.rpm 97fde677bddcc93784e02c550567489ae74f3493ef44b5017fb34ff9996e24eb libvirt-daemon-driver-secret-10.0.0-6.el9_4.alma.1.x86_64.rpm 9a283c0f2884dc5dd16650c963915b1351bb67bfa85534545795e35f7441a374 libvirt-daemon-driver-storage-iscsi-10.0.0-6.el9_4.alma.1.x86_64.rpm 9e98472b212efa2a331acf8ff1cdae0bbf3c36fa5863004a351e64f092d7e617 libvirt-daemon-driver-storage-mpath-10.0.0-6.el9_4.alma.1.x86_64.rpm a26089fe7ce54941457995c4fcebe3dc41a7380771797cbc8c5c6441ca21f8bc libvirt-daemon-proxy-10.0.0-6.el9_4.alma.1.x86_64.rpm a2a2d64d8da1ce30651186961f4dba9420dee1efee059b1de5f63da810739afa libvirt-daemon-kvm-10.0.0-6.el9_4.alma.1.x86_64.rpm a47edafa11db01c7e8b650efbaade84908199052c7410939ce06d7f3e9ef606e libvirt-client-10.0.0-6.el9_4.alma.1.x86_64.rpm a6cb2f36470be4551fb90831d7c1f9707827b65f839446cf5e09db0a6bf6b67f libvirt-daemon-driver-interface-10.0.0-6.el9_4.alma.1.x86_64.rpm baad87e48ce1eb99c35e407b2539ba8ff15ecf75abcfdd24b143809ffa829999 libvirt-daemon-config-network-10.0.0-6.el9_4.alma.1.x86_64.rpm bfaf9e853e635d0e53855a425b4291a9e2c57ed71e48d4277f12ca2d8bc5d427 libvirt-daemon-driver-storage-core-10.0.0-6.el9_4.alma.1.x86_64.rpm c3d347608cb5556313aaf7106f34751b2dc257fac268466c359bae6b948fdc0c libvirt-nss-10.0.0-6.el9_4.alma.1.x86_64.rpm cbe4fb82ae68b91284c506f89952e398f6a571cec270365242680e95cad4b919 libvirt-10.0.0-6.el9_4.alma.1.x86_64.rpm d2d99f5838337b30a0035427a28e7cfa5bc51e6e9349bb79ea8939a31b8029f7 libvirt-daemon-driver-storage-disk-10.0.0-6.el9_4.alma.1.x86_64.rpm d306efaff90cbc6d570b8ab0e6d23a766c0196c5cb7e80bfba6bdfce57ff825a libvirt-daemon-config-nwfilter-10.0.0-6.el9_4.alma.1.x86_64.rpm df5c0bd01e38070251c696268a0e441d465591337da90b26d354caefa07d68d5 libvirt-daemon-driver-storage-logical-10.0.0-6.el9_4.alma.1.x86_64.rpm ec0dd3096f44f5261307775071e6023c4483baa91ca1653789190fd75d6b5720 libvirt-daemon-driver-storage-scsi-10.0.0-6.el9_4.alma.1.x86_64.rpm f30705a966da99c0d4116ec9d59624d7ae4ff1b235789d412ba5bd045a349fa8 ALSA-2024:2239 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default skopeo-tests-1.14.3-0.1.el9.x86_64.rpm 668ef0c72ee799303a7d3844fe3fbc47f12c9b899b38387ff83de940b9938a6f skopeo-1.14.3-0.1.el9.x86_64.rpm f0e14f9ebd571615ed48cefe1a5a8826132c0c5b87d8fe91b7bf21f3c7403c1a ALSA-2024:2245 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-1.33.6-2.el9.x86_64.rpm 00813c474a459fa9d94447525d38c9a488e5c75a382e78b9d0868bf5e7336043 buildah-tests-1.33.6-2.el9.x86_64.rpm 5e950517f37da5bf220cb7acafa9f9e6d792f9cb7894bde396849fba7a6980ff ALSA-2024:2246 Copyright 2024 AlmaLinux OS 0 1 Moderate

ansible-core bug fix, enhancement, and security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): * ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration (CVE-2024-0690) Bug Fix(es): * Update ansible-core to 2.14.14 (JIRA:AlmaLinux-23783) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default ansible-core-2.14.14-1.el9.x86_64.rpm b182b16cae7494d4be664d704c4187d582ce5e66ca4719468ca34d8e5bd43526 ansible-test-2.14.14-1.el9.x86_64.rpm b6d9ab095129d083ed3dcd14ac3cf4cd87dd1185a4cbe4b77462e229d23d5d5d ALSA-2024:2264 Copyright 2024 AlmaLinux OS 0 1 Important

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235) * EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763) * EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764) * edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229) * edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231) * edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232) * edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233) * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default edk2-ovmf-20231122-6.el9.noarch.rpm c344271226d0016eca110ad5673ec0a7851704d8b9007a02e5cef91ddccbea0d ALSA-2024:2272 Copyright 2024 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-2.el9_4.x86_64.rpm 8d632432438d9107fe46003cfbce390842934f6769bdc835c0bf0cfed93cf8d8 ALSA-2024:2276 Copyright 2024 AlmaLinux OS 0 1 Moderate

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: incorrect integer overflow check (CVE-2023-51714) * qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default qt5-qtbase-5.15.9-9.el9.i686.rpm 08efd0e390ae86d4bafc6053478e497efc876db3650a6d9a153cdc257d2c0aa9 qt5-qtbase-examples-5.15.9-9.el9.i686.rpm 1611730e91617771e1fc8dd3b810f72c23dab0ef086399cc20fb3806de076270 qt5-qtbase-gui-5.15.9-9.el9.i686.rpm 21843697d17bb005231f9d8ac33f262addf46ad1f3daccad38a56b678e0f7d8e qt5-qtbase-5.15.9-9.el9.x86_64.rpm 25050e66c194433ad9fef7e5873f7493b4a447bfa0466f70bedef5e742bbee3d qt5-qtbase-odbc-5.15.9-9.el9.x86_64.rpm 2ddd0ed1d81180c8addc184a371310a3050f9e1da6b90f067fff7801dce7e569 qt5-qtbase-examples-5.15.9-9.el9.x86_64.rpm 4ccedffc06b80656edf48d2f86f73b29295d86a47f7d0d88a3b7f6500d768d9b qt5-qtbase-postgresql-5.15.9-9.el9.i686.rpm 66b31a8c97cc846f462b24073777aedddbe18ee1847af14536a27be99d301109 qt5-qtbase-gui-5.15.9-9.el9.x86_64.rpm 66cc97042a9fce735a8b48425fd51e01e925e806e54131e221c21cf3dddfa2bd qt5-qtbase-devel-5.15.9-9.el9.x86_64.rpm 672c1d4634f3daeb3a9d9d1f7c969f8c1157b28e0bf291c770be09888a12169d qt5-qtbase-private-devel-5.15.9-9.el9.x86_64.rpm 8e20a239b4c4420d5d2ee0d45079eb8e3b3415adab03a8ac652651bde6b635a9 qt5-qtbase-private-devel-5.15.9-9.el9.i686.rpm 9672d0274b7371b7831d3a3b1b098e6d23a78b0222065beff8f2977f35bee359 qt5-qtbase-devel-5.15.9-9.el9.i686.rpm c2d9b9d8af54631f2e406136837b709e6b2261e2dcb006761f68da388344e940 qt5-qtbase-mysql-5.15.9-9.el9.i686.rpm d64a4592405fbb16c6ff76ac56303b894c0a4d3ed01008d89d673031b39e5dff qt5-qtbase-common-5.15.9-9.el9.noarch.rpm dd44a1f1ae33d4b240175f6bde45a73c18ddc2ab5ccd92b5fe97ccb8ed0fc99f qt5-qtbase-mysql-5.15.9-9.el9.x86_64.rpm e546a0b04a7666fad91c1e92d58813e122dd6cf5962ed156e7976e819fd5be71 qt5-qtbase-postgresql-5.15.9-9.el9.x86_64.rpm e7b68e7de69374e3a4d948c26ff3710377f5cc7bae693d3e4f9c4514c834c755 qt5-qtbase-odbc-5.15.9-9.el9.i686.rpm f28126c7bee90b08bf59d9b218dd28facfafe45d5ca12ec393401440609f049c ALSA-2024:2278 Copyright 2024 AlmaLinux OS 0 1 Moderate

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_session-2.4.57-8.el9.x86_64.rpm 061227c6e3926b2210533556336794d7f9038b6ad02961bb12b66b416b339aaf httpd-core-2.4.57-8.el9.x86_64.rpm 273b4390ceafb5e91457c70d35f6ef451d662aa383e3f9e34a16c175c55bf733 httpd-filesystem-2.4.57-8.el9.noarch.rpm 2ab36a5c74e62f31f570c01fe4312b7e8d60488429e28e07a8a5395b005f68e0 mod_lua-2.4.57-8.el9.x86_64.rpm 3bb601518d17d5b5622ef0287c60acb36b8ada9c9c539b0b463ac9a2825b86e6 httpd-devel-2.4.57-8.el9.x86_64.rpm 5963409faf31db9a1cfac3c43e2436d861157e92b00d4b66b0a54f06b58094d3 mod_ssl-2.4.57-8.el9.x86_64.rpm 834a10af69879063677936dc1dbc8ea8eca0baaf82159e57a37b7b64bcea3b93 httpd-tools-2.4.57-8.el9.x86_64.rpm 8e8ac1ba54c049b9a3e070fd5cef0665a3829f3a1a4a1790398a6cafb8a56287 httpd-2.4.57-8.el9.x86_64.rpm a3e9c600893299ad6e531a3750eaea994fa4dbcebbd1e758b31e84af38bbdb50 mod_proxy_html-2.4.57-8.el9.x86_64.rpm ba2a80b36eb25338f51b63a1410fb9a22c8ec66b73ab1fc6db94b027bb9d457a mod_ldap-2.4.57-8.el9.x86_64.rpm d6a5a2d0e868693f2a1afbff7ca2de8350a652810d69b71864c8251f19644b8f httpd-manual-2.4.57-8.el9.noarch.rpm fbcf58ec068a000054e200feb51f9895f88c020e0957e544f35b5c450e8dc47b ALSA-2024:2287 Copyright 2024 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474) * gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475) * gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476) * gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gstreamer1-plugins-bad-free-1.22.1-4.el9.i686.rpm 701b187919acddf6341bffd5548aa1f770ae1b6379141d24ee95fbac3a9a1ed2 gstreamer1-plugins-bad-free-1.22.1-4.el9.x86_64.rpm 8116d74b354bb7eef11ee3956b3c5c3ff9089b4130988445044e3ecfe84c6679 ALSA-2024:2289 Copyright 2024 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090) * libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618) * libtiff: integer overflow in tiffcp.c (CVE-2023-40745) * libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175) * libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libtiff-devel-4.4.0-12.el9.x86_64.rpm 0db3ca28e241573b47c786aed25116f6bd0161ec74230bdc9e5a02afd9fa252d libtiff-4.4.0-12.el9.i686.rpm 64f39e556b634af0732928cbbf5d6bc98c68348889b792c1973be26385bc6cda libtiff-4.4.0-12.el9.x86_64.rpm 81099cbdbfaa63a87097a1c4303b7498bb64424d46a87b6dd4971b427da154ef libtiff-devel-4.4.0-12.el9.i686.rpm d81b923babb293c1da7d83a13f4baf951555aacfacf795aac30d5c43f4490c90 ALSA-2024:2290 Copyright 2024 AlmaLinux OS 0 1 Moderate

mutt security update

Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP. Security Fix(es): * mutt: null pointer dereference (CVE-2023-4874) * mutt: null pointer dereference (CVE-2023-4875) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mutt-2.2.6-2.el9.x86_64.rpm 4e1820414ed461b6e5db8f677ee0dbbe47abe13a28e5dc8297822d14a95aa890 ALSA-2024:2292 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-tkinter-3.11.7-1.el9.x86_64.rpm 04f5cf7588a1eca4c5fd47e7b54adf08bda7c63854afde5e8bb1585d7b8c7f6b python3.11-libs-3.11.7-1.el9.i686.rpm 4f71c3c4b931fb6c15fd37e852a4d98e3bbb296bc5743b28316a639ca739a299 python3.11-libs-3.11.7-1.el9.x86_64.rpm 70158d25ad3b958fc5841e1a8b687e5b57eb5b77fefa4057eee23e6571313c5d python3.11-devel-3.11.7-1.el9.x86_64.rpm 7f20f9cdd076f7db52525450e58b1ee899387a14d3144c427e2051b0debf0b0d python3.11-3.11.7-1.el9.x86_64.rpm c039f9ba57f4be9f51483c78992721610865314600d541c97774e228c34bb319 python3.11-devel-3.11.7-1.el9.i686.rpm ceec36918f70b1e5bcd6cea29dcb83c2120b28faada1e861f286ce9ca02037b2 ALSA-2024:2295 Copyright 2024 AlmaLinux OS 0 1 Moderate

libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fix(es): * libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libjpeg-turbo-devel-2.0.90-7.el9.x86_64.rpm 0ff091e6f73242380ff95e17ddc0462304b1537a775e6e201cd92778060fd506 libjpeg-turbo-2.0.90-7.el9.x86_64.rpm 14f1bf582c4ddc860a6eedab38280f51ee0cbfa5c23eabfafff2345b5cac16d4 libjpeg-turbo-devel-2.0.90-7.el9.i686.rpm 25d9d516f7023637893c87ed7243a3dea492c8094e63b37807482089bedb3eef libjpeg-turbo-utils-2.0.90-7.el9.x86_64.rpm 8cb2cd0154950b89034b05f727d6aec7ff8881665d255bf922ecf3f20cf7ba5e libjpeg-turbo-2.0.90-7.el9.i686.rpm a98cfc05c3f32df0ebfd0dbd405e598d2b6b02e55de13b2e0960517d854acc7c ALSA-2024:2298 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Use-after-free bug in DamageDestroy (CVE-2023-5574) * xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default tigervnc-selinux-1.13.1-8.el9.noarch.rpm 1b4bc52ba827c1770a7def1186a1504849384f92f681963770b92aedaf8430cf tigervnc-server-1.13.1-8.el9.x86_64.rpm 1c0465050db29de8a3786dfd8d978fbbe947a1fb342174cfc1a2ecaa5c1527f5 tigervnc-icons-1.13.1-8.el9.noarch.rpm 979a5550d7a93b3b7c3315d677c68e470613c62749d044aff57d64a6f23d6153 tigervnc-1.13.1-8.el9.x86_64.rpm 98e0013d0a1ada00be91f46f0583d8aa61cbb1f38196dce009b5ba6cb8dfe3e4 tigervnc-server-minimal-1.13.1-8.el9.x86_64.rpm 9a0bd5979762277226a5e8c7034da42266dab2882b62ea94230f5f46cd3a0c81 tigervnc-license-1.13.1-8.el9.noarch.rpm bd0c418ae3f80bd20978191c7c8771eaa24e156fe3f255c792c2af4e8869ec28 tigervnc-server-module-1.13.1-8.el9.x86_64.rpm ef8e94cb293070226fd5a8bee7d6adcd1135514b302760492f3b87a8e90ab76f ALSA-2024:2302 Copyright 2024 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer-plugins-base: heap overwrite in subtitle parsing (CVE-2023-37328) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gstreamer1-plugins-base-tools-1.22.1-2.el9.x86_64.rpm 1114584e91de761c7e3f02aaa9308a44c9eb746f7a76f35dfc46140a3a603142 gstreamer1-plugins-base-1.22.1-2.el9.x86_64.rpm 44172f91d214dcbb9183d9f69bccfbb220b68f2b0a6797113022ba6b04c27cbc gstreamer1-plugins-base-devel-1.22.1-2.el9.i686.rpm 778dfa32935fd5b9f02ae98a67a654fb46c9cd0823692f2102976af636b3ec4e gstreamer1-plugins-base-1.22.1-2.el9.i686.rpm 7d9826da224d6c98cad8c44c36394e41e16d8f4d179242d9c4963344f0e440e2 gstreamer1-plugins-base-devel-1.22.1-2.el9.x86_64.rpm b343d0cdaa332526021d88b7dc4ff51d02f23183e329de1159a0a8ad9fb87f22 ALSA-2024:2303 Copyright 2024 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling (CVE-2023-37327) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gstreamer1-plugins-good-gtk-1.22.1-2.el9.x86_64.rpm 331b651b4e896f52503a9c7c8c407ae8350b5033b89f7ca505405f0cc8a9c626 gstreamer1-plugins-good-gtk-1.22.1-2.el9.i686.rpm 44c988468a771bc76b7628ac8753fa87901bb22678e8ba67ebb834a8f2cec27d gstreamer1-plugins-good-1.22.1-2.el9.x86_64.rpm 6dc7c7bb774b5f993277c9d77efcb739c185087e5d8f9009f0ff34bfd2295bdb gstreamer1-plugins-good-1.22.1-2.el9.i686.rpm e61140c374d83972514b0d9f471ec297d522bc9b04fd51f7a226a9b1b89920bb ALSA-2024:2337 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-cryptography security update

The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers. Security Fix(es): * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-cryptography-37.0.2-6.el9.x86_64.rpm 28441b7657c273be111e65f02ac3a9248d9f5c81f6f989ce433efa99c77454d1 ALSA-2024:2348 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-jinja2 security update

The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Security Fix(es): * jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-jinja2-2.11.3-5.el9.noarch.rpm 26ea89d6c53af8b9395a9165cc42afafb92cb1bb71b81bffbed08898e33a2487 ALSA-2024:2353 Copyright 2024 AlmaLinux OS 0 1 Moderate

mingw components security update

MinGW (Minimalist GNU for Windows) is a free and open source software development environment to create Microsoft Windows applications. Security Fix(es): * binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64 (CVE-2023-1579) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mingw-binutils-generic-2.41-3.el9.x86_64.rpm f63be411167e3670add1124150510556bdf1b85cd21e4ec27fbce09e82c57936 ALSA-2024:2366 Copyright 2024 AlmaLinux OS 0 1 Moderate

freeglut security update

freeglut is a completely open source alternative to the OpenGL Utility Toolkit (GLUT) library with an OSI approved free software license. Security Fix(es): * freeglut: memory leak via glutAddSubMenu() function (CVE-2024-24258) * freeglut: memory leak via glutAddMenuEntry() function (CVE-2024-24259) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default freeglut-3.2.1-10.el9.x86_64.rpm 1b1beb512edab448742a49a708390fa01e061b2aee5237c39570c07ec638bac9 freeglut-3.2.1-10.el9.i686.rpm 2457f85c7a5f58bbbe9f67c5f274465c52e01520f653bea3c2887f1b75a79adc freeglut-devel-3.2.1-10.el9.x86_64.rpm 6fb137c4833114bdf438253be9d72b6f7efcfb68df846175d11e5b2c1bb9c6e3 freeglut-devel-3.2.1-10.el9.i686.rpm f0ff5f07c47f1689a8b6517e23ad1ed8d07ac1c4f1c8a134cadea9813e35ccf4 ALSA-2024:2368 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_http2 security update

The mod_http2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: mod_http2: DoS in HTTP/2 with initial window size 0 (CVE-2023-43622) * mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) (CVE-2023-45802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_http2-2.0.26-1.el9.x86_64.rpm c332582cc39eaf28cdbf2a5021def1a1dcb76c20d0b299082ed92cba7a2b3dec ALSA-2024:2377 Copyright 2024 AlmaLinux OS 0 1 Moderate

zziplib security update

The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default zziplib-utils-0.13.71-11.el9_4.x86_64.rpm 11c1ee547ec06c2a4451899ecd69dab56c63f0943a52436cdf8b5364f3423866 zziplib-0.13.71-11.el9_4.x86_64.rpm 98e5af046c4bdd9b47d6cbc44be1fd940105ce3b282004f782397ee21dbfa4c0 zziplib-0.13.71-11.el9_4.i686.rpm c11b73b7aaeab27388c816ec15bec91a4b37a34cb40a7047ac56b1c2ba704166 ALSA-2024:2387 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_jk and mod_proxy_cluster security update

The mod_jk module is a plugin for the Apache HTTP Server to connect it with the Apache Tomcat servlet engine. The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Security Fix(es): * httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure (CVE-2023-41081) * mod_cluster/mod_proxy_cluster: Stored Cross site Scripting (CVE-2023-6710) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_proxy_cluster-1.3.20-1.el9_4.x86_64.rpm 35350cd4fd41c369463c74b3b9b72d6d3dbffbca4bbc8848be605c8ecb83d5d1 mod_jk-1.2.49-1.el9_4.x86_64.rpm 9e7df290242100f5cb64f3df512fb4cd171d531f3003bc842b69a64c60379209 ALSA-2024:2394 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546) * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582) * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555) * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480) * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448) * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934) * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040) * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531) * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931) * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023) * kernel: irdma: Improper access control (CVE-2023-25775) * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464) * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866) * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083) * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194) * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756) * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863) * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) * kernel: mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489) * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522) * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581) * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578) * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580) * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610) * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565) * kernel: tls: race between async notify and socket close (CVE-2024-26583) * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584) * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585) * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586) * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593) * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609) * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176) * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476) * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default rtla-5.14.0-427.13.1.el9_4.x86_64.rpm 43bf335357f86106f034bec3425131a630a1d560c03f48dba8c7915137ea94c3 kernel-debug-devel-5.14.0-427.13.1.el9_4.x86_64.rpm 478e4cbe216571af66ded4ac4a2611ca6835d0c34a8516de61c76ce966b4c89b kernel-debug-devel-matched-5.14.0-427.13.1.el9_4.x86_64.rpm 53b3d3b50b103f54c8ef46686f3d202a46e31d47e55a861948b2a4fd8987f12d kernel-devel-matched-5.14.0-427.13.1.el9_4.x86_64.rpm 5c3ddfb8732471b7bdc5fc2a3f5b7441a05af4dc0c93a7b8388a50553cac80e8 perf-5.14.0-427.13.1.el9_4.x86_64.rpm 6c7d739df83e31128b33a33259f98e0d79df044011b5d508f7d95495a5b3f86b kernel-devel-5.14.0-427.13.1.el9_4.x86_64.rpm 8caedd0e0cec880bdb84005e19e273ace0651b1d339a636e19fce96f3f519a5c kernel-doc-5.14.0-427.13.1.el9_4.noarch.rpm b67841ac61f12b5f5a84ccb263ccb3c6d9369085ada5f0bd898995885898c7ec rv-5.14.0-427.13.1.el9_4.x86_64.rpm cf97bb7080579e26d2fc74ca372890b202aa7a4f402c7c9085eea33ef734e9e6 kernel-headers-5.14.0-427.13.1.el9_4.x86_64.rpm d1aab28ff956fb82432de84cafd75ef7a6f9f97f449797f1bded1e916b470364 ALSA-2024:2410 Copyright 2024 AlmaLinux OS 0 1 Moderate

harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine. Security Fix(es): * harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks (CVE-2023-25193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default harfbuzz-icu-2.7.4-10.el9.x86_64.rpm 02e106f25e1ac5401b06135524113b3bce3ebb1d25fac6342fce1fdb2a59562c harfbuzz-devel-2.7.4-10.el9.i686.rpm 0495b17b3ffd18013d8e12b89cbb83cb2affd697cc48bb3918e8996da8e80fe5 harfbuzz-devel-2.7.4-10.el9.x86_64.rpm 1ea6947ca0bb1e7b0403a027fdb1d29064f60b16f669d0ce5cca524bad7eb48f harfbuzz-icu-2.7.4-10.el9.i686.rpm 2d8a20cb1ab01d4a3e593388261f5589a5ab6509bb2e25e6277cdd20ac6a7bc2 ALSA-2024:2433 Copyright 2024 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469) * avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470) * avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471) * avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472) * avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default avahi-tools-0.8-20.el9.x86_64.rpm 15d974ef16b42c39854fcefd41966118424e3bb8d82b773738bd80fc8c512785 avahi-glib-0.8-20.el9.x86_64.rpm 4b8c6e54944bd5834308da526d7cb675ff0e526284ad43157180ffbfb0729853 avahi-glib-0.8-20.el9.i686.rpm 77f67ee864faf2afcbc726bce4e7335619cc2bc51a1be781750d4f2b12fe04a8 ALSA-2024:2438 Copyright 2024 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * pam: allowing unprivileged user to block another user namespace (CVE-2024-22365) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default pam-docs-1.5.1-19.el9.x86_64.rpm 3de0ae2c129e6d26fcae28b89fd6ff137784e87c70c88a7d669bb056aef29091 pam-devel-1.5.1-19.el9.i686.rpm 765d0723d2a4284fb705acf18f112516b0caec0c271c58ce210ac3241afa5724 pam-devel-1.5.1-19.el9.x86_64.rpm dd5df519d5844e5f3e6b4fcf4d6a3303f01c60da84266a1a2fef6de870ff5535 ALSA-2024:2447 Copyright 2024 AlmaLinux OS 0 1 Low

openssl and openssl-fips-provider security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975) * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446) * OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817) * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678) * openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129) * openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237) * openssl: denial of service via null dereference (CVE-2024-0727) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default openssl-perl-3.0.7-27.el9.x86_64.rpm 0b536c723bcdc5e2d7d6d45a73f00910a0c3f1ce8c9cd163ed0206574dcaee9f openssl-devel-3.0.7-27.el9.x86_64.rpm 127b2c05695e907f11be419da27960af6d61b1b3630107e8c4fe769a5eaa9c77 openssl-devel-3.0.7-27.el9.i686.rpm ee2d4c73a82a1983a36dab63037fdc6e6c7eb831bdd0f87736299427f99afc5b ALSA-2024:2463 Copyright 2024 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default systemd-journal-remote-252-32.el9_4.alma.1.x86_64.rpm 6d54474b17c24c61330776bb7a07cde833dc8e89fa48d5bb7a2252e145e9e3fe systemd-devel-252-32.el9_4.alma.1.i686.rpm a011201128f048ec29befe20ad095f777e93831bf3849b776def53baae6f34f0 systemd-devel-252-32.el9_4.alma.1.x86_64.rpm ecc72b5b43e10212bbe07996abf4268af6a6fa9b557a03d55b0950b82f3c434c ALSA-2024:2504 Copyright 2024 AlmaLinux OS 0 1 Low

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004) * libssh: Missing checks for return values for digests (CVE-2023-6918) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libssh-devel-0.10.4-13.el9.i686.rpm 7b1fc7a9ca54dc30cbbacf27777fa983ce1797a4442464285f3d8b828d028cf4 libssh-devel-0.10.4-13.el9.x86_64.rpm b385e7afcc9a2ab3d8f8aa70b0c28e66b59bf3de64656464bd0143a5c6057bd8 ALSA-2024:2512 Copyright 2024 AlmaLinux OS 0 1 Low

file security update

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats. Security Fix(es): * file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-file-magic-5.39-16.el9.noarch.rpm 62fb8e14b9695ce3cc2bd865118725b0051215cac1cc03649dc2308fb701bcae ALSA-2024:2548 Copyright 2024 AlmaLinux OS 0 1 Moderate

podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: * podman: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786) * podman: buildah: full container escape at build time (CVE-2024-1753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fixes: * liveness probe not called by podman when using httpGet (JIRA:AlmaLinux-28633) * Unable to copy image from one virtual machine to another using "podman image scp" (JIRA:AlmaLinux-28629) * [v4.9] Backport two docker CLI compatibility fixes (JIRA:AlmaLinux-28636) * Issue in podman causing S2I to fail in overwriting ENTRYPOINT (JIRA:AlmaLinux-14922) * Need to backport podman fix for SIGSEGV in AlmaLinux 9.3/8.9 for UBI based containers (JIRA:AlmaLinux-26843) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default podman-4.9.4-3.el9_4.x86_64.rpm 3bb64b40fd9c828df1390a1ff5c5d7078b94354c86099c01f8aba90bf643210a podman-plugins-4.9.4-3.el9_4.x86_64.rpm 50a897f230e9576f58b415a09134ad55d8e985f0d248db305086df2920fd4940 podman-tests-4.9.4-3.el9_4.x86_64.rpm 6b018fb6fd923c47e11b133af2cbf5e8490a7f7cdd18a830ae2f01565aaea2f9 podman-docker-4.9.4-3.el9_4.noarch.rpm edc23a43c6ee0d766ffe41a44709a24a1f5464266842fb1c10b47288866212f0 podman-remote-4.9.4-3.el9_4.x86_64.rpm ffae08bde33407381c1f879c24c3a33717f0a22a0a54ca99ea4fb96818aa9a94 ALSA-2024:2549 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786) Bug Fix(es): * TRIAGE CVE-2024-24786 skopeo: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [almalinux-9] - AlmaLinux 9.4 0day (JIRA:AlmaLinux-28235) * skopeo: jose-go: improper handling of highly compressed data [almalinux-9] (JIRA:AlmaLinux-28736) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default skopeo-1.14.3-2.el9_4.x86_64.rpm 54d444395c81cb51cb3ebdb5985bd4fd3b5689743128132634515c496491aba8 skopeo-tests-1.14.3-2.el9_4.x86_64.rpm b6dcc87c2216ed72ec89846a93993cf29d4559ec0a976b3e63b8b8da524c06b7 ALSA-2024:2550 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Bug Fix(es): * TRIAGE CVE-2024-24786 buildah: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [almalinux-9] AlmaLinux9.4 0Day (JIRA:AlmaLinux-28230) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-tests-1.33.7-1.el9_4.x86_64.rpm 11ce80c879395ef2116cc46631bd094d8b84902625a276bd5f10c82f9d2e9f14 buildah-1.33.7-1.el9_4.x86_64.rpm 9c299f9c8ea0e2bdbefbc4725e074d16f6807a4fa3124c92289125b5549dad6a ALSA-2024:2551 Copyright 2024 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868) * bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516) * bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679) * bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517) * bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408) Bug Fix(es): * bind-dyndb-ldap: rebuilt to adapt ABI changes in bind For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default bind-dyndb-ldap-11.9-9.el9_4.alma.1.x86_64.rpm 019caf6fde7da83ef31d17cd9f73c34469e6bb901f8cd358ca81ed6551fe34b7 bind-dnssec-utils-9.16.23-18.el9_4.1.x86_64.rpm 0bdac2c9fe92359c92cc3d1ecf8452e401e6fd9e062834c89d810a59ace115e4 bind-chroot-9.16.23-18.el9_4.1.x86_64.rpm 1d9cab4dd2d1da8692ca148812de720621ad032eaed54c67aa4848a905e2cc78 python3-bind-9.16.23-18.el9_4.1.noarch.rpm 3353e9654688cd38306bd37aa10893fbfae95a52fc000889d856ce6c964dfd28 bind-license-9.16.23-18.el9_4.1.noarch.rpm ae7bf12a28a5753931c0725bf5b9bbea371aa3cbefdd5fe0075bedd29c59be6a bind-9.16.23-18.el9_4.1.x86_64.rpm da554395a1769bfeeebc12e215ae08783728159822a415fbb9591704a216e360 bind-utils-9.16.23-18.el9_4.1.x86_64.rpm e1fa4991dcc797ad11d0e7cde132d418677f9a3c16b4d523336289b428eeab16 bind-dnssec-doc-9.16.23-18.el9_4.1.noarch.rpm e4388e0eef62d2414d5a5aee824ba06b2443eea617ae13bfeac580a1f2ea3939 bind-libs-9.16.23-18.el9_4.1.x86_64.rpm f165e3c85dce5474bf3e0195b3c1c53852ad737190b6a15a02a055a355d5db8f ALSA-2024:2559 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-jwcrypto security update

The python-jwcrypto package provides Python implementations of the JSON Web Key (JWK), JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Token (JWT) JOSE (JSON Object Signing and Encryption) standards. Security Fix(es): * python-jwcrypto: malicious JWE token can cause denial of service (CVE-2024-28102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-jwcrypto-0.8-5.el9_4.noarch.rpm 93ea7fb7badf93b8413264ae4031101bd9e3faedcad0899428155e0068cf5575 ALSA-2024:2560 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvirt security and bug fix update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: * libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441) * libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fixes: * libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081) * libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libvirt-daemon-driver-secret-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 035b2f3b1fa97110531300480af52a844d8e3d04771a5e113ff700c16d325d77 libvirt-daemon-common-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 081c2f8fb0450fe2775946299615cfc06d89f6cfca6a7611a0fded567876511b libvirt-daemon-lock-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 0aa5540a962a22484284d9781c5b72d778a2568b988569291aaa61750005b3fb libvirt-daemon-driver-nodedev-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 0b41c7f67f46b4eae8ca1ebf60e3de3488d0d7a09398b7b40c1c6ba308e47571 libvirt-libs-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 12af318aee512d389dd7a072bb294ea4acb55fdbc21ebe18c677031cd3000ed7 libvirt-daemon-config-nwfilter-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 2b715f802a615d5da88cbe4f0c367489ba8242527e4dec489cca7da66f4651c7 libvirt-nss-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 4335b0fc7105b75eff108e3005329d9a294d74447dd2f2789899154889ee29ea libvirt-daemon-driver-storage-core-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 446e86b70fde464fe8455d666a27792cc538f8a1024605eca35e38dbb83934a6 libvirt-daemon-driver-qemu-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 6067d2dfae8e4ac938ce4cb3800a8a62ae00350467c9e3aa94beaf01122d21a2 libvirt-daemon-driver-nwfilter-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 63723ca076f5bb28173ab4942132977618d3901435fc08d7937a821354695593 libvirt-daemon-plugin-lockd-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 67e4c5271ab8d99d38ffa7a5665539783df31c9bee293d91e730f3923f5fbe2b libvirt-client-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 7bdb74cadb45352416849ba06dba9280efc5458b7b5ace0fde82e3085f86396e libvirt-daemon-log-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 7c0169d302e39e4fd1f065d69c455e94cd6f53c0ab646124cc0487bccd4616be libvirt-daemon-driver-network-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 80a5a259ab9126363e21042fae5fc7a5eff3423a8e81bcedee4793efacf26ca4 libvirt-daemon-driver-storage-mpath-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 903ff789ff53f0c740787be8eaff1f13782b041fc4e30c94de33459a8a628193 libvirt-client-qemu-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 914a7d8176b3a29a7ae56d1eaee56fdcf240749eb91cb6af03f3c39a88c010bd libvirt-daemon-driver-storage-disk-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 98af16834ea05476a50a6599bbfc71bd48fadadfdabfca3ddf6e2b48e8fc48e3 libvirt-daemon-kvm-10.0.0-6.2.el9_4.alma.1.x86_64.rpm 99011412a4b0a5500f6aeda2bd0b5cd9b8606aa328817d6e05b9557576275f62 libvirt-daemon-10.0.0-6.2.el9_4.alma.1.x86_64.rpm a0d4cc262c95b16ee453dcc528738d13876f9f172da546d3e83f47540ad48deb libvirt-daemon-driver-storage-iscsi-10.0.0-6.2.el9_4.alma.1.x86_64.rpm c76e66cf3a14e6924a485f8dd66214ccba73a737c3fbf9dabb28f08f8c2d4dea libvirt-daemon-driver-storage-rbd-10.0.0-6.2.el9_4.alma.1.x86_64.rpm d01e6580857045faf9c12f092a25c4a33e6bf637f9b8d3c6565ab3806987ac4e libvirt-daemon-proxy-10.0.0-6.2.el9_4.alma.1.x86_64.rpm d5c6c5a48d53f4a0cc6a5428ad5342340d419f38da8a93eecf63b91409b6a594 libvirt-daemon-driver-storage-scsi-10.0.0-6.2.el9_4.alma.1.x86_64.rpm d837687801cab7176373c1145c33af5c89520bd7e8c4ca934f570164214feb91 libvirt-daemon-driver-interface-10.0.0-6.2.el9_4.alma.1.x86_64.rpm e8419d98958e400682205c246ab83c667c4d97667e0914208dad2b084d479482 libvirt-daemon-config-network-10.0.0-6.2.el9_4.alma.1.x86_64.rpm eb094a3f6a16a6ed7652b57f8a915a6611db60a95032849a9b5fbe4dbac31c15 libvirt-10.0.0-6.2.el9_4.alma.1.x86_64.rpm ec590f4aeabbe3dc4edd2c4f4bb4512b9e930d4cea3b450c1f36727c67827c8d libvirt-daemon-driver-storage-logical-10.0.0-6.2.el9_4.alma.1.x86_64.rpm f9737948682236d89b6d3d00a5296d43a7c867289c3dff7545be8bca034fc85e libvirt-daemon-driver-storage-10.0.0-6.2.el9_4.alma.1.x86_64.rpm fa4f35cfb168eea38e9837b44fb5f30c022121c81fff8c2c32934e8eddeb529d ALSA-2024:2562 Copyright 2024 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289) * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784) * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default golang-bin-1.21.9-2.el9_4.x86_64.rpm 067abe8074c1c55e550289fe62cd17037ff584ca991a09b143bbc12a7e19f5e1 go-toolset-1.21.9-2.el9_4.x86_64.rpm 3312733f6cd9f07b1609f9a845877a5667e14b17e7024ef9b6211fefe759e7b6 golang-misc-1.21.9-2.el9_4.noarch.rpm a53b40dbec2876ebcdaf54a0f1575f5f7a0e75b6c82ad1bcc0d6acfef1b02fa5 golang-tests-1.21.9-2.el9_4.noarch.rpm a9a260ca1ee00ce2fbd31e1d9c44bfdfb901f9b21fac658b0efd08596d6e3009 golang-src-1.21.9-2.el9_4.noarch.rpm c896dc6ca35a3612feec754f9c5c5a1b0ec322576d34fa5ecf0846d4abe20afc golang-1.21.9-2.el9_4.x86_64.rpm f24d27a0533c970b729c88b84bfc43b19b0715f05c58f7b23ecbacb2c2e78df3 golang-docs-1.21.9-2.el9_4.noarch.rpm f44154f1729f1277a3d8cbb6eee053a8617f3d0d2542d6f824d2fe978a0455ea ALSA-2024:2564 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * mod_http2: httpd: CONTINUATION frames DoS (CVE-2024-27316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_http2-2.0.26-2.el9_4.x86_64.rpm ea8f4448f1942a2f46e0346836c962c24c2066dcd3e5b06668e34faedc28814d ALSA-2024:2565 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libreswan-4.12-2.el9_4.alma.1.x86_64.rpm 0c244e5e3c137a42350c4f8cbded46c28930f9e6f6a2c55533fcfe1bb7edb843 ALSA-2024:2566 Copyright 2024 AlmaLinux OS 0 1 Important

pcp security, bug fix, and enhancement update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default pcp-export-pcp2zabbix-6.2.0-2.el9_4.x86_64.rpm 016607663443d96e4a69c95a057f77acd3ca3f39774d4c779a251ff386b91b89 pcp-pmda-systemd-6.2.0-2.el9_4.x86_64.rpm 0304f8893125b7512573b0fcb5926edd8148605e0543b5c1d19f29d676c06c41 pcp-devel-6.2.0-2.el9_4.x86_64.rpm 03057c35b0b51671a7f7c5646818d461392022f2821ce9941d047beff1a74b9a pcp-pmda-postgresql-6.2.0-2.el9_4.x86_64.rpm 079ae362294221773b7b5211984cc30fe3e7ff9d1f34f91542ca88ca6949069d pcp-pmda-mailq-6.2.0-2.el9_4.x86_64.rpm 0845bd87ba8c1a8f97e64b948a4df3c75c965a51779a3108eb4b2823c7cd79e3 pcp-export-pcp2xml-6.2.0-2.el9_4.x86_64.rpm 0b59b2705fe1de12058dd7105f6ded94edff1c2a2e8a1d8e3a78df8d7368569a pcp-pmda-mounts-6.2.0-2.el9_4.x86_64.rpm 0b9e5510511e4a910c3498e9d283547c4b25b58c714a986992f539a2df8d5620 pcp-import-collectl2pcp-6.2.0-2.el9_4.x86_64.rpm 0f067f5125bfb3d9eabdf503321382455dadcec9498d1e5e6aa96d590f7c6365 pcp-pmda-lmsensors-6.2.0-2.el9_4.x86_64.rpm 0fe548d20191a39cb3f86edf3dd1055c69062cfb4e4778883dbb2dd3b49071bd pcp-pmda-postfix-6.2.0-2.el9_4.x86_64.rpm 1284498edc5c5b3705154adfa686c2c1c57352b019471fe1df6c32a31a7dc6e3 pcp-libs-devel-6.2.0-2.el9_4.i686.rpm 13ec29fc06b8a5e640d312f8de6e3af24a1c10c2ff27c23287ac6e03ccea9970 pcp-pmda-bonding-6.2.0-2.el9_4.x86_64.rpm 18466fd342cfec91db4500498526eef6ef9b0ac3e3c718a293f7e44064bd9ee3 pcp-export-zabbix-agent-6.2.0-2.el9_4.x86_64.rpm 193b687605276dbe5800d139f5a96258d6058dce56d57534fd4132f052cf5282 pcp-pmda-pdns-6.2.0-2.el9_4.x86_64.rpm 1a10040560f72eb8acf74a187c5251ac4237df4f6aabd2d8aeddb8ee530c199c pcp-pmda-libvirt-6.2.0-2.el9_4.x86_64.rpm 1ba104f97715ed5ab06090fee4c66f2393642cf7064aae7cd7e2daf3f1dc6267 pcp-pmda-rabbitmq-6.2.0-2.el9_4.x86_64.rpm 229086c0bd390ad2d29583ee3e7563f4fb4fff78f7ffd4b47d2aef5e98de6133 perl-PCP-LogSummary-6.2.0-2.el9_4.x86_64.rpm 2549c0afa03126f53e69972ba1518c70a176c207bc85866bcda13b88ac4ceca2 pcp-pmda-unbound-6.2.0-2.el9_4.x86_64.rpm 29b609a1c7248e4628544be22e6d4487600e6cfc2f9e89a61bf8fc3eb49708ef pcp-pmda-nfsclient-6.2.0-2.el9_4.x86_64.rpm 2d127556014675694656cb436295c84516343c4896bb62ab50804f9736aba027 pcp-pmda-news-6.2.0-2.el9_4.x86_64.rpm 2f7359a942065fb87e108a0a93e6de731d29173f45c7aa2f50e72163213fbe49 pcp-pmda-logger-6.2.0-2.el9_4.x86_64.rpm 2fa67980558888d3ac9c634070aa426a1b2a34cddc7443ef02c531303a58121b pcp-pmda-denki-6.2.0-2.el9_4.x86_64.rpm 3059b2391a9d84e19024cbf6e4183bc620c8447a8839adf8686b0959747b39bf pcp-pmda-ds389log-6.2.0-2.el9_4.x86_64.rpm 32f3546eac7ac2e1d252dfd6437b30a03974b7aac73fe6478e9cfe059e4f8d51 pcp-libs-6.2.0-2.el9_4.i686.rpm 35c6888e11e77627a27a7d3fb147f32a7cf136cceb8ce0303f7c9b34604cddef perl-PCP-LogImport-6.2.0-2.el9_4.x86_64.rpm 37fdf1b00735d79f5ff4fa59f1917a71952de31add87d3ac8537c55d054267e0 pcp-pmda-resctrl-6.2.0-2.el9_4.x86_64.rpm 3a2462884ba2c8830b41884b5dcd797b91c8b925518b3eb15f8983d29f3cc26e pcp-pmda-mic-6.2.0-2.el9_4.x86_64.rpm 3ba6f629e9dd40ed79977b86fe18312b22f375858ea99738f2c73427d63f21e2 pcp-pmda-bpf-6.2.0-2.el9_4.x86_64.rpm 3c57fd56c9b44560caf4517268625875857291372b5efa7d74c9807859c10ecd pcp-devel-6.2.0-2.el9_4.i686.rpm 3c5e2102743b1c749d636a37cfe4381deb3e038555b0203949542315a55f468e pcp-pmda-gfs2-6.2.0-2.el9_4.x86_64.rpm 3c761a0a82c9e0e591896f31ab8ae8a0f27e2941c8783d483450f64f738619c6 pcp-pmda-elasticsearch-6.2.0-2.el9_4.x86_64.rpm 40ee007ce1c3866f5fc138d96205445e638254f93a6fabb8d0920a2f8a8ed74f pcp-selinux-6.2.0-2.el9_4.x86_64.rpm 423f9881fbe4091ff52c67dfb7b552de4e08f01c8994419f5682b9f115a9b1f0 pcp-libs-6.2.0-2.el9_4.x86_64.rpm 456d1427ce7305fbdd12b6f0358a9dc35e1acf2cb7d7fc4ed1e38a24526b3780 pcp-pmda-memcache-6.2.0-2.el9_4.x86_64.rpm 496ed0ded89c65d48506e7614048fd9e442c68fdcd303e9e0af04281b917678a pcp-pmda-lustrecomm-6.2.0-2.el9_4.x86_64.rpm 4aa1f96686bee8a65eba85695c6cf7e7c0e9462906a7169b72000160cbc6ce32 pcp-pmda-gluster-6.2.0-2.el9_4.x86_64.rpm 4b676be6e39b919553aa93618c6cfbca01f3cf9ce10f9b6eb8aba2ff34760401 pcp-pmda-json-6.2.0-2.el9_4.x86_64.rpm 4c96512d961c84a0e0d70ef2ea8f4f1b1c8febd35cb772b9de856799e7f1fdda python3-pcp-6.2.0-2.el9_4.x86_64.rpm 4cddd641b714c097d051f0f3c9960f89dd701dfcc9e2aed3e89428aeee2aa696 pcp-pmda-perfevent-6.2.0-2.el9_4.x86_64.rpm 4d46e57da8bb852abd43a20c7fa2766dcb843a52f1edd45b48a733d1225f13ee pcp-pmda-hacluster-6.2.0-2.el9_4.x86_64.rpm 50fd29142271187462aebd9f19f0d0b5876b49b8b490041c677e57de47655b13 pcp-pmda-podman-6.2.0-2.el9_4.x86_64.rpm 520eecc65cfdd4107a865dcb10f1fd8107c298cf6c6972b2b38bb037a326948e pcp-pmda-cifs-6.2.0-2.el9_4.x86_64.rpm 52a6bc62ef77e8044c128e693926b1b4927aed16fe1cf76cfe18174c5baea912 pcp-pmda-summary-6.2.0-2.el9_4.x86_64.rpm 54f642ee4a23c39f35bbad8c2d70e88e58568a738784202a6251a88a6904c6fa pcp-pmda-openmetrics-6.2.0-2.el9_4.x86_64.rpm 5979fc7a83f1419523ef8b8c520ab8685e4f50ef46abf9e75de1f645400c479f pcp-pmda-weblog-6.2.0-2.el9_4.x86_64.rpm 597ff9e930eacf59a8be8e982414e7e385667bff47c97d4f40bf0a6225a01ad7 pcp-pmda-statsd-6.2.0-2.el9_4.x86_64.rpm 5d554573fd50ce28590dcc0e2d9ddd34cee4268c345b034a32f733cd40fb6765 pcp-pmda-sockets-6.2.0-2.el9_4.x86_64.rpm 5e4981f6557fb9b9200d4487f93848380fe6ae5f1d59775c169f6dc1cf87ce57 pcp-pmda-oracle-6.2.0-2.el9_4.x86_64.rpm 61e9fcb5679522f15f32147496ccc18aa26aa012c1108df06f5e68f554b0ec65 pcp-system-tools-6.2.0-2.el9_4.x86_64.rpm 61f0b5d8818d4936b139f4b7a2e5ddaa49a5d1f6825bcf5363fee1213f85a485 pcp-testsuite-6.2.0-2.el9_4.i686.rpm 6211b9c76975412183769953e738068418bd1c287ec8699347c24d9b41caffaf pcp-import-ganglia2pcp-6.2.0-2.el9_4.x86_64.rpm 66c7befa46c65032a879f3ef3778f66d98b6db0bf71cfdc193e781bda6ae5836 pcp-import-mrtg2pcp-6.2.0-2.el9_4.x86_64.rpm 6d9181dde589f01f2c7458ba93f5c8d732eb6339f537416966e1aa078ef3f360 pcp-pmda-dm-6.2.0-2.el9_4.x86_64.rpm 6e07c7d59d43c9840e9530a31850d5004a7c759f50bc5467b2b8fbf38a5bace5 pcp-pmda-shping-6.2.0-2.el9_4.x86_64.rpm 7651fc6bba223cb16924824e82b51cb314735d74d2a45a2e2552ce33309539f2 pcp-pmda-netfilter-6.2.0-2.el9_4.x86_64.rpm 77f6ce7feafe04ed21338b7781b7b67866fcf5c615067d8e0c49acd0fea254f6 pcp-gui-6.2.0-2.el9_4.x86_64.rpm 793cbdad728920eb5925e3baec12f0a351efbef4b01824e72d8da1e32efcf7a4 pcp-pmda-named-6.2.0-2.el9_4.x86_64.rpm 7bf4f7faeb660ebb1ba6d8fe8e51a6646e133ad3a95f00bb6c19fd19b036ea63 perl-PCP-PMDA-6.2.0-2.el9_4.x86_64.rpm 7c13f452973041bbc450e9de437f224a0f0fc696cfc2419f375fc5d7e45850b2 pcp-pmda-gpfs-6.2.0-2.el9_4.x86_64.rpm 7c6f4e84d5f29ec94a6503fdab68277326bb11ab3381c346fac691d6a8d65e57 pcp-pmda-infiniband-6.2.0-2.el9_4.x86_64.rpm 7e68cdd6e98667b394f266a336e5fb2082e3c23539df463f5a5dfdfcaa9f41e9 pcp-pmda-snmp-6.2.0-2.el9_4.x86_64.rpm 7fd5f52b04b58aff4a21dd2502ebacae2800269a636e68afa9aa05c4922ebb94 pcp-pmda-gpsd-6.2.0-2.el9_4.x86_64.rpm 8076fedb53c64a7cf8edb19240dffc164ee7c72f5c031caa6941c50dd2cebe2f pcp-pmda-dbping-6.2.0-2.el9_4.x86_64.rpm 8290b9767813dbb00329e37f509c2ccc1eb2b990f868fc60473827f3d23ac142 pcp-pmda-redis-6.2.0-2.el9_4.x86_64.rpm 8a0442c41c8bdd8b09f36f93eea51f0a688d1088d972f98873fdb8d94b3eac98 pcp-pmda-sendmail-6.2.0-2.el9_4.x86_64.rpm 90b8801d8b2c73b206392db3019375c1d64cb9c6bf5693bb0cdd989505a2692b pcp-pmda-cisco-6.2.0-2.el9_4.x86_64.rpm 9178e46efc12fc795cda634b1189e78f3e01ad18c5a085c01a49290545e5deb3 pcp-pmda-mssql-6.2.0-2.el9_4.x86_64.rpm 9202fadd795ffe267826e14b2486682b800791f9a6f2154610e67910b5a103d2 pcp-pmda-bind2-6.2.0-2.el9_4.x86_64.rpm 968eaa93adc9e524ccb4b55a302469942c5cee61ce9917218a6954537ba5d020 pcp-pmda-bcc-6.2.0-2.el9_4.x86_64.rpm 9bebbb0743675a248f16a9af9b7a3ea73212953fd6d5e00db3b76dbda015ea4f pcp-pmda-ds389-6.2.0-2.el9_4.x86_64.rpm 9c2f7f0ebc8a5b86cac4f865f97e93e49ca3ef27771d5023b7d79c8a2100b11f pcp-pmda-openvswitch-6.2.0-2.el9_4.x86_64.rpm 9c81d4433598383261920b29a7e26c0b486331c55f241239fa40848e0d035b77 pcp-pmda-nvidia-gpu-6.2.0-2.el9_4.x86_64.rpm 9c9f3040e72fee432e46708b1afb59a752e002cdc27c718ac8b68ed538c1d690 pcp-6.2.0-2.el9_4.x86_64.rpm a182e8382fd75b870402ee3848a0c1aae5d9c305b53598cbe92025a6e24243d6 pcp-pmda-mysql-6.2.0-2.el9_4.x86_64.rpm a2accbe2a37052218772180cb5453dbce805f07c88a8e5ed5bbc628e8b313e52 pcp-export-pcp2spark-6.2.0-2.el9_4.x86_64.rpm a6764028f6ea466666ed55ddf81498f8c34fbbe24fd15d9448ef47093a307ebf pcp-pmda-trace-6.2.0-2.el9_4.x86_64.rpm a681f551840dedb9b71f676c6bfd469b8b5024ad31df4b6c2ec4319bfe3bd3e4 pcp-pmda-activemq-6.2.0-2.el9_4.x86_64.rpm a9384a7ed42d67f03317450bd58e62a81dd2042cd5383014667ef45f69680220 pcp-pmda-smart-6.2.0-2.el9_4.x86_64.rpm aae64a4f39f2498b419e56a14d297634ab7b08be006db130a9b057241775ca84 pcp-zeroconf-6.2.0-2.el9_4.x86_64.rpm ab01c7bf4567febb53d3e869c6c88dede41e14e0c0ff66f8cee495ef9ac495d5 pcp-libs-devel-6.2.0-2.el9_4.x86_64.rpm ab26415970d5c74a99aa8621b34e6d4d4395021ef1b7e443a0ddcdb01e76f0c8 pcp-export-pcp2influxdb-6.2.0-2.el9_4.x86_64.rpm adcef2f51207813552a42168c74baf4c89c5b8c52158ab8c216ada6251ad1511 pcp-pmda-rsyslog-6.2.0-2.el9_4.x86_64.rpm af325fddf48fcc06c6e8b4761299a4d06de703f688bc0ce1f6ee0a26bd250878 pcp-pmda-apache-6.2.0-2.el9_4.x86_64.rpm b1d841296a6fb626ea50515d703e77bb9d86d2f05638a73f4d03ebb32cfc01b7 pcp-pmda-bpftrace-6.2.0-2.el9_4.x86_64.rpm b56b0cf024b40b48915aac6d16890b8706616e645ebbf60d5773ab69444c3f08 pcp-pmda-lio-6.2.0-2.el9_4.x86_64.rpm ba8087dbe0f7aeb483200da41373978464fcf2cc1a944780e89ec47d8a247ad4 pcp-pmda-docker-6.2.0-2.el9_4.x86_64.rpm bb356011ddae76e4492794bcd6e61f95c0fa715a087b2bbe0e552b8f44b5f1d3 pcp-conf-6.2.0-2.el9_4.x86_64.rpm bc8d1bbd4ae23cc2c3da44f1226f59a917d50e60cdc7221e5f51af0e8ea6c06e pcp-export-pcp2json-6.2.0-2.el9_4.x86_64.rpm bf2d4074b1abe68b081a524497ad9f248cfa393fa0cbf3a98283f70b458d6b88 pcp-pmda-farm-6.2.0-2.el9_4.x86_64.rpm c1e82a55cb4e632b58d3e5432285f251a7526059c9c7b69fb4e3c228a32cab73 pcp-import-sar2pcp-6.2.0-2.el9_4.x86_64.rpm c3f6199c9f52e92bb1b9fa21b9ac17da28fc2cfb7f67a865e141234647fcfd2b pcp-geolocate-6.2.0-2.el9_4.x86_64.rpm c7ca7bdb21083d2c4b41658c8f66dca3c07f9fe5433e34a65e63f4b34463ea29 pcp-pmda-roomtemp-6.2.0-2.el9_4.x86_64.rpm cb0af287199daacd642444243327e8e59794c1081f2a65903af0d72f561ff4e5 pcp-testsuite-6.2.0-2.el9_4.x86_64.rpm ccca16ca27ac97cd4d671c17d8dff7db931a226b0b23eacf3ffbc5c9564789f0 pcp-pmda-nginx-6.2.0-2.el9_4.x86_64.rpm cd50158c734016b3e560148c988dc574c1673e4940173e92396389bda6694263 pcp-export-pcp2elasticsearch-6.2.0-2.el9_4.x86_64.rpm cd59786c4f1d4fefb2f17edc4946712f02ea88d09988bec62bce783ac413843b pcp-pmda-lustre-6.2.0-2.el9_4.x86_64.rpm d9694cf171c55d9084e5df7713b7ba14639615df9ce249d9b484f34b32baabe9 pcp-doc-6.2.0-2.el9_4.noarch.rpm d9ebf07165b85e07494e2a654f6430ae6d81a524001434e3cede4ee9f5d93b5c pcp-pmda-bash-6.2.0-2.el9_4.x86_64.rpm db9b77a1f662c5762cf510e5da3b4361d67cad97f246f30990fca93ddf6cf186 pcp-pmda-mongodb-6.2.0-2.el9_4.x86_64.rpm e79304e55479a7a2a6f49dcf9257f800418bebd748ce0318a048c587d71f2894 pcp-pmda-zimbra-6.2.0-2.el9_4.x86_64.rpm efa0da3bd6b9f0b1fc2097170a59fb3c5295e8e170c0540a19ba0d2e40ede2a8 pcp-pmda-slurm-6.2.0-2.el9_4.x86_64.rpm efb55fbb2c3eaf3bfcde10ad1aa0468df252850e7c20603aa6310a490f09d852 perl-PCP-MMV-6.2.0-2.el9_4.x86_64.rpm f033c0ff3aa2a07f2b528ddc42863641ace64bd893051647b296f221b3b02f7b pcp-pmda-zswap-6.2.0-2.el9_4.x86_64.rpm f3ef2956acb251b6738a50122fc38edf4d2f8af8aaf54fcbaad28d31ecee3a84 pcp-export-pcp2graphite-6.2.0-2.el9_4.x86_64.rpm f5fa1fdc3722c915f42a8a29d384761a581ffbe07216c55a9734ef986e1f832c pcp-pmda-samba-6.2.0-2.el9_4.x86_64.rpm f6c367473ac493e057ca026c68cdc14ad516ef27714b7b17df5de2869affdb9a pcp-pmda-netcheck-6.2.0-2.el9_4.x86_64.rpm f739343a2a858946b3deb7642fb63514aa403249b145d809c8914ffa5c14610c pcp-pmda-haproxy-6.2.0-2.el9_4.x86_64.rpm fb75a8ec49e545896f0b0386573482b4d5f532aa89e7c5ef9135ce7abfbbf4cb pcp-import-iostat2pcp-6.2.0-2.el9_4.x86_64.rpm fc19bd51b7ec76daf966a74bcbeb9126febf256c28b684d070404eff4cfdc883 ALSA-2024:2568 Copyright 2024 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) * grafana: vulnerable to authorization bypass (CVE-2024-1313) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default grafana-9.2.10-16.el9_4.alma.1.x86_64.rpm 6f192e8f21f09a3c24ac21ad8788b640b72f18ac825a90c52f41f04faac0210d grafana-selinux-9.2.10-16.el9_4.alma.1.x86_64.rpm 8234863c34aff7c4e898fee5192f3f9926ca45184a72c64e18c6f48d355f6783 ALSA-2024:2569 Copyright 2024 AlmaLinux OS 0 1 Important

grafana-pcp security update

grafana-pcp is an open source Grafana plugin for PCP. Security Fix(es): * grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default grafana-pcp-5.1.1-2.el9_4.alma.1.x86_64.rpm cfa4cb307b3ea7526d0315a08d746390ec8eef6389f0d785ef7f1ac27ff6d7dc ALSA-2024:2570 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) * gnutls: potential crash during chain building/verification (CVE-2024-28835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gnutls-utils-3.8.3-4.el9_4.x86_64.rpm 0e27d8f4ecbe708064779b252cd4f8afede90c9b70c92a1844815601c6baa3be gnutls-devel-3.8.3-4.el9_4.x86_64.rpm 5262d26693f13eccd5888a0abf5ca02b1c514656496cf8bb0cd169be172a66bb gnutls-c++-3.8.3-4.el9_4.i686.rpm 7d544c1f1263d94a4d9fc650f0584f4d906e825227c79b1bf860e5179c8026a0 gnutls-devel-3.8.3-4.el9_4.i686.rpm 847ec0f737e412e1771c5b953372c4e3e946e3d32185bbd11c2c6eb457a7ab69 gnutls-c++-3.8.3-4.el9_4.x86_64.rpm 90ce2c078a724affc5c8eddf286ed0fb064b372ebea51b1e181e7780ab320d8e gnutls-dane-3.8.3-4.el9_4.x86_64.rpm 9ff258bd830af4f2712b17bea40299573fa2d8fe24ec01bd89d19081e7b422c1 gnutls-dane-3.8.3-4.el9_4.i686.rpm ca4fb9334e85de803bd5210a8bf04bfbe94e8c779eca65609672d21d4a415bee ALSA-2024:2571 Copyright 2024 AlmaLinux OS 0 1 Moderate

sssd security and bug fix update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758) Bug Fix(es): * socket leak (JIRA:AlmaLinux-22340) * Passkey cannot fall back to password (JIRA:AlmaLinux-28161) * sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default sssd-idp-2.9.4-6.el9_4.x86_64.rpm 91255f144072e3a174c1cabb51abb04f9b53bdbfe6b333b6b82b513f7459a0bd ALSA-2024:2616 Copyright 2024 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default tigervnc-server-1.13.1-8.el9_4.3.x86_64.rpm 3912b50127788c30488ec557a7f8de805e749e240bf19df3ff65a89515e1fcb8 tigervnc-1.13.1-8.el9_4.3.x86_64.rpm 4559b03b633c11108acc7962ff0f7ac8886b8cf1d137a691ce2c04f54e74a846 tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm 88652459ddee8141a01cb5d645b69d58dedb3a05a9566afcaa09e66ea70b3603 tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm a1dbfd534a994217c669b5b8951f5cc408536fc21ed62f9ff803c3f2251e6efe tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm a421fb125245971d1fc8ec645d9ca3e6ced04403cb7342fa35834f4b276df45e tigervnc-server-minimal-1.13.1-8.el9_4.3.x86_64.rpm a883f48e19451f2d7e1550c7b3ddffa41adc24253b6b466b5baee2521d91087c tigervnc-server-module-1.13.1-8.el9_4.3.x86_64.rpm f38bb74d8fb019286262972f877d8cd9d22f15f0edac0891b9d9e25e1cbd75b8 ALSA-2024:2679 Copyright 2024 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: use-after-free in XMLReader (CVE-2024-25062) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libxml2-devel-2.9.13-6.el9_4.i686.rpm 8afee8c85dfe755e2ea411661026264b0d853d6137ece67f21c8205d498c0ac7 libxml2-devel-2.9.13-6.el9_4.x86_64.rpm d99950a5bb8802c908e1d05f77ea07e69cc73324e5be5e13372916b8308e9b0e ALSA-2024:2724 Copyright 2024 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288) * golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289) * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default git-lfs-3.4.1-2.el9_4.x86_64.rpm 2ea09b682fa20ac74e022ceb5e9d0b0962ac167cb8c485dae7c2ce0cb884d2fa ALSA-2024:2758 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240) * CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743) Bug Fix(es): * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009) * mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235) * [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673) * system hangs completely - NMI not possible (JIRA:AlmaLinux-30678) * ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default perf-5.14.0-427.16.1.el9_4.x86_64.rpm 0604f9544852f93c9d927a9903da8c560eb20be2e920773dd13f9cce0db60ff8 kernel-doc-5.14.0-427.16.1.el9_4.noarch.rpm 6f78a2b532e7e545c5b2c34448a44f42fcf5ca898f3b3abba26b8a660583b7ff kernel-debug-devel-5.14.0-427.16.1.el9_4.x86_64.rpm 71a8353582ee9de3734552e2e143e78fad7ed19d5e0016f200b2264574af47b0 kernel-devel-5.14.0-427.16.1.el9_4.x86_64.rpm 7e26e247c24b882f622192de5de2cf14d4cb6230326ea6c1f07d9a802dda45ac kernel-devel-matched-5.14.0-427.16.1.el9_4.x86_64.rpm 84a6e38fcd03641cd9a95c8b1438e9995d55ea647c7dccc2e49fa55cf37b7598 rv-5.14.0-427.16.1.el9_4.x86_64.rpm 96698b89adfb40d7158d6a99aca4e86cfdbf802fcf0e4b8f84a26a6b99b4328c kernel-debug-devel-matched-5.14.0-427.16.1.el9_4.x86_64.rpm 99df31da9ae7d52c3c1fe502b7d8129bf555bd07d04a69937261d68a2d07ed80 rtla-5.14.0-427.16.1.el9_4.x86_64.rpm cff3cf45d8a9323b751c47a777f0efacd12ba29edfff3b209ad77d5aed9b86da kernel-headers-5.14.0-427.16.1.el9_4.x86_64.rpm edc6779afa252e7dafbd946bea00ec14d8b9a475e6b333ce83b920df631189d4 ALSA-2024:2779 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: CONTINUATION frames DoS (CVE-2024-27983) * nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025) * nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982) * nghttp2: CONTINUATION frames DoS (CVE-2024-28182) * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default nodejs-devel-18.20.2-2.module_el9.4.0+99+a01f7676.x86_64.rpm 3bdcc40b0d169f60e579adbd75fd37f01a9fa1f31f529475393e30d426621240 nodejs-docs-18.20.2-2.module_el9.4.0+99+a01f7676.noarch.rpm 5046029717db3f41b95ac1e0a4d7e166800f21dcaeb1f00767c2fdb2498e7df7 nodejs-full-i18n-18.20.2-2.module_el9.4.0+99+a01f7676.x86_64.rpm 56173548dce369afbc5448b4d3b35d9070f9e60533af84fd4626330fcf72150f nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 npm-10.5.0-1.18.20.2.2.module_el9.4.0+99+a01f7676.x86_64.rpm 93dd320eb71046bcfbf90bafd5cad9ca608272228df929d39eb637cf5a36ef19 nodejs-18.20.2-2.module_el9.4.0+99+a01f7676.x86_64.rpm de41eb565929e269feca98939a3d65cfc8e9bad768db04862fb65157d82d543e ALSA-2024:2842 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5. Security Fix(es): * dotnet: stack buffer overrun in Double Parse (CVE-2024-30045) * dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default dotnet-templates-8.0-8.0.105-1.el9_4.x86_64.rpm 0de1cac2622e514a98315bd1027e0abc919c6697f3d76b18ae54013fbea5e56d dotnet-runtime-dbg-8.0-8.0.5-1.el9_4.x86_64.rpm 1de3333790c9532a937900bd2349e7361d01eeceb5fd855eca7a1506a58107c9 dotnet-runtime-8.0-8.0.5-1.el9_4.x86_64.rpm 2e68f571112478c5b3d48fa6d64969321e168ea69844bad05e78d3eec931a496 dotnet-sdk-8.0-8.0.105-1.el9_4.x86_64.rpm 3f8c3c34dc9e4bb12cacaa7256a5bf94966c594299fd215823d5d8e4fa813a13 dotnet-hostfxr-8.0-8.0.5-1.el9_4.x86_64.rpm 417552959323d1e193ee2131ea66ff8891f795f7ff8daeb9f68363ea4ae893b2 aspnetcore-targeting-pack-8.0-8.0.5-1.el9_4.x86_64.rpm 5725bd40766ce0359778cdfd3c31d59d6c736f79dca96fa442fae23ee085d409 netstandard-targeting-pack-2.1-8.0.105-1.el9_4.x86_64.rpm 6a89c59df17028f39b3f914ad81fe685a1c1d0e2f13a29de622ed5a9e9938a5c dotnet-apphost-pack-8.0-8.0.5-1.el9_4.x86_64.rpm 7ab2659cdccf4ad553699b0d9d8f3bf31311f75412059cdb24752d82c9158bd2 dotnet-targeting-pack-8.0-8.0.5-1.el9_4.x86_64.rpm 7da7b7f4e8f023a898e77a81930bb9e0eb1cbc04d575d65545be1027dbb02a71 aspnetcore-runtime-8.0-8.0.5-1.el9_4.x86_64.rpm 8d5d8932d315742fb3b6c2ee079a37e0be52d897da9223e2a1a5c048cc276145 dotnet-host-8.0.5-1.el9_4.x86_64.rpm b38c9964e3c67b12acdd83923422cc209d2b626fa2b13997fc8e94b11abb3de6 dotnet-sdk-dbg-8.0-8.0.105-1.el9_4.x86_64.rpm c22875095838bc8a4dc7e1dc7d7cf9dc6b739972373d6d6879488af971e57443 aspnetcore-runtime-dbg-8.0-8.0.5-1.el9_4.x86_64.rpm c4b4d442e56f5bfcd06b8621f2f9b1389ed894800605a42b9d3fc73e9c6afba7 ALSA-2024:2843 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19. Security Fix(es): * dotnet: stack buffer overrun in Double Parse (CVE-2024-30045) * dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default aspnetcore-targeting-pack-7.0-7.0.19-1.el9_4.x86_64.rpm 558e583b9b80ca8ac2a5ac30030868f11c0da390c4d825c3674ead1b492860d4 aspnetcore-runtime-7.0-7.0.19-1.el9_4.x86_64.rpm 598f9ff0cce52f09cf81ec09fa535a362b949d78abf9af449f4db49fc8238bec dotnet-sdk-7.0-7.0.119-1.el9_4.x86_64.rpm 6e16784fb97ced8270433ed46e3d5af39aea2353570890d5bc02eab9a908419d dotnet-runtime-7.0-7.0.19-1.el9_4.x86_64.rpm b81cbf4c3eb20e64575818e10d5b5ed0e5a94b2d05ae1559c0fd90b841b978a4 dotnet-templates-7.0-7.0.119-1.el9_4.x86_64.rpm c053cabb27b6f6756a0f793f2801ad43e8f112649c5f7cbff4f7b166f43a458a dotnet-hostfxr-7.0-7.0.19-1.el9_4.x86_64.rpm c50824d31fc87e5f1d155d5806e0620a7caf9dbb5e27fc97921c5fb4b3378463 dotnet-apphost-pack-7.0-7.0.19-1.el9_4.x86_64.rpm dc566cad8314a0244a0c491448f02c94cee20350973be6081124734790eb7069 dotnet-targeting-pack-7.0-7.0.19-1.el9_4.x86_64.rpm f11bdcc768f67c756c89b100c6e96fa943ed0c148771813545701b9834ecd119 ALSA-2024:2853 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) * nghttp2: CONTINUATION frames DoS (CVE-2024-28182) * nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025) * nodejs: CONTINUATION frames DoS (CVE-2024-27983) * nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default nodejs-docs-20.12.2-2.module_el9.4.0+100+71fc9528.noarch.rpm 0ba467930563644df03005a17524df078431cab3658d3ee5b9a819179762c049 nodejs-20.12.2-2.module_el9.4.0+100+71fc9528.x86_64.rpm 2ff8408cfdf4ec7266e9795eed02f67a8299dcc62f2d9cd04c9e4060772a6475 nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm 6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f nodejs-packaging-bundler-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 94ac92c4ae695d87df9c616a6d3ecafca411d07358cf60516392e320eefcb3c6 nodejs-devel-20.12.2-2.module_el9.4.0+100+71fc9528.x86_64.rpm 94df3f920d7272a33bd17bf817fe58d7f09764acb6f2e1bed59c36526b721126 npm-10.5.0-1.20.12.2.2.module_el9.4.0+100+71fc9528.x86_64.rpm ca37c6ff79f307d87c33be332a46dce9d7d8959f6b437c572d0ee6a02d679d6f nodejs-full-i18n-20.12.2-2.module_el9.4.0+100+71fc9528.x86_64.rpm ca692f856d0739c2dca5884e2256c2afb41ca4351f33de2ddbdba614341102a7 ALSA-2024:2883 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.11.0 ESR. Security Fix(es): * firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767) * firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768) * firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769) * firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770) * firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-x11-115.11.0-1.el9_4.alma.1.x86_64.rpm 58c9e8af8ae322c6f1ff003f9f5283b0ee1396a6d56380766374ce61f60d4b92 firefox-115.11.0-1.el9_4.alma.1.x86_64.rpm 5d469a71daf853aecdc061f01fd90031211e20cecb238f43d9289bb59f0c079a ALSA-2024:2888 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.11.0. Security Fix(es): * firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767) * firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768) * firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769) * firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770) * firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-115.11.0-1.el9_4.alma.1.x86_64.rpm 0bf83f699f1692358c870fbebb9167933d77fbfbea243a5bfabb3db829e5a13a ALSA-2024:2910 Copyright 2024 AlmaLinux OS 0 1 Important

nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: CONTINUATION frames DoS (CVE-2024-27983) * nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025) * nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982) * nghttp2: CONTINUATION frames DoS (CVE-2024-28182) * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default npm-8.19.4-1.16.20.2.8.el9_4.x86_64.rpm 053aa6c94d983659147ee500fe278e37a56c806efc56218a6a07b7a57cd89826 nodejs-libs-16.20.2-8.el9_4.x86_64.rpm 4583c065b9174a82a4137dc0c75c139715cf6ac23f294c1f79a4bf87a54bf708 nodejs-16.20.2-8.el9_4.x86_64.rpm 6ce14aca83f7379c6b894b66e2dd9649926facd24814d9367fce19fe46bbeb9b nodejs-full-i18n-16.20.2-8.el9_4.x86_64.rpm a069ab5d77d1be776634164ecbb0dac05c300e28077c463e4d37392cb0c1053b nodejs-docs-16.20.2-8.el9_4.noarch.rpm b1b792b69a5411822d1b67865bfa0e978b9dbeeb54e65ac1739ca4d446ca1803 nodejs-libs-16.20.2-8.el9_4.i686.rpm c1d81463c422ae9b5039af176412f56a0325b4736450f2d1eab293d78ce71a14 ALSA-2024:3306 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673) * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-devel-5.14.0-427.18.1.el9_4.x86_64.rpm 141d934f00ba1b8cbc902308c793e1ebe31b6664c6a758cfbb0bdf9c9414c126 rv-5.14.0-427.18.1.el9_4.x86_64.rpm 20347019a66cbe42e430835ba33ed148dcc67d7e9c40840565beefb3071eca10 kernel-doc-5.14.0-427.18.1.el9_4.noarch.rpm 4a845b6d8740ef83d332d1ce8b7a50fb36d3eb855277cea863aa8360b5ae886c kernel-debug-devel-matched-5.14.0-427.18.1.el9_4.x86_64.rpm 7fa66dd7ede66334489cab6b45530299fb6de11ef54d1d6b6c7126d07d7a3f53 kernel-devel-matched-5.14.0-427.18.1.el9_4.x86_64.rpm b13e63a893be4e963aeff85882492bdea1dd80a6eb5a8fb1d51c5a8a53d0a64c rtla-5.14.0-427.18.1.el9_4.x86_64.rpm b5f84b740d97302c6d187c122c9ee3816d71ad36f6157dd4c528f2dbff01b61a kernel-debug-devel-5.14.0-427.18.1.el9_4.x86_64.rpm bd722c50926cb33dde8f454414551b4d42541b487ade7dc103306fa1b62cf3ac kernel-headers-5.14.0-427.18.1.el9_4.x86_64.rpm dabdc408630d5eb7512903602ab53338c03110201e12c47f063b7204233746e4 perf-5.14.0-427.18.1.el9_4.x86_64.rpm ee0bb81a921584ad9d669443f84c69595ea0db0e446fbe84d1cdd260733612ac ALSA-2024:3307 Copyright 2024 AlmaLinux OS 0 1 Important

tomcat security and bug fix update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) * Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) Bug Fix(es) and Enhancement(s): * Rebase tomcat to version 9.0.87 (JIRA:AlmaLinux-34815) * Amend tomcat's changelog so that fixed CVEs are mentioned explicitly (JIRA:AlmaLinux-35328) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default tomcat-admin-webapps-9.0.87-1.el9_4.1.noarch.rpm 46911e3fcb7bb32ce6d7d81c6698016965d3dfa9f3ade42b26e732dcab6e9307 tomcat-lib-9.0.87-1.el9_4.1.noarch.rpm 5511b3cd77efb66f00bf306124bed6a090b4a389f4bb4e48ede9c632400d1fe6 tomcat-servlet-4.0-api-9.0.87-1.el9_4.1.noarch.rpm 55f1470202d68436d5fd10ff5277d39df5927d895900c2f28f5e4a43865dff55 tomcat-docs-webapp-9.0.87-1.el9_4.1.noarch.rpm 5c1c7654f603de561dd9dcb1b43070e39e7dda1bef73d488674d16b3cf4a3076 tomcat-jsp-2.3-api-9.0.87-1.el9_4.1.noarch.rpm 5ef90b8d4e322bd28bc710cd268bd41d4618900d553a1a7fb0ed7ab2cce4e85b tomcat-el-3.0-api-9.0.87-1.el9_4.1.noarch.rpm 67e1fffe94eb51ff39131c4ea514e47e8b9c29a8b6f8844dedb77d5017b82a69 tomcat-9.0.87-1.el9_4.1.noarch.rpm b709e0f99858126ef0e3035d83810b8e0b9345bcc35eb0c15dca2a5a5f7abc51 tomcat-webapps-9.0.87-1.el9_4.1.noarch.rpm c494ce9d83a4ea89b913b175b6144beeb28fd0a6c1d8fb03ad6c108094850b51 ALSA-2024:3339 Copyright 2024 AlmaLinux OS 0 1 Important

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (CVE-2024-2961) * glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599) * glibc: null pointer dereferences after failed netgroup cache insertion (CVE-2024-33600) * glibc: netgroup cache may terminate daemon on memory allocation failure (CVE-2024-33601) * glibc: netgroup cache assumes NSS callback uses in-buffer strings (CVE-2024-33602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default glibc-devel-2.34-100.el9_4.2.i686.rpm 2c830943a834f95af04c850219a14cfc16323c4e009319d294afd8f627afae0b glibc-utils-2.34-100.el9_4.2.x86_64.rpm 3657363a8b4c58e6988448b8a8f1938c84050192c3b388df2f2bbd39db43b5ac glibc-devel-2.34-100.el9_4.2.x86_64.rpm 38fd518637d2bbfc58aa310accdcd99633f57d24cac98bc50286880aa8d9821e glibc-doc-2.34-100.el9_4.2.noarch.rpm 48321f383378f0cf27fb6f86b30c2e16ff71d185127f15398de09ce5f88cf5c1 glibc-locale-source-2.34-100.el9_4.2.x86_64.rpm a796c4a0f0f57500762deb8023809b6e86c631b007708d28e9e85962d9ed2da9 glibc-headers-2.34-100.el9_4.2.x86_64.rpm da193af5f0413a3f7d71a9ce464e99256b498464142d1e9bfde0f7395315df80 ALSA-2024:3619 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735) * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-headers-5.14.0-427.20.1.el9_4.x86_64.rpm 07a053e466c7a04a1332b0cdc07715517a85f4b8b1516ec8e2ca281acd37aa55 rtla-5.14.0-427.20.1.el9_4.x86_64.rpm 3ec858bdc4580617edddf8334561b501fc5b5609b9bd092ac72a5c6b5b47f8dc rv-5.14.0-427.20.1.el9_4.x86_64.rpm 4266d9b4a0a96c4a54e1a6c6b9b7859375f1f2fe41daba9400bed1eb4befaa1c kernel-devel-5.14.0-427.20.1.el9_4.x86_64.rpm 978ae7b39abbbf8f487627e149cc13ca926e6636d489f73491b51a8a22dd26c5 kernel-debug-devel-matched-5.14.0-427.20.1.el9_4.x86_64.rpm a527710c71d18d5e33360a09e362cd85dfb051532e0b3d16058a45ce4ed17fb4 kernel-doc-5.14.0-427.20.1.el9_4.noarch.rpm adc196792686bce2e8a341674ec0d450d7d08ce4d32cfd2313aaec3c818d5677 kernel-debug-devel-5.14.0-427.20.1.el9_4.x86_64.rpm c747c168b04ddf47036e629462a5d9017cb23b64dc63de5165e5dc33aa8b2ad9 kernel-devel-matched-5.14.0-427.20.1.el9_4.x86_64.rpm cb76ee51182918a9733c26b9403844d2fe882debd9ae02441f7a73faf2f98555 perf-5.14.0-427.20.1.el9_4.x86_64.rpm fe6d074d9a80d75a7cbfab6b6347f63e96ae4c6d319c718d80b62c28eb63b1f4 ALSA-2024:3668 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-35449) Security Fix(es): * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280) * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281) * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default rubygem-test-unit-3.5.3-144.module_el9.4.0+101+d58a8d95.noarch.rpm 1d60045ef82a5bbeecbc2287592b1591b55700fae7fd399d58baeef25a1f0e50 rubygem-typeprof-0.21.3-144.module_el9.4.0+101+d58a8d95.noarch.rpm 24cb1a7c1e4aeda56fa4fcdf89d1ff6b077ff837e0e687e9ae7cd7480aefd145 rubygem-rake-13.0.6-144.module_el9.4.0+101+d58a8d95.noarch.rpm 30d7cb20ddee1557f047d9b4b1d9b26b4087c95a76053d5bd4ab5a143c73fed8 ruby-default-gems-3.1.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm 393efcc1c737ca8aafadf7e5e3efd4ad73d2781b7659373f27fabf02d3e28fdc rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm 47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8 rubygem-psych-4.0.4-144.module_el9.4.0+101+d58a8d95.x86_64.rpm 49057e8b8f904d42c7683aaf6739306d2b618a3bdd4572b9b9b977f0b4e24865 rubygem-rbs-2.7.0-144.module_el9.4.0+101+d58a8d95.x86_64.rpm 573f44bf9e116e4f6a3c81a49a842bd2f6c36aa18831d01104b556ab1df1211f rubygem-bundler-2.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm 74e82c75f35c48e200bdd0f13040c5d8cae6d4ab74ed7769e59622008baed436 rubygem-minitest-5.15.0-144.module_el9.4.0+101+d58a8d95.noarch.rpm 7641fcb6f89c336a71ea20debc329a809f96b29e9dc4563a574ea5cb8a62797f rubygem-power_assert-2.0.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm 92d64262b45999e76de317aad96cb770b73720d55e9ebfd275207ddad00c3d86 rubygem-rdoc-6.4.1.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm 9bd1632b1cb4319201859701f1eaf84666419345c170ef93cd47ab4031829429 ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.x86_64.rpm a3b9ad4f673b6a8619b175c4a3a1fab84df864add3bdaa366e9f1e70174615ed rubygem-io-console-0.5.11-144.module_el9.4.0+101+d58a8d95.x86_64.rpm aecadd6b4b60d12ee243eba8614377e97d1de8de70b8237982aa401485bd8e9a rubygems-3.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm bc697c3ad63d00ee0bad232fea31d960c9b955859ae4dc256d87c278f8d0f0da ruby-doc-3.1.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm bebcbffa554dfed194d3fc1212ba3d01dd89f3a6ecdda3228069f2a3d6ddb640 ruby-devel-3.1.5-144.module_el9.4.0+101+d58a8d95.x86_64.rpm c03e3db160d65468d907facb6192eac72b2d593bc74498fddbd48e9bdb3aac9d rubygem-rss-0.2.9-144.module_el9.4.0+101+d58a8d95.noarch.rpm c09830da0af358c4dd7f61e57c051158c302433acc0274930fe76e2b6b983c4a rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4 ruby-libs-3.1.5-144.module_el9.4.0+101+d58a8d95.x86_64.rpm cd51731befdb50cacba3c22e2b2c4b917bdad5bd9d04fa1800465a64e67e1097 rubygem-rexml-3.2.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm d395d040309f58998acea87e2743d77e76cf53c44ebdfa3fe0fc26ce092eda60 rubygem-bigdecimal-3.1.1-144.module_el9.4.0+101+d58a8d95.x86_64.rpm d4cd4d83f7fd2e720cb2b2ebd5dcf969db2caf23162464fcb2643a7e69ba3266 rubygem-irb-1.4.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm d7f12808af01af69e86302277c2e88e8e91350d449160799c77eeb4af8509670 rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.x86_64.rpm dab19da2b0c280cf81790d96e39c50f37e61ff0e70a7b591600f76f8cc8d96df rubygem-json-2.6.1-144.module_el9.4.0+101+d58a8d95.x86_64.rpm e1615d435b80d402ba4677139656cb3b39452dcec2193a983b11a5ffe461fbf0 ruby-bundled-gems-3.1.5-144.module_el9.4.0+101+d58a8d95.x86_64.rpm ea2a2a53ffc6ef000d91416a9ff7f4dd581bab734f67d562f65b3f0b5e57e7df rubygems-devel-3.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm ee39f8098869a8f763ea082ee44bb91041439215ed3a24be7172710e3bd45917 rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.x86_64.rpm f19ded1c673d7431f2562b768ca31c5d92eba38bb0ec8fe3aaf608b1e63e36d0 ALSA-2024:3671 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37697) Security Fix(es): * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280) * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281) * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default rubygem-psych-5.1.2-2.module_el9.4.0+102+68a93853.x86_64.rpm 048a38ef285fe9f603af61af1b135eb982693be8c0960600c9df526d683df48e rubygems-devel-3.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm 05ba48bdeda8e01d3470d0bf7d33015690b1997e4bb25d0fc69797c9afae1916 rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.x86_64.rpm 2306c7e3f20481fc2c29d0b4f67e34aea30d3a54f36d98be8976311447864da6 ruby-bundled-gems-3.3.1-2.module_el9.4.0+102+68a93853.x86_64.rpm 24d1ae3981a753ccf31d40e026e1cdf03d5330615d392bc1d64ac755f6ac7535 rubygem-bundler-2.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm 27a30884ae6fa12a9de09ee3bda1973c07c6d60abf1f973faffc4cc1738f44a6 rubygem-rss-0.3.0-2.module_el9.4.0+102+68a93853.noarch.rpm 2c429b7a055c6f9b412d5ee390ec6c0a88dea2567435dfae5cd4ad42b5e166d1 rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm 37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58 rubygem-racc-1.7.3-2.module_el9.4.0+102+68a93853.x86_64.rpm 4840d8f1a1c805f5e01fce7ff1d74fc7412920db116d18698ef28825fe22391c rubygem-rbs-3.4.0-2.module_el9.4.0+102+68a93853.x86_64.rpm 5079432013da4b8f4d14fc6cd75a7e0a1e518be5c669aa60313f61b5a28a33fc rubygem-json-2.7.1-2.module_el9.4.0+102+68a93853.x86_64.rpm 53322ba7119372aa25456c74b94aa954720dbf9d4e75f7ee1baec35120df176f rubygem-racc-1.7.3-2.module_el9.4.0+102+68a93853.i686.rpm 54ce792e3cac44fb8e5a69fe5dc3f67d87f8b14b0c999a916837cdd9a6ef76d4 ruby-devel-3.3.1-2.module_el9.4.0+102+68a93853.x86_64.rpm 56fc5c8ff82f97bebefb054145f57c45f0933c9149327bf043bf5e71ac1cd2e4 rubygem-rdoc-6.6.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm 57e1d24b92a4a14badd87e0c44c6f5f8c0bab776be40835bb728b02d64e8f009 ruby-3.3.1-2.module_el9.4.0+102+68a93853.i686.rpm 60ff2326a15339e8eb48a8c696406cc93ef1076d004b83b1588ca5e9c7a1ba74 rubygem-rake-13.1.0-2.module_el9.4.0+102+68a93853.noarch.rpm 6424338c8361e0e095543455d2612460c41532b09272bc16813805ea300bbde5 rubygem-io-console-0.7.1-2.module_el9.4.0+102+68a93853.x86_64.rpm 651e307cec141b591c1cd7562923adb076b57814bc9c47ba173784130e61fc3c rubygem-mysql2-doc-0.5.5-1.module_el9.4.0+75+1a8fe981.noarch.rpm 65b0d0cc45f0088e7962db0543b7f1672cbc730924b371f28cdda18a25b33edf rubygem-test-unit-3.6.1-2.module_el9.4.0+102+68a93853.noarch.rpm 66cbe8756ebbeb78a8260b97a493cd2652d462769355328be41b2161ba0321ea ruby-devel-3.3.1-2.module_el9.4.0+102+68a93853.i686.rpm 66f509fae6dc5713971f8251a8f0165e5c99dbdd5932ed124792cc165f192386 rubygem-rexml-3.2.6-2.module_el9.4.0+102+68a93853.noarch.rpm 7c87bbd4e24e647635f83b56c1eacbe966a0b069e0fd2b111ed825ef4f5247dd rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.x86_64.rpm 7e81c000c66bad27864ea6a2747f3b90f2192d71866e7e4bc4a26a34ac2ec27a rubygem-irb-1.11.0-2.module_el9.4.0+102+68a93853.noarch.rpm 853620c2a9729478a537a057938c253494ff63ce1fd4c042303ba942d9ac2640 ruby-doc-3.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm 867cf153f94223d8490a1f00567be22df60179b5cf18b7afa9ed1895fc1bccd3 ruby-default-gems-3.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm 87859f05ea0fe77e2e991a2b42083f3ffdfa0a25c19d4577bddf6e9ee95c4965 ruby-bundled-gems-3.3.1-2.module_el9.4.0+102+68a93853.i686.rpm 8ef9c125681d6dc22e6f21e562f5bd3ccc55019793a2e4c4a22a81093a5ae06b ruby-libs-3.3.1-2.module_el9.4.0+102+68a93853.x86_64.rpm 929687ab399a8979a12602e81120f8798d38d6bb699af0ac08997392bc30ec29 rubygem-json-2.7.1-2.module_el9.4.0+102+68a93853.i686.rpm 9e7234e803d3de25705684c6f06c84693ef4db94a78e16fcd557dfe5c2b84aae rubygem-power_assert-2.0.3-2.module_el9.4.0+102+68a93853.noarch.rpm 9f45f58c8fd93f89f7b1471e8e904876abde5bf3381d6811bd19c9cf5ab7ab93 rubygem-bigdecimal-3.1.5-2.module_el9.4.0+102+68a93853.i686.rpm a1a9e0ca7170cd0abbb9691ac93b8dcadd090fc8c126b1805ac94211a2bc8a02 ruby-libs-3.3.1-2.module_el9.4.0+102+68a93853.i686.rpm a312e0be42db30411055482b51fa66e4f45d6a937d15e8223f69925a1d29aa91 rubygem-typeprof-0.21.9-2.module_el9.4.0+102+68a93853.noarch.rpm a73909cc8567623583c4366b91370617bfdf02a0f098a2402b2b90b279bda810 rubygem-rbs-3.4.0-2.module_el9.4.0+102+68a93853.i686.rpm af48e91508bebc080ecff3c7c39f3125e6ce1f00ef994b5e7ffa5346c779a08e rubygem-psych-5.1.2-2.module_el9.4.0+102+68a93853.i686.rpm b63e2d153e521b812ddb6f28bd7e96f6657c0cc8ac2a5a91469e72ac5555fc42 rubygem-io-console-0.7.1-2.module_el9.4.0+102+68a93853.i686.rpm c0b16fbf83140e55ab9bd140acd3883903658eeed466c7cf5196ee7748686afd rubygems-3.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm d7e394a7d6504872209c8e49a4adf8c212a55ab52ac30e81834535b8788a0b49 ruby-3.3.1-2.module_el9.4.0+102+68a93853.x86_64.rpm db626df991b9b4e95ab91a227f22853437db2cb745b989115afd3312a6353445 rubygem-minitest-5.20.0-2.module_el9.4.0+102+68a93853.noarch.rpm e288892ef6dc536761fff9f15fb42502eb7c4cee7dd69426b95dd69290bdfe42 rubygem-bigdecimal-3.1.5-2.module_el9.4.0+102+68a93853.x86_64.rpm f43c660ffe8e16069a14291bad4cdf4bb641cc923316503fa37a066e539e169c ALSA-2024:3754 Copyright 2024 AlmaLinux OS 0 1 Important

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698) * freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default ipa-client-4.11.0-15.el9_4.alma.1.x86_64.rpm 2436b84c546c032ce01839b15662ee657053436add091955da423c70cb048b6e ipa-server-trust-ad-4.11.0-15.el9_4.alma.1.x86_64.rpm 2d8e2219f8c14438722fd7bd65ee0d092b12fcf639694f7d72b9b8adf57dfe1a python3-ipaserver-4.11.0-15.el9_4.alma.1.noarch.rpm 40a4154db8aac39968fc4f7cf327863ac3f3bd8919b4dc68e6c14a4ab01eb5c9 python3-ipalib-4.11.0-15.el9_4.alma.1.noarch.rpm 4685c4ad0d7809b20234c8c41abd2c35f8e846c30823f4a51f5b2cd7d3a5021d ipa-server-4.11.0-15.el9_4.alma.1.x86_64.rpm 4ddc297bc952f64994890f4f0158a3378f14e1f6358d917653cf0c302a85b1b8 ipa-server-common-4.11.0-15.el9_4.alma.1.noarch.rpm 78c12a5600633f1655b2a35f3b63d7b39c0f49136f53f5fbf1f43b90763e9534 ipa-client-common-4.11.0-15.el9_4.alma.1.noarch.rpm 7c8ab597afb44822aa519229f86d7b7cfb15bbaecd4c98b86ef69236c3b69f38 ipa-client-samba-4.11.0-15.el9_4.alma.1.x86_64.rpm 8134c96d3d2618f54da4b2e619183412c2310a22ac7483d990b430f8a0527041 ipa-server-dns-4.11.0-15.el9_4.alma.1.noarch.rpm 94b714cb309d009eb644237221dbe3f71e52bf8c8a8e51d5d146782776c0cfa1 ipa-selinux-4.11.0-15.el9_4.alma.1.noarch.rpm b7912916951acae4663a14ab6732f523cd11b4e839c61cb35d699ac5a136f38e ipa-client-epn-4.11.0-15.el9_4.alma.1.x86_64.rpm d3eb115859ca9f494c1d5da9222104f8c8351d90c42e9158157ab4e3152be6f7 python3-ipaclient-4.11.0-15.el9_4.alma.1.noarch.rpm f39f0f73b007711341356b8af46f1f1e4e354a48afe1770649cafa532bc42a24 ipa-common-4.11.0-15.el9_4.alma.1.noarch.rpm f4e82a031b6db79bb4ef20babac0d8c4f972deed8860231e96bfa98c15ca5c11 ALSA-2024:3820 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * jinja2: accepts keys containing non-attribute characters (CVE-2024-34064) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default fence-virt-4.10.0-62.el9_4.3.x86_64.rpm 0b1baee896f7b41e181bb08f72fa70decea8d98d185497cd249585980cc7ae28 fence-agents-ibm-powervs-4.10.0-62.el9_4.3.noarch.rpm 14a5c427e4ffff4b128e8c325243492da2b3a4deecb11de0ef93675bc786bbc4 fence-agents-ibm-vpc-4.10.0-62.el9_4.3.noarch.rpm 22454a2b95edf73814a9bdf1010542ab73940ec252e8cc0ae8bfbc1cb3bfec03 fence-agents-kubevirt-4.10.0-62.el9_4.3.x86_64.rpm 25cd28bb847cf363311f63420e722574647f2c38689cde0023dc9a691eb0d984 fence-virtd-cpg-4.10.0-62.el9_4.3.x86_64.rpm 2e1050544875959693c9416edd209cae06e57f1fc4e4d5a39b08dbec0e0d4c6e fence-virtd-libvirt-4.10.0-62.el9_4.3.x86_64.rpm 5159ceb8e68cd5b5bd7ef5f11885003b86b936771925c0f405bb0650cf3144c1 fence-virtd-multicast-4.10.0-62.el9_4.3.x86_64.rpm 69871ef24a417df6c22e119358f10a83275eef775ecc6a75df92e798f638efd5 fence-virtd-serial-4.10.0-62.el9_4.3.x86_64.rpm 7d6f60e9927b1eb4fbf6b46a05d85f3122ec67990266337f4e1f2b139aacf866 fence-agents-virsh-4.10.0-62.el9_4.3.noarch.rpm 931740abb4c2d76c045b121cad133b3e1a58482fdc5efd1067e8936886714353 fence-virtd-tcp-4.10.0-62.el9_4.3.x86_64.rpm bd05f611bae02021ad54b28df675ee77de8e74fd0552c6907900d731835d1a0e fence-virtd-4.10.0-62.el9_4.3.x86_64.rpm bdb141eedb122dac5018f142b65d725075d141c5148239bb35f43179c1049cb8 fence-agents-common-4.10.0-62.el9_4.3.noarch.rpm d3caf2e25a1f6a35cbd868b45f8a672e3964f1f16964b934663b4c87f34834e4 fence-agents-compute-4.10.0-62.el9_4.3.x86_64.rpm e7bd13ff010eb32247ab7579b1bf8f93ba5e7c3eb49a70ec5075690f7e75ef54 ALSA-2024:3823 Copyright 2024 AlmaLinux OS 0 1 Moderate

rpm-ostree security update

The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and rollbacks. Security Fix(es): * rpm-ostree: world-readable /etc/shadow file [9.4.z] (JIRA:AlmaLinux-31852) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default rpm-ostree-libs-2024.3-3.el9_4.x86_64.rpm 0317b02fc32e76f55eba21467324323c000b5c4aa2993a91dc7ba9cb7b9d504d rpm-ostree-libs-2024.3-3.el9_4.i686.rpm 0a1000d6458ade51dbd395110705e977a831d688b670dda60759de7cf29ca86c rpm-ostree-2024.3-3.el9_4.x86_64.rpm cde92e7a9e9b42820ff675e347fe4785316c757e9c4e538d1bf72d4545ff8376 ALSA-2024:3826 Copyright 2024 AlmaLinux OS 0 1 Moderate

podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: * podman: jose-go: improper handling of highly compressed data (CVE-2024-28180) * podman: golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * podman: jose: resource exhaustion (CVE-2024-28176) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default podman-4.9.4-4.el9_4.x86_64.rpm 403ac3175eb2958960029c3ff99e96f9ff320b6a56bdf9734abfd9dfd2913cd8 podman-tests-4.9.4-4.el9_4.x86_64.rpm 4b055705592cdf83afb2f24b293bc04ad028b690ffa17743ca4bd009f61692fb podman-docker-4.9.4-4.el9_4.noarch.rpm 9d79c85548bc603fddea4f740cd5337264900f7281d245c93a4d92712d0a83cb podman-plugins-4.9.4-4.el9_4.x86_64.rpm c5d9a17a59c118505abc859f36232ce5807b6c94509ea68d7ed534d7c363dff2 podman-remote-4.9.4-4.el9_4.x86_64.rpm ed24226999c47a9b8a9664b85315ba39af440f894add8bf9f84efb592dac35e6 ALSA-2024:3827 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security and bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * jose-go: improper handling of highly compressed data (CVE-2024-28180) * buildah: jose: resource exhaustion (CVE-2024-28176) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-tests-1.33.7-2.el9_4.x86_64.rpm 14ae4a7ba048f6e1f5c6342872e1693932692582c36c39dbd323b32f2a93662d buildah-1.33.7-2.el9_4.x86_64.rpm 9463328ca397f88e4cef2e39c24628f953e14aeed754cd6b2f748cf5660dac28 ALSA-2024:3830 Copyright 2024 AlmaLinux OS 0 1 Moderate

gvisor-tap-vsock security and bug fix update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.x86_64.rpm eb415374858059252f28eafcf43dae2e93a22a69b8e173e85cf6a64d7e225305 ALSA-2024:3831 Copyright 2024 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security and bug fix update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm db983cfabf7e7a95a55324b67815afe4b0c8bbfc188676ca9e19eb9d29fdde30 ALSA-2024:3834 Copyright 2024 AlmaLinux OS 0 1 Moderate

gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gdk-pixbuf2-devel-2.42.6-4.el9_4.x86_64.rpm 0f7eeefc7a24776d8974b21252991751642afb41fac2428f27876092bdf087cf gdk-pixbuf2-devel-2.42.6-4.el9_4.i686.rpm 15e5ebf735eef9a556d6478717f848186a1b254178e11005f973c26f0a04c9dd gdk-pixbuf2-modules-2.42.6-4.el9_4.i686.rpm 2bc014c25b7c1c06138adfbb61018620b5e964e8fc1e229860e61faa4f4551ac gdk-pixbuf2-2.42.6-4.el9_4.x86_64.rpm 41530adc43e12814594fcb833720d40cb000f072c8fc7e5dc53f3c6eccc29418 gdk-pixbuf2-2.42.6-4.el9_4.i686.rpm 60fb2b6876bdb04a6d67c5459470e4ff83b24316e21ede16becb3af0e281061f gdk-pixbuf2-modules-2.42.6-4.el9_4.x86_64.rpm d5c21eaf0548777e1edaa26cfc482a8916d8849916781703454a603578b5a2a1 ALSA-2024:3835 Copyright 2024 AlmaLinux OS 0 1 Important

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution (CVE-2023-6185) * libreoffice: Insufficient macro permission validation leading to macro execution (CVE-2023-6186) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libreoffice-langpack-ve-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 000b09072a3f251d687600fe376c1efb84e1affb938386f752190f2e4f250b88 libreoffice-langpack-nn-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 002fd8f1327521d1007c32247485cef2745f4b18cf87425a7c70fb7c197de19b libreoffice-help-dz-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 018a3542c1c365d82b6e4310f0b728e9e50cb951ee0978485c34fcd98aec0151 autocorr-ca-7.1.8.1-12.el9_4.alma.1.noarch.rpm 02329fa7e5a0e7da7dd4bba68bc1c4fd83456d40dbba7879678ee62d8eb922ca libreoffice-langpack-te-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 02c0ad14a8d61231a2c9132f294e326a33601935b044d1c34d264527c5f9fee7 autocorr-da-7.1.8.1-12.el9_4.alma.1.noarch.rpm 02c8f4deacff2600cbc0f0a519f8e7f5c5ae251ff8b5f9ae390b75f4da40ec21 autocorr-lb-7.1.8.1-12.el9_4.alma.1.noarch.rpm 04d41aa4d935411483398b2c03fec611c44ef42a1f1e2b0d9a1257f9473c8d03 autocorr-fr-7.1.8.1-12.el9_4.alma.1.noarch.rpm 051159f352efc090758d94235826c60a93cfe9526127cd68e5793c784b598bb2 libreoffice-gdb-debug-support-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 052d16ffaff54ec85bb5cc631eca4f384bbbc41eb980277ae8a12059388fa2a7 libreoffice-langpack-fi-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 054ee7689f04db6c3825e029906ed61cb83fa1facacac7b0902e231667d74260 libreoffice-langpack-as-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 0d9aaded1578511b3db47a75348aed3c9006e2733a87ef5f1aaf74aab26a47c8 libreoffice-langpack-zu-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 0da294784d2562ece0f6004b333c66aa1e7f70ae82856dd557b8673611f95e92 libreoffice-help-si-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 0e7c9225f7290b2f652ee5d26eb6f521a704af4b625bfe5f77ce89e80c8dba49 autocorr-sv-7.1.8.1-12.el9_4.alma.1.noarch.rpm 0eb7cb0f9f3af8118462b356cec124a914ef6cd7ca13137610e8802824670273 libreoffice-data-7.1.8.1-12.el9_4.alma.1.noarch.rpm 0f0680c80a17ccdff48b834592d372076b959103e7872176f180134ca14026d9 libreoffice-langpack-pa-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 0f54544571dbc6a4fe097b4b63381df8811296330fea15d9552ddda804f5b0b8 libreoffice-help-cs-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 100762f87f31c343801b331a2e2e91aad0eda7298ee6232de13c96f4d0bd241a libreoffice-graphicfilter-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 11c7a68835b2c6489c484ef58ffb38a70ec72b3ee7742b2d6edd022046fca5d0 libreoffice-langpack-cs-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 13336d4a98db853d44a57bb5edffd1c20faf78bcfea1ce180c64e4d3904bdc88 libreoffice-langpack-zh-Hans-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 15a91b043968eb85aa530e4890029a4d4c353f8787ff3434d81433316881ed8d libreoffice-langpack-ml-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 176fbe94aa2bcf78952aec00380de7f3a63a929f97e15fcdd08d244ca4fb6d82 libreoffice-langpack-lt-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 1ad04ec730c8ce94a2f2bee5f4073d63968795989deec496d44db7502cc521a5 libreoffice-langpack-ts-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 1f484d38a180fcfe91bad0f82b910d9be330777e22f95af420b90f2418c03b7f libreoffice-help-it-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 1f9316d1a0ccb900bc2977a26e6f4907e4b387e00b9c204429abdba25c57fb02 libreoffice-help-sv-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 208fa44ef20688758377e04fdfb8fc926601e33f9e5e397266c324f4a94482b0 libreoffice-langpack-mai-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 213370801d5866c62eaecead24965f82858408dcd71b434dd1f7611928ead013 libreoffice-langpack-ta-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 2138eadb34db088d3f900eff60d9febd90f1a08fe5c58dda6f13ab21f552db9b libreoffice-help-et-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 23152658bee96ec2da7a8f6a6c4d1b7a61e1961d05b8d68724794d05f6074e17 libreoffice-langpack-ss-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 23f50d1ca1a8def16cd1c343e42cc86ac2bab1ef63fc1b596a3920ed97ee581e libreoffice-help-gu-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 2431df8d97ee00b3260236df18b6b157ada4cedfc27ffed1dbf4fbf50a244b47 autocorr-tr-7.1.8.1-12.el9_4.alma.1.noarch.rpm 26471a15b4a501a8d3f9040494ca5f5496638116c5af1584a7342e5c82023454 libreoffice-langpack-nb-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 2b8675e3451b828ca795f8d39497f9573827365a504af8d99cedbdcbcd301a8c libreoffice-langpack-gu-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 2c9475c08c6292f90ca90da5483c9e0f6c78dcef8a2c19778a02209eeb74b6a8 libreoffice-langpack-nso-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 2cdb9370400eaaaa5a5fa879b295fea54edd55a8d271969218ed62844c79e947 libreoffice-langpack-af-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 2d3e29f6d6b4d4976cc4ee7a45f0eeb3deb9ba8b33254fcd0915d9e0e44e7432 libreoffice-langpack-xh-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 2d6c2a376d16fdec8fe6152def1cfd838b70ffdfab93bcdd6f66c15bca45f959 libreoffice-langpack-br-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 2f61eec75eb12a25d78f69234e981cca54f6369e33c71ab57aaf80cbcd4d821d libreoffice-help-nl-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 321350a6b6f0be10afff969f7ab21150c07300c12780d5dd9391eed6e3080f0d libreoffice-writer-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 3250eb6bb6a33390743109532d794484cebd6184f8e292b4b804fa1f32336e6f autocorr-pt-7.1.8.1-12.el9_4.alma.1.noarch.rpm 34b6fd3a86e00a0f01e5306f71ea6f8bc627fee1c4691890a14e28c45e9609c4 libreoffice-ure-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 34e233b472da2826e3ef3ac0b15b85ef5fda778a0b9e8d4bd01366670fe3b41c autocorr-hr-7.1.8.1-12.el9_4.alma.1.noarch.rpm 351582cde30bd561d4c550c4d816497971807e517f096e720f1290ed575a1936 libreoffice-pyuno-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 37f1df1aa48fe6c3f035de125632663481fab581bb420fa3d1cfeff73ab0e23a libreoffice-impress-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 38d403960ddb5e50e09edf4b2bd15de6d8ce3cb25b88090ba8239c6ad9ccc9e0 libreoffice-help-he-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 3abfe5f82d8b39fef98ee2c25b0a18fee2659790308929cdcbeeee8644a9ed18 autocorr-is-7.1.8.1-12.el9_4.alma.1.noarch.rpm 3bde270ffb7d49d8b97a10c64dfa489bfd7107b003b37a946505e032c0e6c4fe libreoffice-langpack-fa-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 3ca910961c6995008893b09d9b200396fd51a7b6e585fd7794472770ea2e1e61 autocorr-ro-7.1.8.1-12.el9_4.alma.1.noarch.rpm 3e3e7c46230b3d8b15553bd339cd1d17ef7b22da3a9b2077c4e6bb72716e034d libreoffice-langpack-tr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 3ff4e39c6dc019c10b6e2d5ac5e411919215e779553fe24a6342b588f2c68275 libreoffice-help-lv-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4007bb7109e14dc9437c121ca2409c53ece35ed19e3a35626f33adbb097df661 libreoffice-langpack-eu-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 44727837541e03a72334fc8551ec6d359c1014c668239fef8bf35fbbb4758d12 libreoffice-xsltfilter-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4634cd46051e89d34a722e9ff60dd0868620765c1adc8a0c7bcc970d216bf1ef libreoffice-langpack-lv-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 486777449fa6a7eccd8718fa7454f9a44be4a5fb8ca1d084286c77ec8839ddc7 libreoffice-help-el-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 49228a515d952043612158b386fa6f548114a2b8a40db324eea7587339939678 libreoffice-langpack-sv-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4a86efbd567cdc34aaa695a28803fc3ffaa6db7b2b36673c9e09426d2a87f235 libreoffice-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4ab8472228b125b5b57c0136c3f1d2436c36e1ffd5230fb36f52bec133210c31 libreoffice-langpack-fy-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4b04efc3250a0d624b0609e8860507ea45fa14521f511928e932d05e0598268e libreoffice-help-es-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4b22955e71f1e2e2143e266b6e5deca60d2e6fb0e2cee3f7e25f3d1fa8d32aff libreoffice-help-ca-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4d10b28b941526b06a34d5c57f2c0cce936ed1f95a40ecfe86c0870379c0299c autocorr-it-7.1.8.1-12.el9_4.alma.1.noarch.rpm 4e582024e498300fa1a3c059d5552769050f581299d3dc22a45755fd58272b30 libreoffice-help-pl-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4f66b5a02a0a26d709ab3f05f42121ac220c6e3e5135d0260c24695bd0ace526 libreoffice-langpack-id-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 4fe5e3ea1ab8dabdd646cc38423cd0894073557e3adb15ae4c0b05eec471dd61 autocorr-en-7.1.8.1-12.el9_4.alma.1.noarch.rpm 51ef5432ec735945c5e258870ac5ec0be74fa1662f7b7a7538924c8dfda83af4 libreoffice-langpack-da-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 52e39d3e1ff4e6977a995041942e528155c90387530efef63bcee79af9a8d0b6 libreoffice-ogltrans-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5318b55f79a3af8aadfe60347d3f5aa5f7ec5a69ee69c43534e5885a52b3f610 libreoffice-math-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5364dc633239a50cf3765efc0888b4909cd43f3aca0636ccf02b463f2166acda libreoffice-help-zh-Hant-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 568dad5dde027aecb61e5b9be490083fa0f407b7a4531674c806a97d042ef73b autocorr-fa-7.1.8.1-12.el9_4.alma.1.noarch.rpm 58c97e3494bba6f7096a318498f3b74f50d554a694b1412cec565812a582c527 libreoffice-langpack-hu-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 595f6626947f43f95058518d4fef051d958ef03f1dffe04512389657b6072131 libreoffice-langpack-bn-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5b37478658197aedd0b6cdf2d6399676e917023469a515e0af0be66102bc4ed8 libreoffice-wiki-publisher-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5b96e67a6719d3315badb05e92daa0fec33a7164ae2992c34da2fbe4f67c3f7a libreoffice-langpack-el-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5bbd1f1a000b311023d00a574eac732e33edaf281acbd2154f5f45dc85ec1c32 libreoffice-langpack-st-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5c3823ae102770922ed12e7134a0d5c5faa816676e6ad26e537962cb6dfabeb6 libreoffice-langpack-fr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5f16e3c1319833c460a02b2cc95a6eedc06a8ec0064d0598b82fe7ac6fecc2b5 libreoffice-help-pt-BR-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5f2913182c73c74a8c06947a5f5d71ffbfcdb187ca4368da330caa70cb686062 libreoffice-langpack-nl-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 5f5c1290c20fe787c2ab1605fad9676298a77d360f0b8a568ad56f966b2c8d00 autocorr-zh-7.1.8.1-12.el9_4.alma.1.noarch.rpm 604a3205d62f2de15432ced13fe32cf28b5d357de20daf1da87da644c5702219 libreoffice-langpack-sl-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 60a4eb1e9b4a3afdcaf2af6af050aa8749f2a5b5c1c82eadd7ae4ac9b6b80349 autocorr-dsb-7.1.8.1-12.el9_4.alma.1.noarch.rpm 61bd5b1956e86098431a92578562a2b706d3f961d64bd870761c4c1dc46370de libreoffice-langpack-ko-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 66651cf8963e3f18e1fce8d91427390c10f199c98269e46443b537057f245d8f libreoffice-langpack-dz-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 6817ddfea373215e07830c8b20ad4a0ede28f57ca0dedc5060876336501a4ca4 libreoffice-help-id-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 6920b80a577b8bd2902d5233f63bfc82fd6eb81aafbe4ddae705c5831310c4dd libreoffice-gtk3-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 6ac2d7e4d64f49397686824691ff2a8bd370758ab213a1e3da1ca4e697789c60 autocorr-ga-7.1.8.1-12.el9_4.alma.1.noarch.rpm 6c3817e4efb2b0af7f5527138bb74c880864c941c712518e63b8ddfbe1c2fdf7 libreoffice-langpack-uk-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 6c623028336ad803416e87e863479643c913c691ae8e91d9012f0647319d3866 libreoffice-help-hr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 6ca8179d9be1167e671898ac06b7e53e38eedad8bcb34fdef7d3cfe623eedeb9 libreoffice-help-ro-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 6d2c7262c0a5d3d3f56290f350fb73b00c933f32f5c0c1d3157f0d64db07324c libreoffice-help-ta-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 6e03eb27f4d3a161cf48be2c425266eeca8dc282f2202b16667de54632aa8714 libreoffice-langpack-kk-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 753a02d8f7f5598c92ac479d9dc70548ffbb05cd518169e9a35e3dae9233a83f libreoffice-langpack-mr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 7890e7f68f8b436f9cb153d63805cef73eb77115393c7a9e7a4dc127b8ca358e autocorr-nl-7.1.8.1-12.el9_4.alma.1.noarch.rpm 7903c0170e36d9ec67128d61d264a01adcf60db0d1a349c93cd6901cc75d90c5 autocorr-el-7.1.8.1-12.el9_4.alma.1.noarch.rpm 79308e023da222c845b82f7d093983198d6fd8f5f9ae80f425ee8b6dc3e02935 libreoffice-base-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 7a975425d637d0436708c0d9c57808f0675f1127e0718b1facaf4a0925fb443f libreoffice-langpack-kn-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 7d1126b231c7467867d8db717875277aa3d201a3bec8b09a03f828b904fd0af7 libreoffice-x11-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 7f3dadb67bcaf51156fd7ea0255d907db3a2e18dba4316f6df144ed4b066ae54 libreoffice-help-nn-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 82dcba2cf273a4cba9589a7db431e9494cafde5123073e41b8a4da370a3e8445 libreoffice-help-ar-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 8a5952779424150ec4d1b3a2220cd4ad9ae565cda8a848315a99575682066b62 libreoffice-help-sl-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 8b37f3f8ad4c541549ff897ed2468a8ef277b71481c6aded7cdd53f92f513259 libreoffice-langpack-gl-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 8c9a39f26a8ea62705b505b3777d0976de5c751f394ea3e1765c1bc4a08dbe69 libreoffice-ure-common-7.1.8.1-12.el9_4.alma.1.noarch.rpm 8e3b06f440f1a1cfc897b4bf1ac1220a1f9e937870e90c15847463e5892c8980 libreoffice-help-da-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 8eaa46bf9daa3a6227576bc02437554815e9f7c319c4a059fc48e968f675ab68 libreoffice-help-bn-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 9057a08ae7b62f44f4e548ef6b9e03bf32389590d9e971b8bcc8b1c3b0854831 autocorr-vi-7.1.8.1-12.el9_4.alma.1.noarch.rpm 90ec78a7a23a02aca093db8dda8e0b7d373cf8675e05101c7a5095433e2d9c71 libreoffice-langpack-ca-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 934fb641b15c90ccd0c83563db1ee42ba74b0f94fadce10d42072082fff7434d libreoffice-help-zh-Hans-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 94f2244ec4d82d22f4e433212c183fe90b296b6301ab53d16906621f5d783bc7 autocorr-mn-7.1.8.1-12.el9_4.alma.1.noarch.rpm 9625b41e0b2a841c5a4aad2d619d870b9846244d776e5580134ceef57514da3e autocorr-vro-7.1.8.1-12.el9_4.alma.1.noarch.rpm 9633da2652be3cfb7a0c1a8403b52d978c83bbd99d2b2e08d7ef7f6e1bddf17a autocorr-bg-7.1.8.1-12.el9_4.alma.1.noarch.rpm 990d3ae692491cf360bc38a3641f728f24b15ff8411ac6254245f1a402811a1d autocorr-hu-7.1.8.1-12.el9_4.alma.1.noarch.rpm 998b08b0fe2aaa1299edb90c82de0517abeb9e5fd3898c6cfcd4767a7550c589 libreoffice-langpack-bg-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 9f5e555e062708de2690c742b63b48eb9d98ebe325519dee4f3df781675c6bcf libreoffice-help-eu-7.1.8.1-12.el9_4.alma.1.x86_64.rpm 9f6587125c06cfeaf0535ceff16f409ada5d0edd1d0b1f0c1e4ba93c242667e1 autocorr-cs-7.1.8.1-12.el9_4.alma.1.noarch.rpm a070bcc56f79bd9382f04f0d7b2e6fc4fdf17acd16c50392db3d3e74ce9cee8d libreoffice-langpack-hr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm a0d5d1532d324247ff24c67ea0fae7f595cab349758fa45d8676062f5d8da6aa autocorr-fi-7.1.8.1-12.el9_4.alma.1.noarch.rpm a323d21a958cb2ffbe79b413cf60f197247cc48ec8cfedafd9488f1b1a2df771 libreoffice-langpack-de-7.1.8.1-12.el9_4.alma.1.x86_64.rpm a4e8bb297d33e2dbb223af4d5a4fc66b4b4521d759936d50b05acd4e834f17ef libreoffice-help-nb-7.1.8.1-12.el9_4.alma.1.x86_64.rpm a6f0dfdabeb9a716da7541e5a25aef4e9098e13f576d16cc981254af2c4f81d2 autocorr-pl-7.1.8.1-12.el9_4.alma.1.noarch.rpm a7db04ab2b54020ae630c80e4785f53c56f55270273b9b45d7362e6a582964da libreoffice-langpack-he-7.1.8.1-12.el9_4.alma.1.x86_64.rpm a845c294e16f9735577da66dae2a7d30adc518e2fcd14e0e8a29ad2e13b95b0f libreoffice-help-uk-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ac31823c77344a6f7c3fe5e69bd2bbbb694c09fa03856f6a41907695886cea91 libreoffice-help-pt-PT-7.1.8.1-12.el9_4.alma.1.x86_64.rpm aca3077ddaaf8af03dfaa06aa50247b10034e99067987ed5d4b2b791d0c0e069 libreoffice-help-hi-7.1.8.1-12.el9_4.alma.1.x86_64.rpm acb2cabe4960f74e5aad004af0160d9a3f2def0de4febcc66bec98a83ea283b4 libreoffice-langpack-tn-7.1.8.1-12.el9_4.alma.1.x86_64.rpm adb97560a21f09dfd7498758784bdfa13fe8b6de95a1f928911a6b1931e2630e libreoffice-langpack-et-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ae8d7715445ef5ced6e91ad4d3e10af0f196029f38b73574ff076cf91e0bf992 libreoffice-help-ko-7.1.8.1-12.el9_4.alma.1.x86_64.rpm b10dfd317fb04ecabbcc48fb7ea8b146c9de08bc62bb978e4858db6e53994119 libreoffice-langpack-hi-7.1.8.1-12.el9_4.alma.1.x86_64.rpm b1545f06020ec360a24e30997d11d7f725c49686fba00119c2d4c22a313a5d79 libreoffice-core-7.1.8.1-12.el9_4.alma.1.x86_64.rpm b65c947724b2c2b75dfd547eaf7e3708cf8760d006a4fe3795d79ed5e020a24a autocorr-lt-7.1.8.1-12.el9_4.alma.1.noarch.rpm b83bb5a8d8256fad38ba4420e4ae13bdc8d703a6cde24eefbab5f67e41aadb5a libreoffice-langpack-es-7.1.8.1-12.el9_4.alma.1.x86_64.rpm b8bef8bae5eba9bdd95e2ac9be3ec8deeb912e38abd88775ec8a60e33216ed79 libreoffice-help-fr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm b983eb46cb6062f02417e48c2e4b027865b05ca846c47bed835bd60b3ddb12de libreofficekit-7.1.8.1-12.el9_4.alma.1.x86_64.rpm b9bbfd51c1f74c68f7603046fdce24f99676d5ad397c9762a83fe4204af403a2 autocorr-es-7.1.8.1-12.el9_4.alma.1.noarch.rpm ba374606f39616b9259e8f551d315536d9360713089cd6d2cc6249145479dc50 libreoffice-langpack-sk-7.1.8.1-12.el9_4.alma.1.x86_64.rpm bb83cf7dca9b2724cb885b4b5e89832f0ac7c3208017b9e14de4a42d9fa5e440 autocorr-ja-7.1.8.1-12.el9_4.alma.1.noarch.rpm bf81e2b11eaf60e1808f3f8c2ee26778d5d7d6d6962e145a43df9d42379b8eee autocorr-hsb-7.1.8.1-12.el9_4.alma.1.noarch.rpm c078a218020af3b55f0b4495db435ec5687d90545274cc2a1b24810f526a0fb7 libreoffice-langpack-ru-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c08309cfe8ce5568d82df0f117ea03822395623e0f3eb33ad961c54ec3e77876 libreoffice-langpack-th-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c22bf77ad73f1689032857ee7e08e994fab333485db28161241bd8515fc600b7 libreoffice-langpack-ga-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c3b54f6a425132630766ae08ce9a2bd88a3f648d99c951a9d21c2f5b48ed15f7 libreoffice-help-sk-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c543ea91ca4fbafa0f20ea5b4a457d1ea1ce84da406f1c827431968ecaf032c9 libreoffice-help-ru-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c5fa421d1950a4cae9265436572766f4c7c93889f5f5842e7f36b38225e48c51 libreoffice-help-en-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c63dc5a7e9004828af4008911c59eb0c19553504946463138a7bfb84111999c0 libreoffice-draw-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c6ce74f4d3f36a2948a860b9132e1582c8776b20762ba1f523fb6653fa8b1212 libreoffice-langpack-en-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c86c88aa2267834fba479ec7d22269c4307132e7e22d484e35759707d09b30d2 libreoffice-langpack-sr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm c9a5f3d90f6a128816a57302cacb1d1b8cc9552a32470d7a4c88fdd0b59647df libreoffice-help-gl-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ca1803056b42983d7a8498c1e5624624820a2c53f59ab43992c7d78297ca9c7e libreoffice-help-lt-7.1.8.1-12.el9_4.alma.1.x86_64.rpm cc088f4eb1c87e92a816ecdd0b17dd05788dd3d7b12954f0fbfa86c455d1409c autocorr-af-7.1.8.1-12.el9_4.alma.1.noarch.rpm cc0903de6575a6e87c2e282cfebf777b4eea8f619ea7bdc9eb638506b7a19d3a libreoffice-calc-7.1.8.1-12.el9_4.alma.1.x86_64.rpm cd75db291e5a0c6a3b2f4452977b454cdda30acc38a29702c901dd1fe7661ed1 libreoffice-help-ja-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ce51d1bc971913057b41be57ef482cbc66de9fe5d0f3e163b2a79368a8f10f64 libreoffice-langpack-pl-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ce9380f7506d293eb594b65abbc0718372e47467d01b97753a5bb01a66423c08 libreoffice-filters-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ced3bdf7f1dcc2a32474cd569fe23fc821200d78ac94cfe88b12f658040df6bd libreoffice-emailmerge-7.1.8.1-12.el9_4.alma.1.x86_64.rpm cf8cf5e9db71e229a71525198573bb0223bab7622573494e5a5036f3da1703f8 libreoffice-langpack-cy-7.1.8.1-12.el9_4.alma.1.x86_64.rpm cfd655e3d0852478f19160f486790ac616452ac7e3610399b24f4048f597dcdb libreoffice-langpack-ar-7.1.8.1-12.el9_4.alma.1.x86_64.rpm d16d791f9edc96846ba7cb9a8bee8149030bbd95f8a46bcc27f0bcc1a8536426 libreoffice-opensymbol-fonts-7.1.8.1-12.el9_4.alma.1.noarch.rpm d4eb4ec144af407dd8212c83e8bf79387b6ed711387836bf4c0c3a2e2d48c556 libreoffice-langpack-or-7.1.8.1-12.el9_4.alma.1.x86_64.rpm d5ae79ae48d491bd43c9326429296c28feb29a8273644ec145a6a80a9081f738 libreoffice-help-fi-7.1.8.1-12.el9_4.alma.1.x86_64.rpm d84c39c5bacb11aee3951cbfd78bc72f4296efd6311d2160877bc0aff808b88b libreoffice-help-eo-7.1.8.1-12.el9_4.alma.1.x86_64.rpm d880d2c4d8b609f988d9bebfac7886680840e365df82881a2ab5ab7d0fdfbc67 autocorr-sr-7.1.8.1-12.el9_4.alma.1.noarch.rpm dd6517f86011117dd7d5d73eca58d0fd75d7297e926ecd63b81631c88cbacb0a autocorr-de-7.1.8.1-12.el9_4.alma.1.noarch.rpm e02017ca036419892d84b7fcdb545d16c6f5fd66bb01ddbb986838ad6cf669ca libreoffice-help-de-7.1.8.1-12.el9_4.alma.1.x86_64.rpm e1a34dbd814c71ec48ba8e59e0bbd57385a2272e0ce59f2c6d857de2c7097255 autocorr-ko-7.1.8.1-12.el9_4.alma.1.noarch.rpm e20e124513667e67d98ed17c1ad01be0fecfc2a1509ab7b48c8095b84a1bfd90 libreoffice-langpack-si-7.1.8.1-12.el9_4.alma.1.x86_64.rpm e36faa2ac2f607f8656d6fdf9747fcbe770eab44221236937ec7a4b099c88d18 libreoffice-help-bg-7.1.8.1-12.el9_4.alma.1.x86_64.rpm e92a90b0e0a896b754091f29625b0562e79ef0571a733779b6489f0055ebd7e5 libreoffice-langpack-nr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm e9703faaee72cfd4eb7d449bce4654eda383b447306585267c343c2f7cb450b5 libreoffice-langpack-ja-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ea0f5a6deae9b253e6019aec49bd99b43d216b6b71c70872b42055570124d6e4 libreoffice-langpack-ro-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ed176dd6ee0fd3d5dfef0d4084aca4ca74255d015976ee5a25a75bbc9e305e6e libreoffice-langpack-eo-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ed97df5803f12f5a5814a78badef6dae48b4cc82e555fc31b9cde98825d35004 libreoffice-langpack-pt-BR-7.1.8.1-12.el9_4.alma.1.x86_64.rpm efcbb4f0cd32109d14ae59c30d06810cc42afd818b9fc103dd03e3d40ef29889 autocorr-sk-7.1.8.1-12.el9_4.alma.1.noarch.rpm efd59b87b2526e3ec8417629d303c4e28c04ebc43d6443edfb32df901ac0098f libreoffice-help-hu-7.1.8.1-12.el9_4.alma.1.x86_64.rpm f0294fb56463b3b562204992781d9690979661b35dc9304dd3ef85e088aae1e5 libreoffice-langpack-zh-Hant-7.1.8.1-12.el9_4.alma.1.x86_64.rpm f10d2da7870ffada8f5fd03dad96f1fb6a6e3e1a1f3b52095f6828f8b39011da autocorr-ru-7.1.8.1-12.el9_4.alma.1.noarch.rpm f3dbc5b77ac98314cbf0c12f9044c00f7ecd6eefccbc0d8ede9351bd2bcbd869 libreoffice-help-tr-7.1.8.1-12.el9_4.alma.1.x86_64.rpm f496f49c45e3dbd65969fff06bd07aa6cfd45adc89c178db8136ca592f6a9c4d libreoffice-langpack-pt-PT-7.1.8.1-12.el9_4.alma.1.x86_64.rpm fc8a03549399fc936e7c36f5a2249b001e836a94139725f97d658045e696b776 autocorr-sl-7.1.8.1-12.el9_4.alma.1.noarch.rpm fd4587b4116c03a914f5835f872dc5e1c6ba6c9d1f7f35b6a217bd669f71da83 libreoffice-pdfimport-7.1.8.1-12.el9_4.alma.1.x86_64.rpm fd791632e986155c6c97cbf292dac749d1af106f2982f51b957a6151a51ff407 libreoffice-langpack-it-7.1.8.1-12.el9_4.alma.1.x86_64.rpm ff0c5796285951ad9d02e789188cfe15deb162484ae82bbc71c9ae735e4c0e31 ALSA-2024:3837 Copyright 2024 AlmaLinux OS 0 1 Important

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-lib389-2.4.5-8.el9_4.noarch.rpm 13a71cd517eeffda1384aa1a720f66dafe47f1f2d381a2f852010d50b9d829aa 389-ds-base-libs-2.4.5-8.el9_4.x86_64.rpm 8589fbaeff803fdd82376b3116b5b23ddc0bd70f4730ff80f07e844c78b0f799 389-ds-base-2.4.5-8.el9_4.x86_64.rpm a881e73e5afbbc95cb8fdffdd72011bab6e297cbb0c159cad546c623dd346c42 ALSA-2024:3838 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.0). (AlmaLinux-35740) Security Fix(es): * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621) * ruby: ReDoS vulnerability in URI (CVE-2023-28755) * ruby: ReDoS vulnerability in Time (CVE-2023-28756) * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280) * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281) * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default rubygem-rbs-1.4.0-162.el9_4.noarch.rpm 0bfac6c9da7968b64d54a690969dd309c9b0150643e757efe6dc85ddf5c357d7 rubygem-irb-1.3.5-162.el9_4.noarch.rpm 1a34a95184a16559ec775224458fbb4e5d7eafa8b02c14b4d4de241a4ca24669 rubygem-rss-0.2.9-162.el9_4.noarch.rpm 1f466276d00158edc966eafaf20af5d2d8a47c474fb3cada1c487659c8046b4b ruby-libs-3.0.7-162.el9_4.i686.rpm 293ce88da73c5284fe01817c33be9df8b5d15b335207afb32c4acac3ae3f0903 rubygem-json-2.5.1-162.el9_4.x86_64.rpm 2a5a33a74873d4464a9455f07be1e989a7bc499368cde6c646f47d10b89dc74a ruby-devel-3.0.7-162.el9_4.i686.rpm 2d5ff7c1f89aeb3ba53a1943741603444c6ef6bceae8f70f576d0b19a932ee08 rubygems-3.2.33-162.el9_4.noarch.rpm 347e4dc030a5241683a27f18c647f3fc0e7dbc9bc5e785a0da30335cefdefacb rubygem-rake-13.0.3-162.el9_4.noarch.rpm 35b188eebdbd09683b30a8af5a3624c9964b3fc780c7d77b6583461424e5224b rubygem-bigdecimal-3.0.0-162.el9_4.x86_64.rpm 3f2764590aa62c313ca6ab1c474daee87fcac040f6c35f70296f641c16dd847e rubygem-bundler-2.2.33-162.el9_4.noarch.rpm 3f4a2346edc0c1c3446d3c66bd2ba64ab24f0742412b59c537f08239a2dfd5c8 rubygem-typeprof-0.15.2-162.el9_4.noarch.rpm 530717f0a8bfbc3fb92b8b8a71d3926c0f2f55b22c1488d92b58cb5635b99891 rubygem-rdoc-6.3.4.1-162.el9_4.noarch.rpm 61efa2918d01d92c6a737ab7b3dd698635ccdec9026edab5146425418db962b6 rubygem-io-console-0.5.7-162.el9_4.x86_64.rpm 66c0f8191b06510ad9941e2815051a6d2d296dd61590658b417276f5d3d8bfbb rubygem-psych-3.3.2-162.el9_4.x86_64.rpm 78754e73e62b4de8e98fd29b89a29d76365540f20f001eda7dd61a977aa334b0 ruby-3.0.7-162.el9_4.i686.rpm 8ce9b5e85bef1835de9a0887d79f7a2833d6bc67f1570142c9f2cbede241d602 rubygems-devel-3.2.33-162.el9_4.noarch.rpm 8f176439e95a09833a724cde74b7c078b093659ea59454aa38b5f428c8f73480 rubygem-minitest-5.14.2-162.el9_4.noarch.rpm a78beda206af7255e4d33f11d78b0a9c1fa541abafcfc7741c0fb00104fe3a80 ruby-devel-3.0.7-162.el9_4.x86_64.rpm abbfe6417747fd29c12c260b32ee718af3c50eb3285a833dc6180600a4211041 rubygem-power_assert-1.2.1-162.el9_4.noarch.rpm cf9abec31ee790b95caeb7f3611af2fbc5682a93248f60c4a6f5db1bcd237bc2 rubygem-rexml-3.2.5-162.el9_4.noarch.rpm d0278393db1ac1c2f56329b1d47402c84a38afdb0e76f78638b80f071db40dfd ruby-libs-3.0.7-162.el9_4.x86_64.rpm d4239d1798ea18f74d8103221ebdfb86bbd90572bddd4bb4d4712ff27451c0f8 ruby-3.0.7-162.el9_4.x86_64.rpm eb7f945c8e3ad14aeaa027be6551828cca5f8cbbbf8f8317c82ab6edbdb53d38 rubygem-test-unit-3.3.7-162.el9_4.noarch.rpm ecfdbb201207f939bafee5ce30ab3977262636e2f73b28218e6d63628828dc5d ruby-default-gems-3.0.7-162.el9_4.noarch.rpm f6809eb4fbdc71511e0819d5b7b419c0f51d8e2ddaa37a2c79e09159f9fa0586 ALSA-2024:3842 Copyright 2024 AlmaLinux OS 0 1 Low

c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default c-ares-devel-1.19.1-2.el9_4.x86_64.rpm 7fdc30208754d3a6743820e89932ebaf829c4c2df6311dde95659ab243ec0799 c-ares-devel-1.19.1-2.el9_4.i686.rpm 8f9e5a66f438a60a9b242f985f4a9e66dde54292a82df8c37686295982ef1970 ALSA-2024:3843 Copyright 2024 AlmaLinux OS 0 1 Moderate

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: command injection when deleting a sosreport with a crafted name (CVE-2024-2947) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default cockpit-storaged-311.2-1.el9_4.noarch.rpm 76e5c124290b224d819d5972ea581ed9d4052781b70e0fda74d8928cfd15a193 cockpit-packagekit-311.2-1.el9_4.noarch.rpm 84700784182c44b69c2e4e620d94e50da125720aaff9f5c88336d5bab327e19f cockpit-pcp-311.2-1.el9_4.x86_64.rpm fbbc9a7d1076662394a743c9f53afd17e5933d123665a7ebfcb69f85bb40bb80 ALSA-2024:3955 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.12.0 ESR. Security Fix(es): * firefox: Use-after-free in networking (CVE-2024-5702) * firefox: Use-after-free in JavaScript object transplant (CVE-2024-5688) * firefox: External protocol handlers leaked by timing attack (CVE-2024-5690) * firefox: Sandboxed iframes were able to bypass sandbox restrictions to open a new window (CVE-2024-5691) * firefox: Cross-Origin Image leak via Offscreen Canvas (CVE-2024-5693) * firefox: Memory Corruption in Text Fragments (CVE-2024-5696) * firefox: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 (CVE-2024-5700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-115.12.0-1.el9_4.alma.1.x86_64.rpm 35821c6a3af859ed66a6549d4ae75be5baa3365cda477f7feb8313dd610c4cbb firefox-x11-115.12.0-1.el9_4.alma.1.x86_64.rpm a7ab7d43a20f8dde50af9bdfd79c32412481a7316ea04779058c9f7662408520 ALSA-2024:3959 Copyright 2024 AlmaLinux OS 0 1 Important

flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default flatpak-selinux-1.12.9-1.el9_4.noarch.rpm 06dbdc42d81b1aa97d49382abf1808b9d53376bbb4a4a4027fea7bd61fee8ef3 flatpak-1.12.9-1.el9_4.x86_64.rpm 362ea95341d064350f07ffa0eb1bc1eb615032e29c5f6cfad2ca312987df7274 flatpak-libs-1.12.9-1.el9_4.x86_64.rpm 6d9ab8b766ac0a1c212a64c1b643592be9d0589c902c0c6188e7d179aa520bfe flatpak-session-helper-1.12.9-1.el9_4.x86_64.rpm a8ca0f320c844aae343e6943f41985bee17e3e584af0ed3443204746458d0d73 flatpak-libs-1.12.9-1.el9_4.i686.rpm cabf222e4f765ccfabb3a94e53e06263f0111f26fdbb3f490099fb2ad4ebc888 ALSA-2024:3999 Copyright 2024 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libgs-9.54.0-16.el9_4.x86_64.rpm 5305fbad4c7c645f1ab21916b0640c524a689d191f75dedb4d298f94f89397e3 ghostscript-tools-printing-9.54.0-16.el9_4.x86_64.rpm 65a4fbf3957f9b5c2da7ca2f82dc17aca826ca3d9bc6cb5f08ac1b7feb637954 ghostscript-9.54.0-16.el9_4.x86_64.rpm 74144c1346106c3f2ef2ad4084c539e916e879e54b47fa014b3f1c389932007b ghostscript-tools-fonts-9.54.0-16.el9_4.x86_64.rpm b65eb5cf72c345f605012abd3dbbd7bc7247c1cf31dc880b900e87f18c90326f ghostscript-doc-9.54.0-16.el9_4.noarch.rpm b8e54a1a0e129bf71e2635e8d3b1905f49d2d8d1681c229a2c0615d591858cf8 ghostscript-x11-9.54.0-16.el9_4.x86_64.rpm ba3d6514af7c94ec88cab5c015236cab1759084217fc751dbbf2edebaa9afaf5 libgs-9.54.0-16.el9_4.i686.rpm c7aa9347e17401ca9b1f58b4ffc4e11a82674f9324c92d20af8b5234eb3bd02c ghostscript-tools-dvipdf-9.54.0-16.el9_4.x86_64.rpm ca18bf50dd8741ff7b69253e69b40df733000ec25f8bcbae19f83b59119d48b8 ALSA-2024:4002 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.12.1. Security Fix(es): * thunderbird: Use-after-free in networking (CVE-2024-5702) * thunderbird: Use-after-free in JavaScript object transplant (CVE-2024-5688) * thunderbird: External protocol handlers leaked by timing attack (CVE-2024-5690) * thunderbird: Sandboxed iframes were able to bypass sandbox restrictions to open a new window (CVE-2024-5691) * thunderbird: Cross-Origin Image leak via Offscreen Canvas (CVE-2024-5693) * thunderbird: Memory Corruption in Text Fragments (CVE-2024-5696) * thunderbird: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 (CVE-2024-5700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-115.12.1-1.el9_4.alma.1.x86_64.rpm 3b323666ec94e5a347f3ce8322c134a499a9cac1d6c95ecb709dc19d372b2614 ALSA-2024:4050 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv1 default AH/ESP responder can crash and restart (CVE-2024-3652) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libreswan-4.12-2.el9_4.1.x86_64.rpm 129f91fe503f8284a1f18c01ea7082937b6074dd4c64b908f49eea51e68fae46 ALSA-2024:4077 Copyright 2024 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-3.11.7-1.el9_4.1.x86_64.rpm 06d88f768ec8cfcd70150a78719abb06efa10b6e75b752298f42ecbda80d4d69 python3.11-devel-3.11.7-1.el9_4.1.i686.rpm 136e1b615451b7affe0cee566f437f6e0fa902edcb7ebd882be94f1e5a76ba36 python3.11-libs-3.11.7-1.el9_4.1.i686.rpm 3041d4b8d0c8d1830ec1db069ad13ffd999bcf115552373c6c0ce3f6f475e112 python3.11-libs-3.11.7-1.el9_4.1.x86_64.rpm 702664eba5e8711f1fc7a9f99180d4e0c2076f674b01cd14f7de9fdb2e26effe python3.11-tkinter-3.11.7-1.el9_4.1.x86_64.rpm 97cf073b19879031c6b72e884739f62813a31abb12b358f8ba229d3caf5d1d68 python3.11-devel-3.11.7-1.el9_4.1.x86_64.rpm eda381d89567c4f171dba899da38c3fb3d05878ade194d740bb6a43109498d55 ALSA-2024:4078 Copyright 2024 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597) * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-devel-3.9.18-3.el9_4.1.i686.rpm 6f5e8a387aef0d1f828ff43a9ee648d337a0a372694129660d09e0fe614a2877 python-unversioned-command-3.9.18-3.el9_4.1.noarch.rpm 9a6e6fe85c1bf82d97516b4b79184dca8e7bfa773926061af401ec530726cca2 python3-tkinter-3.9.18-3.el9_4.1.x86_64.rpm e460ae6e3b5f3a7fb171f0846132f8249f3295d451f05a7ce1f403de81cd93c2 python3-devel-3.9.18-3.el9_4.1.x86_64.rpm fbe550d176a8796a09eb3a557ea966038b5e44e72f19f87940b6aa53118bc712 ALSA-2024:4083 Copyright 2024 AlmaLinux OS 0 1 Important

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: Recursive clones RCE (CVE-2024-32002) * git: RCE while cloning local repos (CVE-2024-32004) * git: additional local RCE (CVE-2024-32465) * git: insecure hardlinks (CVE-2024-32020) * git: symlink bypass (CVE-2024-32021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default perl-Git-2.43.5-1.el9_4.noarch.rpm 1040a006be76c4ab6fd587de6b2fa2e1057bd491b4f06108f566b973f7ff606a git-instaweb-2.43.5-1.el9_4.noarch.rpm 1f9e2bb9dc7ce2e5c6cb9fd782c5ba444ca18027e0797dcd0dcc16ec6a45b7a0 git-subtree-2.43.5-1.el9_4.x86_64.rpm 2864157044c760f0779b2fbe72494fc90d0f2090490650aa26d5b374e5eb18bc git-daemon-2.43.5-1.el9_4.x86_64.rpm 306ec7de34558f01dab0e4d066b1d1c2356d03834434ae09e94f65257825884c git-email-2.43.5-1.el9_4.noarch.rpm 32d0050fb7bc85092b757aaa20509941905d6b5ec6ef2f2a03a3637ef6395cce git-svn-2.43.5-1.el9_4.noarch.rpm 3c041a3de73ac67dd10243e216a44ae32a67422bf16ecf9e868cd559e1edaeac git-credential-libsecret-2.43.5-1.el9_4.x86_64.rpm 4b15fc53ddc3766250634c9b2e3ad97424f2552b6d664d90c6ddef7a23e6944c git-core-doc-2.43.5-1.el9_4.noarch.rpm 6b0bc3f5051fd024621c98f25ea0044cea0719dac8157201a77f3428ce1fe3f3 perl-Git-SVN-2.43.5-1.el9_4.noarch.rpm 6d13b9cadb4d3d0487071cca7ab6c7b21fb70d7f8fd059e85c90e906997eaa67 gitweb-2.43.5-1.el9_4.noarch.rpm 834cee01896b8d3c1ea3c6351f7f03f353216f4f065ba1c49a2b3751ee3ceab4 git-core-2.43.5-1.el9_4.x86_64.rpm 8b77fe1edac41c36d4eeb787be11f5ed763f036a46cb0d58053321458f908647 git-gui-2.43.5-1.el9_4.noarch.rpm a62589f893188de99786f204c82ed8ad898034c02c545ce9ce3859676b33de8c git-all-2.43.5-1.el9_4.noarch.rpm cb02f0771e12424bdffaa9757eaf1efe1d904baef497b67a9975795806ada690 gitk-2.43.5-1.el9_4.noarch.rpm d072cfefaf0501cf3ef324a529aa0775bafe170547712c65b752d8b83b6d88ed git-2.43.5-1.el9_4.x86_64.rpm eb8643e9968fdf3b12b544356c3fe63908801c44bde6ad0995bb12a5872216cb ALSA-2024:4165 Copyright 2024 AlmaLinux OS 0 1 Important

pki-core security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * dogtag ca: token authentication bypass vulnerability (CVE-2023-4727) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default idm-pki-est-11.5.0-2.el9_4.alma.1.noarch.rpm 1066184cb7ab11c16786d87d07aee621f77f99a40acbe01ff2936d4f74b65684 idm-pki-ca-11.5.0-2.el9_4.alma.1.noarch.rpm 33727518f6f149863858eb0c0b76291ed3820887f2472706cf922c7f9d5c589f python3-idm-pki-11.5.0-2.el9_4.alma.1.noarch.rpm 415da43ff8c2f53b843ee61509626d5be70ec8910e1991ac91f827fcb34a6f8a idm-pki-server-11.5.0-2.el9_4.alma.1.noarch.rpm 5f69eff8a1800df05aef1387487eda845003e398830e56bf7342eca40c7810cc idm-pki-acme-11.5.0-2.el9_4.alma.1.noarch.rpm 7c7e9e9eeee54e3974d92a8231a87e73ae65447ef192e79b85f8bb641e2c5cd7 idm-pki-tools-11.5.0-2.el9_4.alma.1.x86_64.rpm 8873ba8ddf475e9657c8e4e6cf726193d1594269fa6afa5c860ab1a5c260c491 idm-pki-kra-11.5.0-2.el9_4.alma.1.noarch.rpm 9ee0c6262063e920a116bc74b3bb40a507ebc0160ef441536415189339f9e254 idm-pki-base-11.5.0-2.el9_4.alma.1.noarch.rpm ad4f7b9fc5c178d5b523d7a132583ece79e6403a95495123953bccf7a8246117 idm-pki-java-11.5.0-2.el9_4.alma.1.noarch.rpm ae64b42d15d1c104a579912fd032a3e5c7e80bb67d33d5762bff138a7a26ff5b ALSA-2024:4212 Copyright 2024 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default golang-src-1.21.11-1.el9_4.noarch.rpm 1dc8fe926a6e996a9389af8437654ea05c3fabfd6b1c1ea77b686e1ac6929d4b golang-docs-1.21.11-1.el9_4.noarch.rpm 30626121b356e804d0a886f80b2ef247ba16cc13500f3f03cf97223e5851dca3 golang-1.21.11-1.el9_4.x86_64.rpm 36bd2b1970a09e09b8a162f2c287730b291a84ce186786ba967341834d761bc0 golang-tests-1.21.11-1.el9_4.noarch.rpm 429a278d9e9a73f16399e6c19b78677cf6273b69886bd7c4cb73a9d7dc35a3f8 golang-misc-1.21.11-1.el9_4.noarch.rpm 497a732a5881c550134eec767645fb08778b65dd891c720dca5b5fb8245d8cc6 go-toolset-1.21.11-1.el9_4.x86_64.rpm 527ece32ee0ab65f29cb8909a934406ef9180469d8fa243a3fa33781d7147372 golang-bin-1.21.11-1.el9_4.x86_64.rpm 7a330b550e2bba44916197cedd29e4e96bb36a69b58be8b05b9d4d10167fd48c ALSA-2024:4278 Copyright 2024 AlmaLinux OS 0 1 Important

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write (CVE-2024-4467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default qemu-kvm-device-usb-host-8.2.0-11.el9_4.4.x86_64.rpm 17c6da8adb34d10fb84391642e22630fa66f0c8c4e5eb7dd7fa3f226b8f7bb1b qemu-kvm-common-8.2.0-11.el9_4.4.x86_64.rpm 22b543f3b7f675d0f09d91dafa7cf98f56986790c2362f46ce16c9a31c966d5e qemu-kvm-docs-8.2.0-11.el9_4.4.x86_64.rpm 29bb28a16f152f7a68d9f8790da630bd4cda1cdb0df47fa8a7ee2139ccb1288c qemu-kvm-device-display-virtio-vga-8.2.0-11.el9_4.4.x86_64.rpm 3acb66fa7839c1a8ea5092bc0f86ce4eff81c429582d48b415e016b2ab015e5a qemu-kvm-8.2.0-11.el9_4.4.x86_64.rpm 419d1f114b31645078bda8f77a13583fb45429731d502b62cd22b0ffee8e69c8 qemu-pr-helper-8.2.0-11.el9_4.4.x86_64.rpm 46eb37c3b735dde1e3e9bdf4417050dc307ec71bbd22a8e5483a0e9ee5441787 qemu-kvm-block-curl-8.2.0-11.el9_4.4.x86_64.rpm 486e4c9b19df78e23a86af646ed806b9e922b4a975b5813b39e55d542915024e qemu-kvm-audio-pa-8.2.0-11.el9_4.4.x86_64.rpm 4bbd349f8774f8cc75268fe4ad8ecfdb8c5990294c33151465816d0b7d00424e qemu-img-8.2.0-11.el9_4.4.x86_64.rpm 500f182800cae2029bde5576ba12917361c8e6b268e4aa7f4dd1c72c620013ba qemu-kvm-device-usb-redirect-8.2.0-11.el9_4.4.x86_64.rpm 5fccc13cf55f66161a99ea9e8ab97c4c32643cd0c65743aa5da24ef7d82a0376 qemu-kvm-core-8.2.0-11.el9_4.4.x86_64.rpm 79581f342fb0606bfdf5c333e9a750b9b4104ee2887a659785e9e3ae505d5e13 qemu-kvm-block-blkio-8.2.0-11.el9_4.4.x86_64.rpm 8e4a6b968efa1d2c3ce1c3fce607365ef87be57e7081b15597c657c792245a7e qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4.4.x86_64.rpm b5f4758bcbbf8fb62c845aa2742351643ce7879f8991c60326153c9265b71717 qemu-kvm-ui-egl-headless-8.2.0-11.el9_4.4.x86_64.rpm cb2e632130741570b5e680bc474d942a8b23807e4d9fd1447120ce060d16e7a9 qemu-kvm-device-display-virtio-gpu-pci-8.2.0-11.el9_4.4.x86_64.rpm cb39344f8d344f7997954f92b689ad87dd47fb11d7a3cfff5a3fdef96ea7dfde qemu-kvm-tools-8.2.0-11.el9_4.4.x86_64.rpm e53fb44bc3bda6aec8f27388b91bbf0372fcd5e1a18228b79ca4c6c05c8114a4 qemu-guest-agent-8.2.0-11.el9_4.4.x86_64.rpm e9a5b41dae40607c6a6d18040d1a165cef12d353b4d97a1bc6ccfab12d94f3ca qemu-kvm-block-rbd-8.2.0-11.el9_4.4.x86_64.rpm f606cd8560d99f0f294adc91a5a545a17a7591da33dff9d21378cacd6c10d805 qemu-kvm-ui-opengl-8.2.0-11.el9_4.4.x86_64.rpm fa9281c67bc75925a2ec033c1ac7751cdd0aa4f3dd76a3289fa44798d813324c ALSA-2024:4312 Copyright 2024 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Possible remote code execution due to a race condition in signal handling (CVE-2024-6387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default pam_ssh_agent_auth-0.10.4-5.38.el9_4.1.x86_64.rpm b0da40c07cb6a4a2881c5e7b97d83f4896467b1ec535ce8716b6e7bfa11e24a3 openssh-askpass-8.7p1-38.el9_4.1.x86_64.rpm f21b67a34cc5baa221248843be0a191013e8d893942ba07f32fcdb14d6c24cb9 ALSA-2024:4349 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626) * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801) * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974) * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393) * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667) * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870) * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960) * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400) Bug Fix(es): * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943) * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672) * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220) * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687) * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716) * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641) * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669) * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252) * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595) * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083) * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953) * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-debug-devel-5.14.0-427.24.1.el9_4.x86_64.rpm 2e2df63bc7982030f759ad90aa05c503d19f7f0f2b736482a2f5f00a314411e5 rv-5.14.0-427.24.1.el9_4.x86_64.rpm 5d4b0e24f82372930df6224b0d0d22a5f8d7c01c90844d581de1f34ab6c3acd1 rtla-5.14.0-427.24.1.el9_4.x86_64.rpm 70a857b8b9f7cb2dd8c7e9e006479660a9ddae3394d2244b99c58c9810ff55df perf-5.14.0-427.24.1.el9_4.x86_64.rpm 7167a82e8c5f760abad1fd7ba28f24af1ddefabbab0b84cee2e4ee1c2e792821 kernel-debug-devel-matched-5.14.0-427.24.1.el9_4.x86_64.rpm a3007dc40299dcc67b09b3f656bd6ba6ab3c01811311002b18d69ee175da2bf3 kernel-headers-5.14.0-427.24.1.el9_4.x86_64.rpm baf1a16970a5d743b74c98d21104d99f1f3eae90c4649b886e0f2b849e94f192 kernel-doc-5.14.0-427.24.1.el9_4.noarch.rpm ccc8b24794ad81b3ecaa94f5f3f996e6d38c86928c1aff1394fff26ff7283d34 kernel-devel-matched-5.14.0-427.24.1.el9_4.x86_64.rpm e2904d4013da025d2cb0685e3d2a05c49bb0ca9fe0440995a103b7bac732b4d1 kernel-devel-5.14.0-427.24.1.el9_4.x86_64.rpm e38ae5b3c43f60c2868d963e2fe9bdbe585bf5b2ee1df3eb092a778955c77293 ALSA-2024:4371 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-1.33.7-3.el9_4.x86_64.rpm 433abdfd8cbc4bf8c75c0895b15974da0690304607fec3c0f2b0e2d7e403df3c buildah-tests-1.33.7-3.el9_4.x86_64.rpm dbdbc6a6e94f3da4550734c8d0b70f7df093957b7536513d233236033fb6b94a ALSA-2024:4378 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default podman-remote-4.9.4-5.el9_4.x86_64.rpm 1919955b838d2df8cd92d5ffc2b0153dd8ce753e2bcc611e77eced443793f5ef podman-tests-4.9.4-5.el9_4.x86_64.rpm 553f13552cfb461911442b1c46fa29c5fe221c165f425eb276a9ecbb9ad3ba5f podman-plugins-4.9.4-5.el9_4.x86_64.rpm 86c7a2833b337891981016597bb306816d1790333b3b3daad90f8cdca32f307d podman-4.9.4-5.el9_4.x86_64.rpm ba6ba807c9e03c790dc6aefa09b1b8ea13238d739ea42cdef6066983aa3db618 podman-docker-4.9.4-5.el9_4.noarch.rpm bd559588942879b0c05b245986b0e042e349a97be5ec839cafdfada3f5975d70 ALSA-2024:4379 Copyright 2024 AlmaLinux OS 0 1 Important

gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gvisor-tap-vsock-0.7.3-4.el9_4.alma.1.x86_64.rpm 8888f87707f8fb75c8424448405f08a6553372d7bc8080f974d0f2854abee5d5 ALSA-2024:4422 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default fence-agents-virsh-4.10.0-62.el9_4.4.alma.1.noarch.rpm 065b47140db0c6b670d6296398f699378ee6d552bf5ee62acbecf45acda1b5d8 fence-virtd-4.10.0-62.el9_4.4.alma.1.x86_64.rpm 17959b28bacce5f778e22d8e106cfbd92a9a71f90c850d0486a715a52d482c84 fence-virtd-serial-4.10.0-62.el9_4.4.alma.1.x86_64.rpm 264794163b2ca09dde1dab8e581e371503fd72a737b5b398d05c45bde5a345f0 fence-virtd-tcp-4.10.0-62.el9_4.4.alma.1.x86_64.rpm 2a7479507649853861e276b3c8241917c707fc365b10e532527b7baa06a797ad fence-agents-kubevirt-4.10.0-62.el9_4.4.alma.1.x86_64.rpm 71ec67dba9780d358ac4a444cb822cbead741abba97664c634f26689c2f6e0f7 fence-virtd-multicast-4.10.0-62.el9_4.4.alma.1.x86_64.rpm 82c328ee6c2ba28a84a3f0f924ebbcf90f90bf6bdcd8cd82abe6d785d2e0ee4d fence-virtd-libvirt-4.10.0-62.el9_4.4.alma.1.x86_64.rpm 8c1f61dcfda8ab1c916c3129c95c51d88023765cdb225d529f3ebd7a356896aa fence-agents-ibm-vpc-4.10.0-62.el9_4.4.alma.1.noarch.rpm ba7789db5bc847807bb947e184652a667c987fcfbf2b708600008ce09dd1d1f9 fence-virtd-cpg-4.10.0-62.el9_4.4.alma.1.x86_64.rpm c521a4ae4e528bba43fa975b7f0b46c4ef2b2daa802707c949cf59a5767afb67 fence-agents-compute-4.10.0-62.el9_4.4.alma.1.x86_64.rpm cdfa77a7659398cc4a40d96418c30a83046f64baaee8ed05cf37354f08fcc078 fence-agents-ibm-powervs-4.10.0-62.el9_4.4.alma.1.noarch.rpm e375fa35013dd9c16ff5ab185772111f0f9448825233eae247e25e4528952305 fence-agents-common-4.10.0-62.el9_4.4.alma.1.noarch.rpm e88901f7ef2b32a7cb8313f4901ab8359034ebcbe0cd7b99d77002330b4010be fence-virt-4.10.0-62.el9_4.4.alma.1.x86_64.rpm f4fb2525192354e7546e40be0f5e5a56625a9b528d1e08783815ac64afbd86ff ALSA-2024:4439 Copyright 2024 AlmaLinux OS 0 1 Moderate

dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.132 and Runtime 6.0.32. Security Fix(es): * dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default aspnetcore-targeting-pack-6.0-6.0.32-1.el9_4.x86_64.rpm 0870b88bdba17a8adf2cc1a7f38dfc33b6b6f312e22271b85ad59af8de59450a dotnet-apphost-pack-6.0-6.0.32-1.el9_4.x86_64.rpm 09ad2fb641068e54f17ddb3abfff7efbbb947ffab0538bd151b4d5568e353149 dotnet-runtime-6.0-6.0.32-1.el9_4.x86_64.rpm 0a39920ddc73cd0479792d98cca21e3b2e83677b5e15c3acb0d49409109264d7 dotnet-hostfxr-6.0-6.0.32-1.el9_4.x86_64.rpm 37fa78e164d2dedf84624eacc79423b074a961c72068d8791ea74998306c78d9 dotnet-templates-6.0-6.0.132-1.el9_4.x86_64.rpm 5c41d5ebe0bd69dcbcf23595466d83d8de20dcf9bbfe1210ae61ff926994076d dotnet-targeting-pack-6.0-6.0.32-1.el9_4.x86_64.rpm 6f387e9270c514e4f72db7c5a5cdc4fc53aa7060b18cbb08e19ab7a12780ab89 aspnetcore-runtime-6.0-6.0.32-1.el9_4.x86_64.rpm 8f8f22f9026127bdd0aa0b24732e947512f91a369be1a5c44c2374dc4b777a04 dotnet-sdk-6.0-6.0.132-1.el9_4.x86_64.rpm ed2cc2617337790f9b2bd6725fe83f76a5f2007f79e0ca65fbf3a2d0e45f9423 ALSA-2024:4450 Copyright 2024 AlmaLinux OS 0 1 Important

dotnet8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7. Security Fix(es): * dotnet: DoS in System.Text.Json (CVE-2024-30105) * dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264) * dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default dotnet-hostfxr-8.0-8.0.7-1.el9_4.x86_64.rpm 1df98158ce353e056bde0bdf459f3300145f4ac89110ca818efcdc08b4a2e517 dotnet-runtime-dbg-8.0-8.0.7-1.el9_4.x86_64.rpm 2358cec9fbdd1cc6b39ad8b08f8e9b8faf86ef4ab9592c2c6017bcdc46165e70 aspnetcore-runtime-dbg-8.0-8.0.7-1.el9_4.x86_64.rpm 372e4305d013efc3ac8f69260ee1e48deb9db34f2bf90d89d4980676feab9916 dotnet-host-8.0.7-1.el9_4.x86_64.rpm 387b874424e684b8337d1a6e2c01d50d518569048eb670b1bbbad5de3d0abcd0 dotnet-apphost-pack-8.0-8.0.7-1.el9_4.x86_64.rpm 48b17cbf15917e602efcd9d109427cc7491f444f2fed7dfef61d9bf8393c2b1d dotnet-runtime-8.0-8.0.7-1.el9_4.x86_64.rpm 7b1709a0c1c5c7bddbc6e2832850c94383c8a077ba88e76a13be7bc64c1a6578 dotnet-targeting-pack-8.0-8.0.7-1.el9_4.x86_64.rpm 89a5c32797560030ea4a6d5e7c62fcc1e1fc4909823d281117072ef500e434df netstandard-targeting-pack-2.1-8.0.107-1.el9_4.x86_64.rpm 93c5c6c36f92e303f6927c70fd2b6656535cf9b8412293e0fdab787f7d39de22 dotnet-sdk-8.0-8.0.107-1.el9_4.x86_64.rpm 976adb125c67efdcf7059bb9b5101f863a41be55b282fd2d9ff36d085ea369d4 aspnetcore-targeting-pack-8.0-8.0.7-1.el9_4.x86_64.rpm abb004d52279e10ad3fbe4c6b0bf656c9877bacebedd60e285ca78ef41db000f aspnetcore-runtime-8.0-8.0.7-1.el9_4.x86_64.rpm b9c02019bff559a08855366dfa0669cb85f36e79c772a9d75d942a916187a9da dotnet-templates-8.0-8.0.107-1.el9_4.x86_64.rpm ca8f6f88b661cbe2ae52cc1e6006c37395d37dd705f62b43a5486ed50c56c875 dotnet-sdk-dbg-8.0-8.0.107-1.el9_4.x86_64.rpm ffa4a0d6af42dfa8dfac68e697dcf6844361f1d47c2c3d4a633acb37bcdda952 ALSA-2024:4457 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Possible remote code execution due to a race condition in signal handling affecting AlmaLinux(CVE-2024-6409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default pam_ssh_agent_auth-0.10.4-5.38.el9_4.4.x86_64.rpm 3d1910a53f3921d989221eeba2c1b0fa693d6b1719d314588f90bfc2a8cbff0a openssh-askpass-8.7p1-38.el9_4.4.x86_64.rpm 8d80c3ab8411326f47d520a66d2019a62a1fe16d643071e1ee6d7340778c92fc ALSA-2024:4500 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604) * Mozilla: Race condition in permission assignment (CVE-2024-6601) * Mozilla: Memory corruption in thread creation (CVE-2024-6603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-115.13.0-3.el9_4.alma.1.x86_64.rpm caf3a3e4ccb3d7371843617a91ad04da4eebde173ff0b6e3402242c7849f9c52 firefox-x11-115.13.0-3.el9_4.alma.1.x86_64.rpm e2cbcc3c9e3c4950bb5b28e1cd3b0fbe0626021f8984764659d75381fcba1ca9 ALSA-2024:4502 Copyright 2024 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default skopeo-1.14.3-3.el9_4.x86_64.rpm 5c878115959eaabae51aebd475d757e9dd51e5c411bbdd0e6d6b13cfb74289f4 skopeo-tests-1.14.3-3.el9_4.x86_64.rpm b995998a60cbf18a50207864263fa66e99148fa534fe6b8c5c4e8bf6859b04b7 ALSA-2024:4563 Copyright 2024 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147) * OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131) * OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138) * OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140) * OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144) * OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default java-1.8.0-openjdk-src-1.8.0.422.b05-2.el9.x86_64.rpm 11901c92ea17bc344cb72b34bebc09e61e210fb9fedb33f774cbcb86998cd4c2 java-1.8.0-openjdk-devel-1.8.0.422.b05-2.el9.x86_64.rpm 2034747816d1e620b8c328b99cf47050f0b1ffe6f6a9f21a8e52317729ee5e0f java-1.8.0-openjdk-1.8.0.422.b05-2.el9.x86_64.rpm 49f17633a1f91a77a054c52d605a40b26871734a9981f9c5e0991ad0a8ab7a71 java-1.8.0-openjdk-javadoc-zip-1.8.0.422.b05-2.el9.noarch.rpm 8649a75965b7e20d3dcacb5dccc208506bd9e11401671023bfa8d02dd21314f6 java-1.8.0-openjdk-headless-1.8.0.422.b05-2.el9.x86_64.rpm 959dffb2266374f31823030bb0b81a94221dddeac37efd51bd9b303d2bdd53ba java-1.8.0-openjdk-javadoc-1.8.0.422.b05-2.el9.noarch.rpm ecf55c1f2df39692caf84f33dd4fad0c0b30f4454881f6dfb0afa9dd2f98ebbc java-1.8.0-openjdk-demo-1.8.0.422.b05-2.el9.x86_64.rpm f15a4d0530801da48859dce00f15d2a6dd78a9d1647db5e317267e6ad1abea0e ALSA-2024:4567 Copyright 2024 AlmaLinux OS 0 1 Important

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147) * OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131) * OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138) * OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140) * OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144) * OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default java-11-openjdk-javadoc-zip-11.0.24.0.8-2.el9.x86_64.rpm 1beb0d879d2caec0b0f766a1bc88ff7cd7e934fd84fd690f38719c603378f701 java-11-openjdk-devel-11.0.24.0.8-2.el9.x86_64.rpm 3a5f693db629be80f0c3e41766568ad723fc483cfcc26ca3c77f3c050cbe2b2c java-11-openjdk-demo-11.0.24.0.8-2.el9.x86_64.rpm 406412caa0fdd3fbcff391a19502d020fe7951570f7190d82a252e7af62d2db0 java-11-openjdk-11.0.24.0.8-2.el9.x86_64.rpm 7edfd58265b111c3b431010c10c28685b45ed3bbe17fd66430db98d65b3e9d2f java-11-openjdk-headless-11.0.24.0.8-2.el9.x86_64.rpm 7f27b37fc5c70db005f975ee7c864db94d9ad84d7a2164aeb4af189aa7f3f75f java-11-openjdk-jmods-11.0.24.0.8-2.el9.x86_64.rpm b99ef569c9abd3e0339b128c88c2ca9cd66c0448c610b1458311635c74c2c01b java-11-openjdk-static-libs-11.0.24.0.8-2.el9.x86_64.rpm c1a45b802aa5760b781046dca0d0aa93471936dca0adc809d08c0c6efcd71dc9 java-11-openjdk-javadoc-11.0.24.0.8-2.el9.x86_64.rpm c7e13774f82331e7fff81164881c121cbb6dd7e9f63cf8f66c6abc9c14106db3 java-11-openjdk-src-11.0.24.0.8-2.el9.x86_64.rpm ff1b2c000d0ea16c3fe68444279f18c0869f93b4b4ce7fd070fe125aafc53d65 ALSA-2024:4568 Copyright 2024 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147) * OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131) * OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138) * OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140) * OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default java-17-openjdk-headless-17.0.12.0.7-2.el9.x86_64.rpm 33a3c932da0f80c62b4351f89ba7e5205eb863683d8c62643ea1e506319e9e8f java-17-openjdk-static-libs-17.0.12.0.7-2.el9.x86_64.rpm 3da19f82dc57d6c75d49d76afe49127edb12d6560c7053c0d0a25d2d271f0a1f java-17-openjdk-17.0.12.0.7-2.el9.x86_64.rpm 449ec7e61942cd31815212d3a3f811fbf6a01b87bb42dab0c5c56512e9aa79cd java-17-openjdk-devel-17.0.12.0.7-2.el9.x86_64.rpm 57a41723393b57f188dc10628a563e85d0e525931ca669d2e2953fc001271df7 java-17-openjdk-jmods-17.0.12.0.7-2.el9.x86_64.rpm 81a1385e73a2eec84a5a7638c834f8c01f5034782176862f97defd88f1c581ad java-17-openjdk-javadoc-17.0.12.0.7-2.el9.x86_64.rpm 9684f72ecf5ae43a111d9f033e45336e1e53f69678f613bf82a23ad30a0f8a80 java-17-openjdk-demo-17.0.12.0.7-2.el9.x86_64.rpm f0744fd207aa0cef3255e824f0d4e5af6fa1cfa43855bb38eef652f684dad68f java-17-openjdk-src-17.0.12.0.7-2.el9.x86_64.rpm f6d31b9cc16e77d950a7b36d62e695eb01309df9fc31a73e9720a7b22fa30847 java-17-openjdk-javadoc-zip-17.0.12.0.7-2.el9.x86_64.rpm fc03cae086633491813af7d98333f5c28aa732bd393e26f0b78fd69e7d90c554 ALSA-2024:4573 Copyright 2024 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147) * OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131) * OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138) * OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140) * OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default java-21-openjdk-javadoc-zip-21.0.4.0.7-1.el9.alma.1.x86_64.rpm 24233f283f69e955acb1189375d4a3e2fd103c07762b27a86350db67d51ccc44 java-21-openjdk-jmods-21.0.4.0.7-1.el9.alma.1.x86_64.rpm 3336994bc50ff1965c0fa1b6318b29f40875ef71ad781b9bcf58581be1a8338e java-21-openjdk-src-21.0.4.0.7-1.el9.alma.1.x86_64.rpm 7041100d2e106e65f6340873927bac428796caafcae770393b27f754f2672b46 java-21-openjdk-static-libs-21.0.4.0.7-1.el9.alma.1.x86_64.rpm 77da72b52d6ddf801ae3a0d09d07f8dee41741e04d6f52d0705e652b19f49d16 java-21-openjdk-javadoc-21.0.4.0.7-1.el9.alma.1.x86_64.rpm 8adeec094242bbc99bf5bf5eb49e484e1169ea40bd86c8656c064620fe81ab77 java-21-openjdk-21.0.4.0.7-1.el9.alma.1.x86_64.rpm 9245c2c263baa720ed98832f70dd9e368b1f809e286a693932eb2343a368dd1d java-21-openjdk-devel-21.0.4.0.7-1.el9.alma.1.x86_64.rpm 9aa44bd4cb34cff1cd5bf95128facbf8219c500ef84350a2a0478a80e8990572 java-21-openjdk-demo-21.0.4.0.7-1.el9.alma.1.x86_64.rpm d207fd9572276e0c07e595111fea0ae5d45729ac94d758a362a77f272fc59e55 java-21-openjdk-headless-21.0.4.0.7-1.el9.alma.1.x86_64.rpm e29015d07680db1fa32a5cb03ddaf89c0212854f72a3d2dc9cef09f3bd78d9ab ALSA-2024:4583 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886) * kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548) * kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596) * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627) * kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638) * kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783) * kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858) * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397) * kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435) * kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958) * kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904) * kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543) * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) * kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593) * kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270) * kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957) * kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-devel-5.14.0-427.26.1.el9_4.x86_64.rpm 00a00059e247bdfbdd6c6e99f8fe3c3b666fdd5458bf8b314fb540e6a965e394 rv-5.14.0-427.26.1.el9_4.x86_64.rpm 03beab9d15cedb4286fd214773becf319b438ed9a940447b95417f2eb82ce7d1 kernel-doc-5.14.0-427.26.1.el9_4.noarch.rpm 2fdd15a93267a5bac0ed7269710d1ed6a12ee7fb382a0255ccb72fee8548efc6 kernel-debug-devel-5.14.0-427.26.1.el9_4.x86_64.rpm 499930619ffb615b6ab2c3a60fd3c198eebc27865879459b84a13c34cb005109 rtla-5.14.0-427.26.1.el9_4.x86_64.rpm 6772b13c2f42cf31e6fd163a98ed4d4675b20a81dd949eb9afd8ebc9f3e0418e kernel-debug-devel-matched-5.14.0-427.26.1.el9_4.x86_64.rpm 91654fe43fd84444f6c7d057da45148998681c19d62fc1bd67e892902ce33905 perf-5.14.0-427.26.1.el9_4.x86_64.rpm d71b4df57c08aaebf663f2d5f0f0b4e8c9bba1dc65b17539ad80f90d8903eb57 kernel-headers-5.14.0-427.26.1.el9_4.x86_64.rpm e0cc7df2fcfbf8c2db33c3fecfa354ab8b44739e0a356ad9b2f4647cacdc8bd5 kernel-devel-matched-5.14.0-427.26.1.el9_4.x86_64.rpm f1818935bba527571ad82e677fd38f3f43056a96ba32322389794c6710602855 ALSA-2024:4623 Copyright 2024 AlmaLinux OS 0 1 Important

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default qt5-qtbase-odbc-5.15.9-10.el9_4.i686.rpm 00147fe812ac490a667508a30a2249d1fbe49f1f3737c4c5cd1c817ce427f22d qt5-qtbase-private-devel-5.15.9-10.el9_4.i686.rpm 0c3cef63446a740747e15a3feb1f307b7129acaf42d0f66ab3954ac9384b1521 qt5-qtbase-odbc-5.15.9-10.el9_4.x86_64.rpm 2473efdf998c8778c62efb5c008ad97e956f86aaca3cc9faf92966382a47bb5a qt5-qtbase-examples-5.15.9-10.el9_4.x86_64.rpm 2b3ac592be205d12014d60c60c7e4362036c8df04c7b4ffe03b74f5ea98c4c80 qt5-qtbase-mysql-5.15.9-10.el9_4.i686.rpm 38f5fd359a3b389fc4a60a017eaf6c3b5a696fb101dd9c0bb54ae17665878af1 qt5-qtbase-mysql-5.15.9-10.el9_4.x86_64.rpm 523774d644464f73719b1a5853947334fd643218c7925bc7e37e778d570002cb qt5-qtbase-postgresql-5.15.9-10.el9_4.i686.rpm 5d334e93ad9c6bf06d998dec99b69efb0c54e4be00558a432b855d9d7fee36b2 qt5-qtbase-devel-5.15.9-10.el9_4.i686.rpm 654844a0be42c75b00e72e5f54ba3353864c71a05aac9cd545198b68b229f369 qt5-qtbase-5.15.9-10.el9_4.x86_64.rpm 667b69f5510b432771a6e28eb93c466d9e4601f87fc6a7bfbe42200c3063e742 qt5-qtbase-postgresql-5.15.9-10.el9_4.x86_64.rpm 71f4c726f8f2613756de52608a5a4e91d21669a5900667c84f97e5491bc63240 qt5-qtbase-devel-5.15.9-10.el9_4.x86_64.rpm 8ebe1c406e8cda0a2ea8c59c885a8f5d75def1e18e08fdc6d7f4d6f40e38c1d5 qt5-qtbase-gui-5.15.9-10.el9_4.i686.rpm 94c06fdd78890cc453a136edc1a9ccea8214c1d5e6e364c3940987cb66a38ca0 qt5-qtbase-gui-5.15.9-10.el9_4.x86_64.rpm 97ec0bf896d6a2745d2830debe6580345fc339195b32dc53bbbdfad45ee37a64 qt5-qtbase-examples-5.15.9-10.el9_4.i686.rpm cb155840105dbd8f90b1f7ab8960957d070f984b6e8dda872d034eee951d9edd qt5-qtbase-5.15.9-10.el9_4.i686.rpm df4b36b9f82d1405d482eba88b966b7ed598d30ed5f1dba82d1d838796efdd66 qt5-qtbase-common-5.15.9-10.el9_4.noarch.rpm e8ba0c47c1d2af35f0577f0d67f1e533ad3a3f4e792dcbdf445d52044e514baf qt5-qtbase-private-devel-5.15.9-10.el9_4.x86_64.rpm fe192eb480218dd69593abc80be07d7186f5b03f7b1e2a70275f402f6f537d73 ALSA-2024:4624 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * Mozilla: Race condition in permission assignment (CVE-2024-6601) * Mozilla: Memory corruption in thread creation (CVE-2024-6603) * Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-115.13.0-3.el9_4.alma.1.x86_64.rpm 4b466946c6df4fcc6f2a7d11a932b284c1f2a5a0d365943859b4d3a40fdc899a ALSA-2024:4726 Copyright 2024 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Improper escaping of output in mod_rewrite (CVE-2024-38475) * httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474) * httpd: null pointer dereference in mod_proxy (CVE-2024-38477) * httpd: Potential SSRF in mod_rewrite (CVE-2024-39573) * httpd: Encoding problem in mod_proxy (CVE-2024-38473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_session-2.4.57-11.el9_4.x86_64.rpm 250f7c62247ec167fa6b4f5096a73724fc7f9f51e799265c3a0124f6a326276d mod_ldap-2.4.57-11.el9_4.x86_64.rpm 27a7a4705236ff8baf539ed0224d79b466f5b15d440eb42a3132a6dd9bb2d41b httpd-core-2.4.57-11.el9_4.x86_64.rpm 5bb63106699fb02aef078a64fc6ad5daaf614d329f438f4443288773c4df9833 mod_proxy_html-2.4.57-11.el9_4.x86_64.rpm 695f1c1cdb89579903bb719441514a45124bc1a77a5a6333995612a42a6d68dd httpd-devel-2.4.57-11.el9_4.x86_64.rpm 790720a99311b44486690ee73362d6dcfc7f5c46e60ddb220730df720ec2b7bb httpd-filesystem-2.4.57-11.el9_4.noarch.rpm 83c3fadfe9c92ba0d104583616b13b3807bad424b82edbb30814263953b71361 httpd-tools-2.4.57-11.el9_4.x86_64.rpm 9e7e222dbb0207527eb5af9138639722186f705df6f2b182134ba86190f3cc32 mod_ssl-2.4.57-11.el9_4.x86_64.rpm a6f800a601d5d54de8163301c166769cec6791158e6b42a8f402c7e020af1f8f httpd-manual-2.4.57-11.el9_4.noarch.rpm bafdbbd696cea4482b92bfbd18bfa476e362601fce71b5d4c83d4a97243c9a00 mod_lua-2.4.57-11.el9_4.x86_64.rpm c93f4983b4ccdea823c0af66b3314e01eb2ee15d40480100e86bc536c35cf92f httpd-2.4.57-11.el9_4.x86_64.rpm e1cade6b99282d580eb450a8bc5a7ab49423bc615a883532d24ea4bf7be295a2 ALSA-2024:4749 Copyright 2024 AlmaLinux OS 0 1 Moderate

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765) * edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236) * edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default edk2-ovmf-20231122-6.el9_4.2.noarch.rpm 07ab65898528b14bd133dcc29037207a0575b113ba24d06b8ec9fb9a2740a4a8 edk2-aarch64-20231122-6.el9_4.2.noarch.rpm 9a5248396531529aa0a93ef15d4a30176a9c18dced35b724cbc45a4b1e0b3784 ALSA-2024:4755 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic (CVE-2024-3044) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libreoffice-gdb-debug-support-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 00f63dc59c7089c579890306992e4b5745fd4954da93a0f8f5e316a4f726a104 libreoffice-help-zh-Hant-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 015b6f7ce68e6e875297998571c7c7cc03b3fdc7c50d8c3ec728a5a819b8ec0a libreoffice-langpack-tn-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 0266589ebb951ccd3ad4c9f52845ae21c2ef953ba565d42b9f3ff9760d645249 libreoffice-data-7.1.8.1-13.el9_4.alma.1.noarch.rpm 03e3ef148b80826d3481e2a6b20466babd1d3a77baf85404a79b4539a8aa9105 autocorr-ru-7.1.8.1-13.el9_4.alma.1.noarch.rpm 04368f95302b72ae743f5536e8b52a790dbdd2b5d4807375400c024ba0e47e4d libreoffice-langpack-nso-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 05a93007b8d5d78a08e888ae332175349c218ecc467d92f12e77df1cc114f758 libreoffice-help-sk-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 070cb1e204d441cd0121391edab70a85d38baf0bfd30f5d82e0f3fb680bd6b12 libreoffice-langpack-hi-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 0714b4d882b383e98f58a80c83a41c55f5ac0c58090ebdfcb5e9e8d65dda0709 libreoffice-graphicfilter-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 095002ac7a13ee124a419075c1f918f94d5b57639d9fc038003ed1a70a7957f6 libreoffice-langpack-th-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 0abff59ad28890e7d35ac345d85bd62b704328199b0c1fcabd5b8d6d226c6d74 autocorr-hr-7.1.8.1-13.el9_4.alma.1.noarch.rpm 0bfdcce25ea72d11fddf83ead3c0af28283bbf6fcc07bd0b933a7004157b4bcd libreoffice-help-pt-PT-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 0cb4f065c678ba5564b9c90421887db980b44698c98fb604dc106812011ada5c libreoffice-help-sv-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 0f8c6cef1eb85585f0122a18ce66b8fb35134bc127982d12c1fa8275df9e47e3 libreoffice-help-ta-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 0fccf4a25a103668d0c7e48ae5963997e5c8974f7bba35139e3fa9006461effb autocorr-ja-7.1.8.1-13.el9_4.alma.1.noarch.rpm 0ff756cdb0ab836d4f48e3b09dd3aa7268befe47756541c30898d3dd2f2b9806 libreoffice-langpack-gl-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 103946610f247c48f96121a43eb8fb738e32a23d7c9813d2bc752a47b7223d6e libreoffice-langpack-sv-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 110929ab3a8add31b25b879057405af67715c296ac1069b77f9e63abf1a501cf libreoffice-math-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 11e64c88bd782068934232527f4e5fd32b031fce19be8941682826c6eb10fe39 libreoffice-langpack-eu-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 12a8aaa715e9e904292808b6839d703fab4e662a9b4f67e6790daf5e5fd746ef libreoffice-langpack-pt-PT-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 130abbbeb2d7d2bd8b3c130918de0ffb5e86dd0887e16c51ceee2fcf274e380c libreoffice-help-nl-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 1361508a3d072b5c8bc48bb017bb72bdf2a433682f122b3d5fada51245fa3183 libreoffice-help-id-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 16193f04f6f4a4701e81f7281cbb6ad20134df0ee1cfc85d6f12f4f2f20de645 libreoffice-langpack-fy-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 17d86f3ce8c2b9a7abec7fe6e21ddf55dbcb67b8ccc6247a9efc67e981fb2ae9 libreoffice-langpack-fi-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 1bc321b04b8a0e755234d89070f3ec56a7af9bf67a461bef7e12aa8be4786b02 libreoffice-help-nn-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 1c1d452726edf019c1092e6a772e33ab8969c1206223889f68083b860ac75521 libreoffice-langpack-br-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 1f76ca20c83fab048e2628cc0acc54ef5174ba30c7a496f7471e687fa384eaec libreoffice-impress-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 213c4acd23d1edede3e6eeb818bdeeb16ea732d50e92e8e1228db75effa4d98c autocorr-zh-7.1.8.1-13.el9_4.alma.1.noarch.rpm 21fb07b9b0d3a42ed1ffefc4e6bf62e9d572eb99f351f8bc72c79ee05ba40d8e libreoffice-calc-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 2224e54d1b713ec495cdbc764edd0cdfc0e317cc72bbef100702164b030e761f libreoffice-langpack-nl-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 25100d6886e9b00a3fbc88b9bcee21cbe716a9d6b6dc64ba0d5b21da4a237e15 autocorr-mn-7.1.8.1-13.el9_4.alma.1.noarch.rpm 26291d58d9a9e49fb6b29cca4d790b644224a1ffc72ec5b3b36aae26c84d8f4a libreoffice-langpack-eo-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 2690514b7872494e741384104e09ee3e53b3c1105d0ebb5f051e22cd9a43bca1 libreoffice-help-cs-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 2900f237341807719bb37592fbfbbcdccbb566accc58aa09467c4b21ecae0ebf libreoffice-help-hr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 2dfe339850d53a1085b348d3ea60bc40deee6b5e8b86d0bb4cac0edd413793da libreoffice-help-eu-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 2f1d92eff2ab9cb05011cd35cc510166531b9d4abe8c2272124d4bb4d4a84e50 libreoffice-langpack-kn-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 30e1b1fb116fa3a48a2d5bcb2eb0c1c06836c3a608653b6b485dac0448a23741 libreoffice-langpack-ca-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 3315d1a2a743c28422db833357f6f42690ade7165babe529395e1601fff28676 autocorr-pl-7.1.8.1-13.el9_4.alma.1.noarch.rpm 33c59a214526f7111c07aadb43125513a7291995b56c1b69044b77f8fa585070 libreoffice-help-tr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 37411b557fc1d726d1b14a0678404f9628333ecf5feb2a0402923cb85c462ee3 libreoffice-langpack-ml-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 379b1858acff4bbd1b3ea44085454427fcbb80f715f8c74e74521e0e48a85706 autocorr-el-7.1.8.1-13.el9_4.alma.1.noarch.rpm 3a1fddb25f77c31938f72bb9953628a5eff04e84bf5ff923d14884f9eda69a18 libreoffice-langpack-te-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 3a5341fe14d704de0004719759c5f83b1ec886e53fc9cd4e9570ae2a96055192 libreoffice-help-da-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 3acdbbd047854840a6258cb885d8f9d67b001026b5c6e63f4de6bd2d1c58fbbd libreoffice-langpack-hr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 3bbe23536a7ada0348710389781f9202e5d30f3c7d7db23e30628c44426127d1 libreoffice-langpack-sr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 3e540e9414025511428f6bf71964477a3234d9e75cedc942d76a98158891cdc9 autocorr-vi-7.1.8.1-13.el9_4.alma.1.noarch.rpm 3f11efe5d7f6572776aa981fe768b975555668d3e130439778628a95bc453bd5 libreoffice-langpack-he-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 3fbdbc40aec61ed2c2f18c821801a1ebb5a735227cd11cad8f4a76ccf66e99d9 autocorr-lt-7.1.8.1-13.el9_4.alma.1.noarch.rpm 41c1ba137ea39e07ed1e90932b0ad2e2c5e5680d6a46cdbdaf4338f612d97e35 libreoffice-langpack-ta-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 42531ce79ad29c327c93119cf1c668967a8931e537d88916b1919eb6985a170c autocorr-lb-7.1.8.1-13.el9_4.alma.1.noarch.rpm 482786b3374f7bda0179e8794843b3bbe9fd9b5790b52cf62dc1be5897c97a67 autocorr-ro-7.1.8.1-13.el9_4.alma.1.noarch.rpm 48b90cc6c673056aaeeafc7879ccbe5e4bde525a7a64f34dd0c1c24270b533b8 libreoffice-langpack-bn-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 4ab0108fb9474d19f3b8e2ea61805c89cbf7cce1e3b8d5305dafb790a0bb9f95 autocorr-fi-7.1.8.1-13.el9_4.alma.1.noarch.rpm 4d2c23209ded6d5f46357c1e6a5785b5e0cae52f5b93f661b371419630ed801e libreoffice-langpack-da-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 500ee463f435b60f0b5e39f03b4397f921731054f4f71f3872965a4ed4994cf9 libreoffice-help-dz-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 51bb98924ef8e4a5566f6aedb1ef1ffc1172eb870660614b2d71e9a9bd4d73e7 libreoffice-langpack-el-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 51e147c3ffbc4eebe41d9b57df3ec69e0737a1332bcc7250824c3902ec8f4273 libreoffice-wiki-publisher-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 552f96fd546139f07feda3052845428c548fbebdaa7a15094c4cf73799e5440f autocorr-af-7.1.8.1-13.el9_4.alma.1.noarch.rpm 553aa18cecb1b5d6f1c37a819fb6a476103cf40180913845fcfe1d989879f7c3 libreoffice-langpack-fr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 557d6d355bb7fe732d436e4a56923d66dea9e86e71ed83656144bcb22c5691e0 libreoffice-langpack-or-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 57b2d3625ac630bdd011ba7528cb5f4697b7a11ebcc28dfa650c3b0a9a95407e libreoffice-draw-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 57cf5188594c1ffbca0dddd612c80869f791ccb5ae2cf09d295d2632edf40825 autocorr-nl-7.1.8.1-13.el9_4.alma.1.noarch.rpm 5896b1e6cd29e2905a2c7b67855656a547b198e3fbc6a0aab42bc8ae16f9a093 libreoffice-gtk3-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 58b16829999a22b74c266533adee27df097748fd1232ccd055320bdf2e1e40da autocorr-en-7.1.8.1-13.el9_4.alma.1.noarch.rpm 58dbcb989a0caf1fcf1bbf5beb3a4fdc0cc3a5d410ae29c1ede7433eaab2a169 libreoffice-langpack-ko-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 592b667dcd340d775431289710b68f277d21bd16f218c244c5094fd4bb101938 libreoffice-emailmerge-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 598727ef07aa831f34c1c72e2122cae2f1c79f3ceb0f6b674c42114df19645f8 autocorr-vro-7.1.8.1-13.el9_4.alma.1.noarch.rpm 5cbf4b22dcb5be7aad41abf4330a10597eb5d3e1a55d4518473799f3d3fdb0b7 libreoffice-help-lv-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 5e7bcb720fddcf754b0e0071469edde6d8611822f2860608a5c5d69b0253e29e autocorr-da-7.1.8.1-13.el9_4.alma.1.noarch.rpm 5ed9841679ec426eba2b450a4bd0b1aba6355d248ffb11b3404efa7f0f2d3bfe libreoffice-langpack-uk-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 5ff610281749cf2ef743cb33a097dbf8f8c377780460f5dd09c549b4f2016c68 libreoffice-help-uk-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 6068a4b4d4babfe335385a8ce97a3b9aedc8b3b2879172b8bb727c1845fd1b84 libreoffice-langpack-ro-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 608ec09ce655b83039b5ba287b3443ed91317e2a29b899eee200686f256df93d autocorr-sr-7.1.8.1-13.el9_4.alma.1.noarch.rpm 61f3bb4512d322bfe4450d94c8b213720e4f1a575d517be36fd05663af289673 autocorr-fa-7.1.8.1-13.el9_4.alma.1.noarch.rpm 67bf550b430ecfcd58464c4f0916e19d0006dcc4f2026894473c157816830e44 autocorr-sl-7.1.8.1-13.el9_4.alma.1.noarch.rpm 6d593e0f513e1f9759ebe20a1aacc5d57123032cd21c8073253f3e907316549c libreoffice-help-en-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 6ea6a98486514fa9da490b995d26c5629e8bc7985e2a4184c6af3d11d1f660d9 autocorr-hu-7.1.8.1-13.el9_4.alma.1.noarch.rpm 7134cc9c8e9c241937855244210fd8a22f4ac8c442aeca3dc3b7fa953e0aaf6d libreoffice-help-sl-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 73a4781253752e4b4fcdda2d022d1e519acaf69013a535dec3bec28e5dfbab82 libreoffice-writer-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 7421deb2ef0f38c0bb607b7588b4c1bd8a9ce57712f5a0bb652de35833668b05 libreoffice-langpack-mr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 75de1711fabd76fe4e91bb40e8dc43871cb2e7219685f0bd5b0dd3c1c5c423f7 libreoffice-langpack-ts-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 75fed1dd26b0904777449cf318d0869060ab5c11140add71e4b7e977a577dab3 libreoffice-help-hi-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 764323d10a6708a6cefb21ac5d72f40c585eeef6a281c2dee4d694e41426ac90 libreoffice-help-ja-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 7883e01ff384cf1858e6402dfa9a4fb6e601100757985b8cc42030844531cdbd libreoffice-langpack-cy-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 7e859f07f184ebe24100f22742941c52c55e7e239514a5a0037e8abcdd78c0a0 libreoffice-base-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 7f0795345f895ce68aee4ea814a4238d0f70447d92983221494edad41cf88164 libreoffice-langpack-st-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 812fb9b66c74623fd2e80ff2bffe4b340d273b27e3894df6c34e488585cb8147 libreoffice-langpack-ve-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 81f3dfd583e51bdc9f57aabca15ae595d90d52b372257097db0e0bd49e6a6278 libreoffice-help-si-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 87fba2b0814acbdacc38ea5602f91ccde74c874ef29c89335a5d5e2c8d7902d8 libreoffice-langpack-pa-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 897ba47ee065bcfb3b088765b37c66c60a349dda9f77e8ad15c9ca703f4a2594 libreofficekit-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 8a3bdf8ae28b06120f4206b9ab47d9fa70afb20593b2f6fa316b8ea7dbc7ac76 autocorr-de-7.1.8.1-13.el9_4.alma.1.noarch.rpm 8a7b92ab40755f779d6a8c800e6f26c5b71a5ea862ea35c1856b49fbedafd08a autocorr-ca-7.1.8.1-13.el9_4.alma.1.noarch.rpm 8b22cc7a6f30eb9d3458a1f50d05508cb932cc6c92cf9534d9e27947d40e5c96 autocorr-dsb-7.1.8.1-13.el9_4.alma.1.noarch.rpm 8cfd5efc96a5eda885dc1407fd7e53e75bc4cc2b4c7616727642ecc1accdc4ce libreoffice-langpack-bg-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 8ffe6a4e4d08adc49e979627555e127257384db0298e5505f06af95527e14bf3 libreoffice-langpack-es-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 91b9a9f918a208349c5e1b9c6fb58ff2e2f9bd0f6f0d6a51541b7e579f729f9e libreoffice-langpack-xh-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 92574833934b8767a6a87d2d92987a3e66bb6344e95dc31b815c8ac2d2f83e90 autocorr-sk-7.1.8.1-13.el9_4.alma.1.noarch.rpm 92d0017acd5e3e1fb111e95c34b69a1c56e9d4654f8fee49efaafef9eac4a450 libreoffice-langpack-ar-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 935b767a5bb3be7d25e5128730545226ad50276c7ed9d32215ccc360c10dda9f libreoffice-langpack-en-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 959824f4677285e38a59a52e7cbcc8d3506cf91387055ec86d9f57bae83d8ac8 libreoffice-langpack-id-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 95b9a20111df29c6219cd4553ac687846276d682a23584fef0e8b1addb7e2fa1 libreoffice-help-fi-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 9827ef380b78a9d92cc728d22d4aad2c491a44f7ef0ce6c4f7164aa84121db41 libreoffice-help-gl-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 994e42d5937880411f3eab24980db6bc14e4a6848bad5e14fca7b856ecccf557 libreoffice-langpack-de-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 9ca702b4ff210b163d736bda63e5d96004c0cc5734607f989e6eae97d0c51d92 libreoffice-langpack-lv-7.1.8.1-13.el9_4.alma.1.x86_64.rpm 9d32717e2f12fc11607fc248b8f11f248130ed03f4050e0a828e2815f8bcfbb4 libreoffice-opensymbol-fonts-7.1.8.1-13.el9_4.alma.1.noarch.rpm a14029041caa166db9e3e7fcb9522c63f51a84068144950bcf3c86f6d89b176c libreoffice-7.1.8.1-13.el9_4.alma.1.x86_64.rpm a36a074e8825d523b48abbceaaa13b76bcfeedbd30f3d6b1d4fe1e7a2fdf11f0 libreoffice-help-pt-BR-7.1.8.1-13.el9_4.alma.1.x86_64.rpm a42b37475708eef5f29d9857e8ad817d420e30b19acfab89db4e4af0938c94a8 libreoffice-help-it-7.1.8.1-13.el9_4.alma.1.x86_64.rpm a45fdcbf196991536979964ac9fd8c7931f09f272949ca2cd33f4ebf0fa8cd2e autocorr-tr-7.1.8.1-13.el9_4.alma.1.noarch.rpm a59952c9f31efcc64e64f79cfb9eee529b2ae190ea688e87ec2b6c8e607ebb31 libreoffice-langpack-zh-Hant-7.1.8.1-13.el9_4.alma.1.x86_64.rpm a65dea846c433cc61c021956493bbfd179bbff4a010edff981d4bf14c5d2b1c1 libreoffice-ure-7.1.8.1-13.el9_4.alma.1.x86_64.rpm a6e8b109f52237da55f62429b51337bf6a21588f81bc8c1e771e05551da85a78 autocorr-fr-7.1.8.1-13.el9_4.alma.1.noarch.rpm a92a70dc08078bb962dd8f53540a6837323062cb2bd1e0d0554374a829c0385e autocorr-is-7.1.8.1-13.el9_4.alma.1.noarch.rpm ae1915cfcde098ca74df265293bb5d8b938f2ff51aad797286c51aa0617a007b libreoffice-langpack-ga-7.1.8.1-13.el9_4.alma.1.x86_64.rpm b2dbef54dffa3dea4b0223e044aea4ffffbba9e99c4d4388f5f40dcc96d06e39 libreoffice-langpack-et-7.1.8.1-13.el9_4.alma.1.x86_64.rpm b8514f75f8d97941a6bebcc29d111bff2b630b3606752a87fbb0eaf3bb4c3015 libreoffice-langpack-si-7.1.8.1-13.el9_4.alma.1.x86_64.rpm b88adb891ce49bfe49e6823e5037b82d606a12653044dfd9dc30dccc5ccce72b autocorr-cs-7.1.8.1-13.el9_4.alma.1.noarch.rpm b8aebbda56c6ad5ccdb1c1327aaaa611e022c13e2c667786a7ccca58182119b6 libreoffice-langpack-nn-7.1.8.1-13.el9_4.alma.1.x86_64.rpm b9e828aae080f24038ea192fe67a514f2479b8e4055e467cf15871248f919ee0 libreoffice-langpack-nb-7.1.8.1-13.el9_4.alma.1.x86_64.rpm baa11c3c106e41dfc22d7940df21eb14522976e2dd95186de1e35e0d9202adaa libreoffice-langpack-as-7.1.8.1-13.el9_4.alma.1.x86_64.rpm bab1bd71ee5cb27bdad809b7f6874da9d6a44b51cde554615bccc89611c5af04 libreoffice-langpack-pt-BR-7.1.8.1-13.el9_4.alma.1.x86_64.rpm bbd85d28a502be1aff34d818e72e901dcc958660416a19ea630782bd799d3e21 libreoffice-help-es-7.1.8.1-13.el9_4.alma.1.x86_64.rpm bc91a544d9e1b0ec1c2a36c31203ac1e4d9238d323c0cf82a250ae81d396d9b8 libreoffice-langpack-it-7.1.8.1-13.el9_4.alma.1.x86_64.rpm bee88bec829b684c124c3dd7a4b50e6e2185af4cb3b0b8ecb80df18351129267 libreoffice-langpack-cs-7.1.8.1-13.el9_4.alma.1.x86_64.rpm c2d281cbe658fe585936795bc4d2d671147ab96d840d07a25057c0b6425e8148 libreoffice-help-ar-7.1.8.1-13.el9_4.alma.1.x86_64.rpm c3c9ae5da755da6f1042fe1154fae3f88ba0a6052ff197b07c36c48935f09997 autocorr-es-7.1.8.1-13.el9_4.alma.1.noarch.rpm c55a382a9fb04e4f5cd1d4ae5a71ca29867cabcb762a75df6187a8e6e04d1d7d libreoffice-langpack-fa-7.1.8.1-13.el9_4.alma.1.x86_64.rpm c5998c3da9f16bb13bdb863e677925563e8775d17576121c44ae4d23f478236a libreoffice-langpack-ja-7.1.8.1-13.el9_4.alma.1.x86_64.rpm c636367d504e891add5ae7531cee6736127f1a55fa91810e0a7b1d2f1dca6c3d libreoffice-filters-7.1.8.1-13.el9_4.alma.1.x86_64.rpm c653267f4044e3c107e81a6b364fe1c2344ad4933e6bed69c93808d935faaebb libreoffice-ure-common-7.1.8.1-13.el9_4.alma.1.noarch.rpm c6c54a61ae8d0402ffeb117db1e2cccf0dec2d6d89c7184bed35a5c85c292218 libreoffice-help-ro-7.1.8.1-13.el9_4.alma.1.x86_64.rpm c97b6843bd5046b58dfab112ac3deb8274c7c5e27525724ae38b073088871382 libreoffice-langpack-hu-7.1.8.1-13.el9_4.alma.1.x86_64.rpm ca659030c73cd522d2603edca5ff3286ccc7e1795642d279da56f4a43425bba3 libreoffice-help-bn-7.1.8.1-13.el9_4.alma.1.x86_64.rpm caff7010c3ef6a4dd7330c35154969dfe1ac527facc451c1190315515e0d1681 libreoffice-help-eo-7.1.8.1-13.el9_4.alma.1.x86_64.rpm cbf5a54cdd0bbb4048aa54e08fa52cc163634deb03641e348f2086abc7f54133 libreoffice-help-he-7.1.8.1-13.el9_4.alma.1.x86_64.rpm cd46c420295e3e79c88560ed07651bc1a767035e569e3cf14f6484aed664682f autocorr-ko-7.1.8.1-13.el9_4.alma.1.noarch.rpm ce577e8074dff08c4ed365137827e96ed6d3a3779b07219719097a823dfd0fc6 libreoffice-help-pl-7.1.8.1-13.el9_4.alma.1.x86_64.rpm d09d0a40665e022138b5444eea575e28fe83e3fd1b8085870cbb1c0c09430dfe libreoffice-langpack-zh-Hans-7.1.8.1-13.el9_4.alma.1.x86_64.rpm d2904d0f83b1e93c0ea47aebff10378174516b53efde0bc4b803dec773e6ec02 libreoffice-langpack-gu-7.1.8.1-13.el9_4.alma.1.x86_64.rpm d395179cdb495c937fed7859d5934a569bc9c8ec58021016bd348d67e8a2f711 autocorr-pt-7.1.8.1-13.el9_4.alma.1.noarch.rpm d53671b7aa1c3c76d720eb6e64ede94c5c0425cc0657d85998ab21f4e6eecb7d libreoffice-core-7.1.8.1-13.el9_4.alma.1.x86_64.rpm d76bf8903645f84fedaaee9dd900dc92c6ce1577adb18c74bdd09869d4d32c74 libreoffice-langpack-zu-7.1.8.1-13.el9_4.alma.1.x86_64.rpm d76f725923693a366f618f85c734644f85b0c6721a38ff8e860ea66a821c2282 autocorr-bg-7.1.8.1-13.el9_4.alma.1.noarch.rpm d7cc28139068242dbd3cf04c40263dc8244dc81b34f35e5b356ef12deb435925 libreoffice-help-ko-7.1.8.1-13.el9_4.alma.1.x86_64.rpm d9a09e95f5112e3b530422956f6c459fa5aff188c2ac3a8a843d7d4d8d0ed6ec libreoffice-langpack-mai-7.1.8.1-13.el9_4.alma.1.x86_64.rpm d9e355f067bd31fa7eb3ee45ffb9f35af78efa3d1f06eca518f7a8040c0263c6 libreoffice-help-hu-7.1.8.1-13.el9_4.alma.1.x86_64.rpm dcdf3d8ff6ef05447caf605b36a1bc9fa067b18c3f1f73e47671d84330d431a6 autocorr-sv-7.1.8.1-13.el9_4.alma.1.noarch.rpm df72468b6c0dd69cc70f27346003de85f2cf71f88c31f860f86b2d861cfe0621 libreoffice-langpack-kk-7.1.8.1-13.el9_4.alma.1.x86_64.rpm df90cddcd4b33830f555b66a25a569c12a9ba3bdaa081735a8d0ef6acb46f9d2 libreoffice-langpack-nr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e07ada873134b9bb7e9a0a69ffd785a149ecb7393bf981a0001753869b2782c5 libreoffice-help-ca-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e083e66e721f76bfcf31caae7012e483c051769152af04a9b61ce7687ca8939b libreoffice-help-lt-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e0890b795021a8129b7975200b78762173993196124a1fbe68d35d377e5a6486 libreoffice-pdfimport-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e2aa07fb224df67c48cd8729fa6c2f94c542d83e19d9dc0dd9c5591892498da0 libreoffice-help-de-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e39f39f9c1f31f0c00b13960634e4875ca21ff65fed6e2bf81edf0b892f83807 libreoffice-help-et-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e40e5110e4a5b9876489c89e90af4b67a39dab1e6e01e3615a6b0823c3090a8c autocorr-ga-7.1.8.1-13.el9_4.alma.1.noarch.rpm e4ea9eea9a01896a51e6018ba2d17ec68ac739e96b4946eb621dbe0930117daf libreoffice-x11-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e76be315ee26dc07003945f3ca697713a22ebe795bcab1f97a2fadbdebbc88eb libreoffice-langpack-sk-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e7d5af0dde910a45fa6eb5e0a6d9ef74d5f5959f02ca0cfcf6e6accb35d3e8c5 libreoffice-help-el-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e8881532ebe5a26ec6e2582b58190206168a6b25adead86f13bc8d20ee2ae79f libreoffice-langpack-sl-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e928992360c38c95b8b240d419b61026af26cba1116de8f5d0d01bb1a5271c99 libreoffice-help-nb-7.1.8.1-13.el9_4.alma.1.x86_64.rpm e9668e675615e2f97598914864bece356c33df956669d2ffee8cd6edebd855d1 libreoffice-help-gu-7.1.8.1-13.el9_4.alma.1.x86_64.rpm eae760156830f47a8fdd5822bbbe1c7fad7443dad6174b4fa82a24cd1695365f libreoffice-help-fr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm ed2831783eb0aab162e89dc29b518cbe2b04acfbd71a228c6ca2897045e87cc1 libreoffice-langpack-af-7.1.8.1-13.el9_4.alma.1.x86_64.rpm ee61e4a262900ff3936b4f2418827b220becbc03ad7200c4149cefe846a99359 libreoffice-pyuno-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f19795a1591fa814a4245ee198310e62381699e4484d1eb9e759631645cef555 libreoffice-langpack-ru-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f2ad4c55ce9302f717b5e7475262029762019ee4c49db4a6262f6cca913dbb10 libreoffice-langpack-tr-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f5b7f62498c36e7aa8dc723f05d1e85d4e168d4d2e1469e119403b1282bab2ad autocorr-it-7.1.8.1-13.el9_4.alma.1.noarch.rpm f669964675ff5f951eea9ee6e003ee1a686155585414a86ae76fc43c627a020e autocorr-hsb-7.1.8.1-13.el9_4.alma.1.noarch.rpm f6a60f696cf02281eb30e968752d1805a096fef2eeeb513e4ab6a36dfcaf95f7 libreoffice-langpack-ss-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f7147b0d3018fd0fae43bfa0289e1db04a279f1a2ca7665df3a8422c0a5eafda libreoffice-langpack-lt-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f75d7fa2a19ff3425feadc8a440c1a453a1a054e2b1d8853f5b8601ec8c0fb12 libreoffice-help-bg-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f77c0b9b7d53e949ad6fc11237202a58292c50b5eb0c5d5811b3f3bc9612aa02 libreoffice-langpack-dz-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f7ab74690b42355b7b0adf7025018241928c7285fcf5243835718d21d29a199e libreoffice-help-ru-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f7b3ab45501ab9e122ef0f89912145e86bbf0499a21e4c32620c5293ec236395 libreoffice-help-zh-Hans-7.1.8.1-13.el9_4.alma.1.x86_64.rpm f8387ab33c585556d957d3a5c68c70a2fe488b200f4cab54c5161fafbf09fb81 libreoffice-langpack-pl-7.1.8.1-13.el9_4.alma.1.x86_64.rpm fa015b96ff04d595e42abcf3ef919a112376d9cfc5fc63b4ac1e654f55569d1c libreoffice-xsltfilter-7.1.8.1-13.el9_4.alma.1.x86_64.rpm fa2a379573f680a6e33781f415cdaf7ef713d5fe7b25813396d2fe2671a4ab80 libreoffice-ogltrans-7.1.8.1-13.el9_4.alma.1.x86_64.rpm fc4917b872c696ad254be8ac14c6c56d82f88f78f2ddb0e463aeb5d17dc0c713 ALSA-2024:4756 Copyright 2024 AlmaLinux OS 0 1 Moderate

libuv security update

libuv is a multi-platform support library with a focus on asynchronous I/O. Security Fix(es): * libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libuv-1.42.0-2.el9_4.i686.rpm 85ef690e10cca611a5fc0fd0eb615c6da5a299ebed1e0e04359924f741e09a2f libuv-1.42.0-2.el9_4.x86_64.rpm afcf4a23de576c6f61661e1070cd2398f4856374f7e2abb3ce165662f14d58f8 ALSA-2024:4757 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvirt security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * libvirt: stack use-after-free in virNetClientIOEventLoop() (CVE-2024-4418) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libvirt-libs-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 023516007e95986ea9c8bdeff97673a30a5f6ce51361897c5fb2f16da5ec527a libvirt-daemon-proxy-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 04e3087832ee60811faaad60d17f0173d8f564e74be3c48feb2a662745fba205 libvirt-daemon-driver-storage-disk-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 145914d699ddedce67d98657e481e6676fb376ac9f5e61cd6f0f0a072d998a59 libvirt-daemon-kvm-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 183639b3ac84ffa0cfcc6dbc59d8fc28ae9eb7aea1e391a09a40779b00cf94cc libvirt-daemon-driver-qemu-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 1926ce0cca036253f8893cb469d76f44a54fff0840747f27d999c62784740f3b libvirt-nss-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 19ad91f13450fe5c9640c4d92ca2f6363ca20c5aecab0f5434de3c211f67d2a3 libvirt-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 1de5b52b8d27e99e74b3baec970a438d9468804f655c1de4076a8f6162596579 libvirt-daemon-driver-nwfilter-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 2ec3e3ee8b052f16ef4af18a72b914309be0247aa58f418000dbb594cfe9894e libvirt-daemon-driver-storage-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 4435d733a264c2119e27176d427f4eadaff5922c26192c640ea79e2ac844a4e8 libvirt-daemon-driver-storage-logical-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 73c5fba52ad278c2ad283de1ccd46628caf9e03527ac4875da2e02f86b6a1ee2 libvirt-daemon-driver-network-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 77167958b17187284474fda27956ad41fafc439b5f48ac94c4f2205698a0ae3a libvirt-daemon-plugin-lockd-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 88b40d81ee2ca5a727db5e5f3129c8fe4752c1632464eb78ed036e23702ec743 libvirt-daemon-log-10.0.0-6.6.el9_4.alma.1.x86_64.rpm 9f0fd22511ee185bcade748edb68c803c8652d36b9d9612ae904bc3970c25bb3 libvirt-daemon-config-nwfilter-10.0.0-6.6.el9_4.alma.1.x86_64.rpm a006ba2da44c27777e3ec41c7c64e826a641af12b7a8d952f3292ad165016fa1 libvirt-daemon-driver-storage-iscsi-10.0.0-6.6.el9_4.alma.1.x86_64.rpm a533a9e8e9a2e0ff685ae9520ba5ae4ab07c7ef661a312ab918b5492c6adb2ce libvirt-daemon-config-network-10.0.0-6.6.el9_4.alma.1.x86_64.rpm ab5c384473caa09eb8cd5f48e6ccd7f849d06950020411832141edd64890a082 libvirt-daemon-driver-storage-rbd-10.0.0-6.6.el9_4.alma.1.x86_64.rpm ab9e0f24e649acdac4e12e1a8791f029133e2bb0aba899ab61ebb0fb6dc4abcd libvirt-daemon-driver-storage-core-10.0.0-6.6.el9_4.alma.1.x86_64.rpm aee0beaa32a6539e35af8772395554081c214eb5f59862b4007cfca06424afe0 libvirt-client-10.0.0-6.6.el9_4.alma.1.x86_64.rpm bbce888e340fcc4bad7253dbe82d38c299896d5a70412f18519c74a6a02f1458 libvirt-daemon-driver-storage-mpath-10.0.0-6.6.el9_4.alma.1.x86_64.rpm c44b93663867076f862a9b3408377d890f2876aca76a78640378f574004fa0a7 libvirt-daemon-driver-interface-10.0.0-6.6.el9_4.alma.1.x86_64.rpm c74938604c5a19f09030a4d6fa36ca0a197f2f9f74a6ee708536563be777c632 libvirt-daemon-driver-nodedev-10.0.0-6.6.el9_4.alma.1.x86_64.rpm cc7b2f8e308fd179ae31d8d72d398a2f985fb0a54a12e98b76225912a2a53aec libvirt-daemon-driver-secret-10.0.0-6.6.el9_4.alma.1.x86_64.rpm dd0ec09ee99f1f8c4cd87f5afa7b2eabacdd1d6fa52ebe3fd48602cf5b4ecd1b libvirt-daemon-lock-10.0.0-6.6.el9_4.alma.1.x86_64.rpm de24fb74c48b14ba91835b5c27b5f319dcfa1b65886883984941fd32b90974c0 libvirt-daemon-10.0.0-6.6.el9_4.alma.1.x86_64.rpm ee6c13d3a218e1632bd8c272d9e9d791041c439769cda7d8434b0ca82a69dea8 libvirt-client-qemu-10.0.0-6.6.el9_4.alma.1.x86_64.rpm fb54cffddc7df6e6784b6fee4c47fa22cd9c10f0a318b8eafdc220b5a9bdd36b libvirt-daemon-common-10.0.0-6.6.el9_4.alma.1.x86_64.rpm fb779e8e724303e5f44f0eee44a2d4aeaf92c7098351b7d7fe3a7fe20c1feca2 libvirt-daemon-driver-storage-scsi-10.0.0-6.6.el9_4.alma.1.x86_64.rpm fd07799a74029383b3ad76254eee594268414feccd67c94d33878b90208fe9df ALSA-2024:4761 Copyright 2024 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-4.el9_4.x86_64.rpm 887da954211987964c09087d01d48c7d68b3c22c20e3e3c3646aa55dd7f5a84a ALSA-2024:4762 Copyright 2024 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default runc-1.1.12-3.el9_4.x86_64.rpm 48b7f9afed2eb6f433347a838d9aaccf4e9ac81f1edf182db6e7617c0f15be90 ALSA-2024:4766 Copyright 2024 AlmaLinux OS 0 1 Low

python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-libs-3.11.7-1.el9_4.3.i686.rpm 1936ecf922a78e52b1f815efd52a8fad08b9c01809616ec55aff96da12050568 python3.11-devel-3.11.7-1.el9_4.3.i686.rpm 4228db7340a6beeca2673580d898175476c8eae1e68c6576ee732ea8f92b8e88 python3.11-libs-3.11.7-1.el9_4.3.x86_64.rpm 5d077f1483a532ae46714e60b91e4d01a358336a622b1ed7026a6a73f7fabbe0 python3.11-tkinter-3.11.7-1.el9_4.3.x86_64.rpm 783cf66303672ddb9ee3a55e123b2f2c8e76bad9f241543c8713255db32fe2c6 python3.11-3.11.7-1.el9_4.3.x86_64.rpm c399fd8b128b5d976e7d62cd846b7216e716447407c8a7de38d8086d056d4b16 python3.11-devel-3.11.7-1.el9_4.3.x86_64.rpm edcc96f7c0e56adcb15e2c5ed42761affc2d12899d1d94f555b4c9e0f4f23f72 ALSA-2024:4776 Copyright 2024 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default cups-devel-2.3.3op2-27.el9_4.i686.rpm 222114d44c3506a8ed83220db7fd6f88813188b2e6870658b983b66aee897eae cups-client-2.3.3op2-27.el9_4.x86_64.rpm 3615f1d277c39f3771b4b5e124515dfe573faf4f235df36331cc0a133e7707ad cups-printerapp-2.3.3op2-27.el9_4.x86_64.rpm 5d8c59e24ccdb96ba0546179dc31cc5deb79e35c42e4fa43507452b03fbb7b1f cups-filesystem-2.3.3op2-27.el9_4.noarch.rpm 5fdc0be73bfc2c4c6f4754f3dcc19f535aeed65c4cb68a4685f0d359d0013f39 cups-ipptool-2.3.3op2-27.el9_4.x86_64.rpm 83af4c9f28834c33c7b1c0ac23a31ecbe26fc6bf2c4c11e65d5b1efda3bf7899 cups-devel-2.3.3op2-27.el9_4.x86_64.rpm 8894d9ec5eb11d767957de19e84f4b3a9c822993b780fba2060c72026f63f772 cups-2.3.3op2-27.el9_4.x86_64.rpm ac3fda5f042d89b94e8770994c7306b5275d98a456ab6fe6f54d3cdb5af462a3 cups-lpd-2.3.3op2-27.el9_4.x86_64.rpm cd89def227d01e11219ddd878fbb413cc2e083e527f5b67d8ba4d95e10838164 ALSA-2024:4779 Copyright 2024 AlmaLinux OS 0 1 Low

python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-devel-3.9.18-3.el9_4.3.x86_64.rpm 589aaf1050c5378a4f867a8b19c167d68b60d46ab2f9d8e6d4089d9b5c8c5cf7 python-unversioned-command-3.9.18-3.el9_4.3.noarch.rpm 5d3cc9204ccd70c8d5b44389772bfe5510ceffd6ba60cc3b3317e18db93080e2 python3-tkinter-3.9.18-3.el9_4.3.x86_64.rpm 72a50036f43f36a3d776f715d2aa47e47f4900d43b63200f4cd16064d01b0585 python3-devel-3.9.18-3.el9_4.3.i686.rpm 91b092f2396ae98196c0d36132a913655fab391e4d66cc846336717996ff11a1 ALSA-2024:4861 Copyright 2024 AlmaLinux OS 0 1 Moderate

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638) * squid: Out-of-bounds write error may lead to Denial of Service (CVE-2024-37894) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default squid-5.5-13.el9_4.x86_64.rpm bb89a2ced0511f4ea0aa4021c33fb71ba9b4bb3a7acfed9e4d91fb7ab48815fa ALSA-2024:4928 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458) * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773) * kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737) * kernel: dm: call the resume method on internal suspend (CVE-2024-26880) * kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852) * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982) * kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046) * kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030) * kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857) * kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907) * kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885) * kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809) * kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459) * kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924) * kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952) * kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743) * kernel: epoll: be better about file lifetimes (CVE-2024-38580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default perf-5.14.0-427.28.1.el9_4.x86_64.rpm 01bc6607665ae0197c935432bbdce5a37baac42f5aed4d8c6f6055f609574007 kernel-devel-matched-5.14.0-427.28.1.el9_4.x86_64.rpm 04f9d34b0bf1d7752bf1f66c9ef4100fa4575022fd1419910f8a2ec6ece68ab6 kernel-devel-5.14.0-427.28.1.el9_4.x86_64.rpm 0b823b135b1418faf3608ed63bba5c2ccfcc2cbbb193ce7a56b1fa4be2a4e1f0 kernel-doc-5.14.0-427.28.1.el9_4.noarch.rpm 1c12a2a9970700b5c07411ec2acfc301d3189eaf6bf085792d0377321826bfb6 rtla-5.14.0-427.28.1.el9_4.x86_64.rpm 269b58cacc53c21dbb5b8150e79cbfdfda9d94aa6cd15a6d8812456437620df8 kernel-debug-devel-matched-5.14.0-427.28.1.el9_4.x86_64.rpm aaa6a0ecd60b3640978da0c912af441dd9bf13dd9903c68d39ad60d6939cd22b kernel-headers-5.14.0-427.28.1.el9_4.x86_64.rpm c496089b2076136859d107ff493c964b39e1ddafba0a5ff8c936566aa1480caf kernel-debug-devel-5.14.0-427.28.1.el9_4.x86_64.rpm db82fe7cd8803ae8efdc59b5a6fa46125ea282347fb91d78f55f93ae9a70ef45 rv-5.14.0-427.28.1.el9_4.x86_64.rpm ed96fdc8507b6c387fd29e6ed2ae453b45d621a5e61c902becdef94b845b414f ALSA-2024:4935 Copyright 2024 AlmaLinux OS 0 1 Important

freeradius security update

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es): * freeradius: forgery attack (CVE-2024-3596) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default freeradius-krb5-3.0.21-40.el9_4.x86_64.rpm 0366eb66e410138755a32ecca472b4479b13192c23d9577a787a0d6a1020c96b freeradius-devel-3.0.21-40.el9_4.x86_64.rpm 1846afb66d66e5cf766044a7afc3c42f3e6dcbbc501227f59b3a12faea4f9312 python3-freeradius-3.0.21-40.el9_4.x86_64.rpm 4f623e53ec8e8b45c34919ed7f6f84b6fffe5bab05303d1a78640944251114bd freeradius-doc-3.0.21-40.el9_4.x86_64.rpm 867e19cccfe53336f1762f4a9bc54e524f58aceee8c03efbba0e4a7e03481583 freeradius-ldap-3.0.21-40.el9_4.x86_64.rpm 906dd1486040398ef4db83e935b98b6d9f63e1d8d879c78a5c7a1022d6447d57 freeradius-utils-3.0.21-40.el9_4.x86_64.rpm b1a1af97b9410a75866d7c49754f37e52ac4dd06631538f507d8df014d824abe freeradius-3.0.21-40.el9_4.x86_64.rpm cb154c933c3d45f14f17020b2508d3e4b3851cb4371627c64acfa4d930a708ee ALSA-2024:5138 Copyright 2024 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Security issues via?backend applications whose response headers are malicious or exploitable (CVE-2024-38476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_ldap-2.4.57-11.el9_4.1.x86_64.rpm 0a6de4afd1f1f9655331d95fcef04f648af842b0519a02d4c25c573c01c8c773 httpd-2.4.57-11.el9_4.1.x86_64.rpm 19c3cad8070e3821e5625f3def7562dde09b6bcb745452a272c98dee3da45fb3 mod_proxy_html-2.4.57-11.el9_4.1.x86_64.rpm 2277847c2c2ccf12969af8883dee917f822119533059805416886d9d9c95bec6 httpd-manual-2.4.57-11.el9_4.1.noarch.rpm 617bedd804bdb369db24741136d165abe40e2adea6db7598de6ae9c59b87e76f httpd-devel-2.4.57-11.el9_4.1.x86_64.rpm 8bcbf1ff1c4e18569ad030886ba819fe00064658afc9caaeed7d67fad977ae77 httpd-filesystem-2.4.57-11.el9_4.1.noarch.rpm a672dbfc7677ed70ba8883e04b529a83e68f1ad60d0ecd06a678c54172c0e81e mod_lua-2.4.57-11.el9_4.1.x86_64.rpm b2c52d04abb33394851b985a4c0e5489fc1496744a616049bed7f35a3d4b3ef6 mod_session-2.4.57-11.el9_4.1.x86_64.rpm c09e17a6c2cc47d37628164e622ba3fca321cd21173e98124384e87d94da108a httpd-core-2.4.57-11.el9_4.1.x86_64.rpm cbf99db4006ae6a5bc30ed23ab21807861fbaa0e44165648b65c9fe60cf4083c mod_ssl-2.4.57-11.el9_4.1.x86_64.rpm ce073846abdf36a20ea6b69138f0798aaa696659ed50d8851e36939d0e66d25a httpd-tools-2.4.57-11.el9_4.1.x86_64.rpm d4fa75b2134bc4752156edc98415aaea91b44e5c15d0e03b67007be0980cbaf2 ALSA-2024:5192 Copyright 2024 AlmaLinux OS 0 1 Moderate

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) * 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default 389-ds-base-2.4.5-9.el9_4.x86_64.rpm 73f3d6bd35590d889cc699bf67ce5cf24ca71a0d2f7826f4a60fd02657a1eba8 python3-lib389-2.4.5-9.el9_4.noarch.rpm 997deceabd3440cbb5e7221f2b55f9b34c4f83cb166e3a748bd3d5c89b6475ee 389-ds-base-libs-2.4.5-9.el9_4.x86_64.rpm f5ba1995e15232501b101423fc1afd19226fe1098581109678a4f41ff2a7e5dc ALSA-2024:5231 Copyright 2024 AlmaLinux OS 0 1 Important

bind and bind-dyndb-ldap security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737) * bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975) * bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default bind-libs-9.16.23-18.el9_4.6.x86_64.rpm 1bffa0e0e531940f55415e811906e8cd4a1429ededdf4b5769e551a89afcf386 bind-utils-9.16.23-18.el9_4.6.x86_64.rpm 26343ea1aa5d1cc9ae537b320111350ef46d46f61f43f302839761987081f943 python3-bind-9.16.23-18.el9_4.6.noarch.rpm 42f691db1d5bf19f61201edc16027b0d23e1f8d4b636127269cfefaf1e8c5719 bind-chroot-9.16.23-18.el9_4.6.x86_64.rpm 458a4944d57d5458d17cbf7baec3d8cf1c6378924473cf8e0cafeb1f01bd11b0 bind-dyndb-ldap-11.9-10.el9_4.alma.1.x86_64.rpm 6c3429211191893351040b3b68bf90fad08da624bc48e84ec9ded0555f71e25d bind-dnssec-doc-9.16.23-18.el9_4.6.noarch.rpm 71e7eda62fad82b98d7b568cdbd6ca85957e36db56c15ace1d21a620f75ea390 bind-license-9.16.23-18.el9_4.6.noarch.rpm cc05b8ec2e3a7cd1137ed17e0fddf12248c2470a2903f59f80e72afcbcfd45c3 bind-9.16.23-18.el9_4.6.x86_64.rpm e06f691f6217fdbaeb0b4bfbcfd75b62cf309623e603603981adabb11e35e1a8 bind-dnssec-utils-9.16.23-18.el9_4.6.x86_64.rpm f59e90319b26951d64bd7e2da363769d6bb376a52ec6c0cdb466b4768bf28a31 ALSA-2024:5279 Copyright 2024 AlmaLinux OS 0 1 Important

python3.11-setuptools security update

Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources. Security Fix(es): * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-setuptools-wheel-65.5.1-2.el9_4.1.noarch.rpm b7eddbb0feda7b779b306cf6fc494adf054e33044fd8797c121c93be6402b6bd python3.11-setuptools-65.5.1-2.el9_4.1.noarch.rpm dc9b9dc462b369ac7d6c955501897d2ad8f605733bdca796757157ca2aaaf9f9 ALSA-2024:5322 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * Firefox: 115.14/128.1 ESR () * mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518) * mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519) * mozilla: Type confusion in WebAssembly (CVE-2024-7520) * mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521) * mozilla: Out of bounds read in editor component (CVE-2024-7522) * mozilla: CSP strict-dynamic bypass using web-compatibility shims (CVE-2024-7524) * mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525) * mozilla: Uninitialized memory used by WebGL (CVE-2024-7526) * mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527) * mozilla: Use-after-free in IndexedDB (CVE-2024-7528) * mozilla: Document content could partially obscure security prompts (CVE-2024-7529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-x11-115.14.0-2.el9_4.alma.1.x86_64.rpm 4227babc67a06a114fddb3ae0b8caf6facf312e09691ead59f7b0e46013b3dae firefox-115.14.0-2.el9_4.alma.1.x86_64.rpm f5de92b75ac0e2d988c9654c8eabca085179d857f2c105d06488f734e6ac124a ALSA-2024:5334 Copyright 2024 AlmaLinux OS 0 1 Moderate

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8. Security Fix(es): * dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default dotnet-templates-8.0-8.0.108-1.el9_4.x86_64.rpm 054f78fd2ba0107276bfe751cf3866bc5572b6b891b8740640b1e47c3a4652b5 netstandard-targeting-pack-2.1-8.0.108-1.el9_4.x86_64.rpm 0827fb189cefd4653e4bd8be242af449895ba72d302827829bebcd4b8a75db7d dotnet-sdk-dbg-8.0-8.0.108-1.el9_4.x86_64.rpm 139227be486154a958fb7de2f2bdb2f1854e794814dfe527fefd4c55a94e5349 dotnet-hostfxr-8.0-8.0.8-1.el9_4.x86_64.rpm 29dfdbb94d741177e1fa431b85a2e220e39325841c325ca002b4cfa206039e66 dotnet-apphost-pack-8.0-8.0.8-1.el9_4.x86_64.rpm 5c923406a2305c295a7394c825dab7195abfdf1da9da40da39501841e9376ce2 aspnetcore-targeting-pack-8.0-8.0.8-1.el9_4.x86_64.rpm 5fd636243171dc11b4f6cc4b5c67fcc56fbbc9a1c5afe49a01d3b5f6f504f00f dotnet-sdk-8.0-8.0.108-1.el9_4.x86_64.rpm 69b32eefdf567883f7e827e236b9a68d01bcf5195cf491de264309b6cba3cad2 dotnet-runtime-8.0-8.0.8-1.el9_4.x86_64.rpm 6e416c304fd5f462852c045a08f11b4d6e97763cb89a4e08ee48ada4328caa3f dotnet-runtime-dbg-8.0-8.0.8-1.el9_4.x86_64.rpm 857d780ff868f8f096f7df8c2c919749db77a3baf78d04f26e4b1daa92748cd3 aspnetcore-runtime-dbg-8.0-8.0.8-1.el9_4.x86_64.rpm 9e9cc299c1f8f8ff8b30cb8f2076eaa6cc0db1d9cd8bb972593daad860ddf657 aspnetcore-runtime-8.0-8.0.8-1.el9_4.x86_64.rpm b760dffaaaf7a1eddc59e5751d43bcb38e58c251ef53f43c23abfd5f147381eb dotnet-targeting-pack-8.0-8.0.8-1.el9_4.x86_64.rpm d970cbba79e7a914a4148096d8022e4d8785ef2ea22d73d6620b305577b466db dotnet-host-8.0.8-1.el9_4.x86_64.rpm e7fd6363bdcc4aa2676d242ce45b5c03c707a6f746df9b11bd79b681afe73e07 ALSA-2024:5363 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: phy: (CVE-2024-26600) * kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005) * kernel: cifs: (CVE-2024-26828) * kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575) * kernel: nfs: (CVE-2024-26868) * kernel: igc: (CVE-2024-26853) * kernel: dmaengine/idxd: (CVE-2024-21823) * kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961) * kernel: vt: (CVE-2024-35823) * kernel: efi: (CVE-2024-35800) * kernel: mlxsw: (CVE-2024-35852) * kernel: eeprom: (CVE-2024-35848) * kernel: ice: (CVE-2024-35911) * kernel: platform/x86: (CVE-2023-52864) * kernel: i40e: (CVE-2024-36020) * kernel: rtnetlink: (CVE-2024-36017) * kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954) * kernel: ipvlan: (CVE-2024-33621) * kernel: tcp: (CVE-2024-37356) * kernel: virtio: (CVE-2024-37353) * kernel: tls: (CVE-2024-36489) * kernel: cxl/region: (CVE-2024-38391) * kernel: bonding: (CVE-2024-39487) * kernel: netns: (CVE-2024-40958) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-devel-matched-5.14.0-427.31.1.el9_4.x86_64.rpm 011370691245a731e8e71f20f3703a37445bcfc1f40521c7241e741be41dbee7 kernel-headers-5.14.0-427.31.1.el9_4.x86_64.rpm 27f2cc2b18238648284ee4c603795166be19a1efc420a6150b3a843893f9d284 rv-5.14.0-427.31.1.el9_4.x86_64.rpm 53cdea00b8f587a88a4d5a286748d3e3be15881d8ce0e0583786ee33884dc3bc kernel-devel-5.14.0-427.31.1.el9_4.x86_64.rpm 6721798f1ccb28090fb50f4fb736d533fd67d610def5ddb3630e5fc56fcf42af rtla-5.14.0-427.31.1.el9_4.x86_64.rpm 748d15c581e33df960bd6df45c1020025ecc664e86a35ef576b09a267c26cb16 kernel-debug-devel-matched-5.14.0-427.31.1.el9_4.x86_64.rpm 911418eb7e79af6d1c6290db895c6d9321206191ab64e6cf64600a1d72f16b69 kernel-doc-5.14.0-427.31.1.el9_4.noarch.rpm cf0dc6bd374628b67126e261a3e3fefcee1907d8166fe71dab81aa579c7a1b26 perf-5.14.0-427.31.1.el9_4.x86_64.rpm e3610a4b8cac27376d7dfc2edf39da464e5e42373b0f1ee5fdc01cddd0c84225 kernel-debug-devel-5.14.0-427.31.1.el9_4.x86_64.rpm ede70b236d75668bea091c04440f53f9b125ef14e48c9f2b20189251d5add516 ALSA-2024:5392 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * EMBARGOED Thunderbird: 115.14/128.1 () * mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518) * mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519) * mozilla: Type confusion in WebAssembly (CVE-2024-7520) * mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521) * mozilla: Out of bounds read in editor component (CVE-2024-7522) * mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525) * mozilla: Uninitialized memory used by WebGL (CVE-2024-7526) * mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527) * mozilla: Use-after-free in IndexedDB (CVE-2024-7528) * mozilla: Document content could partially obscure security prompts (CVE-2024-7529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-115.14.0-1.el9_4.alma.1.x86_64.rpm 9d4bb6ff0b6adf4078d0dbd348bfd998a1bd2b1b3b139c0b74b9629855cb5411 ALSA-2024:5529 Copyright 2024 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP/2 push headers memory-leak (CVE-2024-2398) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libcurl-devel-7.76.1-29.el9_4.1.i686.rpm 77f965924f9dd3d337a91cec6d2b93988ed36a73e195362b8588ac1e34389fe0 libcurl-devel-7.76.1-29.el9_4.1.x86_64.rpm 8d92691faa29c244c407a1df4fd0f3f9bc64613fb66162a9fe24c5f45eeca2cb ALSA-2024:5533 Copyright 2024 AlmaLinux OS 0 1 Important

python3.12-setuptools security update

Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources. Security Fix(es): * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.12-setuptools-68.2.2-3.el9_4.1.noarch.rpm 2279cfb9ea221569984b787a7fec27b7b50af47b8f76a308565dad2b0bb65d7a ALSA-2024:5583 Copyright 2024 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: bility to trust not validated macro signatures removed in high security mode (CVE-2024-6472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libreoffice-help-ja-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 00dd74fea27f6a9101d64a71766e3ab756098f2fe633c680905fb67445106efd libreoffice-langpack-si-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 01c5b1f531b018848f9c48402a6ddd56de7b9cbd591b8f9dea5166c1f8d7ae7c autocorr-pl-7.1.8.1-14.el9_4.alma.1.noarch.rpm 02a6c2b3247f82470265d54b9d1992c001ba9bdd46c323fdc14213a5c7f8a2e6 libreoffice-filters-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 02f08ca31cfdf2f8709daf1bebada619879d5e699a214c8bcbcf1d850ab85846 libreoffice-help-gl-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 053bc2694a9f79f80ca0df6fd90b1f7d75d44b44026b61e610888b0bf7d73632 autocorr-zh-7.1.8.1-14.el9_4.alma.1.noarch.rpm 05bc41c6badc408b9d2f0867ada881973ed60b6dc9453b3880d7e1f9ab3969c3 autocorr-lb-7.1.8.1-14.el9_4.alma.1.noarch.rpm 05e4aba60712bdf7b582ee623f921efe98d2885d429de48a9e467b0232772f0f libreoffice-langpack-sv-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 088fec5f00d802942ed451d7eb1d49f368653ac1c088defbf65f9ca1e8fb0398 libreoffice-help-ko-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 094c31a207405ac0f726ec50ea2c4092622111bd48ef163887027aa4dc8f0941 libreoffice-help-ca-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 0ae5005b554b1d19d4a5b496f0813ff34b2376eca84f5f612bd643cb952d871a libreoffice-langpack-it-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 0b7cb458cc151277e8911b1c34b5d9ab1919a85183fba737f8515f9317f7fa4b libreoffice-langpack-ml-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 10d2e405c674b9a7814781bde46dd8b17452fef960f831f4da4af58d655fc4b7 libreoffice-langpack-dz-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 1213cdbb4f0d9bd46fc8e86c882ca7872d5c16d6d20e3399e9fbaf481f1455b9 libreoffice-help-hu-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 137a3a8bc65fa49021400bd708091f724eafcb72b184df8a1a736fcb74f90756 libreoffice-langpack-pt-BR-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 15722b5e3e8bc6d4a75cf53ee62cc15f58472b09496fa3e2a274cf73f3d03e18 autocorr-fr-7.1.8.1-14.el9_4.alma.1.noarch.rpm 199e0b702025c674d2a7161be2c3a1b65a3d9c0cc7988c8509081eb399565e82 libreoffice-emailmerge-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 1a374e45c2f92a2f90fbbea42999a78d092fc86490a32ea33aca76bb5f37a87e libreoffice-help-pl-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 1a3fa7786b34c03979a3f4629f6104487721ac9a07f9c294955911f16ccf4d79 libreoffice-help-ar-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 1c90ae3faedbde14b8ff5283b5fc162435dddd4e8b77b8172348c16d4f66e0e8 libreoffice-help-bn-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 1cbd2f53c88c991807223a60844f01b76b7249a950a0d129877ac4d6dd89c32b libreoffice-langpack-te-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 1e336e65d3f09c17c5ff8837a763b664c3d557120c3d041855cd355fc74b9694 libreoffice-langpack-ja-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 202b03fdee152dce8717de760826dc55a673240e1eb0475f35e559c8e78ae0b2 libreoffice-help-pt-PT-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 25e9c353b4b3b89a93dec4a58a3863deb29a32c00d734be8d5f441b737586265 autocorr-ko-7.1.8.1-14.el9_4.alma.1.noarch.rpm 28cee6bb04eb7063ff67b6c63214b464557b2a5d687e1ba350be9c6735286cbd libreoffice-help-ru-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 28ed4b66b86d4fe4b976e82e53637be294cf7bd9ac9ff575eb70f0f41c8cb621 libreoffice-draw-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 2a19caf83214b8cb8028d3756beded1f9adb8e1332c740954644049e11ac4434 libreoffice-langpack-gu-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 2de28d9b4b59a7ea70bfd6b4e603421a312c24890c9191fe8cfa4f474018d389 libreoffice-langpack-fi-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 2df1904d3b8c8a205144a2972a0cb3b9cc34df4bc8239d8306bbda27b4fa6e5a libreoffice-help-et-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 30c156ec9ff30a352b95ae1ca7744e50f22f5e6dabb7b1b46b2f00ea64277f5c libreoffice-help-da-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 32155dd5ba65e2bcbd636beb77c6a528e12d644425b8fa325e49dea1457a5573 libreoffice-langpack-ru-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 327f0a54bffb360575e2ac6990d8efd955ccaf35f1e99bbaa445c507852ec317 autocorr-nl-7.1.8.1-14.el9_4.alma.1.noarch.rpm 34678581d856272dc58b06c7cfbbc20f63e0b99681c2a5d31bf4001ac923d4d4 autocorr-en-7.1.8.1-14.el9_4.alma.1.noarch.rpm 352cebd5f1aea55bdf50865d2c096de863bc6aa5f3722ea7fdb4ed6bb647a4d7 libreoffice-langpack-fr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 358ab197763ff4159b7eafd06d273a9815132c9d6661c26220b476af0ea8bed9 libreoffice-help-en-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 37af7e7bb9d5f4724ac50d5954c9a81a042220344823f1084164c312f7c2ab66 autocorr-dsb-7.1.8.1-14.el9_4.alma.1.noarch.rpm 38ea364fac71dc376107f197047ac7fb0ae97fe70e021310d9eb32c2b1b0fe2f libreoffice-help-sk-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 3a8a2bb8096e4a0fcee80b61afa592e6b4b0129dffda4ab5334b41e20d2e8faa autocorr-is-7.1.8.1-14.el9_4.alma.1.noarch.rpm 3ca2e56368c9e0bf56576f9055eecc60da9d6af87776c893da8b24227e67f253 autocorr-ga-7.1.8.1-14.el9_4.alma.1.noarch.rpm 40c65802f3807a229c044caa28378d0896ee6b0e9caf3c79fd541bb3043a741f libreoffice-help-he-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 4182e6d2246c0aff93c163efc3ddd3938fb4aaef128abec1d62766c5fb2bbb2c libreoffice-ure-common-7.1.8.1-14.el9_4.alma.1.noarch.rpm 4291feae901d3cf892eba3e5239092ba410b7de14bc260acd9634c43f17bd83b libreoffice-help-pt-BR-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 436964a7045d924ba61accf3adf6371cdd423f16506abf8304ca864f5bac2717 libreoffice-langpack-hr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 438342fdd3677e78872531a10f7ced58de527ebab7de6334209fb5e37b893d88 libreoffice-langpack-ca-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 441be4857f0719a5f94eb99767a3b6aeff2838d8be3c26f79d301a5a37e2c32d libreoffice-langpack-xh-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 44d7e146143dce3efc8632c8407f4bd884f35f14ef210063cca4c51750a9aa15 libreoffice-langpack-br-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 490ddbbb6b35641082286eb454657e3a46b3bb975e646f98d26af50c24518110 libreoffice-langpack-da-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 49925ce556ff0dc35b8a6787c945dd6d9ef4cf9b021fe794cc7d3a435bdd3ca6 autocorr-vro-7.1.8.1-14.el9_4.alma.1.noarch.rpm 4c2eaaac055ca71254f1e2a1ec6fa65fbf450cb216d56d609a9bf2bf8ee8f48c libreoffice-help-zh-Hans-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 4d0e45b2f451132d7bea83ab7ec888d86f30333d66cd85f983f9f93cf74638e1 libreoffice-langpack-de-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 529eacc99acb6a266cee9d6cab5d01d0d12480874f3a9698c0e9d83ffe99674e autocorr-es-7.1.8.1-14.el9_4.alma.1.noarch.rpm 53ad21dcadcf49aca5d1f6c8687699d995cfd2e5122e14d25d7bef04bb7e9a02 libreoffice-help-el-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 544bbbcf4e3ae424aab0d05a30a8462e96768048b708cee92eb089ebeb473248 libreoffice-help-nb-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 54b2a14c08f99d2a5ef34fec8d49c6cfa4c675f3109c5819b15ed34ca91b5613 libreoffice-help-cs-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 55e2c8252a2510e6d09b742ad4047cfe849ea4fa13132f37734080b8b02ba982 libreoffice-langpack-sr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 56848ea175d8d9492b07d0af64e1046eeb251374f000bd1870d809df844e61c3 libreoffice-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 5733023666c5300a0559c1b2b5f45d8e7a24681a642cec144d9b709690b84ce6 libreoffice-data-7.1.8.1-14.el9_4.alma.1.noarch.rpm 57d0f7bbfe4252a743dbda6d7827d60dd7a7642a261dbf90cccd859af57611b3 libreoffice-help-lv-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 5cebc738797a7e70990b35dfcdb06c85c5c0344051a6baf7b8ccb8892dcd16d2 libreoffice-langpack-kk-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 5de2e5aa38cca27a462da0e80b2ad2ee0c6c10b33fb66d8f767a9c46b0c23cbd libreoffice-langpack-et-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 5f4290f29b327dcacf58980878a1b7796a6d9f6061d3f2e7aff7824a303a1818 libreoffice-langpack-pa-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 5f8bb1304d6a7d2fdce4e018dfc0e71e9d4c1702ea539489caf690eded3facf9 libreoffice-langpack-mai-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 616ff233a97ff1a8df31fdfb12bb0f01f23940730598dc73dac03751f75b7fa0 libreoffice-help-sl-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 61fe404d619e9ef1fb35f656e025acef90cdf15c9239316345453544bddc78dc libreoffice-langpack-nso-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 6333a335dcbd42dcac50d611d3202311d831b98eef242f63149efacc14871fed libreoffice-base-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 63c2a125d87044220b19b80df706438899bf86a3fdb058d7c51054873181a397 libreoffice-help-ro-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 649eb5d4b09b26422b87cd407e59378ccf57d1edc2be21528b22733bcc90a425 autocorr-sr-7.1.8.1-14.el9_4.alma.1.noarch.rpm 6545894b8c39ce7f556f824b323f07de5d645937ee6f7c5f9e8d391dfc50215c autocorr-fi-7.1.8.1-14.el9_4.alma.1.noarch.rpm 65c386f85824567f6c79ea1df4e3b50e259f1d9bfb89e75253e527eb1376cafc libreoffice-help-fr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 6957e0f2cd810ad07f71c56996463a611d192bdac703285513dc7539d1220465 libreoffice-langpack-hu-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 6abe880a71d33b532feba67a4f0365f04982b22f089c7dc9e301c979fd534212 libreoffice-langpack-zh-Hant-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 6ae42896bd7b20242178900132661946972001c477dfe294f9b8c69de0f28394 autocorr-ja-7.1.8.1-14.el9_4.alma.1.noarch.rpm 6b7148ae7a1bc9a56a9e22085a80e194ce8436ab9d6ecc9984c3bd9d3425b19b libreoffice-ogltrans-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 6c2f5a0fd18dd83cb837454e85736b77b3ceb1c897b5688078a6828664107d40 libreoffice-help-uk-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 6cac01391c8f410a593ad21e068a1e356c3be242b6f34ba8fb29e0b797b7ee91 libreoffice-pdfimport-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 733a3fac3f24cdfb7af3d274507311a5b1ecfb8a633a51ccb4656c39b436998f libreoffice-langpack-fa-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 7983001cba4aa43ac13b348b1aaf298aa4aa99273a9fe19d4747fed3c6e9152c libreoffice-langpack-nl-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 7ae8a0e59fa8b83619cfd0cdf871d53d47a36f09fb4e7ea5caff3871e3b38552 autocorr-hr-7.1.8.1-14.el9_4.alma.1.noarch.rpm 7e73671ab7a4d78a8705ece9fa8f86667590e39c189f42e8d6396434b0294eed autocorr-fa-7.1.8.1-14.el9_4.alma.1.noarch.rpm 7fbe676c5cd96458be8eeb9c0caf0851654c9f44aba9c55bdee8f11d4f04d4de libreoffice-langpack-ko-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 82626e3e768a8e99f772fbb8af69fab2306980e4f023af68bd389546253eaa64 libreoffice-langpack-sk-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 835b27793cef6754e73052dcff3e55971537850b1e459862ebba28940593a8c6 libreoffice-help-nn-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 83e518a31ad6a702650e77ba21de9237442cb48c0028b1607633644a6b093c68 libreoffice-core-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 8534a69f2442d09d5a0509cb76eea4b86039cac81c2e56aba58e49f2f40872dd libreoffice-graphicfilter-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 853f719137bfc5f070137b9e5824a956a94e414f4932fd224a4d316e9ce1d3de autocorr-ru-7.1.8.1-14.el9_4.alma.1.noarch.rpm 854fc8acb4552cf10dadb6ca0248156c50bc36827592f173cdee979223b4fdd2 libreoffice-help-lt-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 8c471324dc1ecae8a2b04dc2e08180d449b8371a1aba426854a1fe9b5bbc473a libreoffice-langpack-eu-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 8da6b4012d343c6fb7fa70015b0a4f4ba7aecb72a63e9f6ed24c02b6a8de4173 libreoffice-langpack-af-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 8e5bb3093f9f32525860d32beeed11d7bf759880608c4656f241fab3e548c5eb autocorr-ro-7.1.8.1-14.el9_4.alma.1.noarch.rpm 917a09496d0e65f6b8fbba2f549119b9bf586b20b0bf6159d6825692d808993f libreoffice-xsltfilter-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 93837871b74338dd488e8936f408f89a8e707defbcb2d30e8c3a523d0fd88ec7 libreoffice-help-dz-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 946197b9ee69c0e9d3dbda31f1d50db4270c08d13841bd3055fd13dddbd320e6 libreoffice-help-hi-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 94b019e70610787a87609cbc7068e7704e131c2f7f3b85012dc93ef4033c34b0 libreoffice-langpack-ta-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 96c104a5586f9669f889a2f7965b5700e83f70771d92fd572174d63a2071cbb6 autocorr-lt-7.1.8.1-14.el9_4.alma.1.noarch.rpm 972e69ef6431fee03aa3524adbeb44381c36e227b9bffb3f8ddb71a8ae4af282 autocorr-ca-7.1.8.1-14.el9_4.alma.1.noarch.rpm 9906fc219965f1c5987ce6a15b2cb9f6927ac872140a1599c2b90d6086edb617 libreoffice-langpack-bg-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 9a9fbbf3456ef6ccb7422f66643ca1c50967fa20c5d4e8330c8a0c412df1eba6 libreoffice-help-hr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 9bc11628c78917bf16adfd776ce4a572faf9ced685dd9a8d8bffc5217e303197 libreoffice-langpack-es-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 9ca540f6a29a9a1b330899e946696905d43d73e8f0ff30cf900e7c1c58480b66 libreoffice-langpack-el-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 9d22576502f381b2713ce6e81ce4f8080a5672f7b13a74eadfb6ecd5a27170f5 libreoffice-help-es-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 9db7b060c3586d0014fc95201816f58ff88d6ef03d5cf3bc8ea7fcbe41767893 libreoffice-writer-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 9dd30f3c6492f4e64323f93e5750432b696c520a90ffa7ee0e979eff7eb25ae9 libreofficekit-7.1.8.1-14.el9_4.alma.1.x86_64.rpm 9e08e71159922b19784b229c76b86e2d1f79e4674e17f51ccbd18ace32e1fb82 libreoffice-langpack-sl-7.1.8.1-14.el9_4.alma.1.x86_64.rpm a0391bd6260d2f51678aa52f28090ae2572b6c61ce16ae9e01f48b158bcc4f40 libreoffice-langpack-ts-7.1.8.1-14.el9_4.alma.1.x86_64.rpm a09484e011e52fa0df3ea1f57ff4de9f659a76f9b8566fe4f2d9dafd63e1dd6e libreoffice-x11-7.1.8.1-14.el9_4.alma.1.x86_64.rpm a3388254f95b8060bd86657f7d73db6344aef2fba0c80f797d403916e898e3e0 libreoffice-langpack-nr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm a3cac8293f542981b39975f0b77b5c95fd1859e8bd87116b2d153ef4565ad608 autocorr-it-7.1.8.1-14.el9_4.alma.1.noarch.rpm a3ef42834dde79540013495b7335647bbb91ebb29d847568809a2f1e56f537ac libreoffice-langpack-tr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm a532dfd9003f34c2e6feb62b0d0b194a40975ba447bacd42e97100713eae4d09 libreoffice-langpack-or-7.1.8.1-14.el9_4.alma.1.x86_64.rpm a5f17b18d6745de7f3fffb4e1fb97e9a586411799d8d6b835444959d4ea3eee4 libreoffice-langpack-as-7.1.8.1-14.el9_4.alma.1.x86_64.rpm a6bae900e4b3de852f2f8c2d3db09a4388504a6a5e87c22abde6b5568038b07e libreoffice-pyuno-7.1.8.1-14.el9_4.alma.1.x86_64.rpm a7816e9be1bb6b40c59212a8f6a1902a47f4d2c26d21c93300c7dfcf235c7af2 autocorr-af-7.1.8.1-14.el9_4.alma.1.noarch.rpm a9ccef1e43e676f3547777ce4b4f02cc12d5b706bd246a4fab15d1d7f220965d libreoffice-langpack-pt-PT-7.1.8.1-14.el9_4.alma.1.x86_64.rpm aa2055d1c92a1a1edb50e5f5244c7a43155d072e08c52b793b25a341422f8eb0 libreoffice-langpack-nb-7.1.8.1-14.el9_4.alma.1.x86_64.rpm aa6aac21fc957528005d91173bc5a6f114fe937e1447c564d4a6f2193767b250 libreoffice-langpack-lv-7.1.8.1-14.el9_4.alma.1.x86_64.rpm aaf28bc010f4c2120d7535e8a413076df4cb9ff2312bb47cd8b501cda33d8de2 libreoffice-help-eo-7.1.8.1-14.el9_4.alma.1.x86_64.rpm ab434f83f56a1c68fe82f6c3ce870b77948d9d05a43cafb82ff0819fa7a399f0 libreoffice-help-bg-7.1.8.1-14.el9_4.alma.1.x86_64.rpm ae1d71c473320978dc1da856eed0af50864914ba70ecb74c22ef127021e47297 libreoffice-langpack-lt-7.1.8.1-14.el9_4.alma.1.x86_64.rpm b2ac15074c47e9a74b0010f0927a67db000763d7f041077ad4f26ac025740e57 libreoffice-impress-7.1.8.1-14.el9_4.alma.1.x86_64.rpm b345803ce59f7d368d8ebe14cc3729e1ad3514e5c7f6a9a2f745fae36f5e60a2 libreoffice-help-fi-7.1.8.1-14.el9_4.alma.1.x86_64.rpm b50447375018c97f82269ac7a5d2a99c15fb3960ab796b386d520a6eb2d109bb libreoffice-langpack-ss-7.1.8.1-14.el9_4.alma.1.x86_64.rpm b52e4155a7212aa86bcb4f0fd042fb5740316251f0eaec861fbf4e002cc46418 libreoffice-langpack-eo-7.1.8.1-14.el9_4.alma.1.x86_64.rpm b83a66368e7811d4d8ef2a2cbd2708f71379ed22474581c9a55fc731241bac8e libreoffice-langpack-ar-7.1.8.1-14.el9_4.alma.1.x86_64.rpm b84be2b0dbe02aeafed947ad4bcc8a2ba98bf1c30638327c73d524d35afebe4d libreoffice-langpack-zh-Hans-7.1.8.1-14.el9_4.alma.1.x86_64.rpm b8ddcf912014b7ee6620478936b344e297a30f0bb122ef16be2f5147f2dcfe90 libreoffice-langpack-th-7.1.8.1-14.el9_4.alma.1.x86_64.rpm b96c9d317031e1356f63512380238d7402d29141487ae5efa9b5a6e396f4bbca libreoffice-gdb-debug-support-7.1.8.1-14.el9_4.alma.1.x86_64.rpm bf05b191cb81957b5580af12feb41f1383a1e0c7dd64eb5f4905ac1e8d4c1aca libreoffice-langpack-id-7.1.8.1-14.el9_4.alma.1.x86_64.rpm bf260531b452b5160034fdb0958139ef793424aec7d4b763ea0aca4d992c2223 autocorr-hu-7.1.8.1-14.el9_4.alma.1.noarch.rpm bf86ce8854f77d58f880883e1c9847de3609d645b082eb26618679acd9320e3f libreoffice-langpack-cy-7.1.8.1-14.el9_4.alma.1.x86_64.rpm bfe60ee554fe8e78a38f9822c48b4b86da8d5baa61cc699da8001e28730441ec libreoffice-langpack-bn-7.1.8.1-14.el9_4.alma.1.x86_64.rpm c00767a04d00ad00d677424bfc564648971b51a4afdc7446f392113b1bc00466 autocorr-bg-7.1.8.1-14.el9_4.alma.1.noarch.rpm c1a78c4f23031a4231af3c749aa1b40eb0f6dd48f5d8d1ca1a3126c78b088857 libreoffice-langpack-hi-7.1.8.1-14.el9_4.alma.1.x86_64.rpm c1f78f6509f614ce0d8a7a8e3cbf22468d05d643192acf46743928831e80fa49 libreoffice-wiki-publisher-7.1.8.1-14.el9_4.alma.1.x86_64.rpm c20b319293d359158b5e9b64823075cba1ae7edbcb09e9021f89c55fc65613c6 libreoffice-ure-7.1.8.1-14.el9_4.alma.1.x86_64.rpm c31c15777993be6dfb30543357334cd01ac5b20fd3c4f463fd5439ba2eb51925 libreoffice-help-it-7.1.8.1-14.el9_4.alma.1.x86_64.rpm c5208194e9057b2ae2533dc50e50d00e74560adb3e47e8fe250e898b48e76216 libreoffice-help-zh-Hant-7.1.8.1-14.el9_4.alma.1.x86_64.rpm c71281410a132f5da943d1675d2497c44cd026c4ae6ca60a705f37898acb3095 autocorr-da-7.1.8.1-14.el9_4.alma.1.noarch.rpm c775ef1c5924f061b728179ae9a2bddc5e38f715da6abcef8560d4fa2b016656 libreoffice-help-eu-7.1.8.1-14.el9_4.alma.1.x86_64.rpm c8e57417b481f4d74ed56ed0e7ef1a8e5fbf54e6bd5e5d4ebe4afc5d30838126 libreoffice-langpack-fy-7.1.8.1-14.el9_4.alma.1.x86_64.rpm c927f8800ecedc9b73a5cf300b82380265b0568509a82b96a0113889db30dc75 libreoffice-langpack-pl-7.1.8.1-14.el9_4.alma.1.x86_64.rpm ca7df578a7f8640275da7f5b97554f457cf2906a32d77b32515b62933f5f55d4 autocorr-de-7.1.8.1-14.el9_4.alma.1.noarch.rpm caf4102616b9e75a46f4dfb8a7b538ad6918fc65660b30f0e3b386fa87bac65e libreoffice-gtk3-7.1.8.1-14.el9_4.alma.1.x86_64.rpm cb3a78e081d18280df092e588678c5e06f3bcf2b38bd09f0adc1323b121e8d70 libreoffice-help-si-7.1.8.1-14.el9_4.alma.1.x86_64.rpm cc3e02ce59d0a46ae8bd099b6f6697f8bc9599bfe1110c9216135091d426e175 autocorr-sv-7.1.8.1-14.el9_4.alma.1.noarch.rpm cc718c3e0045d5d3d1817c5683e952a2e89bfd3b2aa0d33cfbab0abb3983b4f5 autocorr-pt-7.1.8.1-14.el9_4.alma.1.noarch.rpm ce4692654eb0e2e7221536dfd9547f8dab75c0ed040a53bd1c37e5fcadbc0861 autocorr-cs-7.1.8.1-14.el9_4.alma.1.noarch.rpm d1bf8cf35dc8ce70e5f899c75e586eabf380aad96325167c1269d0ff5bbd7ced libreoffice-langpack-he-7.1.8.1-14.el9_4.alma.1.x86_64.rpm d5c3be1e1e33183e2540606028b96581bfdef974e3342516838b1b9b7b725922 libreoffice-langpack-nn-7.1.8.1-14.el9_4.alma.1.x86_64.rpm d6ef0afc449c39f1a81010e2aedb24a79fc740ce645ba7290877fa3d162ed73c autocorr-vi-7.1.8.1-14.el9_4.alma.1.noarch.rpm d8bb66dee07b3cf1c922dc9a05586dc13fbe9e3aa1c5d22b58f254c6940b2961 libreoffice-langpack-kn-7.1.8.1-14.el9_4.alma.1.x86_64.rpm daff13c9d198a2a09ed957754413a6b1487e83cdd534f5fa0a8ce8396afe6e0d libreoffice-langpack-en-7.1.8.1-14.el9_4.alma.1.x86_64.rpm dbe15e82baa9144591a24814f7a0a2e235fc2cb874b898efc1e93e9ab5983c9c autocorr-sk-7.1.8.1-14.el9_4.alma.1.noarch.rpm dca4350a8bd783c54e5e525d3ee0741f26388a28ba979c2131bf44aab3edf4b5 libreoffice-langpack-ro-7.1.8.1-14.el9_4.alma.1.x86_64.rpm dd08586a75de28446952f0294aa8614a4077a25c140d11ea001eca3d8f82307d autocorr-hsb-7.1.8.1-14.el9_4.alma.1.noarch.rpm dd2d65bd599be9e5c410e2cc1103b57927580009b8b3b03feffbd53dd67825aa libreoffice-math-7.1.8.1-14.el9_4.alma.1.x86_64.rpm de3034ab4c1c7e1b8bea5e96557d68453176c8e1a8f9ad89545e93ce431c77af libreoffice-help-id-7.1.8.1-14.el9_4.alma.1.x86_64.rpm df8459f172c99f0ed157547c21cbc93798390c14cc0656cde28e1f2e07dbfdb4 libreoffice-help-tr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm df96bd685dee81427eed8bce1787f7c07742425e9616ba5570596244cf672a0e libreoffice-help-ta-7.1.8.1-14.el9_4.alma.1.x86_64.rpm e206aa6e39588f2138feab15e44c41cb96dd283537a133054c4b1e163aed1b4f libreoffice-help-de-7.1.8.1-14.el9_4.alma.1.x86_64.rpm e24a0d5f448c365ed11d10b08e823995dadfe0021ad1bd4f924fffe1eceb252f libreoffice-langpack-gl-7.1.8.1-14.el9_4.alma.1.x86_64.rpm e3539a53699957c1ca4f65ae5d1bd1029bfcc47583b80c4a879d5d7ef9a944f4 libreoffice-opensymbol-fonts-7.1.8.1-14.el9_4.alma.1.noarch.rpm e3d0bdf99370a15841869707cf7257b3662537e2e49afd084afc419913602f84 autocorr-tr-7.1.8.1-14.el9_4.alma.1.noarch.rpm e82ec8bc149c63a77dfd14d08daad61259b03a7b9ae6261b621cce3a611740c7 libreoffice-langpack-ve-7.1.8.1-14.el9_4.alma.1.x86_64.rpm e96be08802f55d8680b4baee4490a6582282afc3963178bc3a8295223603be53 libreoffice-langpack-ga-7.1.8.1-14.el9_4.alma.1.x86_64.rpm ece6b94c1605d845c651c90aefa9875e2ab19351fe5dffd5556e2940aeed8bc5 autocorr-sl-7.1.8.1-14.el9_4.alma.1.noarch.rpm ee3cc02f39479ee7ffa63bfd6e36f3c171ff8eeefb822cc4954150c1f2d7ecb8 libreoffice-langpack-zu-7.1.8.1-14.el9_4.alma.1.x86_64.rpm efd02bb73f4a3dec9bdfc3d328ac3dd331ee9869a034dbfa218f15934a04d479 autocorr-mn-7.1.8.1-14.el9_4.alma.1.noarch.rpm f3efc3bf522b03e97200ab089eba90cd1402d101b5c4af43f4d1ef06d3f6c8f2 libreoffice-langpack-st-7.1.8.1-14.el9_4.alma.1.x86_64.rpm f4138dba088191dee964985fcae05b3077b8518ca87c7b11efc3d91fed1389ab libreoffice-help-gu-7.1.8.1-14.el9_4.alma.1.x86_64.rpm f69a8be827f9f8f8fdba435a5391589a93d129267aaa9a275f45aa2835fa4eef autocorr-el-7.1.8.1-14.el9_4.alma.1.noarch.rpm f85e217c6b2413ee6d196f404aaf38dff8d131ac37d6fc8389b02f87dbabe079 libreoffice-langpack-tn-7.1.8.1-14.el9_4.alma.1.x86_64.rpm fc555f0614584cf086c76722c842a659eb51208da276c4e60111365833f93398 libreoffice-calc-7.1.8.1-14.el9_4.alma.1.x86_64.rpm fc7247e6ba8bd2c8458c461345f8045fddcf3473ac7f57cba594f68c6eb01dce libreoffice-help-nl-7.1.8.1-14.el9_4.alma.1.x86_64.rpm fc9dba5a95013b1e561c02252a965b2845deaa9c1e19ab6b12c1e78e61fdf163 libreoffice-help-sv-7.1.8.1-14.el9_4.alma.1.x86_64.rpm fd9830873ffd0d2e0af21485507f77d88efe8ce222c53f6509f556cbb7682e26 libreoffice-langpack-uk-7.1.8.1-14.el9_4.alma.1.x86_64.rpm fe676a6b0cdf1a23d7cc805f41fa35cf4305e67c67f4da7f0da1c280ea97711f libreoffice-langpack-cs-7.1.8.1-14.el9_4.alma.1.x86_64.rpm fea40ae6ad865bf88d1aaef9a26932dcad09fccf910cf6d7a8d83f1d44c34ce6 libreoffice-langpack-mr-7.1.8.1-14.el9_4.alma.1.x86_64.rpm ffd78afdf79fb26a3aac1912ac7a8ade79034011e835ba0bb796ba47a9c85a11 ALSA-2024:5693 Copyright 2024 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default tomcat-docs-webapp-9.0.87-1.el9_4.2.noarch.rpm 01904a6fb73b0bc6f290c034a3676703f46c84645628bb122d1a86340c4e2a41 tomcat-jsp-2.3-api-9.0.87-1.el9_4.2.noarch.rpm 2b335cf78354a8be19f8542b0539c61412169ae6a244f38cef1c45b9c572d858 tomcat-lib-9.0.87-1.el9_4.2.noarch.rpm 62fe3b4463304cae3c698f5e1d2f601916e58179a849b706cadde3aff3932d0a tomcat-servlet-4.0-api-9.0.87-1.el9_4.2.noarch.rpm 9390ce84a2e34dd9e1a467b91358aaeefe00bcc6ab276aa7dc71ca4644e3e57e tomcat-webapps-9.0.87-1.el9_4.2.noarch.rpm a787954b9946e7d56a62a6239d6ddeed9db293b99878db7fae307ec78545b5c9 tomcat-admin-webapps-9.0.87-1.el9_4.2.noarch.rpm b8f8d9aa82b9e1d483cdb4aeef9be13514414f2332ec7d2daf0c4fa0d0d7c75e tomcat-el-3.0-api-9.0.87-1.el9_4.2.noarch.rpm ccddb2529b13cbb6e8f188a6162174398310a98b0dc227b541b6f94f42d8d2c0 tomcat-9.0.87-1.el9_4.2.noarch.rpm ce7d9aa19e6c158359f9e3b6df7f9bc9651188bba623f82c0ef783f4ad68ed63 ALSA-2024:5815 Copyright 2024 AlmaLinux OS 0 1 Moderate

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Bypass network import restriction via data URL (CVE-2024-22020) * nodejs: fs.lstat bypasses permission model (CVE-2024-22018) * nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default nodejs-full-i18n-20.16.0-1.module_el9.4.0+107+dbd477e4.x86_64.rpm 22f38b30aaa1fc58e85cd51749691e09b85e290ddec431aef44d143a0291018f nodejs-docs-20.16.0-1.module_el9.4.0+107+dbd477e4.noarch.rpm 54d42b8e6332690ae739d234375760478031d5587beb471bcb6bd3a503254a00 nodejs-20.16.0-1.module_el9.4.0+107+dbd477e4.x86_64.rpm 641a5f3eeb50b92afa1438949e4df27e29ea23924fd5600cd82c2d291341a935 nodejs-devel-20.16.0-1.module_el9.4.0+107+dbd477e4.x86_64.rpm 6b967e62eed5a9243df667833778be47a0911758ffa476f10844d756003addfa nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm 6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f nodejs-packaging-bundler-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 94ac92c4ae695d87df9c616a6d3ecafca411d07358cf60516392e320eefcb3c6 npm-10.8.1-1.20.16.0.1.module_el9.4.0+107+dbd477e4.x86_64.rpm bd3ffbc3991e6077eceb2e3786224c6bded1ecc9b67aba8c8c0c7bd23ce20d91 ALSA-2024:5928 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581) * kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668) * kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810) * kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855) * kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908) * kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019) * kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016) * kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415) * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898) * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897) * kernel: netfilter: validate user input for expected length (CVE-2024-35896) * kernel: netfilter: complete validation of user input (CVE-2024-35962) * kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003) * kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771) * kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880) * kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025) * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608) * kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579) * kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544) * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540) * kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538) * kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476) * kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905) * kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911) * kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912) * kernel: mm/huge_memory: don&#39;t unpoison huge_zero_folio (CVE-2024-40914) * kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929) * kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939) * kernel: wifi: iwlwifi: mvm: don&#39;t read past the mfuart notifcation (CVE-2024-40941) * kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957) * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978) * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983) * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) * kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041) * kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076) * kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110) * kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-devel-matched-5.14.0-427.33.1.el9_4.x86_64.rpm 0347e96c29cae41ef4b16bb2bbc6188dc4e3ca8d76dff226f3da7c10b6b8b33c kernel-debug-devel-matched-5.14.0-427.33.1.el9_4.x86_64.rpm 15ec0f8bf5e3a7d302abb6bc3a31f9219070e28bc0cecfaa8ee580c55dfa6663 kernel-devel-5.14.0-427.33.1.el9_4.x86_64.rpm 2c2b772c902a071b4658bdb99d9a420501675cb95e01212fcb22b23bb1503708 kernel-headers-5.14.0-427.33.1.el9_4.x86_64.rpm 60aae4ba3ab5f0c28a43ca6e8aeedcbb8f78396053eae2b1ae8525d236ddc5eb perf-5.14.0-427.33.1.el9_4.x86_64.rpm 823526582d8a126417f9ca021d21df4dcf8ba0fce72403efe3feb3cfd301752c rtla-5.14.0-427.33.1.el9_4.x86_64.rpm 92efb343c4fd9c03711a898b23232ba2a6f20257634f9a6fb166a3fcd0b394dd kernel-debug-devel-5.14.0-427.33.1.el9_4.x86_64.rpm c467678408572be1d85c34eaa5a93b0dc96b6acd9e1d3f5882f083322215c921 kernel-doc-5.14.0-427.33.1.el9_4.noarch.rpm c652db69e7ae2a7888de8d1f379059d067e94fe3a5e03498067fa20f7cb4ae09 rv-5.14.0-427.33.1.el9_4.x86_64.rpm fab58288c46985db3082d6314665389ada08c90b0b94c010a64511680d4252be ALSA-2024:5929 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317) * postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default postgresql-server-devel-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 0360ec1d3004625828f1da90e5422bcc5d5d89990eb054e3148c177373a77c3b postgresql-upgrade-devel-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 061619662b9c074141fbd328ce7a7670582adf418833e736674548d722548890 postgresql-server-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 20fe396a3e76d31a4954ac5c7db511e10cb77e58585fcfa90ecfd9277d72ca60 postgresql-test-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 24194d4170946ef2f94514959b9f47171b7c844c8ef0452dca7f379bc6d5a1a3 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgresql-plpython3-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 59b4d1fce93bce467e710ec2e618587d93ab093d8bc6bd7e842e8f4114abc2b0 postgresql-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 5afa8c710e69bb8f84299081b2576e25451a9b0cbb91642f506b2d36b819df41 postgresql-static-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 712f4e3506f27e649e3868ed52306a2793d85f8fd378697ffa019e5b15ba79d7 postgresql-private-libs-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 91a48010cae17b6fe6b62fe1e3a367e3ad82d9d174b3b4a129dbee8c36801b90 postgresql-test-rpm-macros-16.4-1.module_el9.4.0+109+624ac33a.noarch.rpm 9a63e985bd0be681d52f689ef51210d8174d13c50f2de4208d0a784cc74ab9d2 postgresql-plperl-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm 9bc2a4a1c1525f0517575eabb1ef4ed0247fc0f1605d8dea97dbbd91f3e128b2 postgresql-pltcl-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm af68299c1ff34e113c00e7d8b1a60552b88b4db0f63325631772f4fed0a15658 postgresql-upgrade-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm c2dea3ff90410df99d5ddadcde721da15e87e9bfd1793cf90a2c53e397fdc5e1 postgresql-docs-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm d25e584756462fa73f7d447bda35bdae8dc7521a1695bc87b8dba18191101659 postgresql-contrib-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm da7b397ade0e87e28193def1049c101ba5785dbcbaca00269568f74366f7d5bf postgresql-private-devel-16.4-1.module_el9.4.0+109+624ac33a.x86_64.rpm dcf307603bd280172a7d509862f5897a0772290c9122f8bdcc4c7cc3f861281a pg_repack-1.4.8-1.module_el9.4.0+66+eb9878bc.x86_64.rpm eb104a5d66c1a605e23024a9b47df606d1581031f36cae8f67ab01380eab68c6 ALSA-2024:5999 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default postgresql-pltcl-13.16-1.el9_4.x86_64.rpm 1b48d900a8bc8b914bb683003129f5037b714e6d59381553e35c6d04719803ce postgresql-plpython3-13.16-1.el9_4.x86_64.rpm 4c5dd5d8ab899208d1b5202251ec160e9f9a7d81a065ed03ab65452489aebfd3 postgresql-contrib-13.16-1.el9_4.x86_64.rpm 606ca3714357a21a0f375680317b22b1c9f685042d99c2c5eb3bd1ad3eaca5c4 postgresql-13.16-1.el9_4.x86_64.rpm 80653b3c1f55332f4006d8c620a763399251a5e13fc47336b318086658f1f7b6 postgresql-server-13.16-1.el9_4.x86_64.rpm 97d1894cbb261c99b168ccdd44693d091f8b43743eb74839b72f8243d61f5a6f postgresql-upgrade-13.16-1.el9_4.x86_64.rpm ba45551b36ee2b60f9fc0917dea1a5012dfddd7ed67d73cd4e3ae1355ad630e6 postgresql-private-libs-13.16-1.el9_4.x86_64.rpm bb0c12d573acc67834dccfe5ec0ac1ac0c75049e63f4be7ea29e116eefa72739 postgresql-plperl-13.16-1.el9_4.x86_64.rpm e232f0a84448c71f6a942fd8a4af877c4301645ee1e49f22cb8f7731766125dd ALSA-2024:6020 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348) * postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default postgresql-plpython3-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 0ef4f8e1aa4a65299672fab45553e0aff838cfcee0af3ce51eb66ff7b5e9fa15 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde postgresql-upgrade-devel-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 2137c6c117c0ccd202c0253d0d38aebaf284cae3a547efaa7b37ff8a7ef05bf7 postgresql-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 2c78bfe2be7cab96f4ff93be48b54db3400b2b768bc2ad5a16fb55a325278831 postgresql-plperl-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 367a31931e07d60d5c3b66048853d1e6bb80657cbff4e4c688e1bcc2156dbdc6 postgresql-server-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 3b3d861ba3fbb1fdbe8db486aa946227913bda356fbcac46cdc2ccca588c0957 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba postgresql-docs-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 4cd9096ff6b2a96f18cad2d6ab343fd5006712bba66cd26634434bb84409e089 postgresql-pltcl-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 4f7ff9f6e81cadef9c764704779fc93fa88ab40b1f7decebfbe2fd9863cb672c pg_repack-1.4.8-1.module_el9.3.0+52+21733919.x86_64.rpm 71be1ee30e398e35aede67c5d3fc01238519c2ece414b18aa4c16e7079d976a8 postgresql-private-libs-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 7219da8bd107bd7757188f3f4dde13914aba94985930c1778fae492be53686a7 postgresql-private-devel-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 74b3fbff962558c525e7a638519d2aa98f825979aeb1abc813947c6b201dd4a8 postgresql-upgrade-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 7bf0714556193c8e24565a224ab414f0bf007f740ff3064e1847674db0fc204d postgresql-server-devel-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 7bf97e4a0eabdb2cd932201196a4b5f73a3752ac59d3401dd44ab81fad45b4d6 postgresql-static-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm 9b0f77c0b063d57ef06290d675a2075a02c5a7c54fc7c3fe0e17cc6c463b7503 postgresql-contrib-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm a1fe0f3d639aed4b38ef781bf01d06a4a9808cc8de3f9b93fb1fa75222eab0e0 postgresql-test-rpm-macros-15.8-1.module_el9.4.0+111+667b9e9e.noarch.rpm dee51d8823d2bdd22387d82a4d8e40de05058d00c94a5e9216bdaba278f792dd postgresql-test-15.8-1.module_el9.4.0+111+667b9e9e.x86_64.rpm f8e0cdc7d2d7d44c8aaa4199c8ddc3684acf467599e2b0a9586dbf5bf0a995b1 ALSA-2024:6146 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.12-tkinter-3.12.1-4.el9_4.3.x86_64.rpm 128fe57c996747c43ad56d539478240a898bc4b008382895aee83e8fcb0072a0 python3.12-devel-3.12.1-4.el9_4.3.x86_64.rpm 2ac147bcae513b6d549f952cbaef3116f1b2bdb35280a8805870b4ad748b36ea python3.12-libs-3.12.1-4.el9_4.3.i686.rpm 51edf3933effba607a593510ee37b32563cd325c5775b9c00542a674b0c22c5f python3.12-libs-3.12.1-4.el9_4.3.x86_64.rpm 6f7bddee4386c2266c45543861ff44857f6d2072965f93dc7c9ab4a88678b7d7 python3.12-3.12.1-4.el9_4.3.x86_64.rpm bd360a14da44540c15b594b1bd41b73ccae4fd697f579e4bb50c5b47b4736a7a python3.12-devel-3.12.1-4.el9_4.3.i686.rpm cc25e1be7765af6e31a343e672bfdaee777d19cc3887d4d7137dd9dfe5054ff1 ALSA-2024:6147 Copyright 2024 AlmaLinux OS 0 1 Moderate

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863) * nodejs: Bypass network import restriction via data URL (CVE-2024-22020) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8 nodejs-full-i18n-18.20.4-1.module_el9.4.0+112+bb28ff81.x86_64.rpm 7f95ec8ab4751a732ce743406d381494606f036b70f53b00ccc314ef36cac67e nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm 8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0 nodejs-18.20.4-1.module_el9.4.0+112+bb28ff81.x86_64.rpm abe53def3f280c81b598d636153ee471fbaba656cdf9189623774b809a69a621 nodejs-docs-18.20.4-1.module_el9.4.0+112+bb28ff81.noarch.rpm c1e7db42d47c00e5e295bdcf95a9537a5fe05b24354641c7e5c16390e6498698 npm-10.7.0-1.18.20.4.1.module_el9.4.0+112+bb28ff81.x86_64.rpm ccbcab67d8e1db19485bd591484c63f8bb581f523b293f8810e6ab368f0d2ecd nodejs-devel-18.20.4-1.module_el9.4.0+112+bb28ff81.x86_64.rpm df50476a3180a7a29ecb48451dbb469c94b6854e67a56b720102a3fb8d6e2add ALSA-2024:6163 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-devel-3.9.18-3.el9_4.5.x86_64.rpm 15cb7a0821bfe9a27b19b507d96df1e27f45cd6a6d81ea67cf1baa51c5a6ed46 python3-tkinter-3.9.18-3.el9_4.5.x86_64.rpm 2b1f69d8dfb8e5cab6ac54efd3503de3e1ab74e28ae9dfa28b8a7cf6d310d90b python3-devel-3.9.18-3.el9_4.5.i686.rpm 6b32c4208b4bc20f4b5b35b13e4d41723a023e0a6c3cabb331deb1c530e57078 python-unversioned-command-3.9.18-3.el9_4.5.noarch.rpm e1a6012337dbcb80e3b8adae23768f6d42391a00e2dab862efff55c711a18e90 ALSA-2024:6166 Copyright 2024 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: GSS message token handling (CVE-2024-37371) * krb5: GSS message token handling (CVE-2024-37370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default krb5-devel-1.21.1-2.el9_4.i686.rpm 419e4b3689fc1570b1cf4da93e7ebf1841708312947b983c96c30d138c18fcfa krb5-devel-1.21.1-2.el9_4.x86_64.rpm 506015efb21235472699e1dcad5389e40398f21f76ed0010fc99ab88f5c149ee ALSA-2024:6179 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-libs-3.11.7-1.el9_4.5.i686.rpm 3ef72404f15aed187f73d7d2fbb48f7e6a43f6e20ab1edb4ade0b6f70b00f0e0 python3.11-devel-3.11.7-1.el9_4.5.x86_64.rpm 4bca17ca4ab49ee584e8f2f0fd18819b7b5b69495235996bb50b788504ead873 python3.11-devel-3.11.7-1.el9_4.5.i686.rpm 606403e58665baea0b4b2d36c5a42c3af3b5dae9322c13fa2bd7d52ce90c41f8 python3.11-3.11.7-1.el9_4.5.x86_64.rpm abf1fb926356eee4a32121eac6f3d92791f19be5d072f3551b8b3e26ca0fe7e4 python3.11-libs-3.11.7-1.el9_4.5.x86_64.rpm b691d6e4d1cc755a16b198b4509644ddd6761af8425c919b0f48c04e6f402867 python3.11-tkinter-3.11.7-1.el9_4.5.x86_64.rpm eb7b1d3b6b73e271678a19a33d888e5a27d423e567db7bbf679b2018f7c8fefa ALSA-2024:6184 Copyright 2024 AlmaLinux OS 0 1 Moderate

orc security update

Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations. Security Fix(es): * orc: Stack-based buffer overflow vulnerability in ORC (CVE-2024-40897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default orc-devel-0.4.31-7.el9_4.i686.rpm 0e3ca50cb4c5097af61dcac01898fb5663269670e81ef0729fb912734bb4a739 orc-0.4.31-7.el9_4.x86_64.rpm 2d92a51611cc5a68a941652b9d6b8c0d8add9095641b80da01e27a143fa28ab5 orc-devel-0.4.31-7.el9_4.x86_64.rpm 4c7046bcee58136991d45988602d3edcfb9fa9da97b5d4c9219f08c66b5e0b00 orc-compiler-0.4.31-7.el9_4.x86_64.rpm d944f7a8bdfe09a0332f1cb7b69bb00a80ba1700093428ee13e223a200f2bfa9 orc-0.4.31-7.el9_4.i686.rpm fb2728fd0148beb9fff80a471798f916f44d470ea940f342871cf700db68902e ALSA-2024:6186 Copyright 2024 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-5.el9_4.x86_64.rpm dce1e79ad5ff12586d1f2f00ceda89bc77a7ca96da853bd1419f494761aa918d ALSA-2024:6187 Copyright 2024 AlmaLinux OS 0 1 Moderate

gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gvisor-tap-vsock-0.7.3-5.el9_4.alma.1.x86_64.rpm 9ead0ab6697894fe8f9a702a50b9907aa49b8331eacb4b1d374a69cb0d5b322c ALSA-2024:6188 Copyright 2024 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default runc-1.1.12-4.el9_4.x86_64.rpm 2c6f957a8e99c97f74c7ab5fc88fd968d215d68004a9c38a2a21c53919b41c01 ALSA-2024:6189 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-tests-1.33.7-4.el9_4.x86_64.rpm 361fedb2deb08261e486345cad81e9dbb14fe4340591012b6fdb14784cc4f6ea buildah-1.33.7-4.el9_4.x86_64.rpm 37d35fb0b4e1a6729638d27d1396e8efe844c9c04c04bd5d4b86921dce88e4d4 ALSA-2024:6192 Copyright 2024 AlmaLinux OS 0 1 Moderate

wget security update

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * wget: Misinterpretation of input may lead to improper behavior (CVE-2024-38428) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default wget-1.21.1-8.el9_4.x86_64.rpm 4e408486ac7264873af7ff3616fc2a4974c3a315f9ce0bfe67f6c8e75ceecace ALSA-2024:6194 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104) * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default podman-4.9.4-10.el9_4.x86_64.rpm 0065efd816f914e7a04810d746cac815a820202a51c0b21f53b2255096a25fe5 podman-tests-4.9.4-10.el9_4.x86_64.rpm 2f25f4cc051c8c851bfb4f4d4ea282df49c6aa932636717ea3d421aafeb9082f podman-remote-4.9.4-10.el9_4.x86_64.rpm 3b3b526b3a8053d41cfc2f97db79042ae673560f012f0006a46ef0cea60de259 podman-docker-4.9.4-10.el9_4.noarch.rpm 9211804ac5d3c7cc1f7490d67ca70d07a72c9b68c3bc0830397903b832991129 podman-plugins-4.9.4-10.el9_4.x86_64.rpm eebed07819d4006101831f29b18b1ca602869adc08c2b6a81987abe78bac1be7 ALSA-2024:6195 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default skopeo-1.14.5-1.el9_4.x86_64.rpm 0bf6e87ce573ca4fbd93d55306f76ff50c2ffe86f6ce694f035855ea1f24cabc skopeo-tests-1.14.5-1.el9_4.x86_64.rpm 619a2d0eb14b932005615e713c7a3753ada61dd50aeb9fa7c5490dfe93db5ae1 ALSA-2024:6197 Copyright 2024 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: format string injection leads to shell command execution (SAFER bypass) (CVE-2024-29510) * ghostscript: path traversal and command execution due to path reduction (CVE-2024-33869) * ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths (CVE-2024-33870) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default ghostscript-tools-printing-9.54.0-17.el9_4.x86_64.rpm 0e0b8d20f0108331dbb4c855abef89436e35ddd9b3257899d2c5a5beb413d733 ghostscript-tools-fonts-9.54.0-17.el9_4.x86_64.rpm 3ffc7a94f2cc0ba461d766199043781f952315d2d268534cc448016ff90368a2 libgs-9.54.0-17.el9_4.x86_64.rpm 52a84adbee4192939cfeba4534a8827dd319638dff50dd133dfb7822748f4d18 ghostscript-9.54.0-17.el9_4.x86_64.rpm 679ad92c20421188bd71bf8ec48a0eafe0ef11b0f2c6dbc7d692475c042f5a4d ghostscript-doc-9.54.0-17.el9_4.noarch.rpm 876f49c2bf4783256e97669baae56fdab8ac9e9e87b009224182323e48476af4 ghostscript-x11-9.54.0-17.el9_4.x86_64.rpm 941d1052885a9e99f801f20372e7ad3109c5f5f94d9a5e8633d0db81ae416262 ghostscript-tools-dvipdf-9.54.0-17.el9_4.x86_64.rpm a274616197bf84dd246f838fc19b7fac97f7c2c3a6e93796eba9874d317e7022 libgs-9.54.0-17.el9_4.i686.rpm a898a6461cec55a8a2b519b14385265d0ebfb31dc6aaf6953c61e3777119b081 ALSA-2024:6356 Copyright 2024 AlmaLinux OS 0 1 Important

bubblewrap and flatpak security update

Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default flatpak-libs-1.12.9-3.el9_4.x86_64.rpm 72f7bec88671bf52051d263b0608d1aa98e97e1606fcca2b5b0b4259b203dbd9 flatpak-selinux-1.12.9-3.el9_4.noarch.rpm 7e2b017a0ca2293f95a3bb3e8e7162e4f52deabe086853c3704c4fd5c5048d1e flatpak-session-helper-1.12.9-3.el9_4.x86_64.rpm 9c78e23a94820a8782a735f01bf0cfac2da1039569c1e2396400dc44fde5c5b3 flatpak-libs-1.12.9-3.el9_4.i686.rpm b7d1763a784c2223dc8e7a2ec3bcb7f1e8cd214138930227f027690198bed714 flatpak-1.12.9-3.el9_4.x86_64.rpm e210f04eaaa44fed4a65623dd3f987b4364b937830530a6eb5a3644d0279bf46 ALSA-2024:6464 Copyright 2024 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib2: Signal subscription vulnerabilities (CVE-2024-34397) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default glib2-doc-2.68.4-14.el9_4.1.noarch.rpm 6f5dc26757eaf41ad7827166a1f9d8d08025b1145beab9ac66b523b2b90f55f1 glib2-devel-2.68.4-14.el9_4.1.i686.rpm d0d9374bfa5d4d611effa7f6c491c386fe1f9dca925c1b45084e9e0246c03a47 glib2-devel-2.68.4-14.el9_4.1.x86_64.rpm f634d5f62689c108fb80fa6cfaf6475c385062ae8805aaf5ff78e72024deffc2 glib2-tests-2.68.4-14.el9_4.1.x86_64.rpm faed24c4f88af32f6d4e3d4f75003d422ebcb2f1f6d81e2995d77f4e89e8d93b ALSA-2024:6510 Copyright 2024 AlmaLinux OS 0 1 Moderate

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default emacs-lucid-27.2-10.el9_4.x86_64.rpm 3bec135c01fe8638d14176404aed54409233618bdf828493476d82af20710bee emacs-27.2-10.el9_4.x86_64.rpm 7300fc517e0cbcccadebe9555893bc4beb0938f468bf5ffd332412d2498fc7bb emacs-common-27.2-10.el9_4.x86_64.rpm a5b2f284994f86aee5048e68dbf9b81d72c29b1679b67602b6787b20bd3eaf24 emacs-nox-27.2-10.el9_4.x86_64.rpm ad34c53456cad460513d478fb2cb898362d557f3bde54bc5793a6e7fa924ff96 emacs-filesystem-27.2-10.el9_4.noarch.rpm ef93dbe7e32a0acc409bf52449feea9913b5cd3c0d64f9cc01d02a7b54c2ce33 ALSA-2024:6529 Copyright 2024 AlmaLinux OS 0 1 Moderate

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184) * dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default dovecot-pigeonhole-2.3.16-11.el9_4.1.x86_64.rpm 38baf6dd2ebba5e9916cdac3eddbb990a2a373b7d049572346fa13cf79684767 dovecot-pgsql-2.3.16-11.el9_4.1.x86_64.rpm a0bcd516d9929477198a9acb042e0b00aa591a5af4a4133ba9e5229d9705b5fb dovecot-mysql-2.3.16-11.el9_4.1.x86_64.rpm add715085f1b322577b01d0b52ad74af0a37382265b1a97bf3a63b6634564824 dovecot-2.3.16-11.el9_4.1.x86_64.rpm d9b4263802392411b520e8fe03e8f77a14dfc3689518bb5a3407d7b4e5c377fb ALSA-2024:6567 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463) * kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629) * kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630) * kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720) * kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886) * kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946) * kernel: KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region() (CVE-2024-35791) * kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797) * kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875) * kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000) * kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801) * kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883) * kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019) * kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619) * kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979) * kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559) * kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927) * kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936) * kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040) * kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044) * kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055) * kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096) * kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082) * kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096) * kernel: Revert &#34;mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again&#34; (CVE-2024-42102) * kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131) * kernel: nvme: avoid double free special payload (CVE-2024-41073) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default rtla-5.14.0-427.35.1.el9_4.x86_64.rpm 022b94f6706780e8722cdab8bdbcc597fd6f397946ec85596efdd320b5f59f86 kernel-devel-matched-5.14.0-427.35.1.el9_4.x86_64.rpm 34133ca1ad7c7ae56996ab28dca180cb5b282599b104dc9337ee03788f8c2aff rv-5.14.0-427.35.1.el9_4.x86_64.rpm 3afadb79a2ef2d0318591f65f989c1dc0d9e5af06a0d42a0a352f6d9f35a6a01 kernel-doc-5.14.0-427.35.1.el9_4.noarch.rpm 8940be9bc5c5169ae4ed41a0408afd2d67daf12a689a4ebc2b947485cfb89c5b kernel-debug-devel-5.14.0-427.35.1.el9_4.x86_64.rpm 950ff804104a220f61e4e7589093f54d74bf69608cb60b64f4fc3f287bb71bb5 kernel-debug-devel-matched-5.14.0-427.35.1.el9_4.x86_64.rpm cbf73b0ca7b717841c2913caffd58aed29dfd7743337d92fbdc90f0d8fc15ce1 perf-5.14.0-427.35.1.el9_4.x86_64.rpm d98cbe23caea5bec8d1269c22fc3da710e79540d73cb2bbd624a9e576d675407 kernel-devel-5.14.0-427.35.1.el9_4.x86_64.rpm ede67d6eb6316ca989c6b62c25cac6b68c909ea7f3bc0162ff03a556bf283011 kernel-headers-5.14.0-427.35.1.el9_4.x86_64.rpm f0806d389f90826034b4c205952501d1c7486198dcf4cf9d9654e5a9c430658d ALSA-2024:6681 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: 115.15/128.2 ESR () * mozilla: Type confusion when looking up a property name in a &quot;with&quot; block (CVE-2024-8381) * mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382) * mozilla: Firefox did not ask before openings news: links in an external application (CVE-2024-8383) * mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384) * mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385) * mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386) * mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387) * mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-128.2.0-1.el9_4.alma.1.x86_64.rpm 2735cdf08b13d2b28823ebe2e185186129d180d04c3f0ab9ff0dfb6256472773 firefox-x11-128.2.0-1.el9_4.alma.1.x86_64.rpm 76b22aa89c570af205b1693cd73b4fedf510c7e3d1d72672d76af1a4f7e4b3aa ALSA-2024:6683 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: 115.15/128.2 () * mozilla: Type confusion when looking up a property name in a &quot;with&quot; block (CVE-2024-8381) * mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382) * mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384) * mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385) * mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386) * mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387) * thunderbird: Crash when aborting verification of OTR chat (CVE-2024-8394) * mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-128.2.0-1.el9_4.alma.1.x86_64.rpm 3b3505523c2450de4e2157d11b98f733a8d8ac608c0998f68f7f0f2d334aa165 ALSA-2024:6726 Copyright 2024 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default fence-agents-ibm-vpc-4.10.0-62.el9_4.5.noarch.rpm 3d429e1c1ae226a8b751760329fee14d0cd426cd371379edb1ba91204b2efac3 fence-agents-ibm-powervs-4.10.0-62.el9_4.5.noarch.rpm 6d9d0109c086db60429c98c9cf1a8434e74b836d2cea1263a7b223558363651e fence-virtd-cpg-4.10.0-62.el9_4.5.x86_64.rpm 758c2bf06c7190a0fdc800874e54d2f6d1f796da0641a0f985ae2ba263dd2741 fence-agents-kubevirt-4.10.0-62.el9_4.5.x86_64.rpm 7e1f36e550a15bba30039882d35bba5ed2b386e4e78d73287f1f689ed82147fa fence-virtd-libvirt-4.10.0-62.el9_4.5.x86_64.rpm 9c163ca1b790e51090a9ef27e5d6913d77200e3eef7eeae56d0b637ff8238f0a fence-virtd-multicast-4.10.0-62.el9_4.5.x86_64.rpm 9d2df1858f336c7bbef92049641118c5d1e610b67a7d13dcd3da85092f13b011 fence-virtd-tcp-4.10.0-62.el9_4.5.x86_64.rpm 9e7245ae5b554dae3b6123596649a7753dd372d5b53b387ec6bcd18e54676b2c fence-agents-common-4.10.0-62.el9_4.5.noarch.rpm bb8e86bfef0b69d3c507e075d45f573402d5a0993d7200167ee06a3de8e6c7a6 fence-agents-compute-4.10.0-62.el9_4.5.x86_64.rpm c15446bd4292086fae2ab416565a1f35ca3b143c50a1d98343555e98e97e3ecb fence-virt-4.10.0-62.el9_4.5.x86_64.rpm c6a1e1374e19e07604e2fbfe5f9f5241c4d5ff83140e97d1c24e7d38d3683dbf fence-agents-virsh-4.10.0-62.el9_4.5.noarch.rpm dc5f33cff413eeb80c3345d8820de96512dc3267e77e6ac41b565ab725436d8c fence-virtd-4.10.0-62.el9_4.5.x86_64.rpm ed35f8368400c5a57a1d7ed908e1f2c4624584c7ca9cb6bf06745504f5b97d65 fence-virtd-serial-4.10.0-62.el9_4.5.x86_64.rpm ee10fece5d4cf7914b2e34a545471a8bdc745981c97f99a0720351bbfcc9972c ALSA-2024:6754 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: Negative Length Parsing Vulnerability in libexpat (CVE-2024-45490) * libexpat: Integer Overflow or Wraparound (CVE-2024-45491) * libexpat: integer overflow (CVE-2024-45492) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default expat-devel-2.5.0-2.el9_4.1.i686.rpm 7e45b0830c234cc0100548dbcfe63c86bce14fb67a8a9b77646400047a2810e4 expat-devel-2.5.0-2.el9_4.1.x86_64.rpm c05d57f90622950e37a3ce0054a250ea7bcb2e0c2f8c4e7c79e2df1d3b884662 ALSA-2024:6757 Copyright 2024 AlmaLinux OS 0 1 Moderate

libnbd security update

Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients. Security Fix(es): * libnbd: NBD server improper certificate validation (CVE-2024-7383) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libnbd-1.18.1-4.el9_4.x86_64.rpm 13c3c23eb6bbd42626e21b25583000002dae53a9a88342cfcf221ffb6578059e nbdfuse-1.18.1-4.el9_4.x86_64.rpm 55f804eb19a66dd3aa920bd4ddfb17c7150e64aa8490037c164456ceb8e6424f libnbd-bash-completion-1.18.1-4.el9_4.noarch.rpm 7567f1ba72caef39942e13d41c4c9c22ca2f3f47a99cbe2f37fffb64b4507430 python3-libnbd-1.18.1-4.el9_4.x86_64.rpm 75830ee2160ed0ba354e896661d3764e522da082092c292719d448bd719d888d libnbd-1.18.1-4.el9_4.i686.rpm eb9ded445593ff9c7e64cceeba64c7eb6579dc60c425df28f79734a9381c13d9 ALSA-2024:6783 Copyright 2024 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Possible denial of service in X.509 name checks (CVE-2024-6119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default openssl-perl-3.0.7-28.el9_4.x86_64.rpm 1453d0c67a159886c9a3b911e1813cb3274d0467793402881bb1d8a5384e7a09 openssl-devel-3.0.7-28.el9_4.i686.rpm 5a32e22713bb9d12217f4005fdbfcb19323475846123cbb4357c1eefbf8d15a4 openssl-devel-3.0.7-28.el9_4.x86_64.rpm 8d31533963fce4aac5fd861e8dbb4d97b8b76c7a9344ca3130d0042a2cbd31e0 ALSA-2024:6785 Copyright 2024 AlmaLinux OS 0 1 Moderate

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: DoS vulnerability in REXML (CVE-2024-39908) * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> (CVE-2024-41123) * rexml: DoS vulnerability in REXML (CVE-2024-41946) * rexml: DoS vulnerability in REXML (CVE-2024-43398) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default ruby-3.3.5-3.module_el9.4.0+115+226a984b.i686.rpm 007c23370c1b72f14ec283ddd001d0233b48379fde339fff5fe1c8ab960a24e9 rubygem-rexml-3.3.6-3.module_el9.4.0+115+226a984b.noarch.rpm 01b567338af4d61c6a835bbaebc646a8595f5cd016e21509794a81b393c75f8c ruby-default-gems-3.3.5-3.module_el9.4.0+115+226a984b.noarch.rpm 0351daf0db7b974a5f6477748ecbf3279a489aaad57ed5f65f7c6902d1701587 ruby-bundled-gems-3.3.5-3.module_el9.4.0+115+226a984b.i686.rpm 0de3fc2b30920d7ed3370e813133c367441b3a2891e0d6f86dcab43a1c29ece8 ruby-doc-3.3.5-3.module_el9.4.0+115+226a984b.noarch.rpm 10a6e030a0e01466854ff77a489671066c0afae33a9c302a7b4a2b1759d0e9a4 rubygem-racc-1.7.3-3.module_el9.4.0+115+226a984b.i686.rpm 12602cb42ba050925ae446ae92917a3e9f4190a21be013121204f0c3f82beb21 rubygem-bundler-2.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm 1dad4f622c6d8e5718e20d88f2fdfd4805c58b17cbb3c5b007d4c17511132a0c rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.x86_64.rpm 2306c7e3f20481fc2c29d0b4f67e34aea30d3a54f36d98be8976311447864da6 rubygems-3.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm 26b6048365106718e21840305172ce1de134b53c73690d93b49e95d30699b806 rubygems-devel-3.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm 2cec22f63f0ee9a4743b8b035f6219accf700d2f7b7f53c8da4ea18a52396e7e rubygem-rbs-3.4.0-3.module_el9.4.0+115+226a984b.i686.rpm 2e093e19fed8eebb64bc71cc05cbce41b855177b0c30dac78829dd77c7d6f948 rubygem-json-2.7.1-3.module_el9.4.0+115+226a984b.i686.rpm 2e0e0d1fe3e9dc70541aaf9c592697b497962db2ff20138fd0091e793405e411 rubygem-test-unit-3.6.1-3.module_el9.4.0+115+226a984b.noarch.rpm 36815187b458555d7c33e736abe8606c9b47f05e1f4f5431dd04df376ed1ecb1 rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm 37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58 rubygem-racc-1.7.3-3.module_el9.4.0+115+226a984b.x86_64.rpm 55f70e387060b78ca721e01f313e3e0c4270ad7a6d3a11eae4c9ffd1d09cf028 rubygem-bigdecimal-3.1.5-3.module_el9.4.0+115+226a984b.x86_64.rpm 5ecbed43c9cfe42dfb14ca01b14338a471094999552ed9f172d9df6c6a413175 ruby-libs-3.3.5-3.module_el9.4.0+115+226a984b.x86_64.rpm 61385f80885835b5d470733029ccddd12ffcb80b22d03eb7b0cc19b7d8d2a179 rubygem-mysql2-doc-0.5.5-1.module_el9.4.0+75+1a8fe981.noarch.rpm 65b0d0cc45f0088e7962db0543b7f1672cbc730924b371f28cdda18a25b33edf rubygem-power_assert-2.0.3-3.module_el9.4.0+115+226a984b.noarch.rpm 6933cce96666eb2c7a499796b717c035a58461dbd8727c62c67a0da8c8f26a57 rubygem-psych-5.1.2-3.module_el9.4.0+115+226a984b.x86_64.rpm 7b5801c4e9bee8036ebc33838912d16a925f5eeeb69ab95f186ca53b8602eed5 ruby-3.3.5-3.module_el9.4.0+115+226a984b.x86_64.rpm 7c6ad2c3d4c227acfe592509b0e9ff804c8bb1ce9783076f15380648349fd242 rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.x86_64.rpm 7e81c000c66bad27864ea6a2747f3b90f2192d71866e7e4bc4a26a34ac2ec27a rubygem-rdoc-6.6.3.1-3.module_el9.4.0+115+226a984b.noarch.rpm 8926bf67c5af8614216ce5a08f227efdd104a5e2af6972405379bb549b1fe5fd rubygem-rake-13.1.0-3.module_el9.4.0+115+226a984b.noarch.rpm 9972528d830029d64bd6804bf54568df638b640a81aec5c71f115c6f1d36be18 rubygem-bigdecimal-3.1.5-3.module_el9.4.0+115+226a984b.i686.rpm 9a30c057d84edc6c6338b5549d859d850efcadcfea2db7a21762aace16425bbf rubygem-rbs-3.4.0-3.module_el9.4.0+115+226a984b.x86_64.rpm 9a799a991b5342f7e8c616510484ec6c60f425e0ed7eef5523668213adf923a1 ruby-devel-3.3.5-3.module_el9.4.0+115+226a984b.x86_64.rpm 9a897a29b7b3187a52a6d638f81cfc88210c704c9c9abc004a0a102ec482f375 rubygem-json-2.7.1-3.module_el9.4.0+115+226a984b.x86_64.rpm a41c3fb9374420ceadd3464f2f2172ad322291f0118e049326ba1f6cd27a44f4 ruby-devel-3.3.5-3.module_el9.4.0+115+226a984b.i686.rpm a63b236dc07b322c15564ca4ec2b51bcaeacaf219f3ac547e91b9a664add1d91 rubygem-io-console-0.7.1-3.module_el9.4.0+115+226a984b.x86_64.rpm acc57bb9cce57965523951e8d73cc6ce500dc82f17e94e319685c0dabbd77867 rubygem-psych-5.1.2-3.module_el9.4.0+115+226a984b.i686.rpm b100bcbee388d5cee8ef7445a2449f4aa2d492e5cf1bf1c68218f365551a26b6 rubygem-irb-1.13.1-3.module_el9.4.0+115+226a984b.noarch.rpm bc7ffb08fd40e98e821c072bc7ba265f8f451365f692698f073fa8dc155aeb4d rubygem-minitest-5.20.0-3.module_el9.4.0+115+226a984b.noarch.rpm c1bbe8d893ed1d0f2f0954403db9c24bf8363aa194f2ac8dc61f6ad9c2f94651 rubygem-io-console-0.7.1-3.module_el9.4.0+115+226a984b.i686.rpm c85aedb41cebfa4f67357e7e239a348292d0577a57eb688a112efa786b7c564d ruby-libs-3.3.5-3.module_el9.4.0+115+226a984b.i686.rpm d6e700a915b1db0589f119a35ac102065f30f575a39642b8db7eee725fe94c8d ruby-bundled-gems-3.3.5-3.module_el9.4.0+115+226a984b.x86_64.rpm dac580f7a37c2f5158900443a619be4a63dc573fceef5da2650c353c1c9d013a rubygem-rss-0.3.1-3.module_el9.4.0+115+226a984b.noarch.rpm e0d4ad72d336733fef97fe3e25963dab793801a7258a69131ec501ec87f2a583 rubygem-typeprof-0.21.9-3.module_el9.4.0+115+226a984b.noarch.rpm ef651c4f8cee6bcd1879db53dd45cce247b031335bc451c6126129cd55185694 ALSA-2024:6848 Copyright 2024 AlmaLinux OS 0 1 Important

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770) * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default perl-PCP-PMDA-6.2.0-5.el9_4.x86_64.rpm 030bebbb8eb6019318637a16ce183d110164c6f4dd9bffbdb4b73c1a03716ee3 pcp-pmda-sockets-6.2.0-5.el9_4.x86_64.rpm 057c42f90036e7c3452cee8d2d40763216c09750d56352016d839108c0dfc3d5 pcp-pmda-podman-6.2.0-5.el9_4.x86_64.rpm 073a76ee13db42ab640cc51ec7053e13510b5457158c3677674eb04a6edd1319 pcp-pmda-nginx-6.2.0-5.el9_4.x86_64.rpm 08fe83a2a8bcb2c2ad1e3003cbbbd204aa23a1eac24929b1e23106bf511a530b pcp-pmda-resctrl-6.2.0-5.el9_4.x86_64.rpm 0b74cc7f41afe9899e0df5dd95cd7cb298923f2c0dfe1ab0ddec62d28cb4842b pcp-pmda-mysql-6.2.0-5.el9_4.x86_64.rpm 0c22e71d9d56820d5413f4996d0a1dcea792a1f3beb417bdec9d049fe6bd995e pcp-export-pcp2json-6.2.0-5.el9_4.x86_64.rpm 0e1b5edfa10d2ec170bc35fca86fb01f7e1282b39873009410369087ea32220b pcp-import-mrtg2pcp-6.2.0-5.el9_4.x86_64.rpm 135072dcc2ee8101255e61f4bbf5ad6d5cefe6fc9ed31e8bf26858cf0c877453 pcp-selinux-6.2.0-5.el9_4.x86_64.rpm 1779fca83b74842799d95fbe317eecd9f19a9faa953bdf277c26909b2b41cd58 pcp-pmda-bind2-6.2.0-5.el9_4.x86_64.rpm 18894f45d07c23a4ffd58ad4ee9c25872f639f0be0cd0d7608d23f8f29e7228e pcp-pmda-named-6.2.0-5.el9_4.x86_64.rpm 19f6371f1a9bfeef01639033af588578d871f6cffa09e65dd77e474789609972 pcp-pmda-dbping-6.2.0-5.el9_4.x86_64.rpm 1a28cd1283466f4fb37565cd7bf54fc95810d9e01879162c6dd8511c1adf533f pcp-pmda-openmetrics-6.2.0-5.el9_4.x86_64.rpm 1bdb686bd09675dbe73d906d92b8d55d81a68372c0118bc492f8c8de8ce3b5a6 pcp-pmda-news-6.2.0-5.el9_4.x86_64.rpm 1ed56d71155ca74825d30b3e48ba25abcf3d0771ba19579df9d2e16d62c7e06b pcp-pmda-bcc-6.2.0-5.el9_4.x86_64.rpm 1f7c56bf48165567264330dcb1a78801b736f187b0fa87ea25043c7909e3527d pcp-pmda-bash-6.2.0-5.el9_4.x86_64.rpm 201a1a0d946438f252d8b08fb8149f0bf9d0931e69fb8d6bc69b69820075f603 pcp-pmda-mailq-6.2.0-5.el9_4.x86_64.rpm 223a7f417952748f946fb6771f647bfd5dbd478f43525b329514b6e2bdbe4e27 pcp-pmda-netfilter-6.2.0-5.el9_4.x86_64.rpm 225aec470bb27af9ca0fe0ba757baa085c400138a5940d9c6bdf0a1f78bd2687 pcp-zeroconf-6.2.0-5.el9_4.x86_64.rpm 269c0d97e0f1e9a18b944a64897806a4bfa2eacf3c08527b9ad83e146c9a89bd pcp-pmda-gluster-6.2.0-5.el9_4.x86_64.rpm 2a7f4039acca49ea018141ac698cdd7d577f6f958c0a547378791d5cbefbf8d3 pcp-pmda-bpf-6.2.0-5.el9_4.x86_64.rpm 2bee85837145f8149de1c64a0570a1f1b88daf0e239846b483005f7ac0bf54e3 pcp-pmda-mic-6.2.0-5.el9_4.x86_64.rpm 31219803644c5a24f86b7459f3c5bc8059e09ad817b32604803e44baa4eccb46 pcp-pmda-gfs2-6.2.0-5.el9_4.x86_64.rpm 32a6c450d7d6026b8e46c7b02c7d0cea26464c76dbd71b9802562939711df2b4 pcp-devel-6.2.0-5.el9_4.i686.rpm 339231bdf6ea50bcc630de5398849495aedc086845a85d44af266f1d7d199592 pcp-pmda-trace-6.2.0-5.el9_4.x86_64.rpm 355b4b23b105091587f4626c8ca51f0f43a3f2689ccb1c4833d493e9b24c0e9c pcp-import-collectl2pcp-6.2.0-5.el9_4.x86_64.rpm 383feed678e39c29f2930cb155fea75d302dfe75a86aa94c5f509b14766d00fe pcp-pmda-mssql-6.2.0-5.el9_4.x86_64.rpm 395aacb3c0db649f79b02acf586c4f0f69611e3f1b65a4ecc8aabd15c5467f51 pcp-pmda-cifs-6.2.0-5.el9_4.x86_64.rpm 39e78cffa95e95287e57dc7393beb369551e3add153b668764d0be3c62478fad pcp-pmda-memcache-6.2.0-5.el9_4.x86_64.rpm 3a11c558b492a87c9390cc3c1c2072c4c348dd23a290280529bde61a04a8243c pcp-pmda-summary-6.2.0-5.el9_4.x86_64.rpm 3d4857f72bd94cc8a769bbcbfcdfdd093cf12c102088c336bf77614261b212a7 pcp-geolocate-6.2.0-5.el9_4.x86_64.rpm 3f816f5646409fe6f3e96e9e27c11c816802eb22b0b72225aa4f1c5195544192 pcp-pmda-rabbitmq-6.2.0-5.el9_4.x86_64.rpm 3fb21d104471e109d0ae2c5f965ec66fb4922afc51ca4b5577bacd5f4e785acc pcp-pmda-snmp-6.2.0-5.el9_4.x86_64.rpm 49950660c228b05278cf26100efa2bcd8f931a1ae137cde061a5e41b2184569e pcp-pmda-docker-6.2.0-5.el9_4.x86_64.rpm 4a0a89a8204c8806f52c7cc67f0cda8ed3f17c73465cc588e115fdbddeaea4e4 pcp-pmda-postgresql-6.2.0-5.el9_4.x86_64.rpm 4d7a3d87bd4cc5f5903799ae18d18222ee33be9d241da5406a8567ed0fce9baa pcp-pmda-gpsd-6.2.0-5.el9_4.x86_64.rpm 4e0b5611707357cb971a09731a6efb375e6dabb609073c6d3651d76dfb3f0325 pcp-pmda-postfix-6.2.0-5.el9_4.x86_64.rpm 5183cfe0c8d0a1ba160f0f196213b946422ad06adf7b4d54b9aea2ff311c3bef pcp-export-zabbix-agent-6.2.0-5.el9_4.x86_64.rpm 52401643e0f32086201092d65725a8cf1a56c9ec79d389a7879a238dde07e3ee pcp-devel-6.2.0-5.el9_4.x86_64.rpm 5402c3a154ecf1e194844db55cdf06b80abb821f4a8bc72ac698409fc1a86a77 pcp-pmda-ds389-6.2.0-5.el9_4.x86_64.rpm 54d3bb78b059e4fc20e562695d89ff3b0296edb2eab1e68c912626dfc9b62a35 pcp-pmda-infiniband-6.2.0-5.el9_4.x86_64.rpm 55068446e017cc8c72a8b15cc0d7c8ab99b397535409d8f9c199feb7785d5f4d pcp-pmda-zimbra-6.2.0-5.el9_4.x86_64.rpm 55eb47d00e36bcc6fb2d02c595bf8265372c01137511c9470604ce0b33c71021 pcp-pmda-sendmail-6.2.0-5.el9_4.x86_64.rpm 58e925b62d59135651ef57afd39aa38bff14d5da092b784c97479aec3e3ca8d1 pcp-pmda-perfevent-6.2.0-5.el9_4.x86_64.rpm 58fc915c3e3122694bfd9c3118a1116a8883a6a4cc2014d91f3de89be32f1a03 pcp-pmda-redis-6.2.0-5.el9_4.x86_64.rpm 5ac1a6a4885f8ce54d68e98d140854403a835b499b8407a285ad036d9cc331ff pcp-pmda-slurm-6.2.0-5.el9_4.x86_64.rpm 5c0466f7970c186d2115d1f6f1b5ea436d1368636afb5f38964dbc9a90a36b2e pcp-pmda-zswap-6.2.0-5.el9_4.x86_64.rpm 5d0bcf362fef1aadf29175ca63c24f9548f3e22974c78ac1acee38192447fa15 pcp-testsuite-6.2.0-5.el9_4.x86_64.rpm 5f5d6fbc791fbd466868144bdfe6d8dfb8e309f86f633bd9d12978d16a5ce1b5 pcp-pmda-cisco-6.2.0-5.el9_4.x86_64.rpm 6118f12d4a7e2670cfb128d45f20f262a199d1ed65aa940418a54744c0761d0d pcp-pmda-lustrecomm-6.2.0-5.el9_4.x86_64.rpm 6181593b39df0517d4a93c08b1274d3832a55c448a4f93d13dd1274fe28b0fde python3-pcp-6.2.0-5.el9_4.x86_64.rpm 66cd3041ae1c7fc92b0fd4ea0ffb45f6b6d10ccda25de8bb42c46fa1186a7e17 pcp-import-sar2pcp-6.2.0-5.el9_4.x86_64.rpm 6c30d3ffa053724f55e828ebf9f0de8ee9c91367aad307b42c280af028180a04 pcp-pmda-mongodb-6.2.0-5.el9_4.x86_64.rpm 700ca7cd760a4bcbc49f738e2efa8f6ff4d799558c2b8cbcd946df76e8b7f112 pcp-export-pcp2xml-6.2.0-5.el9_4.x86_64.rpm 732a0c4dba9f0672a93f52025acefe8611b49ca10cec6b7accdc81dd7e2e0adb pcp-doc-6.2.0-5.el9_4.noarch.rpm 76b193e4674d16310141c86556ee0011aa5ac58e65d5b6681fea838941d2ad27 pcp-pmda-lmsensors-6.2.0-5.el9_4.x86_64.rpm 76e9e1672db2da683d2a3c611ec150f894911ce640cec4405f8fffd6fa525f04 pcp-pmda-lustre-6.2.0-5.el9_4.x86_64.rpm 771bccaf0d294a1970033ef45f7ed8d360f11661bbe55c12cddf093140e218a5 pcp-conf-6.2.0-5.el9_4.x86_64.rpm 79699adbf06b534410d03a31b419ac2725187f789ebef1ae0bfd10e4aa359aab pcp-pmda-pdns-6.2.0-5.el9_4.x86_64.rpm 7ff81fd67eb04573a7832e67629c47a642cfdef96a1b04ed6aec2a4a1031748b pcp-pmda-openvswitch-6.2.0-5.el9_4.x86_64.rpm 818404bc5114495874dbd5fc10db21b4e6db8de56aea7d3be8c08fba2dae39e6 pcp-pmda-mounts-6.2.0-5.el9_4.x86_64.rpm 82eeb0088119d56097735dc41b1a39d705d466d4083ff64e4695c3686e3796a9 pcp-pmda-samba-6.2.0-5.el9_4.x86_64.rpm 85dece4101c3d1155503082ee062730887111266f345ee4680705f5d745dd7f0 pcp-export-pcp2spark-6.2.0-5.el9_4.x86_64.rpm 87dbe758cdf9aa446819f2c4b9f3746f4c23a8266bec465a4f16280041132eae pcp-pmda-oracle-6.2.0-5.el9_4.x86_64.rpm 8e929f1f7c769a38825cb0006752886bbc3415446bc69616250136ce6abd4082 pcp-pmda-nvidia-gpu-6.2.0-5.el9_4.x86_64.rpm 8edefaaf625ab7cbcf3c127fd5089f3a030de1610ca74e2c592625cdf5dd1ff2 pcp-export-pcp2graphite-6.2.0-5.el9_4.x86_64.rpm 8f1c24dab3b1d4b71b72e6bf4299387c580c67505dd9eae4fc341fbdb4ae9371 pcp-export-pcp2elasticsearch-6.2.0-5.el9_4.x86_64.rpm 910fc6f9f50fd62a29248e7755c66284a02a7b9e29feed1f324dc006eba50b98 pcp-pmda-elasticsearch-6.2.0-5.el9_4.x86_64.rpm 926f6bddad564ca69e90c6a5fea6d260c8f7fc0eea2e3f87f58f3fac157dfbee pcp-libs-6.2.0-5.el9_4.x86_64.rpm 94954aa3961c8f4487ab2ee47d13501f144ca1d3c2c41b3338fcfb33fcb657a4 pcp-pmda-bonding-6.2.0-5.el9_4.x86_64.rpm a01099e2445133320c563b08721e51afc97d601b1c38a771f0a51611db3cd584 pcp-export-pcp2zabbix-6.2.0-5.el9_4.x86_64.rpm a2c0eb7e4fb4e4bb2ff68ef9634169e6a495edc5a73d3a8abfd856b34bb2f063 pcp-pmda-gpfs-6.2.0-5.el9_4.x86_64.rpm a9c749715c28779b5b5ce06593cde4f617b675c250d806ee882046e9fa2652fd pcp-pmda-systemd-6.2.0-5.el9_4.x86_64.rpm ab286015dca5c464ab588092e4ab55667d9feb5e73eb261b9dcc505f26c18482 pcp-libs-devel-6.2.0-5.el9_4.x86_64.rpm ac4192a7f9665a667515bf9fafa03769161dd2f57fbdf81d5d906dd126d871bb pcp-pmda-rsyslog-6.2.0-5.el9_4.x86_64.rpm ad938c5256c40f3ba75f739608b42d71ea4e88d2fc60eef2dba0235729b82721 perl-PCP-LogSummary-6.2.0-5.el9_4.x86_64.rpm afd2749bdc776a2f5985169a43aa36d1741caffb312a8f415adb83c51e187f97 pcp-pmda-netcheck-6.2.0-5.el9_4.x86_64.rpm b2237dba348b5fdb9f5a10aacbb63ea30f5d1bfdd5157d1d9be957c0cced4ea1 pcp-pmda-logger-6.2.0-5.el9_4.x86_64.rpm b438cfbb17f0a8cac2de2e908da150c1674e32e1e87d4c6447498bbd420f7b9c pcp-pmda-farm-6.2.0-5.el9_4.x86_64.rpm b5c4d5398c9373d15621f4cf144d7b8ad82a55888f16f70705f0be275fae35de pcp-pmda-bpftrace-6.2.0-5.el9_4.x86_64.rpm b6902677ce8c33f77320b21a8a1a064c14089f25a5e1e9ec3891865644bedeff pcp-gui-6.2.0-5.el9_4.x86_64.rpm b7c5b53f5d397b9e34eff48d95b552c1332a2a7f641dfff8a1ee268faf7bc9e3 pcp-pmda-lio-6.2.0-5.el9_4.x86_64.rpm b840a72898eaffaeb3144942b9645071dd99966dd058e8cd191b2e7efa64d313 pcp-pmda-apache-6.2.0-5.el9_4.x86_64.rpm bc8da364cb39c8d72a1c5ff02ebb148a5bf330a07af7bd489056f86887f8aa8f perl-PCP-MMV-6.2.0-5.el9_4.x86_64.rpm bd3dfe3f8ad553ca9c675858dc6649ebdee27bceb21b8a060d8cad4a7805eefe pcp-pmda-dm-6.2.0-5.el9_4.x86_64.rpm c1c4dca8200505cd4fe006894d9123a205af9061e1fa61d237b51e958f93d5d2 perl-PCP-LogImport-6.2.0-5.el9_4.x86_64.rpm c5cf5e42efc0e021a34e4591ebb904032fc2418a695ac2893b46c8f06a1ffeba pcp-pmda-haproxy-6.2.0-5.el9_4.x86_64.rpm c66c7827e9350510e515a3065b142def01e4a389204f0109c0cfe937fff3bb5d pcp-system-tools-6.2.0-5.el9_4.x86_64.rpm c8512477e0c821f30c9c98a8c635ef1a8b1bd7f0b2603e33e6fc5c2b0e8e1bf9 pcp-libs-devel-6.2.0-5.el9_4.i686.rpm c9c474f60661fae4b4a5dc9436dd11ecb517ede06444b6a041f21e525823ea5e pcp-pmda-shping-6.2.0-5.el9_4.x86_64.rpm cb65b6debf617321025a62b36ca6a9a590d26e47b560bb7c66b7335d7f48cc05 pcp-pmda-hacluster-6.2.0-5.el9_4.x86_64.rpm ccf17314d4e02c58510fc44b6da81c9cb81dc0ff02d8538e07dff12b80229a62 pcp-pmda-libvirt-6.2.0-5.el9_4.x86_64.rpm cf8228456e73a0e95306a6fcd8ecaca0c7a903480ecd12372f2cc08672b0a644 pcp-pmda-nfsclient-6.2.0-5.el9_4.x86_64.rpm cfa2f2f680237f4083f4a256fd8849627328a8b057a80887a106ce335f9c35de pcp-pmda-weblog-6.2.0-5.el9_4.x86_64.rpm d07f44f58d95c2e7c99260cce5b0f80d7e111ad47c2a4e70a0444029bf6020c9 pcp-pmda-unbound-6.2.0-5.el9_4.x86_64.rpm d0b7873d8c5077855790d6f9c8427b596e43efd825b9c7b5c6d1810e4a4ef8f4 pcp-testsuite-6.2.0-5.el9_4.i686.rpm d7a3a86341ce08f01ff2fa8e304ebdf293dffcc46f784401768aeaf9ee584f5c pcp-libs-6.2.0-5.el9_4.i686.rpm dbdd045023b2dbe0a5958cef8196b150b02b0f21045c5a6374c2f837ccb428a9 pcp-import-iostat2pcp-6.2.0-5.el9_4.x86_64.rpm dcd2129f3a743aed62b27ef908e2ad9ca55e7db7fba4b3afddfccadce26c6aeb pcp-pmda-statsd-6.2.0-5.el9_4.x86_64.rpm ddda3d2ba9b6f77c38000cd6087bbfd94c798d69b6e9bcb2313f609e5b7c84a4 pcp-pmda-activemq-6.2.0-5.el9_4.x86_64.rpm df7d0514b578e9767b943ca9e919df2f19b49e10347a4935fbfdca676adac09d pcp-pmda-json-6.2.0-5.el9_4.x86_64.rpm dffcbb4e71513735a341a31152b6db15ead9be2beb267468d868eec16fd05fae pcp-export-pcp2influxdb-6.2.0-5.el9_4.x86_64.rpm e00b8018faff5cc31b457b732360dfee1a3e59069ce6137ee6e6cf20a5fee7ca pcp-import-ganglia2pcp-6.2.0-5.el9_4.x86_64.rpm e856621b4cb3255d49e63a3220462f17d6b9e8aa414d0894ca04b659dce2122e pcp-pmda-ds389log-6.2.0-5.el9_4.x86_64.rpm ea8e887dcc281c8330b55d3420f997e3eeac2ae77186c48315b7561ae001b03a pcp-pmda-smart-6.2.0-5.el9_4.x86_64.rpm ec5bd435de1815ad7d4dabacfd7727883945d942eb3bb429cbb6e689bcdb8a8c pcp-6.2.0-5.el9_4.x86_64.rpm ec68aecac80905ec080a05fc049fd148be6b739a4a6e43f95c748ca82b991fb9 pcp-pmda-denki-6.2.0-5.el9_4.x86_64.rpm f08c438af9b59b3d42750e1db54b98912f00a2937c8616b9d64267af49a49885 pcp-pmda-roomtemp-6.2.0-5.el9_4.x86_64.rpm f75106b84a5300a3d1d1615ff13fff5120301129ce4d83a171d70a2af6899396 ALSA-2024:6913 Copyright 2024 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default golang-tests-1.21.13-3.el9_4.noarch.rpm 0a9a2e10f59fcd9afdedd681cc2094369a54047107e97b51f89dbbbc7a8f88da golang-bin-1.21.13-3.el9_4.x86_64.rpm 2e5c5b5afc1c0e1c1a9ef40c7fe7b69e188803d15d485105990095d8bfd7e56a golang-misc-1.21.13-3.el9_4.noarch.rpm 4c96643e7b664e24c52084d40ba7e275c8ad632bac3ea356c27933cbedaf288b go-toolset-1.21.13-3.el9_4.x86_64.rpm 87b6e1756a42b34e5de7d8af80763f4008130a6f7573a72058a2a643d9552b33 golang-docs-1.21.13-3.el9_4.noarch.rpm cb58cdb66dfd1b8b62f02981ce8a93b0ac62f5a533cc85df49c70b58d10b2785 golang-1.21.13-3.el9_4.x86_64.rpm f39d16075f4930e1edc57cdc3ae7f41bdff27c9c65972198c6b2b8c56d844af0 golang-src-1.21.13-3.el9_4.noarch.rpm fa177fd98f928892135d944e2f65fbdeeb1a1135cc3e724ad3af2acf7711333b ALSA-2024:6946 Copyright 2024 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default grafana-pcp-5.1.1-3.el9_4.x86_64.rpm 1c97f5bc357614489f6e7f38941f7dec438a5c80153723723e9962c20790e83f ALSA-2024:6947 Copyright 2024 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default grafana-9.2.10-17.el9_4.x86_64.rpm 2978b27a4f9f4dc011de098d7cc361a7e332f83fda12fb2d2586a806564747de grafana-selinux-9.2.10-17.el9_4.x86_64.rpm 2c7737188110c60f498ad09edee22ea0c11b6076d990c11ba29829a6ed04d426 ALSA-2024:6997 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439) * kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739) * kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947) * kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931) * kernel: scsi: qla2xxx: Fix double free of the ha-&gt;vp_map pointer (CVE-2024-26930) * kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929) * kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022) * kernel: KVM: x86/mmu: x86: Don&#39;t overflow lpage_info when checking attributes (CVE-2024-26991) * kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895) * kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016) * kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899) * kernel: cpufreq: exit() callback is optional (CVE-2024-38615) * kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601) * kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573) * kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570) * kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562) * kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884) * kernel: ACPICA: Revert &#34;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&#34; (CVE-2024-40984) * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071) * kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225) * kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-headers-5.14.0-427.37.1.el9_4.x86_64.rpm 3c6d4fbe9a3cd858754c342e4a4a54635e638880896a4d3fa5fb5b9601750194 kernel-devel-matched-5.14.0-427.37.1.el9_4.x86_64.rpm 41311a21bbf8adfac2bd70138194b8ad618848d47347147e22e9112cd9363635 kernel-devel-5.14.0-427.37.1.el9_4.x86_64.rpm 6737fde88ff2f62853db530597e8a6a5f0e389dd8dbdc6595df61a7cf3fe1bb5 kernel-debug-devel-matched-5.14.0-427.37.1.el9_4.x86_64.rpm 67bcbe765db3fa70bdfa1da072e4c0cc37795e9415fa94a73089ea61a86e6f9d rtla-5.14.0-427.37.1.el9_4.x86_64.rpm ac11a65335d78ae47f65851e2a382a5616490c46d5b3547477da91db12cc2ed9 perf-5.14.0-427.37.1.el9_4.x86_64.rpm bf6d3eba9e6c06fcc88030bf6b0c9ac9e21a211c20d6065e872269df7f775c5e kernel-debug-devel-5.14.0-427.37.1.el9_4.x86_64.rpm d3243b925011019ab216dfb0a838ec9c7b63e7261e41af571bfd6da80d731f1b rv-5.14.0-427.37.1.el9_4.x86_64.rpm f1f40edb12b0470f15b42691c826c538b98ff011c3c28ee448e7ea861992e733 kernel-doc-5.14.0-427.37.1.el9_4.noarch.rpm fb1929d07c80de3e2bbbf647ab980790d752af44a051795ee39a8d498f981f6a ALSA-2024:7136 Copyright 2024 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default git-lfs-3.4.1-4.el9_4.x86_64.rpm 6e43e6b8b1979386fab4a2fecbc70c66e920b733655f9079310c2ea1101c0e84 ALSA-2024:7204 Copyright 2024 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default osbuild-composer-core-101-2.el9_4.alma.1.x86_64.rpm 0e547f08fdc08d5f4c1c45581e04d700efc03bcf6f26d9096220f79b56577564 osbuild-composer-101-2.el9_4.alma.1.x86_64.rpm 1233e97c1b405dc97d3b7ce2eba1d2f839f459f59532801c038af14c3b76945c osbuild-composer-worker-101-2.el9_4.alma.1.x86_64.rpm 2244cab161af3dc57be574354a12a4eca2c0bc32f44e5d7c8400dc3dcbeb1ae7 ALSA-2024:7260 Copyright 2024 AlmaLinux OS 0 1 Moderate

net-snmp security update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. Security Fix(es): * net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. (CVE-2022-24805) * : net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously (CVE-2022-24806) * net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access (CVE-2022-24807) * net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. (CVE-2022-24809) * net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference (CVE-2022-24808) * net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. (CVE-2022-24810) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default net-snmp-devel-5.9.1-13.el9_4.3.x86_64.rpm 010332319bfdc385dc081b111cdadca37d440908680891af52bdef54e5e2818f net-snmp-utils-5.9.1-13.el9_4.3.x86_64.rpm 18b15f431c2ff5f777e1e25a173be3aa3f0d2e90f38435c6a55ca61ede4b075f net-snmp-libs-5.9.1-13.el9_4.3.x86_64.rpm 31d1557043ec3b5130ca558ef6ccb20d2a959862e1826d7d71d36364e75b7fc4 net-snmp-devel-5.9.1-13.el9_4.3.i686.rpm 37aff7f050b7ac4074afa7e57fc60408573fed5f66b39f2d1c7a1eee8b67dfc9 net-snmp-perl-5.9.1-13.el9_4.3.x86_64.rpm 4e3703edb4be5c633db3707c4afac8e8da1fb453611f30a05f526f720a9a18ed python3-net-snmp-5.9.1-13.el9_4.3.x86_64.rpm 532426cbcf8624a5f7e1feaa21cfe8f9db6312a2dedaf976f76741525a1bfa46 net-snmp-agent-libs-5.9.1-13.el9_4.3.i686.rpm 63283a0b9f629350f6a2988710688824312fb9e88359015766dfee02f1b77765 net-snmp-agent-libs-5.9.1-13.el9_4.3.x86_64.rpm 6e1750e1a7f44c2b69c6ae4b9a2c28fa44930266bdf695586510a683abb5ae40 net-snmp-libs-5.9.1-13.el9_4.3.i686.rpm afd33024daf7a90a349f01868364fbba7984c2cf3f71afb67c5b065f5bf083f5 net-snmp-5.9.1-13.el9_4.3.x86_64.rpm e88bee1405634d61267bd2f794330f4ae0efd02b7b9e001e1f35141fe36897b8 ALSA-2024:7346 Copyright 2024 AlmaLinux OS 0 1 Important

cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. Security Fix(es): * cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source () * cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076) * cups: libppd: remote command injection via attacker controlled data in PPD file () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default cups-filters-libs-1.28.7-17.el9_4.x86_64.rpm 4a47265d119bed58812cf7ba2f2fc597575baa558ec47921d3a8904837f1de93 cups-filters-1.28.7-17.el9_4.x86_64.rpm 61d8a733e6d3669c1a8a9dda772347ae1bd5bda1e70b465df1a0f4b425b01f45 cups-filters-libs-1.28.7-17.el9_4.i686.rpm 6a9d55a9a504193d586d66d89ff49834077ff7f44e3097fda20f854dacaa1778 ALSA-2024:7457 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_jk bug fix update

The mod_jk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine. Bug Fix(es): * Rebase to upstream 1.2.50 release (JIRA:AlmaLinux-58855) Security fix(es): * mod_jk: information Disclosure / DoS (CVE-2024-46544) (JIRA:AlmaLinux-59800) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_jk-1.2.50-1.el9_4.1.x86_64.rpm 22ee66eb1ecf4ad4296ba30cb7eb18f981388ed1634545daefba127990523bac ALSA-2024:7505 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: 115.16/128.3 ESR () * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402) * firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393) * firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394) * firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-x11-128.3.0-1.el9_4.alma.1.x86_64.rpm 5d81577e0c47f908ade80bb1a4a6a856f6dadb22217f0d4f0c9043c3bd97d72d firefox-128.3.0-1.el9_4.alma.1.x86_64.rpm a3ba36dbf9587175a8827ed7f437a24be897c4e7a8c3751b4bd30789ec7c325d ALSA-2024:7550 Copyright 2024 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default go-toolset-1.21.13-4.el9_4.x86_64.rpm 0d1ce873d1b78b46b5ad073737228dea0d816cd9daf2e44c176efbac698aeb48 golang-misc-1.21.13-4.el9_4.noarch.rpm 0f72d31e8fbde81879a46087a6220436db2b8631d2c713649e87305cc7f210dc golang-tests-1.21.13-4.el9_4.noarch.rpm a0ff5a7dfcd2c46d774fe24b5b8e059cf04914ca594917c161bac2f7f8828714 golang-1.21.13-4.el9_4.x86_64.rpm a3965e7f82c33526d0053cf04f53625f51bbc3961adba5c3d56340d8c6bc6d84 golang-src-1.21.13-4.el9_4.noarch.rpm a62939759bf10a05b8f7f952edf57a46532e54e0b173d668b5e6487da2c0c0fb golang-bin-1.21.13-4.el9_4.x86_64.rpm dbb696d37bee767b94456a7bfc2c8a63916cd6cbebf4390649f69840a46b6017 golang-docs-1.21.13-4.el9_4.noarch.rpm e512e9dac95c21e867e8756b6d47f671a5f41144b9d8c652c45ddf27712b9365 ALSA-2024:7552 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: 115.16/128.3 () * firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403) * firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402) * firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398) * firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400) * firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396) * firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393) * firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394) * firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-128.3.0-1.el9_4.alma.1.x86_64.rpm 15ac5fb56908c47135921a22beb350d13df3406802916c8aadf482bd9bf75722 ALSA-2024:7867 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35. Security Fix(es): * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484) * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485) * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484) * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483) * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default dotnet-runtime-6.0-6.0.35-1.el9_4.x86_64.rpm 01d97193afd066d2b915ee0d85f415d8ae40a58c843f0b172953d1206777f9b5 aspnetcore-runtime-6.0-6.0.35-1.el9_4.x86_64.rpm 7e5524bea8a3da6716861ef91c1a00a3f63ffdbe364d0e1f0b2e61029a2fa642 dotnet-hostfxr-6.0-6.0.35-1.el9_4.x86_64.rpm 7efa3985e70c52eeab5f03982367159d6a26741e2c6a3370712c4c563ffef386 dotnet-templates-6.0-6.0.135-1.el9_4.x86_64.rpm 812dd964bbbcf319acbca8d86d497366e036dbf0f4e22521afc239271cc05920 dotnet-sdk-6.0-6.0.135-1.el9_4.x86_64.rpm c17d6f695c0316a3910c2f764e6d5d871c8d82add9f953f6f029f7c7e61675be aspnetcore-targeting-pack-6.0-6.0.35-1.el9_4.x86_64.rpm c70a206bbc287d0e17c851212980b522024c7173c248062481d9fc67037e4f50 dotnet-apphost-pack-6.0-6.0.35-1.el9_4.x86_64.rpm d15d188419b3d7faeb37d9eca08a324963ff439951fecb857b26315596f68917 dotnet-targeting-pack-6.0-6.0.35-1.el9_4.x86_64.rpm fe04ac6e8368e2879cfdd1bdd3dd76ecbdecca48d01cbdf2f911b991507a1e5b ALSA-2024:7869 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10. Security Fix(es): * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229) * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483) * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484) * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484) * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483) * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485) * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default dotnet-runtime-8.0-8.0.10-1.el9_4.x86_64.rpm 03a9305077ec3459285fa0c357fd1489df1e568b5ae5faa1e38811a205c5b824 dotnet-host-8.0.10-1.el9_4.x86_64.rpm 155c6ae86424e831aa68fe26a3b22228ad806d64b0db80131e89a2319291491a dotnet-hostfxr-8.0-8.0.10-1.el9_4.x86_64.rpm 33d9e20d1a62fe76457c51df540de10de2e4bd32fe6056d6c919e66dab7ebfdd dotnet-templates-8.0-8.0.110-1.el9_4.x86_64.rpm 407cca14ecbee4759f1c8edf92a9a1082754f92d434648a78b15a507c5774fc8 dotnet-sdk-8.0-8.0.110-1.el9_4.x86_64.rpm 509734ea091604a5f60f10cb4f554ded00fd142f64e48922dc320a58b104e058 aspnetcore-targeting-pack-8.0-8.0.10-1.el9_4.x86_64.rpm 6b4fb0a07b25146c2c737a321c49e604b17a3673c9376d8d768ced5e9473086c dotnet-apphost-pack-8.0-8.0.10-1.el9_4.x86_64.rpm 87f1e4394ae060d47e262331ab839c3c03bee9ae2f067863562d0a291f1727e1 netstandard-targeting-pack-2.1-8.0.110-1.el9_4.x86_64.rpm 8c566ba98db19024a7ade3e998441bcc1dba9f6bd37ce30ee31e122033b41b6f dotnet-runtime-dbg-8.0-8.0.10-1.el9_4.x86_64.rpm 95d5a68cd7a604c742399f9ef69667b414644d7b43b3a42abf39707c531e2613 aspnetcore-runtime-8.0-8.0.10-1.el9_4.x86_64.rpm 9ba829b53b8f227c51133f91a470b242b9f9caee58acce69dceaa8995cd9dd5f dotnet-sdk-dbg-8.0-8.0.110-1.el9_4.x86_64.rpm c7ec7a22dfba593cf2c55263fa9d2e967116d8abccdd14ac415c3ec75a72c902 aspnetcore-runtime-dbg-8.0-8.0.10-1.el9_4.x86_64.rpm cc2e931a0b9bba4ae0ed757fb944e27b08fd7109867bc0d3b5fd52833d3a6a17 dotnet-targeting-pack-8.0-8.0.10-1.el9_4.x86_64.rpm f9c1ddd57cd0caba2953ee51b397d263559d502403211a051c9835f9d94ae441 ALSA-2024:7958 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-128.3.1-2.el9_4.alma.1.x86_64.rpm 4490014475e54d31f8b58ba243d9e36d65515400fdd19b742888f5540e7976b9 firefox-x11-128.3.1-2.el9_4.alma.1.x86_64.rpm 8df711db4ffcb935e07161b7bea4fc33b2d76a59e0fc87477d2e0bac10997aea ALSA-2024:8025 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-128.3.1-1.el9_4.alma.1.x86_64.rpm b8731ddebf5173f2c2b7d40533a668bf683010abd4dfd56bcfa430bec1925b8d ALSA-2024:8037 Copyright 2024 AlmaLinux OS 0 1 Moderate

OpenIPMI security update

The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring. Security Fix(es): * openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default OpenIPMI-2.0.32-5.el9_4.i686.rpm 26d1989ffa8883d5fb78957fdf8ed841ed0de55beb8ac3ad9e4ba1ca2196c9c4 OpenIPMI-2.0.32-5.el9_4.x86_64.rpm 3780828315a6a2c308b4487fc61b7108145897c4db1d14fa3de1cda89fbc5746 OpenIPMI-lanserv-2.0.32-5.el9_4.x86_64.rpm a55b42160fb7d1b6b2f40277dc77bc1e99b87af83228141e2dc2a1a6ec8d4110 OpenIPMI-libs-2.0.32-5.el9_4.x86_64.rpm bb108eb5a282d320396de44da049c85a3d61cf3dd609f31c7717df8c42c73578 OpenIPMI-lanserv-2.0.32-5.el9_4.i686.rpm dbb3c871d053b399881b01146821063a0200faeca0b3a66f63fb5fbe9e352c25 OpenIPMI-libs-2.0.32-5.el9_4.i686.rpm e7a55c3a51112ea4527f2d0daad5763dca0f4bf4e75c29ba6f02ebee4a059fb2 ALSA-2024:8039 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default podman-remote-4.9.4-13.el9_4.x86_64.rpm 162f61f10bbb9e5dbf13735819a64319d9542e8538afebe2c99ad50685df5690 podman-4.9.4-13.el9_4.x86_64.rpm 3189bfac2f9d30ed4e419a865ad7ed06c48f13516b8f5f7585042abfd9ed808c podman-tests-4.9.4-13.el9_4.x86_64.rpm 420146b71a306b1b6e9b7870342ecafe29e481f55c9f4b7da1172057a8acf0af podman-plugins-4.9.4-13.el9_4.x86_64.rpm 866b5a11fcc563bcea6984670c3f169c5b98352f745b45eb16ddd0310bcd5120 podman-docker-4.9.4-13.el9_4.noarch.rpm 8e99dfe6481b7e84d3a8caf5f2458c7f6851abb4570575d78c4014b823ed0dad ALSA-2024:8110 Copyright 2024 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default containernetworking-plugins-1.4.0-6.el9_4.x86_64.rpm 05cd7d098ff1b2b6b2bf07d0ef8d218754663569ae2e09cff7144cdeb1c362ab ALSA-2024:8111 Copyright 2024 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default skopeo-tests-1.14.5-2.el9_4.x86_64.rpm 161fee5013b25978fa1bd3d495514d3d2a5b3b74df3ae9b138e9dc9938d8e8a9 skopeo-1.14.5-2.el9_4.x86_64.rpm c1979218f9ee995f60c8e7fb72a6f42416509e53e45562e140a32ccfb12e7878 ALSA-2024:8112 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-tests-1.33.9-1.el9_4.x86_64.rpm 75247b05b48d3811374b16bc32e86d071337e9327dbcb4eb714cb69c3bc396cd buildah-1.33.9-1.el9_4.x86_64.rpm b419ffef73b2eefb350b6b17facc26cc8ff0f8d0ba1c54c812a29816ecfdbdb6 ALSA-2024:8117 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default java-1.8.0-openjdk-demo-1.8.0.432.b06-2.el9.x86_64.rpm 26e67de36162ca8469e562d12a9532305b5b4acd854a6b2e8bf6e7a798520ac5 java-1.8.0-openjdk-headless-1.8.0.432.b06-2.el9.x86_64.rpm 3cab40337ef9000956bfdba2d16afe316c4d0f78dc677c605fbba1d373b63df1 java-1.8.0-openjdk-javadoc-zip-1.8.0.432.b06-2.el9.noarch.rpm 4ddf0bcc6626495dce4e4d805a971106c42927125ead702018b3e1e31558268b java-1.8.0-openjdk-src-1.8.0.432.b06-2.el9.x86_64.rpm 7e2a2c8ee6af7d1bd4b78e9ae54bff22c782e4d8abd08d6e82b62b3493bc820c java-1.8.0-openjdk-devel-1.8.0.432.b06-2.el9.x86_64.rpm 9ca9535a880ce0c9e47f573f81cde8cff4f936527235c799a8ea3232fdcfeedc java-1.8.0-openjdk-javadoc-1.8.0.432.b06-2.el9.noarch.rpm bb77d29b8740cded757516caecc65e5a1ad349e1368fab4a402f1135d5e5be63 java-1.8.0-openjdk-1.8.0.432.b06-2.el9.x86_64.rpm d4ddc2889a3ab31e8b60e3806fd7e088a88c5fd568c99109aec26f3ee103f4e4 ALSA-2024:8121 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default java-11-openjdk-javadoc-zip-11.0.25.0.9-2.el9.x86_64.rpm 07937a7900121519572e9392ed8b63a1feb721e3355610fd70d9a26f0efbbc67 java-11-openjdk-javadoc-11.0.25.0.9-2.el9.x86_64.rpm 0e6f8425df5abe496fad3222ca72cd38ae9fec0753bb344aff16e7cab8454285 java-11-openjdk-11.0.25.0.9-2.el9.x86_64.rpm 53664f6bda5595697896fb382dd1ef80a1ccb393ddb5b509c2c03377f0ac15df java-11-openjdk-demo-11.0.25.0.9-2.el9.x86_64.rpm 6d99121d2eb8d6e2b7d0e3def24fcd3eb93331ff5063059f212aac8549b0c34f java-11-openjdk-src-11.0.25.0.9-2.el9.x86_64.rpm 78219d7881399c4abf2a8d369b703307b25a04e52a73e3d3fc56e5774722cb71 java-11-openjdk-static-libs-11.0.25.0.9-2.el9.x86_64.rpm 8f1ccc16ccc2fbbed2b8d9980577929ac3ac578b4ffc48bb4076121f7dbb5341 java-11-openjdk-headless-11.0.25.0.9-2.el9.x86_64.rpm ba53ad7ecd1b55b1035b75b7938efcf15861f456b4cbf8e9872a95a6865b20fe java-11-openjdk-jmods-11.0.25.0.9-2.el9.x86_64.rpm d47b92d94483ca6f5c457042f1b7868cbd7ce81133f591fed343412bb40f26a8 java-11-openjdk-devel-11.0.25.0.9-2.el9.x86_64.rpm d91921c2b7be97fdaaf99fe305d7bad1c684995be0ed779ccd91099e9cad594f ALSA-2024:8124 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default java-17-openjdk-src-17.0.13.0.11-3.el9.alma.1.x86_64.rpm 00b90d88ba65289662e5f9d510995d84c8f05da9e06d099f745cae7b02b8886d java-17-openjdk-javadoc-zip-17.0.13.0.11-3.el9.alma.1.x86_64.rpm 017fc84665715528c7cebf1757e51d7906c56065c58d294013df7f0ac82dde5c java-17-openjdk-static-libs-17.0.13.0.11-3.el9.alma.1.x86_64.rpm 03c592f2debe70800afe8c9429a8a3c3d38373e12ab2acab81ff908902e6be84 java-17-openjdk-17.0.13.0.11-3.el9.alma.1.x86_64.rpm 06fc3221a135eb2dc5990cc1d7afd582d3c9e5e51673463baeebed5f093d2f09 java-17-openjdk-headless-17.0.13.0.11-3.el9.alma.1.x86_64.rpm 24769af319fd44480a524190ec7940ef82805606c67a0b4a002478533b8f6bb3 java-17-openjdk-javadoc-17.0.13.0.11-3.el9.alma.1.x86_64.rpm 933bc2ea41cf7fb3136b4a25b92ae4b84b7fe8aace0cd57d43f4f605f040422d java-17-openjdk-devel-17.0.13.0.11-3.el9.alma.1.x86_64.rpm f35277bd5327fb815de896c80407e6f8d6de5ee1baacb8f768ae88485e41ed20 java-17-openjdk-jmods-17.0.13.0.11-3.el9.alma.1.x86_64.rpm f4de231096b3a3684c35b1f28c4b10ac27698066f3b039c28070b6f0dcb1a514 java-17-openjdk-demo-17.0.13.0.11-3.el9.alma.1.x86_64.rpm fb5a55085f6434b97277824544a3165b51f3ea2111482e64d74708cfee072f3d ALSA-2024:8127 Copyright 2024 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 runtime environment. Security Fix(es): * giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default java-21-openjdk-jmods-21.0.5.0.10-3.el9.alma.1.x86_64.rpm 043f8aca2ba50501b9eba5be36a7459ba348a59a7c1919d25799d11826f9ec94 java-21-openjdk-javadoc-zip-21.0.5.0.10-3.el9.alma.1.x86_64.rpm 0480c2faecb0dcb171b90d4bb5eaa5839931c99fa363450715c0e48fdb2343f3 java-21-openjdk-javadoc-21.0.5.0.10-3.el9.alma.1.x86_64.rpm 2b750ebca98babdeedc0f290442413c71344470708dbd414ca179bbb5851b54d java-21-openjdk-devel-21.0.5.0.10-3.el9.alma.1.x86_64.rpm 36e19ca1284402eb1953aa5ad3c861ae306cc7f7942c21d3ff78bb87997dd0ae java-21-openjdk-21.0.5.0.10-3.el9.alma.1.x86_64.rpm 5366bb978d2092fb927060646f99feb58a0c0b794099f328fa7dcbc12bb0834a java-21-openjdk-src-21.0.5.0.10-3.el9.alma.1.x86_64.rpm 5a16247019248d62845402e826fa88f288dc8283a996bc1d6fb7b0bb329e31e3 java-21-openjdk-headless-21.0.5.0.10-3.el9.alma.1.x86_64.rpm 8ce762c5e35f35fa34d246155fffcf872c796a3d3b38234995e941b98daa93fb java-21-openjdk-demo-21.0.5.0.10-3.el9.alma.1.x86_64.rpm bf8cfe3089d4138506a99518c3c8ddf91ba061df0f5951f8ccffc6aac3f54fb7 java-21-openjdk-static-libs-21.0.5.0.10-3.el9.alma.1.x86_64.rpm f1735cd3ba8d8a73f4b6cf94de3364419a6bf3a2a9e3c387594410c48c4bd40d ALSA-2024:8162 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746) * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403) * kernel: Revert &#34;net/mlx5: Block entering switchdev mode with ns inconsistency&#34; (CVE-2023-52658) * kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989) * kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385) * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889) * kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978) * kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556) * kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483) * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502) * kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959) * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079) * kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272) * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-devel-matched-5.14.0-427.40.1.el9_4.x86_64.rpm 122fb34993dcf7762bb67d02220ad2b4c2004ec2d37d8b8b829bc612ea2e081b rv-5.14.0-427.40.1.el9_4.x86_64.rpm 2a9bb23405b263f3ef6110a6141ed8641294263334d0b239a088087a6e6f5af2 kernel-debug-devel-5.14.0-427.40.1.el9_4.x86_64.rpm 6ccde6aa4c8001e010e2acb1230f4a27f6b9b5b6c684e607eb7741534005460d kernel-doc-5.14.0-427.40.1.el9_4.noarch.rpm 86622373d7e6b6e7a3a3c609bc6a724fcd1620c90ff30b454cb9163d9040524b rtla-5.14.0-427.40.1.el9_4.x86_64.rpm 89635018f4c791460f30eed07efadde2457f9c20bd74cef5bb765ac05221aff1 kernel-headers-5.14.0-427.40.1.el9_4.x86_64.rpm 9f344d0f519d368987ec45fbb3b1383905abdfb65bf9b1dbfab8c5ef475560ff perf-5.14.0-427.40.1.el9_4.x86_64.rpm a3a1ccd3f0bb1d772a46c3bd4d25c3c8e50ed0115605b1b78bfcf8855bc3628d kernel-debug-devel-matched-5.14.0-427.40.1.el9_4.x86_64.rpm bc9502c784e39b10cbd8d282bfa679367e4c85e43c1dd42df1afdb225ec2197a kernel-devel-5.14.0-427.40.1.el9_4.x86_64.rpm f5e2cbba6b7ff740aa1f6f65318aeaa682c9537800b39ed46e4ba1deff5fcff6 ALSA-2024:8180 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789) * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780) * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779) * webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782) * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866) * webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default webkit2gtk3-jsc-devel-2.46.1-2.el9_4.x86_64.rpm 125c5149e55dfeeb2a235fcbc0f43944b3ccaed797404cd7e75d42ce488bd88e webkit2gtk3-jsc-devel-2.46.1-2.el9_4.i686.rpm 37398f16b696e23cf49f752050eba83072743fe1ae6f43d31597500ce6226e13 webkit2gtk3-2.46.1-2.el9_4.x86_64.rpm 648c82d2db769736d7f7c90c07999a7c8842dcec6f79bddb66a3621c7be6400a webkit2gtk3-2.46.1-2.el9_4.i686.rpm 9b0ec8379e207348de2f723b6bac3904bf7ebb35a7fef5e9489a6301daf226fb webkit2gtk3-devel-2.46.1-2.el9_4.i686.rpm c6e81c421a01e239acd04af1a281af9886233d73cde515524e6a082c30bb2fa2 webkit2gtk3-jsc-2.46.1-2.el9_4.x86_64.rpm e27d8a4418aef5c1352f0a311aba61119d9d00082fab303adf8392894865e129 webkit2gtk3-devel-2.46.1-2.el9_4.x86_64.rpm f2cfddaf7b0d9f7a58c1abb46d3d8bea9d76841d6793f7a76f96154a1bb0e2bb webkit2gtk3-jsc-2.46.1-2.el9_4.i686.rpm f30edc47ca73738dc575967f1faa524de2b44e4425b14c23eabafd73d6d110c4 ALSA-2024:8374 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-libs-3.11.7-1.el9_4.6.i686.rpm 1eacc5547e3146a81fec08c09fc0c4b29ef44a8ca452b1048692e03032583560 python3.11-libs-3.11.7-1.el9_4.6.x86_64.rpm 5a83f73300ddf0c0dd48fce8156087a990c5ba6108e7d53376641d1d6f525ac3 python3.11-3.11.7-1.el9_4.6.x86_64.rpm a1f86e487b813ffa05ce32978d8d423dd561873a434c4f95da17eaaa5d6091b8 python3.11-devel-3.11.7-1.el9_4.6.x86_64.rpm ba0c38667f08d59e98eb6dfa16bb995910d4f40f32d86e78ef3fcad3dffe5db8 python3.11-devel-3.11.7-1.el9_4.6.i686.rpm cc5bc8f534dcbbad6d97e1c64e88eba613375efe0ecf35fccd3903e9e376f936 python3.11-tkinter-3.11.7-1.el9_4.6.x86_64.rpm d2ca76a80d7932ca72bf85fbd7f0de9b96191a1ac50552717666a7d1526f3e2c ALSA-2024:8446 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-devel-3.9.18-3.el9_4.6.i686.rpm 19778089169c6a88ef4c60b74a0fb9314af034d0ad60de6b560c5be55936cb13 python3-tkinter-3.9.18-3.el9_4.6.x86_64.rpm 1c21899cc76abfbd5f35bb916cf527d49530a4ef0e3031c1fa3e984a84c2fca1 python-unversioned-command-3.9.18-3.el9_4.6.noarch.rpm 4322cbb263e9dba528a82fdb49690dd6b957241192fe4601f57a5fa361653ff2 python3-devel-3.9.18-3.el9_4.6.x86_64.rpm a8d520e0cb4561bf51c7129662c31d89a347950085dcb869ac8f7b51c7fdd9e4 ALSA-2024:8447 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.12-libs-3.12.1-4.el9_4.4.i686.rpm 16702b4a8ea71f70ea85572220d2fe19742ace1e68524ea9326cd1df4c151936 python3.12-devel-3.12.1-4.el9_4.4.i686.rpm 228b12433c3f216abc42a448c5f5f3ece4352978594e28509fa7e1ef54f59a1a python3.12-devel-3.12.1-4.el9_4.4.x86_64.rpm 8f0a4a27a82c851eddb8df136e6f97e6b774b11698e91274da26b6ac75bd2d7d python3.12-libs-3.12.1-4.el9_4.4.x86_64.rpm c0df5cfad0e44488573ba4871d3a3ab45a6033dc2b4189eac20a6d0237cbc286 python3.12-tkinter-3.12.1-4.el9_4.4.x86_64.rpm cd51b6477597a8f9912c2bf99214f41b7834362570e59ca883b4073d320abb5b python3.12-3.12.1-4.el9_4.4.x86_64.rpm f0fb76d0157901cd533fb31ff8593a0a1b34462c03bae4f06f06ddcaa5f027b4 ALSA-2024:8563 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-tests-1.33.10-1.el9_4.x86_64.rpm 07a983fab6cf384d6cf758282cde617df7a08fb4e91f97f3cce6069ea9183821 buildah-1.33.10-1.el9_4.x86_64.rpm ace934089e69512c57028ebc1883b48458438e64db560b02d36b71192cb0438f ALSA-2024:8617 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201) * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640) * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826) * kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923) * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961) * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935) * kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383) * kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244) * kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472) * kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504) * kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904) * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931) * kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960) * kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972) * kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977) * kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995) * kernel: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super() (CVE-2024-40998) * kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005) * kernel: xfs: don&#39;t walk off the end of a directory data block (CVE-2024-41013) * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014) * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854) * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-debug-devel-5.14.0-427.42.1.el9_4.x86_64.rpm 3625233eb8c50a8cf40ef0700fb240d8edc3d9c6b6412f3cae5ae6cb1fd81630 kernel-doc-5.14.0-427.42.1.el9_4.noarch.rpm 72bddd3c3e8ac424dd6e46fd025d65806a823f1136fb50a94065c460bec46bbc kernel-devel-matched-5.14.0-427.42.1.el9_4.x86_64.rpm 82b6d2bb8f58b0b4cfee8ee9f17cd11fb3c551c739b25552deef8cbc31882f5f kernel-headers-5.14.0-427.42.1.el9_4.x86_64.rpm a975a9a03e8961a1ad783844696d73f0bb90e1beec266d774fe48be0c4160270 kernel-debug-devel-matched-5.14.0-427.42.1.el9_4.x86_64.rpm b00c208645593d55b28828a06a3f10656fdda015766bba691c682852b58af9b6 rv-5.14.0-427.42.1.el9_4.x86_64.rpm c2bf8b3a28be2bb30267753ad42351a7632cd80467af397ae252fa0938cc8ef6 perf-5.14.0-427.42.1.el9_4.x86_64.rpm d582e14501799d64c4496408e4a2738aff3ab4b5e4277df545f029085ed4bebb kernel-devel-5.14.0-427.42.1.el9_4.x86_64.rpm d80dc4200677dc5e2417c251598f4492d687f675a8e12946b84d6b8063343785 rtla-5.14.0-427.42.1.el9_4.x86_64.rpm e6fccc62d0fc241d4fda8a212d493b55bdcfd496adf28c5cc3c9d03930a46fcf ALSA-2024:8678 Copyright 2024 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355) * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default grafana-selinux-9.2.10-19.el9_4.x86_64.rpm 5adc044d6094fd56308198a8c6fd9f078723c700574c19acccc7aaa2abf3113e grafana-9.2.10-19.el9_4.x86_64.rpm 7345bb439a816204b5ac48b9e81d3ad278f15ee251cb4e3e5937adbc871dde4f ALSA-2024:8680 Copyright 2024 AlmaLinux OS 0 1 Low

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_http2-2.0.26-2.el9_4.1.x86_64.rpm 8d90f80731bd39f7fa90b0b3731d3f78222c9ce3c097e987ff813f9b4ff2aaca ALSA-2024:8726 Copyright 2024 AlmaLinux OS 0 1 Moderate

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464) * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461) * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458) * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459) * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467) * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465) * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466) * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463) * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462) * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-x11-128.4.0-1.el9_4.x86_64.rpm 1a8542ecd168c19fbc726abfb76f0d29aef0813ab87efa41874ca73e977bbd5c firefox-128.4.0-1.el9_4.x86_64.rpm b070f7b76798a3d75ddbeb788e4a7431789af96bc1cf6dc1d463d6b038523d37 ALSA-2024:8793 Copyright 2024 AlmaLinux OS 0 1 Moderate

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464) * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461) * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458) * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459) * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467) * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465) * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466) * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463) * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462) * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-128.4.0-1.el9_4.alma.1.x86_64.rpm 648cbe704761d11a622a1369178a76ef40ec6ff898c60351949fb2ca2c683634 ALSA-2024:8800 Copyright 2024 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default openexr-libs-3.1.1-2.el9_4.1.x86_64.rpm 0c8f63904d7fa8ffb987c879b261f71279878e5ba4fec7c563fa6cd92695cf64 openexr-3.1.1-2.el9_4.1.x86_64.rpm c1486c952192faddbad7ff9788f195a9af6b300eddd07cdc825260bb95b817fb openexr-libs-3.1.1-2.el9_4.1.i686.rpm cd45f0e42646f52efe9e8b85b9d6f2ffe112e5814ed5a56b642d7fab20ecaee5 ALSA-2024:8914 Copyright 2024 AlmaLinux OS 0 1 Moderate

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: NULL pointer dereference in tif_dirinfo.c (CVE-2024-7006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libtiff-4.4.0-12.el9_4.1.x86_64.rpm 0c159fce2a0e9d4b30c476ece6414eabe8ca7acf5d379659fa7770dc8732da84 libtiff-devel-4.4.0-12.el9_4.1.x86_64.rpm 41bca5fa9193396892fed0479eb6518abe0240defce047c0b0f026200836ba7c libtiff-4.4.0-12.el9_4.1.i686.rpm 834d8dce094070231c313a1834534261df8cdbae32333bbaa746643707d7baaa libtiff-devel-4.4.0-12.el9_4.1.i686.rpm e6a9a01b883366f4a0357f44644b17634b9f504e206a88b19eaecb049f7fa292 ALSA-2024:8935 Copyright 2024 AlmaLinux OS 0 1 Moderate

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: Possible denial of service in X.509 name checks (CVE-2024-6119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default edk2-aarch64-20231122-6.el9_4.4.noarch.rpm 6ead2d3429f2753faeac142fafcbdb556ed7e654686566cc8c3c51d6d0443a73 edk2-ovmf-20231122-6.el9_4.4.noarch.rpm f240e4196ec775d8927b7347b3954c802adec030b855c4acc8bda3228f24530f ALSA-2024:9051 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default podman-4.9.4-16.el9_4.x86_64.rpm 74d256274e6949415da5b4e3053c076ca02eaaee0c8b8f3decefb90a820b7514 podman-plugins-4.9.4-16.el9_4.x86_64.rpm 97b02f669ae280fc44c9cd443cb63314c349e4810ae5c6a8134cc3e8cba779ed podman-remote-4.9.4-16.el9_4.x86_64.rpm 9e07b24cf1f4ae0c2bff6f0b67c5c8e3aac4c64aafe7c6895bfe3e7b34f92085 podman-docker-4.9.4-16.el9_4.noarch.rpm cd443bee4356a06d153ed758b873dc9841cf680477297951706ae1557bd1a9bd podman-tests-4.9.4-16.el9_4.x86_64.rpm d4992a1d3ba7e7066d5d7a09e29f5a823d49fc843d2a306e224954e369b82a2e ALSA-2024:9088 Copyright 2024 AlmaLinux OS 0 1 Moderate

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129) * openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237) * openssl: denial of service via null dereference (CVE-2024-0727) * edk2: Temporary DoS vulnerability (CVE-2024-1298) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default edk2-ovmf-20240524-6.el9_5.noarch.rpm 3528b27d7d11bfda697bf5473dd8035de0ba56571ec5a5d94fd68b6948e6a27c ALSA-2024:9089 Copyright 2024 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default containernetworking-plugins-1.5.1-2.el9.x86_64.rpm 48edce7944c0f9318c986cb0841f3ccca18a39063af3220c0a766fd6a3bccae3 ALSA-2024:9093 Copyright 2024 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default xorg-x11-server-Xwayland-23.2.7-1.el9.x86_64.rpm fda91951a57ec5318f6606f181be43ed5086f1ae756e03c8067141df2332f8e6 ALSA-2024:9097 Copyright 2024 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * containers/image: digest type does not guarantee valid type (CVE-2024-3727) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-tests-1.37.2-1.el9.x86_64.rpm 7cdc922e3eda52669e295db86a6e65e8dec5a37082d6521291f258174803dc5f buildah-1.37.2-1.el9.x86_64.rpm a2d688da929d3d844d183df6bb55799ea7f7553fbc05aa4c767684e5d42a9f7c ALSA-2024:9098 Copyright 2024 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * containers/image: digest type does not guarantee valid type (CVE-2024-3727) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default skopeo-1.16.1-1.el9.x86_64.rpm 5b5fe42353356082c9485f2b2c49d5ad2decd26c04573154fe94c811ece07208 skopeo-tests-1.16.1-1.el9.x86_64.rpm 6e0c9c00f4865cc5dc708147a9d1f154fd0a05fca4a54f6e6754eec4601fb0e7 ALSA-2024:9114 Copyright 2024 AlmaLinux OS 0 1 Moderate

gnome-shell and gnome-shell-extensions security update

GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts. Security Fix(es): * gnome-shell: code execution in portal helper (CVE-2024-36472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gnome-shell-extension-systemMonitor-40.7-19.el9.noarch.rpm 038a6ca646514a4289b90d50b3a382c98008e1927ec9c090fc55919696320510 gnome-shell-extension-screenshot-window-sizer-40.7-19.el9.noarch.rpm 23547f205b09d7c05816aacab9322d9a421b3eb025dc903d1af598efcb71ac2d gnome-shell-extension-common-40.7-19.el9.noarch.rpm 26dd8f424121a86af4520e5277f915e64aad4e6c6f58195c5337a27ef31d275f gnome-shell-extension-workspace-indicator-40.7-19.el9.noarch.rpm 300fd231adbcc889d30dc539482f4d4e887ca520409f40a83d47aa6b82d19629 gnome-shell-extension-updates-dialog-40.7-19.el9.noarch.rpm 308fdc076d131ac0dae9b0bbdb55a609e5a3f6bbd95a5c4cc7ca9d0c224ccb1e gnome-shell-extension-gesture-inhibitor-40.7-19.el9.noarch.rpm 3891c630c048f1adac55a5c3f77ac09729f4568659d60e3330719e5e76d6af4b gnome-shell-extension-classification-banner-40.7-19.el9.noarch.rpm 392e7e70ee0b06c5121e2f18a459bd21983e75ebaf8879445db8417edde9b4a5 gnome-shell-extension-desktop-icons-40.7-19.el9.noarch.rpm 4d9118b31b3d2fd09310c6083bb5cf261bd339b18f18d555348dee43ed7d19bd gnome-shell-40.10-21.el9.x86_64.rpm 539c09dcd9067609f69f5ffc7227cdce19e57cf782b2f9994aafc0c63e24ae0b gnome-shell-extension-heads-up-display-40.7-19.el9.noarch.rpm 5b6f86ebd8bd845d3b5229c8800c073ae4779b9f91afed738ce737e2247c2c9f gnome-shell-extension-user-theme-40.7-19.el9.noarch.rpm 5f882209169ce32ad0146d8b231765dac30c51ad335ca40e5223b03756b71816 gnome-shell-extension-custom-menu-40.7-19.el9.noarch.rpm 6c51bbaa003c1628786eb06c957dfc2802f084c2cf22e7a78b1e555dd084588e gnome-shell-extension-dash-to-dock-40.7-19.el9.noarch.rpm 6e8601dd9b24a6b1758ac1e7e1322974e0c0de8946a7654beff4a904f6945c37 gnome-shell-extension-window-list-40.7-19.el9.noarch.rpm 750813fb7a7f4bc564a3f6cb98e7c0d870a79fc4bc9270444b92aa13140ddce3 gnome-shell-extension-panel-favorites-40.7-19.el9.noarch.rpm 81f3487bda6ef31b3ad8c34ca92cc3c3648f5273ed76961b185b43500ff7042b gnome-shell-extension-windowsNavigator-40.7-19.el9.noarch.rpm 97af102fd81f14d1bb81ab45ede9c99d3e6cca06670604f6c65509179e2fe1e1 gnome-classic-session-40.7-19.el9.noarch.rpm 9d313e6f328eedadf34848606dc7382333b92de818fba895caf0fef0c6406cbe gnome-shell-extension-apps-menu-40.7-19.el9.noarch.rpm a956dc78a5d002213472f231f98e7f1ae75a55e90f37113de7b94272898f847c gnome-shell-extension-places-menu-40.7-19.el9.noarch.rpm abcdbbcb2236a7dcf558d56c4fb5d702d9f646c44d3e52a060b7041c297d67bc gnome-shell-extension-top-icons-40.7-19.el9.noarch.rpm c5160b0e8b8becda49a40b70dc09f8408ea2c5f03276d68ad7785355f9cc0806 gnome-shell-extension-launch-new-instance-40.7-19.el9.noarch.rpm d13c7f4747c58c18c9c94d68de9fbd4ca25057ed656832afeb73eaf58a8fda9e gnome-shell-extension-drive-menu-40.7-19.el9.noarch.rpm d6675c78a285a915f4fc8d4b340d07a49c35f77681d0964297bc08c6ae1d909e gnome-shell-extension-native-window-placement-40.7-19.el9.noarch.rpm dce4645603853b8c2f33d7a34c7d4e508c4a835dd0e240632e32e81c7555b9d1 gnome-shell-extension-dash-to-panel-40.7-19.el9.noarch.rpm e5049e349f79964c6a93942e2425e77423ad8382689de047bea09986b155d00d gnome-shell-extension-auto-move-windows-40.7-19.el9.noarch.rpm fdacd41b4fed9e3551df97aff1142f8a2cb2f94fc0d6e2eb153a393fca332377 ALSA-2024:9115 Copyright 2024 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default grafana-selinux-10.2.6-4.el9.x86_64.rpm 65889743a5986c96b25009ab78f4fbc96a5a92f82e183c50087b3338a12e6391 grafana-10.2.6-4.el9.x86_64.rpm c88153eb5fedd33df52de2d97180fd39acf5946152218713b461207d39d8e5f1 ALSA-2024:9122 Copyright 2024 AlmaLinux OS 0 1 Moderate

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default xorg-x11-server-Xephyr-1.20.11-26.el9.x86_64.rpm 003a0ba32d5f4c6dbc840b28e7a773de77463197bb80ffd118248ed34da9d43f xorg-x11-server-Xnest-1.20.11-26.el9.x86_64.rpm 07453782503fe8790632641e1ae022b79285ed4ea1ced3533306d7a8bd235749 xorg-x11-server-common-1.20.11-26.el9.x86_64.rpm 92a2fef7068b8097bee3bab4ba6109a5d38420833608502f44e131449764b170 xorg-x11-server-Xvfb-1.20.11-26.el9.x86_64.rpm 97e2c1b055f09b7bc36dcc7e7742500a1c5070bbeece3f16a05afb5a7f257691 xorg-x11-server-Xorg-1.20.11-26.el9.x86_64.rpm e1f8d00b131a45b93dd2bc080861f63f1444b3cc5111a60a2b3e96c800ba41d0 xorg-x11-server-Xdmx-1.20.11-26.el9.x86_64.rpm f889b76c43620ad41d737415e48354039a90175dabf1738996445d2c490dbd10 ALSA-2024:9128 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvirt security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * libvirt: Crash of virtinterfaced via virConnectListInterfaces() (CVE-2024-8235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libvirt-daemon-log-10.5.0-7.el9_5.alma.1.x86_64.rpm 0994fedfb8c28177bfce7d49d769b7acff5488900812ff3b51a97f14d432e89b libvirt-daemon-driver-nodedev-10.5.0-7.el9_5.alma.1.x86_64.rpm 0b5c1f71e5483c1fb5f08aed4d69ddd20e55d11523f5bcf2f754401bb0db3f23 libvirt-daemon-driver-storage-logical-10.5.0-7.el9_5.alma.1.x86_64.rpm 0d0598b4fa4488be77ec00b7a1c1d07456c86d5ffc1a84b86b9c985558074827 libvirt-daemon-config-nwfilter-10.5.0-7.el9_5.alma.1.x86_64.rpm 110b2ff84cddf84ae8ae8562c9710839ebefa9390b9c1ffcb742dd70a7f822a6 libvirt-daemon-driver-storage-mpath-10.5.0-7.el9_5.alma.1.x86_64.rpm 117e8cc0afbf10faa4d781c3646ad8ca3c2e749625de2888f742d40dd2773f97 libvirt-daemon-10.5.0-7.el9_5.alma.1.x86_64.rpm 1c0f61ea3d4a50f6f38780d7a07b384f9be6c1ab5aeb944a82f366233c85fab3 libvirt-daemon-plugin-lockd-10.5.0-7.el9_5.alma.1.x86_64.rpm 1ca9f23cafa426a813a30f18d3e09f09a63775a367e0d4b6105ecb7e00d08a3e libvirt-daemon-driver-qemu-10.5.0-7.el9_5.alma.1.x86_64.rpm 3849a17106022e7ac83c33ec3f9a24d2a1a440d51e05379b5aa98870747c3815 libvirt-daemon-driver-storage-disk-10.5.0-7.el9_5.alma.1.x86_64.rpm 3eced8f2ec3ad5e01fa1a8cf43e9c87a27bfd4dc2f0c3b97d1bef4bb79e9ccbb libvirt-daemon-common-10.5.0-7.el9_5.alma.1.x86_64.rpm 5dbf810f1921382ace75ef0c5cf85cc94fd99d89a2a1b9be02c27498ac70ab3c libvirt-daemon-driver-storage-scsi-10.5.0-7.el9_5.alma.1.x86_64.rpm 668f9c814625af0e2a1c3ddcb33f4129ca1f4b66096cdb3b23d1dad2b2593fb5 libvirt-daemon-kvm-10.5.0-7.el9_5.alma.1.x86_64.rpm 68eecb8bc9f9dcee563a1d1d2f531d0741e105403b02cd8b8885804093a0508d libvirt-client-qemu-10.5.0-7.el9_5.alma.1.x86_64.rpm 6c0ea4d2142768d224cdb6895ff9f519a675652e18d454392d6dd8062af9b5ff libvirt-10.5.0-7.el9_5.alma.1.x86_64.rpm 6da4436d33cf4fd26875e04788baceff321862bb2603416b7e64bbcb6986318e libvirt-ssh-proxy-10.5.0-7.el9_5.alma.1.x86_64.rpm 7f73ffda7f2e6325d136daeb4070a9aed1b0465e72bee493991fddf139f77128 libvirt-daemon-driver-nwfilter-10.5.0-7.el9_5.alma.1.x86_64.rpm 8916f0f7c403b071640b97fe20893c607c796b596803abcc9dd200b33dcf37a7 libvirt-daemon-driver-storage-core-10.5.0-7.el9_5.alma.1.x86_64.rpm 8e86bae6d2e803a7db3d572a1e2d3b8685cfd39f96929ed7797f17fbb647779c libvirt-libs-10.5.0-7.el9_5.alma.1.x86_64.rpm 9f3cf62980de461f2ce36022dce92d1d8fe138a98c7eb5b989aeeb0672111671 libvirt-daemon-driver-secret-10.5.0-7.el9_5.alma.1.x86_64.rpm b4d3a52378a8b2389aa5c5f5c27b81df52ee87de12f63fef3238d36e55ed9528 libvirt-client-10.5.0-7.el9_5.alma.1.x86_64.rpm b65457bce1fc03f60f62ac33a0d68a0fb5f16e75f66a189a788b4a37c228bd2e libvirt-daemon-config-network-10.5.0-7.el9_5.alma.1.x86_64.rpm bcb1f7ba9144afcd9f761393e23695421253289a2b0f8fbabafb8538293e19a6 libvirt-daemon-driver-network-10.5.0-7.el9_5.alma.1.x86_64.rpm c623bbc0b983a8058f8e47be0e1efd98c9dec9fcc89590f0e9846cf28593fc00 libvirt-daemon-lock-10.5.0-7.el9_5.alma.1.x86_64.rpm cca01c649a43d51af8570c3d95e015e6286ebee2e3fca28e8b926603db1a2a4e libvirt-nss-10.5.0-7.el9_5.alma.1.x86_64.rpm d055f36a1a0cfcc6263f0620e89664a9a99efe18531a5c6e24c882fb287c26db libvirt-daemon-driver-storage-iscsi-10.5.0-7.el9_5.alma.1.x86_64.rpm e3c7e170d8e5ddfa3c2c99a5cddd3eb0ab6c56c84e935ab9626e634ace9d46cb libvirt-daemon-proxy-10.5.0-7.el9_5.alma.1.x86_64.rpm ed715abcc5ce74b05c63b4077279635f8f15a18e853d0503695aa68802fa3c7b libvirt-daemon-driver-interface-10.5.0-7.el9_5.alma.1.x86_64.rpm ee822150e8e2ce0fe31ea6750d460ef9faf7ed53bdcd3e321ea85098e70b5756 libvirt-daemon-driver-storage-10.5.0-7.el9_5.alma.1.x86_64.rpm eed022254500a647184360325a7e9d26cf065c49e26f6e1aaee270f549ed995a libvirt-daemon-driver-storage-rbd-10.5.0-7.el9_5.alma.1.x86_64.rpm fe7a6d63af9c6adb45b2b5a32850d98a7c42b0b23369b98b6521db4356d61faf ALSA-2024:9135 Copyright 2024 AlmaLinux OS 0 1 Moderate

toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * golang: net/[http:](http:) golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default toolbox-0.0.99.5-5.el9.x86_64.rpm 3a1c61965f7ad843105aa6af4a734f0b10ced2f7a4554c082555f186bdfcd5c4 toolbox-tests-0.0.99.5-5.el9.x86_64.rpm bb356c3bd0c7fd0317e354d9e276577eb46bc76052e866e5dc77955105b370f9 ALSA-2024:9136 Copyright 2024 AlmaLinux OS 0 1 Moderate

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow (CVE-2024-26327) * QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446) * QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default qemu-pr-helper-9.0.0-10.el9_5.x86_64.rpm 0ba868411af12fa2a891d1331de4ef29a0dc3449842732d0abd0d7da5bd7f454 qemu-kvm-docs-9.0.0-10.el9_5.x86_64.rpm 11c9fe7a4b7cc29ed293ce423bd4b6ccd8f6fc43c0142530007db59887d1c41e qemu-kvm-tools-9.0.0-10.el9_5.x86_64.rpm 143b276372461c727b2580fbb707cbb79188e3c39dd5f7758ebd85372fa28c8c qemu-kvm-device-display-virtio-gpu-pci-9.0.0-10.el9_5.x86_64.rpm 218938ba73f3d0c2a89cb1ea3eb66a66bfb6bfe8a6889909b397c1558c7ece82 qemu-kvm-ui-opengl-9.0.0-10.el9_5.x86_64.rpm 2b4599d9ee9efdbf3a2c1abd9e1b7290ed877903277d5bece1520ac5f47ddf8b qemu-kvm-block-rbd-9.0.0-10.el9_5.x86_64.rpm 32fd6d6a6d806564f97df768ca07b8a31ba81fb8d6eee1103f493922407680c1 qemu-kvm-9.0.0-10.el9_5.x86_64.rpm 36f49d19ecdc4867e1a3ea2076d69e138019803302f60e1caf23c5fdc7a6ed93 qemu-kvm-device-display-virtio-gpu-9.0.0-10.el9_5.x86_64.rpm 43626c5b6170110a63a8a9d2b4dab3938b4246d0566ea39ab326475168c8a960 qemu-kvm-common-9.0.0-10.el9_5.x86_64.rpm 4408dbc021bee2c08bb4eebdd05cdf66a5b90ca7340926cc727b13b3aa447a6d qemu-kvm-audio-pa-9.0.0-10.el9_5.x86_64.rpm 8351a900267120d063fcfb21e47d35563d65c01af29673bc4c2f94322983b9c0 qemu-kvm-ui-egl-headless-9.0.0-10.el9_5.x86_64.rpm 8a9dd1cc6003e1305847ddf99ce5f5746e5f38d3a51c87017ca861aee8e8e018 qemu-kvm-device-display-virtio-vga-9.0.0-10.el9_5.x86_64.rpm 96d726ab83808276a8b89c9f6fa3e63677fd33676195eccfbf3916402c98e6c2 qemu-guest-agent-9.0.0-10.el9_5.x86_64.rpm 994afc3b81f9159ee961b1f18a689366f38d8e600d015912844275544e1541c9 qemu-kvm-block-curl-9.0.0-10.el9_5.x86_64.rpm 9c2a91aed0b4e6d8b81295b34db2102db22221e70a20e1ce94ff1e1c38a4fe0f qemu-kvm-block-blkio-9.0.0-10.el9_5.x86_64.rpm 9d1c5d4eb9cfcba1b7c9c047ce35972bcaa596692954bb0f9ade1623f54a363a qemu-kvm-device-usb-host-9.0.0-10.el9_5.x86_64.rpm c1d0702dda1f7a43e66675ad159e78e6ef9a81824e3dd5a97700dd93049cef18 qemu-kvm-device-usb-redirect-9.0.0-10.el9_5.x86_64.rpm ea7c214c76fbe9f74736a799268db8ca6e25910896ad6f7149a582c805ca220e qemu-kvm-core-9.0.0-10.el9_5.x86_64.rpm ec3726a01a41b42e9d5861498de1f8a39d9cc744bb4031f83d16cfa40bd695e5 qemu-img-9.0.0-10.el9_5.x86_64.rpm f049b2f9dc7f0a86c55fc41a504a1d60495d4b2f9593cca40fc732faade6582e ALSA-2024:9144 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkit: visiting a malicious website may lead to address bar spoofing (CVE-2023-42843) * webkit: heap use-after-free may lead to arbitrary code execution (CVE-2023-42950) * webkit: processing malicious web content may lead to a denial of service (CVE-2023-42956) * chromium-browser: Use after free in ANGLE (CVE-2024-4558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default webkit2gtk3-jsc-2.44.3-2.el9.i686.rpm 1c6bf2789948d9414187619ee475b2ea1598094477eb586bc80d4bac291c2598 webkit2gtk3-2.44.3-2.el9.i686.rpm 26f1a2bca9e7507cac955c3caa821d2caab464a7d28a061368105d88c4d34e36 webkit2gtk3-devel-2.44.3-2.el9.x86_64.rpm 4d95cc225ed03548354879139cb736bff372b7ff9683004599187088fe70ea9a webkit2gtk3-jsc-devel-2.44.3-2.el9.i686.rpm 86ba22a2d879df3d42ed9f1cf4b8cce6ed54ffead71e7e2c6e386a2f7e441ffb webkit2gtk3-2.44.3-2.el9.x86_64.rpm 97a6dea47562e2e85c5026693b8777b33c9386564726137111774a077375efb4 webkit2gtk3-jsc-devel-2.44.3-2.el9.x86_64.rpm acd0dbc006572660acc76c8d7555318f380a25f3fb37c633d9e52d3ffeb76dc1 webkit2gtk3-devel-2.44.3-2.el9.i686.rpm c9ce088ad9119b1323eaea888558783cbd93dcb8233e78d06895e673b5d9a86e webkit2gtk3-jsc-2.44.3-2.el9.x86_64.rpm f9673a7f981869ccef0823bba46fb000783abf2b1fa5627bce8afa0e395ec698 ALSA-2024:9150 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-jinja2 security update

The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Security Fix(es): * jinja2: accepts keys containing non-attribute characters (CVE-2024-34064) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-jinja2-2.11.3-6.el9.noarch.rpm c2e94cdf42485c89ff688bf4214002f4935732183fbb072404e58cb8899c30c4 ALSA-2024:9158 Copyright 2024 AlmaLinux OS 0 1 Moderate

lldpd security update

LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices. Security Fix(es): * lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827) * lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612) * lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default lldpd-1.0.18-4.el9.x86_64.rpm 5b1db689c16395fb4732be6663668ca6cee221379faa43784dd5493daadca02c lldpd-devel-1.0.18-4.el9.x86_64.rpm 8b31cc60ec93acf2b8a831a8f6679828c796cbdb594b2448f3c6c1d128f94404 lldpd-devel-1.0.18-4.el9.i686.rpm 995a35d5af41ed8ad0d248d705d1a54730d48ba1defbc9d858aea224e0cb4bfd lldpd-1.0.18-4.el9.i686.rpm b73d50d94c66efe1342d32555b0863db07347ca5e57e4c755be069e2f3df15a5 ALSA-2024:9167 Copyright 2024 AlmaLinux OS 0 1 Moderate

poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default poppler-21.01.0-21.el9.i686.rpm 1dba3a69339edc1dd2091b6517bebf9a4d4ba743508145f802f31f709e7304cd poppler-glib-21.01.0-21.el9.i686.rpm 20954e3604ff30a20a732731b55e4453f709ced15ae00365951cf28e0be1121c poppler-21.01.0-21.el9.x86_64.rpm 25ea57e81ef345fad90e7ab601fec95cc31ba24af9dbf8dc0c34e782f2a31aa6 poppler-cpp-21.01.0-21.el9.i686.rpm 972158e6ffa2a834090f0d05c9df8a6ee28d8c675e55b17c53f1d826c1b2c6a4 poppler-glib-21.01.0-21.el9.x86_64.rpm a81fb7bf65817f003206fef0458c3347386fb7951cdce733e1c986169c4c82f3 poppler-qt5-21.01.0-21.el9.i686.rpm bb3efd3c29007ff6183227f8d6d5aa192597d470dacd8ee8aeef9504fd0db3fd poppler-utils-21.01.0-21.el9.x86_64.rpm cba1fed1d735367c9fc1a0a2d50e3d93177182df81d6acc3bc7c01acccbee40a poppler-cpp-21.01.0-21.el9.x86_64.rpm dc72b547b3c9b188ba8f38b81056ca7c8b0e98466958e08ac2699fc4d0ab538c poppler-qt5-21.01.0-21.el9.x86_64.rpm edb4e550782cf8f74f9119e6f47e80198548e49192d8dd7480ee28512fcdda1f ALSA-2024:9180 Copyright 2024 AlmaLinux OS 0 1 Moderate

mod_auth_openidc security update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies (CVE-2024-24814) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default mod_auth_openidc-2.4.10-1.el9.x86_64.rpm 277e2de285025544e1dc6850840f8dadee3a33ce77f3e40cc24f120cf4fbada3 ALSA-2024:9181 Copyright 2024 AlmaLinux OS 0 1 Moderate

jose security update

Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption (NBDE) in AlmaLinux. Security Fix(es): * jose: resource exhaustion (CVE-2024-28176) * jose: Denial of service due to uncontrolled CPU consumption (CVE-2023-50967) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default jose-14-1.el9.x86_64.rpm 7be5a51a1aa919dccb2f1dcdcd35ba1d53f7c4bf737bf03ab65a09be219811de libjose-14-1.el9.i686.rpm ac99113fd5e73b037859bb8e71c7603da06904da40429b9160410e4eed8bf945 libjose-14-1.el9.x86_64.rpm eb3a464e72b9ba6c8bce813aaff61dd4c946da297db256594e00c1b73311736e ALSA-2024:9184 Copyright 2024 AlmaLinux OS 0 1 Moderate

gtk3 security update

The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3. Security Fix(es): * gtk3: gtk2: Library injection from CWD (CVE-2024-6655) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default gtk3-devel-3.24.31-5.el9.x86_64.rpm 21c4bdb8d1b088b98037b4d9a29ac591a6643c71ea38eec4cab134e0361b117d gtk-update-icon-cache-3.24.31-5.el9.x86_64.rpm 43748b324356e3f87273992c8d9bd747e65885628957ac0a42c30c5a763d5b1b gtk3-devel-3.24.31-5.el9.i686.rpm 4a4699da446d9fe178a91528ef2b9373bf337cc741b49bb2b96b61860ac9beef gtk3-immodule-xim-3.24.31-5.el9.x86_64.rpm 6f27a0f37c041a56e268152ecdc8c1c77b8c54b27462041174179cad6dcf75e6 gtk3-3.24.31-5.el9.i686.rpm 7a6710594ea55fce36c5a012f9efd62ec9d712adaf80da0c09482068d6075b0d gtk3-3.24.31-5.el9.x86_64.rpm d94099ad8d9e6178aec8ff9c4e05da91dc056bbcb15081cac5c00a07022dc659 ALSA-2024:9185 Copyright 2024 AlmaLinux OS 0 1 Moderate

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: possible denial of service (CVE-2023-7250,ESNET-SECADV-2023-0002) * iperf3: vulnerable to marvin attack if the authentication option is used (CVE-2024-26306) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default iperf3-3.9-13.el9.x86_64.rpm 392b2e3c153151de074b92a95e34cbc9154b29e6e51e052c504a5044ef65e0dc iperf3-3.9-13.el9.i686.rpm be0243f4a39bab6a120094d30319ccc0e13dbff6589aec6fc701e6e75ed81415 ALSA-2024:9187 Copyright 2024 AlmaLinux OS 0 1 Low

bcc security update

BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool. Security Fix(es): * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default bcc-tools-0.30.0-6.el9.x86_64.rpm 11d294371c5a2516985b4b66d87baab2b00ec083e14b2f3784be4fb0c9f20b37 libbpf-tools-0.30.0-6.el9.x86_64.rpm c552c7324e8b7ec454fd5b6d1940cac9c1a37b3b77fde37c88b4f6d994bd29d3 python3-bcc-0.30.0-6.el9.noarch.rpm ea87f60b957329202b9687a56a8eaa09ae0ad1c01b6aa1a6f8c42dcad0eb6d62 bcc-0.30.0-6.el9.x86_64.rpm fbdf0bf64eca3b434fbdcba1e75738e5680ec8e75b2eb2755ad1911b2537d484 ALSA-2024:9188 Copyright 2024 AlmaLinux OS 0 1 Low

bpftrace security update

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap Security Fix(es): * bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default bpftrace-0.21.1-1.el9.x86_64.rpm 981a82f4c857f1e4028d1a94a8b86b330ff80ec41ea2b26b131d0db384162939 ALSA-2024:9190 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450) * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032) * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.12-devel-3.12.5-2.el9.i686.rpm 48aa27477618659974b340556a8cb3fdb2661191facc65dad00d91b82f643327 python3.12-devel-3.12.5-2.el9.x86_64.rpm 4e80f9b2d1039fa2822cef3b59d8f8d83c9640365e92d3bc3bf22efa66561024 python3.12-libs-3.12.5-2.el9.i686.rpm 63f3981a02b99315218eb690adc7a17b39957b59adb31bba8aee10584b591e51 python3.12-tkinter-3.12.5-2.el9.x86_64.rpm 65ce1c978dc7923ae18f2ecea46af38d21ac7b6f5ef318da13145fadea79ae39 python3.12-libs-3.12.5-2.el9.x86_64.rpm bfbb25e4e7d98a8f0c0659973f3f630fbea04ca8f1538c7bdf06fd0f4196bc9b python3.12-3.12.5-2.el9.x86_64.rpm f21a1f161376701e379e741e0291633f2200bc1c5fd4c477eb47b71ed5e82fd4 ALSA-2024:9192 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450) * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-devel-3.11.9-7.el9.i686.rpm 1a9ce18df812290b8a92a0c860bef494549c688c49bbfdaf81b092ffc9ad800b python3.11-devel-3.11.9-7.el9.x86_64.rpm 6f7859275731ca7e6e9b1a98704dfa9c154f6a558041afca75eadfbff0450e69 python3.11-3.11.9-7.el9.x86_64.rpm 82849d578ea3997aef4049c3fd2b84fc93b43d5e9f5ab04dd0f01e149affb689 python3.11-tkinter-3.11.9-7.el9.x86_64.rpm 91f19b1bf6ddf545c9f745d2c6e58d8f4cac87161f004642e662905181271b54 python3.11-libs-3.11.9-7.el9.x86_64.rpm 9668a556c92b6a6a1e7dee349babf3f6356556e3fb7c5cb626a41c0eb7e10e79 python3.11-libs-3.11.9-7.el9.i686.rpm df44c6a22049f7a0cafc8a857a8ae571ba144f1653134292eb58287ffe5d8282 ALSA-2024:9193 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12-PyMySQL security update

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython. Security Fix(es): * python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.12-PyMySQL+rsa-1.1.0-3.el9.noarch.rpm 665de27ef3f4760443b3dea2bc9d92b783ae9d3e58aa7f7e915ff7bd024e1b71 python3.12-PyMySQL-1.1.0-3.el9.noarch.rpm ca24e6b68867f6338171b2ec1d569c507a998ffad99a5a9eef972f5e72376e83 ALSA-2024:9194 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-PyMySQL security update

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython. Security Fix(es): * python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-PyMySQL-1.0.2-2.el9.noarch.rpm 2cff937c79794b89d5a4f880c85da6a6d8fb285441e4f198435f73dee61714a5 python3.11-PyMySQL+rsa-1.0.2-2.el9.noarch.rpm 9e2948cd6000d9f0b106ef5a3da0e49117f62d629b5e72b80bcc01f1e3a827ca ALSA-2024:9195 Copyright 2024 AlmaLinux OS 0 1 Moderate

cyrus-imapd security update

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. Security Fix(es): * cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command (CVE-2024-34055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default perl-Cyrus-3.4.8-1.el9.x86_64.rpm 003473b07749ed61eca6498129311ba8cfcec66e553fdfc673dd09e4bf1d6026 cyrus-imapd-utils-3.4.8-1.el9.x86_64.rpm 868b9e6523551bda50fa1724df464846d1f137f1e8e2133be62fe095a55db45f cyrus-imapd-libs-3.4.8-1.el9.x86_64.rpm e0135234a1c0e7a5e9691b67023e51b6e3092d02a40e3c45b213b1fa744e2380 cyrus-imapd-libs-3.4.8-1.el9.i686.rpm e9fcfc9422f35c5a9d60f4448e3008eb4c417c0e4fdf4c8ee6c4640e50e8abc5 cyrus-imapd-3.4.8-1.el9.x86_64.rpm fbaa9e11a91dd8339e4bdb6f2700e15e2f423d9d7740ed04725c822c036916f4 ALSA-2024:9200 Copyright 2024 AlmaLinux OS 0 1 Moderate

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default runc-1.1.13-4.el9.x86_64.rpm fb927d61e27f28c938be04450e5c3ca9b407a87bf70485eef3e383111bd05a35 ALSA-2024:9243 Copyright 2024 AlmaLinux OS 0 1 Moderate

postfix security update

The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS. Security Fix(es): * postfix: SMTP smuggling vulnerability (CVE-2023-51764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default postfix-mysql-3.5.25-1.el9.x86_64.rpm 1403486f39c4dae5d344b457613602580b05de380ffe89eec311b86db389316d postfix-pgsql-3.5.25-1.el9.x86_64.rpm 2f392921c905b6a8f83e36510bb5067cbcdcbacfa64b0d46084271869b404b08 postfix-ldap-3.5.25-1.el9.x86_64.rpm 361ccdb7448b6420036258a896fe60625f99eca3b505bcf6930e9216a599845e postfix-perl-scripts-3.5.25-1.el9.x86_64.rpm 407bd5a8d1d9f7b67c1052262443be59460a6486c0e54a374ff584ed9aa0ccc8 postfix-pcre-3.5.25-1.el9.x86_64.rpm 685b3ee571bb8589cef916d0d44717a26c367c348774a4def43504f0bfbb83e5 postfix-cdb-3.5.25-1.el9.x86_64.rpm 711ec5983203ce5a305066ad1a0f44f8a43674aba415a3e43c90648039c6dcb6 postfix-sqlite-3.5.25-1.el9.x86_64.rpm 79a856189f9621606fca4458cf6a536f939709158c386dc63a2036c73a0da7f5 postfix-lmdb-3.5.25-1.el9.x86_64.rpm f7fae2666f633d0366e58d040ac5c2d94cfb200a89c2c9312b949a6671371b40 postfix-3.5.25-1.el9.x86_64.rpm ff6e538869d8225bef9d1d1acdcb2620292346b57092540e31e051f1b22d440c ALSA-2024:9277 Copyright 2024 AlmaLinux OS 0 1 Moderate

oci-seccomp-bpf-hook security update

OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default oci-seccomp-bpf-hook-1.2.10-2.el9.x86_64.rpm 9df1e89c6697c6174da661786afe99caf8d25ae9eebf844060747ab374b1a512 ALSA-2024:9281 Copyright 2024 AlmaLinux OS 0 1 Moderate

python-jwcrypto security update

The python-jwcrypto package provides Python implementations of the JSON Web Key (JWK), JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Token (JWT) JOSE (JSON Object Signing and Encryption) standards. Security Fix(es): * JWCrypto: denail of service Via specifically crafted JWE (CVE-2023-6681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-jwcrypto-1.5.6-2.el9.noarch.rpm f23f6bea4cb6abd0e3b01dc52f05da93bc9884a575cf57e6cee873c153e90de6 ALSA-2024:9306 Copyright 2024 AlmaLinux OS 0 1 Moderate

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: HTTP response splitting (CVE-2023-38709) * httpd: HTTP Response Splitting in multiple modules (CVE-2024-24795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default httpd-devel-2.4.62-1.el9.x86_64.rpm 05aef110117b43a5b386a61085270e0e0bb6d4d32a5a340926afa891f0abd213 httpd-filesystem-2.4.62-1.el9.noarch.rpm 14b18c5f70ad9bd24012ee959564c824985ebe6d0e5abb47ced6455fa438441e mod_ldap-2.4.62-1.el9.x86_64.rpm 2eeb32e070788394eef1b497d74f475fe166c7278ce167d5ebcdfe0bcb5edce9 mod_ssl-2.4.62-1.el9.x86_64.rpm 2f81d7ca87175c02c3bd09410fd4031c85a329a33868933795f3979b5b96a2c4 httpd-2.4.62-1.el9.x86_64.rpm 408a62625fe4cec688fa2aaac04e35ef8fdb1026741186b0245e43fea0ee8a2b mod_proxy_html-2.4.62-1.el9.x86_64.rpm 483c4daa798ac2b29d4a3a2ffc0c3979b53ea49853aa8aa7c65b50759e57df34 httpd-tools-2.4.62-1.el9.x86_64.rpm 51d2760e366f7c06cd8e285a3a15602b7997c02d559bdc49cb74ba72ed6aef1c httpd-core-2.4.62-1.el9.x86_64.rpm 81924934eb7032822bf955154b4fa9eae32b16e991be5caefd3bd634edae61bb mod_session-2.4.62-1.el9.x86_64.rpm 90a3d6de5088745e7dcf09ba51780124eea81fd417a21b214c713c854e28af7a mod_lua-2.4.62-1.el9.x86_64.rpm afed14e9ae3c032302d7e759a1cca7ceba17cc8278d9a580bfa1f6404d592eb8 httpd-manual-2.4.62-1.el9.noarch.rpm c8c388c7362b7ad90badd642815c9082f038f080d85d1564d1d4dd206949e51f ALSA-2024:9317 Copyright 2024 AlmaLinux OS 0 1 Low

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * NetworkManager: Denial of Service (CVE-2024-6501) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default NetworkManager-config-connectivity-redhat-1.48.10-2.el9_5.alma.1.noarch.rpm 46bec8e9f6a3ac1c043fd041a8a39e69f4ce82cdba85ee88a70756e667bf397b NetworkManager-cloud-setup-1.48.10-2.el9_5.alma.1.x86_64.rpm 4dce3e244dbd14aba26cbafb04c5a03f0e39159ab1ab3b300b859b13f3559b48 NetworkManager-dispatcher-routing-rules-1.48.10-2.el9_5.alma.1.noarch.rpm 6cf0bbb7768f67d58daf7ce6de56051bf60c09e3df67b4b5f89dbb3f9409095b NetworkManager-ovs-1.48.10-2.el9_5.alma.1.x86_64.rpm 7ad73cc54a9e97e8602c206a41bb93830d576040094625dff1f0452904b1d22a NetworkManager-ppp-1.48.10-2.el9_5.alma.1.x86_64.rpm 81aa594a977cb911fab5866965ccd70b47c320c0eeeffb39b3b590fef7584341 ALSA-2024:9325 Copyright 2024 AlmaLinux OS 0 1 Low

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default cockpit-pcp-323.1-1.el9_5.x86_64.rpm 5759987383ea3f0f91db645806115b7cfe1116f1c56988cc7c23307a519cd4ef cockpit-storaged-323.1-1.el9_5.noarch.rpm 5c0b31aa290dae63c6d54434ed4c52453aad980f8cd50858b037b655c8065bd5 cockpit-packagekit-323.1-1.el9_5.noarch.rpm f11f8d5faa1930670c93db8d29bfe7043deab6aa3678c51c44aae49deb2c9f05 ALSA-2024:9331 Copyright 2024 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c (CVE-2024-26458) * krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (CVE-2024-26461) * krb5: Memory leak at /krb5/src/kdc/ndr.c (CVE-2024-26462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default krb5-devel-1.21.1-3.el9.x86_64.rpm 47e17217d4fbce234885651e861733a9d6b96e66976d77afbeae17e8316955c9 krb5-devel-1.21.1-3.el9.i686.rpm fbe847517c3ce0662421503fdd9ffb4fffa93672ee0fd36eb9bc11d5b4e6f718 ALSA-2024:9333 Copyright 2024 AlmaLinux OS 0 1 Low

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511) * openssl: Excessive time spent checking DSA keys and parameters (CVE-2024-4603) * openssl: Use After Free with SSL_free_buffers (CVE-2024-4741) * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default openssl-devel-3.2.2-6.el9_5.x86_64.rpm 04272c72c59991d2f21c7a4d33df601ac57a489887fa7094a018a430aff60dcc openssl-perl-3.2.2-6.el9_5.x86_64.rpm 3f10e024443c609f824c1b7167e9d0a70928c1f8914c7c217589e7a2de28de7e openssl-devel-3.2.2-6.el9_5.i686.rpm e48c8b45ba105857b6553275941ef0dce79a6eb184c3de9c8e2a5cda2e3839bc ALSA-2024:9371 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-devel-3.9.19-8.el9.x86_64.rpm 0d8a29c429fab3d448b73ae135a5332e42b578447e95f0873a3cd965ccafeb3f python3-tkinter-3.9.19-8.el9.x86_64.rpm 4641db4b60a414081669a40be3d2d8702d6e366e54167e740689e50980f10545 python-unversioned-command-3.9.19-8.el9.noarch.rpm 745ac7db1cf590dec59dcf2a3ed0847a481934748a8a3cb51d45b23c03cf2f66 python3-devel-3.9.19-8.el9.i686.rpm f5945c91a64d510bf32d6ac3a85e3bf39a5331419a1f5046242119124d3f8b00 ALSA-2024:9404 Copyright 2024 AlmaLinux OS 0 1 Moderate

libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libgcrypt-devel-1.10.0-11.el9.i686.rpm 3370826ce4c25b4f33c4c9bd66f1b86a0f040ccb4c2acc52ac54c2d189ba0922 libgcrypt-devel-1.10.0-11.el9.x86_64.rpm fca0c1850968c4083fd37998542547842343b5ab4ce4d8bf24f6d8c37d0c4b56 ALSA-2024:9405 Copyright 2024 AlmaLinux OS 0 1 Low

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: heap-based buffer overflow vulnerability (CVE-2021-3903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default vim-enhanced-8.2.2637-21.el9.x86_64.rpm 09d191626e4cf6a566dd850767d6de2bf88884d16ddd81d1185dd1f99689dada vim-X11-8.2.2637-21.el9.x86_64.rpm 19b3b24ec2c187b134f3fc01aa465f11e6981ed33ea3a7a0873a465bdf03bc90 vim-common-8.2.2637-21.el9.x86_64.rpm 2ea0dc56643a3b7f3dd030732e3ea6701bad1550fabca69754dc82684f659dd9 ALSA-2024:9413 Copyright 2024 AlmaLinux OS 0 1 Moderate

bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files. Security Fix(es): * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866) * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596) * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594) * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592) * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589) * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580) * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default bluez-obexd-5.72-2.el9.x86_64.rpm 00535aaa1598a3ff873e586f311eee9641d21517d6e5f5c475e9c89877415bd5 bluez-cups-5.72-2.el9.x86_64.rpm 650473d95b8559c20731f6b770302deefa570ce705ff8731690668e2497f8f03 ALSA-2024:9449 Copyright 2024 AlmaLinux OS 0 1 Important

bubblewrap and flatpak security update

Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default flatpak-libs-1.12.9-3.el9_5.x86_64.rpm 008ed562c082fc9385f6891d6394e35c82f40a7d93b927fc8f9f2093250c500e flatpak-libs-1.12.9-3.el9_5.i686.rpm 08575b4212a629120f781158202929d26387eb5d3eeb4661e8db369ab4701bda flatpak-session-helper-1.12.9-3.el9_5.x86_64.rpm 6332e580f9f25743881307b27569e30de563fed54e228669a2998b802ac32a76 flatpak-1.12.9-3.el9_5.x86_64.rpm b4aa84355f1cfd3e980e36f75b019341f23063083eccebe4d174fac2f5f069c7 flatpak-selinux-1.12.9-3.el9_5.noarch.rpm d9f29fcb044c065b28d63428e0b95b09bce1f9a812c2363d25add0dfca286f4a ALSA-2024:9450 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-libs-3.11.9-7.el9_5.1.x86_64.rpm 120dcff3bdd22c6420842d898603e9f35871fdf14c9afa46840f241d5194edb8 python3.11-libs-3.11.9-7.el9_5.1.i686.rpm 384681434b7dad86c591288858976305196fedc0f990ab57ce8842b31f6606f7 python3.11-tkinter-3.11.9-7.el9_5.1.x86_64.rpm 40c93bbeb941e48d87a3d85e2c5079dd47a3afeef71d2c89b96276edd5537d2f python3.11-3.11.9-7.el9_5.1.x86_64.rpm 7d16476cb124037123bc5f729fba038c9396dddcdf60b53dd92ced2fd62ef587 python3.11-devel-3.11.9-7.el9_5.1.x86_64.rpm d7d72f3a40d0b51c186e18a795b8341af650c1d632367fd06ebebd22dc8c1dd4 python3.11-devel-3.11.9-7.el9_5.1.i686.rpm e334ba0f16092253052691ae4b71703055d679eefbffc429660bd8ad7f0bb24a ALSA-2024:9451 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.12-libs-3.12.5-2.el9_5.1.x86_64.rpm 08fa03df10eba61798b2b918339506a492c87e0f83dd333e5a3c394bb83928ff python3.12-devel-3.12.5-2.el9_5.1.x86_64.rpm 40f287af4abc1adbd6e33fbe5bcf91ad55ca479ffdb9ba9d23adc52e7d07a237 python3.12-libs-3.12.5-2.el9_5.1.i686.rpm 8648ce7ff65407f74be2d5babe41fe16333bd69c16c69c3340b097feef663f4a python3.12-3.12.5-2.el9_5.1.x86_64.rpm 8f62b1fe2c6365f0c8a022ca63f3248221f0791645234070f71bf6c0a0382eb4 python3.12-devel-3.12.5-2.el9_5.1.i686.rpm 94fce1cd8069a8905af1ddff30e062ccd23a567607682a5d8b181f744541f21d python3.12-tkinter-3.12.5-2.el9_5.1.x86_64.rpm fbb82628686e3afde2eb697ee62773e860ac3051a706b3335e00228c83bd0408 ALSA-2024:9452 Copyright 2024 AlmaLinux OS 0 1 Moderate

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770) * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default pcp-pmda-rsyslog-6.2.2-7.el9_5.alma.1.x86_64.rpm 001cc4a1db78d40618c9f5195af66fb0087826e4b1045b0fe88818fa4a9e1eaf pcp-pmda-gfs2-6.2.2-7.el9_5.alma.1.x86_64.rpm 05183e8a72a7e0e3fab515d99a63ecab0127e49afc3dd7c749e3265f935574d9 perl-PCP-LogSummary-6.2.2-7.el9_5.alma.1.x86_64.rpm 09404fb15b1314517e8d23f604bb66a8eb2516e361dae133211d3a97e77fdd8c pcp-pmda-bash-6.2.2-7.el9_5.alma.1.x86_64.rpm 0ce36464e9fff6d3e009f49331fac23f209f0cc4b45635424f5d92b68279529a pcp-pmda-samba-6.2.2-7.el9_5.alma.1.x86_64.rpm 0e3d8ee244528ce9550c8397272f80f3627efa47b0183b2e8aaa60fdf4404e9a pcp-pmda-mounts-6.2.2-7.el9_5.alma.1.x86_64.rpm 0f18e603da4a6ee3fec4b11ef88bf27207e0a078850913f7f8032bb7ec80e75c pcp-pmda-cisco-6.2.2-7.el9_5.alma.1.x86_64.rpm 1039427f65385f100e2ffd49e030012306ddfe43ff3de96f59507de97516b0f1 perl-PCP-MMV-6.2.2-7.el9_5.alma.1.x86_64.rpm 113b141217e5dbb53bb786a330fa6f9499a83608573dcd2ac5f7a14cb33588fd pcp-pmda-postfix-6.2.2-7.el9_5.alma.1.x86_64.rpm 12e61ef797e2a9500febb9e887342850ef7fbcb7e7b67df3e7419370ee4e3a7f pcp-pmda-news-6.2.2-7.el9_5.alma.1.x86_64.rpm 1684a4e0e8751b0f18e8fb57fce43b9a486f0aaf380583ace9160723afef0d49 pcp-pmda-denki-6.2.2-7.el9_5.alma.1.x86_64.rpm 174f3d7e6e58d8a899b96830f07e6740e9a0f0717b8034d3cf715267f6577222 pcp-pmda-nginx-6.2.2-7.el9_5.alma.1.x86_64.rpm 1795cf15ceeb544e637eae8d5c9ecefd6b3f076f5f64bbc1e4c095b932823b03 pcp-pmda-lustre-6.2.2-7.el9_5.alma.1.x86_64.rpm 1a2885644af0fb87b3a82d8ea02034d6961fd593143333f57e0c3bbfe5a962a9 pcp-pmda-sockets-6.2.2-7.el9_5.alma.1.x86_64.rpm 1b205fcd26d19c639f271005663bbf3dc6f70239fb51bdde6a07016ec9b9c16e pcp-pmda-dbping-6.2.2-7.el9_5.alma.1.x86_64.rpm 259ee07d604c1b682175a9933b981216d60b5a7320966a67da8f63af08962477 pcp-pmda-gluster-6.2.2-7.el9_5.alma.1.x86_64.rpm 260bc955b2790cd7868853880efbb19513cefb753382f7ae8cbb6f392726b73e pcp-pmda-netfilter-6.2.2-7.el9_5.alma.1.x86_64.rpm 294b9a0c7fee874229f7b8066f6b7be69067172641b64459f39b47ecb6b28f49 pcp-pmda-unbound-6.2.2-7.el9_5.alma.1.x86_64.rpm 29cec6f74387753306d58c5a71357625b4384246a659ae2e303380e6e87283f0 pcp-pmda-lio-6.2.2-7.el9_5.alma.1.x86_64.rpm 2a1f8dac0124cd12ef95447b1606f5987d80a5d836f44a19c6673cd62f36d279 pcp-pmda-bpf-6.2.2-7.el9_5.alma.1.x86_64.rpm 2c07c57710f250247df9d0b3345e481332df1cd0a4fd2e126a716f5c69a03299 pcp-pmda-zimbra-6.2.2-7.el9_5.alma.1.x86_64.rpm 2db6d5f395d182ac955d0a0b0d6c16b621b222136c2f0f34fd4d63536940a9e0 pcp-pmda-rabbitmq-6.2.2-7.el9_5.alma.1.x86_64.rpm 2dd70ee897248f85cdfeb8f9e0e7e68f65de244c4b8ae46f1b9b85afa1ab9b0f pcp-pmda-perfevent-6.2.2-7.el9_5.alma.1.x86_64.rpm 2dde89d894fa7e30dcb8e2512c07b5f82d969efa27fd43194dc8ec9a38aefa83 pcp-pmda-smart-6.2.2-7.el9_5.alma.1.x86_64.rpm 2e4b6f774a70452d0f9f86d512721cbea9de7f4575ea51191eb09817c9c7c4e0 pcp-pmda-named-6.2.2-7.el9_5.alma.1.x86_64.rpm 2e8646181796ac5ab9906bb0f3105c78e932fdbefe6af863eae399ed9a34028e pcp-import-mrtg2pcp-6.2.2-7.el9_5.alma.1.x86_64.rpm 32cc7109f1f602392e7795ad97f4b71949f49823a43ec5b4c1018299d311bac2 pcp-export-pcp2json-6.2.2-7.el9_5.alma.1.x86_64.rpm 345e6cdff0ad52c6fbca75c064ad0ba2d06adcade7b7e45454846a2036629248 pcp-doc-6.2.2-7.el9_5.alma.1.noarch.rpm 35410b2bdcd4dd180b8e9c06f7a3e257d5f102e12a9dd3c54ab0f3bba44373ea pcp-pmda-libvirt-6.2.2-7.el9_5.alma.1.x86_64.rpm 38a646d077ec96ddc529a69107c936d25877ce41a99c52ad497b7baf6464aa2c pcp-pmda-systemd-6.2.2-7.el9_5.alma.1.x86_64.rpm 39caa805cf84dfe6e602cf855b3015818b4394c8a37855e60f808d84a3149e52 pcp-pmda-netcheck-6.2.2-7.el9_5.alma.1.x86_64.rpm 3a4362ee29db5359598da82b317c02454b1f17f7376c5b6885ec77ca71ae8021 pcp-export-pcp2openmetrics-6.2.2-7.el9_5.alma.1.x86_64.rpm 40bdebc674932375195a79b2e13990a673a808155466f2f2a92724c850862f21 pcp-devel-6.2.2-7.el9_5.alma.1.x86_64.rpm 44fefa5b273f3bb32df65676f05e6a94d3b3e2efee9904a826732eac5f81d951 pcp-pmda-ds389log-6.2.2-7.el9_5.alma.1.x86_64.rpm 4de283ca0724eebe8c238272916a20f3662a38bffd9695b2b4a4bb192de8a81c pcp-pmda-json-6.2.2-7.el9_5.alma.1.x86_64.rpm 4f43fc929b1276ec2e3a11a2d0cdc49c68ceb90416b1e96f7b85320f88ca341e perl-PCP-LogImport-6.2.2-7.el9_5.alma.1.x86_64.rpm 53320165b01a60827aa03fe7f5b2e93caf14898528393387453ca0130229b8bd pcp-zeroconf-6.2.2-7.el9_5.alma.1.x86_64.rpm 53f21f0a5c23c2c89398429f1a69f51e6cf2a51f2ebe61d782290cdbbc55c0fe pcp-pmda-summary-6.2.2-7.el9_5.alma.1.x86_64.rpm 5439f578c1b4f015a6a0ea932d7392878251860cfd91b460e6f0abdfc9e70bdd pcp-export-pcp2xml-6.2.2-7.el9_5.alma.1.x86_64.rpm 55cd4830d1e13b8f3d958f0582a1ee79733f1a6a5566ef6a73b9484fe39703b7 pcp-libs-6.2.2-7.el9_5.alma.1.i686.rpm 59c6dedc36956295b3ce33a3af59397a25052308e30fbe04df7ac70d6ab07c4f pcp-pmda-nvidia-gpu-6.2.2-7.el9_5.alma.1.x86_64.rpm 5e53094e15dcc4c971dd218f5bf8667c9ead637fdee9832c5016d0d6ad82f9eb pcp-pmda-apache-6.2.2-7.el9_5.alma.1.x86_64.rpm 5fc8d400ef521bea2e6e3aec33c228f233dfc732e56091fdd9635812830ce701 pcp-pmda-bonding-6.2.2-7.el9_5.alma.1.x86_64.rpm 6089961305af12cf9706feb4b3f455686912ced617f5d3d23e24fa52e6959fe8 pcp-pmda-dm-6.2.2-7.el9_5.alma.1.x86_64.rpm 60d49065caed7ec405bb452e8b72799af664a8def40231eadeb02c5a3fcf5bce pcp-libs-devel-6.2.2-7.el9_5.alma.1.x86_64.rpm 69347ee6460a1a56228ce6d93bcc2653f352ed1dfaed5d8f6d1773daffb5acc8 pcp-pmda-bcc-6.2.2-7.el9_5.alma.1.x86_64.rpm 6b4ffe0d8ee89b41f1dd9953e74af52f9a18f9191f6fef25cd3ff5fc1ea0db56 pcp-pmda-slurm-6.2.2-7.el9_5.alma.1.x86_64.rpm 6b986598df0413086d31bd118e834216c3e8c8c75e686d0ef60015e5e607f6bc pcp-selinux-6.2.2-7.el9_5.alma.1.x86_64.rpm 6ecfed9263a95babb7f3cacf9bcf222382be7dc7ac7ccce8ab80aa13225de947 pcp-pmda-hacluster-6.2.2-7.el9_5.alma.1.x86_64.rpm 6f39f292a5e6486ef6f4c30dcefc49bf49720ae8515bbbc1d5013c530258e96e pcp-pmda-sendmail-6.2.2-7.el9_5.alma.1.x86_64.rpm 7250f9f228cd8695eb1026fed321bb2262e17ea4b285d6c100100ae17c6708c6 pcp-pmda-memcache-6.2.2-7.el9_5.alma.1.x86_64.rpm 747b8ca7920326e13a2bd2ebdeab3d3a1ea04894a221fd82fb849e0abc1a1397 pcp-pmda-gpsd-6.2.2-7.el9_5.alma.1.x86_64.rpm 768da2e83ba751837986ba65e3e8524f54323f14b52bf025b185c8e1b9c10a7c pcp-pmda-logger-6.2.2-7.el9_5.alma.1.x86_64.rpm 77ff6ee94af61569533860c23522c2795ffa186ede9bc7775024a2697c1894bb pcp-pmda-mssql-6.2.2-7.el9_5.alma.1.x86_64.rpm 7905ff709370b847f937a564e42df76a9d6c23d385fa7655b7332fd5fa79d702 pcp-pmda-gpfs-6.2.2-7.el9_5.alma.1.x86_64.rpm 79a724ac00f68181f55d6019badce0457e27086f8cff946d2779180e200a45c0 pcp-system-tools-6.2.2-7.el9_5.alma.1.x86_64.rpm 7b2a03f26c74e3d4346231ea179896624801c6b2e82c613a9fac6337d6e3c004 pcp-export-pcp2elasticsearch-6.2.2-7.el9_5.alma.1.x86_64.rpm 7d50c617e8f25b09ce1ef2bd53fdb625d1a07863c9a8ea02879fcc716eaa1b8a pcp-import-iostat2pcp-6.2.2-7.el9_5.alma.1.x86_64.rpm 80ad3a84b6c23e665283671c65e2abd21f6e69955ff25d3a0d62aff2d474eaea pcp-pmda-openvswitch-6.2.2-7.el9_5.alma.1.x86_64.rpm 87ecf97df758f5ecfd38b28b31e6673f135b393f95b4bc8c45cec819698f2ea7 pcp-export-pcp2zabbix-6.2.2-7.el9_5.alma.1.x86_64.rpm 896d70b0b1aae4d93d7ce2c9d25ef858217e65ac0873e38e0182f262dc14171d pcp-pmda-openmetrics-6.2.2-7.el9_5.alma.1.x86_64.rpm 8f9579cf58ac1c19de71c9d8fe5921aedaa57123551afae62597905bea94be09 perl-PCP-PMDA-6.2.2-7.el9_5.alma.1.x86_64.rpm 903be2c5f4cf30fec0863246b34702a6930a2dc15bc4da2ce481f673440a6562 pcp-pmda-mic-6.2.2-7.el9_5.alma.1.x86_64.rpm 910352848646724ba70c7951dab27c1050d5b55053e44ea1a6fd6a9ad73841e5 pcp-pmda-snmp-6.2.2-7.el9_5.alma.1.x86_64.rpm 95391dc84365d6c9ef55bc80f9885656de07cd666a67d33031275f15b778e195 pcp-import-ganglia2pcp-6.2.2-7.el9_5.alma.1.x86_64.rpm 9ed05df2ce4ddf183f6bcbbdc9a43986e321b2198d1e6ecbff9acbbae283854f pcp-pmda-mongodb-6.2.2-7.el9_5.alma.1.x86_64.rpm a07ba789d5d50ecdf8e1eaa9bde5cf54d06b3e9f6a8add0af54b8e7c3d585d4f pcp-6.2.2-7.el9_5.alma.1.x86_64.rpm a2ec228bb72ffd2e44d31726ec23895149cd3cf9b1a5c4842360443b3f0da1eb pcp-testsuite-6.2.2-7.el9_5.alma.1.x86_64.rpm a3d4cc3ed0446f78907b82269e236895eaac0a0c1915ed4fc474e17a4e045def pcp-export-zabbix-agent-6.2.2-7.el9_5.alma.1.x86_64.rpm a7321762691820124a07fff56981c9acfd360ea0296e0b763fb4904cbda4a457 pcp-pmda-redis-6.2.2-7.el9_5.alma.1.x86_64.rpm a7b6848fcf10fc654badb8e8afdd6018a7624b0d92c44d683b2da42ae2274db6 pcp-libs-6.2.2-7.el9_5.alma.1.x86_64.rpm a914f5d6593a847c2fc40a01e47e7f475bde677c2a80f38e7f9812665c8bbce7 pcp-export-pcp2graphite-6.2.2-7.el9_5.alma.1.x86_64.rpm aa80b6fba61eca22b5174ee0541b91285102804e7be6e20e1e85a106fbf0688e pcp-pmda-uwsgi-6.2.2-7.el9_5.alma.1.x86_64.rpm acfb4ff107d5be5c93a80c0e7eef10ba1abb214a7d47953a9c3367c87d7d1391 pcp-import-collectl2pcp-6.2.2-7.el9_5.alma.1.x86_64.rpm b1080b49383af29c05bdf31ce254b3ce427c9574139ec7f4951c3c2ce9a3681f pcp-pmda-docker-6.2.2-7.el9_5.alma.1.x86_64.rpm b53f8a26be4163f2bd3b6ec6545e87bfb6edef539d883c7d22d5217283e3d8ae pcp-devel-6.2.2-7.el9_5.alma.1.i686.rpm b611df7af290f4b3412c1ad85182dd373b162c60df36229e45f340b14925869c pcp-pmda-mysql-6.2.2-7.el9_5.alma.1.x86_64.rpm b8233c5925a1940f897d5ebca59f8ab57acaa843f29b74f61d9709f7dcd7a08f pcp-pmda-lustrecomm-6.2.2-7.el9_5.alma.1.x86_64.rpm bb9cdc0185110ecfa04be963878973af12ca745387ceef86987490195eb7f2fe pcp-pmda-farm-6.2.2-7.el9_5.alma.1.x86_64.rpm be20ac51fc1aeba1081ca443dccf98a5cd7fdfa02960a769a686ff1d5f1bad99 pcp-conf-6.2.2-7.el9_5.alma.1.x86_64.rpm beae9a1aa5c9afc722a25e56fb55476e363e205ae81fb34f912adca297054051 pcp-pmda-postgresql-6.2.2-7.el9_5.alma.1.x86_64.rpm bfa0bc4c4f22e05cbd818e610ffb582c8e69f9f94f25b50c646309d67b8e40b0 pcp-pmda-ds389-6.2.2-7.el9_5.alma.1.x86_64.rpm c1086233c96705535d2733d733e7bae2871ef9ce23037569a0030516c4f537f4 pcp-pmda-bind2-6.2.2-7.el9_5.alma.1.x86_64.rpm c63a39f8c4ef4fa70ee6d8cc59832cb2474549503b0fa491114eb92f8d3c8754 pcp-testsuite-6.2.2-7.el9_5.alma.1.i686.rpm c9abbd20b25da885b4b4c713a1785beeb2b4bf0ac05303a823e9f41ee4c59265 pcp-geolocate-6.2.2-7.el9_5.alma.1.x86_64.rpm c9feb5be4c8583684fc9504b8534616b67967472ddf363e9a6495e17b17e647d pcp-pmda-trace-6.2.2-7.el9_5.alma.1.x86_64.rpm ca03cf7ef35698c2559c2a212af9e31137e6b54cd61de559c89ea85d1e0403cd pcp-pmda-bpftrace-6.2.2-7.el9_5.alma.1.x86_64.rpm ce526375b4416dc705e7f7f4428d265daef6733e23631240fc4b14052eb72afa pcp-pmda-roomtemp-6.2.2-7.el9_5.alma.1.x86_64.rpm d010d0bce0419fc1314b617af3113185a3e04d86cd74fdbc263362fd3a6fd8a1 pcp-pmda-lmsensors-6.2.2-7.el9_5.alma.1.x86_64.rpm d3d1d28c148dde16aaf0d627d253e4b0b866df609f6abb88e7e09f1576d2ebf1 pcp-pmda-oracle-6.2.2-7.el9_5.alma.1.x86_64.rpm d6d5d3c294f8ac4eaa220241c2214d148396cb038d594732aa52567c8bfe8588 pcp-pmda-shping-6.2.2-7.el9_5.alma.1.x86_64.rpm d91bed8835eb0351915c56dde5709e6269f50b9c551459ae5b548127886c1c0c pcp-gui-6.2.2-7.el9_5.alma.1.x86_64.rpm d9240b419b362cd37611a7ab88c5d01a53c51e2534d799ff7da59dd826de26d7 pcp-pmda-infiniband-6.2.2-7.el9_5.alma.1.x86_64.rpm d97a17215ed6b99f99be5b40a57c8e9ca223780540f09586b39d234686b9336d pcp-pmda-resctrl-6.2.2-7.el9_5.alma.1.x86_64.rpm da98c4e52999d2c0cb9435c028d5f60daa13184de859e3ea1b5932a8ee3313db pcp-pmda-activemq-6.2.2-7.el9_5.alma.1.x86_64.rpm e16aaeb5ff3ac9013ea4ff8573795a71f6308a17a5e994556a089f9f3600c8b3 pcp-pmda-mailq-6.2.2-7.el9_5.alma.1.x86_64.rpm e1ace1694306612fb0a32533b3c55d4575a3b8c51620f665e71e2e0e584a64df pcp-export-pcp2influxdb-6.2.2-7.el9_5.alma.1.x86_64.rpm e1cc875f7bb9b3c820f4abe6aed5fab747df4b574c22fd288cb53789d6c9e61f pcp-pmda-podman-6.2.2-7.el9_5.alma.1.x86_64.rpm e1d5bfee933f06c489ce8b59e8ff305ef24071fce06df89377d3a8c1309d8ca4 pcp-export-pcp2spark-6.2.2-7.el9_5.alma.1.x86_64.rpm e2663919e325e160dab0243a0030ca85013c9120cb20faf83dded6685ec2a071 pcp-pmda-elasticsearch-6.2.2-7.el9_5.alma.1.x86_64.rpm e3817956b1d8ad023f9eccb16c70cd9556ea3d5933a53c9fed0f33dc9f74efe9 pcp-pmda-haproxy-6.2.2-7.el9_5.alma.1.x86_64.rpm e3882c0016bae1052073b99f43e58ba260a6d0885a9b6195605d5389037693d8 python3-pcp-6.2.2-7.el9_5.alma.1.x86_64.rpm e4861bd0dd274e5a67731d3974deed182fc3377346e49938132c27e171fc4852 pcp-pmda-cifs-6.2.2-7.el9_5.alma.1.x86_64.rpm e7e53262d98f0fffdc2fddfcd3fdbdbc16395f75113a62cf63aed695aa4ebce4 pcp-libs-devel-6.2.2-7.el9_5.alma.1.i686.rpm ea35715e155d040f552346e273e66e35b72aecb1c756c81fbea3b279901b4acd pcp-pmda-pdns-6.2.2-7.el9_5.alma.1.x86_64.rpm ea57cc901e1beb49d3190fd40c8cfebdcfddcdb4eacc43968abe562422816c77 pcp-pmda-weblog-6.2.2-7.el9_5.alma.1.x86_64.rpm ec881f544623ba7983b9d2341f2e4135be99dd15650ce2a97051f1b187df9cb3 pcp-pmda-statsd-6.2.2-7.el9_5.alma.1.x86_64.rpm ed79206b8c7c3f3903881074bd8a5dd6f7211676d96f6c091647441c498712a3 pcp-import-sar2pcp-6.2.2-7.el9_5.alma.1.x86_64.rpm f1db717eff1c019d296331cbf964decea1fc3c37ce778858c00cf35b01aa95fb pcp-pmda-zswap-6.2.2-7.el9_5.alma.1.x86_64.rpm f9ad5873460764c7f7cb1fca4fd398cdc4d453c50b693d8f3b1013556d41b45d pcp-pmda-nfsclient-6.2.2-7.el9_5.alma.1.x86_64.rpm fe7b6ffdf314117e431796e81a46a1f3e08e30699ce237ca8c42fc14509fe079 ALSA-2024:9454 Copyright 2024 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default podman-remote-5.2.2-9.el9_5.x86_64.rpm 03f65649135c6f711907cbddc4934c98a21ec3c56511949f505410d4151a31ed podman-plugins-5.2.2-9.el9_5.x86_64.rpm 25c43237e7946973c2a9747a932d0061eb51245bb2d3d40b255fc5fc74e7b551 podman-docker-5.2.2-9.el9_5.noarch.rpm 3cf500c963e97a37b41255a5f3b5242353a74dfcfb4df4438197b74a571d7958 podman-tests-5.2.2-9.el9_5.x86_64.rpm cb578e1d4dd6455531e9d0d2d0bb8a6577cc8f74d47a6862a30f70cac76924f3 podman-5.2.2-9.el9_5.x86_64.rpm e1239794a7f3c56d6787d80a2ca3ceae3d89f16362022fc11e3b8eaa64c445d2 ALSA-2024:9456 Copyright 2024 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default osbuild-composer-core-118-2.el9_5.alma.1.x86_64.rpm 27ef88d6b198347ee23e533c7a97ef5edaa9d294fa270c1426c2df75f9fe1a84 osbuild-composer-118-2.el9_5.alma.1.x86_64.rpm 440611e469fa29d96300733bb12c701595fb294a725690ffc5727544f538a9d1 osbuild-composer-worker-118-2.el9_5.alma.1.x86_64.rpm b793a0678125ec39d653d8895b4f4f1a0acc707d575d463ea7d32d11c83be0b7 ALSA-2024:9457 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.12-urllib3 security update

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: • Thread safety. • Connection pooling. • Client-side SSL/TLS verification. • File uploads with multipart encoding. • Helpers for retrying requests and dealing with HTTP redirects. • Support for gzip, deflate, brotli, and zstd encoding. • Proxy support for HTTP and SOCKS. • 100% test coverage. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.12-urllib3-1.26.18-2.el9_5.1.noarch.rpm 1683c45e96bf409b94bf40648c7d7beb9fc83b5e352fe6e78f2dd37945d0b01e ALSA-2024:9458 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.11-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3.11-urllib3-1.26.12-2.el9_5.1.noarch.rpm 736233d036a75f950e9daa6004cb2365ba9f07d946ac7625f22d8891afc7c36f ALSA-2024:9459 Copyright 2024 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default buildah-1.37.5-1.el9_5.x86_64.rpm 770bfc0f3d72452743e0769eae42a48253d14a28e2e6b56e34a2c2b321977c8b buildah-tests-1.37.5-1.el9_5.x86_64.rpm e66ab223dbff823a51cfd26cd9cd56fe2d4af7eab1ad9ffdf860797874e7ecd3 ALSA-2024:9468 Copyright 2024 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default python3-devel-3.9.19-8.el9_5.1.x86_64.rpm 1a181107403814d98d583821b4faa8860d7b70cea4fcc4837308feac291afc47 python-unversioned-command-3.9.19-8.el9_5.1.noarch.rpm cc0768d17cf6d3430eee61efe98caaea21eeb3d6fd12b0e61ead7d66854acaea python3-tkinter-3.9.19-8.el9_5.1.x86_64.rpm d83d3d82ef3f66be5337617b9ddb3f71b3609c2645e69d1c96db8083b0d8d9e1 python3-devel-3.9.19-8.el9_5.1.i686.rpm faf14a13f3fbb2b097faabe96a9a90fc6cacd2bbacbcc2b30e5b196138dc8a6c ALSA-2024:9470 Copyright 2024 AlmaLinux OS 0 1 Low

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: libppd: remote command injection via attacker controlled data in PPD file () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default cups-devel-2.3.3op2-31.el9_5.x86_64.rpm 126289d35e32dead38a3af7cee4744c0625b1518884dca9ce71b23ea67d30c74 cups-lpd-2.3.3op2-31.el9_5.x86_64.rpm 1d30f26c075b71644282cdd3b4d76ec20f06f8b00eb22737fbb61a34cfce7379 cups-2.3.3op2-31.el9_5.x86_64.rpm 80420a460fb086735c54dfdfebc284768d1278a775c5341cc49524af0f9fac1e cups-printerapp-2.3.3op2-31.el9_5.x86_64.rpm 9426f570618d3996f2e52d3a97fb945edca6c145536c6fbb3f52eb571c37c5e5 cups-devel-2.3.3op2-31.el9_5.i686.rpm a1b871c98d0bac1f82f6c20740bc85f7897aa44612c1f5553d02695e9bc02c34 cups-client-2.3.3op2-31.el9_5.x86_64.rpm a5154cb73ce74fc797ea4ab101a5ddbdc4361d697c24b06289b363055bfbc064 cups-filesystem-2.3.3op2-31.el9_5.noarch.rpm a7b66edc195788d9dff4276a2d48d507b51a1afbe19511fd41ef9a8f3e0dc470 cups-ipptool-2.3.3op2-31.el9_5.x86_64.rpm abdc9f1a87249488f15157144eacbe1e7e9446c1c2ba2cc30acf5e9f496b96de ALSA-2024:9472 Copyright 2024 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default grafana-pcp-5.1.1-9.el9_5.x86_64.rpm 2e7fc9e805be501ecc4aa9878b95e5e1d6d6682d7a5fc943e6f331520412c6fc ALSA-2024:9473 Copyright 2024 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default grafana-selinux-10.2.6-7.el9_5.x86_64.rpm 4983e17da92e39f35cd5652bd8682687ffe887141ae1bfa703658b21ce7dd97b grafana-10.2.6-7.el9_5.x86_64.rpm 9afa5ab669325b79c836354b2ac99cd6687bb2c11cc67586fb339651ee1742b8 ALSA-2024:9474 Copyright 2024 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * freeradius: forgery attack (CVE-2024-3596) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default krb5-devel-1.21.1-4.el9_5.i686.rpm 5c75c023a7773394784da3be75e728f90979db0acfdbdb21a49590e5145de250 krb5-devel-1.21.1-4.el9_5.x86_64.rpm 72b1e25b39d7f034f0715182b15b1890d080f5251c11fa57824f78c011d8e4ad ALSA-2024:9541 Copyright 2024 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default expat-devel-2.5.0-3.el9_5.1.x86_64.rpm 1c7e262215cce657436a9b3ba47d088202cf2790bdbcd7e631caed6fdefe3eff expat-devel-2.5.0-3.el9_5.1.i686.rpm 32e4aa7821533fbd5288c51e0122f8f8546501adc00c0b0b4ade247353e2e927 ALSA-2024:9543 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.100 and .NET Runtime 9.0.1.0. Security Fix(es): * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498) * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498) * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default dotnet-targeting-pack-9.0-9.0.0-1.el9_5.x86_64.rpm 123b739790867a9bc79482bfbe40003770179faf45eeb944afe93a1d54be7ffc dotnet-host-9.0.0-1.el9_5.x86_64.rpm 1a1e24063015564395f3a40d99cbecfba08a389f70bd0c5dc5e36d7ea85c0eab aspnetcore-targeting-pack-9.0-9.0.0-1.el9_5.x86_64.rpm 1ce21afefa28bba967534adb4a0852244affe59aa256c5de7f60972d8cffdf7d netstandard-targeting-pack-2.1-9.0.100-1.el9_5.x86_64.rpm 22985cb059eb281001b5e1d35a124859a0c45fea09fab5d23597d1e4790ff5ab dotnet-runtime-9.0-9.0.0-1.el9_5.x86_64.rpm 2376384329eb6456d9b6f7f2a03556c42433a13771909a9508545a29a76507ae dotnet-sdk-aot-9.0-9.0.100-1.el9_5.x86_64.rpm 5d9e838e41f080f1c5f868823fbc4122b1e2c31da6e34daee32ed8e38894529c dotnet-templates-9.0-9.0.100-1.el9_5.x86_64.rpm 6bfa970913ac3d70d766f5cf8cb2404e1030aa5871eb7ec21adde940ca7b014c dotnet-hostfxr-9.0-9.0.0-1.el9_5.x86_64.rpm 93d7bee375fbc27d24626bb032efe479c70d9c2edb4b07c8975635e2132f17bd dotnet-sdk-dbg-9.0-9.0.100-1.el9_5.x86_64.rpm a90066e0069887912e475f33c36f6cac98f9be8bf19fceed6db9509a87ea38d1 dotnet-apphost-pack-9.0-9.0.0-1.el9_5.x86_64.rpm b6fa296f7f6ca24e53f7fcf283d1166c540b98e63597d298fce8861d7e24350d aspnetcore-runtime-dbg-9.0-9.0.0-1.el9_5.x86_64.rpm b9edf47b22c11b8aadc2d0243ff6d4af85b769116afb8e4e56ab338ff7380464 aspnetcore-runtime-9.0-9.0.0-1.el9_5.x86_64.rpm cddf5a08ae4e210ff136597b63150a8da212a620eae3fa8f9077959b4ee60bcc dotnet-sdk-9.0-9.0.100-1.el9_5.x86_64.rpm f962808700970caca5a0f9c5c83f5346053c57d711cfbf426e8b2e02ca045c2b dotnet-runtime-dbg-9.0-9.0.0-1.el9_5.x86_64.rpm fa5512c0819b934761423a5eea445764b92b97af57d5127e867d5c90dd4664e0 ALSA-2024:9548 Copyright 2024 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default openexr-libs-3.1.1-2.el9_5.1.i686.rpm 35b7189e3e2cbac074bf5df3bd9be585d73dfa433a0fb8550866a3d3855f9024 openexr-3.1.1-2.el9_5.1.x86_64.rpm d12d3960291df7971cccc64141d2c8570ec6e09641124fff0b23f9eda482971a openexr-libs-3.1.1-2.el9_5.1.x86_64.rpm d9767dfa81dafd6c786c4a1757786c85afa63be7942f080700a78f7fcb40023b ALSA-2024:9552 Copyright 2024 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680) * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464) * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461) * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458) * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459) * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467) * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465) * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466) * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463) * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462) * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default thunderbird-128.4.0-1.el9_5.alma.1.x86_64.rpm dee9c21608c2201c2c0b4d1b08d92367b77b5e7797266f3e03f2e8f40b90b15e ALSA-2024:9553 Copyright 2024 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44244) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2024-44296) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default webkit2gtk3-jsc-2.46.3-1.el9_5.x86_64.rpm 205d559935e62f45fea05a512abd2c13b475a057495aafb79a48ed572751ea64 webkit2gtk3-devel-2.46.3-1.el9_5.i686.rpm 2382a4d570f56c3430917e5b452211199d111d7b03908f29bd113ed8aedae033 webkit2gtk3-jsc-2.46.3-1.el9_5.i686.rpm 4da0198cdb70102864ac0f0b35d87bff2133f4b8589bfa3e03500c848bb0ed90 webkit2gtk3-2.46.3-1.el9_5.x86_64.rpm 6074f2f4b3f6b526d94961fc6e3366ba2eae304812ad125646fe70dcfddca6f7 webkit2gtk3-jsc-devel-2.46.3-1.el9_5.i686.rpm 6e82eb7125613d2abbcebdcc25e0b5e8d6caa41a3f5a125f57c3ce131af14016 webkit2gtk3-devel-2.46.3-1.el9_5.x86_64.rpm bc79f73a733a5f1a8c4b8e06a6c457aeebdf062b660762c43c8e9bca81b747aa webkit2gtk3-2.46.3-1.el9_5.i686.rpm f615a6f4f039693a46ed68dfdc6582f5b4cbebae69b10fb704f3fc3ab97cc9d2 webkit2gtk3-jsc-devel-2.46.3-1.el9_5.x86_64.rpm fb1de4d4e950840b8690b7518894f059d5245ef104e5de411f396ccbd07b208c ALSA-2024:9554 Copyright 2024 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680) * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464) * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461) * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458) * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459) * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467) * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465) * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466) * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463) * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462) * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default firefox-128.4.0-1.el9_5.x86_64.rpm 46b39c733e6e88040a024a5b4100c59fcb46b8f3e681e3f20ef51b050ce150f4 firefox-x11-128.4.0-1.el9_5.x86_64.rpm 600260d0772c9116202c135f93a5ec41847a8ed25e8efed985f94b026dd0adb3 ALSA-2024:9555 Copyright 2024 AlmaLinux OS 0 1 Important

NetworkManager-libreswan security update

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fix(es): * NetworkManager-libreswan: Local privilege escalation via leftupdown (CVE-2024-9050) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default NetworkManager-libreswan-gnome-1.2.22-4.el9_5.x86_64.rpm 82258ccd8a497ad0e70711ceabe45c3ef1047ca75cb3d6179f219a5e10f2a897 NetworkManager-libreswan-1.2.22-4.el9_5.x86_64.rpm ba6e7449a503a9211acd673f094ad166525dc6462f39023f3405db798b6ef7a2 ALSA-2024:9559 Copyright 2024 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: infinite loop while reading websocket data (CVE-2024-52532) * libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libsoup-2.72.0-8.el9_5.2.x86_64.rpm 58d1e93507cad73bb15742e2993f3a6b3ea75cab9958db72f83fa596859cdb53 libsoup-devel-2.72.0-8.el9_5.2.i686.rpm 58d7a6f95e783e5fe6237ec3ea63c35d69c23b8c5c5bf016911294abe1fdde4a libsoup-devel-2.72.0-8.el9_5.2.x86_64.rpm aa56abae6e95d8991a9fdc379061a71022507ee24720835828aa4e1e08a8b46a libsoup-2.72.0-8.el9_5.2.i686.rpm d14bccb99694adb8bc67a8f3b6b0dc70b977fe3bb9ac4846ce4e44a45e4d90a7 ALSA-2024:9605 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283) * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824) * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default kernel-debug-devel-matched-5.14.0-503.14.1.el9_5.x86_64.rpm 5fcfcaf9b095c3398b9968224dc0c5252071f8c09eb08542a3a362eacc83318d kernel-doc-5.14.0-503.14.1.el9_5.noarch.rpm 78c50ce63615187ec9c871c0f907520dcf8ebe2db10af6ecbec54b81e4d16492 rv-5.14.0-503.14.1.el9_5.x86_64.rpm 7d6e5495ccd5f86c94a960139b0a4ed0c7c99c46a7ea4155200f4f19f8457cb3 kernel-devel-matched-5.14.0-503.14.1.el9_5.x86_64.rpm 87fab82a4e97549b18aacae957355bbd4e8f20d79ac253cc0371367b7107be2c kernel-debug-devel-5.14.0-503.14.1.el9_5.x86_64.rpm c551c31fc1802e6f30ac904a6915204c59e4a6053a5cb578bfaa1d16a8999bd3 perf-5.14.0-503.14.1.el9_5.x86_64.rpm c59178cb6719b0fce43c49c56ab0dee68d5726727989d6dc179ad8bc55b5a6fa rtla-5.14.0-503.14.1.el9_5.x86_64.rpm e5ad45e3f6bbfdff9e10922b96fb2a7f72c0aa12ba8b121f1ab1b4377bb88aca kernel-devel-5.14.0-503.14.1.el9_5.x86_64.rpm f70a498fd62c96ece780694ee0fc540637941ef119373d95fbe658d25e95e1fa kernel-headers-5.14.0-503.14.1.el9_5.x86_64.rpm f9a077eda9789ed17d6e54fabb3e7c372d308afa11ceb3e8e772888d7be1368d ALSA-2024:9625 Copyright 2024 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service processing ESI response content (CVE-2024-45802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default squid-5.5-14.el9_5.3.x86_64.rpm 254b28fdc9d17283822b81a53e26001cd3742f4ab50c9b1b90367cf22c8963fd ALSA-2024:9827 Copyright 2024 AlmaLinux OS 0 1 Moderate

libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_4_default libvpx-1.9.0-8.el9_5.x86_64.rpm 68fd8fcbd0c542a76a654fad4f6e67488bda7173ce13d31adbe039be909aedca libvpx-1.9.0-8.el9_5.i686.rpm 6c5d21f52351c4197dabf94571d9937f6e1ec3725b3929544282f3be85b868ed ALSA-2025:0059 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713) * kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208) * kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252) * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default kernel-debug-devel-5.14.0-503.21.1.el9_5.x86_64.rpm 11cff83e8b10dd16454dbcc325a26feaa808ea944c6ca3dac6ecb22e6c1a891c kernel-devel-matched-5.14.0-503.21.1.el9_5.x86_64.rpm 43bac5783cf204730792f859ee653b5ed9cf2698113bb065ce7f8a4953cd3198 kernel-debug-devel-matched-5.14.0-503.21.1.el9_5.x86_64.rpm 812c02905a3866a6814e4f56bf20eddb0869e0c4310e6d6a72ae249b176e3c5d kernel-devel-5.14.0-503.21.1.el9_5.x86_64.rpm 9917328aeb07991711f835977dccc4241f9364cee3b722eda2d20765043e2007 kernel-doc-5.14.0-503.21.1.el9_5.noarch.rpm c539e750db6c5cbd72dfda73ca9ae3b584bdf57ab181756f7d2a84d6d0467763 kernel-headers-5.14.0-503.21.1.el9_5.x86_64.rpm d00631b9393438f8c40facdf68edc3358fd4fc6431134b9acc6c4b3eca24c21b rtla-5.14.0-503.21.1.el9_5.x86_64.rpm d8b50b8128c39dba76580f5794c0e6b104bfac8bebff11a23291d13266924ca9 perf-5.14.0-503.21.1.el9_5.x86_64.rpm df7cd445736a5589688adc0dbe1c61cf8f3a75db65276c472fbf9dd1b23c0221 rv-5.14.0-503.21.1.el9_5.x86_64.rpm f460eec65d837509112a23bf4ac4ed0e399204d74b2ad75ccf07311305fb06ac ALSA-2025:0080 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Use-after-free when breaking lines in text (CVE-2025-0238) * firefox: Memory corruption when using JavaScript Text Segmentation (CVE-2025-0241) * firefox: Alt-Svc ALPN validation failure when redirected (CVE-2025-0239) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242) * firefox: WebChannel APIs susceptible to confused deputy attack (CVE-2025-0237) * firefox: Compartment mismatch when parsing JavaScript JSON module (CVE-2025-0240) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default firefox-x11-128.6.0-1.el9_5.x86_64.rpm 28e8758c4e24ceff670987e7227227330d9812f582dd89851dd960f29d30884e firefox-128.6.0-1.el9_5.x86_64.rpm 4313af7ade4e257cab35768639faf55e2b5b65692eac95c6322bf1f7a6da0b1d ALSA-2025:0146 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54479) * webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54502) * webkit: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54505) * webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54508) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default webkit2gtk3-jsc-devel-2.46.5-1.el9_5.x86_64.rpm 092dcbaa06dc6e33a1b4cc400f1a9153acdaa13fb90e48a9033c55a4683a01a6 webkit2gtk3-2.46.5-1.el9_5.x86_64.rpm 3676db59c96abdda05965c7a563f28ba97aacf2e4ab75377b0112639542549d9 webkit2gtk3-jsc-devel-2.46.5-1.el9_5.i686.rpm 731b8456fbb3e23476f8bc03c604c548def0c66bf3536a82f744f6cccf8107ee webkit2gtk3-jsc-2.46.5-1.el9_5.i686.rpm b096c723c9d5d99c5f6a44b1bf144310109db7fea047a91d5178a818e76f6817 webkit2gtk3-devel-2.46.5-1.el9_5.x86_64.rpm cae43f01ea1dd2d8b3cf241f7c0b1f5869bf7ffefb73acf29034b05b91d48d38 webkit2gtk3-jsc-2.46.5-1.el9_5.x86_64.rpm cdd13eda59dec598168d4d0fd306514e7ebbe5b10f8ad1229a70bad36471e3c6 webkit2gtk3-devel-2.46.5-1.el9_5.i686.rpm d58b1f1f314086d86fdcbb0cf3bccc65e6bd28ce3b5760c5476e5ff215a528ae webkit2gtk3-2.46.5-1.el9_5.i686.rpm f336a0f23fa612bc10435a95b290ff090dba6d51a0c1c7455415db43b2eacb0b ALSA-2025:0147 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default thunderbird-128.6.0-3.el9_5.alma.1.x86_64.rpm 7854579e54c442a36f101cf88f42e63edde7ae48650d20f50ee9d859209c7cb2 ALSA-2025:0161 Copyright 2025 AlmaLinux OS 0 1 Important

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default iperf3-3.9-13.el9_5.1.i686.rpm 156158f097af6a8ac309beaaee6e55390bd6c1ca8e01292ebbbe95ca7bb02382 iperf3-3.9-13.el9_5.1.x86_64.rpm a9a56462af4485eeb00abf4c6045817b85154ac07694749d793c09cd93b5eb86 ALSA-2025:0210 Copyright 2025 AlmaLinux OS 0 1 Important

dpdk security update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix(es): * dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library (CVE-2024-11614) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default dpdk-tools-23.11-2.el9_5.x86_64.rpm 3318de927a85997b9102c453fa8bfd4a86fa63653e1e8ade573466005c8e439c dpdk-23.11-2.el9_5.x86_64.rpm ad5f3f0dc61c6787abf94e838c52fdd9fe64204b7d090c5cc1e8ca2f47d8dda6 dpdk-doc-23.11-2.el9_5.noarch.rpm eb0892025d08d1aeab2b137f2cbd9ae5c0ea1702eb2762ed8c2ae92d59177d7f dpdk-devel-23.11-2.el9_5.x86_64.rpm fe17b219b174fc4adbbbc158562ea66ce5329e4c83f5d489996b98792c881d48 ALSA-2025:0308 Copyright 2025 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * fence-agents: Jinja has a sandbox breakout through indirect reference to format method [almalinux-9.5.z] (CVE-2024-56326) * fence-agents: Jinja has a sandbox breakout through malicious filenames [almalinux-9.5.z] (CVE-2024-56201) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default fence-virtd-4.10.0-76.el9_5.4.alma.1.x86_64.rpm 07bfb39a0c03ec9be2d87cc3defdb1eedd94e51011369979a4bf50e1bab02c9f fence-agents-kubevirt-4.10.0-76.el9_5.4.alma.1.x86_64.rpm 0984dd4b605c93b29ea3c2a30269842539064b12edc3a3a3bde10d1fe1954557 fence-virtd-cpg-4.10.0-76.el9_5.4.alma.1.x86_64.rpm 169f0f8187d631e31e0ef68c270d1db00e9842de29258b6343c396d9f3ed748c fence-virtd-tcp-4.10.0-76.el9_5.4.alma.1.x86_64.rpm 2caaada9adb8865a3c53fea3e3c23a291473ae0cbcbc72f82edea1e5d2d46e72 fence-virt-4.10.0-76.el9_5.4.alma.1.x86_64.rpm 3f93ac6b3289ca4adefdfb94679500493bb11d01942ac70f82037e0e75345472 fence-virtd-multicast-4.10.0-76.el9_5.4.alma.1.x86_64.rpm 4894076293394d15b360c94c19292b9a465ebc7b6d3145e818c15ded060a1b9a fence-agents-common-4.10.0-76.el9_5.4.alma.1.noarch.rpm 55f869cd3725fd7d4c3e074266e3a5c5f2607df66964b9532e66b966a6d02933 fence-agents-ibm-powervs-4.10.0-76.el9_5.4.alma.1.noarch.rpm 69d8b3153192e1d7336a369dcb8317760b1e3f1f4d96b982a91aee420e1698ad fence-agents-ibm-vpc-4.10.0-76.el9_5.4.alma.1.noarch.rpm 979642e28a5f5d597147c9497136ff0c49325cc5bb3069aa5a2b0b489a5f7482 fence-agents-virsh-4.10.0-76.el9_5.4.alma.1.noarch.rpm 9bdd4de968c776fd7ffd2d658d439af61f8d8e9b34807436cb9e18cfc2ee1cf4 fence-agents-compute-4.10.0-76.el9_5.4.alma.1.x86_64.rpm b0e2c3b4fb8f63f87e86d46a110f5cffa66f2823c17c7169f39a9795d12096f8 fence-virtd-libvirt-4.10.0-76.el9_5.4.alma.1.x86_64.rpm cc886b43604ddb8a65a6998ab758e6303ac4e9dd61b813b2115fa503647c75b3 fence-virtd-serial-4.10.0-76.el9_5.4.alma.1.x86_64.rpm fbb01609b03711d04f73c2b849923b72ca7051c13fe0fa670830c329d52dde68 ALSA-2025:0312 Copyright 2025 AlmaLinux OS 0 1 Important

raptor2 security update

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fix(es): * raptor: integer underflow when normalizing a URI with the turtle parser (CVE-2024-57823) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default raptor2-2.0.15-32.el9_5.x86_64.rpm 26cae8b8ad41f2b001fd9ab3767d468c1bed528e995db1f177c81c9dda632cdf raptor2-2.0.15-32.el9_5.i686.rpm 4a0bc8cad98b248a51f44fe26a600ea613f0158c0379101d26cb81c65eb06da1 ALSA-2025:0324 Copyright 2025 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default rsync-daemon-3.2.3-20.el9_5.1.noarch.rpm fa7977516dd6fb920d0b41a04102678ad6fc8e3a9d3cd960a143328a67dff746 ALSA-2025:0334 Copyright 2025 AlmaLinux OS 0 1 Moderate

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeipa: Administrative user data leaked through systemd journal (CVE-2024-11029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default ipa-server-dns-4.12.2-1.el9_5.3.noarch.rpm 1bccf32a24ee4e2787ffd28eb9167aefd8d578c7c34c567fbf7da594f3a0d273 python3-ipaserver-4.12.2-1.el9_5.3.noarch.rpm 27df772df6ea381a088bf6aeb4b01e4c59ad6d25ebf40eef473d214d0bcb6726 python3-ipalib-4.12.2-1.el9_5.3.noarch.rpm 31caed3d45a1835a859cd329139d46cb6d57435c2fb1fcb03a7c89a7a93b9858 ipa-selinux-4.12.2-1.el9_5.3.noarch.rpm 5587c0a368fbef7db1486151de4eb81aa69b4b6212b9f10718d9d72428b05ceb ipa-common-4.12.2-1.el9_5.3.noarch.rpm 709622fc964eb74b03436a28c3cf0331b985cbe8289d4c3988ab3c9019181161 ipa-server-common-4.12.2-1.el9_5.3.noarch.rpm 775114f61e02a5ab43c46478cd9120f635814b99a930de57e4005179f8da3b06 ipa-selinux-nfast-4.12.2-1.el9_5.3.noarch.rpm 7a691b13c945753633baba0df8e57a0cc903e8c6e87fbff7283f4302533fa48c ipa-client-common-4.12.2-1.el9_5.3.noarch.rpm 7cda0ebc397d23097db8edded2de102b8aa0939e4e0a704e29be813736222166 python3-ipaclient-4.12.2-1.el9_5.3.noarch.rpm 8e4e5a3b7093d943035afa26a83a3f157858b24ac79be92b42e0cf06c8dd7049 ipa-server-4.12.2-1.el9_5.3.x86_64.rpm a6bf2461a96f5ad5a303db5a65626ff802c893c2bc7318b88224c3a350bddfcf ipa-selinux-luna-4.12.2-1.el9_5.3.noarch.rpm a81175f6b1ce8e510292f1ff146ecbdc32013c89153f47d0d9e4528658a3b7aa ipa-client-4.12.2-1.el9_5.3.x86_64.rpm c168cb847647bf029749248597770a7787516e69d70fdc7c5749897c00de04b6 ipa-server-trust-ad-4.12.2-1.el9_5.3.x86_64.rpm cd5086d8fd65edbcc009ad6564abab1d6647ad5862e0818b32612ccd8d64e596 ipa-client-samba-4.12.2-1.el9_5.3.x86_64.rpm eea21f2f5780b5af5e2acebc7f75dd7a6a5e17ed8255764818eac1abbc0988f9 ipa-client-epn-4.12.2-1.el9_5.3.x86_64.rpm f24b7a2dd30aba2773b0104cde48916912b2539b2846a0437b656f85da43fe21 ALSA-2025:0377 Copyright 2025 AlmaLinux OS 0 1 Moderate

Security and bug fixes for NetworkManager

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security and bug fix(es): * Routes in table different to main are not deleted on reapply [almalinux-9.5.z] (JIRA:AlmaLinux-73013) * Route to VPN server not stored in routing table that is specified by ipv4.route-table [almalinux-9.5.z] (JIRA:AlmaLinux-73166) * VPN connections do not support ipv4.routing-rules settings [almalinux-9.5.z] (JIRA:AlmaLinux-73167) * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic [almalinux-9.5.z] (JIRA:AlmaLinux-64726) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default NetworkManager-ppp-1.48.10-5.el9_5.x86_64.rpm 33de401a4671f25f1a690853841d1d28cc44c78430316564a958fb493464a23b NetworkManager-config-connectivity-redhat-1.48.10-5.el9_5.noarch.rpm 6e63c112ece5fa58a595b67bafb290d2b87302e2c366e4ac2a9b00e0ba9e6dd4 NetworkManager-cloud-setup-1.48.10-5.el9_5.x86_64.rpm 7648cb118b4c44bd99207d20797dcaa7dc92a6ccd34d4e3f4f4b0960b3598711 NetworkManager-ovs-1.48.10-5.el9_5.x86_64.rpm c4ffd9f85a5c67dfb578dd6bbcfaaf9e5657e27eb670cccafe46313d68df9a64 NetworkManager-dispatcher-routing-rules-1.48.10-5.el9_5.noarch.rpm ef852f8942e70d6500ff1a7c938b943c2c89f20b74b1a2341ced64f0ac0af73f ALSA-2025:0422 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance array handling (CVE-2025-21502) Bug Fix(es): * The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. With this update, the JDK has been updated to use the latest version of copy-jdk-configs, which has been used for some years on later AlmaLinux versions (AlmaLinux-73867, AlmaLinux-73871, AlmaLinux-73872). For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default java-17-openjdk-jmods-17.0.14.0.7-2.el9.alma.1.x86_64.rpm 0720cfcdaa159a507c8c99433a00d2ff218efae2ab5a83772ade7f0e4403839d java-17-openjdk-headless-17.0.14.0.7-2.el9.alma.1.x86_64.rpm 2684a84be041665c282bd60176c60997740f76889286981bd2060e8b08741f5f java-17-openjdk-src-17.0.14.0.7-2.el9.alma.1.x86_64.rpm 39d11e9668d2ee4d37cb53d52850606a2ae03ea0788f25e586448702e4d9b80b java-17-openjdk-static-libs-17.0.14.0.7-2.el9.alma.1.x86_64.rpm 67e038d67289e62820dc8712a0e7ce3c77d3075b9940cbaa1cdfbf3e33894c97 java-17-openjdk-devel-17.0.14.0.7-2.el9.alma.1.x86_64.rpm 67e69ca9b3a3e6e9c3c8f6f478a8185a4a4e923db56667a698d47169477df96f java-17-openjdk-javadoc-17.0.14.0.7-2.el9.alma.1.x86_64.rpm 90c97a41aee9c6e48e221cff1ff01c589871554309083c7d98467222aabb972c java-17-openjdk-demo-17.0.14.0.7-2.el9.alma.1.x86_64.rpm a1e92366762074a81c41aad0b0c18b1f21dce63a93f5bfdfefa99fb0b1df7b26 java-17-openjdk-javadoc-zip-17.0.14.0.7-2.el9.alma.1.x86_64.rpm a5216b27496d470214643db5e612541c80bcb9d532f89868f599665d6230e2f8 java-17-openjdk-17.0.14.0.7-2.el9.alma.1.x86_64.rpm adab152e37335b36d31530c13a90a28b9c37d9d48585ba69d553cb57355d2bf2 ALSA-2025:0426 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance array handling (CVE-2025-21502) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default java-21-openjdk-devel-21.0.6.0.7-1.el9.alma.1.x86_64.rpm 02941e57c2391100d48bfefbdb1b8d7cdd7cbf1349ce2e117e39a2e6caf68db5 java-21-openjdk-javadoc-zip-21.0.6.0.7-1.el9.alma.1.x86_64.rpm 606547fc1d2d152b5ddf596b551fe30252b82e3fe4ea570101fb0acffd440e94 java-21-openjdk-jmods-21.0.6.0.7-1.el9.alma.1.x86_64.rpm 6faa82d89ccb74f1689454687bec173e64dde5604fb5ff5f037a1cce292aae5b java-21-openjdk-21.0.6.0.7-1.el9.alma.1.x86_64.rpm 9bc24b043535fa1451ff46a28e8db4b01a6a701f28c96c13283c982933269601 java-21-openjdk-demo-21.0.6.0.7-1.el9.alma.1.x86_64.rpm 9fb359f076c447d50ff338b8664511455b108304bbb611b697d4d39030e3ad1e java-21-openjdk-src-21.0.6.0.7-1.el9.alma.1.x86_64.rpm a928d56821fa538351f116c153738946c1005adb2cd935f0031ec64ce8aa5320 java-21-openjdk-headless-21.0.6.0.7-1.el9.alma.1.x86_64.rpm b86f7f94d5daf094148096c51492dc8166e1d5c661b76c0efcb2e3f537346a35 java-21-openjdk-static-libs-21.0.6.0.7-1.el9.alma.1.x86_64.rpm d361f467631ad017c8e760ab8ac7044eff1e55cfbe4383260ff9690fd186e8d1 java-21-openjdk-javadoc-21.0.6.0.7-1.el9.alma.1.x86_64.rpm d8ea28bc0fde256c95bcec3b5bdb1547373e3f1c026167de8272f5a78f7e74bf ALSA-2025:0578 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp/dccp: Don&#39;t use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154) * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275) * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default kernel-debug-devel-5.14.0-503.22.1.el9_5.x86_64.rpm 0965d34c34b2cc3f47fac37c8a7e61d2bea65ccb65de3a3d52798f7092828d44 rv-5.14.0-503.22.1.el9_5.x86_64.rpm 340353fc05d329878ddf78eda8d76b69cf605bfa560695460037f6e750f3742f kernel-devel-5.14.0-503.22.1.el9_5.x86_64.rpm 54f1599e09cad6c004c3984531ca9979dc4bcacffd4a078129aa3b4df3af5a1f kernel-headers-5.14.0-503.22.1.el9_5.x86_64.rpm 61a8407addd28d4f99c5e6e1255931abc4025bb9e28c8eeee8da57e25867f598 kernel-devel-matched-5.14.0-503.22.1.el9_5.x86_64.rpm 71855bbd0a3e8a9a8560ff48078b0606bea861f694fd08e0031066348d59a853 kernel-doc-5.14.0-503.22.1.el9_5.noarch.rpm 72d58663689b22e51a687cf535db90e40296a9b08001ac98e9c2de25f4f005c3 rtla-5.14.0-503.22.1.el9_5.x86_64.rpm b61c852a4e53977c0234c70e6b844d9108abb9eb31f1c15c97c3716de4202d8d perf-5.14.0-503.22.1.el9_5.x86_64.rpm bae7bd4cdf541213e282aede877cab5af6b8f7815061f454d4e6731027a49888 kernel-debug-devel-matched-5.14.0-503.22.1.el9_5.x86_64.rpm c7d413de47e03a6627acca695577e5d7251a31ef92760825941bcde54e511ea4 ALSA-2025:0667 Copyright 2025 AlmaLinux OS 0 1 Important

python-jinja2 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3-jinja2-2.11.3-7.el9_5.noarch.rpm b37b28e722e1a428ce39b57bf09f41fe44038131bc485aa035e29d46da13d10c ALSA-2025:0673 Copyright 2025 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs (CVE-2024-53263) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default git-lfs-3.4.1-4.el9_5.x86_64.rpm 4bcc8e9a5fb31b492ec2ba09cb413146a306566e92dd6c87ac50c5c4b3958e76 ALSA-2025:0692 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981) * redis: Redis allows denial-of-service due to malformed ACL selectors (CVE-2024-51741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default redis-devel-7.2.7-1.module_el9.5.0+134+2e645600.x86_64.rpm 1e38d32217c10898c76b0f4e75683bfca9b62171153bc4a25f2bbc51e071ff0f redis-7.2.7-1.module_el9.5.0+134+2e645600.x86_64.rpm c021ae7e295e54b2c3a1c0e82f0906f82de986df903cebfa732de8dcb28a1164 redis-doc-7.2.7-1.module_el9.5.0+134+2e645600.noarch.rpm dd018d1e2402c528d76eb3d758ae78dcb70dff64ee95736a6dbeba53008d990e ALSA-2025:0693 Copyright 2025 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834) * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145) * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449) * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228) * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default redis-6.2.17-1.el9_5.x86_64.rpm 3add823940c4f1b72fa4de24d035be5eba9aac0d5c2e86b10553d1604004e77c redis-doc-6.2.17-1.el9_5.noarch.rpm 54c3cc22155c670b53674226da0b9dfa7cb677202584e77e691154b3c4c9c697 redis-devel-6.2.17-1.el9_5.i686.rpm d96735a0cd672ff4e813b06cff923110a5a20369ae7baacf0fc2abe9324e260a redis-devel-6.2.17-1.el9_5.x86_64.rpm e7a27bb700f47c63faafdf50db56ea7164d3223c8420a790b6c83b896ae4c214 ALSA-2025:0791 Copyright 2025 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (CVE-2024-52531) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default libsoup-2.72.0-8.el9_5.3.i686.rpm 59157a25875ddf7de99d0f4ee2a237949322332c2749d7b9b68f37c8a61cfc80 libsoup-2.72.0-8.el9_5.3.x86_64.rpm 5b4ed93c50749ce85e40608c88116f356307e0d90e64932ad39b74f4e1eef06d libsoup-devel-2.72.0-8.el9_5.3.x86_64.rpm d9515328aea71df72eb169047a62f60fdea87284f838192fe6dd9213ff8fb8a0 libsoup-devel-2.72.0-8.el9_5.3.i686.rpm ed876805b056fa6dafda701725a8d702aafbfe78fb39a421fd10ca84dce851cc ALSA-2025:0912 Copyright 2025 AlmaLinux OS 0 1 Moderate

mariadb:10.11 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default mariadb-embedded-devel-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 0f9c4436f9633ca4bcd2de8829aa72d5e0001a0aaf47fbcbdce0765966867895 mariadb-gssapi-server-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 225ae08e68109a3d8997c5f971c3a892830ea9c393146a36522756ef3efffa81 mariadb-oqgraph-engine-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 2ee134e54dfcd031f796d2315c4d977e6840b8b86527394d1ededf8a1732a445 mariadb-devel-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 35e699fc2fec4f5151249cacae904a7e7470d7d6e938b8db5a0508e169acf703 mariadb-backup-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 8436ff7a267384b655716df405f633b144e2594fcb1048d614c46294bdda5ce4 mariadb-errmsg-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 85c73e476976ec4b2cb9b8992d7c3992710c3bf95c7c1a54d320ab12d5ce57ac galera-26.4.20-1.module_el9.5.0+135+c9657a87.x86_64.rpm 867ac642cd84df665a6d5431ac55bf510b2cdc1885d88342c3c2663a22e946c1 mariadb-common-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 8b462b5a6402f671f7c7380db983dd85c32961d7743dbebaa5d5a8496d2fd2b4 mariadb-test-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 93af0bd2fd16933e2dcdc7d9c82512a1bfa26cc06d256088cc41986f1e15086d mariadb-pam-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm 941c1562167439f1f216fd10f35fa0d4b55c1aa034350b77c82c097394c79ed3 mariadb-server-galera-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm b4b5a3da34611fb61855578761f43914932ba8e4d6cc661155c3a1f881a11ff7 mariadb-server-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm cba28db6104b2809169bb9217acdaca28dacb0f9b0a84a314f38f16f4096ada8 mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm d905d85811c5889dd7efe34ba49a3de043e35ea71c416f739001e0f6fe6eabb1 mariadb-embedded-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm e4dfa9d445a2bb239132a0088ddf1c91885770794db9c8fb0bbd0d4ead7ef797 mariadb-server-utils-10.11.10-1.module_el9.5.0+135+c9657a87.x86_64.rpm fe22abfbc9ff0d08e67d21b5c3e83004791748dd9807d11e935ffa4747a14f5d ALSA-2025:0914 Copyright 2025 AlmaLinux OS 0 1 Moderate

galera and mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22084) * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default mariadb-embedded-10.5.27-1.el9_5.x86_64.rpm 173e83595114cc6202ce8e217dc3326e5410711fc6b104eaa6a57a3cb9d11ef8 mariadb-10.5.27-1.el9_5.x86_64.rpm 19ce1301580242af85cf8ee0eda47f3bbe814f4895b70e98c81a600c06dbb74d mariadb-server-10.5.27-1.el9_5.x86_64.rpm 22a7550962ac7a89efc1c300d6e6e1a930f2b09bd26703500c828b051574f02a mariadb-gssapi-server-10.5.27-1.el9_5.x86_64.rpm bc6172db3e7cf2880d793f7159e1c38c88979a8477969ebd7952cd86f01336b6 mariadb-backup-10.5.27-1.el9_5.x86_64.rpm c1550ab9683af213ec4c46d4522faf64ccbacf04f78525b0c627217af67ef068 mariadb-server-galera-10.5.27-1.el9_5.x86_64.rpm d7ff1788e7e0df536481876525613127d40ac94cda16cccc207854643244b2bf galera-26.4.20-1.el9_5.x86_64.rpm dcc7cd64d8bee956a84e6dc3e117d63f1e40f86e012a5241186b3902e9c46791 mariadb-pam-10.5.27-1.el9_5.x86_64.rpm e987467f2da7dc95baf88c07418d38e1690ebb86485d1864abeebe6161729cfc mariadb-errmsg-10.5.27-1.el9_5.x86_64.rpm efa301da5337afe6f1a55f5607c6124e0cc4bce5fc1dbb2f7111416ed15b2635 mariadb-server-utils-10.5.27-1.el9_5.x86_64.rpm f0510abb02cb05b32fad7d6e00a0680067de0627784bc3dad64eb71e63c05569 mariadb-common-10.5.27-1.el9_5.x86_64.rpm f154a472c2e47427ece889c7d99a0b8c08622c4c1e2af23da28fb6d2748f1115 mariadb-oqgraph-engine-10.5.27-1.el9_5.x86_64.rpm fef6f6c9ecd5d1e280211d2cc239c010b597520bef0ab36d00417f9ae80f80b5 ALSA-2025:0917 Copyright 2025 AlmaLinux OS 0 1 Moderate

keepalived security update

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover. Security Fix(es): * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default keepalived-2.2.8-4.el9_5.x86_64.rpm 1dc5e10e6488f0ad1e3d48adefb7e49e229629e610a0df08f7d40e4bb3975cab ALSA-2025:0922 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default podman-5.2.2-13.el9_5.x86_64.rpm 0b1da26169a9b0e60a78a3e0da49339e433377f02140365701485e1e4ef411d7 podman-tests-5.2.2-13.el9_5.x86_64.rpm 54f7882a76104579e99d44f4da5bbab7048375ea0972b5d1770861a0f4aaaf53 podman-docker-5.2.2-13.el9_5.noarch.rpm 5b8984a1cf0fae4c9dfac351e806e9e7eba479071338040c0c06325b5f8806b2 podman-plugins-5.2.2-13.el9_5.x86_64.rpm 646d96f049bc9dd8b9f96bc5d87a8f48288cba64a01b704c687fda686b7df764 podman-remote-5.2.2-13.el9_5.x86_64.rpm d383a90e9e09b5224252a6580dea50735a8db037321e9b9295f33eb3ee482fdf ALSA-2025:0923 Copyright 2025 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default buildah-1.37.6-1.el9_5.x86_64.rpm 5f35dddbffa9bed0aa3d5d014852cddde6cc07fdf0e16ade175d9ec5b463c3ef buildah-tests-1.37.6-1.el9_5.x86_64.rpm a2684bc5aea43f7274f442607c9d2f96ecd7b39849bc42222c88b9b48c49cc82 ALSA-2025:0925 Copyright 2025 AlmaLinux OS 0 1 Moderate

bzip2 security update

The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs. Security Fix(es): * bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default bzip2-devel-1.0.8-10.el9_5.x86_64.rpm 01ab27b75fd37704a75a106b8b64343fd9aa98cbff8aba25fd2372a3dba60832 bzip2-devel-1.0.8-10.el9_5.i686.rpm e060b18a10005c471f16265fa65bfdc6245d55eaff807ae24e4ac1b755f1e64d ALSA-2025:10072 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430) * firefox: Use-after-free in FontFaceSet (CVE-2025-6424) * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429) * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default firefox-x11-128.12.0-1.el9_6.alma.1.x86_64.rpm 2187568df15b25d043b8634ee955b43435c24cfc1e17c2d143987848f6b8fc2c firefox-128.12.0-1.el9_6.alma.1.x86_64.rpm efb3f10af4a916c9ba6957e67261099e8db10522ec183d42a9f0299ba42088cc ALSA-2025:10136 Copyright 2025 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435) * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718) * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330) * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517) * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3-tkinter-3.9.21-2.el9_6.1.x86_64.rpm 6cc95d58c1758f86e431cfc5d0389fdb6c8ed81abb6da4d2e0488da25e69d3c6 python-unversioned-command-3.9.21-2.el9_6.1.noarch.rpm 769cfb1ddce8092618f63df000696505fa07ed2aa1dd748a4db8cf0be4e009bf python3-devel-3.9.21-2.el9_6.1.x86_64.rpm afe0a8b891201d8f06136cfea78236855c30e322a42df8944606126d11b911cd python3-devel-3.9.21-2.el9_6.1.i686.rpm fc1991d258c1274e05c88d4880998436d791832745e8269c5b00182f1a2a54a7 ALSA-2025:10148 Copyright 2025 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435) * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718) * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330) * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517) * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.11-tkinter-3.11.11-2.el9_6.1.x86_64.rpm 0e93e53b358f4441fbc0129b68a5f06a3ea9a2cd6276299a4977b46d406a1b14 python3.11-3.11.11-2.el9_6.1.x86_64.rpm 115cb2b0447292f8466fd5bc6b77246367bdcd2d57b37fbcadb13db008cead98 python3.11-devel-3.11.11-2.el9_6.1.x86_64.rpm 1e08931291e2771f8b07fd507185f9faa7286bbebc2fa7c91809a7da61aae886 python3.11-libs-3.11.11-2.el9_6.1.i686.rpm 38b474bba737b5cabbf90195437b235c08662b499d23c0d6604e47649a8f37e2 python3.11-devel-3.11.11-2.el9_6.1.i686.rpm 8c882838d6ee5bc88bec1516f796ba6f01f0b4b0bc7dd435743b2e743e6a3685 python3.11-libs-3.11.11-2.el9_6.1.x86_64.rpm fd98929a8e7e80ec7e0181b88954a0b275ca7e1e3dc7ce3d7aef189fa965aa52 ALSA-2025:10189 Copyright 2025 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435) * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718) * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330) * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517) * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.12-libs-3.12.9-1.el9_6.1.i686.rpm 0b4743734453e08da3a4213132234010f7f9c1871942482aaf3d58f9b5dba161 python3.12-3.12.9-1.el9_6.1.x86_64.rpm 3a35cb0e766cc47692f34ac49ff7f257aa437ded4527708a7ff6d3f1e3ddefaa python3.12-devel-3.12.9-1.el9_6.1.i686.rpm 550e3f4a92dd808ae39527ce8dc215076a728743d898f61847b56070aef5eb65 python3.12-libs-3.12.9-1.el9_6.1.x86_64.rpm 5e44ff34cffe6b1e779d2f5f6222b62b8735bce4b5dfea9e5404f1646d8b539e python3.12-devel-3.12.9-1.el9_6.1.x86_64.rpm a628f401fad1f407ee1110722e163b44881d411d4979378f16707d8a2063c206 python3.12-tkinter-3.12.9-1.el9_6.1.x86_64.rpm d1194ac87a257de553af7e43e428f78a00e02ce4b403f1a6aa0e737774ad6575 ALSA-2025:10196 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default thunderbird-128.12.0-1.el9_6.alma.1.x86_64.rpm a9f5d9275777f931d6894af8081e69dcf16dc3a330276c827cbafd3d4f52dd58 ALSA-2025:10353 Copyright 2025 AlmaLinux OS 0 1 Moderate

socat security update

The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets. Security Fix(es): * socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default socat-1.7.4.1-6.el9_6.1.x86_64.rpm 48720548fd3c07644d56683d48968206577e607bd91e539cc2583540def92758 ALSA-2025:10379 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759) * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887) * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004) * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846) * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-debug-devel-matched-5.14.0-570.25.1.el9_6.x86_64.rpm 26288ac7ad6b47616cb8fda7b4e222965356c70e066588b3ea3b35b9b3de2a18 kernel-doc-5.14.0-570.25.1.el9_6.noarch.rpm 355e813d6ceb31e26d92033e46cfb0f85dc3b764bde10d8ab903f3c77eab2b4d rv-5.14.0-570.25.1.el9_6.x86_64.rpm 379ac9df14a2c895efb78cefa697a6aad42ac6b462c401d0af8a0b1d7b108654 kernel-headers-5.14.0-570.25.1.el9_6.x86_64.rpm 87b4995bd702ec514b6bc10a2aadb749b5e79d8deb7ba3c16437bf88499d50e6 rtla-5.14.0-570.25.1.el9_6.x86_64.rpm 89e6fd75b6e6b012c743fa2ee0465f4763b3b31c35c305fce6031c3b7378b3fb python3-perf-5.14.0-570.25.1.el9_6.x86_64.rpm 96e64f12267e942e264a20d2ca2964712de7a00d4233c23b2b76f889385c823c kernel-devel-matched-5.14.0-570.25.1.el9_6.x86_64.rpm d0cbb9c1de57701d2ecc5eb8d29cc90ac8995f53b84219a91e0f0b3babac9ad0 kernel-debug-devel-5.14.0-570.25.1.el9_6.x86_64.rpm d3839578473a4ef0b61ef5e26eaf0f91197d45d03bc905a8904c3df8aa7c72e1 perf-5.14.0-570.25.1.el9_6.x86_64.rpm e0a1a731b1bc7294c3fbf1d04cedbfafe6eea864284441971484fcbf6760280b kernel-devel-5.14.0-570.25.1.el9_6.x86_64.rpm e65037a89f6da4a86280ffa91e3e2f52103866cc51e63950550926d46a28fa17 ALSA-2025:10550 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: podman missing TLS verification (CVE-2025-6032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default podman-plugins-5.4.0-12.el9_6.x86_64.rpm 038bce4aab448c9cd53107f3c792d40555d11ea4c7c75c91c86cb862b2ee313f podman-remote-5.4.0-12.el9_6.x86_64.rpm 0bc4d6edeb23d0740e3babcfef112f8a0a9fd6f969cf2e47a65b7ec1752f4e29 podman-tests-5.4.0-12.el9_6.x86_64.rpm c9ce6d6a93f59cd0acbdf370164e95d63fb955aef004bdfe9a8a3f403b4c03e4 podman-docker-5.4.0-12.el9_6.noarch.rpm e02696db3aab6a7d91efeba519de931041386602af04f62b8cbc0b72adda96f9 podman-5.4.0-12.el9_6.x86_64.rpm e7fdb5f669053a1c72481bad9f67676debaaab3d6e5a699d8404402bcd2c27a2 ALSA-2025:10631 Copyright 2025 AlmaLinux OS 0 1 Moderate

gnome-remote-desktop security update

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gnome-remote-desktop-40.0-11.el9_6.x86_64.rpm 4811f034b6fa050d8683cc0a059353c4163a61e26bffe8fa103130c83ea18023 ALSA-2025:1066 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017) * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010) * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016) * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013) * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011) * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009) * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014) * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default firefox-x11-128.7.0-1.el9_5.x86_64.rpm f689cba82d1e3e021d953b3bb11fbe7da0ec4516c578bc239ff99a3505ff2435 firefox-128.7.0-1.el9_5.x86_64.rpm f6ea6cb4803233d8cb280463f257085df2e76396cf61596b51ceaeea9940c92a ALSA-2025:10676 Copyright 2025 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default golang-1.24.4-1.el9_6.x86_64.rpm 2618b42f711e27da7b5fc9d4878335267fa48ed160443309d2da0bc50d5af92f go-toolset-1.24.4-1.el9_6.x86_64.rpm 29ca867935eddfe67ac85a74860dc945601e6d868741cc41b54fcc77037febf9 golang-misc-1.24.4-1.el9_6.noarch.rpm 39bded93e51b1eab3a048663974373172565d4d24477f46d808c3a05309bb9a6 golang-race-1.24.4-1.el9_6.x86_64.rpm 60171d3f3de6aaec37392e653bb4065873d1f9077566f58157923507113f6e6e golang-docs-1.24.4-1.el9_6.noarch.rpm a1c1ebd61db1c0dd854eb3d18dde55855fb0be1a8054509a0fb502433e5fc783 golang-tests-1.24.4-1.el9_6.noarch.rpm bef4424522b28367f82728a1006a4d0e15dae1f31ee4a55d64eb69398f0354b5 golang-bin-1.24.4-1.el9_6.x86_64.rpm e5f936a8e0718d55e73944005b3853cbf21dae053ee37ff7490894b86c8f7b1c golang-src-1.24.4-1.el9_6.noarch.rpm ff534786c4c7f9770db6ed0667783c231f44215708f37f8e84d3c4eaf05dad74 ALSA-2025:10699 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794) * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796) * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libxml2-devel-2.9.13-10.el9_6.x86_64.rpm 6708cf8de3a6d59a18db9134eb9b177e2c0c09ee1c75a2d768aa5061d1387249 libxml2-devel-2.9.13-10.el9_6.i686.rpm 8bb4138cc6f3fb26f5d78d0c7037870b7c3ff8f255f16c080b4f49eb5c8928d5 ALSA-2025:10837 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-debug-devel-matched-5.14.0-570.26.1.el9_6.x86_64.rpm 138d33770d2cd68ddc1535e999afa67d58a87692dcb0ffff3df9aba6f78bfcb8 kernel-doc-5.14.0-570.26.1.el9_6.noarch.rpm 1cd51f675f76af7972b2ab02fcdf47e3c0bd338425841b0f850560f53a33d100 perf-5.14.0-570.26.1.el9_6.x86_64.rpm 2bbd6c0f36e497cfb7d5a89969d16dc6500a5702bcc2639b9a24edf372cf20ce kernel-debug-devel-5.14.0-570.26.1.el9_6.x86_64.rpm 3556b773b303462f391f315948b7339d153125147afb1dc1bca4cd2044541bb8 rv-5.14.0-570.26.1.el9_6.x86_64.rpm 389a0398a8366e416109cfbd6c29f885af4fc13d7613a533a6edf877044a95ba rtla-5.14.0-570.26.1.el9_6.x86_64.rpm 4976765625052a846397c3efa6a361ccd7235539293f93008eb62344a730efe9 python3-perf-5.14.0-570.26.1.el9_6.x86_64.rpm 615d1caa7d4344ab005c74bb070469cafa514fc82853021319cd8d1db2e62682 kernel-devel-matched-5.14.0-570.26.1.el9_6.x86_64.rpm c69210440913b6aaf200f402fa5e871b113fd5d39f622599d8b3692376bc20d4 kernel-headers-5.14.0-570.26.1.el9_6.x86_64.rpm dc67e4e69840a176b052d9063ef24c68d4cf622ad164333cd88af3f66a0771a7 kernel-devel-5.14.0-570.26.1.el9_6.x86_64.rpm e097e3d373bd69a8711d07f35bc881e45852f36cf0bb5d32c65528c474f26f95 ALSA-2025:10848 Copyright 2025 AlmaLinux OS 0 1 Important

cloud-init security update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Security Fix(es): * cloud-init: Cloud init permissions flaw (CVE-2024-6174) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default cloud-init-24.4-4.el9_6.3.alma.1.noarch.rpm 9d46e891e1c012191d100c9ed99c5e56c9a4c74b0e8bf51cfb2e51597e27a694 ALSA-2025:10862 Copyright 2025 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Better Glyph drawing (CVE-2025-30749) * JDK: Enhance TLS protocol support (CVE-2025-30754) * JDK: Improve scripting supports (CVE-2025-30761) * JDK: Better Glyph drawing redux (CVE-2025-50106) Bug Fix(es): * On certain system configurations where the IPv4 stack was preferred over IPv6 (either due to -Djava.net.preferIPv4Stack=true being specified or no IPv6 interfaces being present), the method java.net.InetAddress.getLocalHost().getHostName() would return the fully qualified hostname instead of the short hostname. This behavior was only ever intended for Solaris systems and it deviated from the method's behavior for IPv6 interfaces. In this release, the method will return the short hostname on all interfaces. (AlmaLinux-102904, AlmaLinux-102905, AlmaLinux-102906, AlmaLinux-102907, AlmaLinux-102908, AlmaLinux-102909, AlmaLinux-102910, AlmaLinux-102911, AlmaLinux-102912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default java-1.8.0-openjdk-devel-1.8.0.462.b08-3.el9.x86_64.rpm 52decc4e9886809fea1262929c628a8615d13c9d09b9fdf150201e29531a38cf java-1.8.0-openjdk-javadoc-zip-1.8.0.462.b08-3.el9.noarch.rpm 5330baf86f2300516ddf69f4d5436937dbf9b81c14ffd67624fd0dbf9f4dbdcc java-1.8.0-openjdk-1.8.0.462.b08-3.el9.x86_64.rpm 673675409858fad04ce589b36086eae4093537aa19e53c2f735b5b812d81a7b5 java-1.8.0-openjdk-src-1.8.0.462.b08-3.el9.x86_64.rpm 76e68d263bf92425d3002bcfacf6694ee9320201bbfc89aa58ad3677059d9667 java-1.8.0-openjdk-javadoc-1.8.0.462.b08-3.el9.noarch.rpm 785c4c8a84cad05fbb69c19031341c5255a0525009775028d1d9c7dc85861f94 java-1.8.0-openjdk-demo-1.8.0.462.b08-3.el9.x86_64.rpm b8b0d13806ae61ae81e4ba5c8933f16d87ab0abf8f3eab5f12e17365e99a2d87 java-1.8.0-openjdk-headless-1.8.0.462.b08-3.el9.x86_64.rpm c1c6a3ea798bcf593c0efbf2729b16eca112b7ad5b6502fb7091851fe52891d7 ALSA-2025:10867 Copyright 2025 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Better Glyph drawing (CVE-2025-30749) * JDK: Enhance TLS protocol support (CVE-2025-30754) * JDK: Improve HTTP client header handling (CVE-2025-50059) * JDK: Better Glyph drawing redux (CVE-2025-50106) Bug Fix(es): * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default java-17-openjdk-javadoc-zip-17.0.16.0.8-2.el9.alma.1.x86_64.rpm 084a1dc0489c48bb877d820899ef3d3269535134ddd2273a4f6e5cddb1b32089 java-17-openjdk-jmods-17.0.16.0.8-2.el9.alma.1.x86_64.rpm 08fb68c6b3b36b1a78bea2b213e58696971a34fe7e58b718f325965f6914fa6b java-17-openjdk-devel-17.0.16.0.8-2.el9.alma.1.x86_64.rpm 395b614378183cbae77eb1d4d481588042d5626263f51e67734a2e997703e696 java-17-openjdk-demo-17.0.16.0.8-2.el9.alma.1.x86_64.rpm 8d23ceb557cd4f0c3ba9db107b6733f23da34941215c53883b2628ff1019c8ff java-17-openjdk-src-17.0.16.0.8-2.el9.alma.1.x86_64.rpm a36432fb3fbf9fe0f338a1a0fe3120376fc1da1dfb2826f519c1eecfe44ba492 java-17-openjdk-17.0.16.0.8-2.el9.alma.1.x86_64.rpm a610748f4bb94a64433f55d2fa976c9768e86a7df32ff96aade5b42da7531876 java-17-openjdk-headless-17.0.16.0.8-2.el9.alma.1.x86_64.rpm c431060f406efb4c9a1fc037771807ddf2ea8066e577557912f957db351d5541 java-17-openjdk-javadoc-17.0.16.0.8-2.el9.alma.1.x86_64.rpm e704502db451e65c938cfbd3aa675bbe530461f0051364d795523e676462c969 java-17-openjdk-static-libs-17.0.16.0.8-2.el9.alma.1.x86_64.rpm fb2068197ba3d3d2e97c9b75706ca84b9895507f40fbe2a9e8cc236a1b888385 ALSA-2025:10873 Copyright 2025 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Better Glyph drawing (CVE-2025-30749) * JDK: Enhance TLS protocol support (CVE-2025-30754) * JDK: Improve HTTP client header handling (CVE-2025-50059) * JDK: Better Glyph drawing redux (CVE-2025-50106) Bug Fix(es): * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102683, AlmaLinux-102684, AlmaLinux-102685) * On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (AlmaLinux-90307, AlmaLinux-90308, AlmaLinux-90311) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default java-21-openjdk-devel-21.0.8.0.9-1.el9.alma.1.x86_64.rpm 3717a80ab3456f4bfabacffbe0e432951817b4ad0e3eae48f1e6b1185c82da3f java-21-openjdk-javadoc-zip-21.0.8.0.9-1.el9.alma.1.x86_64.rpm 6325f00965d55292a0d55dc5280ffe718c51815520d82aae30864791bb2e0a7b java-21-openjdk-src-21.0.8.0.9-1.el9.alma.1.x86_64.rpm 697c74ccf129bb3637006f4161e3e5143a04f51ce63dbac0ae5dd6f1fab13a74 java-21-openjdk-javadoc-21.0.8.0.9-1.el9.alma.1.x86_64.rpm 6dd3446f3816ba1f0436cffc82439d2050b7544cadb8e5512320ed81d0f0c0ec java-21-openjdk-21.0.8.0.9-1.el9.alma.1.x86_64.rpm a366c71a6a3d0fffbc14c65f14261531998aa26ef9fb1df1e9cfdbf00e507803 java-21-openjdk-static-libs-21.0.8.0.9-1.el9.alma.1.x86_64.rpm a9420546440226eacf7359741ecee7b011dbb0b71518426f16e2b3dda4028120 java-21-openjdk-jmods-21.0.8.0.9-1.el9.alma.1.x86_64.rpm e3a20a19d332abd26348dfe1154563492ef6b372f869450a34c47018d53887ab java-21-openjdk-demo-21.0.8.0.9-1.el9.alma.1.x86_64.rpm f19d02047335c56a4f48cd867dc62098d2277ff5114dfecd966823a802ac74fe java-21-openjdk-headless-21.0.8.0.9-1.el9.alma.1.x86_64.rpm fb137bf27201f49e510f3bf1cec27119ed2b59b85747b9f95fd35de34e1e2f80 ALSA-2025:11140 Copyright 2025 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: buffer overflow in set_connect_msg() (CVE-2024-52533) * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default glib2-doc-2.68.4-16.el9_6.2.noarch.rpm 310b01475b36a88db15ac012b0c7a14760bc4e0c89395fd289bad27ebcae45a2 glib2-tests-2.68.4-16.el9_6.2.x86_64.rpm 6bc0df7f7184c63d254aa16a5046e0efe1fd2bbdfd01c1d2fc86fc036498275e glib2-devel-2.68.4-16.el9_6.2.i686.rpm 9c1f2d119d79cfe90c93d6a1c732628ffec225c864cc544e39187b4529627d8a glib2-devel-2.68.4-16.el9_6.2.x86_64.rpm f3a1ad5b322decc61980fdcf6eabc6fb3bec7fd923994083db11c93d42e08165 ALSA-2025:11335 Copyright 2025 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) * tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default tomcat-webapps-9.0.87-3.el9_6.1.noarch.rpm 281eef4bd6b16bf6eb470f47c3970df8c4a2836d3028e30a580a65e7ada60137 tomcat-servlet-4.0-api-9.0.87-3.el9_6.1.noarch.rpm 2f77795bdd90d1fe412da61d5569c0c6f4df28efef4d1a2e1df4d05b88203261 tomcat-9.0.87-3.el9_6.1.noarch.rpm 3f28b0bffd962832563895e539c63bd5f74e5b356793560472765017e3fcdc39 tomcat-docs-webapp-9.0.87-3.el9_6.1.noarch.rpm 43a12fc223d779273ea81e84f3222d95e201277edbabd0e096a865b2469e2fb5 tomcat-lib-9.0.87-3.el9_6.1.noarch.rpm 76af4613615060c07f2c5cba8447fb39aff4c16a6b29d9f1ed2e7159bbf35b51 tomcat-el-3.0-api-9.0.87-3.el9_6.1.noarch.rpm 76ebae4b3642bcd9d070c0622225bb74d863fb10967e6c30cce72588ef0b8a43 tomcat-jsp-2.3-api-9.0.87-3.el9_6.1.noarch.rpm a00f3033de27158d1def3b40024da89c33fbffbecaba33be74116fa2c8639890 tomcat-admin-webapps-9.0.87-3.el9_6.1.noarch.rpm c54248bc0df878433b36160be3be0e55b285dae90d13ce1a812815b56cc512af ALSA-2025:11411 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002) * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default perf-5.14.0-570.28.1.el9_6.x86_64.rpm 29471432c0e4a8cc5c8aee595556c27c9d3f05153f7c1d09c2f74e043f0877b9 rv-5.14.0-570.28.1.el9_6.x86_64.rpm 39f89aac3bbb7a53ab5ee4234233d9d5cf8a0a000cbddc4eef215303d91ff5a0 kernel-debug-devel-matched-5.14.0-570.28.1.el9_6.x86_64.rpm 5dfda0dac7ada558c11eef3d6fca66121988cc633da4fd214150f8f7b9d01b75 rtla-5.14.0-570.28.1.el9_6.x86_64.rpm 7dc05753179df0a6eea3bc105e6a397c966292384c2573771d6a808d03c6f379 kernel-debug-devel-5.14.0-570.28.1.el9_6.x86_64.rpm 8d97c1144dfa825587c5ae66b9dcff0c6477d93ada5b3c382e8aeffce1aa0274 kernel-devel-5.14.0-570.28.1.el9_6.x86_64.rpm a162540c55b92007c393ee39ef588b433d278ebc3dedab87e8ff77deead10ba8 kernel-doc-5.14.0-570.28.1.el9_6.noarch.rpm b58903c7edfc03844df37ad954767a2d2b330556855dbe3f07bcb28ef2b74963 kernel-headers-5.14.0-570.28.1.el9_6.x86_64.rpm bf1ae543449d80547e5f118dbb6eca34af42d818701cdcd36ceaca531f78fade kernel-devel-matched-5.14.0-570.28.1.el9_6.x86_64.rpm c39a2a1290de3ff7ae768a28235808773e043099bd07bb2112e05bccc7ea2fd7 python3-perf-5.14.0-570.28.1.el9_6.x86_64.rpm ef5f414664c1289031ece0d206295d894a33e4b8c2107ed700c159a53f0cecf3 ALSA-2025:11462 Copyright 2025 AlmaLinux OS 0 1 Important

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: Git does not sanitize URLs when asking for credentials interactively (CVE-2024-50349) * git: Newline confusion in credential helpers can lead to credential exfiltration in git (CVE-2024-52006) * git: Git arbitrary code execution (CVE-2025-48384) * git: Git arbitrary file writes (CVE-2025-48385) * gitk: Git file creation flaw (CVE-2025-27613) * gitk: git script execution flaw (CVE-2025-27614) * git: Git GUI can create and overwrite files for which the user has write permission (CVE-2025-46835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default git-core-2.47.3-1.el9_6.x86_64.rpm 010d8086363d1ea77f2f06b54cbb124019c01721203a8d8badcbb1baf15807ab git-svn-2.47.3-1.el9_6.noarch.rpm 039c7428d046d2a93f8b541a1a012e23190a028df8a2ed48f3974503c2c8ab88 git-core-doc-2.47.3-1.el9_6.noarch.rpm 154f29b0e1dfbf2a77b8ba0bad45a4ddfffae7a34ecb2154dc7afe811ffd9194 git-email-2.47.3-1.el9_6.noarch.rpm 296d6134e3e0fcb08684a5a0c5ff8f37da7dfc3929e97ba7972347b8b75ef7cd perl-Git-SVN-2.47.3-1.el9_6.noarch.rpm 6260e2162ff7971a9214ef11ee0604619036b34a824ad49aaa454b02628ea6b3 gitweb-2.47.3-1.el9_6.noarch.rpm 643b62eeb3e2ab909065bdcd816b6773f748d4caa8b355a2c6195bfcfb5a0bf8 git-2.47.3-1.el9_6.x86_64.rpm 67d05d5ef07b9821fa9c5668155cb1ba4b757f191609a268dff8c8df46ced41f perl-Git-2.47.3-1.el9_6.noarch.rpm 7bb360063a9bc96c44b1293282e549051313b8095997e106947e61d4368a49b8 git-gui-2.47.3-1.el9_6.noarch.rpm 9e8a0552cee383c9d37569bb221744a12672fa0e534a8477c240027c5ff156ef git-subtree-2.47.3-1.el9_6.x86_64.rpm a3b50dec09d9f0a6f55a66b9e13ae320b9ab2a2c96324218d52efae4d2e03b1d gitk-2.47.3-1.el9_6.noarch.rpm a4155777242e30a1f4da9e3fc2b2d18887f9ddb5c33b93ece8f3ee16d86245ef git-all-2.47.3-1.el9_6.noarch.rpm a787ed1f399dae43821c2e9196b8c67fc4af6ccf0695a61b278b551b4e8410c6 git-instaweb-2.47.3-1.el9_6.noarch.rpm cf55cc547c4de2274cb03a3b3683691f7c0d706ab48904b9ebf507e435a9e099 git-credential-libsecret-2.47.3-1.el9_6.x86_64.rpm d0049932dca1e5375b8341b69edf30c3fcc5fba4870cc970382146e9c7654a07 git-daemon-2.47.3-1.el9_6.x86_64.rpm dced8211a97b47246ec8c50173d179570d0e154caa1745d9682ff1ee3b867af7 ALSA-2025:11463 Copyright 2025 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default fence-agents-scsi-4.10.0-86.el9_6.7.noarch.rpm 03e70d492f92498d27bbf33eb1257bd26ffff882c1f6d990dc1c4c4feb82ab59 fence-agents-bladecenter-4.10.0-86.el9_6.7.noarch.rpm 08a4711a27b328e1717555941dfee8a9f93c16edc5e2eac5a52d0b1392f1ec32 fence-virtd-4.10.0-86.el9_6.7.x86_64.rpm 094c6346890b4d1830cc173bd4831a13db06874109262cd0eb2f68abcc03a1a9 fence-agents-ilo-mp-4.10.0-86.el9_6.7.noarch.rpm 123ef8fb76983d0378dad7dc1e6ce90251564c121935aaca01c7980fe85770dd fence-agents-lpar-4.10.0-86.el9_6.7.noarch.rpm 18628cafc5ba3d22490a6740d1955aba878c3ddd5ea221d99cf99a815b0aebcb fence-agents-wti-4.10.0-86.el9_6.7.noarch.rpm 1887210096e059e32bd64fbc2bb587919c5e2e61c95a2ad47282924a0c93d4bc fence-agents-eps-4.10.0-86.el9_6.7.noarch.rpm 19afca3ce09c82e42ea1c57b47ebd549d0f253faf082b3884fa58f6c7db3c6f6 fence-agents-rsa-4.10.0-86.el9_6.7.noarch.rpm 231147f351b2037ef9d91f698f696eeae2e7b35fcf365beb7f684b92055dc102 fence-agents-ipmilan-4.10.0-86.el9_6.7.noarch.rpm 29c70b96c3d278220914ae7ce0e58acab84bc7d1cb4021295880a7c001be0cd1 fence-agents-rsb-4.10.0-86.el9_6.7.noarch.rpm 2d05561e1eaedcda8faf42a7605e825f4d43123809ddb202d0c6e586790f8707 fence-agents-mpath-4.10.0-86.el9_6.7.noarch.rpm 2d75c1b4f2f48fb7c1b471185b6bbb576099820302c67634ebbfb486938daa32 fence-agents-apc-4.10.0-86.el9_6.7.noarch.rpm 3196fea08937ed254ac9da0ea5ded5bf0e02dfc4298729e2129f114ec6943269 fence-virt-4.10.0-86.el9_6.7.x86_64.rpm 349b2f7a5d69e189d8fc44dba93fe649006c1f6019d2e81c1630e6deba819ffc fence-agents-ilo2-4.10.0-86.el9_6.7.noarch.rpm 379acf603af424c87da3481f15432ebcf6d00927ffe05db5c552419aa6f5ea8d fence-agents-ibm-vpc-4.10.0-86.el9_6.7.noarch.rpm 3b9d4e191b953b7f955456eff64c73d4ca4a96f1d485e45fbf502b65e6fbfb54 fence-agents-ibm-powervs-4.10.0-86.el9_6.7.noarch.rpm 49b9df90f33a67ac008739c591d9d3c214f54be684825a367aef8cb482995c41 fence-agents-ifmib-4.10.0-86.el9_6.7.noarch.rpm 4ebe57452f93914e3c25bf4fce4884e3bc942f017a4a812c18301f5a47fe0698 fence-agents-sbd-4.10.0-86.el9_6.7.noarch.rpm 4ed39cc7b365d6c12ba4a317148cfb2a00656a414318d4751c145d7e3fb10820 fence-agents-compute-4.10.0-86.el9_6.7.x86_64.rpm 5200b312fe9e9208a74ee13b97e3009e8a85bab595b25f6775088c5c6edad47c fence-agents-ilo-ssh-4.10.0-86.el9_6.7.noarch.rpm 53ca76df5cbaa300da93a833619a3d9928cf217f560c6fe119e2f8828643fa55 fence-agents-redfish-4.10.0-86.el9_6.7.x86_64.rpm 5a4c0d9a99488212130067b002abb6aca95d2b58a237fc2e20f643260225a862 fence-agents-cisco-ucs-4.10.0-86.el9_6.7.noarch.rpm 5acecd445f2a7276a6570f1d4a807138cc0485e7b7bfc2fb08e8153f9976d2ec fence-agents-hpblade-4.10.0-86.el9_6.7.noarch.rpm 5ae822356695218e886c4b5730a2660aca6f6f5fe954b337468bad0aeaba2ca5 fence-agents-all-4.10.0-86.el9_6.7.x86_64.rpm 5cfe5caf1a2381897258539b3fb6c1108c8e229bda9e8e97e12be69567015c21 fence-agents-virsh-4.10.0-86.el9_6.7.noarch.rpm 611196be29f8f9a806989f4d189a96ff303f4e83b85d2ffbe08bb72c08b2d82f fence-agents-eaton-snmp-4.10.0-86.el9_6.7.noarch.rpm 68b6495143f277dabae7c3826897294b960cab6603c8d87122b823fb846af5c3 fence-agents-apc-snmp-4.10.0-86.el9_6.7.noarch.rpm 6d113c7b79b43205f83b395d3df6d59ab1b15f1a177a96add9b3a7a55fdadc55 fence-agents-heuristics-ping-4.10.0-86.el9_6.7.noarch.rpm 715a164bdeb252d009fedec71f5acc499ede803ccd8df1a4be83696f214021eb fence-agents-amt-ws-4.10.0-86.el9_6.7.noarch.rpm 726cd03542754b1a1fdaa9f932cc46cac886d72bcb4526cc9b31f5eb35aa2111 fence-virtd-serial-4.10.0-86.el9_6.7.x86_64.rpm 75db2bf1254fdb70e026e9febee4c0acb675403692f0627af0b6a50cbfa8d1fb fence-virtd-libvirt-4.10.0-86.el9_6.7.x86_64.rpm 76b934fe8a3ec284c01273c30c708f507c266cb6264eeb2815b925d7cafff214 fence-agents-ilo-moonshot-4.10.0-86.el9_6.7.noarch.rpm 7709df4112d280a284be7c3f654ba0e0399a9f889ed01c0ecca128e78b0feae5 fence-agents-kdump-4.10.0-86.el9_6.7.x86_64.rpm 835dbe178c3e1aaf2933bbf4ce35f1978d79a7948f8a3857ffe74dee6130b950 fence-virtd-tcp-4.10.0-86.el9_6.7.x86_64.rpm a1930da0400ee390970b4f5cd08f23ec3b76c5140b1807500f93cbd4daab6d29 fence-agents-cisco-mds-4.10.0-86.el9_6.7.noarch.rpm a466cc0f0114e09549ee5dc8ce49f81d40c44354f0db6acbd115f4faa6e4a388 fence-agents-ibmblade-4.10.0-86.el9_6.7.noarch.rpm a89b35adf0867c1dc63bebdfa8ff43876450b8d42ffd975bad33612f5b306185 fence-agents-aliyun-4.10.0-86.el9_6.7.x86_64.rpm b06fac3a8276320d7b5b21b1395091921fda17869ef44b230c5e96c6caf609c8 fence-agents-ipdu-4.10.0-86.el9_6.7.noarch.rpm b3e776650eebcc7a4e2085a5bceee5bf1ce1b192e16776824b2cb5e134b5a955 fence-agents-common-4.10.0-86.el9_6.7.noarch.rpm b6bee14a91a22593f2db4144a63fcbabb3b51a0b2af1ce02fa0329d1906d32c3 fence-agents-gce-4.10.0-86.el9_6.7.x86_64.rpm c31a0465152ad40aed2a82f69c38156f9cff30ed3ef22990fdae0489910cd1bf fence-virtd-cpg-4.10.0-86.el9_6.7.x86_64.rpm c610eda1d791c84b6d73ab81c99f17e0ced7339d337483e75f03ee14ac6b4ee5 fence-agents-openstack-4.10.0-86.el9_6.7.x86_64.rpm c82d5f034bc3a2d7340bc124584683e37f657499b298612c70c8feb668b6b6a7 fence-agents-emerson-4.10.0-86.el9_6.7.noarch.rpm c9995a66f5efc573cac153315d67cb93a6f83470bd2d29aa3b1471c5312b6066 fence-agents-drac5-4.10.0-86.el9_6.7.noarch.rpm cc1d1711453a99b2439a5320c73a6df92f73fc8949e5b0ed89beb02be68bdbec fence-agents-intelmodular-4.10.0-86.el9_6.7.noarch.rpm d72b20e22394b016a27caab7d2e3fb1878f72e27a931a2fa7e184e7b152c9a7f fence-agents-kubevirt-4.10.0-86.el9_6.7.x86_64.rpm de049a9dafc62c0aaa2a0a3dd5b904dbb33626a3b6effb8eb5886e77729b24a0 fence-agents-brocade-4.10.0-86.el9_6.7.noarch.rpm e209d1f482a3ee785ff79577efb021d1de3adbe4bf0ba4cb598966c6131fe85c fence-agents-aws-4.10.0-86.el9_6.7.x86_64.rpm e2a661597ae65b32a25bb47aea8c1789711f278705ccc51c9712f185c9b1a40d fence-agents-rhevm-4.10.0-86.el9_6.7.noarch.rpm e34eec2d3d75c533c9ab40c350f0fa12f67380ad77bcc7eb2e0f2455020845eb fence-agents-vmware-soap-4.10.0-86.el9_6.7.noarch.rpm f47e04428c8fd0eb8555278754675db062736140e1dca78cf7e04772e6f102ea fence-agents-azure-arm-4.10.0-86.el9_6.7.x86_64.rpm f53fb11005f30de1716db85a3c22613f369e1715f536dc15bfcf3c6600e08f69 fence-virtd-multicast-4.10.0-86.el9_6.7.x86_64.rpm faae158c8b4c1f02aa4ce442ee7d0bbe3f333be1d791fd5d39c6202a05cf6ec5 ha-cloud-support-4.10.0-86.el9_6.7.x86_64.rpm fe7a665961702a08e0630cd465147a4ff9d2e46ae85d4d87ea806bfe37c81bb1 fence-agents-vmware-rest-4.10.0-86.el9_6.7.noarch.rpm ffed8b2e8adc5c0d017b73cd6023d957747cd15853675ef72aca6061af6b4c9d ALSA-2025:11748 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028) * firefox: thunderbird: Memory safety bugs (CVE-2025-8035) * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031) * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027) * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030) * firefox: Memory safety bugs (CVE-2025-8034) * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033) * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032) * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default firefox-128.13.0-1.el9_6.alma.1.x86_64.rpm 96a9b05f47b341bdcbffe894191043c2427e2477a3d7c5dd0c9a08ed78a1c660 firefox-x11-128.13.0-1.el9_6.alma.1.x86_64.rpm cf8251f9180bbc022c510c19545ae2f7ba4004c0d4838071187c8de94d9a6825 ALSA-2025:1184 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017) * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010) * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016) * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013) * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011) * thunderbird: Unsanitized address book fields (CVE-2025-1015) * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009) * thunderbird: Address of e-mail sender can be spoofed by malicious email (CVE-2025-0510) * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014) * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default thunderbird-128.7.0-1.el9_5.alma.1.x86_64.rpm 8db845d15a51e06eb582bf0f1b86dcc5fbfa31640766aef8129dbae1f40582d3 ALSA-2025:11849 Copyright 2025 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound Cache poisoning (CVE-2025-5994) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default unbound-libs-1.16.2-19.el9_6.1.x86_64.rpm 1b6abb4eea170ddf69dc53a31bb1883658650f55f8bfa5808f8fdc0316f131df unbound-1.16.2-19.el9_6.1.x86_64.rpm 3848b8932408e41fcec81858ee4dc33d6ad8d3ee43f8076bbfee0210c9fe9f94 unbound-libs-1.16.2-19.el9_6.1.i686.rpm ae2ffff18d16b15ff92a278c5601f20fa84e394639b37945af7c7edda928c3a9 unbound-dracut-1.16.2-19.el9_6.1.x86_64.rpm d3aa86613cb10cba44843ae9b4abb9689b48a49ead86e5326bae90e8cd418acd python3-unbound-1.16.2-19.el9_6.1.x86_64.rpm fd4ca9e182a6a3679f224cb4363feca86af338651c86d4865048ce3faf5a5447 ALSA-2025:11861 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905) * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091) * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121) * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113) * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797) * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958) * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086) * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default perf-5.14.0-570.30.1.el9_6.x86_64.rpm 0e451f0d2142dfbef0c871de062b85d7b92799b3644277fc7ab56faad0393cd9 kernel-devel-matched-5.14.0-570.30.1.el9_6.x86_64.rpm 246599c538f1487db1800a520da3609b6520c84340d61b56fcb19f4ff7046780 rtla-5.14.0-570.30.1.el9_6.x86_64.rpm 4b7206c5ea632543c83c03be96c8cfe8b785d41b8f6d145d970a41b2091ef9ec kernel-debug-devel-5.14.0-570.30.1.el9_6.x86_64.rpm 8d4310bbd0e682aec276a11a7bf34354f48f1c24c081ee2c890facaf1406ef35 python3-perf-5.14.0-570.30.1.el9_6.x86_64.rpm 9cebca3b002d1a26e0e5b7c41cfb05097afc1a08264c6b410cd1e1b4bd2a9d3d kernel-doc-5.14.0-570.30.1.el9_6.noarch.rpm a5dff664f5e93b8d89c791087629044ca46f28380fd903f5365e969f6c07d6f5 kernel-debug-devel-matched-5.14.0-570.30.1.el9_6.x86_64.rpm b7ef7f9ae8848438c88d6850543b0c81ac9e663dc818c1b1dae82076e2be91c0 kernel-devel-5.14.0-570.30.1.el9_6.x86_64.rpm c12978523875bc4d5c31ad07dc0ea97ea66e030de796125e99cf0a2e46458030 kernel-headers-5.14.0-570.30.1.el9_6.x86_64.rpm ddac95992d116e5af278a54e16e18165bd25ee8de38d882c8a3daaec936eaadf rv-5.14.0-570.30.1.el9_6.x86_64.rpm ff79a56202013b3ca603cf788b543b8737985af350e1779e075d244cd0cce754 ALSA-2025:11992 Copyright 2025 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: Integer Truncation in SQLite (CVE-2025-6965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default sqlite-3.34.1-8.el9_6.i686.rpm 7ac3e62e00bffd6ab29fc518214338a9d44891b88a3a2a7a5a7396764e95ed6f sqlite-3.34.1-8.el9_6.x86_64.rpm 9de444e20ba7ab6d83a9ec9c9ba436a24e245be9aa1b10d6631b4d219654ebda sqlite-devel-3.34.1-8.el9_6.i686.rpm 9ea04bf35af0ee922f7499176d77dd06a8fc9072dfcab43c207bf9538220a194 sqlite-devel-3.34.1-8.el9_6.x86_64.rpm fc8a6d5c427b2bf46a40c5f81a04b26fbd130eb0c803e68a0490bd3d5b582dd3 ALSA-2025:12008 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis Stack Buffer Overflow (CVE-2025-27151) * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367) * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default redis-7.2.10-1.module_el9.6.0+173+efaf9205.x86_64.rpm 76e1d463071e1633942a55942542b92ead4586d21bf47292cbc73818577e1365 redis-devel-7.2.10-1.module_el9.6.0+173+efaf9205.x86_64.rpm aab0ab2d93bc84780cf1062b479e52f59adc6aa1c0a01fa840ade3075b5441d9 redis-doc-7.2.10-1.module_el9.6.0+173+efaf9205.noarch.rpm d9641067b51be2618121118a90f958ee05b5100f3e7b13973432c4ab7160cdb0 ALSA-2025:12083 Copyright 2025 AlmaLinux OS 0 1 Moderate

icu security update

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. Security Fix(es): * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libicu-devel-67.1-10.el9_6.x86_64.rpm 02588f237c80548cd6ff495d4e4ae5cbc4cad1ab21ad96da7a8ea0fc90b020b1 icu-67.1-10.el9_6.x86_64.rpm 27eee4ecfe2e4fd13bd6ca4ef5ce5fe4a715bb1c6d75101c757e105659f86170 libicu-devel-67.1-10.el9_6.i686.rpm 7749007566a3135ebecab4177c753b666d910949838b042158b2a261e7fac660 ALSA-2025:1210 Copyright 2025 AlmaLinux OS 0 1 Moderate

tbb security update

Threading Building Blocks (TBB) is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default tbb-2020.3-8.el9_5.1.i686.rpm 327cfbb281de830daf017ac84b1e0bb3c209f8bdd657f1fa4f70ac91f918ca5b python3-tbb-2020.3-8.el9_5.1.x86_64.rpm 4058a1ce52065918da217b0eed1497650a0ffcd4ce8f1b5649ef07f21ac31790 tbb-devel-2020.3-8.el9_5.1.i686.rpm 6922a25ddde538ab8b5b038ee3e7047d80a966111d1fcff71cd71d7cfcb8ccdd tbb-2020.3-8.el9_5.1.x86_64.rpm ac1a8e6e01bb12ae7ede5d0d06584ec2434a5cbcc427d97abd4cdfc6bcc5366c tbb-devel-2020.3-8.el9_5.1.x86_64.rpm c555cd9d705a8a582009cb8e166b167ae872d93e0d240849b361367c90e17447 tbb-doc-2020.3-8.el9_5.1.x86_64.rpm e2a51212223b8bdee0358b277d49ecd82f3de0484e5257138466a46495a90250 ALSA-2025:12100 Copyright 2025 AlmaLinux OS 0 1 Moderate

libtpms security update

The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines. Security Fix(es): * libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libtpms-0.9.1-5.20211126git1ff6fe1f43.el9_6.x86_64.rpm 28e26145d2abd61f276627003f8ef8b438fbea6f965fc053c442c593d76afe26 libtpms-0.9.1-5.20211126git1ff6fe1f43.el9_6.i686.rpm effbdf9cbfce6e5b12d0eb971b81332dc15be2eeec73f024c090058a0c51e27b ALSA-2025:12187 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028) * firefox: thunderbird: Memory safety bugs (CVE-2025-8035) * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031) * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027) * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030) * firefox: Memory safety bugs (CVE-2025-8034) * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033) * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032) * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default thunderbird-128.13.0-3.el9_6.alma.1.x86_64.rpm e53ea4bb99e3d8e7cc6c7073615df36220afb158d77dd40bb69c15fd8c8ca14c ALSA-2025:12280 Copyright 2025 AlmaLinux OS 0 1 Important

jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default pki-jackson-annotations-2.19.1-1.el9_6.noarch.rpm 004448294b369b31bb70d2f1e1feb823f92d7f5785b7e2bea5ae9f40f7a2b51b pki-jackson-core-2.19.1-1.el9_6.noarch.rpm 243f145c8799fb698a266151b9c7aafe94c83a343cc44f0da497d0028d623cc7 pki-jackson-jaxrs-json-provider-2.19.1-1.el9_6.noarch.rpm 464fb4c458c52ac48d297423964b79899f7ed89c6ba69f09d68c34f371406a27 pki-jackson-jaxrs-providers-2.19.1-1.el9_6.noarch.rpm 8806f6149c80621f8eaba5fc00c5d97334c3074990a4d88ef90135644aa1e641 pki-jackson-databind-2.19.1-1.el9_6.noarch.rpm ac248e7a3dadbddc93574e6d812179b061f20c0a2a7d211248ba14673f685d29 pki-jackson-module-jaxb-annotations-2.19.1-1.el9_6.noarch.rpm d6883c249a98e8768aeeafee063b37a5705fdfcc8bfaba3d26ccd42615970b2f ALSA-2025:12447 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libxml2-devel-2.9.13-11.el9_6.x86_64.rpm 2467e218e09fc43d6f1ee1cf985901989bf65755ead69734045712a06b439f20 libxml2-devel-2.9.13-11.el9_6.i686.rpm c5ef442abdf1bdb9f994e21690be6aea39b26cd511e6558eb7b543819e130312 ALSA-2025:12519 Copyright 2025 AlmaLinux OS 0 1 Moderate

python-requests security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3-requests+socks-2.25.1-10.el9_6.noarch.rpm 29a6c050749e8e45500e9319c24a916f761b5c952abd8a222671c049d77c92e8 python3-requests+security-2.25.1-10.el9_6.noarch.rpm 5ce5843872b15a95ca2b6b6f40658941b22f0db0b36fdef207fbd9f139762d45 ALSA-2025:1262 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default kernel-debug-devel-5.14.0-503.23.2.el9_5.x86_64.rpm 1fd55b092fa116942d51b1a24a37c2d1e074ea0d3d73430415afb609b4384f1e kernel-headers-5.14.0-503.23.2.el9_5.x86_64.rpm 324d4992d3da602a592ae97bd5dbc6ce3bbb666677b71e198e33755e11a55d4e perf-5.14.0-503.23.2.el9_5.x86_64.rpm 7b0ccdc9ef1213359dd3dc19ca4adf5196b19d568840100c6e5a2305815e7951 kernel-debug-devel-matched-5.14.0-503.23.2.el9_5.x86_64.rpm 98f8eb218be82072930f7c1ec82e297e615d23adf04e2d725d2cd76555e3caf9 kernel-doc-5.14.0-503.23.2.el9_5.noarch.rpm ad343e2e5557a6d549fc41ab4b55f553a5ce6217f46a75402424afb90812e392 kernel-devel-matched-5.14.0-503.23.2.el9_5.x86_64.rpm ae3d4c1220dcdd3fa98b3fda07d5a8b25706f2fcee93202ef49f1d3d5932134f rtla-5.14.0-503.23.2.el9_5.x86_64.rpm f4806907538f2136a8b5631239f242273eeccd6c81489994a22b2f06c85ce47b rv-5.14.0-503.23.2.el9_5.x86_64.rpm f764c9eb56d9462ae953ee03f98fbea8377db683f92abe4862231b8ac65d5048 kernel-devel-5.14.0-503.23.2.el9_5.x86_64.rpm fa4691e53a27377e3d92ac2a67902efe7fef1e2d3086398bff5d077d5cba3474 ALSA-2025:12746 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727) * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929) * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962) * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020) * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890) * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052) * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-debug-devel-matched-5.14.0-570.32.1.el9_6.x86_64.rpm 0d3f53ed94e5f5b405e2f5efdb7af15428edaa53076af47557501581cbe35232 kernel-doc-5.14.0-570.32.1.el9_6.noarch.rpm 188a599f3b9dcd313c11cc5e7329aa40c9078144c79f3b6a7be334d175bbc647 kernel-headers-5.14.0-570.32.1.el9_6.x86_64.rpm 325ac7176febf9a334245bb6b66d91648174bb92fa88a7529ff17a51cd5d1ce7 rv-5.14.0-570.32.1.el9_6.x86_64.rpm 3b6b0e18860ff2ca1b5eeee95b0cd043633451fc6ab9741edbe62b77a0bbe89e kernel-devel-5.14.0-570.32.1.el9_6.x86_64.rpm 4ed5e073e9e190731661f672077683c3d188e1140c4852bbbf247d94ade5573a rtla-5.14.0-570.32.1.el9_6.x86_64.rpm 6f8d89dd640f89e4b6f8c3469a607c57f3547b891c0a2b8d5a806cb979e69a1a kernel-debug-devel-5.14.0-570.32.1.el9_6.x86_64.rpm 8207cdeb9276640604a134b00cfc11210f17883bf59ac0574d7e6ba9ceed0451 python3-perf-5.14.0-570.32.1.el9_6.x86_64.rpm 9f49857d5c01c30a4be612844e613498c2ae4fdf51a5011aeb3096268cd02c5d kernel-devel-matched-5.14.0-570.32.1.el9_6.x86_64.rpm b98b9d6de5ca82f392b77919bff4b2864a542bbd8da9b28054d45cbbe383a006 perf-5.14.0-570.32.1.el9_6.x86_64.rpm e834bcac6aeb0fe62c5624a2d588565d6907230399e7c413f583bbd9c8507aac ALSA-2025:12831 Copyright 2025 AlmaLinux OS 0 1 Moderate

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default opentelemetry-collector-0.127.0-1.el9_6.x86_64.rpm 214cb17429b01ad398a332f8a831174aa8db471b4d3ff86754dfe51c18bfb27b ALSA-2025:12834 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.12-setuptools-68.2.2-5.el9_6.noarch.rpm a79161142b7cad19b3935433516c3b92ab60a0fa44916bc0de99529e80ff1785 ALSA-2025:1300 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc-toolset-14-gcc security update

The gcc-toolset-14-gcc13 package contains the GNU Compiler Collection version 14. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default gcc-toolset-14-liblsan-devel-14.2.1-1.3.el9_5.x86_64.rpm 012da589c02141d8400b95a69fb3165b96925ba960aefcb0e16f8a897c130411 libasan8-14.2.1-1.3.el9_5.x86_64.rpm 035f523aedd2dd3a0d0907d0b6aa9ce87bea704637adebf43f01ff1818378736 gcc-toolset-14-libstdc++-devel-14.2.1-1.3.el9_5.x86_64.rpm 0696327a049bc250102c494fb42cfcd65dcb0fe9156c999f49950a4bafcab522 gcc-toolset-14-libstdc++-devel-14.2.1-1.3.el9_5.i686.rpm 140514c5e63430ccff30fda09cf3389ae7b1f863898a204bdcbbabc251a0fab0 gcc-toolset-14-gcc-gfortran-14.2.1-1.3.el9_5.x86_64.rpm 1bc82d707d4a8d2f9214cd974a9d1c1d27141881ecd747c43d5078381f8dcee8 gcc-toolset-14-libubsan-devel-14.2.1-1.3.el9_5.i686.rpm 1c1394a5c5faa9984971e201f82ee2e0a33bab1ae911c8adeb6cc29464389c77 gcc-toolset-14-libgccjit-devel-14.2.1-1.3.el9_5.x86_64.rpm 26d1fb29a0a8fe67208aa6b6c164362de871ac0121a77e7cf0b1324192aa9d21 gcc-toolset-14-gcc-14.2.1-1.3.el9_5.x86_64.rpm 2f0eb0964e8070680505f41b8e45a995557fdfc4fc6522fe24c3b90fe0ba1ef1 gcc-toolset-14-libasan-devel-14.2.1-1.3.el9_5.i686.rpm 3f0b0b0b910b30eea4888d5754088ef0bfae1bb77c11eae30ce492ea12b153cf gcc-toolset-14-gcc-plugin-annobin-14.2.1-1.3.el9_5.x86_64.rpm 44716fefea326396d789223448956760de0233015d6c977234fd74597fc3da7f gcc-toolset-14-libatomic-devel-14.2.1-1.3.el9_5.x86_64.rpm 4f6c3534b83c754cfa3df8e10d13a8ad7c01683802202417daa537ccc55dae7e gcc-toolset-14-gcc-c++-14.2.1-1.3.el9_5.x86_64.rpm 59d346b607e3ea65abb31e735b603347aed67c5938379cba83d1ab1d91b067aa gcc-toolset-14-libubsan-devel-14.2.1-1.3.el9_5.x86_64.rpm 76a02a2405a5ee051fc14f2ace8446ef172c5bc3ec8fdaabdcd1db7315338eef gcc-toolset-14-libtsan-devel-14.2.1-1.3.el9_5.x86_64.rpm 812e84f90b1da42500e8898f85e68936bf27dd8b05703725fad09ce9e5036583 gcc-toolset-14-libasan-devel-14.2.1-1.3.el9_5.x86_64.rpm 819457443933136ac6d7c35e76064fd1b8f70e047cd116cf3cd7ee817acee41d gcc-toolset-14-libgccjit-14.2.1-1.3.el9_5.i686.rpm 894c9cd83dd1e77488eaee98266a910ef88c1d4369fad8b84b8ff9bd2a27bccc gcc-toolset-14-libquadmath-devel-14.2.1-1.3.el9_5.i686.rpm 8986d9752ea092b5b040fb795c2b20f6bcba0a9ed46178ae0343136dc8446e77 libtsan2-14.2.1-1.3.el9_5.x86_64.rpm 9247839521734376ba31b1cfea42f0f96ec971f5cea7cfc779cf565a2cb2e7a2 gcc-toolset-14-libgccjit-14.2.1-1.3.el9_5.x86_64.rpm 9faf45923a3b954c57e1f0911592d7f603c0d61e91746d7c6d5fbfbd0f879fbd libasan8-14.2.1-1.3.el9_5.i686.rpm a622baa845f654c0498eecd3e6500f97115f074a21e093a286b6b2bb5a46fb25 gcc-toolset-14-libstdc++-docs-14.2.1-1.3.el9_5.x86_64.rpm aac4247d9b20a9589c1fa45a0185ae35b78a9e5d94d09521b677703324d262dc gcc-toolset-14-libatomic-devel-14.2.1-1.3.el9_5.i686.rpm b34e19902ff4f43e6fd1484da1c8330f65d5bb9396b2446066cc59d4049aa55f gcc-toolset-14-libquadmath-devel-14.2.1-1.3.el9_5.x86_64.rpm b4de7e5f779f1cb8727cabc98e2d2fdc20b024d89c49140b4f6b0ebb6fdab3de gcc-toolset-14-libitm-devel-14.2.1-1.3.el9_5.x86_64.rpm c188204aca00c6522c3f0896a592fd7543c3545f6cc55673d4c8ee1a74039392 gcc-toolset-14-offload-nvptx-14.2.1-1.3.el9_5.x86_64.rpm c5a624413f60541df272415dacc508a961492178547cde2237a8b19b592c83a1 gcc-toolset-14-libgccjit-devel-14.2.1-1.3.el9_5.i686.rpm ccd505a094071e6874722f55538f0560409cbf2ef7a48d348589809b6e287bd1 gcc-toolset-14-gcc-plugin-devel-14.2.1-1.3.el9_5.i686.rpm d4e111ca9616d77a25393837371582d1a2c22d302770758a7fa573bd74e76f1c gcc-toolset-14-gcc-plugin-devel-14.2.1-1.3.el9_5.x86_64.rpm d7aff6d15fa6f73b9f95bc885a7c4fa201da04688fc14125ebdf1a499ce08d7e gcc-toolset-14-libitm-devel-14.2.1-1.3.el9_5.i686.rpm fb6f7d4b266ee236c6f77b84138f879440cba07bbbecb7cbf619a760c71f3862 ALSA-2025:1309 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc-toolset-13-gcc security update

The gcc-toolset-13-gcc13 package contains the GNU Compiler Collection version 13. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default gcc-toolset-13-libgccjit-13.3.1-2.2.el9_5.i686.rpm 0da880b691b8a3779d4dbd15ef8b7d6477154469a3b1c6dfa37ea091c366ad14 gcc-toolset-13-libasan-devel-13.3.1-2.2.el9_5.x86_64.rpm 13eac5170fb0220694779be0e8b9b7da49583d7d302ddea388e9eac709f88036 gcc-toolset-13-libasan-devel-13.3.1-2.2.el9_5.i686.rpm 2065259125b91055921805c3681f4cb4c8482e16c54800601050ab247ab5a3fb gcc-toolset-13-libubsan-devel-13.3.1-2.2.el9_5.x86_64.rpm 2541b88057d9fa353ae8d4afc63bcaec7379abb0c70ee9ea8b756d355166a6d4 gcc-toolset-13-liblsan-devel-13.3.1-2.2.el9_5.x86_64.rpm 2d8d1fcfd951ed6eeead71b549dbbab79c06ff3fb27650f66fa3929123fe6ebc libasan8-13.3.1-2.2.el9_5.x86_64.rpm 3a16c8ed8a434201c453f386f9c2981f6fbc638058e5007e3677d5db27d7be3e gcc-toolset-13-gcc-gfortran-13.3.1-2.2.el9_5.x86_64.rpm 426d867b3b797d01145cb7bc403e3e30695da826b9b86daf64917f964576bb9c gcc-toolset-13-gcc-plugin-annobin-13.3.1-2.2.el9_5.x86_64.rpm 459f6d9fc9c34a52ea2d11f41400df368122d846da72398c3de1c63ecc370f06 gcc-toolset-13-libatomic-devel-13.3.1-2.2.el9_5.x86_64.rpm 47f92bdb7fa37a84a218bb887aedb5932b44bc080f3248c2749d1ce07271d0fc gcc-toolset-13-libubsan-devel-13.3.1-2.2.el9_5.i686.rpm 50d5e0613662cf8471128e79cdae227abb0f86254164bf8b8401bc45eb694b73 gcc-toolset-13-libgccjit-13.3.1-2.2.el9_5.x86_64.rpm 51bc201ef8f3b20f52ac148e8517748d1774c129d068586fdcccac7d43331c0d gcc-toolset-13-libtsan-devel-13.3.1-2.2.el9_5.x86_64.rpm 5cf0fa3bc381079ab665ad76f4c849d8b7b2ed3f954c237ca46677e803af6877 libasan8-13.3.1-2.2.el9_5.i686.rpm 62c799cbd649b01d0e317f64d5741344ed80a3bad33d975c394a9111afe19e00 gcc-toolset-13-gcc-plugin-devel-13.3.1-2.2.el9_5.i686.rpm 840371f56e8a9294ea4cf8f6a35e5b39c6a86fffeb536544241ecb49f18dec85 gcc-toolset-13-gcc-c++-13.3.1-2.2.el9_5.x86_64.rpm 85892631c51561d1f0f1aeb153c30d8ceb87ce5a4f9caee6eef65cab50dffca7 gcc-toolset-13-libatomic-devel-13.3.1-2.2.el9_5.i686.rpm 87c2fd19ebe668348c0df4d6eae28b41008eebd3ab0a0b497aa3e8d732b29b3e gcc-toolset-13-libgccjit-devel-13.3.1-2.2.el9_5.i686.rpm 87c79b19c5e3ef8e40770d12af00fb687179087acf091ca4cbe026e2bfafe252 gcc-toolset-13-libquadmath-devel-13.3.1-2.2.el9_5.i686.rpm 936f3d84a3bacb3a3a929793e6fea10f1fca422a8a802f47bded43bbaecd7804 gcc-toolset-13-gcc-plugin-devel-13.3.1-2.2.el9_5.x86_64.rpm a970b3bfe02613f13a7b41a2d5cb4b0e231e7b19cd327bf14f8207f16e235a12 gcc-toolset-13-libitm-devel-13.3.1-2.2.el9_5.x86_64.rpm ade037b5e912094eca798e5d03ae2aa737760ee230bc63413effe1f5a30afe41 gcc-toolset-13-libgccjit-devel-13.3.1-2.2.el9_5.x86_64.rpm d97bf9e0096995156fd7f38c55f29dc9363a7bba8276384dcc4226e9bcc2a130 gcc-toolset-13-offload-nvptx-13.3.1-2.2.el9_5.x86_64.rpm dfc49461bf9a44fc22cd1a4759237e3faba9915bc145b2c92127ba7db53bedcd gcc-toolset-13-libquadmath-devel-13.3.1-2.2.el9_5.x86_64.rpm e5f99bdcb26a5a52ec5b8b402032d2cd9c44a8d2033965f57649e379a2404352 libtsan2-13.3.1-2.2.el9_5.x86_64.rpm ea8ee7b59c39e57306fb3b7c275e7ded62d37833c325a76ef08f7d219f641641 gcc-toolset-13-libstdc++-devel-13.3.1-2.2.el9_5.i686.rpm eb90f7974693570bf930863938b9900e3df8b331d10c8731c58eb09551b99876 gcc-toolset-13-libitm-devel-13.3.1-2.2.el9_5.i686.rpm ec990029e758a8c990edf18b108b2a59db9d467264574b9e4a827ff82d5f56ef gcc-toolset-13-gcc-13.3.1-2.2.el9_5.x86_64.rpm f5cff13a3d7ac1705b0ad44b7004e9207e37f03b53407f01eea58d41660508d6 gcc-toolset-13-libstdc++-devel-13.3.1-2.2.el9_5.x86_64.rpm fe21247c2be8f9417060e787f0ac9df9e629a6dc831ea230289a45bf1a54ccf9 gcc-toolset-13-libstdc++-docs-13.3.1-2.2.el9_5.x86_64.rpm ff938ee57e42092b1e64d04d4f5edf4a2a914d47aa8af9acf5db9c1937023d7c ALSA-2025:1330 Copyright 2025 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default openssl-devel-3.2.2-6.el9_5.1.i686.rpm 555fdfd15c86335775217435491cc3371f161d7cb2c4231ef570cb19d4805df7 openssl-perl-3.2.2-6.el9_5.1.x86_64.rpm bb63f733d87f872301fe622c8854acbfb76093ff644d0006276b7014fbab6068 openssl-devel-3.2.2-6.el9_5.1.x86_64.rpm c9289d08ff90d25cb34b15de4e6ca78da12cebfe1ef6aaba956395eb48a3fdf7 ALSA-2025:13428 Copyright 2025 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414) The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): The libxml2 library is a development toolbox providing the implementation of various XML standards. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414) * libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libxml2-devel-2.9.13-12.el9_6.i686.rpm 47b4b9566c92959de114bf19a2e866db5cde33211b758e99cd66d3980133f603 libxml2-devel-2.9.13-12.el9_6.x86_64.rpm d3342e47a2460f0fb226eae908bf0a4417de63dace4a181aa5447c1a7b7274fe ALSA-2025:1346 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default libubsan-11.5.0-5.el9_5.alma.1.x86_64.rpm 113f41cd31f0898b6ea7de6363e2735e49b3e790d760c067c049cf705dacf0cf libitm-11.5.0-5.el9_5.alma.1.x86_64.rpm 195f5eb268bf0acb76595bdd60b0115cd5a09fe49db5f3ed8f1b03275f42e2bd libquadmath-devel-11.5.0-5.el9_5.alma.1.i686.rpm 1af007f3d87143557b479bc5b97e96b58c130b54fca0ae4b5e02c23f2cd00939 gcc-c++-11.5.0-5.el9_5.alma.1.x86_64.rpm 1bd74595c98fc6748967fa99b2610e08c0643ed40f27df91c40a0df8c6198e98 libgccjit-11.5.0-5.el9_5.alma.1.x86_64.rpm 23874aac64ccbccb6d4e377f344d90e30acee628127633e33388ab9aecc0be76 libubsan-11.5.0-5.el9_5.alma.1.i686.rpm 247a744cfac5d56d22e7182496676fda4ffc39a17a55c73c4a94ae9e8c2295d9 gcc-11.5.0-5.el9_5.alma.1.x86_64.rpm 29f6259e036aea564c8359938a5866c2416d17a0167adbc1282dd00f8069cd6d libgccjit-11.5.0-5.el9_5.alma.1.i686.rpm 437268082abfe0d42b6a355b27c409e9e7a782495f3893bde87b425262dedaf6 libquadmath-devel-11.5.0-5.el9_5.alma.1.x86_64.rpm 4505b5f1e2880e0e0ff931e7d923cf2a44abd068c37b7ec9a0a3fddcd476de6b libitm-11.5.0-5.el9_5.alma.1.i686.rpm 4ca1937009f64ce3ad8afe949143cda2ccdf09df5b5f00a3b571cfd4cc922874 cpp-11.5.0-5.el9_5.alma.1.x86_64.rpm 4e729356967e5695530f35f2317e817e2aa2776cdcf0718a70cbc488a2ae4953 libgccjit-devel-11.5.0-5.el9_5.alma.1.x86_64.rpm 5337e53798d0a9b92a4e0edc944edc42d18d1050d3357ae67d290216fedf69ff gcc-gfortran-11.5.0-5.el9_5.alma.1.x86_64.rpm 5c7e16f397a31a71ef621070db4d9cd85537d2dc9a0ffd79756477f65d80c3d2 gcc-plugin-annobin-11.5.0-5.el9_5.alma.1.x86_64.rpm 64d1af6e4f5564386fb3f3fc45f64f1ec620dc7cdeb60e7ac8b48916746b4ad3 libasan-11.5.0-5.el9_5.alma.1.x86_64.rpm 76d872bcdb2eefe489fa9534f702cd6b2609da28524c71bf4e884ce7bb539418 libgccjit-devel-11.5.0-5.el9_5.alma.1.i686.rpm 792efb6e5fb98afe9179b0a01b65fa64c10a337e8821c9232ef18eab034b4c3f libgomp-offload-nvptx-11.5.0-5.el9_5.alma.1.x86_64.rpm 8a8b291ebc4ea13edb553e4e43a539249bfad70c25eb3213cff0d1ec34804d3b libstdc++-devel-11.5.0-5.el9_5.alma.1.x86_64.rpm 93c8bbfb8e5a30faf05479a05fe25db1c32078686238397392530032e1fcf413 libitm-devel-11.5.0-5.el9_5.alma.1.x86_64.rpm 9704671ca8fd67f7b08d8238576a8076d9c20c2634ce98376b15b8ca9b0010a7 libitm-devel-11.5.0-5.el9_5.alma.1.i686.rpm a0864970e98e7ef94c81322a647f9aa663fe03a3829c9269acfaa3ba358fb6cd liblsan-11.5.0-5.el9_5.alma.1.x86_64.rpm b81eab069a8c022944d91ae0ea19946f0c86333e47c8612252a1209871c6b6d1 gcc-offload-nvptx-11.5.0-5.el9_5.alma.1.x86_64.rpm ba0a4d7c6d36d6ae3f6eca84ab8ded1b284746d3f0342ac675d266d4974619a3 libtsan-11.5.0-5.el9_5.alma.1.x86_64.rpm bfa978dbe8389e19b8a55c130b4e9a8fa977871ae47358651806bf052ffee8ec libasan-11.5.0-5.el9_5.alma.1.i686.rpm d351026140964cb277e0d149de4c18edf1f87a62ae7c45099ed5889428a2a71f libstdc++-devel-11.5.0-5.el9_5.alma.1.i686.rpm d564055768347858fdb6b0ea11fbb4e9ff876ac50d7338136eb34669249b9371 libstdc++-docs-11.5.0-5.el9_5.alma.1.x86_64.rpm f819eb7d42b7537e991a8714a624272b6dcb46545aaca65eeab0f9c2c240eb01 ALSA-2025:1350 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default libxml2-devel-2.9.13-6.el9_5.1.i686.rpm 25616a287e89862011438a4f64a6dd3cdb9bf803d3a086454d5388f33f1e6f6c libxml2-devel-2.9.13-6.el9_5.1.x86_64.rpm 5dfffb948f9d0b32637715b9ebdbf17be0a562bc52aa4e46e041132e1d348266 ALSA-2025:13578 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.11-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.11-setuptools-65.5.1-4.el9_6.noarch.rpm 3bbd1e54d2528438e395fb2c9d4fbabc0afd8867c15d7444f08cfa0a43addff9 python3.11-setuptools-wheel-65.5.1-4.el9_6.noarch.rpm c933e948175b386b2891bfa95f25574e3de4856e2ab60364f5c93a9cd5fa24a6 ALSA-2025:13602 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default rv-5.14.0-570.33.2.el9_6.x86_64.rpm 1c32a5bf00bddf07f4bb983cd8ccba7dfd94935e5458d500b15f421d403c4d48 python3-perf-5.14.0-570.33.2.el9_6.x86_64.rpm 363b3571d4940494e950e1cfc70103ffe36e6da16def64bc6b558d1ca561a200 kernel-devel-matched-5.14.0-570.33.2.el9_6.x86_64.rpm 47f345f8851d6440d30a6142d573c94ad0011a32f75db6f9863fd6da187b3562 rtla-5.14.0-570.33.2.el9_6.x86_64.rpm 4f04d8984166a05d44467b1b7c6d9819b51f748f08d6341fd873ff0a0832afba kernel-debug-devel-5.14.0-570.33.2.el9_6.x86_64.rpm 6d7928956f516524ad782788ecc045ca2c186ddf3b5c8c88021056bc29fa2dfd kernel-debug-devel-matched-5.14.0-570.33.2.el9_6.x86_64.rpm adb9811b705fbd9e48fc702f5925a2fc6338cfed512c01412e793137dd26c0cf kernel-doc-5.14.0-570.33.2.el9_6.noarch.rpm b17d250deb8082ff6f32327acccb98c12e7a58db0dcd109fe4a249a6426f4773 kernel-devel-5.14.0-570.33.2.el9_6.x86_64.rpm dbb364cb22717447d43c1f82fe4bd011ddabed30604157b71cdc4963adf4d814 perf-5.14.0-570.33.2.el9_6.x86_64.rpm f71ac8168caf13e3b8fdf31105f8260b909e94df0dc8d46930ab19b9a0ed03b0 kernel-headers-5.14.0-570.33.2.el9_6.x86_64.rpm fb97bdf7d97c42c41cae109fa4fa73f71272c0020832eaa4c09fe25922e95bfd ALSA-2025:13673 Copyright 2025 AlmaLinux OS 0 1 Important

toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fix(es): * nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit (CVE-2025-23266) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default toolbox-0.2-1.el9_6.x86_64.rpm 9063c64b6443067c80601795020d15e29269c77ec09a0f7f2c962eca6201f5d8 toolbox-tests-0.2-1.el9_6.x86_64.rpm eb7e699f71ad59beb3584e4e9c0de3d9013fa4d0548517632626b4e128f224d3 ALSA-2025:13782 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * angle: insufficient input validation can cause undefined behavior (CVE-2025-6558) * webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216) * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227) * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default webkit2gtk3-jsc-devel-2.48.5-1.el9_6.x86_64.rpm 00eadd7302ff4539ecae16dd8325c2c8f7f08584af601fca714c99a74bd8e978 webkit2gtk3-jsc-2.48.5-1.el9_6.x86_64.rpm 0dbc015b5f7584083e28c79528ede150027eca291ff009d026e31f5a70dfde32 webkit2gtk3-jsc-devel-2.48.5-1.el9_6.i686.rpm 3f1c427cc5009c6ac137f23b5a77f2a64315eb80d7d41a2e6b4ea5d843cd638d webkit2gtk3-2.48.5-1.el9_6.x86_64.rpm 7bec0801047bd5c985aea3bef953ee223f150e311c1cacbd47fa8f6301bc9c9e webkit2gtk3-2.48.5-1.el9_6.i686.rpm 83553095627a98bb61e5871e34e43c66ff2d15f6125713eb1d4d283112e2bb62 webkit2gtk3-jsc-2.48.5-1.el9_6.i686.rpm 8381a48ecae75bce2fc4b473f483b19ed9123d0c3e0ef631847a547f6a3cd8b2 webkit2gtk3-devel-2.48.5-1.el9_6.x86_64.rpm abadbc58ed9bd49bb3c47416c5e2c015266368a92c15ddf6f3becbe218c95fbc webkit2gtk3-devel-2.48.5-1.el9_6.i686.rpm e0fb046b604f535ada493e711cee153578551845fe5c8c5956ac62b9815756f4 ALSA-2025:13935 Copyright 2025 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * cmd/go: Go VCS Command Execution Vulnerability (CVE-2025-4674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default golang-bin-1.24.6-1.el9_6.x86_64.rpm 0b798322236760e00a11822fc8e1398f61d26bb746ccfb667977d3dda840fe1a golang-1.24.6-1.el9_6.x86_64.rpm 13db2ba7a5da399395b9e740c508030983f4ddb9375e45ba94368b6d4efd8ed8 golang-tests-1.24.6-1.el9_6.noarch.rpm 3e979194a930d315da6e1d4c2862d63713132fe833d4c743998b27c90734b88a golang-misc-1.24.6-1.el9_6.noarch.rpm 665118655522de2908ac73a38bf76662b6d7af9f3bdc7f23455d230a930e5d21 golang-docs-1.24.6-1.el9_6.noarch.rpm 6be21eeb7d47530ff343e6857d1b47c72975b79d526bb6f8cb6b80967e8e5269 golang-src-1.24.6-1.el9_6.noarch.rpm 93f3d8e82b0aaa4e4ba39f65ba558b39772fb4c83758a9e537ad377b2f8b841a golang-race-1.24.6-1.el9_6.x86_64.rpm 9bfdb0e37196042cf07fe60a1d1b91ff2ea02da2df4c22857566f4c66f1270f4 go-toolset-1.24.6-1.el9_6.x86_64.rpm c9cb55aca08421b0931e2549e5dccd3a83e7a2eb0d334dccf4a9c13e43ca68f5 ALSA-2025:13962 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867) * microcode_ctl: From CVEorg collector (CVE-2024-28956) * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084) * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085) * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124) * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159) * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250) * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380) * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default perf-5.14.0-570.35.1.el9_6.x86_64.rpm 0dec3c0f20c90a037f9f9cc63a679452f27117f23b28a890e1fedce0fa747bfa kernel-headers-5.14.0-570.35.1.el9_6.x86_64.rpm 125e1ab1297a44a379416a729101f0bf5d8e06fdf760f93ee6374c810c98a3c5 kernel-devel-5.14.0-570.35.1.el9_6.x86_64.rpm 1db11c6bfbd54218a9cce3577158636d515b135be5ee968a57949afe4effe1ac python3-perf-5.14.0-570.35.1.el9_6.x86_64.rpm 2457145049d8ecccf3f3ba6ae168fce7d9a208ea95fcfd17fb7ccaf35e483ab0 kernel-devel-matched-5.14.0-570.35.1.el9_6.x86_64.rpm 3152af62d2af02fc7bcb9796fc9ed9cdc60e80ffc078288603d06bc9d498f7bb rtla-5.14.0-570.35.1.el9_6.x86_64.rpm 4a4082f6af288a9f14b679d60a39b0b2f2b378e7697d27c9ab0d8302ee848649 kernel-doc-5.14.0-570.35.1.el9_6.noarch.rpm 9c2dc9051e9e61e16119c5d58d0b83cb49316586f4124f89368d477e8edbf724 kernel-debug-devel-5.14.0-570.35.1.el9_6.x86_64.rpm ade05fa87afd7a61b3bae4194bf188c6fe3a8c407a8830a4e04403ee8ec4dea5 rv-5.14.0-570.35.1.el9_6.x86_64.rpm c537598a05d70403b29e884724f8a85b2dd2e033f24d9b05e2578095cb7a76d5 kernel-debug-devel-matched-5.14.0-570.35.1.el9_6.x86_64.rpm f90604c9e7931c896c2d4da2cb93df0290f1477b61202b3644857e2d73529da1 ALSA-2025:14075 Copyright 2025 AlmaLinux OS 0 1 Moderate

xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. Security Fix(es): * xterm: Buffer overflow in set_sixel in graphics_sixel.c (CVE-2022-24130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default xterm-366-12.el9_6.x86_64.rpm 64b77f0eac4a672872305423d4bb1f70a65ec04dd0faff20ffda662ca66e0c0f xterm-resize-366-12.el9_6.x86_64.rpm ea470b1711900a804477233e584ed715e3785e47f772897b1e7474d17ae9da72 ALSA-2025:14130 Copyright 2025 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default bsdtar-3.5.3-6.el9_6.x86_64.rpm 39e1bb8497f4d459146ea547ca33f4a830fe6e429b78a3f077844f907e07745b libarchive-devel-3.5.3-6.el9_6.i686.rpm 78a4ff23930edf5e6ca6d4031ab356262e663f5637882bddb954167acd8ec725 libarchive-devel-3.5.3-6.el9_6.x86_64.rpm c07c946772d303f02a3f892a1a385871a9d218c71e614550d43f9eae68640416 ALSA-2025:14181 Copyright 2025 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat DoS in multipart upload (CVE-2025-48988) * tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) * apache-commons-fileupload: Apache Commons FileUpload DoS via part headers (CVE-2025-48976) * tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) * tomcat: Apache Tomcat denial of service (CVE-2025-52520) * tomcat: Apache Tomcat denial of service (CVE-2025-52434) * tomcat: Apache Tomcat denial of service (CVE-2025-53506) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default tomcat-jsp-2.3-api-9.0.87-3.el9_6.3.noarch.rpm 3d1b2f60c937138eabe2a357da202ce1e61407aaf1616e6636ffdb263d80eeff tomcat-admin-webapps-9.0.87-3.el9_6.3.noarch.rpm 557fd1368406aa21877f8e8d659b54ca1dd55cb657555f0672c46c69ae0fd2d4 tomcat-el-3.0-api-9.0.87-3.el9_6.3.noarch.rpm 55d082d20841c00e2b3d849f9bc6bc808658ec95f9c55afd25f9ef4a890a6c6e tomcat-lib-9.0.87-3.el9_6.3.noarch.rpm 60dc40355b5199b744c4e87c95aea98eef6b463881fb693fcdf9a5cff1e8fbe9 tomcat-docs-webapp-9.0.87-3.el9_6.3.noarch.rpm 8eb1f3d95d9f23b78e0d9c85b4fb6e5b9a81c47c74e5aac9045745ac9811aa28 tomcat-9.0.87-3.el9_6.3.noarch.rpm 9238596ca9828174c3c53c5045a85daad045caa5c2f5bebe482aaaafb2f01a33 tomcat-servlet-4.0-api-9.0.87-3.el9_6.3.noarch.rpm 927f314c3f4a4cdf02014141604408eea896e608ce5cb8e84c4701181bafb6b6 tomcat-webapps-9.0.87-3.el9_6.3.noarch.rpm e7004fac42215d59539ca6924f81d84a43afaf93ca89f3a4e773f49e2682545a ALSA-2025:14416 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182) * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179) * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180) * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default firefox-128.14.0-2.el9_6.alma.1.x86_64.rpm 4802c1ec781c1a1731e20f8787906f79b179038aff114117603224329cdec673 firefox-x11-128.14.0-2.el9_6.alma.1.x86_64.rpm d885f6dff31081629f0b946fcef06ab84d86cb04fdca38ee1e7f0c794d2537b3 ALSA-2025:14420 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Fix memory accounting leak. (CVE-2025-22058) * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914) * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default rv-5.14.0-570.37.1.el9_6.x86_64.rpm 326ace3ef69dc0c83fac963a536cd11046e09c5db5227e4733df94809d800a7a kernel-debug-devel-matched-5.14.0-570.37.1.el9_6.x86_64.rpm 6152bb669a51d0c6c3b3d77c7e6f19d3879835aaab524890c819a09ea7e3d5e9 kernel-devel-5.14.0-570.37.1.el9_6.x86_64.rpm 63f9c6f55d630055c1e95c3d99ab3258fee74ad237577268aa64fe36a8f2fe49 rtla-5.14.0-570.37.1.el9_6.x86_64.rpm 7152c7d147723619a3410549dd715528ec34d9833a3e50588801642fb9a77b86 kernel-debug-devel-5.14.0-570.37.1.el9_6.x86_64.rpm 753b67aca459c3553418097eba12e7ab4aa1fa34c65b23efbea37d9ef9a1b94d kernel-headers-5.14.0-570.37.1.el9_6.x86_64.rpm 820f32d143b66ab1bd3e2511a293ec17c4ea6192dc4268832fef6f6192bf698a kernel-devel-matched-5.14.0-570.37.1.el9_6.x86_64.rpm ca1e23cf08eff9b5142344f1d84b6410a134b9acaa0718c237de9c633797e3a1 perf-5.14.0-570.37.1.el9_6.x86_64.rpm db08778793dde71e50d2c1225f8cb6732571291087b585629152f1bce558b661 kernel-doc-5.14.0-570.37.1.el9_6.noarch.rpm e00b33a85bacd8049e46d4d900f7d66d95674050f43ee8a6dd49265cd32b10f5 python3-perf-5.14.0-570.37.1.el9_6.x86_64.rpm f7ef5e0dd1ab0aacc64609974e5fa40c4a8dcc2a2ee63fd39f06843bd25b6f2b ALSA-2025:1443 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150) * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083) * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default nodejs-full-i18n-20.18.2-1.module_el9.5.0+137+381f3eaf.x86_64.rpm 3ed56a6a72949ec79152fb0a5a69bcfd1f5f1c17b1ad9a6d09b099ec2514a89b nodejs-20.18.2-1.module_el9.5.0+137+381f3eaf.x86_64.rpm 537bdebc15c08bc48e461103e0d0c014c8191d9fe1101e894375abb94262159b nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm 6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8 nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm 8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f nodejs-docs-20.18.2-1.module_el9.5.0+137+381f3eaf.noarch.rpm 89461b6ac62cedc048af335c1d731fe920e824dcd6aa21c8afd28ce8da18fae7 npm-10.8.2-1.20.18.2.1.module_el9.5.0+137+381f3eaf.x86_64.rpm c19d26dc65ea00acdfbd0b9e1f83b3670ac8561df75fc4efe0b53efbf6a68ca7 nodejs-packaging-bundler-2021.06-4.module_el9.5.0+124+df88fe49.noarch.rpm cb21fb7f8fb0ef5afe10bf3cfbdd7c7d11c15d5c6b567e91a1a2b2256a2424a2 nodejs-devel-20.18.2-1.module_el9.5.0+137+381f3eaf.x86_64.rpm e884f0d984326d171e815cc7d8c3c6ce65779c46a83ad33d6947283adc8f4e7d ALSA-2025:1446 Copyright 2025 AlmaLinux OS 0 1 Moderate

nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150) * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default nodejs-docs-18.20.6-1.module_el9.5.0+136+92f38f3c.noarch.rpm 44794d60a66eef706a67719d77d8b9cbb1ca037963058fa7386dc40b5163b921 npm-10.8.2-1.18.20.6.1.module_el9.5.0+136+92f38f3c.x86_64.rpm 55e495cb78d35f434f8fcb61bfb89f5973998c69fca8504d187c9e3c0a293cbd nodejs-18.20.6-1.module_el9.5.0+136+92f38f3c.x86_64.rpm 5e2ad73630f7f24aac4ea04c135d850b999210a2b9a60ea4e45182f96c4aebf0 nodejs-devel-18.20.6-1.module_el9.5.0+136+92f38f3c.x86_64.rpm 660531cc7c0b91d9d806fd31bc9d059114362d4e466aa4efcd038652e116553d nodejs-nodemon-3.0.1-1.module_el9.5.0+136+92f38f3c.noarch.rpm 9568f3f288eb90ba5d978da40785d16e3210b65e92276e8ca17b6d88a3339c1b nodejs-full-i18n-18.20.6-1.module_el9.5.0+136+92f38f3c.x86_64.rpm 9f23ffd5bc931b553b308e966523d20fcce6515fe50096d9cd4a6a73327dda4a nodejs-packaging-2021.06-4.module_el9.5.0+136+92f38f3c.noarch.rpm bfb954cf0a070014a29b11e53507cb0f05b992c7e1bf6cb568840bb815dca58e nodejs-packaging-bundler-2021.06-4.module_el9.5.0+124+df88fe49.noarch.rpm cb21fb7f8fb0ef5afe10bf3cfbdd7c7d11c15d5c6b567e91a1a2b2256a2424a2 ALSA-2025:14493 Copyright 2025 AlmaLinux OS 0 1 Important

aide security update

Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions. Security Fix(es): * aide: improper output neutralization enables bypassing (CVE-2025-54389) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default aide-0.16-103.el9_6.2.x86_64.rpm fb14bb3eef49984124ee5d3dff33354a47e16cb564bd9bdef5ef74179b3e7068 ALSA-2025:14640 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182) * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179) * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180) * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default thunderbird-128.14.0-3.el9_6.alma.1.x86_64.rpm 3e084c3bf6f55db35f08a13ae0eedd08b464dcc20dee4f01f67ebcc3bc29bd3b ALSA-2025:14827 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default pgvector-0.6.2-2.module_el9.6.0+167+4e561146.x86_64.rpm 1141f322652c8d905035a08a39e707d5192236d5b4b442802732b66a0684e10f postgresql-pltcl-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 148edad61129f888a28debad89541d2b102910e30b5559ff868a182fbb4481c4 postgresql-private-libs-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 1ed29de65b78fe289c246e2d47930945828d94d7f32920ff7c977915282d1e9a postgresql-upgrade-devel-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 25ae9c2bd741af0ac3b1ada56308443a283d37abcd2388011b4b559c035603a4 postgresql-static-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 289b4bc4cc1c12f2e5fdf1d0167d40d0c6374e43b7aabc20c2f29af67cdc10ba postgresql-upgrade-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 33e1c8f69ccc151ba4f9c86b714a3cc57d74a02e3caa3febb4b81a111058f92a postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 postgresql-plperl-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 358750a204003fda6185e7a6773c7111d4fcce0eb5308f24f623a0a4ea460dc7 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgresql-plpython3-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 4cb4810c2c9df08d67a88d640aef793544bebae8dfb225d299adadaba6cde915 postgresql-private-devel-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 6f5a006b6824647194b32fb7d8ddbd660326b2d63194ba35c1ac106f8684b846 postgresql-server-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm 825cd861c8598ee565d8c0f041f02d46945914a1b9bb8cc53769e0ac5b5c86bb postgresql-test-rpm-macros-16.10-1.module_el9.6.0+174+80cb77f0.noarch.rpm 8cd0978dce92e40295d15a58a3df8e11d64b51a4c0d3f647b2342cc2a57d84a1 postgresql-docs-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm ac87228d5d6f9b9c92e04328fa5258a61b9858c413b88b5fcbad59023969234a pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.x86_64.rpm c660056970f41edeec199c6634387c8235fcf981c34cdf3f74d9d3b3fd36eb63 postgresql-contrib-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm ca4ef3663197a0d49789982716475c7bdb53e50f740c953754b23f0b03e0106b postgresql-test-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm dcf94d177de8d5bc7d08af4d27ffded25e21c6cd1790e7a6442366b8f7a259be postgresql-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm dded8c9c10bee6799319a075d2a13710f914917197d319c14b3346ce6d66470c postgresql-server-devel-16.10-1.module_el9.6.0+174+80cb77f0.x86_64.rpm fb9ad0cec45529cb2eab1903bd9bb1d8fcd4cdfda3efdb31e04be48510b727bf ALSA-2025:14862 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default postgresql-private-libs-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 0b8bc806b25e4299927ad6134e6a3e783640b8a651f98cfffc9aab30dcc597b9 pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.x86_64.rpm 1c17fe11db244a9e23cf757cfe3615a7256f34ef84e836c69f08b5d37efc9ea0 postgresql-docs-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 1c8c53e9a29b882877a1150df0e0e0c322fe4a7fcb3cc0b53600fc6c75147a27 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde postgresql-server-devel-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 1fe350fcb59b85d8274814f5b515a49328b345a91798ab7c53b7614bc8b611db postgresql-upgrade-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 3bcfb0f3aa58c3c28dd24124fb0d7a027004b11d25d2e2f3c664a40cd0566726 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba postgresql-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 6ad7402d109285f4c4b5c6aab517450e97447c5abd38c2cad96dc5072afa5a02 postgresql-private-devel-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 726643002edfb03d3ef86f1c32cc9173cd29828d72ad3b4b60c86bf242cfd207 postgresql-test-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 80a6d368c03a87d3623b9e39c108a748fd4b6a931a1adf4cd9db68184e5bc3de postgresql-test-rpm-macros-15.14-1.module_el9.6.0+176+c508cfa2.noarch.rpm 8f444764231792d83992cc5f7c32837a23051773da9cd0c53a4cf84da5820e2f postgresql-contrib-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 92b42d3e9caf1972b464556b3eb8cad7d85d05749aec6c9ac879f82f72b76b5b postgresql-plpython3-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 9c02093a2a352bb06d52a149a830d0860283ead6d411daaf464989993ceb1c48 postgresql-server-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm 9fb24d3bae68b75518d2aa5592d157a1b7105b4ef58d53c3020d39c2884c5545 postgresql-plperl-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm c6013b7c2dbe3b90da34ce1bf6432dff64042ffc5582f1fe108edc5b9e4eef91 postgresql-pltcl-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm d022b5b94e3c61dff40d37540ec8def7b334aaaee4b3c01df23f131f9c9d68d2 postgresql-static-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm d5b696343f0e71729c6403da517f0901aee639d3d7084639b371f363d0641487 postgresql-upgrade-devel-15.14-1.module_el9.6.0+176+c508cfa2.x86_64.rpm f85d11023287a4d4fb4b6b6b32b64c128bfae60c983ca79c37c8d39c3ab54681 ALSA-2025:14878 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default postgresql-plpython3-13.22-1.el9_6.x86_64.rpm 460fa84a6b4c8d7614ebed6bf0c70e64de0b42df2bde14266bba8a01d6a3e262 postgresql-upgrade-13.22-1.el9_6.x86_64.rpm 7b2ca9f9e3bd5e026884deaee0c34828283f4f7e80e1708c0102c2f4f8f7f025 postgresql-server-13.22-1.el9_6.x86_64.rpm 8d74ce17a88e311264356ad74fd9e159223a920374f692523dcaec7aa75d78a3 postgresql-pltcl-13.22-1.el9_6.x86_64.rpm 94130b67bf2fc11f760487a994e35e7e248ed26d67aca3265878d7b88dac9705 postgresql-plperl-13.22-1.el9_6.x86_64.rpm a8f7cf35bd9232a310edf3f91e2d431ec309fabd6fda0f932748335b2c2a49d7 postgresql-private-libs-13.22-1.el9_6.x86_64.rpm aa406f4ee8d402a9c6154fe4e0ae96238eae08597eacdbb80408e47509c4acdc postgresql-contrib-13.22-1.el9_6.x86_64.rpm b210209420b18e869adb86861c99342ba801574c480f2d7c3750f1ab009e7ba5 postgresql-13.22-1.el9_6.x86_64.rpm e9143b1e8110ffddd18993363a3cd3b30041f6c0ebb4165b59a286d54becabcc ALSA-2025:14983 Copyright 2025 AlmaLinux OS 0 1 Moderate

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: mod_proxy_http2: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module (CVE-2025-49630) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mod_http2-2.0.26-4.el9_6.1.x86_64.rpm e9c73bef32bc2f27832e7bd3850632fff6ef32abdb9add61ffc109c85bae5642 ALSA-2025:15007 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.12-devel-3.12.9-1.el9_6.2.x86_64.rpm 36b12d94fb6b630bcaf9d636e4b87bc2abaac87b862dc8e5ab8d5cbf9b2e27a9 python3.12-3.12.9-1.el9_6.2.x86_64.rpm 3c9c784f5e48f90bad27e67d3fbf966cb3e9a0dcafbb5fece1033fa3380f34be python3.12-libs-3.12.9-1.el9_6.2.i686.rpm 3ec4925e8d981a20b2b79392e0944486a0dc3c9d054de4ea04f735ffbfaa013e python3.12-devel-3.12.9-1.el9_6.2.i686.rpm 40ec79bad754ed8cd668d067d8832b9eda12f62c79e075ced67b45ff6798ef67 python3.12-libs-3.12.9-1.el9_6.2.x86_64.rpm 611e68112a2e85ab35ebf8cb000be5b0463e7c774b57b34cae475b98f3f82d6f python3.12-tkinter-3.12.9-1.el9_6.2.x86_64.rpm 9ff5d37cb7af2541578d5053d3fd0964d31d561508d292621a8882209084f074 ALSA-2025:15010 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.11-libs-3.11.11-2.el9_6.2.x86_64.rpm 00a44fe69f5fc8215d4a9b98930b6a6271c1e569e32058240c9301aa3e597560 python3.11-3.11.11-2.el9_6.2.x86_64.rpm 21c3f434a8391f18ac84ac07faa41e1edefacf19d36fb730cdb7de986347cce0 python3.11-libs-3.11.11-2.el9_6.2.i686.rpm 4244b4ae186c9919f2f861de86134433c5549562d155e68aa5863df38cb30997 python3.11-tkinter-3.11.11-2.el9_6.2.x86_64.rpm 67910634d3193eed03c5121693890ad428aec3375ea1547f53e7d014e7cf6494 python3.11-devel-3.11.11-2.el9_6.2.x86_64.rpm 8fd29b0f16b4737c298d2dc39dcc7d5a9a3f5a04ebbec5af891c31337ca1153c python3.11-devel-3.11.11-2.el9_6.2.i686.rpm e0969ed53cb29b0022b6f3ed501a5d734ad7636e56e45a75e430ef85ae0d3880 ALSA-2025:15011 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823) * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200) * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211) * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350) * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464) * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461) * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3-perf-5.14.0-570.39.1.el9_6.x86_64.rpm 0e873fd0ee7e66c4cb8e468ae16d77bb8762f8297bb0a6d74819e91e545106e1 kernel-headers-5.14.0-570.39.1.el9_6.x86_64.rpm 1794572e63273d8a5946aaec6cdb1fe5917e430b0c48dba9eca45613abb4828a rv-5.14.0-570.39.1.el9_6.x86_64.rpm 4610b9e9676d63541192e20b149b62e431de028d665944ef08e379f3b327dfd8 kernel-debug-devel-5.14.0-570.39.1.el9_6.x86_64.rpm 461630de9784749cac39653aae8ab279cceecaf163c4f2467723e7029e7a92d9 rtla-5.14.0-570.39.1.el9_6.x86_64.rpm 4cdd570912d3cd468b8c26a4d81fe55ce759789c39e5d3ba8b36a6604ef690e0 kernel-debug-devel-matched-5.14.0-570.39.1.el9_6.x86_64.rpm 59dda8feda52260690eeb7812af9d56dcd417bf8972b7ac0077e1d8201fdd661 kernel-devel-5.14.0-570.39.1.el9_6.x86_64.rpm b3d3d9d81a3b77f1e7651b09456e1ff554cf506ba1f0d2428db788acf34a8946 kernel-doc-5.14.0-570.39.1.el9_6.noarch.rpm e3a9ccef85eaf1c49e12b6d1ef3ae79c481bdf12c9f25578a0eadf29b91ba204 kernel-devel-matched-5.14.0-570.39.1.el9_6.x86_64.rpm e96c605fe220929bca110e51ea8f3621276c84f9aef127b432699b46d8ee17d3 perf-5.14.0-570.39.1.el9_6.x86_64.rpm ff7da2f30e4758f57dc72b311044d57ece38c7553893736ff423a775e5fd6116 ALSA-2025:15018 Copyright 2025 AlmaLinux OS 0 1 Important

udisks2 security update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fix(es): * udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libudisks2-2.9.4-11.el9_6.1.i686.rpm 199b311a1becf9171572e07850200274f78d4b1254713a27c0d36537ed55ae87 udisks2-iscsi-2.9.4-11.el9_6.1.x86_64.rpm 518b96855519ed96c5e7256272878f24a3a1e36d8675614c999782be463057e6 udisks2-lsm-2.9.4-11.el9_6.1.x86_64.rpm 66976122570070606391d7a3f7482a427a5671611d976022c8455fbc1acacaa4 libudisks2-2.9.4-11.el9_6.1.x86_64.rpm a966e224d08e90b39f35208a0cf97dde75f3ca54ff6ddcd63e34aeee2747d7e6 udisks2-2.9.4-11.el9_6.1.x86_64.rpm fb3c4d96bccb4002ef21f6ece57235f9b19637de74e7799166667d25bff92df4 udisks2-lvm2-2.9.4-11.el9_6.1.x86_64.rpm fc4f04ac142a7838bf093b3955a5cd7be2a9e35c5537d4f59124b7cead19ad2d ALSA-2025:15019 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3-tkinter-3.9.21-2.el9_6.2.x86_64.rpm 04615b205f9317418b8b4add1b1e17569e716e24066725f15f694a617742fc50 python-unversioned-command-3.9.21-2.el9_6.2.noarch.rpm 0fdd1921530cc760298c2928f170a56765e57da35d0834b37b1669309dc7117e python3-devel-3.9.21-2.el9_6.2.i686.rpm aa2df755ae4600515d6230ca4474ce43ab513834cd523e920ec1215c1da8a72d python3-devel-3.9.21-2.el9_6.2.x86_64.rpm e9c807ecd9383de2e50c3291aad03784cbb918c8bc6e612aaa0c4a82a546485b ALSA-2025:15023 Copyright 2025 AlmaLinux OS 0 1 Moderate

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) * httpd: mod_ssl: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) * httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mod_proxy_html-2.4.62-4.el9_6.4.x86_64.rpm 0ba459410056a271debfecf36144c585af65841509e8430403236b4993ea130c httpd-devel-2.4.62-4.el9_6.4.x86_64.rpm 17d004825bfa51d27ca9d7c9e9d08562d23a467f800c8f0b186a6ed29d2ab02e mod_lua-2.4.62-4.el9_6.4.x86_64.rpm 48a2242aac6625cdc118b4eff364806ab91c18797aaa8d1794b367a57ff9fc41 httpd-tools-2.4.62-4.el9_6.4.x86_64.rpm 57edbf57562ad0dc47dce8c70f9bde011392ee921a553e5a44f8d14e86f01e73 httpd-filesystem-2.4.62-4.el9_6.4.noarch.rpm 8a61d14555bc458fa6ecf403c1ebda681a2579c804a35b06d1869023ceec8fea mod_session-2.4.62-4.el9_6.4.x86_64.rpm 9cd3e8d67261a2edc0c494b2a6a2dd38d866e8b5c823f7c38ff335a4781f1865 mod_ssl-2.4.62-4.el9_6.4.x86_64.rpm c32288ed553f0bc3db5e04fdfcfea118b1732c9b95f844acdd451a520d2a8ecc httpd-2.4.62-4.el9_6.4.x86_64.rpm c5b58f3c3024c739b69a35c5d020abf5509fce01e2368a6ca28476faac781a85 httpd-core-2.4.62-4.el9_6.4.x86_64.rpm d9e821bc6f085bb2677c49d35f52b15bfb83bfbea818881b4247c6e9a41c5c58 mod_ldap-2.4.62-4.el9_6.4.x86_64.rpm df37fc835f7436d0f30a7ff7c1a2e4500fc51129d26cd874425754f6d296c4c7 httpd-manual-2.4.62-4.el9_6.4.noarch.rpm fcee105be359c4724e4569d741834f7c7e9142cba4d0d18ccc9cb4bd8a440e92 ALSA-2025:15099 Copyright 2025 AlmaLinux OS 0 1 Important

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Linux-pam directory Traversal (CVE-2025-6020) * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default pam-devel-1.5.1-26.el9_6.i686.rpm 8d11347b9b09ee842c8917b7688f9de0580a5d2b202cb6f2dc900caa345fdf82 pam-devel-1.5.1-26.el9_6.x86_64.rpm d88270d6e537b5874921fc7286ee4ce63f7646466a10c7d943e63ed3e32b4b3d pam-docs-1.5.1-26.el9_6.x86_64.rpm ec18f355690a1098f8209700cf864574ccc6bf28fbd19889bd0089cde4e4414d ALSA-2025:15429 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803) * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-doc-5.14.0-570.41.1.el9_6.noarch.rpm 0592d6ae16bac11ae51c039811eef218331c115de259add72efb5cf2f042f973 rtla-5.14.0-570.41.1.el9_6.x86_64.rpm 3032e19fd0c28846b81aa4bb856a2f6d8abbb6f9fea52d742e38cd195d89c50a kernel-headers-5.14.0-570.41.1.el9_6.x86_64.rpm 304b836db500f99a80ab97b8d514ded06b395119970024fb8423959192a5e0ca kernel-debug-devel-5.14.0-570.41.1.el9_6.x86_64.rpm 4d99b87fdaf6e224a2a509e36d2d8d811dc98f010cc5cb9e321ef9368b9378ab rv-5.14.0-570.41.1.el9_6.x86_64.rpm 4fbb7678e2cc1838486aad60086aee388499d6f286f7f4ceaf970343638594db perf-5.14.0-570.41.1.el9_6.x86_64.rpm a319a397db8ab3a2e2cc9d47403281514bc6d77f41448fefdb79ea898800c90b kernel-devel-matched-5.14.0-570.41.1.el9_6.x86_64.rpm d803e3c57f166ebccbe49f9be3a874cafa6027fdb25ed63759bd0b4de3a8cb9c python3-perf-5.14.0-570.41.1.el9_6.x86_64.rpm de881b92de0f13c94e8c791a92268cc09e8fae308e2a642cf8f2389df43b2b18 kernel-devel-5.14.0-570.41.1.el9_6.x86_64.rpm e0f3f99f4dd0224c1ce2e33972e6b893aca0544d95d97d1b47f23d9d2bb4c7ec kernel-debug-devel-matched-5.14.0-570.41.1.el9_6.x86_64.rpm ebc503cb59f269fe80ad1a7edfc0d9815c8f9d9b40c498195bbde5a5e31b8b39 ALSA-2025:15608 Copyright 2025 AlmaLinux OS 0 1 Important

python3.12-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVE-2024-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.12-cryptography-41.0.7-2.el9_6.1.x86_64.rpm 45cb0264b0267fef88c591935657da6dd287c3b3b109d9a4ce41f58eedb886b6 ALSA-2025:15661 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097) * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352) * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-headers-5.14.0-570.42.2.el9_6.x86_64.rpm 0233487b9e47961096471ee8daca5dcaa3a40e98286791909e2243872c39fef4 rtla-5.14.0-570.42.2.el9_6.x86_64.rpm 25d7470ab4e3dd92e3f35ec86269af32894e2a97ad11ca7d95036e20c9139274 kernel-debug-devel-matched-5.14.0-570.42.2.el9_6.x86_64.rpm 477bc0019ef5ae688c70430a08204f93f261c1be4e1a847087406c4e2d338b74 rv-5.14.0-570.42.2.el9_6.x86_64.rpm 8ae18edf82bbfea4d4150c38a8204af640a477cc2bff6b4380d2c56548482ea7 python3-perf-5.14.0-570.42.2.el9_6.x86_64.rpm a21cb265c14377f902d6999387038329cfefe5e23d12dcf9af0bf100cbea76eb kernel-debug-devel-5.14.0-570.42.2.el9_6.x86_64.rpm bc8323761b6084f31117f40bd4707c9a0fa4f39316807b5f6993aea9eca026a0 perf-5.14.0-570.42.2.el9_6.x86_64.rpm ecb4f2cca671fa674744ef1b6bc2cf82017ec97b017317d6c59af3d7dadc9d70 kernel-devel-matched-5.14.0-570.42.2.el9_6.x86_64.rpm f458a1eaad390eaf4f856939a193ed009cc8c8ae503de2e382adb9b4d373b8a6 kernel-doc-5.14.0-570.42.2.el9_6.noarch.rpm f7bc78813a004899da727b4dd8be03626f975f3d67b0b16f2dd5d36687253eac kernel-devel-5.14.0-570.42.2.el9_6.x86_64.rpm fab6efee8ab0df6046ba9727607ebac1c13b9765ca75e3b1d65b1217355837e6 ALSA-2025:15700 Copyright 2025 AlmaLinux OS 0 1 Important

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS (CVE-2025-58364) * cups: Authentication Bypass in CUPS Authorization Handling (CVE-2025-58060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default cups-2.3.3op2-33.el9_6.1.x86_64.rpm 35ddb2b471fad7a3196a099c2a61c0a22dd94b9cf7c2e6a6095b6fe8706788db cups-client-2.3.3op2-33.el9_6.1.x86_64.rpm 391e529b8497b94877e1fa0d3910f51e7b54ec189a7b8ee363deabeb517785df cups-printerapp-2.3.3op2-33.el9_6.1.x86_64.rpm 432a8f2ea9ef74182c82cbee9877fb2f50335e9c0a0a641525757317f525df7e cups-ipptool-2.3.3op2-33.el9_6.1.x86_64.rpm 89bc7e6fcea997d7fcd24409b51e1b1de93f973db81d78bfdf51a429fed9c540 cups-devel-2.3.3op2-33.el9_6.1.i686.rpm 8d1c13e0f94ba72d2444c523cf708e3b15b7bd10a337750a67303f5ac4a846d3 cups-filesystem-2.3.3op2-33.el9_6.1.noarch.rpm a94d3e4941893f0cadac9947fff905cde01e36b131b04be71758ea8d10ad71e1 cups-devel-2.3.3op2-33.el9_6.1.x86_64.rpm e5882775954e230de68d75b137eaeb8bf0d590d5a1cbebe5944397cefc960508 cups-lpd-2.3.3op2-33.el9_6.1.x86_64.rpm ec8eec0d838515f6801112292ccfbf99705fa80ace09ac5ecffc8365b030f7fd ALSA-2025:15740 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CVE-2025-38550) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-devel-matched-5.14.0-570.44.1.el9_6.x86_64.rpm 1c882ed023ad5934143b260b8f6a41047daca1d3cdad0474a11387ddc165f424 kernel-debug-devel-matched-5.14.0-570.44.1.el9_6.x86_64.rpm 350ab1f2c2e4e5a00dd7319f9adf7e930e6682fca40f381adcb69655feb8606b kernel-doc-5.14.0-570.44.1.el9_6.noarch.rpm 3c652ff640370fc0178ac170ce2118fde23d3b6baf99d3c8c51d0c5acb7bc98d rtla-5.14.0-570.44.1.el9_6.x86_64.rpm 40d2a002c09e5174877777256a270d1a56cdb695aff0e4c12272f195dea4b8a8 kernel-headers-5.14.0-570.44.1.el9_6.x86_64.rpm 54c4e72581526898418c036245c66a703226774a82d9d33d9b51293271269f5a kernel-debug-devel-5.14.0-570.44.1.el9_6.x86_64.rpm 68ce47a33c057af02bff4ffbc1ec17119e5c5c92a4a949a1347929a2a158abd5 kernel-devel-5.14.0-570.44.1.el9_6.x86_64.rpm 7b6094f485717ba8207961ce27068fe04cc0366104064c8e025d4a8df0e681ff perf-5.14.0-570.44.1.el9_6.x86_64.rpm ce34dda0108401cbfe1064552359d3e107fc52e562bc681be0cc56e5cf518422 python3-perf-5.14.0-570.44.1.el9_6.x86_64.rpm d52d0ca8009e4d6e39dc93fd5d66e4778cfab921b9cb56116eb50fb7f618ad19 rv-5.14.0-570.44.1.el9_6.x86_64.rpm e23744ba5a5879e673840edd4a876c473fcf224f8b46e48cba29ccfe00c6b339 ALSA-2025:15887 Copyright 2025 AlmaLinux OS 0 1 Moderate

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default opentelemetry-collector-0.127.0-2.el9_6.x86_64.rpm c58b20393039264a92cb558ec2eece6430c0198dd1f204e2460bd6f55533fcf6 ALSA-2025:15900 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default podman-docker-5.4.0-13.el9_6.noarch.rpm 00097c1b5ff2323445184634f46b33225ad2456dc40c04106a02f60e4c886536 podman-plugins-5.4.0-13.el9_6.x86_64.rpm 617f3dcb5fc508fd3cab8bd9938ca0ee2699ecfaf6f9cb075aa0e09cb7eaa7d9 podman-5.4.0-13.el9_6.x86_64.rpm a64ed22d3d38a81b86ef0a5c0896fde3c1642dddc4420fa99ab5dd7f838fbbfc podman-tests-5.4.0-13.el9_6.x86_64.rpm a98b114b070d8f8376c5800437cde1fbc5bd260355e03d3bdc76f88fcd73432d podman-remote-5.4.0-13.el9_6.x86_64.rpm ab3129c9330aff09c45ca33d38d74b4be0de5fe4c0adb5a77959ccddb77ed06f ALSA-2025:16046 Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * openssl: Timing side-channel in ECDSA signature computation (CVE-2024-13176) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688) * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699) * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585) * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21588) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687) * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580) * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696) * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575) * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684) * curl: libcurl: WebSocket endless loop (CVE-2025-5399) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092) * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077) * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085) * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082) * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087) * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084) * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mysql-server-8.4.6-1.module_el9.6.0+180+a4e757e5.x86_64.rpm 0f33d9cd220d6d62faad0f0f44b92db8f9126b50ff84aa9e6d45a2b5b0f734b2 rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.x86_64.rpm 15d11f3dd227603b75ea55ec5e5d58e48a85816370b46beaf974cdd4ecdb74b8 mysql-errmsg-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm 321197f9d190ca05280a2668fd97836928925ecf0eea8c2688b8b3c68a7e8264 mysql-libs-8.4.6-1.module_el9.6.0+180+a4e757e5.x86_64.rpm 394e519ced4be8e4589f42dd9d793d7d3a1293d476a81f7b1f738a94a7d4db22 mysql-common-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm 4efc97279a47c73709b3d728fa707714260e15242037235fb0bd9ab6e05edb31 mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 5ac91bd521f27ff2898650b81f3c9955990a7c1611d7c24df1109ee306cfe85d mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm 67f9944422a6aee33d336ad9718cc8bcdb1ee47386bf22c3b2b482ce8e60f8b7 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 6af7ca5e430c3de27c47755ee182d363a208ee94a4550a502365026a3adef496 mysql-test-8.4.6-1.module_el9.6.0+180+a4e757e5.x86_64.rpm 80faed6d4d03862e1d3c11628281faf88e519ac18f2f70219acc91f8dbc34b26 mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm cde7f7ad433817f56a1963dc6f951f5ce54fbffa0b81b588ad4b43c5d751b0e9 mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.x86_64.rpm db55c9870a319736cd07c1e700ecf55ec5cc6251dc98e6cef6552a8c3ce87a17 mysql-devel-8.4.6-1.module_el9.6.0+180+a4e757e5.x86_64.rpm e1a13dff2090fc518f53961e7530a0e202d80c8518191d41b062b4df16a13335 mysql-test-data-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm e1e88dcf6959c62bf9ed1994a84293a3b5d0666380b0ceef5e23c91b3d085b85 rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 ALSA-2025:16086 Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688) * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699) * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687) * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580) * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696) * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575) * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092) * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077) * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085) * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082) * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087) * mysql: Replication unspecified vulnerability (CPU Jul 2025) (CVE-2025-53023) * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084) * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100) * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098) * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096) * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mysql-server-8.0.43-1.el9_6.x86_64.rpm 25c1168c4e9f017f40a17431b865ce07c3188bd351adbf30f9a45d5fb3e53554 mysql-errmsg-8.0.43-1.el9_6.x86_64.rpm 4f0a0c11a42a6d2752b62e384b9a24cfc26c5964ec15933ab9755cec9584d2ce mysql-libs-8.0.43-1.el9_6.x86_64.rpm a1589d64359134c6ae90838662bc5216dddd02d75feb1dde81dce5afcf5cac8d mysql-common-8.0.43-1.el9_6.x86_64.rpm ba06fb819997b6c4108a835c1c749c69b5427c118e1ba89b10d36378553f54b9 mysql-8.0.43-1.el9_6.x86_64.rpm cf7f13402249d6f4bde2fa4092bf9daabc12def0658da6f328d5a8c6c2037b2b ALSA-2025:16108 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532) * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528) * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537) * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536) * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default firefox-140.3.0-1.el9_6.alma.1.x86_64.rpm 4ce8e066940ca681a8a7fd4e1945a2d04123a41c0dd86c2d574d32d5b85fdeed firefox-x11-140.3.0-1.el9_6.alma.1.x86_64.rpm 87e37f7226536fb4425801377561e23ee3092e1d3a8dc275d5f2e068517d3272 ALSA-2025:16116 Copyright 2025 AlmaLinux OS 0 1 Moderate

gnutls security, bug fix, and enhancement update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990) * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989) * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395) Bug Fix(es) and Enhancement(s): * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620) * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621) * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gnutls-c++-3.8.3-6.el9_6.2.x86_64.rpm 1a9a7334983362e14076c2e4bb23c1d20115d8aaec3aaa8c8123107a5fdf0cca gnutls-devel-3.8.3-6.el9_6.2.i686.rpm 296e3764c4cfc5a8eb169e869c49e2134af246543e2052dfae73cc7214e7530c gnutls-dane-3.8.3-6.el9_6.2.x86_64.rpm 43e090ecf65518cd6e163466a6f50ada60d6a4b6c65df8727ce184fb05817bc3 gnutls-utils-3.8.3-6.el9_6.2.x86_64.rpm 4a3a0448f3f8d65f68cee8b74eaad5b34efe67a4520fc53de77ced20fe262964 gnutls-devel-3.8.3-6.el9_6.2.x86_64.rpm 5cadf1325c3721ac449b070f1f81f966d065d414f82cf8acec6eb08332ebcb49 gnutls-dane-3.8.3-6.el9_6.2.i686.rpm d88c96e2d1e410c5f3431aecb4fb91879af01be7e63e9f98afbebf06d1164a7b gnutls-c++-3.8.3-6.el9_6.2.i686.rpm e4769e91966fb9886e74c4adb95359c78e7c8fde09d25bd92c8c8c43a44b124d ALSA-2025:1613 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150) * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083) * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default nodejs-22.13.1-1.module_el9.5.0+139+09296491.x86_64.rpm 165783740a7279dd47ce9e24141d456d1d48c0c099e7672d3973746b2deba093 v8-12.4-devel-12.4.254.21-1.22.13.1.1.module_el9.5.0+139+09296491.x86_64.rpm 60832a30cd6ae8560f6f1c88a97a6eb979e9313ea08c11b58e52fa3b402ee3ed nodejs-libs-22.13.1-1.module_el9.5.0+139+09296491.x86_64.rpm 66ce3e4ba64d118b807d315889c8ce9cdc44e1a3191c4d9fc0d82db58d0262f2 nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662 nodejs-nodemon-3.0.1-1.module_el9.5.0+136+92f38f3c.noarch.rpm 9568f3f288eb90ba5d978da40785d16e3210b65e92276e8ca17b6d88a3339c1b nodejs-docs-22.13.1-1.module_el9.5.0+139+09296491.noarch.rpm 9ceb6b255ac8e0ab31086f29fe4215ec55497fa486c2df07985cdb83c7035025 nodejs-devel-22.13.1-1.module_el9.5.0+139+09296491.x86_64.rpm a0105adc310ac41c0d740004b8dee57002d6ac4256d3c197ac48f927cc74ef5d nodejs-packaging-2021.06-4.module_el9.5.0+136+92f38f3c.noarch.rpm bfb954cf0a070014a29b11e53507cb0f05b992c7e1bf6cb568840bb815dca58e nodejs-full-i18n-22.13.1-1.module_el9.5.0+139+09296491.x86_64.rpm dbc3b027c9d9ef207a8238be656311a88d1a22e6abc598f05417cd0db0c33a0f npm-10.9.2-1.22.13.1.1.module_el9.5.0+139+09296491.x86_64.rpm ee4a9b84a9acecbf650189866cbe36a3db3246a62141117508a14bf6ec1a1cfa ALSA-2025:16156 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532) * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528) * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537) * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536) * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default thunderbird-140.3.0-1.el9_6.alma.1.x86_64.rpm 9b40760ad10fa088e10359838dce45ebd99467ee26cc45c087583597d9ff0952 ALSA-2025:16398 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: usb: smsc75xx: Limit packet length to skb->len (CVE-2023-53125) * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810) * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498) * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-devel-matched-5.14.0-570.46.1.el9_6.x86_64.rpm 175625346e3d4989b8d68add9b5c3ca6ece21a4a5d2901b047b72061cf4fbc62 rtla-5.14.0-570.46.1.el9_6.x86_64.rpm 4380cd91b56e18a02e3409593f8e6a70fa92e3cf4859be0a221905d78c33a6d7 kernel-devel-5.14.0-570.46.1.el9_6.x86_64.rpm 446ca382c3e2fe5a6ea280f8e09d599faff2c64359098944698e35644dabe688 perf-5.14.0-570.46.1.el9_6.x86_64.rpm 6207399f72214235e381755e6a774fe4a49fa8fe19564877e232c77cfe03bd20 kernel-headers-5.14.0-570.46.1.el9_6.x86_64.rpm 7bda82bc62e1df798461340bc753fa6ebc67c722ac096d6443b9423f548966ca kernel-doc-5.14.0-570.46.1.el9_6.noarch.rpm 8840bc58e79eb03b7403d70c43e87b78b6960ef7e49d3a80f5aeb262bd741e6b kernel-debug-devel-matched-5.14.0-570.46.1.el9_6.x86_64.rpm 93e90a9080067cdef8819e192fc3c3f6bd1ca4a70b352dd32db8b6fa28d9a0c5 python3-perf-5.14.0-570.46.1.el9_6.x86_64.rpm aa7a43129a78efc03d208bec9a77925350109c03543d12c59faae14c715cbece kernel-debug-devel-5.14.0-570.46.1.el9_6.x86_64.rpm c642b56feb7d326ec43d1b3f2b7a231a36e80a508be5f457b314966aaef917cf rv-5.14.0-570.46.1.el9_6.x86_64.rpm efed8dc03bfc0ae7af11402547ebdfda7b2eec13585fbc4de0c7cce7e2ab3425 ALSA-2025:1659 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm: migrate: fix getting incorrect page mapping during page migration (CVE-2023-52490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default kernel-debug-devel-5.14.0-503.26.1.el9_5.x86_64.rpm 033b67bd95e3acca4603846d6605d81beb6655147ce6261282754ec17ec36508 kernel-devel-5.14.0-503.26.1.el9_5.x86_64.rpm 12958198d7c31e7e2ca36dff220ed3826b2a8874474b5e8a3b1a7cf2f509a54e kernel-doc-5.14.0-503.26.1.el9_5.noarch.rpm 2479a43804e37810c0b80ca99b70fc4cc46568ba4ed0596b9ee36dd2a8503b2d perf-5.14.0-503.26.1.el9_5.x86_64.rpm 68771aedabcc2f4ac21fe1bf1799415b6e03395f03a1ab35d3c3c62891739093 rv-5.14.0-503.26.1.el9_5.x86_64.rpm 8601363ac0d3d66fb9b82d401bf604a2ec07012ab1fe64198663f370fab8c09b kernel-debug-devel-matched-5.14.0-503.26.1.el9_5.x86_64.rpm b55d69b552bc23d514bc6d4a310c1a1d3e5087ebcd2dc328cdbbe2a086dd855f rtla-5.14.0-503.26.1.el9_5.x86_64.rpm c283e2cc0eee9e35bf65b739c07661f28a4a4b718c875bdf579d356b690c3a76 kernel-devel-matched-5.14.0-503.26.1.el9_5.x86_64.rpm d81d6b8666798c89e599c07eebc0e35c835022103754c3f6d7a7b2d11de74c93 kernel-headers-5.14.0-503.26.1.el9_5.x86_64.rpm e89f9f6155a0704c522fc32dcbaa78f718345037e45de1df896b133753895b88 ALSA-2025:1670 Copyright 2025 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187) * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default bind9.18-dnssec-utils-9.18.29-1.el9_5.1.x86_64.rpm 0f069f98728d8eeb59b4ca4c34519898c9fa26977a3342e936364d993d0bff21 bind9.18-utils-9.18.29-1.el9_5.1.x86_64.rpm 119dd6db0cc041c66431407b56e05485520540362ce4bef2d1803cb15194bf45 bind9.18-chroot-9.18.29-1.el9_5.1.x86_64.rpm 571ab37c1fe119a5ba7df3295c476cca37d4689a8f627e1324f5fc0dcc945900 bind9.18-libs-9.18.29-1.el9_5.1.x86_64.rpm c01de10e9c2abefc1bf55ade1cec292e43ab6632659c65c1a79d4d1e501302fe bind9.18-9.18.29-1.el9_5.1.x86_64.rpm c9be248d08c036327892b2d3da254a03134c5395f3da5c5c2609c7a929f8c894 ALSA-2025:1671 Copyright 2025 AlmaLinux OS 0 1 Important

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) * krb5: GSS message token handling (CVE-2024-37371) * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264) * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238) * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241) * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231) * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236) * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237) * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203) * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212) * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199) * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193) * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198) * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239) * curl: curl netrc password leak (CVE-2024-11053) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497) * mysql: MySQL Server Options Vulnerability (CVE-2025-21520) * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555) * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491) * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501) * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519) * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559) * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523) * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default mysql-server-8.0.41-2.el9_5.x86_64.rpm 60f730f6968277e15dc69a6bd8bd9cf00a95f777b37ac9ed334f3ecfd41f898a mysql-common-8.0.41-2.el9_5.x86_64.rpm 74cbbab133f9af04797d0491775e22ebac0df5e1d64680b93fd9dbed27015b56 mysql-errmsg-8.0.41-2.el9_5.x86_64.rpm ac46c17f6f747d3a04206028c7a7fd48df7879eb1fadaef8ce4ffcbcccba7666 mysql-8.0.41-2.el9_5.x86_64.rpm dbec644cd57b08cc74d9468fe438c9073da1d254f4f8d402ff9a98d263a428a0 ALSA-2025:1681 Copyright 2025 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default bind-dnssec-utils-9.16.23-24.el9_5.3.x86_64.rpm 132205f2e6a0da67d0f66c8eb12ffad2caead30fbaf52bcba995b48fad36be82 python3-bind-9.16.23-24.el9_5.3.noarch.rpm 22b0cbd581bd49c0429845d8d5d9acc2b73a6cea8279f486f9327cc876219b7e bind-dnssec-doc-9.16.23-24.el9_5.3.noarch.rpm ada4e0082730024c4bab00aa45def50b8739ba0ddfe2a66b38c2d1627465ff4a bind-license-9.16.23-24.el9_5.3.noarch.rpm b9977269dfdce9d84806c58529dc87316284ce76fc8c7aa2c1b9f1c73d98cbc3 bind-libs-9.16.23-24.el9_5.3.x86_64.rpm c6a74c4e0daa7d2701a945ed2288f74a1e2ee14e00dda8650cebd203836112cc bind-9.16.23-24.el9_5.3.x86_64.rpm d89b128b2122751c822fcfd8f6bcaa25b47a3fa7341842f3c8b5362925968663 bind-utils-9.16.23-24.el9_5.3.x86_64.rpm e16db56959092ac843acd56118f029cd20a8a6ba378720894e5b3c7d5a8a9100 bind-chroot-9.16.23-24.el9_5.3.x86_64.rpm edfa3f04bebc98d44c24c64bfc4714686efcc02e13ae5d02376cd5726af0d7dd ALSA-2025:16880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472) * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718) * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682) * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default perf-5.14.0-570.49.1.el9_6.x86_64.rpm 1d682c1e3cefe43296fa706467b812bdd7aeb62336e4b0b8fb1fab65423fb2ea kernel-debug-devel-matched-5.14.0-570.49.1.el9_6.x86_64.rpm 2aa059aab22fbc613d1ba415113dfc917514c3a931df3380e08eae781df5f250 python3-perf-5.14.0-570.49.1.el9_6.x86_64.rpm 4e598ea21064243131ac8c60dc72001acca55f472a3729468d7e3ad6d7ba7c32 rv-5.14.0-570.49.1.el9_6.x86_64.rpm 5357951349c4ae696a3743ecf644a06eccbce5ae141e1419ec3c1036ab560792 kernel-headers-5.14.0-570.49.1.el9_6.x86_64.rpm 86474ce6c351ab6c8f4cef3a984ec0a14d41cdb81f67a8e1c2a88a03e9dbbabb kernel-devel-5.14.0-570.49.1.el9_6.x86_64.rpm 98162802694730d36755598aa7acbd1630b41c2fdf2dda5f836f2fbbcbc821d6 kernel-debug-devel-5.14.0-570.49.1.el9_6.x86_64.rpm b8818f5b450a84cf8a8c1e713d017c4f0e059a59274cdedc7c1c241b39a99f45 kernel-devel-matched-5.14.0-570.49.1.el9_6.x86_64.rpm bdffe510cf20a35b97827ab05bbaac7d00e67b38ad31d9db3f60b13815c5bee1 kernel-doc-5.14.0-570.49.1.el9_6.noarch.rpm ed724e5ade50fd211f8b767c7868337fe2053bcda9207bcb9195fef06c91bf1f rtla-5.14.0-570.49.1.el9_6.x86_64.rpm fb358a57cbcefc9759db3948397e0bf903252d2813161a880b982ec7f9a81e82 ALSA-2025:17084 Copyright 2025 AlmaLinux OS 0 1 Important

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default ipa-server-4.12.2-14.el9_6.5.x86_64.rpm 009f6de164f8bd3f2be870d8f33f316b11320ad59c7f5a691910e194853addba python3-ipaclient-4.12.2-14.el9_6.5.noarch.rpm 4afec2a4ec1fee6ae153d58e0b1d5c9588a3256badbcb617dd16e407de04329d ipa-server-encrypted-dns-4.12.2-14.el9_6.5.x86_64.rpm 5728e4e95710ef6004baccfd04d2b34dca0b8abd42e69ff79f3cc8b1545926fc python3-ipaserver-4.12.2-14.el9_6.5.noarch.rpm 5b39ad672a08c50e968b4955b06ed2964b9e80c96036e5066363e5226eb6be49 ipa-server-common-4.12.2-14.el9_6.5.noarch.rpm 5c58a48f8a41415c6cebc0840e2406d3619fd765f4eba07a23cce17e575d28c1 ipa-server-trust-ad-4.12.2-14.el9_6.5.x86_64.rpm 600e3bcdfd54d21e0b61f558c1b8d732067deaf7f39cbd01bd0ea03c54a83352 ipa-selinux-luna-4.12.2-14.el9_6.5.noarch.rpm 606baa5844d826f8b3106cd79fdedcef2c7b91cd0515ff6e286c894ab6306f84 python3-ipalib-4.12.2-14.el9_6.5.noarch.rpm 6d956768cb64c563e64603ccad3adb8bead1a4738780c0f9eb160da8f4a8a7f9 ipa-selinux-nfast-4.12.2-14.el9_6.5.noarch.rpm 79c3d1d875df54c2a6299732351c91176579f9eb90fc2c99e291b8b83a175eb0 ipa-server-dns-4.12.2-14.el9_6.5.noarch.rpm 8e61a839b8627ef3f21b54e422d3338d5f35a5bbd6b6e615957420ebd29e099d ipa-client-common-4.12.2-14.el9_6.5.noarch.rpm 9473590c63e11c3260d122c56fbc634f7ea33586dcf3cf48153d6049a754f89c ipa-client-epn-4.12.2-14.el9_6.5.x86_64.rpm a4217a50d6d7b1f36836d3fcdc4209b7807fc71e01b5cd30d9a9ffc74789c7e9 ipa-client-encrypted-dns-4.12.2-14.el9_6.5.x86_64.rpm afe666a461c48127e57f485d94ab6ab4a1a5c9badab85ba4b5f6cb29548551b4 ipa-common-4.12.2-14.el9_6.5.noarch.rpm b1a6eafa2ab6872b4f60368da4f243697aef6b8d880bc3a813c505f399426170 ipa-selinux-4.12.2-14.el9_6.5.noarch.rpm bfb103ee750a8e17294b8333f5d7468297d5cd673ef0c74b7998d349a2d0be94 ipa-client-4.12.2-14.el9_6.5.x86_64.rpm d9dd1d3096c2a249194f498c0105879a48a3c1e773539466d143f44c169ddc48 ipa-client-samba-4.12.2-14.el9_6.5.x86_64.rpm f155532b0878018c097efe984dd6bbca9e12dd026586c78c8f0cab7288959b71 ALSA-2025:17377 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351) * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-doc-5.14.0-570.51.1.el9_6.noarch.rpm 047dbd5b878a0bd6d008b005924025001e2134e62442bd7800a2794fd51b187f kernel-devel-matched-5.14.0-570.51.1.el9_6.x86_64.rpm 0cd415aeada1f05478a2ab2992a48755c75ba0cbccbcf9b984d95c6b2c8bb840 kernel-headers-5.14.0-570.51.1.el9_6.x86_64.rpm 2d5cdf9a8932eb1add3a864dde8a8471927f16123bce9ffd5fc7ae0a8cd92197 rtla-5.14.0-570.51.1.el9_6.x86_64.rpm 37c564b273102f1cf69ee7b4431dd7ba5804a0c68bb0eb668141d25c6af7fa20 kernel-devel-5.14.0-570.51.1.el9_6.x86_64.rpm 39be9be4f781eb00895bf1911d869096eca052f9cab8ddd3060540d4c4d5389f kernel-debug-devel-matched-5.14.0-570.51.1.el9_6.x86_64.rpm 81217ce0f7c65c99dac1b88d365308537a2da826bd7bf4c8abf62f0c87362cf4 python3-perf-5.14.0-570.51.1.el9_6.x86_64.rpm 8fbcdc8b086026a1ccfcd36ab3f3c01808eeadb1eda69550ca3ffd048dbca323 kernel-debug-devel-5.14.0-570.51.1.el9_6.x86_64.rpm 9f8479b9b2f1c6b424d6f648972ff05d64b4bdfed913ba74f07d4a9ba6cdc18f rv-5.14.0-570.51.1.el9_6.x86_64.rpm fc7a67674a1358499e7d4024ada9b8ce91abf5ce1c11e53f8feea68baa987e0d perf-5.14.0-570.51.1.el9_6.x86_64.rpm ffd92f6557858251b09d25354028fee67e59be92d76c0b08f08301b7dc965a4f ALSA-2025:1738 Copyright 2025 AlmaLinux OS 0 1 Important

libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default libpq-devel-13.20-1.el9_5.x86_64.rpm 04a68002b539241f68019618186454291adb886d86cca3746bd7e5e1be536b3c libpq-13.20-1.el9_5.x86_64.rpm a81920316babc334ca05beff03f08a3b1a587dc4198ad778c1eeb6e4224e409c libpq-devel-13.20-1.el9_5.i686.rpm aa6a07d72fb464cb907f2b76986c7f58e3ef45905b11f3985ce9c61727ea1497 libpq-13.20-1.el9_5.i686.rpm e8e5e317720e5b89f9aab99a6b1f2e7b1ca5f356b16011b72a366c415a5e30ca ALSA-2025:1741 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default postgresql-contrib-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm 0b2e2822b919cd6a7bfc259a723e9ec688b87286eaf31ceebace6b3cecd24e2f postgresql-plpython3-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm 167530f9353086f7eeeb6e1c9213de935a76e015550aca031462c4ceae003595 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde postgresql-static-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm 229dcba9d7d2228f4b93316a6b170851c5bc8baa7d788b039ee6c3d2ff51848c postgresql-test-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm 25c0219908b756a3651139becb13f1521a2a0ebee87c8bf0da72792f70359bc7 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba postgresql-server-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm 516542faab3d4bc3a1f6424f1afe977fc58e12e823f31f35ce3bc2891106c7a0 postgresql-test-rpm-macros-15.12-1.module_el9.5.0+140+e3f03d9d.noarch.rpm 6e2b70d191a2a45071734aada3f59d6a36768a015b8ef7c332a2f7fb07002581 postgresql-upgrade-devel-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm 9b0fa0cb333f86c9bfcbdfb55047a453f65965dac87ee514aa56929724ecc6a8 postgresql-server-devel-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm af9d71f7319617afc3d3107084ed40f9d80a07300f2bfa1d2ecc020c2fcebca1 postgresql-pltcl-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm b21133ea414917e028da177bf4128c23ae348a4aacb90ded8a24d7cc9a334958 pg_repack-1.4.8-2.module_el9.5.0+120+4533eb20.x86_64.rpm b72293f24944cc89bc4f31843d5ffa2d414bfa8d7bc0c8c8fb15ea5fe09cef36 postgresql-private-devel-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm bad2336361a4d38339157856a8fc8f276f3042d5ca20f0f2937436e46d8f45ff postgresql-plperl-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm bb7b9ca9f1c5f41ac3057be44f85c2d454d5277942fd747ecdbcb81388c9a085 postgresql-upgrade-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm c9156a2671406607b57b0310279d7160caddab820056d734388ea1c4698b22d1 postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm ca9c66fceeff33d3483b6f20e8d8d7158c62bc779db5321bde3ab1719d6d4b24 postgresql-docs-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm cb9c31ccde1d410de023c3aaafd44bb02e20a86beb920ffd48b22d3bb8236597 postgresql-private-libs-15.12-1.module_el9.5.0+140+e3f03d9d.x86_64.rpm cc94334fb810157420c3c6bf8d306b0e15d2440eccce62f2922297a8653f2ace ALSA-2025:1742 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default postgresql-server-13.20-1.el9_5.x86_64.rpm 630bb22ceac2ec195943831476e1246eb91c5e1f0cfc8bc59b0833f615b9b654 postgresql-pltcl-13.20-1.el9_5.x86_64.rpm 6ce3255c7a51122af957e65a1b2918e5892b084e9f9d0bf203b2b1d85590ed71 postgresql-13.20-1.el9_5.x86_64.rpm 840bf844e905adacc7a16bf2e82eae2554f94258466d42e320dae3e4c660de06 postgresql-private-libs-13.20-1.el9_5.x86_64.rpm 8561be076bcc4ac8b29d0db5f9be73e26b9c50e77929bb8f0e269d0ec9948b19 postgresql-upgrade-13.20-1.el9_5.x86_64.rpm dded4c428aeb1c76483a6a3caa3aa0dc25b6fcc4944563bf589813869759feae postgresql-plpython3-13.20-1.el9_5.x86_64.rpm e9f5abd73c635796e99d7b4e0c30ab66f3b79f13ecf6b0e3dbc785b0aa6caa8f postgresql-plperl-13.20-1.el9_5.x86_64.rpm f7932f2efd62a24b1c8e36c496842e2b3525e54c60d19c21b2f83f96c4e56385 postgresql-contrib-13.20-1.el9_5.x86_64.rpm fcdcd8bf382c2fe6ba1ea46cdba7822854b4ee41afadd2dd9ec85390af6e03d6 ALSA-2025:17428 Copyright 2025 AlmaLinux OS 0 1 Important

open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools: Local privilege escalation in open-vm-tools (CVE-2025-41244) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default open-vm-tools-salt-minion-12.5.0-1.el9_6.2.x86_64.rpm 3d00ab1709081c7b598c10e13376d795c175eb8786d0748aa921aab2f29c18e9 open-vm-tools-desktop-12.5.0-1.el9_6.2.x86_64.rpm 3f10999693f55a7ecf83c9ef5a62ec757d67db6feb459791ee4b707a020d52d4 open-vm-tools-sdmp-12.5.0-1.el9_6.2.x86_64.rpm a4b687026052de6bd5200fa606e93a2217840b8b6ed5fb441d42d59cc72ad34b open-vm-tools-test-12.5.0-1.el9_6.2.x86_64.rpm b143bb6a804f6bc76a91181820df7571e0ec98821b745dfacebce2e1d2b6b801 open-vm-tools-12.5.0-1.el9_6.2.x86_64.rpm b5f67b5d84ba3855d5b098adc267b418ed14c3b544b04f6b6d9d551d05dbcce7 ALSA-2025:1743 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default postgresql-docs-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 02b2214da50af0383e310b0b013975f26fd9df75bff870a63ccbdc469b914439 pg_repack-1.5.1-1.module_el9.5.0+127+50ff03a9.x86_64.rpm 10b053cee26062124a070468e8468a7848fd60065455d3c3c409089dd4d738bd postgresql-private-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 326c137515844f7e9a6816541828f748ec1747c10757bc87ec4239512efce3ef postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgresql-upgrade-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 47e7529010950acf84cff2f12e35bf0330d51de7145a5129779897e888ad917e postgresql-server-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 49135211df3dbf263c46c74c20fb3f77554270dbccb09d3049813647159fd1ae postgresql-server-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 5f6315d955b6045af1ecbed4573116da63763260e67a018267c6e93ab9caa2f0 postgresql-plperl-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 64a24fe7bda7d1603771ae76f3fc4a90673414ba94b4314c999e7b31e581e887 postgresql-static-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 7a3e105d894c90e89dc3800a3915457e1901399445bc3796a41258c2af622b14 postgresql-upgrade-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 8612818f36ca7601d8110af30ec7c2d22953b6cb56c749588ae4a4930e73ced4 postgresql-plpython3-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 89d8c96b1d4aa41807e975ea5cc654bd012e169d31ea0e9e346e2e4b565e928e postgresql-contrib-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 8e7466488d44f372c26eb47ef825f8974636cb07cb7cb1b7ef68a94091a1ccdf postgresql-test-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm 92be74d782ca6825a0b249a866d53a830fa56511f0d17f67e9892d083df9f5ad pgvector-0.6.2-1.module_el9.5.0+120+4533eb20.x86_64.rpm ab3b151390d63d4362748ec347fd96a8fd8ed45b097d158f01b8b5cdc421603e postgresql-private-libs-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm c3ea1f336b6e3286f72171921fd96a296944fd61cbaf510b1fe35453fea292f6 postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm e582209d1a9a6828b7132be02ad71b571ba6abc3d722a136a3cb684a1e440ac3 postgresql-test-rpm-macros-16.8-1.module_el9.5.0+141+f4b0f9b7.noarch.rpm f39818d93691a7091f8e51657c5513b5a3683a1dc11c81512372024cf8c691bd postgresql-pltcl-16.8-1.module_el9.5.0+141+f4b0f9b7.x86_64.rpm f99fc238e34d29396e5fdb86643dab952fd6a5c53fbef2e86657a81035195352 ALSA-2025:17558 Copyright 2025 AlmaLinux OS 0 1 Moderate

iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: iputils integer overflow (CVE-2025-48964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default iputils-ninfod-20210202-11.el9_6.3.x86_64.rpm d2d8246a379a5ae3d3cf5cb70a90cfd378fcb8a91e36b11c07dea820c9257db4 ALSA-2025:17742 Copyright 2025 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim path traversal (CVE-2025-53906) * vim: Vim path traversial (CVE-2025-53905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default vim-X11-8.2.2637-22.el9_6.1.x86_64.rpm 5c71e4edb703f4d89b92764b19c42b5f1f585bbff73c73213ebc9d7b845b3452 vim-enhanced-8.2.2637-22.el9_6.1.x86_64.rpm 621f54b0aca25b516ca535775eb14940e773b0f1b1c7ac6a69906ffa671a8b44 vim-common-8.2.2637-22.el9_6.1.x86_64.rpm e37844687efcdfcc1ac5c3eb0529fff96e7ca58e1641d7109596aa7ff9fe69e3 ALSA-2025:17760 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614) * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757) * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default rtla-5.14.0-570.52.1.el9_6.x86_64.rpm 0f4d520c223d1512770f1e5e0c369fd8fd9ced5bbd9b1f68453a8314cbff733f kernel-doc-5.14.0-570.52.1.el9_6.noarch.rpm 1bf06be1fa5936b44f785fc6d5d68e4964bffd2d50c1e6a80323dcc203d9bcf3 python3-perf-5.14.0-570.52.1.el9_6.x86_64.rpm 249e8d9f37229dde90b72e6ad7cadc8182c54f534ca9ceac67bd322cb15f492e kernel-devel-5.14.0-570.52.1.el9_6.x86_64.rpm 3c6fcdbe8d4e57e6695b6d851d46e6bcd132eeed045e2f470095aeb8d87ba23b perf-5.14.0-570.52.1.el9_6.x86_64.rpm 472b7935d36a02b639dba65def6f141cd8ac06e3b8e22eac2a9d06bd8acaff6a kernel-debug-devel-5.14.0-570.52.1.el9_6.x86_64.rpm 608299bad6c0b8a5d053b2a8bb6923c748529415550ac44dcd97332ecebf82ce kernel-debug-devel-matched-5.14.0-570.52.1.el9_6.x86_64.rpm 62c5872ae0c7d456ca57ca9da8ae8725cb8bcdedbc2a1c9a68cd75633d198799 rv-5.14.0-570.52.1.el9_6.x86_64.rpm 7cb491d964dd1e90fef78cb29ff2100b3724302ac4a82dcf9ec085fba2f92264 kernel-devel-matched-5.14.0-570.52.1.el9_6.x86_64.rpm c6bd4ee161527c9969a36952e6f6e0671a8db0ddf84358c2cd40a392cd0bd385 kernel-headers-5.14.0-570.52.1.el9_6.x86_64.rpm e0cda928db0120fefdd9e773dbb271a113edadabad66955229c8056ca6c3c075 ALSA-2025:18097 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342) * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default webkit2gtk3-jsc-2.50.1-0.el9_6.i686.rpm 05382c22451a7e74981c5cdcf23e75ceef320824e1dd30f0070f962b6dfd1007 webkit2gtk3-jsc-2.50.1-0.el9_6.x86_64.rpm 18cb72d458668f203374cf17e4f2f813e307ad161673f0821c346edf8ce0cba6 webkit2gtk3-jsc-devel-2.50.1-0.el9_6.x86_64.rpm 3bb7233a6c145e22c66d6860f1aee63e5c473698ed1daa82c083b25a1e4efb3a webkit2gtk3-2.50.1-0.el9_6.x86_64.rpm 58ddcadb7349c77c7d18b5ab7f4b2dd06af08e074f68aa9eb00c014bd0e66b18 webkit2gtk3-devel-2.50.1-0.el9_6.i686.rpm 8215252b9f7aa7f99f56b4bd3110a6ec38e20123b5f4f0bf660465c93935bea6 webkit2gtk3-jsc-devel-2.50.1-0.el9_6.i686.rpm 8844521817e8d2f216f07dd0c67304dffe894ad4b1181be97eeae4f4ab155f03 webkit2gtk3-devel-2.50.1-0.el9_6.x86_64.rpm ba50504b4edcce73a5f95a498c519429d4366784d1ed1c77ddecca169f27fc99 webkit2gtk3-2.50.1-0.el9_6.i686.rpm ef2c4b70c1ad99208a46d0d55b0d66460bbcef7252ca1d3137944a0217ec7ded ALSA-2025:18149 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime 8.0.21.Security Fix(es): * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315) * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default aspnetcore-runtime-dbg-8.0-8.0.21-1.el9_6.x86_64.rpm 12f91d63fbc0d8de127fb3267b4d7bf4ac527fc580057da9439bac7c31556807 dotnet-runtime-dbg-8.0-8.0.21-1.el9_6.x86_64.rpm 342ac20210c261becebaa1fbec56cc9ab8418d5649c87e198d1c6a4319b24666 dotnet-apphost-pack-8.0-8.0.21-1.el9_6.x86_64.rpm 44694249d3dafa24001993d0e98475730194cda503ca678beb120d34b1802c01 dotnet-templates-8.0-8.0.121-1.el9_6.x86_64.rpm 5c78ef5413ef8bde1ca8fe3ffe0b45e814f139afa872aec1b9d9b5659aa12a75 aspnetcore-targeting-pack-8.0-8.0.21-1.el9_6.x86_64.rpm 5ddff478cc9156323129bb55715c830a95219aeec964ae2a441301d04e09b09b dotnet-sdk-8.0-8.0.121-1.el9_6.x86_64.rpm 65c024a9db1d4a403f4e6b5c4d1c7654eb786253137d8ccccbd66c3efdfc9299 dotnet-targeting-pack-8.0-8.0.21-1.el9_6.x86_64.rpm 6604acbb03dd2dfe11200cb078939c46275c02b5a019164c3f647b599caf310b aspnetcore-runtime-8.0-8.0.21-1.el9_6.x86_64.rpm 683eefbb8c0e78bc4885127973106a4684f2de3b547381110414ce7bd8b58f7b dotnet-sdk-dbg-8.0-8.0.121-1.el9_6.x86_64.rpm 6abff5f77a4e4934d15dc73747c4e20a26f3fae40f8ddd976d5dd4fa9d781a88 dotnet-hostfxr-8.0-8.0.21-1.el9_6.x86_64.rpm 84de829e88d0026a6d1cc0b17ef77bdabd32484850f615e924e5276bc6025080 dotnet-runtime-8.0-8.0.21-1.el9_6.x86_64.rpm ab8c17d2603b12a8c6eb18c6670c485b0238452245d467b26b0c1154abe6c028 ALSA-2025:18151 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime 9.0.10.Security Fix(es): * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315) * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default dotnet-hostfxr-9.0-9.0.10-1.el9_6.x86_64.rpm 0dfd6ec9d21f9a371cdcb69dea94ca8897346c2872c148b4007a3eedb38678cd dotnet-runtime-dbg-9.0-9.0.10-1.el9_6.x86_64.rpm 0e12a49f104c9d58f2613c0c42741d2012d85f7014a97eb2337c2ae8ac5aa606 aspnetcore-runtime-dbg-9.0-9.0.10-1.el9_6.x86_64.rpm 138b311d0f4f1f43c8656256fb303fdf839fe0d6ef95d9e4e3a900f2094c5acb dotnet-sdk-aot-9.0-9.0.111-1.el9_6.x86_64.rpm 32c923d5d5ccc005bf440a065ee992524851587ed7715598f70a8e1d2fcb0a79 dotnet-apphost-pack-9.0-9.0.10-1.el9_6.x86_64.rpm 5e8419346cfa9c1c090289674fe9807370e12ff520827b70f247c05ca8a6a76a netstandard-targeting-pack-2.1-9.0.111-1.el9_6.x86_64.rpm 6d482dc0b6b835744540f1fb6b0db9c526a82dd321f5da6203e1f7ce26206f75 dotnet-sdk-9.0-9.0.111-1.el9_6.x86_64.rpm a546157e5f7137ef80e941ba93146bd939a6720d7ea4ca6a0f18dd44f384d785 aspnetcore-runtime-9.0-9.0.10-1.el9_6.x86_64.rpm a5e80678d6bf9d3403c4fb4b01f2fed9bd14f0ee26b9fcc3867c7c7b97948a84 dotnet-templates-9.0-9.0.111-1.el9_6.x86_64.rpm a86871d35be5ea5a84e0a138f7649ea6ac67b0d6a6cc069704cd09dcf2503495 aspnetcore-targeting-pack-9.0-9.0.10-1.el9_6.x86_64.rpm c0a7ccb3929df4d3145785ffe032ee2543872222d1556c59d0240baba29530c5 dotnet-targeting-pack-9.0-9.0.10-1.el9_6.x86_64.rpm eafeb51ebf49c792c4644a53796806d7d5dbe345acd2bca5f0af3975dda04188 dotnet-sdk-dbg-9.0-9.0.111-1.el9_6.x86_64.rpm eb422c4049187da17996381d439f52f68bc1a3a6f4d61a37ff62180e77ddd2e8 dotnet-host-9.0.10-1.el9_6.x86_64.rpm f156ae57a67ba366b5845ae83514327f9ae224dd01c1483c75109fda46078d19 dotnet-runtime-9.0-9.0.10-1.el9_6.x86_64.rpm fc7fbf9efa92e78f7c5a1fe1ad997978effb3d5c294680312ff146461b2ec5fe ALSA-2025:18155 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * thunderbird: firefox: Memory safety bugs (CVE-2025-11714) * thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures (CVE-2025-11709) * thunderbird: firefox: Cross-process information leaked due to malicious IPC messages (CVE-2025-11710) * thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708) * thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type (CVE-2025-11712) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 (CVE-2025-11715) * thunderbird: firefox: Some non-writable Object properties could be modified (CVE-2025-11711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default firefox-140.4.0-3.el9_6.alma.1.x86_64.rpm 537661e2c8889935b147adfd305421ad62c4c07a8b459435657a445f618fa620 firefox-x11-140.4.0-3.el9_6.alma.1.x86_64.rpm 61ca0fe5fc075ec3e562e185428459de2aed3430ff50f29212c9564671a237e1 ALSA-2025:18275 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libssh-devel-0.10.4-15.el9_6.i686.rpm 2bae6a9926c3f9da248ed855f09d05aa5654fc9c8e526a5f6fefabf2309623f6 libssh-devel-0.10.4-15.el9_6.x86_64.rpm fc7876b9b6b8aefc45c6bdf227d3b9ceba9062d889f49fb632c1ac17fb0f91c6 ALSA-2025:18281 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026) * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087) * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571) * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566) * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817) * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849) * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default rtla-5.14.0-570.55.1.el9_6.x86_64.rpm 2815e06a27cdd19ceedce191a71b95f28a004daf1f1d8256085de5b141e91c13 kernel-doc-5.14.0-570.55.1.el9_6.noarch.rpm 4d9c6b35d3194124513ca452e19b2f7736f8bea1266f6c1b065374ff9a92ef9a kernel-headers-5.14.0-570.55.1.el9_6.x86_64.rpm 7d06f49fae9bdaa8ab2dc10bf2ed736b0351cbab9f6873c647b2e95df451e321 python3-perf-5.14.0-570.55.1.el9_6.x86_64.rpm 81fcdece8d6b5c179e1bfebcf7baa29c0b7a46d22c8ca3392cb60fc5c7284c72 kernel-debug-devel-matched-5.14.0-570.55.1.el9_6.x86_64.rpm 8533a21f7e048363b871e2ffd5b549ed1b54fe923aa4b82a0cac7134eac624d9 kernel-devel-matched-5.14.0-570.55.1.el9_6.x86_64.rpm 868109fa44f37a462620af3a2fdf6ecd29e29bd8666f70cbdd34f45dd525cbf3 perf-5.14.0-570.55.1.el9_6.x86_64.rpm 8764eec3f450958ffde02ad2752a6778ee756bddf05bb92d355dc02ca6280b25 kernel-devel-5.14.0-570.55.1.el9_6.x86_64.rpm 96be5865ca08decc859fc0dcc11ea0d8d2281ff60fdacd544c84079959f9b2ad kernel-debug-devel-5.14.0-570.55.1.el9_6.x86_64.rpm a56a3440aa3f04bd01c7eea8535f24d9e9ed018a40991c912a7c593a6c226f14 rv-5.14.0-570.55.1.el9_6.x86_64.rpm f6e14742c6083437052485364bec49487c8ea9af205baf99c01f22ebbb51f70c ALSA-2025:18321 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: firefox: Memory safety bugs (CVE-2025-11714) * thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures (CVE-2025-11709) * thunderbird: firefox: Cross-process information leaked due to malicious IPC messages (CVE-2025-11710) * thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708) * thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type (CVE-2025-11712) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 (CVE-2025-11715) * thunderbird: firefox: Some non-writable Object properties could be modified (CVE-2025-11711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default thunderbird-140.4.0-2.el9_6.alma.1.x86_64.rpm 1c084d864f0c41ff9fbc3816e240fffa40159ea272ae825037ad87891531510e ALSA-2025:18815 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Enhance Path Factories (CVE-2025-53066) * JDK: Enhance Certificate Handling (CVE-2025-53057) Bug Fix(es): * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 8 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.2, 8.4, 8.6, and 9.0. On AlmaLinux systems, this means that OpenJDK's FIPS mode will now be enabled by default when the system is in FIPS mode. To revert to the previous behaviour, use -Dcom.AlmaLinux.fips=false (AlmaLinux-118777, AlmaLinux-118778, AlmaLinux-118779, AlmaLinux-118782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default java-1.8.0-openjdk-javadoc-zip-1.8.0.472.b08-1.el9.alma.1.noarch.rpm 7e289418594ddbd3e9f698ad094d485ec0f4489473314d18c07c6273122667da java-1.8.0-openjdk-devel-1.8.0.472.b08-1.el9.alma.1.x86_64.rpm 917f1d944344ad674fd646d9a7c6ba02c232da168d7077d9d68e326450a1e2e8 java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.x86_64.rpm af2746696217512f561822b0f8d96e7fbaaa906d5a5ea31b524f8fc23aeba2f2 java-1.8.0-openjdk-src-1.8.0.472.b08-1.el9.alma.1.x86_64.rpm bff46049fab9d90a065bca3e9b7890a38cc68d1bf1af46d69e54580cd56f8c5c java-1.8.0-openjdk-demo-1.8.0.472.b08-1.el9.alma.1.x86_64.rpm d27e1d403c84a048624b9a13e1dd52e2635cf6b2915084412b1fc04179228711 java-1.8.0-openjdk-headless-1.8.0.472.b08-1.el9.alma.1.x86_64.rpm d8dc37e3fbdb094f97d0e4999409af4fbbf2ebdc143bcf976726287da35227db java-1.8.0-openjdk-javadoc-1.8.0.472.b08-1.el9.alma.1.noarch.rpm f42a0e0c86f8235e9c8edbcd28d33fa9773a58d54e7dc288e4f94399126ea955 ALSA-2025:18821 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance Path Factories (CVE-2025-53066) * JDK: Enhance Certificate Handling (CVE-2025-53057) Bug Fix(es): * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 17 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.4, 8.6 and 9.0 (AlmaLinux-118788, AlmaLinux-118789, AlmaLinux-118792) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default java-17-openjdk-src-17.0.17.0.10-1.el9.alma.1.x86_64.rpm 023a6a1ec11466c30281b7e2ba27cddc4ccee243a7d451100c8a73066e4f8a76 java-17-openjdk-17.0.17.0.10-1.el9.alma.1.x86_64.rpm 0782e8294f234cfa1b65eb6f1aef9caf0e5769148065bb485d0392b54f2691cd java-17-openjdk-jmods-17.0.17.0.10-1.el9.alma.1.x86_64.rpm 0f61117a2e40f85b1e327ce14beb90b4b557e0fec98c69ee727eafdf96cc4de7 java-17-openjdk-javadoc-17.0.17.0.10-1.el9.alma.1.x86_64.rpm 20b229d970a46dbb39ac7d5a32e397aa9c34a1b1be99648c0f0cff999346ee2e java-17-openjdk-headless-17.0.17.0.10-1.el9.alma.1.x86_64.rpm 68bf91a6c51ecd8c0b1a70060bff43e295a6d3f07ad763c7ea540e4e67a0bf73 java-17-openjdk-static-libs-17.0.17.0.10-1.el9.alma.1.x86_64.rpm a897eb7621b0ce725536609005a3e048d3e16375cb3e717cee04a1b4b6356fb3 java-17-openjdk-demo-17.0.17.0.10-1.el9.alma.1.x86_64.rpm bfd34a53761a3bb3deca4b5533a7c43a1bef1f8e7304b857d9504146b4f347a1 java-17-openjdk-devel-17.0.17.0.10-1.el9.alma.1.x86_64.rpm df74c29fd05878b6a99e3f370dea4539710825c14f82157e0566b7ef0781e99e java-17-openjdk-javadoc-zip-17.0.17.0.10-1.el9.alma.1.x86_64.rpm f115e47a9fd321274a4f449d3057708d3cc4f931229b1e5138169b2922d4b775 ALSA-2025:18824 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance Path Factories (CVE-2025-53066) * JDK: Enhance Certificate Handling (CVE-2025-53057) * JDK: Enhance String Handling (CVE-2025-61748) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default java-21-openjdk-static-libs-21.0.9.0.10-1.el9.alma.1.x86_64.rpm 3f598b286030f632c43e8f5d3ce2164910bcc790279f565a827c8ae24671d2d4 java-21-openjdk-headless-21.0.9.0.10-1.el9.alma.1.x86_64.rpm 5ac84096839874c87ea17b74b4a5b8591ee10285e42d7d97640ff9182eab4561 java-21-openjdk-demo-21.0.9.0.10-1.el9.alma.1.x86_64.rpm 5c218b0d90af4754d739ba7b133e90f643cf0a99c56377b60dda15eed45728ee java-21-openjdk-devel-21.0.9.0.10-1.el9.alma.1.x86_64.rpm a681a1defe006b02123d3f7c2c9c0557c99851dc98466876926ffd37004d7e50 java-21-openjdk-javadoc-zip-21.0.9.0.10-1.el9.alma.1.x86_64.rpm c3f8a919e06284216249f3cf03a936d2b783e6258eafd03b9b3ead390a236e24 java-21-openjdk-javadoc-21.0.9.0.10-1.el9.alma.1.x86_64.rpm cb035d6eff147207759ae4067ec63fa109e31b3f9b40a4cdb363c4a862938031 java-21-openjdk-jmods-21.0.9.0.10-1.el9.alma.1.x86_64.rpm cc1ff3a9ce0f3cdbb163ebe9f0a6c9f65e6ee8a6201c9af46779f0c7eb1dae02 java-21-openjdk-21.0.9.0.10-1.el9.alma.1.x86_64.rpm dd23782dda4c14d63d6349f8f97392f9476a6997982d9cd2a15653981169b557 java-21-openjdk-src-21.0.9.0.10-1.el9.alma.1.x86_64.rpm ef780facdfbd7bb77748cd9ea5a47e44f80be726ef3b886d9e4b09adcf8d1474 ALSA-2025:19113 Copyright 2025 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176) * libtiff: Libtiff Write-What-Where (CVE-2025-9900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libtiff-devel-4.4.0-13.el9_6.2.i686.rpm 10cabb667fe46037098be58bcf4e72bc6d983ce0b942c0118df57a331287b7eb libtiff-devel-4.4.0-13.el9_6.2.x86_64.rpm 1d534a8e1cc55a40b6e6b6ab6577dd95766c71eaf6dee771207f22d282d35477 libtiff-4.4.0-13.el9_6.2.x86_64.rpm cd5c7bb38afe3f8667d9162f2da10ec4d47bd9669af9d28ee68db68409858ae5 libtiff-4.4.0-13.el9_6.2.i686.rpm ef63c0addd617a55b14d184b7619fe74740ee8577b7a04704c0a2d28c8c5cb57 ALSA-2025:1915 Copyright 2025 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme (CVE-2025-1244) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default emacs-nox-27.2-11.el9_5.1.x86_64.rpm 2d2a77c360d6cae7b1e7b8ec44c68099d1f2333584227aa7de28ca09f1a80361 emacs-filesystem-27.2-11.el9_5.1.noarch.rpm 57425fc8bd2c19350e0bfcfb88acd31691426f35eb27d61378c162a4f848fe7a emacs-27.2-11.el9_5.1.x86_64.rpm 6668ac3b4fc0c6b72f228e98394e859cfc3c96a35aae8e4d8ce0d2fd9632283c emacs-lucid-27.2-11.el9_5.1.x86_64.rpm 8d6b346c69237366114567da2e674a9b990fa69221592f95691869ae24365b40 emacs-common-27.2-11.el9_5.1.x86_64.rpm c41caa74bbd3a79e802196b010365c4cf402f85120857f1ebe74ee5d2d215973 ALSA-2025:19237 Copyright 2025 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default redis-devel-6.2.20-1.el9_6.i686.rpm 0c0b59c774b645c0b970c2fd0742ce00f2680f7bd0e97582aa00581bcf662497 redis-doc-6.2.20-1.el9_6.noarch.rpm 1e8b70ff7c429f4c9a4b2ceeb0700b5d771d0e49fd783385b99e72d840a97e99 redis-6.2.20-1.el9_6.x86_64.rpm 2d08736aa96f0930cb6ff91d952cede699bd606c5bd22f23c5f5e6290d5ccd06 redis-devel-6.2.20-1.el9_6.x86_64.rpm d2922fa621b6b90f129a98129b372a388ba15623fec949b21ae556950f6f5f5b ALSA-2025:19345 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default redis-devel-7.2.11-1.module_el9.6.0+188+92104ce8.x86_64.rpm 90298fd50cf73052e6551a7f8cf99bec8240edb1142b28ec611fc6b70ce0c1b2 redis-7.2.11-1.module_el9.6.0+188+92104ce8.x86_64.rpm be5adfa72b4b9b85cd6a4dbde126c6c2d02477efeb248e37df5262c281f1f019 redis-doc-7.2.11-1.module_el9.6.0+188+92104ce8.noarch.rpm e0e782684f21c859ef6e2be5a9e350696716b68b6e68ae9e6070eaae7a7881f2 ALSA-2025:19409 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702) * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367) * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default rtla-5.14.0-570.60.1.el9_6.x86_64.rpm 1e0f342175078c6ba81da948ededbf63e3d708dd3fca4b1f0472cab402bbf82f perf-5.14.0-570.60.1.el9_6.x86_64.rpm 2cde5ed2674dd5e83132ec9cd4a59a2b63311756e8ada3f4d9cd1eefe85063d2 rv-5.14.0-570.60.1.el9_6.x86_64.rpm 4503a9e194b8bb1c2658c4df13c8189b33d97ebeaaa2b084af75ba1d0ab01ff9 kernel-debug-devel-matched-5.14.0-570.60.1.el9_6.x86_64.rpm 50900a2796b345bc822d0bb98dc1af60d22fe5561e8f350f74da8c34f24adf30 kernel-doc-5.14.0-570.60.1.el9_6.noarch.rpm 56d81918c6bf8cfe78aa7045fdf3a566b6bf060001ad9c292756177b92de89ca kernel-headers-5.14.0-570.60.1.el9_6.x86_64.rpm 5730731a84e406489dc4a440c071142b2fe80f81c5f43f0a5cde8ce00d989447 kernel-devel-5.14.0-570.60.1.el9_6.x86_64.rpm 682cf743bc48a95b99ee73a6a95a8291c47a9c3bfcdbaac9d6fb704380b5878b python3-perf-5.14.0-570.60.1.el9_6.x86_64.rpm 77def717a26b1efada92b4f1d923154d879cd36013323a794364121b4e352062 kernel-debug-devel-5.14.0-570.60.1.el9_6.x86_64.rpm 8af0b44698c4357589377a34ce9b687f27901ae3c5ffcb909e33456f70f6d4a1 kernel-devel-matched-5.14.0-570.60.1.el9_6.x86_64.rpm 8d1b894a3100f91c334a1dc06b8321c18fdb162635a7fef37817ac656bc74458 ALSA-2025:19489 Copyright 2025 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default tigervnc-server-module-1.14.1-9.el9_6.x86_64.rpm 0ef86e3e46c93451fad1955d252bdeafb42bb73f3e7a30d2bc4cf5c75c36a6a4 tigervnc-server-minimal-1.14.1-9.el9_6.x86_64.rpm 48511e430b24fbf3ac9d2994188c3124e15624d2ada252271d85813824ff9521 tigervnc-server-1.14.1-9.el9_6.x86_64.rpm 5f06cd13a0ca6a57a79e1b3b8ad47967cbfb29e32dbf826234e5b2d0ce7a6747 tigervnc-icons-1.14.1-9.el9_6.noarch.rpm a48af40b7b945104b762b3bee9b92d035d55472d983c8a5618b5e9955010c260 tigervnc-license-1.14.1-9.el9_6.noarch.rpm b0a4e8d4edae26e11f55b71f6894b5ac9fe20e6873ff20ca43ffe155a724cc41 tigervnc-selinux-1.14.1-9.el9_6.noarch.rpm cb396b6637c108f1a93ab3c4b6d5f8268f6ae61a68b5cca03d929802b332076f tigervnc-1.14.1-9.el9_6.x86_64.rpm efd49dd882c5bf9f8fb202e3ea706cd05687b6688bd97ab0a8683002408446fe ALSA-2025:19584 Copyright 2025 AlmaLinux OS 0 1 Moderate

galera and mariadb security update

Galera is a fast synchronous multimaster wsrep provider (replication engine) for transactional databases and similar applications. For more information about wsrep API see <https://github.com/codership/wsrep-API> repository. For a description of Galera replication engine see <https://www.galeracluster.com> web. Security Fix(es): * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969) * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mariadb-10.5.29-2.el9_6.x86_64.rpm 076ba22ee40a7ef515d9eccb3695cd41fd7b868459920a8b766a3dfa956a94f2 mariadb-server-utils-10.5.29-2.el9_6.x86_64.rpm 0a02cdaab8ab4a73c567ef70da42fc6772c57850fc1a78ebb55d4bff66b6cbcc mariadb-embedded-10.5.29-2.el9_6.x86_64.rpm 4badd4ca7f24344e8c097a4fcc8278c1b8e1d606d1c7dd0545d2836fb644b046 mariadb-oqgraph-engine-10.5.29-2.el9_6.x86_64.rpm 50206907102fb6b48fb6f86d1f978e37964a83f42589a5a3c017bd828c99e3d3 mariadb-gssapi-server-10.5.29-2.el9_6.x86_64.rpm 561e481904ce6bfb35b68d5a6f12171c0d5927b98fdd9e0ae25d1d5e6288e860 mariadb-errmsg-10.5.29-2.el9_6.x86_64.rpm 586176f8dc40fb0d1c77c7f15e29da7677d53f6ae0286642fcd66529c1fb22de mariadb-server-galera-10.5.29-2.el9_6.x86_64.rpm 6c5defc131a18cb0012546167738be54bf1dbbcb739a2da5f97e278974388af4 mariadb-pam-10.5.29-2.el9_6.x86_64.rpm 91f0daafbe1e1bbe41e6949ded37fed02831afe71143eb48638fd93eec5462a2 mariadb-server-10.5.29-2.el9_6.x86_64.rpm a36727ed482cbead59b61883f2cd75bcf9273d5e66b5bceb57614cd7bae90dfb galera-26.4.22-1.el9_6.x86_64.rpm bb8953c6ab33063b3fbb71c9474a7a3c58ba96f7b7a9401d903af2eed0d0e69d mariadb-backup-10.5.29-2.el9_6.x86_64.rpm cbb2ab309a19501f802c85f298c4ed9f073ee03586353b2ffc1e1d446d401f85 mariadb-common-10.5.29-2.el9_6.x86_64.rpm e4d2199b1d5c56e5ac0a6c1610795935110f9c90c6f1f52eb579beceba299980 ALSA-2025:19927 Copyright 2025 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133) * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565) * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default runc-1.2.5-3.el9_6.x86_64.rpm 711a40b34b32bbe49d4b2caefd5573401a3d409f5a14199f139f3aa679af7ec2 ALSA-2025:19930 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-debug-devel-matched-5.14.0-570.62.1.el9_6.x86_64.rpm 65b38d9f7aa60bcf50935df664218b5a18016062351ce593d6e99ce9144c665c kernel-doc-5.14.0-570.62.1.el9_6.noarch.rpm 7f01643d1b9c165c0f8e53b1b715f7bfea46f4aeb0c7ae6ae386ef645c2abcb4 kernel-devel-5.14.0-570.62.1.el9_6.x86_64.rpm 8cb4bf914a66d57df2d0b727178d5c45ff1a8cae7b59fbd8cb3222b5aff714d0 kernel-headers-5.14.0-570.62.1.el9_6.x86_64.rpm 92ab223c8b08f8a34e7d10cda8f7f0ad92c23dd305a14c60ba3d051792b4b29f kernel-debug-devel-5.14.0-570.62.1.el9_6.x86_64.rpm a37ebcea641d252b2525225e2e91ebab7e6e946741419848a41f7719a30d3541 perf-5.14.0-570.62.1.el9_6.x86_64.rpm a66edf5924c41c00df9ff5d9eb3a4b8cde4af7f568288886e10b7a7e8c395459 kernel-devel-matched-5.14.0-570.62.1.el9_6.x86_64.rpm bd30ca60baace53f16063a6a486b9ca64ac153f1d9fa97559ba499dc4329478b python3-perf-5.14.0-570.62.1.el9_6.x86_64.rpm d608070b250a569c509bff1932707bfd487b4dd604ae3006fa8cb6845e95d5a6 rtla-5.14.0-570.62.1.el9_6.x86_64.rpm e7f3f9f9ee44121b817deaf7e42e291e8384809905225998d39d3157cdbf46f2 rv-5.14.0-570.62.1.el9_6.x86_64.rpm fdf50c31fea0551aea2298f7ba25cd9de64b02c6f25a1547b43c9e6e9e3349ba ALSA-2025:19950 Copyright 2025 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778) * bind: Cache poisoning due to weak PRNG (CVE-2025-40780) * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default bind9.18-chroot-9.18.29-4.el9_6.2.x86_64.rpm 205b88fb5bc6e7b442eecdee336789d5e110540dd8b557e0455aa276d47bcd92 bind9.18-9.18.29-4.el9_6.2.x86_64.rpm 905c855675a16e025a4942f4792c3fb2fcce86ecf767e08d33526fa4bfabf662 bind9.18-dnssec-utils-9.18.29-4.el9_6.2.x86_64.rpm eccc41a3a3cc0353ac4035417a627eb99adef73b0451d86eed34af3139a1e73e bind9.18-utils-9.18.29-4.el9_6.2.x86_64.rpm f402f24352e15b569fdfcce2503f064b530d2f65e23bab246b54e861a139ecd4 bind9.18-libs-9.18.29-4.el9_6.2.x86_64.rpm f419a2c405d6466529e95fdfdb51712201d6f609f5c608ceaa328ae626ae141b ALSA-2025:2035 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54543) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2025-24143) * webkitgtk: Copying a URL from Web Inspector may lead to command injection (CVE-2025-24150) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-24158) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24162) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default webkit2gtk3-2.46.6-1.el9_5.x86_64.rpm 209f2fd897d3c54b1cf0e07482c1aaedeec7ce805abf6b10069640f0670e2711 webkit2gtk3-devel-2.46.6-1.el9_5.x86_64.rpm 3e10e8c3f744c6870a6d8c4381e1ca7087284cf5baca5fc5029c547b8042a922 webkit2gtk3-jsc-devel-2.46.6-1.el9_5.x86_64.rpm 455096f976a16bdca20e5aad68cb75131941ed468fa08da5b4f0f8f7cfd6cf91 webkit2gtk3-jsc-2.46.6-1.el9_5.x86_64.rpm 5118c62026beccfb03c865d5124cb0fd949eb7d21a514edf1e4870a0b48083a5 webkit2gtk3-jsc-2.46.6-1.el9_5.i686.rpm 8be2260729f42a2f1d88da4dd173f3c7bf7fb0408e3f71d10a62202f290ab9fe webkit2gtk3-devel-2.46.6-1.el9_5.i686.rpm 9e0c07064051ca929923e183fbd09062cb019cb836dde7a34ea907b18c6fd8b8 webkit2gtk3-2.46.6-1.el9_5.i686.rpm c35ba768194f64d13e90d36d07e50eea74bf51d22a586a91e8c30fbde482fb3f webkit2gtk3-jsc-devel-2.46.6-1.el9_5.i686.rpm dd4fe97178040975e3b35c1dba384df21782cd91b127b3c43fabcd2c2e5b6d95 ALSA-2025:20518 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830) * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689) * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744) * kernel: vfs: fix race between evice_inodes() and find_inode()&#38;iput() (CVE-2024-47679) * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727) * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864) * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060) * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024) * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195) * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294) * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052) * kernel: afs: Fix lock recursion (CVE-2024-53090) * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119) * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135) * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241) * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229) * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170) * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216) * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672) * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662) * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675) * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690) * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709) * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739) * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786) * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332) * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680) * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648) * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647) * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631) * kernel: zram: fix potential UAF of zram table (CVE-2025-21671) * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672) * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693) * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691) * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696) * kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702) * kernel: usbnet: fix memory leak in error case (CVE-2022-49657) * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432) * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672) * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353) * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437) * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627) * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670) * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269) * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643) * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623) * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357) * kernel: list: fix a data-race around ep->rdllist (CVE-2022-49443) * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648) * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746) * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795) * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728) * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456) * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987) * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014) * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988) * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714) * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570) * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993) * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729) * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989) * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015) * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998) * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995) * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796) * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739) * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786) * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738) * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986) * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726) * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791) * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787) * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981) * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790) * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990) * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765) * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012) * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745) * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806) * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072) * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068) * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062) * kernel: idpf: convert workqueues to unbound (CVE-2024-58057) * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828) * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083) * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826) * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077) * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075) * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837) * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851) * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855) * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844) * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853) * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847) * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864) * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088) * kernel: acct: perform last write from workqueue (CVE-2025-21846) * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861) * kernel: io_uring: prevent opcode speculation (CVE-2025-21863) * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848) * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056) * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845) * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994) * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116) * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-headers-5.14.0-611.5.1.el9_7.x86_64.rpm 26dac4729549b9fa461d23f0459a991be7959ddf8f3cf83577623a94530ce8b0 kernel-devel-matched-5.14.0-611.5.1.el9_7.x86_64.rpm 3436ce5f5a1489314cb7d5bb80830c96237ed95763dbe0e3cb6865a5584a1e5f perf-5.14.0-611.5.1.el9_7.x86_64.rpm 7f868c6903515300a3f3f3056f9c5fb9254eb854d0e47e9206893b70a808e104 rv-5.14.0-611.5.1.el9_7.x86_64.rpm 944c5c55e0faf9b614642ec80c4964a4f0326c9d6d9d20b9b441dd903772271a python3-perf-5.14.0-611.5.1.el9_7.x86_64.rpm a526fb69750698e370dcb670305b3668acb893eab66df105071f7b540ad4dc73 kernel-debug-devel-5.14.0-611.5.1.el9_7.x86_64.rpm ca01672fb42d75c6b145520fab262cfe58bc51e11817055dac4363d64f9660b2 kernel-doc-5.14.0-611.5.1.el9_7.noarch.rpm e0ab78a8550bea90b76893646795a5e87e4bf3dc56ed958f8c803214d9f2ed81 kernel-debug-devel-matched-5.14.0-611.5.1.el9_7.x86_64.rpm eec1a7e3cc488e08ceeb553cb83b0895e0802bb7b2ae64ac1ddab32eaa2fa6ae rtla-5.14.0-611.5.1.el9_7.x86_64.rpm f3b2d5b2a240fedf71d51e9a7bc634c770e491eb1a9bb9468bde308225ff8e12 kernel-devel-5.14.0-611.5.1.el9_7.x86_64.rpm f8646be7e0df84b6a18d37eafedf66a93ae43458002c849489dacc0bcce43ef5 ALSA-2025:20838 Copyright 2025 AlmaLinux OS 0 1 Moderate

zziplib security update

The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default zziplib-0.13.71-12.el9.x86_64.rpm 69cfe83831bb4b8814ff499b8b8a2f47eab2f3effb92fce346c16069321210ac zziplib-utils-0.13.71-12.el9.x86_64.rpm b2ea26a44923116c191fe36db650e4a88c2d36ce1189939c74e8742f33dd861e zziplib-0.13.71-12.el9.i686.rpm fa38f9a10efab6d6f748f8bed6f7d9f1b31ed5bb58235649f29fbe12c6880e5e ALSA-2025:20909 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * database/sql: Postgres Scan Race Condition (CVE-2025-47907) * podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default podman-docker-5.6.0-6.el9_7.noarch.rpm 0dc69f001bfc0953d60bfffcd07c0eeced0ae9dfc3e237fb6b9959fdae5eb761 podman-5.6.0-6.el9_7.x86_64.rpm 2a25505bf0767db3f0fc6e5741c89dd240bf4f9be4089e1c9fd2242bd0e2d9f4 podman-remote-5.6.0-6.el9_7.x86_64.rpm be2e4d8da6855ded210271c4e3c0228137615910d17d356c5e57abfea4632c10 podman-tests-5.6.0-6.el9_7.x86_64.rpm cd325d51fc4e2ffd3f37aff21f01732661e6d7f0f52a0e7690880d1477c191da podman-plugins-5.6.0-6.el9_7.x86_64.rpm e4f20a6102ee1f2b2d057f9a0b4ee441b3c0598d45262796a44490756363c145 ALSA-2025:20922 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342) * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default webkit2gtk3-jsc-2.50.1-1.el9_7.x86_64.rpm 0ab62d37de6483d847acad2d0174e4f95ef2909196f136941f0a556e45ac1638 webkit2gtk3-jsc-devel-2.50.1-1.el9_7.i686.rpm 10cf183a992eade85fb6f0f69b4043f4a8685d05b7b29d9858494293fabe1f83 webkit2gtk3-devel-2.50.1-1.el9_7.i686.rpm 25f6b28b4cccecd39608d946193199bbbc6ebdc81dd3725b96b9b8a3e83fcc22 webkit2gtk3-2.50.1-1.el9_7.x86_64.rpm 703ce4e2b79721341e3302147f176f64e681ec663dcbb2b725a7785c9c5974fb webkit2gtk3-2.50.1-1.el9_7.i686.rpm 927b19e54c3ad950322d18cf02aca260fcd03f0c8be400e34bf71b506d4ac7ca webkit2gtk3-devel-2.50.1-1.el9_7.x86_64.rpm a33d24f088448a8caa86dd01aad19701f0c19c82885907a0b816c8e287e3887e webkit2gtk3-jsc-2.50.1-1.el9_7.i686.rpm e9c91560b8ff3f454de74aa097020daeea52c1c054bca8acc27ad53e66bea82f webkit2gtk3-jsc-devel-2.50.1-1.el9_7.x86_64.rpm f5edc612270d98fae83fd30c3054f7cd94ebe0278974bbfcff80405353b1ac76 ALSA-2025:20926 Copyright 2025 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default redis-devel-6.2.20-2.el9_7.x86_64.rpm 1e23c93f7a1f6099640b2bd65ec143dd479354232b94bc9fbd5d59e182053b05 redis-doc-6.2.20-2.el9_7.noarch.rpm 42232f3aecfa61e79d0025ac7cc0edb318fc05cf219e6b0404c9eedc8aaf5117 redis-6.2.20-2.el9_7.x86_64.rpm c0325539d230ee309fc9a0e3f3fc2755c8b3557386e63ace1a62233d8f175fd8 redis-devel-6.2.20-2.el9_7.i686.rpm ea9e524dc444adf6eac05895364cd67f095cba02416b1e703d0de63c2db969b9 ALSA-2025:20928 Copyright 2025 AlmaLinux OS 0 1 Important

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-ipaclient-4.12.2-22.el9_7.1.noarch.rpm 023ac0818f6d060a70c77956bd8ac835311b393eef88c8400b43d48a9d3e4d94 ipa-common-4.12.2-22.el9_7.1.noarch.rpm 09fee2c19da96fd3e2097f8d6f43f34ff093a9427d7b4693c1cad539920b82d3 ipa-client-encrypted-dns-4.12.2-22.el9_7.1.x86_64.rpm 0e2902b7facb096e30cc29a18490c12bd57100cdaa5b2dfef7967431b06ba075 ipa-client-epn-4.12.2-22.el9_7.1.x86_64.rpm 1b5c3cbf3bcb0ed837ba055b9b5c33069a95ee9a6939f1bec028975463350a28 ipa-server-dns-4.12.2-22.el9_7.1.noarch.rpm 34b4aad3b8138a4f5014ff60709ef7627eca3ac2b0b42e86df6c0b94431e574c ipa-selinux-luna-4.12.2-22.el9_7.1.noarch.rpm 3df260b9ce022fdaee1ddd9c42ea1feb17463f75e4b2afbf9cc455c8c9b4daf9 python3-ipalib-4.12.2-22.el9_7.1.noarch.rpm 50a1e2661bd2a523ebe11023e509896359521a5af77ecd35060cdf75d2c4543e ipa-client-common-4.12.2-22.el9_7.1.noarch.rpm 6181ebdc401e594ea9f842731031548ce3d0552f6a91587ffcdf2aca37217a9d ipa-selinux-4.12.2-22.el9_7.1.noarch.rpm 7b155f0c86a36d68c0b3bed0c5157afe056d23fc3df22ec6f31257ec957835d6 ipa-server-encrypted-dns-4.12.2-22.el9_7.1.x86_64.rpm 9518826ea2d1d42ec69b08e605d47bee583867cb889cd51c9b20ffb620773e10 ipa-server-common-4.12.2-22.el9_7.1.noarch.rpm 988c777fb46e11f835b19d497070a6c61bc338ea0b4275aed4206668f0e9bb38 ipa-selinux-nfast-4.12.2-22.el9_7.1.noarch.rpm b72932cb1ba38cfcbcde3cb0f3262cde848c6796030169e08d2bea75671ae3a9 ipa-server-trust-ad-4.12.2-22.el9_7.1.x86_64.rpm c57e9a62409a964fc2c0eef24f262e140e6eca62d83b3e1fb3228429de3541e0 ipa-client-4.12.2-22.el9_7.1.x86_64.rpm cb15ccedaf8a1811fd89f633adc9e2ab613d80edb4ffdfe144296db604b73c27 python3-ipaserver-4.12.2-22.el9_7.1.noarch.rpm dfa31aad064c014fb03cb03084e0a51da7fada5fca5418221a15a584114ceee1 ipa-server-4.12.2-22.el9_7.1.x86_64.rpm e8f4738c6e63b5d95b4a9b594b58cc4321b1448e0e06e6dc442e91664a6c0bab ipa-client-samba-4.12.2-22.el9_7.1.x86_64.rpm f3a65fbce955fd433067dffa9c5e813575611a65f0e7e6ef609e5fb8137caf8e ALSA-2025:20935 Copyright 2025 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fix(es): * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default squid-5.5-22.el9_7.1.x86_64.rpm 8fd4275075716f6e62ad954cecc3864f15342615863080fde7910f3545597dad ALSA-2025:20936 Copyright 2025 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: Integer Truncation in SQLite (CVE-2025-6965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default sqlite-3.34.1-9.el9_7.i686.rpm 0e85665e49ad79d3b15dac436eec79b7e03c71e0a5e535eeaaabf939a28efec4 sqlite-3.34.1-9.el9_7.x86_64.rpm 0eec8e4aba1301e32ddbe9ce9f8a340e972084bfba4c646fb1203725e49e65b9 sqlite-devel-3.34.1-9.el9_7.i686.rpm 2a9c7b6ad193e5e38f0895f6bc6f1a11bb6094931c251a6f21f21cee097cb1b4 sqlite-devel-3.34.1-9.el9_7.x86_64.rpm 6efb2ac589f87bb7e6b3459eb8105b58e1cc21e563e66539e8e9a7322df51d70 ALSA-2025:20943 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libssh-devel-0.10.4-15.el9_7.i686.rpm 0ec7f0f15ce991d14fa97b50bb98f5df707b8b46b86dff8a91821598210493af libssh-devel-0.10.4-15.el9_7.x86_64.rpm 4118bf9026fa121d87abe57657c5842f9dc2987605d3c0f6bea45fadcd3169ec ALSA-2025:20945 Copyright 2025 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim path traversal (CVE-2025-53906) * vim: Vim path traversial (CVE-2025-53905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default vim-common-8.2.2637-23.el9_7.x86_64.rpm 153bb6effe851b2d2f7265be251acc471d0a4849c6431c4e579e6528482223df vim-enhanced-8.2.2637-23.el9_7.x86_64.rpm a615f66e9cebcc3dc362f128e8720521f33957e4ffb97540d9cb673f64e7c4db vim-X11-8.2.2637-23.el9_7.x86_64.rpm b9e91d483ad4b5ce71862a0d309d2cf6276511cbbcd4048893eb5ab3cf97aa6a ALSA-2025:20954 Copyright 2025 AlmaLinux OS 0 1 Important

sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default sssd-idp-2.9.7-4.el9_7.1.x86_64.rpm 6dc008a19b3b95d4607ec2b6b6c5ef15cf7b2ec1e1f40b9e8e33e5d83c98efac ALSA-2025:20955 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default redis-devel-7.2.11-1.module_el9.6.0+188+92104ce8.x86_64.rpm 90298fd50cf73052e6551a7f8cf99bec8240edb1142b28ec611fc6b70ce0c1b2 redis-7.2.11-1.module_el9.6.0+188+92104ce8.x86_64.rpm be5adfa72b4b9b85cd6a4dbde126c6c2d02477efeb248e37df5262c281f1f019 redis-doc-7.2.11-1.module_el9.6.0+188+92104ce8.noarch.rpm e0e782684f21c859ef6e2be5a9e350696716b68b6e68ae9e6070eaae7a7881f2 ALSA-2025:20956 Copyright 2025 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176) * libtiff: Libtiff Write-What-Where (CVE-2025-9900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libtiff-4.4.0-15.el9_7.2.i686.rpm b21c90e99faf24884f6f9e5523cfe92b60c5740e7e293d6d8cefe74ad236fb30 libtiff-devel-4.4.0-15.el9_7.2.i686.rpm c939923ee6e96a2c33df34c1e7e3adf5b3b63ca01c2b84ef59591fe441816451 libtiff-4.4.0-15.el9_7.2.x86_64.rpm de8912ed8d0aac62df6a3b13811b0d7a25a228577c2f376e2b7828e2c1622f70 libtiff-devel-4.4.0-15.el9_7.2.x86_64.rpm ec559713dfdcfcfb1629a329f01c80d9cf5e934bbb42635658f11d3c4d225939 ALSA-2025:20957 Copyright 2025 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133) * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565) * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default runc-1.3.0-4.el9_7.x86_64.rpm 6e792660c50b31c696de697f8bb02c8a2e0b765d020e5728b1f6c33bacf7ac27 ALSA-2025:20958 Copyright 2025 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default tigervnc-icons-1.15.0-6.el9_7.noarch.rpm 333e5482a205d8828f969fd977ba876027c9287c32583387abe4e1afe2e10988 tigervnc-license-1.15.0-6.el9_7.noarch.rpm 6a077ef5a28e02370391b2ec36e908423de2be14111b20041afd23a52841bb48 tigervnc-server-minimal-1.15.0-6.el9_7.x86_64.rpm 6a531fa351db049d6709086bdae183c48dab4df354320f31d9ee21e293b8df77 tigervnc-1.15.0-6.el9_7.x86_64.rpm 7d099dc1255d4b62f1f2da1a134b3b5512bfcfa7490f86b6936b62eef1541cae tigervnc-server-1.15.0-6.el9_7.x86_64.rpm 81122c08d264a56f59485fb75eaa7cf5da25dbacdc343d982939aec6cd95f5bd tigervnc-server-module-1.15.0-6.el9_7.x86_64.rpm 94fb920e945f8d7d6c0167bba81192b5dbe6393601d5385a051545f50421616c tigervnc-selinux-1.15.0-6.el9_7.noarch.rpm c52e4f99f0d4b4fb6120119a5e00ddca550bcdd994420eff7b665b995582fa44 ALSA-2025:20959 Copyright 2025 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945) * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libsoup-2.72.0-12.el9_7.1.i686.rpm 18cd18f4a7b6d24aa192d2896563d6c52e4c82f5a477a117d6013da6762c9e6a libsoup-devel-2.72.0-12.el9_7.1.i686.rpm 4908b29611e002c7f3e4dc1237f42145da899c5c6c90f2dffd29813a2ed01b66 libsoup-2.72.0-12.el9_7.1.x86_64.rpm 85678d82f1bbc68efa4061e9f5e1e80c84a78a2c23348bb41c42ca741603fdc6 libsoup-devel-2.72.0-12.el9_7.1.x86_64.rpm fd4048e286f01050db0f56f2e1c0e1fff4623ab9510ea243a5301bd818e8b0b8 ALSA-2025:20960 Copyright 2025 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default xorg-x11-server-Xwayland-23.2.7-5.el9_7.x86_64.rpm 765cb07995e126fa82b96c3db56edaa85679fb1a4edca1caba6dc33b02b7d58b ALSA-2025:20961 Copyright 2025 AlmaLinux OS 0 1 Moderate

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default xorg-x11-server-Xnest-1.20.11-32.el9_7.x86_64.rpm 0a78e1bbcdc0d5eae5b56fa046c934171ed89c3f9d7866ec222e850501d47229 xorg-x11-server-Xephyr-1.20.11-32.el9_7.x86_64.rpm 4effb38951c270e55589a6eac207ef23045f44038c944bbf98096ddf4bfcc392 xorg-x11-server-Xvfb-1.20.11-32.el9_7.x86_64.rpm 67ee296b051499704be199d28a5ce5262fe20f7284fae079ad88500bd0ff4768 xorg-x11-server-common-1.20.11-32.el9_7.x86_64.rpm 744c6d8325951bac7d8e5baa3cc83eb0362b034998460704dafe73e4201b1665 xorg-x11-server-Xdmx-1.20.11-32.el9_7.x86_64.rpm 90f25acd11a4d00416e612bd9632685c5ffb4b58640dd65d7fe1d3fa2025ae0d xorg-x11-server-Xorg-1.20.11-32.el9_7.x86_64.rpm ddfdf9e57050a737059337a725e1dfa5f2856d649bd784f1051cf747b7d8d30a ALSA-2025:20963 Copyright 2025 AlmaLinux OS 0 1 Moderate

qt5-qt3d security update

Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications). Security Fix(es): * assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow (CVE-2025-11277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default qt5-qt3d-5.15.9-2.el9_7.1.i686.rpm 04bf07213b2d78c34111a5f82e03dd24bcac940c9cb2e2ba9a5d887cad9346f0 qt5-qt3d-5.15.9-2.el9_7.1.x86_64.rpm 06d2bbcfada3d1c4b39276ebdf5acc863ae5e0b4cd5b17deb1feab4027dc910d qt5-qt3d-devel-5.15.9-2.el9_7.1.x86_64.rpm 5765ac5dd4fcd1a03a306fa7092aa784cafcae6603de8ed5c6daec09354966e3 qt5-qt3d-examples-5.15.9-2.el9_7.1.x86_64.rpm 70e76ed6a127a50f85858676fe8aed6cf21c298074448d80b2ad5c6eb0f49d71 qt5-qt3d-devel-5.15.9-2.el9_7.1.i686.rpm e8a920ca5311c172c5891e571622a463c88f85104773783dbda1f23ab9909f33 ALSA-2025:21110 Copyright 2025 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778) * bind: Cache poisoning due to weak PRNG (CVE-2025-40780) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default bind-dnssec-doc-9.16.23-34.el9_7.1.noarch.rpm 01202e152d255eb11f041616ddc8bf4a92beb4878e8d813cdac5dd73bda4879c bind-dnssec-utils-9.16.23-34.el9_7.1.x86_64.rpm 16777997cbbef6222d6e2f28a783e0df79461e647ad1c38a3113c1817f6537c8 bind-utils-9.16.23-34.el9_7.1.x86_64.rpm 61436f2a45ef37a96a3c7a2e302f6362388d78d7bfa2f75d8eb7587e81f8d223 bind-libs-9.16.23-34.el9_7.1.x86_64.rpm 80e1c22b2b6007fa486e3b06dd1054745e4c56cefc672640187c6e76f00e05e1 bind-license-9.16.23-34.el9_7.1.noarch.rpm 8b79c2a0da87e5408f01dc70ce99df4db338803b1bb3399cc8f02cfcec16d2c6 bind-chroot-9.16.23-34.el9_7.1.x86_64.rpm b1e4f8d6d4b88ca9512c5426aac4d328f6e22b13733eda781149cfc78a838533 bind-9.16.23-34.el9_7.1.x86_64.rpm e20a45d6da273331321975aa3953102058f3e7a89bd3919616cb5b51d6d6ab66 python3-bind-9.16.23-34.el9_7.1.noarch.rpm f54c8d1c3f0185e2016e2ebc757362ec803f466533c6fc01423a2e3b783f8c30 ALSA-2025:21111 Copyright 2025 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778) * bind: Cache poisoning due to weak PRNG (CVE-2025-40780) * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default bind9.18-chroot-9.18.29-5.el9_7.2.x86_64.rpm 5644564721b3022a0853f5f39e6a02fe815f4b878780c9d549dbeff9abf54500 bind9.18-dnssec-utils-9.18.29-5.el9_7.2.x86_64.rpm 920b71a3e129c749df81cc22f81c58bd66bbe2de77fe82381e763009d1afd46c bind9.18-utils-9.18.29-5.el9_7.2.x86_64.rpm 929e769e53961773b7eb66d0903c0d4f1250e944c7ca05345e50eca1649d735b bind9.18-libs-9.18.29-5.el9_7.2.x86_64.rpm adfad6da253924cb90dd84003786add5b9bed147fae9f17ad399da2b3c9e3612 bind9.18-9.18.29-5.el9_7.2.x86_64.rpm c3b820545f243add0757bfd54ce2ee26620a2395da436b3938576aecac9b046d ALSA-2025:21139 Copyright 2025 AlmaLinux OS 0 1 Important

python-kdcproxy security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088) * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-kdcproxy-1.0.0-9.el9_7.noarch.rpm a5240be876da3db142c1b8feb2c4ad0a98c79ec8dffdf4295e4747f75df84f12 ALSA-2025:21255 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default openssl-devel-3.5.1-4.el9_7.i686.rpm 71ceb66df628f2c721341475758b290f10a2d40be3415001edc85f99c895ae72 openssl-devel-3.5.1-4.el9_7.x86_64.rpm 79bf0e46b685e45c7506b9ec4a04b4345f35de583e8338546eec03ae4b594663 openssl-perl-3.5.1-4.el9_7.x86_64.rpm 8116b4c16d6618088e291e906e204e022994f89aeb20883593d02769848ac633 ALSA-2025:21280 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018) * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014) * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016) * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019) * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020) * firefox: Race condition in the Graphics component (CVE-2025-13012) * firefox: Spoofing issue in Firefox (CVE-2025-13015) * firefox: Mitigation bypass in the DOM: Core & HTML component (CVE-2025-13013) * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default firefox-140.5.0-1.el9_7.alma.1.x86_64.rpm ea7a0f53ba2eeaf4ac0ce892fe08715cb34dc25104bbd69a3e89012bb50c9da1 firefox-x11-140.5.0-1.el9_7.alma.1.x86_64.rpm eeabbc543283f5cd1df090f594479db288d9bfadd1a4c545312a28bfe7473c65 ALSA-2025:21462 Copyright 2025 AlmaLinux OS 0 1 Critical

lasso security update

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages. Security Fix(es): * lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default lasso-2.7.0-11.el9_7.3.x86_64.rpm 40dcc42ba2239b85998dbe87fb94ed33a45c1836b8e08a12a09631837382a5af lasso-2.7.0-11.el9_7.3.i686.rpm 48b59927a957967cad94e01ff114da25d8680bb73225eb6aee797d5cf14f302b python3-lasso-2.7.0-11.el9_7.3.x86_64.rpm 4e0b5853a51db99192b371be48d27819a70884966f40bed9f3a3c1dc0c5210f4 ALSA-2025:21693 Copyright 2025 AlmaLinux OS 0 1 Important

haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: denial of service vulnerability in HAProxy mjson library (CVE-2025-11230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default haproxy-2.8.14-1.el9_7.1.x86_64.rpm e710f3070212292bcf36a0811040f4f7f92b97ce2de77e8fddffedd0e82789a8 ALSA-2025:21702 Copyright 2025 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default podman-tests-5.6.0-7.el9_7.x86_64.rpm 0638914f7eb174057f6f287cb41921fe27653401397d434b3f178d107a6b11ea podman-docker-5.6.0-7.el9_7.noarch.rpm 5ffaa4b5065f4581a201082263dba24dcf7721b66b01e4b26013a6002c9ff0ac podman-remote-5.6.0-7.el9_7.x86_64.rpm 60e68121bebf563c0c2a688ed26a1bdeaf3ad996ec6b5cfcbdffbec6046d5fb7 podman-5.6.0-7.el9_7.x86_64.rpm d551cda06d6e6c6e49cdb35d43799c6488956aac2f92cbeee5d271e14676b3dd podman-plugins-5.6.0-7.el9_7.x86_64.rpm d689c4adcbbdb010d8b5319140d5fe28b82f37e0d9c999a730a0a13526f2e629 ALSA-2025:21815 Copyright 2025 AlmaLinux OS 0 1 Moderate

delve and golang security update

The Go Programming Language. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default golang-race-1.25.3-1.el9_7.x86_64.rpm 1e6573a4c25df5218510ee3f49259cd17b6fa0b569dc84fb9c5a4a25fb2954d9 golang-misc-1.25.3-1.el9_7.noarch.rpm 29dc87ada9847e965337c7d04c5912ce35737fa694be7a8d712294d52cbc68d4 golang-docs-1.25.3-1.el9_7.noarch.rpm 466316b7b9d8f2ccd3b3f368d520adaf50fc1224d8c3321018587e8779415ef8 golang-src-1.25.3-1.el9_7.noarch.rpm 6f31240e6b2dde0527af7d6993e4beb7bb946941c9abb03ecbcced59bd1e6cba delve-1.25.2-1.el9_7.x86_64.rpm 84ed965e3ad90d67abbf57bc76f3c4b64ecfc46938964b678d26913f66f3f261 golang-1.25.3-1.el9_7.x86_64.rpm 98754df5caf69e07ec5adfe7ce0a9d33111ae4aa24eff14dec575601e9a198f5 go-toolset-1.25.3-1.el9_7.x86_64.rpm c0a9ab4ff30618b01efc6010287ee5eb99566ac5cbf4bebbe7a8be6acd7618b9 golang-tests-1.25.3-1.el9_7.noarch.rpm e4397826207622fc908c1ef7c2da0ab2cb58e830e8c48e13eff9af88576a56aa golang-bin-1.25.3-1.el9_7.x86_64.rpm e7ab80f09bc9e74403633e68865ead22af34491462ac8eeea9576972ef61a6f1 ALSA-2025:21916 Copyright 2025 AlmaLinux OS 0 1 Important

valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817) * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818) * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819) * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default valkey-8.0.6-2.el9_7.x86_64.rpm 83471ca3312b3f1eca41af77f0df7ce98b97634a4e397d91cf67450bb380b8b4 valkey-devel-8.0.6-2.el9_7.x86_64.rpm e5adabd7532ced40283696492e9ce8eb15ea843291ea0b6c3e014ae9ba03d3b0 ALSA-2025:21926 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-perf-5.14.0-611.9.1.el9_7.x86_64.rpm 17e8bd42bd7f3a1d5df52dc4432c0cff61cb64ac40e391850874b3e29c575fb8 kernel-devel-matched-5.14.0-611.9.1.el9_7.x86_64.rpm 3588d78b056e9864c68f1df5a16366cc688978af9f450bbccae9d8c56f0716ac perf-5.14.0-611.9.1.el9_7.x86_64.rpm 3e41cd6b27fc3581bccc69f1921b17715a7fa7cc8ee3f36d7b9a730bd2d1fea7 kernel-doc-5.14.0-611.9.1.el9_7.noarch.rpm 3f1dfa1427aa39d094ad37ee1b6725424a9137cc36ce2e3f9e49f1697b596ad1 rv-5.14.0-611.9.1.el9_7.x86_64.rpm 49a3a70d5b4190496e4784cbd1015c5bc18b598cd3e0783d5fb622fec58b3102 kernel-debug-devel-matched-5.14.0-611.9.1.el9_7.x86_64.rpm 75cdeac79807aa73a3faca35cfec9128b0e35d464cb02f3a85f63d39ef34f6c5 rtla-5.14.0-611.9.1.el9_7.x86_64.rpm a3b78bc80320fef94da8cae5b21de46c21658f0e7345b4ed76a9bf44f6e90495 kernel-debug-devel-5.14.0-611.9.1.el9_7.x86_64.rpm ce3a4105538960b4b3a4643deebe9241bcf9bc074e3c4a6ccec9f07a4341fad0 kernel-headers-5.14.0-611.9.1.el9_7.x86_64.rpm d8967fbe07053452dbff8fbc0b9024c9c3703578d069a50fbba588f491249344 kernel-devel-5.14.0-611.9.1.el9_7.x86_64.rpm f5ca41834b771a29fbaa28d92752789a17a2859416cbf81026f2c7e5933835bf ALSA-2025:21968 Copyright 2025 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922) * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920) * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923) * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921) * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925) * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924) * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gimp-3.0.4-1.el9_7.1.x86_64.rpm 2f81f1299e528c9c5c4e731cc37ff58cf2b72379e8f181b1a9bd31384f9f292c gimp-libs-3.0.4-1.el9_7.1.x86_64.rpm 4447b5d6921ddbf73311520fba031569eb52b0060c8edb4dae817385366f18d8 gimp-libs-3.0.4-1.el9_7.1.i686.rpm ba3d9564a410d21e5b87d8a0dc4b53f543ee3af51fb41e792c9e05f505ab1a24 ALSA-2025:22005 Copyright 2025 AlmaLinux OS 0 1 Moderate

go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fix(es): * os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default go-rpm-macros-3.6.0-12.el9_7.x86_64.rpm 0e66a5b4fa99e55b14f968991a62dca8c7b669b6b6801c9a536a2e3f5b9dd43c go-rpm-templates-3.6.0-12.el9_7.noarch.rpm 5df16bf1a95fd8dec209732a313a1928038f1421239bc3836023d10e3b70dddb go-srpm-macros-3.6.0-12.el9_7.noarch.rpm 71a78aefe4eda55b51e42c5913d78d3da0a21013a367f506725518b235a131c3 go-filesystem-3.6.0-12.el9_7.x86_64.rpm e5d75190d6c019f9664be1328cc6d604097dbfafe065b48feeae22e468c5d6b8 ALSA-2025:22011 Copyright 2025 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default buildah-1.41.6-1.el9_7.x86_64.rpm 01a03cc1866a05bde09f05d2523673383b4c877daca0f6ef285b62ba84948b7f buildah-tests-1.41.6-1.el9_7.x86_64.rpm f7458171af9f40f7427bb8440b368f46ed1aaae073cd5b995368ad1822043295 ALSA-2025:22175 Copyright 2025 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default expat-devel-2.5.0-5.el9_7.1.x86_64.rpm 8d38e72b5b11c87a56f35ba928527a45b902b6a573b29b6a3521bff54e69f898 expat-devel-2.5.0-5.el9_7.1.i686.rpm e5d361409d94bd5a0de94c4d1e97002a86c06b112bb8d23e99aa10c6486641bc ALSA-2025:22376 Copyright 2025 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libxml2-devel-2.9.13-14.el9_7.i686.rpm 40d41d758b8256e718bae38f113229153b0b0305bc3962548c7b979c94b5b8a8 libxml2-devel-2.9.13-14.el9_7.x86_64.rpm bb967588267a36c216ebb479f05f79836c9d7c708e75b9ab996195b1ea42c70c ALSA-2025:22405 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724) * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864) * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898) * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918) * kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955) * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981) * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058) * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-headers-5.14.0-611.11.1.el9_7.x86_64.rpm 1c30bccbb79d2f7b2a66911fbb912b8ab64dacb598a5ff5c153ef1833646c7dc kernel-debug-devel-5.14.0-611.11.1.el9_7.x86_64.rpm 32751632bb33369814710a72c4a2188d10b5229b3e4905717aed2e7677f7541a rtla-5.14.0-611.11.1.el9_7.x86_64.rpm 511c00a14f289d10907d05af19b8e7ffdfc731abd2d25dbc87e1eeba807cb461 kernel-devel-5.14.0-611.11.1.el9_7.x86_64.rpm 6f3ad49e3f1b49174f3471e31dab4e1e0581c2cc44200c9a2c1dd2fda09bd489 python3-perf-5.14.0-611.11.1.el9_7.x86_64.rpm 814c30c2e4cb794b307939a4921259004504996c19f1f6473a2f01e0bdab5cf2 kernel-devel-matched-5.14.0-611.11.1.el9_7.x86_64.rpm acb8e7f6e399a2b188ab277142c5472429740b70e24f4dd73ae148eaad685a9c perf-5.14.0-611.11.1.el9_7.x86_64.rpm ae1b4470a9fc01d80ab04a3e7595957ac1650c04d261a0889a4e7f5e2fa77e99 kernel-debug-devel-matched-5.14.0-611.11.1.el9_7.x86_64.rpm cd5ffcebbe7fe6c7bd2eb17cb40c9da8168aa958b55c11fde3a7081857414069 rv-5.14.0-611.11.1.el9_7.x86_64.rpm d1bf8f98684163d64b8c007ae8aaebcf67a0a0b2f5fffa80729b020894ac2537 kernel-doc-5.14.0-611.11.1.el9_7.noarch.rpm e27f17ac62eba4c511084447e99ca315c942049d90340b94d4f7f70d301cf793 ALSA-2025:22660 Copyright 2025 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (CVE-2025-4598) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default systemd-boot-unsigned-252-55.el9_7.7.alma.1.x86_64.rpm 6121c4f4091bc23cbdfe0e525965694e1c1f2fb97ee07b0d40d8a9b63eeaf6c1 systemd-devel-252-55.el9_7.7.alma.1.x86_64.rpm 6edcb0db916d9e0d6c427e5c440e4d770f041a4a7316ff463ab1c251e72e5450 systemd-journal-remote-252-55.el9_7.7.alma.1.x86_64.rpm 80e91b21877850dd521fde489e4002e826cbf299c014a50b9dea28cda064895f systemd-devel-252-55.el9_7.7.alma.1.i686.rpm b90c525de366d4eb287dddbb51449949f80cd8a3710aaf1a184700b0b5b8d006 systemd-ukify-252-55.el9_7.7.alma.1.noarch.rpm d0bbd8f92a0ece392027ad9c47865654ea3554926aed9ed76c1d85cf4f6a303e ALSA-2025:22790 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000) * webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421) * webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default webkit2gtk3-jsc-devel-2.50.3-1.el9_7.x86_64.rpm 37c18a08514c906624c9b27925b9b6b7bb8f293084f40309c731fb05df1b3708 webkit2gtk3-devel-2.50.3-1.el9_7.i686.rpm 3b2369112169e58767c379d8818cb0247cc047a16b74cb7a3449de92f3517ba6 webkit2gtk3-2.50.3-1.el9_7.x86_64.rpm 4db53a5764f93855103e3e2a0997c7767f279ba67572286a7080b2f4badd67d8 webkit2gtk3-jsc-2.50.3-1.el9_7.x86_64.rpm 879b31058480b3e079b54724aac26edd06013e33a2389068716964d6ab4626da webkit2gtk3-devel-2.50.3-1.el9_7.x86_64.rpm a927b9d639c065dfe9d789764641416c2b8b899013b29818d70608e2748b88fb webkit2gtk3-jsc-devel-2.50.3-1.el9_7.i686.rpm c46e0ce10d39b34ec327455598bc36a608b194cda2ef1b2af45f3fe4fc3799ef webkit2gtk3-jsc-2.50.3-1.el9_7.i686.rpm df011d9950776f9bdaffbb7a4a88d352ac9266fe971f372bc7565efde799bd20 webkit2gtk3-2.50.3-1.el9_7.i686.rpm fe513bade7c8ab256f628c6a1f0bdb3841a020301d091403123e519a1a4a2e55 ALSA-2025:22865 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925) * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-doc-5.14.0-611.13.1.el9_7.noarch.rpm 3077453230b56a9024c6386e3a382237cfd64a275450898b612c5739bdb21c8d rtla-5.14.0-611.13.1.el9_7.x86_64.rpm 33bc8db7f46fa3853724d9757b9e4f92287bc73a57b07cdc7668884dc3496d43 kernel-debug-devel-matched-5.14.0-611.13.1.el9_7.x86_64.rpm 3add6faf407fd9754c1e30f3e22a2d4377d2a8e139da507facc1be6b9bc2a9af kernel-devel-matched-5.14.0-611.13.1.el9_7.x86_64.rpm 4be97be5867fdd801ec8b84ed5adc063cb5538a423de0171eb7c9a04103e1ed7 kernel-devel-5.14.0-611.13.1.el9_7.x86_64.rpm 6d45cfbf1f2678caa2511c027b036e019747f2a82938accd7c3219a016275cdd perf-5.14.0-611.13.1.el9_7.x86_64.rpm 820ce58c2a328f264d2a69870827e700be09d6515618a48b0606ff29ce88738f kernel-headers-5.14.0-611.13.1.el9_7.x86_64.rpm 873b2069aa64c50fa1ad6f867e7509ac92ea423160f3b76509d24893896ae23b python3-perf-5.14.0-611.13.1.el9_7.x86_64.rpm acbab1a86a081f16b0e8d6777ce03c450614e5e483ab95de3e60c2541ba75701 rv-5.14.0-611.13.1.el9_7.x86_64.rpm ad0ab77e3565c7312d08c628b2c20647d0e9b5522ef433eab5dbfb919f87965d kernel-debug-devel-5.14.0-611.13.1.el9_7.x86_64.rpm cb73a69f2b868b598275aca3b8d6e88d62fdcc379d64612d52ba9a88d2db2276 ALSA-2025:23034 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333) * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329) * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331) * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default firefox-x11-140.6.0-1.el9_7.alma.1.x86_64.rpm 49056cd5c7a2094fd40cb1a8f693656cc11783693a672a753f9c6ce4fc8e1994 firefox-140.6.0-1.el9_7.alma.1.x86_64.rpm e2df165ca77fd0475b5ea95fb0b2a40c22ddad641d9a47c22ef7d9a053c58961 ALSA-2025:23049 Copyright 2025 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default tomcat-webapps-9.0.87-6.el9_7.1.noarch.rpm 042554fe7afabe09276b1305abf50e78f75a9609f790479647d629d727a576dc tomcat-9.0.87-6.el9_7.1.noarch.rpm 743c7841f36b95beb9dbcde26837da06819a5019f6670219fc7a646489448e11 tomcat-jsp-2.3-api-9.0.87-6.el9_7.1.noarch.rpm 76cb4ffb4eb97a09c9cef86ca036e2b88d29aa94ada18ce6635fffda4ecaa81c tomcat-lib-9.0.87-6.el9_7.1.noarch.rpm 942047935da08addb54d45219557320d0cd24f1482b6925cbdda4a2b046e6a90 tomcat-docs-webapp-9.0.87-6.el9_7.1.noarch.rpm c5697771592ec914240d11f052f4c535546182c352a02e37d58cba7c4ba44b4f tomcat-el-3.0-api-9.0.87-6.el9_7.1.noarch.rpm de3401154ba76a426408986737cced54f5d01cabf3f2f49fa8bde03b7b4ef6a0 tomcat-admin-webapps-9.0.87-6.el9_7.1.noarch.rpm e54e22787bbfa9c1bc1183daf0620641e601542ab4e10dd85c4c2209a923f831 tomcat-servlet-4.0-api-9.0.87-6.el9_7.1.noarch.rpm ed13f327020324dcc7aaef5dd4512d55cbf108e9c69b959a3aa63f1de6fb189b ALSA-2025:23063 Copyright 2026 AlmaLinux OS 0 1 Moderate

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: Denial of Service in resolv gem (CVE-2025-24294) * rexml: REXML denial of service (CVE-2025-58767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default rubygem-psych-5.1.2-5.module_el9.7.0+193+58179166.x86_64.rpm 0a98b4c9d70922116f4482dd6ea9413e2dfd8ad2d3b16cf90f56608ffea195cb ruby-3.3.10-5.module_el9.7.0+193+58179166.i686.rpm 1a76049abcaa7801b918dd601732266a85f6202ccc55bb92d2fe68f00abc7d46 rubygem-typeprof-0.21.9-5.module_el9.7.0+193+58179166.noarch.rpm 1e76d470f5e813888cc11c835f5e419f511c7ac78693e9b3c08858c596f2ea07 rubygem-minitest-5.20.0-5.module_el9.7.0+193+58179166.noarch.rpm 2052f90946637d56bd57f83b078bd2341398c9a763d7524f0b90a24e2f9829ed rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 rubygem-bigdecimal-3.1.5-5.module_el9.7.0+193+58179166.x86_64.rpm 229822cf68769073f8044426c33999bdcd612639b3d9758bc2a0e224905ea9a1 rubygem-rbs-3.4.0-5.module_el9.7.0+193+58179166.i686.rpm 2602959489336a835b3fed08617d66e80cc8a93ca6d0a20a04b9e6f81f9236c6 rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm 37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58 rubygem-rake-13.1.0-5.module_el9.7.0+193+58179166.noarch.rpm 3938cce7107976d8cbe1413d03d0e737bd5ca448616dd660afe7813c6691195a ruby-libs-3.3.10-5.module_el9.7.0+193+58179166.i686.rpm 3e9733ab0425c4ada62658a046637b011defc5e180572e5b8810b7a8a646645a rubygem-bigdecimal-3.1.5-5.module_el9.7.0+193+58179166.i686.rpm 45fe8558528d82c1937ce46527cecddf280081a6cc8cba3a7375a8e93cf65254 rubygem-io-console-0.7.1-5.module_el9.7.0+193+58179166.x86_64.rpm 47f27ec14f090f12829e8eb350ec91d4adafed3a94a169967d72bbbf3dd6015e rubygem-rbs-3.4.0-5.module_el9.7.0+193+58179166.x86_64.rpm 4ddc8469dd7e8e0da281ae981ef3ea6b12cb3dfd943b08afcd6edd9b62f2acb9 ruby-doc-3.3.10-5.module_el9.7.0+193+58179166.noarch.rpm 610e56f3b59c67e8a1178ee3ad905ebadd573336f958888a908bbce106bc09fa rubygem-json-2.7.2-5.module_el9.7.0+193+58179166.x86_64.rpm 684c1401946a319255d6dabd4f305978f7b23b320a220a59e70bd393f7f7652f rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.x86_64.rpm 6bc622c1c7cbd8cf9624faba7760337096a143b4c787be6cfeda71eb7abda16d rubygem-rdoc-6.6.3.1-5.module_el9.7.0+193+58179166.noarch.rpm 7074e1adb6c6faf5bab68fc5c16bbe5c111202286c60288f85487369b87c2cb5 rubygem-power_assert-2.0.3-5.module_el9.7.0+193+58179166.noarch.rpm 79cbcd945ae37bfa66d064c77f72a6df45999b4f652ced8c6a16c366355e0d43 rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.x86_64.rpm 7e81c000c66bad27864ea6a2747f3b90f2192d71866e7e4bc4a26a34ac2ec27a ruby-3.3.10-5.module_el9.7.0+193+58179166.x86_64.rpm 7ecb789f9ad62f7af0df6eb15b9ba48c6037c3164607a2bf0c5f718a2c72f95d rubygems-3.5.22-5.module_el9.7.0+193+58179166.noarch.rpm 812ca5c06c6b0d1175ebf4c20f101a63513a6812ecae5091376de5647439fabd ruby-bundled-gems-3.3.10-5.module_el9.7.0+193+58179166.x86_64.rpm 89df89a8d73af4aecde98e46d1223b057fa1db39fb6b7576f73c4a4a8209b8e7 rubygem-json-2.7.2-5.module_el9.7.0+193+58179166.i686.rpm 936575dc2e2c2f7b29e7739bf79f1f85346a323891281235ee5ba30507931b40 rubygem-bundler-2.5.22-5.module_el9.7.0+193+58179166.noarch.rpm 9782600a3b69a18d97c2fb7acf77f6a210286d7e5122c532164cdaafca096f10 rubygem-racc-1.7.3-5.module_el9.7.0+193+58179166.i686.rpm 97dff9141cdb65de37ee16968e3ab7dc8777cca821f271d593291a25cb38f23b rubygem-racc-1.7.3-5.module_el9.7.0+193+58179166.x86_64.rpm 9fd4173c2256e0d2104ff5f95ee72d2d10e48e8ea736d0c2965cc107826f53f3 rubygem-psych-5.1.2-5.module_el9.7.0+193+58179166.i686.rpm a0c464dda73ed79a0feeb84843cbe6898605c4c683a8555ba6464dcb1a26ab97 rubygem-irb-1.13.1-5.module_el9.7.0+193+58179166.noarch.rpm b1c8d93726b425d9ad2ddeeeba96dc077bbbbb37ae080a7f6041f30aab2651a2 rubygem-rss-0.3.1-5.module_el9.7.0+193+58179166.noarch.rpm b74756b8a04eab9e7df55084a0f6b6bb79a6e186e381983069d8189293eaeb8e rubygems-devel-3.5.22-5.module_el9.7.0+193+58179166.noarch.rpm bcb8bc87ed9dd4970b9742da89a2b03d27cb84ac9f5da6a5979ab6250035ea24 ruby-bundled-gems-3.3.10-5.module_el9.7.0+193+58179166.i686.rpm cb31a916fa45f59630900e4f887baf115e1036f836e95b5355f9b518aa264bd4 ruby-libs-3.3.10-5.module_el9.7.0+193+58179166.x86_64.rpm dd5b2b18d0ad929b753922ac61a3c494e97f21c94a2d258678bec9a0b99b98c2 rubygem-io-console-0.7.1-5.module_el9.7.0+193+58179166.i686.rpm e6c7e8b2a7b39ec6726c3292656098d5aa5e9c3d9be9342232cd19a6dce1447b ruby-default-gems-3.3.10-5.module_el9.7.0+193+58179166.noarch.rpm e6cd1a0e3eb42817f1358cd42bde2590af86393d2ce25e72a45530f6ec03bf11 rubygem-rexml-3.4.4-5.module_el9.7.0+193+58179166.noarch.rpm f01bed34c9e3e79763cf8bbb096c8d80c29d92e5ae03c20b4114aff309a11a5a rubygem-test-unit-3.6.1-5.module_el9.7.0+193+58179166.noarch.rpm f1dd25f4182864b03b7f5f27a736a87f19132bdd9c1e662564c09a8349d05bf9 ruby-devel-3.3.10-5.module_el9.7.0+193+58179166.i686.rpm f78278260a081eb21e3ea6ec9ddd23bfa0180e24dae9c700b891f77933cc0d6a ruby-devel-3.3.10-5.module_el9.7.0+193+58179166.x86_64.rpm fd3546ac3957f5bf8e1c9444f57d8a928f5447ba42642b7e7b1193ccb4f601b2 ALSA-2025:23087 Copyright 2025 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default grafana-10.2.6-17.el9_7.x86_64.rpm 53276d40a1aa330301c6ba8de9ec61b341c7541707cd06ea170533f92d938889 grafana-selinux-10.2.6-17.el9_7.x86_64.rpm 6cbb5087e31dbc1d858f66eb50850bb90fb30605b92483058150f2db186735c9 ALSA-2025:23109 Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040) * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default mysql-libs-8.0.44-1.el9_7.x86_64.rpm 3f0e446266a3a88344edcba2d5edf924f3ebcd030f5f79f89dcf941ef133bd09 mysql-errmsg-8.0.44-1.el9_7.x86_64.rpm 771833668f5fc4993a93d760594e1196bd9dc46f338ecfd17eab22085d8a228a mysql-server-8.0.44-1.el9_7.x86_64.rpm 8f11176dc3421578c7fe24cfdaa51666afe7416cd126a33cb7330d277ad7da4f mysql-common-8.0.44-1.el9_7.x86_64.rpm 968f63fcbe188f929eb527ad3a9f3e62ac0dd32b740eeabbe09374f9623d1412 mysql-8.0.44-1.el9_7.x86_64.rpm ec279dae8d86e0d50a71cf0a04766c40ae1593b10476acaf006e5f6dbf18db4b ALSA-2025:23111 Copyright 2025 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054) * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040) * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069) * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default mysql-server-8.4.7-1.module_el9.7.0+194+73a02de8.x86_64.rpm 085647b67789d0525329f737cc7349aa5b6c36955628acdab1d2aae8ae8cee6d rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.x86_64.rpm 15d11f3dd227603b75ea55ec5e5d58e48a85816370b46beaf974cdd4ecdb74b8 mysql-test-8.4.7-1.module_el9.7.0+194+73a02de8.x86_64.rpm 2a49a93b17fd0e8c0d904129ecace57bbf338967f36e2d5729fe941a17f48dbc mysql-errmsg-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm 3ad51682b9f603e97ed5a3aa480c7158bc9cabfe52683821efe134f777c4ace8 mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 5ac91bd521f27ff2898650b81f3c9955990a7c1611d7c24df1109ee306cfe85d mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm 67f9944422a6aee33d336ad9718cc8bcdb1ee47386bf22c3b2b482ce8e60f8b7 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 6af7ca5e430c3de27c47755ee182d363a208ee94a4550a502365026a3adef496 mysql-devel-8.4.7-1.module_el9.7.0+194+73a02de8.x86_64.rpm 6ceb62b7a60684fb2ab6170066918b018c6f17944a1bbe74a48b09685144902e mysql-libs-8.4.7-1.module_el9.7.0+194+73a02de8.x86_64.rpm 9830a5c4705c20be0b91645c26dffa3559ad2a8f5596964b9580b26777fe7214 mysql-8.4.7-1.module_el9.7.0+194+73a02de8.x86_64.rpm b770a55601e0dd4a3b2730d0fc1e41deea0a3f80e07fdbc387dfc9ab1bca0398 mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm cde7f7ad433817f56a1963dc6f951f5ce54fbffa0b81b588ad4b43c5d751b0e9 mysql-common-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm ea7bda08f9b88e34fcd82a2d963e392746bbb510fc8ff007779208a1d35ba1c5 mysql-test-data-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm ec4fa0f0561aa7f6a57fe7d16c58c6d9049765f2d3c2b178c8ae8e956895d960 rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 ALSA-2025:23142 Copyright 2025 AlmaLinux OS 0 1 Important

wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default wireshark-cli-3.4.10-8.el9_7.1.x86_64.rpm 11a9a77852e7ed270be59ab52426c5eff70c3f1eb9b7370ec6e171a67dcfca99 wireshark-cli-3.4.10-8.el9_7.1.i686.rpm 46ed24f2b597354424b8c2ccf0561be1143cbfe5cb9d994e7149355e452a8bb8 wireshark-3.4.10-8.el9_7.1.x86_64.rpm eddf9f5d356c3f6a999c60ffbbb2531478083cf769530cdd58fb83580c92ca98 ALSA-2025:23210 Copyright 2025 AlmaLinux OS 0 1 Important

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration (CVE-2025-13609) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-keylime-7.12.1-11.el9_7.3.x86_64.rpm 0955f02a282156ab539c8926aaa44e02bf2ce7db2e72d3960d3281d4aa672941 keylime-7.12.1-11.el9_7.3.x86_64.rpm 10f2e7e24181cd33947207748f34f92210d9733328a4783fe5e618e363f1abfe keylime-registrar-7.12.1-11.el9_7.3.x86_64.rpm 59cabf4312b80a0a6482b4f4aa9b8dbb74e1969dfb96f35ad66ff1dbbd6f7d6c keylime-base-7.12.1-11.el9_7.3.x86_64.rpm 78da225b5f61983420332e116de62052130448621c72966ccc19a18349242363 keylime-verifier-7.12.1-11.el9_7.3.x86_64.rpm ae7cb23ef76cdc517abbc8ad1e317faaee14e4d574bfede700955241c1e03dd6 keylime-tenant-7.12.1-11.el9_7.3.x86_64.rpm b080eec9e77607da3625e638a7a778064e640c10531a40ecc7eabcd9d3c9348c keylime-selinux-7.12.1-11.el9_7.3.noarch.rpm dcd62073eeca23c4ecae679315d947a18542766de1fa33068f399f691fe3f626 ALSA-2025:23241 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499) * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966) * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-debug-devel-5.14.0-611.16.1.el9_7.x86_64.rpm 0aa875cd52d537ab189eeaa33623a03dde47a17d9e8ccd2b7da2086175eaa823 rtla-5.14.0-611.16.1.el9_7.x86_64.rpm 162b830f608d313f917d4f2979e7853b29ebb0cbd885866e0ddce7550f31119b rv-5.14.0-611.16.1.el9_7.x86_64.rpm 2d451460ac91a7384717e47ee4447743299663100f02c9455040ba0a82270fc5 kernel-headers-5.14.0-611.16.1.el9_7.x86_64.rpm 39c7d7c10ea5c65050d0a710f4f3fd2cb908b8929342e35863d39cf8a7a9738b perf-5.14.0-611.16.1.el9_7.x86_64.rpm 5d7f5db48bf755f4228a61af5318e953b6c7b974bc912180aa86264506006269 python3-perf-5.14.0-611.16.1.el9_7.x86_64.rpm 652c0db5b2a5c090c396842fb5828083906fd1d6487d649a59bc6f57dc7a4aac kernel-devel-matched-5.14.0-611.16.1.el9_7.x86_64.rpm 808da53248ab57f8956f85766187c266b3de7f34ef16f7ef8b4de4fc78651f4a kernel-doc-5.14.0-611.16.1.el9_7.noarch.rpm a90ac19d238b5f645c1f88b935ebe8457079617f74bd25a0d5a4b5cb4d5e3d96 kernel-debug-devel-matched-5.14.0-611.16.1.el9_7.x86_64.rpm ab14a8d61eaec4db1f6d904921a5469a6abfd6cbc830acb2d24916515bde1732 kernel-devel-5.14.0-611.16.1.el9_7.x86_64.rpm e7b598cd377ddacd45cfd2268e70397906f916a6f583179b60af2d369b24f712 ALSA-2025:23309 Copyright 2025 AlmaLinux OS 0 1 Moderate

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: pgsql extension does not check for errors during escaping (CVE-2025-1735) * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491) * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default php-pdo-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 09d1da44133504c0f506a0acdd0aebab0434b81cfa8a555325f2964427fe2cd4 php-ffi-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 0c350ebd2072a7e37817b407e0f64cc9c1b87e0ffbd03678195af465eaf8ab85 php-mysqlnd-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 180bfc04651e3c91f1d7230a3183878bb159af77a5087e847c1470a677011bfc php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.x86_64.rpm 1e95a29597aa5c8b102c97a7d8fe608712e1a7ac5f33086477259cdfd802117b php-xml-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 25dab2d72d10c3d90620645b56e92946c6c92763ce086bfc4cb93051e8377cba php-cli-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 3f79ebe3330e64fe88de01e4dd7e2a0dc993de1a6dce3af09402ac3517a1cca1 apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-odbc-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 4f7ccb97b3824e422d9c3d8264d53d9479bc28a9fc73f01eb97102225c2e9571 php-embedded-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 6c87702f494d1e0662ee6b08d67af1b705bfc2b2a4b8b32c4570058b3c22c3e9 php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.x86_64.rpm 743bd46886c6a79f5350c5311f49ceb9aa593e1170a63d5dac89d8a71bbad4c2 php-enchant-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 80d455f45f1a99f94a12e910f48f8b6f29e893cc1d4cdfdf2367aa9953cebbd1 php-fpm-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 839ab14fc952afba3febdfa10145d0653e0e240f25ec9bd8baf6e75a1a24f4b4 php-mbstring-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 9080cd9b67f7c0feaed2ef2035be304d82179dbe74d39d7520bb2ca4578a3fd7 php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.x86_64.rpm 99c06ba2fd814c0fb56d7b3eb60b33b8044d5e39d8bd1a56219f94ee4316020c php-soap-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm 9a93b7bac934ff98a801dcff66d8c356cdecae318fbd32529542646454719a37 php-intl-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm a0a9e12d361ec14f820e6928a43dce0a4bc37e56629fe449d2c66d1c1bb5d0ef php-snmp-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm a1a69a9fd5da9068dde5f780855e4ed472bc972cf45701e9b23febea04a9cab0 php-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm a5207aa4bed88183a463b37b296e07836012fdf8c4cb1586b494bda113c6b31b php-ldap-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm ba02227336ee80ba61d19c9069e58ae647e889349801b8b66332a504e091ab35 php-gmp-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm c2acd99365f72096ad8c91aa08116211ef9e2592bd5c8228cf3c644535d8d14b php-pgsql-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm c304912ee9209165f4a57458b6463db4825b70a1cf050e11f13ee7dcd4b079ef php-bcmath-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm c46f1409b3d121b64cc46261628800cd59b82066655b25076fc3603d20bac609 php-gd-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm c733ea4145a110c2c33c8b9571a379370308460e7548c776e028f52917545cec php-opcache-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm c83a30c72fadbc6366a2acbd51c5bbd7ce6d7ebce3a8636febad01389f92f90d php-process-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm d8898c15512c01d939d1adf10d8d631e132c520b35b55aab2c12c38d4d31de64 php-devel-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm da8548747e786a26b483a167910d8c413fa5a24c08c1753d29706cf9c0c35a06 php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.x86_64.rpm dc8e8e3bdcbd1b2dd8b406088ace26218479eae330d5ff09131f4bb4d4ca9918 php-dbg-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm ea9f94f2ba8359fbab5c8a6528ed2234c31909153396e9baab775f678334496a php-common-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm ed1e6979e8ba74b80759a065e98a7ca7eecce795b10af80f7c5f6bf6a73eb5cb php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.x86_64.rpm f1056dbe8848484f897c6a4662953779cb96e88d41f3974a75759f5e27ce93e2 php-dba-8.3.26-1.module_el9.7.0+197+324afee8.x86_64.rpm f280e55bd1b04213a490a4f60f3cc2fa620867a2d54d8ca8d717bc207e93fa92 php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.x86_64.rpm f7f650636fc002b970cf43dba6907dfe4e90d2de6ea57e6788a9f75920f28bc8 ALSA-2025:23323 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.12-tkinter-3.12.12-1.el9_7.x86_64.rpm 2c11b5a73a81a4b76fc01dffeba674e0b5b9219cc1bc2da758fce570a32e2eb1 python3.12-libs-3.12.12-1.el9_7.i686.rpm 3c5ec3070beffbfca83a406437442f6730677da8c961ac200e2c1e64932d8e61 python3.12-devel-3.12.12-1.el9_7.i686.rpm 83cf71caa8bf8c2106ca6e1fc66de6f993d385264c24db5c2b4068736cba3767 python3.12-libs-3.12.12-1.el9_7.x86_64.rpm 9f4e8c5c7e8dd18b98617940e68921ec0ff4d429108c652a29cbddb4d96c7d13 python3.12-3.12.12-1.el9_7.x86_64.rpm a567876919eb8b768d9f564daa42dd9bd94dcb6045163c72113f0d2fa31d3d75 python3.12-devel-3.12.12-1.el9_7.x86_64.rpm fe9246704e0e991765f16fd8ac31a1d0be22037a7b767232d42fbfb581a7e97a ALSA-2025:23325 Copyright 2025 AlmaLinux OS 0 1 Moderate

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default podman-remote-5.6.0-9.el9_7.x86_64.rpm 08b28924c407d0c89e46bcc7639221ddbb2e96a8d4f4002e0704efdc43e4feba podman-5.6.0-9.el9_7.x86_64.rpm 34ca0f1272023630d9f21123e7682f3e6ab3c925688b5ab990cc6493d1408435 podman-plugins-5.6.0-9.el9_7.x86_64.rpm 3de5c0bc9b0fe1fd925a0801230b9d825e9dff8cc583d79c4ec3d567c832eff0 podman-tests-5.6.0-9.el9_7.x86_64.rpm 54132760804a6372e7616c3cd028f4cd124e4c31ff3f3b9b6f3f72bc9790489e podman-docker-5.6.0-9.el9_7.noarch.rpm 95acb44516014fa7cb6e321e1aa10afa1e39fdd85dc4578f6aab3e7d0059ec7c ALSA-2025:23326 Copyright 2025 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default skopeo-1.20.0-2.el9_7.x86_64.rpm 0795e7de9796a11b4cd49d32d89be52c67e5d1238bc9d6112eedbb4aedeb3159 skopeo-tests-1.20.0-2.el9_7.x86_64.rpm 64afdbc0527c3c922464120abcdaa9813871bceec2afe630f5a3d8b3b261766e ALSA-2025:23336 Copyright 2025 AlmaLinux OS 0 1 Moderate

gcc-toolset-13-binutils security update

Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gcc-toolset-13-binutils-2.40-21.el9_7.1.x86_64.rpm 190140981480f75d68aefad0e55b83fe82afc01446736573849410bc3df630d6 gcc-toolset-13-binutils-devel-2.40-21.el9_7.1.i686.rpm 9474e9176873eb579c2192e91feef9ded03344e817900891dec48cdf89f7b3e4 gcc-toolset-13-binutils-gold-2.40-21.el9_7.1.x86_64.rpm f534186deabb97325cb06af5c436a0264d80cd0910c7d97763126a89c9729452 gcc-toolset-13-binutils-devel-2.40-21.el9_7.1.x86_64.rpm fde856423bd8f95b127560c974e59d1acad02c75ec8ec43f70b87c7d056db654 ALSA-2025:23342 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642) * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069) * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291) * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-devel-3.9.25-2.el9_7.x86_64.rpm 97bdfdf183c81841516ef0d0f01b79022aba31461b00ce536e46fc7bffe97cd4 python-unversioned-command-3.9.25-2.el9_7.noarch.rpm 9cd4004b4ee5d78dced922fbddc7341790a38a8869cf3252a6585ed620f412d8 python3-devel-3.9.25-2.el9_7.i686.rpm af7ed816e8eb5a93850815e0869d44e429b696633d56c6644e8d893aed30d5d0 python3-tkinter-3.9.25-2.el9_7.x86_64.rpm c3ec3ea0d6c317cc93a1c2b236a1e23d0be1c2ae469924e777ef82bc5eb33c82 ALSA-2025:23343 Copyright 2025 AlmaLinux OS 0 1 Moderate

binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default binutils-devel-2.35.2-67.el9_7.1.i686.rpm 8811e0e53d558eb762608866ffca2abc8b18bcf70472127e120636142875c638 binutils-devel-2.35.2-67.el9_7.1.x86_64.rpm bb1eb038c7186fede4041380113730613da5125143feea622a24fb36a7ba6c48 ALSA-2025:23480 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984) * openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default pam_ssh_agent_auth-0.10.4-5.47.el9_7.alma.1.x86_64.rpm 68c9ecaaf7acf092dd9ec7d129bc196c6017c5a6a78d678335c2f73e63d99250 openssh-askpass-8.7p1-47.el9_7.alma.1.x86_64.rpm 79738b45306e8f991ce2b79f9532fb4d5052675f3cfa9ef7bc40aff075ee4861 ALSA-2025:23483 Copyright 2025 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libssh-devel-0.10.4-17.el9_7.i686.rpm 65d876663fd6f42aa13813d723a9797309b2c8dc57680f98706d8e82386fdb36 libssh-devel-0.10.4-17.el9_7.x86_64.rpm 7ce651409675737c59caeb998bbcef4a594f29605ff3d277cc1d9bc01822f0af ALSA-2025:2359 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Use-after-free in WebTransportChild (CVE-2025-1931) * firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process (CVE-2025-1930) * firefox: Unexpected GC during RegExp bailout processing (CVE-2025-1934) * firefox: Clickjacking the registerProtocolHandler info-bar Reporter (CVE-2025-1935) * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1938) * firefox: JIT corruption of WASM i32 return values on 64-bit CPUs (CVE-2025-1933) * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1937) * firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access (CVE-2025-1932) * firefox: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents (CVE-2025-1936) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default firefox-x11-128.8.0-1.el9_5.x86_64.rpm 3670246612f18e1773772435f303abd3d4571b8cb7e0d1fea441aaf5b2e8671c firefox-128.8.0-1.el9_5.x86_64.rpm f624da714e1a1c1e2c2a7e7214685aef50fff260654170b83d4e5a9f03bcbd3a ALSA-2025:23700 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: webkitgtk: Use-after-free due to improper memory management (CVE-2025-43529) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43501) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43531) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43535) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43536) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default webkit2gtk3-jsc-2.50.4-1.el9_7.i686.rpm 0a307eabcb8c1bbbefe5c1e615dc44ab70f6fcde73172a92c2b204557677a536 webkit2gtk3-jsc-devel-2.50.4-1.el9_7.i686.rpm 2f1566948ccdc779533debc7dcf5234ce65706f193b7a272182c1037e6de8309 webkit2gtk3-jsc-2.50.4-1.el9_7.x86_64.rpm 8586fdf2a0f9584456f156edf28c4edb2b2c6e96b5242444b3aba346bc1e012a webkit2gtk3-2.50.4-1.el9_7.x86_64.rpm c0b0eb6c1a2b82e5e09ccfffbddaaa4717cf179ffadf9d33ba33cfe0831ecb66 webkit2gtk3-devel-2.50.4-1.el9_7.x86_64.rpm d11b455ae94206beaea3bb97c44a24403b40dbed3ab32d71e4c53c776fd02d66 webkit2gtk3-2.50.4-1.el9_7.i686.rpm d78e535b531e324736c11507b9f59b9881aae0608bf82ffe38af725c0b361a08 webkit2gtk3-devel-2.50.4-1.el9_7.i686.rpm eae1322042fab7d74da7bcd22d770879d7808653ef109ab1c1a42f9608a86c8a webkit2gtk3-jsc-devel-2.50.4-1.el9_7.x86_64.rpm f9a63e49cbb18fac73e4eb826c043e9ed98e885057d07d4c81e2df1652122234 ALSA-2025:23729 Copyright 2025 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation (CVE-2025-68156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default opentelemetry-collector-0.135.0-2.el9_7.x86_64.rpm e1157434f0dfb5b300c0caa44e084b75f1a21f38d96fcf0e376afc6c6ea62916 ALSA-2025:23739 Copyright 2025 AlmaLinux OS 0 1 Important

mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fix(es): * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default mod_md-2.4.26-1.el9_7.1.x86_64.rpm dc7cea0c5b319bc0d8169fdb450bfd33d0a730f4138e458a53f2e071842611d1 ALSA-2025:23744 Copyright 2025 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * git-lfs: Git LFS may write to arbitrary files via crafted symlinks (CVE-2025-26625) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default git-lfs-3.6.1-4.el9_7.x86_64.rpm 75f1b25a8d336671eb7a6af78ad6622ad686da7fa2b01da463ad123c0129258f ALSA-2025:23856 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333) * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329) * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331) * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default thunderbird-140.6.0-1.el9_7.alma.1.x86_64.rpm 2510f6243f6a69d8f675694d69bad68d53f3c6b4f84021c041dce7ce6e21ac48 ALSA-2025:23919 Copyright 2025 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default httpd-filesystem-2.4.62-7.el9_7.3.noarch.rpm 010cb3fee1896ff672703724018ae6fe479ebeef8cfe3509d6ed63c9552b2de5 mod_proxy_html-2.4.62-7.el9_7.3.x86_64.rpm 116b8135d1fd5dd23ddb44a7dc1ed43b111c06ef8a16e48dde1a0de90894b4c5 httpd-devel-2.4.62-7.el9_7.3.x86_64.rpm 15ef6dc93ae8e18466353581593102b5f830b58e37988a381a99511509b143dc mod_ssl-2.4.62-7.el9_7.3.x86_64.rpm 192332069af5e3c8c757d06755851cc8d30c31b2deee38c36e2b305e1323f54d httpd-2.4.62-7.el9_7.3.x86_64.rpm 2415f37188ea364a99f3dda0b50d9a7e34a51910a30193187e5aeaec3252b07d mod_session-2.4.62-7.el9_7.3.x86_64.rpm 3d27d807ba34cf81f8e30eb6b531212b184fb451049f0ffb382f5bb9493d7d43 httpd-core-2.4.62-7.el9_7.3.x86_64.rpm 82804971b03edc6295d874b443e2c54c01df1e97a169539ff3946a2d5c12fdea mod_ldap-2.4.62-7.el9_7.3.x86_64.rpm 83243edc5076ab266e268c59afa1f1ff64ee43efc7a8076914e37a41fdb3b7e1 httpd-manual-2.4.62-7.el9_7.3.noarch.rpm 8e21f57b8d986cfef0ebc680e4d3a7b6ecf794d2a233dbcc47db3fbf25cb6534 httpd-tools-2.4.62-7.el9_7.3.x86_64.rpm a104ff0a3c656e4141443342d8b61d26ff7d556d2b9158304022ceb8fd4f2e25 mod_lua-2.4.62-7.el9_7.3.x86_64.rpm faf75d0f5f28af909cabd0e83127a5f5eb4a187294540f22256f55f8197f94a5 ALSA-2025:2500 Copyright 2025 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601) * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600) * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599) * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598) * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597) * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596) * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default tigervnc-icons-1.14.1-1.el9_5.1.noarch.rpm 08eb0fe289f4792b3cb6f77177d607bba5e069938e4aad36532be1b959990086 tigervnc-license-1.14.1-1.el9_5.1.noarch.rpm 1c41e5a2911fdde16998225f599853ddd6c07baed42fcd070e0fbaa87ada968d tigervnc-1.14.1-1.el9_5.1.x86_64.rpm 54c20cb53a0ba8381bc7fa96e6caa648e357a370f8f531dec3d17eafe73df819 tigervnc-server-minimal-1.14.1-1.el9_5.1.x86_64.rpm 56733b6336b74a55bb1bd7b3b627201094717ca2e0dd5927035f0ea6bded3e69 tigervnc-selinux-1.14.1-1.el9_5.1.noarch.rpm 8bbb425e9a5ea9fa0d133059e86420caee8ee3378b90ee9bf2a485fa73e92aee tigervnc-server-1.14.1-1.el9_5.1.x86_64.rpm b61d67ecfad1c338d43dcc15307d38845c0c56e0ef2fcbf3d5e87103e6364f61 tigervnc-server-module-1.14.1-1.el9_5.1.x86_64.rpm ee5d71a24ed92ca2eb0971a877435a81942b5d64b5e3c7751fc56c708c6460ae ALSA-2025:2627 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605) * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264) * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302) * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922) * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113) * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default rtla-5.14.0-503.31.1.el9_5.x86_64.rpm 0a6b06c036217d3f34fcad5f7f4d073bed8d3240a33b0908f00bbef51522fe41 kernel-devel-5.14.0-503.31.1.el9_5.x86_64.rpm 349f2731bd2dbe136eb38a7801830a4b54a61ab36e34766bc35aa90ee9962676 kernel-debug-devel-matched-5.14.0-503.31.1.el9_5.x86_64.rpm 7a4d0a6b818070651a820551ce9f4fbbe7f74c6d9dd2a769a9d401dede4778e8 kernel-doc-5.14.0-503.31.1.el9_5.noarch.rpm 8a1eaf2fefbe6ada09b979433a0adbbda098053bfdde0ca648b04202d3d9faf8 perf-5.14.0-503.31.1.el9_5.x86_64.rpm 902aed0c2b02bed6bf6c49492d85ef7ba3d6185df999b6000a99427502be04c3 kernel-debug-devel-5.14.0-503.31.1.el9_5.x86_64.rpm d93068fc39d8aeba2b4137fe2e2f4aa646908aef5601015e3a831f49e97e511d rv-5.14.0-503.31.1.el9_5.x86_64.rpm e8901f83ae011f3706664202f36c1858d1ff0b8a58b66a0892b8329d52c67fa2 kernel-devel-matched-5.14.0-503.31.1.el9_5.x86_64.rpm eb178f3742362e87671a29cf965ef1cae1bb4e3f1c943758e88f7ac8d9dbd6a3 kernel-headers-5.14.0-503.31.1.el9_5.x86_64.rpm fd65e9102a3aab9c4f8d38a3b77a292860a11bb2bb57d11c777fe16feb73c485 ALSA-2025:2668 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070) Bug Fix(es) and Enhancement(s): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default dotnet-runtime-9.0-9.0.3-1.el9_5.x86_64.rpm 047814a7c2782bf3d343e3b36aea4c5cbb09101cdc5860147a510552eac8b3af dotnet-apphost-pack-9.0-9.0.3-1.el9_5.x86_64.rpm 087eeb83d9c964042e0fe7af07b491160a9d1f3edfeee3b7282d7cbb1b0c8929 aspnetcore-targeting-pack-9.0-9.0.3-1.el9_5.x86_64.rpm 1f9e6e1827598133914adfd5148f08709548597bac47958535e14e80ab4f3041 dotnet-sdk-dbg-9.0-9.0.104-1.el9_5.x86_64.rpm 30912efdab6efed13ab632042e8f7872529fe269b7e9bbe378ef0d793224c1bf aspnetcore-runtime-dbg-9.0-9.0.3-1.el9_5.x86_64.rpm 34bce82bbf9fe6266f670f5f51dafaa6bc8125c5d91910374ca4d366cc6fb3fa dotnet-sdk-aot-9.0-9.0.104-1.el9_5.x86_64.rpm 45b823ba0a12973a207a0ec6a9a3e162f4957fca72662893f1ab325803ad822c aspnetcore-runtime-9.0-9.0.3-1.el9_5.x86_64.rpm 5cef1995570af39501c6a3a21e538e91a9484eee3776410bace84814a7af7fe7 dotnet-runtime-dbg-9.0-9.0.3-1.el9_5.x86_64.rpm 6a14249df360de5a3559a21987243fa4bd2be2b32b470d0d33635dbcfeb41884 netstandard-targeting-pack-2.1-9.0.104-1.el9_5.x86_64.rpm 6ba4282d847b44d3db8d94bbdb3bffdbb57bb517aa9fe716729a17fcbbcce6be dotnet-host-9.0.3-1.el9_5.x86_64.rpm 763ab5973d266b8683eaa671c929b73930bb383275d95d9ff6b43023648360bc dotnet-sdk-9.0-9.0.104-1.el9_5.x86_64.rpm 7868fd4cee3fc1416dc23f625d38758e5f9d24d796f43acbad99869719ffdb6f dotnet-templates-9.0-9.0.104-1.el9_5.x86_64.rpm 8837991b4cf521f7dbe752714e0cf7b7ef2c7ff0cc27efc3309248469773f36b dotnet-hostfxr-9.0-9.0.3-1.el9_5.x86_64.rpm 8f746441db85c53c040ef6f48b1e1710132a855eeecc1e5e50c336eab1495f26 dotnet-targeting-pack-9.0-9.0.3-1.el9_5.x86_64.rpm c1bb394c038f7c13483b10661f86dfe9005a5a9be6fa426204f110d5ad3b121b ALSA-2025:2669 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070) Bug Fix(es) and Enhancement(s): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default dotnet-sdk-dbg-8.0-8.0.114-1.el9_5.x86_64.rpm 621bb847dc5d3e636278cc846257169b2957fbce8a09edf5e920b2359490f2bb dotnet-runtime-8.0-8.0.14-1.el9_5.x86_64.rpm 6b2f7a2b993aad96a20ee3ca8b63e016b9554c94b5f385bbd8b8e3b063d3657d aspnetcore-runtime-8.0-8.0.14-1.el9_5.x86_64.rpm 6c102ca36dae880463b6dd8a2537be674a7f6370d992eddbffc4e5c1f77ba539 dotnet-runtime-dbg-8.0-8.0.14-1.el9_5.x86_64.rpm 7eb74cea9a5681afb26472784f641a7275d19c3256d80b8a9824b2654e403dc1 aspnetcore-runtime-dbg-8.0-8.0.14-1.el9_5.x86_64.rpm 8f7a057bfdc426aa97c2e314ae638bc32e67decaedbcc2c40c315447d3228fef aspnetcore-targeting-pack-8.0-8.0.14-1.el9_5.x86_64.rpm 92858715df3f847cd7d439a72dc52a1203a47caaee29538bda6944d78671a9cd dotnet-sdk-8.0-8.0.114-1.el9_5.x86_64.rpm a57a6e63148076dcbf36c23b78b2b941a904d01a8ac1979f64e2b60541b5bda2 dotnet-templates-8.0-8.0.114-1.el9_5.x86_64.rpm b1e798049a3445e2c506fb9c6f15e4b211d49ccd3cfebb4de08972688eaa4f35 dotnet-hostfxr-8.0-8.0.14-1.el9_5.x86_64.rpm c248032fea2a3b5142819d9aeba67ee8a3d0f18a53924347d845d9bfb395f15d dotnet-apphost-pack-8.0-8.0.14-1.el9_5.x86_64.rpm e54534e48c5c9567d3a69ffd847a477780ceaa2d0a79b48bacbf0cf6f6a9421d dotnet-targeting-pack-8.0-8.0.14-1.el9_5.x86_64.rpm fcbe027d9434e2149dfc836f3c88c195e98fda265717aae1ea45dd9958a9d563 ALSA-2025:2679 Copyright 2025 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Use-After-Free in libxml2 (CVE-2024-56171) * libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default libxml2-devel-2.9.13-6.el9_5.2.x86_64.rpm 7127a18dbf5161a889009a264ef4601d7f3994d79b783c17d56656414055a900 libxml2-devel-2.9.13-6.el9_5.2.i686.rpm bc4d4b78b5e3fb4f0f345a05449aa2b8018b01686ad00bcffb1d52e5b7d15bba ALSA-2025:2864 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: out-of-bounds write vulnerability (CVE-2025-24201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default webkit2gtk3-jsc-2.46.6-2.el9_5.i686.rpm 10b640050e3ccfa5eca66ecda3ef15b9838377d0adbf359d747adb08f457f88f webkit2gtk3-jsc-2.46.6-2.el9_5.x86_64.rpm 39ecfca69e343340e0ca51c8897e97aff08449ab83faead59bc1ae3d874002d4 webkit2gtk3-jsc-devel-2.46.6-2.el9_5.i686.rpm 676f46befc1bf1a63fa5b85026cc4735d28b35a164505d4bc5028b5094bc84a3 webkit2gtk3-2.46.6-2.el9_5.x86_64.rpm 94c812f3e085b068539f491864cff7b5e2998153a9663cb2f4f1329b652b1922 webkit2gtk3-2.46.6-2.el9_5.i686.rpm aea67f390927ed5c8f82993b6a044d22de6017e7b901879420d3cdc9225a507a webkit2gtk3-devel-2.46.6-2.el9_5.i686.rpm c78db4522d708726f74cdfffcf713f471d3506c80813e660ae57cecb9f815633 webkit2gtk3-jsc-devel-2.46.6-2.el9_5.x86_64.rpm dfece17ce8bab48a5ffff7fe1978d926ecb6e4169d5886db23460e522d719177 webkit2gtk3-devel-2.46.6-2.el9_5.x86_64.rpm f29cf046cd4abdc43c446be1d69bfca569e89a4c84788b7943bb65380f5595f2 ALSA-2025:2899 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1938) * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1937) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default thunderbird-128.8.0-2.el9_5.alma.1.x86_64.rpm 91cdb04f978fa48e609635fd1d21168610770530cfccffc3689f6d5bdeaff3b3 ALSA-2025:3107 Copyright 2025 AlmaLinux OS 0 1 Important

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default libxslt-devel-1.1.34-9.el9_5.1.x86_64.rpm 189f5664efb199fab8c786548a0f142d01b2d2c741db4d908ccb731bbae06723 libxslt-1.1.34-9.el9_5.1.i686.rpm 546eeb00e078c4d4ecab5f10c41797746ae6bf2eb36ad68ae8906f2d686b9ffd libxslt-devel-1.1.34-9.el9_5.1.i686.rpm 813daeb5e850a2d82d9c58954a20b68d1dc2880c1cf8a895fa978e4351e47a15 libxslt-1.1.34-9.el9_5.1.x86_64.rpm b0e7fd6548bfd48f0225c0a423fde016551b6927f050c12108beff8771196af9 ALSA-2025:3261 Copyright 2025 AlmaLinux OS 0 1 Moderate

nginx:1.22 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default nginx-mod-http-image-filter-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.x86_64.rpm 019dfc9d7f6bdebbe99917575b5627eb87603549ed9951d36c33fd561e6c684f nginx-mod-devel-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.x86_64.rpm 02afb072cf37e637d2a3d48f4534f218a57070f7e649f5cf6a5599fa09917b1d nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.x86_64.rpm 1d46d6e36e3badde8865c39f55e32d1cfa2ff298aa24d5bae6f650cb29db0696 nginx-filesystem-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.noarch.rpm 20fecffac0847e519512ba8cd591edeba05bc8f264ca32b07bd073504cb74071 nginx-mod-http-perl-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.x86_64.rpm 580a451a455689446de91a720a9f097bedf707cd882681cb75df1692bbaa5bfd nginx-mod-stream-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.x86_64.rpm 9e8cd752896625041929f8ea1f9a72ee08e99fbd66af2b146b239abbfc883949 nginx-mod-mail-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.x86_64.rpm bfe1b6749abf075e629c6e5a43959c8362fb531aa6fc617ccd545fb36dccee91 nginx-all-modules-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.noarch.rpm c35220600225a92c23b7364c22f0379078c76d410cf5f796f65ab44d08d8d20c nginx-mod-http-xslt-filter-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.x86_64.rpm d5ad017c0437bc1b4f3dd87cf08577843513cd0ec04bd550b16859b1554facea nginx-core-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.x86_64.rpm ebde1f5af23b404b731a001763421d34717253dcbad56fecb5a1464a5b753fe8 ALSA-2025:3262 Copyright 2025 AlmaLinux OS 0 1 Moderate

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default nginx-mod-http-perl-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.x86_64.rpm 2db093086b7eb5b22e129e8cbdfe5f7783879432708db7340895b41b69ec1c2d nginx-filesystem-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.noarch.rpm 46aa379ab6b7efb4afe049d48dfc01743a009efbee327e06e2d394ecc2203a30 nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.x86_64.rpm 4cf45a719f57ff94d25a7bc6333ec574f74dac1fec266e794a89f8b795e12af7 nginx-core-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.x86_64.rpm 51ec876558055a007937b696f28fb85fd612d1c9e2f07d1c75f353224169e8b9 nginx-mod-http-image-filter-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.x86_64.rpm 850d03796a1a8b6c4b2b3fd83d99fcfe47727bc18bed4b9cdc8cf9c36002044f nginx-mod-http-xslt-filter-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.x86_64.rpm 86b710b661b8e8c5d9d6c3221e5c9ebbcb10b0043bc31a0dabc8c37049ac12aa nginx-mod-devel-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.x86_64.rpm b1cc357b8336acf1ecf5c5a908739c74a687be2f059f4cbe748cd8287eb17a60 nginx-mod-stream-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.x86_64.rpm d2515c17537834003379856ca9a0a040a2a65fd0e5b22ebe13bc6d9ed1d2c98e nginx-all-modules-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.noarch.rpm e5cb23709dc9450f3ab02e90d789ebaf48751c3726076dced63da2bd50d68f72 nginx-mod-mail-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.x86_64.rpm ec87cc8269584669c47b9e03fdf386e6dab456e33bbd649484ad4ce653ea49e7 ALSA-2025:3344 Copyright 2025 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default grafana-10.2.6-9.el9_5.x86_64.rpm 1250fbdc9af9e8807ab13ab1ae6e7d03636d9f89ca80ad2fc6eff5e9a037e513 grafana-selinux-10.2.6-9.el9_5.x86_64.rpm e129cddb595f89f055b51784b7c857c05e6fe709aa97e919bca85bfbafe6ba3a ALSA-2025:3406 Copyright 2025 AlmaLinux OS 0 1 Important

python-jinja2 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * jinja2: Jinja sandbox breakout through attr filter selecting format method (CVE-2025-27516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3-jinja2-2.11.3-8.el9_5.noarch.rpm a1b063cfea59ae64cb44cf1fc0947b580d536a6a00da53384b132339c0dcf69b ALSA-2025:3531 Copyright 2025 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default expat-devel-2.5.0-3.el9_5.3.i686.rpm 4b285f511479f6c7794350887d3e82061f13b76476fc8b8e302089ecb01bdeb3 expat-devel-2.5.0-3.el9_5.3.x86_64.rpm bb5e3897d34a08c48fa2895b949b5702fb9f3bafd12b02bcd7ffb1a757643084 ALSA-2025:3556 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029) * firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028) * firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default firefox-x11-128.9.0-2.el9_5.x86_64.rpm 812dee6d7ddb2c189a1fee233d9c8abc73c49e7186423526ef5f45cad34e9c33 firefox-128.9.0-2.el9_5.x86_64.rpm ed04e2f019e32312876cc4645e376cc75f0924d5105e27a672ec0f5bc5623978 ALSA-2025:3617 Copyright 2025 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: dds buffer overflow RCE (CVE-2023-44441) * gimp: PSD buffer overflow RCE (CVE-2023-44442) * gimp: psp integer overflow RCE (CVE-2023-44443) * gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default gimp-2.99.8-4.el9_5.x86_64.rpm 0ea8355389b44b33124ef1b0d28eef7f18193b39facd298d7ce326725ac591b3 gimp-libs-2.99.8-4.el9_5.i686.rpm 35b5d67b3f4343af7e0edd21c16cc94a5ac19d10ecdd6cdcc644983786fb53df gimp-libs-2.99.8-4.el9_5.x86_64.rpm 3a6c1119c6c6deb96a67ddb44e55ae48fd23911bcbe6cc34f71425c81dd710f6 ALSA-2025:3631 Copyright 2025 AlmaLinux OS 0 1 Low

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3.12-devel-3.12.5-2.el9_5.3.x86_64.rpm 1b6e4fe6c246d7a3bcf98edf68eaf372fc1b8998644287e11480a985d0ff808c python3.12-3.12.5-2.el9_5.3.x86_64.rpm 95efb62df8670270bbc3a021c3938d93a707c7d0d4fc5f1695a5c29cf04b0f94 python3.12-devel-3.12.5-2.el9_5.3.i686.rpm a3fae01b8b31c8b78e4471f21693d2ed472818ce5ad4e138d2989a100b805e44 python3.12-libs-3.12.5-2.el9_5.3.x86_64.rpm a691c45d7f57a0289c4e3c913667e16de66ca91e723a249cfbd534c72a55911f python3.12-tkinter-3.12.5-2.el9_5.3.x86_64.rpm ca26e86c9a30a23dbbefb9d9944766780aa016fd2ccf88929a9c6adddf28b391 python3.12-libs-3.12.5-2.el9_5.3.i686.rpm e805d090181e1bec86274318b4e825ed1a86fc01b9d03171806b746157abf6b8 ALSA-2025:3634 Copyright 2025 AlmaLinux OS 0 1 Low

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3.11-libs-3.11.9-7.el9_5.3.i686.rpm 02e889b4b7d090450fb41e9f2a676ab68dfadeeb0f3eb2a81ba501456ee9ea60 python3.11-tkinter-3.11.9-7.el9_5.3.x86_64.rpm 25925cfa9a5ed1caca4df92b485df274100f720326da1ed3d629cc3fb3801785 python3.11-devel-3.11.9-7.el9_5.3.x86_64.rpm 7cf1ffaf2495a0b7dd180a7710e64c084203555dd35f912e753c9981e2e82f07 python3.11-libs-3.11.9-7.el9_5.3.x86_64.rpm c66f35ca424882b9d5f9a9a43c65c935908aa327bec7d4e7506502a5866463e1 python3.11-devel-3.11.9-7.el9_5.3.i686.rpm d54c02f3d67e82a43a5d93da6b86ccab371352d34b7b1e02c572cf5def029955 python3.11-3.11.9-7.el9_5.3.x86_64.rpm e13c302bc5f9b57c40bc5fd35614c22d583e3277904f3b702d04f80cf01fed2a ALSA-2025:3645 Copyright 2025 AlmaLinux OS 0 1 Moderate

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) * tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default tomcat-servlet-4.0-api-9.0.87-2.el9_5.1.noarch.rpm 729d9fbc08b043b7f408495a8c4e31143cddcef86f382900b746df29b1e93845 tomcat-jsp-2.3-api-9.0.87-2.el9_5.1.noarch.rpm 79d5f8c42f520617044e5773b6665f862b66ebc476d0ab58f05c4056c355ca55 tomcat-admin-webapps-9.0.87-2.el9_5.1.noarch.rpm 8bb0639695bcd28987ad4137f5570be96942f2e9497acac6ed14dc1dbc1bac09 tomcat-el-3.0-api-9.0.87-2.el9_5.1.noarch.rpm 95aa1c5351ece31f53442ce78dac002564770fd9748249534c060bb3669d79f8 tomcat-lib-9.0.87-2.el9_5.1.noarch.rpm bf01263d71e29a5ed32248056bfd6293c60a73fda5a9393f9cb38bf18aa984ae tomcat-9.0.87-2.el9_5.1.noarch.rpm ddd3e00b02bdd79ec60ddf015bc84916ca70641171ef7c77cd97b03484cbcb82 tomcat-docs-webapp-9.0.87-2.el9_5.1.noarch.rpm f03f7aceb10d8eb675f094f375d2c231842873446c783170df1e3699c4f0b49d tomcat-webapps-9.0.87-2.el9_5.1.noarch.rpm fdb83b9e6370a484eba526ff08b0b8384e11c8654e28006300a8ba219191d33a ALSA-2025:3713 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551) * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default webkit2gtk3-devel-2.48.1-1.el9_5.i686.rpm 08c5614ed5e8162347dbb1225ede15fd9de679e5eababf1664e60a43329c2323 webkit2gtk3-2.48.1-1.el9_5.x86_64.rpm 2cc6db8863d16e56d36391b29155b27c7b6e8570802bb084562785e1a332e11a webkit2gtk3-2.48.1-1.el9_5.i686.rpm 4e6763870ab51562ef1ad38d0bf2b3c948fc07576e9dfd8fb2f17679e76515a6 webkit2gtk3-jsc-2.48.1-1.el9_5.x86_64.rpm 8c070332cb3616cbee96d46d9860d85a22a84f58c9b1c0785aa0ba861246f62e webkit2gtk3-jsc-devel-2.48.1-1.el9_5.i686.rpm 98069ec70148aecce43ab1ec516e4c3c9f47998a3a67e4a15a7b8c4ec9043890 webkit2gtk3-jsc-2.48.1-1.el9_5.i686.rpm a87c13a5c13dfcd4e16e1f19de8e746fff40c2706b9bc932d42491517e04be0a webkit2gtk3-jsc-devel-2.48.1-1.el9_5.x86_64.rpm c8702f5622819665536eac546ce6703d6262f2753e79e72ad5199e62755308d2 webkit2gtk3-devel-2.48.1-1.el9_5.x86_64.rpm e8f8a298fb87c93fbee39a5c2031c65bbea156e0b34607f7d27198ca7da1e28a ALSA-2025:3773 Copyright 2025 AlmaLinux OS 0 1 Important

delve and golang security update

The Go Programming Language. Security Fix(es): * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default golang-misc-1.23.6-2.el9_5.noarch.rpm 15994156d65e498b48edce0a83f6fa539fd964b8c17c6bbd189dc36cf14a0f4b go-toolset-1.23.6-2.el9_5.x86_64.rpm 28e2e0332653bc7c64a8836d97a4b75e35eeb1d6a5b1e40eb902805e7fe2c4ed golang-1.23.6-2.el9_5.x86_64.rpm 7ccb7dc53517004961f86ebf72871dc989318a7f0c920c43807336b348395040 golang-tests-1.23.6-2.el9_5.noarch.rpm 8efc93285b11531f1481cc5986e5b4cd892a01b7595c1fb7d21198bd5bf388b2 golang-src-1.23.6-2.el9_5.noarch.rpm e871ca30ed3abf4af1f8574f5b92738a5878ad2e8b54dffdbc9715a2ba9a7dd4 golang-docs-1.23.6-2.el9_5.noarch.rpm ea7cc52ebdb704fd6d1a71b8bef45cb23b3c1d89c6b3a218fb425aa85a555057 delve-1.24.1-2.el9_5.x86_64.rpm f3cadd5d3b6537dfca5e99a06eaaeeb56d8b3fe1ca7761cd64b83151bcd181ff golang-race-1.23.6-2.el9_5.x86_64.rpm f8ce29d85c5b469d938107ade0ca7c753d8838f841b568ffef10d057be84f11e golang-bin-1.23.6-2.el9_5.x86_64.rpm f9be2af457cf5a631be09518dbbf504e7d125c5956baf9883fe7baf995f3d252 ALSA-2025:3833 Copyright 2025 AlmaLinux OS 0 1 Important

gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default gvisor-tap-vsock-0.8.5-1.el9_5.x86_64.rpm 5dd7d5b8cb7c8fbc03988e75224c9fc4624ce4b62dd428e0804a27016c496a0d ALSA-2025:3845 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Better TLS connection support (CVE-2025-21587) * JDK: Improve compiler transformations (CVE-2025-30691) * JDK: Enhance Buffered Image handling (CVE-2025-30698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default java-1.8.0-openjdk-demo-1.8.0.452.b09-2.el9.x86_64.rpm 2e7a12bc9e2d685059981b7c117a3caba06efb75fabeb224ff321a10c3b6dec8 java-1.8.0-openjdk-1.8.0.452.b09-2.el9.x86_64.rpm 2f57b20f8ca58d8eb47c5c82d74183fb0d8ff3e552bb191853c93c549b45b114 java-1.8.0-openjdk-javadoc-1.8.0.452.b09-2.el9.noarch.rpm 5aae70336b95a3ce2b62fd90070d313f77ec051673846762fcbee3a435da2e3f java-1.8.0-openjdk-headless-1.8.0.452.b09-2.el9.x86_64.rpm 6299be2e4ab978dd0772d8e8919106d77e4af9cdb95e87d9fd6af2204de1da06 java-1.8.0-openjdk-javadoc-zip-1.8.0.452.b09-2.el9.noarch.rpm 719d195031b98c6f1bf0113a57dbf7ecc25b912db67a3197174403bd3e9bd834 java-1.8.0-openjdk-src-1.8.0.452.b09-2.el9.x86_64.rpm 8d54abd2088defd62941a238c38eacf73c61318dc0158957a7eb2fed2fe0f2bb java-1.8.0-openjdk-devel-1.8.0.452.b09-2.el9.x86_64.rpm f4f16e108b5be566f0381903cbb7afc2bd646f12db2891f556031462c2cf9b76 ALSA-2025:3852 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Better TLS connection support (CVE-2025-21587) * JDK: Improve compiler transformations (CVE-2025-30691) * JDK: Enhance Buffered Image handling (CVE-2025-30698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default java-17-openjdk-jmods-17.0.15.0.6-2.el9.alma.1.x86_64.rpm 6038669525e21e98fb59660900785ed4977871e6dedeb815d8b3ab1d3e4a2af9 java-17-openjdk-headless-17.0.15.0.6-2.el9.alma.1.x86_64.rpm 6ed3f4939227da6d5c1929604100fea242178587fc544a095799d464e17db08b java-17-openjdk-demo-17.0.15.0.6-2.el9.alma.1.x86_64.rpm 80f9a536c4155c18dbe86ce8755cafa185a49b3bfc85e6e12b7c28a17ed610d1 java-17-openjdk-src-17.0.15.0.6-2.el9.alma.1.x86_64.rpm 88a0b2022a65c00adb84e1540a5ef8af1c498eefd5127d23d087816c80654008 java-17-openjdk-javadoc-17.0.15.0.6-2.el9.alma.1.x86_64.rpm aa08880157cf1603585a7f58d731081d0ce5ee739ae6502f19b33b39f233493b java-17-openjdk-static-libs-17.0.15.0.6-2.el9.alma.1.x86_64.rpm b60204e79c8fde84bcbb8c8f011e048433e8f48bd0ff6ecb00d759c81dbef0d1 java-17-openjdk-javadoc-zip-17.0.15.0.6-2.el9.alma.1.x86_64.rpm d583cbd0483e57a7d5f1a1bec6eac5ca92c4af30ea680a545fea4d439f489d0f java-17-openjdk-devel-17.0.15.0.6-2.el9.alma.1.x86_64.rpm ec9189329536c1ea5972fbb3acff33ada4a8c772154a840b5d4f1004ce49106f java-17-openjdk-17.0.15.0.6-2.el9.alma.1.x86_64.rpm fd8a9aeb8e11ad2d9f881e34840bb0e0029ba0769c0c39a9e72fb9848f624b34 ALSA-2025:3855 Copyright 2025 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Better TLS connection support (CVE-2025-21587) * JDK: Improve compiler transformations (CVE-2025-30691) * JDK: Enhance Buffered Image handling (CVE-2025-30698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default java-21-openjdk-headless-21.0.7.0.6-1.el9.alma.1.x86_64.rpm 4c6b32075b399288f79c7b38ff1f76c8b0ddfadbebdbc88dcda41603cfd5e907 java-21-openjdk-static-libs-21.0.7.0.6-1.el9.alma.1.x86_64.rpm 5d742b2f558c7f63658d585dad9ad2729856a1f9e963be681d0b4ad9ee9c27ee java-21-openjdk-demo-21.0.7.0.6-1.el9.alma.1.x86_64.rpm 7e977bcb1a4c8fa44bce1b7acf47a7c4dcd65d68cc7604da7e0ba99f0ece2073 java-21-openjdk-javadoc-21.0.7.0.6-1.el9.alma.1.x86_64.rpm 87d762f7ed40266548e3e560b66bdf9bf1af2f00a74d9f5cd99eb96acd5c5997 java-21-openjdk-src-21.0.7.0.6-1.el9.alma.1.x86_64.rpm 962bb5ca97f4ffe58540721b234fb9a105389f474b69c11ede9d6be8ab3dbf1c java-21-openjdk-javadoc-zip-21.0.7.0.6-1.el9.alma.1.x86_64.rpm ca9078cb88a0114a42950f06d9b9ae9d2178a067e3483b248e841a7d3bd9353a java-21-openjdk-devel-21.0.7.0.6-1.el9.alma.1.x86_64.rpm dc9f84e489b83632ea4ae6a105b8ea9c80fc3e59bc152b213a34a26963a982b8 java-21-openjdk-21.0.7.0.6-1.el9.alma.1.x86_64.rpm e06d472aa594cb8e286ca3334b1a3dfaec7e46251e3f63a76231de812a44c96e java-21-openjdk-jmods-21.0.7.0.6-1.el9.alma.1.x86_64.rpm f54d64e9b6a96d9a588e00e5c58f055d1e4d02cbbb3f63a05c43576bf136e543 ALSA-2025:3937 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default kernel-headers-5.14.0-503.38.1.el9_5.x86_64.rpm 2b616ed4ef0bc176be5006565c5589ad8cb8bf9ede2f790f831ab878e2dd5617 rv-5.14.0-503.38.1.el9_5.x86_64.rpm 2f0cc1427b698a1ec6bb6406d5970d3b0ef4deb74cb46a1d8e0ac960d0abf0f6 kernel-doc-5.14.0-503.38.1.el9_5.noarch.rpm 426c12cb974a438d7ac3658c96a747eb7de56945b6f0936dd8c3e1b1e1654462 rtla-5.14.0-503.38.1.el9_5.x86_64.rpm 49281b4b292ef0ec2b96f15862d089871acee703e8cc69c54896f1a3d959a195 kernel-debug-devel-5.14.0-503.38.1.el9_5.x86_64.rpm 5038cfdda2df51d16c9d115b9feeda9d06895900f5de7da3297acf5cbd6cbdf5 kernel-devel-matched-5.14.0-503.38.1.el9_5.x86_64.rpm 5c35f816d228e80646d42492253c9a371909fa4c491825caf62110d2a4aacac2 kernel-debug-devel-matched-5.14.0-503.38.1.el9_5.x86_64.rpm 748cf1260e9d4e68566c0c4b269f0ee38372fa3ec65e5c374398fdfe789185de python3-perf-5.14.0-503.38.1.el9_5.x86_64.rpm afc370361ea24425e302a8074b7694be7f6fa47e2ae130c61fe9cad36066c90c kernel-devel-5.14.0-503.38.1.el9_5.x86_64.rpm cf2b7b8ca1db7a05d8dff983b92408901c64ca7c60b5f6d15b7113d46f027190 perf-5.14.0-503.38.1.el9_5.x86_64.rpm d1ca8150d2161bb1d553f776cb4c523b4ad058bb9cf6aa0e0fb15f0c28ab6410 ALSA-2025:4025 Copyright 2025 AlmaLinux OS 0 1 Important

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default libxslt-devel-1.1.34-9.el9_5.2.x86_64.rpm 65f240829d7992d6f1e313245874ce2510aef03f2b04936f09499fea33ebadc9 libxslt-1.1.34-9.el9_5.2.i686.rpm 923da23b688b135692b37463d928c12dacaf5f01f776b3a8628af0fe09de3d39 libxslt-devel-1.1.34-9.el9_5.2.i686.rpm eec55b4fbe33b21bbf7355b4d7bff07238a988cc43e904bb7f5573eb005a07a9 libxslt-1.1.34-9.el9_5.2.x86_64.rpm f756a1f8101e88927f7d32e975ada9bb10d998f02f39f9c22fe3211924fcd0e2 ALSA-2025:4169 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029) * firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028) * firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default thunderbird-128.9.0-2.el9_5.alma.1.x86_64.rpm 47db3c122d5317b78fb9707b85f49b2a00150ba5134bc426fe4352e8383c54be ALSA-2025:4229 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523) * thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830) * thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default thunderbird-128.9.2-1.el9_5.alma.1.x86_64.rpm a32a6bd84219441c8899ee166a7a8fa897351d56738b66aa5dbe7c67a8403501 ALSA-2025:4244 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default glibc-doc-2.34-125.el9_5.8.alma.1.noarch.rpm 1f92177ee44e90eb47d1eb972273179aa8c388f9b77d0f3ce3eed51f72b7562c glibc-headers-2.34-125.el9_5.8.alma.1.x86_64.rpm 77fd486c81e4b841f52ac58fe0a713fb71fe3c688548e006b0752dd322616116 glibc-locale-source-2.34-125.el9_5.8.alma.1.x86_64.rpm 82c9237cefb8040ca061d8036df93e7c68a68b2c2fe6be06e6be3e8f0de0a923 glibc-utils-2.34-125.el9_5.8.alma.1.x86_64.rpm 8bec3c110b1e0d880797ecf911093cbd5da98e1a8e717d5bfe4cb56f622e5e31 glibc-devel-2.34-125.el9_5.8.alma.1.i686.rpm b1f4c44254ea43ed8762bd37d963b8ed24533e01eae2d8ff697b9293e9048a8e glibc-devel-2.34-125.el9_5.8.alma.1.x86_64.rpm bc0b102d7f9a6f730c75b8800e87a419b95c4ac8a20734e815bac45de7564e0c ALSA-2025:4263 Copyright 2025 AlmaLinux OS 0 1 Moderate

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929) * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233) * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234) * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default php-snmp-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 042446488371e8381c2dc78f587293edc1dfec2836b8177eed2c7ed6125d06b6 php-dba-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 11e98d90073953c24b5e3f3c2453a4b6b11d9a5d947b15bfb6b4ce37b4786caa php-mysqlnd-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 132a5ec5616d1c5c2f7690ba0068e60cf06b882b5f343b8c879c567a29313906 php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.x86_64.rpm 1d61584097fd68d9478f5e82d6be6d28824069372066e2373f64760a85a5187f php-embedded-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 286661f82320d0d7444eae3ba37aebfbd1260a9b3b43e721105236f2abd2d14b php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.x86_64.rpm 2db6bdc28c0763904128e74c0d62d0ea0c44d261b11df928c090f42e22d03a81 php-ldap-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 35156202760db03cd8179b08c881f9facc98beb0777b7891d4e15de9267ea2e0 php-pgsql-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 41b0a25d381a2b74ee76ef910e6285bb6f4ecbeecc3add3904e2c4669dd16a9a php-cli-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 50d988fdae4ee32192048daa00526b338abed2ee69a6928db1685b2e700ae15e php-devel-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 547474c2da4899c2c3b86cd259122a94a21abe74aacfd377a749d1f153732d6d php-opcache-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 5b36e9d1f24c9a18e5e8c5def87ba92e2e6147b84775eb66752ea73ac6592136 php-common-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 6cae1c114bff37653fae738525775b3236fb0b727ad2f91e8c11b07b13cf04e6 php-intl-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 6d6fda3c53827a13dfa1f4c56e4f3d6f75f81e23a997de3b5da7f3496ed90fe0 php-odbc-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 6fd7112021f38dcf54aa1fce2d76a883fd80115c1a7f4c6b5a65fd038dcf35e7 php-soap-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 7cbfaf443b1592824d5d341b568b3f0c8bf3632c3e36c85e834761c69af348db php-gd-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 7eea5e5ad6a3951dc062f81744542adfa3d372f92eec5cea221a9f8a436f2e0a php-xml-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 96c1ac3d37f55da87349d7b86c777956b51033969ec53f82fba03a91361b8ffa php-pdo-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm 9d433f7f18fdddf1ab6aa5389f22ec74aa9a031d464a15642db60e39533f27d3 php-mbstring-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm a105c3019d547dc87b1d3e984f8ec5cebb4587be46ffd766c4c95c98a46f888c php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.x86_64.rpm a2464722cfe7d27cd93eab8a1161a66f29ec07e2084e6b4c523d27979d38cf33 php-bcmath-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm a995ba4032e53b3eae8e929be75c346c1bf2330b98b2e0c36183f888c45d3a2a php-enchant-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm ab8895ca607178c8ebb5d8e61566e68e364e41a184de19354dea96eca071058f php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm b0ecce0d5e3556e4ad0c74a6ebbc794803ecf5a0080db3558f7ba9d3d66d0eee php-ffi-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm b58a7463361253b2a3bbb2e1bfb1a88373c91058bfbc9023ef9dd45cb10caa6d php-process-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm b7719c08ed43282d1e9ec226a2de9f3ff8114255750eba72cf1768954d84703d php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.x86_64.rpm c089feb7907f70938655f4f9ae584c4a4574a3bcbaa2b956ee3d13e9da66f52e php-gmp-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm c749ac4f75f64b8615f27f92cf2b6a8ae1ce3d406761e020c65ab3e54ddee8c5 php-dbg-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm dbd3a711bbdfab893d86be6c591d31ebf19bee344f5bad4fa2c472c77311f512 apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf php-fpm-8.1.32-1.module_el9.5.0+156+9f1cd3fd.x86_64.rpm e3d17faa7d2edda3c0be58a0de11f9c013676436972dfd2f8fc9cc48f5b9c1bf php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.x86_64.rpm f148ef9c893d0c720cbeb8f383382dd98953bdc71b88d16fae276adc83daed11 ALSA-2025:4443 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817) * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087) * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083) * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default firefox-128.10.0-1.el9_5.alma.1.x86_64.rpm 5546f103067a714be93f50ed02f30d1a54ced4c3740c4577312c014bafb14c0f firefox-x11-128.10.0-1.el9_5.alma.1.x86_64.rpm ebb6ba1242f41029385e0ed6e43dc3c87a563c1519eb4e222fa612cb628e361a ALSA-2025:4460 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817) * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087) * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083) * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default thunderbird-128.10.0-1.el9_5.alma.1.x86_64.rpm 230ff679a8085d8dddc9b88e2c449f15c606ea131f5c99570150e5902b1dbb5e ALSA-2025:4488 Copyright 2025 AlmaLinux OS 0 1 Moderate

ruby:3.1 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: DoS vulnerability in REXML (CVE-2024-39908) * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> (CVE-2024-41123) * rexml: DoS vulnerability in REXML (CVE-2024-41946) * rexml: DoS vulnerability in REXML (CVE-2024-43398) * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220) * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219) * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm 47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8 rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4 rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.x86_64.rpm dab19da2b0c280cf81790d96e39c50f37e61ff0e70a7b591600f76f8cc8d96df rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.x86_64.rpm f19ded1c673d7431f2562b768ca31c5d92eba38bb0ec8fe3aaf608b1e63e36d0 ALSA-2025:4491 Copyright 2025 AlmaLinux OS 0 1 Moderate

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default python3-lib389-2.5.2-9.el9_5.noarch.rpm 19122786eab2f4bca09f45e362f1a09a08f2449a984d02e9a70607691dd520c6 389-ds-base-libs-2.5.2-9.el9_5.x86_64.rpm 22e24817d780773bd1a20d84f2a2adbc17c9d7a4c5e80869aeab24dd6f6ec996 389-ds-base-snmp-2.5.2-9.el9_5.x86_64.rpm a87c997da8128d5ff2504a7b310ee6bf4ee56f147095459f6d17cf6ccd9d40f0 389-ds-base-2.5.2-9.el9_5.x86_64.rpm c2842612f3473f210f355b6d735daf9b1381c4c461470fcf4bc7f534e1097394 ALSA-2025:4669 Copyright 2025 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default osbuild-composer-118.2-1.el9_5.alma.1.x86_64.rpm 294e70c65a3caebc25c320055776bd45706d32b6f9f138e99eb25737d83ed885 osbuild-composer-core-118.2-1.el9_5.alma.1.x86_64.rpm 98615149ca99cceb0f872412408b89c5d0741eab0a8cd7681b331b60d449677d osbuild-composer-worker-118.2-1.el9_5.alma.1.x86_64.rpm bcb4336a53ba74383b601efe63653ea8739e99b30eee6eb06545413dc8713f74 ALSA-2025:4787 Copyright 2025 AlmaLinux OS 0 1 Moderate

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_5_default emacs-common-27.2-11.el9_5.2.x86_64.rpm 7f631a4e6cd835d49841c4c7e35f3adab8a8f422f08452f321c6f65ea509ff3c emacs-lucid-27.2-11.el9_5.2.x86_64.rpm 8fa037ff9e72fa9a0a8233ded0c8edb964a9ced910059b69e060510f0e93b698 emacs-nox-27.2-11.el9_5.2.x86_64.rpm b23ae550aa510ddb94885eb633546882ba6d82469a1b14951eac4229988a1a64 emacs-filesystem-27.2-11.el9_5.2.noarch.rpm c66aec7a35f086f4f8935f52262d21e1479526dc760c4bef3eaff0476b4ea81a emacs-27.2-11.el9_5.2.x86_64.rpm c89cfa9d0a6f34952047f7e612e7a8567f70be45d5cf5cd2b60e644e9efa4c26 ALSA-2025:6977 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python-unversioned-command-3.9.21-2.el9.noarch.rpm 16f608eb291f8dad2090c7c90b4e9aaaac867afdf3aac0b96e425b4be24c9368 python3-tkinter-3.9.21-2.el9.x86_64.rpm 3ef4f596794c8e484aa73fb067e8164cc0e96570a6f6438fe802741dbf064681 python3-devel-3.9.21-2.el9.x86_64.rpm a91775b4d4ba862320d0d7bb31c3229469cce476e6af67770672459cb6050aa5 python3-devel-3.9.21-2.el9.i686.rpm b36846455a7fefab4c7d3ce08e7586068d615f5e11d56ed4f1bf60e61daa7819 ALSA-2025:6993 Copyright 2025 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled (CVE-2025-26465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default openssh-askpass-8.7p1-45.el9.x86_64.rpm a6135ae2760ee28e3b6af788372a78b8fb832ae569fbf52eb67953f6c732782c pam_ssh_agent_auth-0.10.4-5.45.el9.x86_64.rpm ed94aa4205c83b3324e699c2d6495e56dcd46bce1ec99602cf0428d6fe8135f6 ALSA-2025:7049 Copyright 2025 AlmaLinux OS 0 1 Moderate

python-requests security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * requests: subsequent requests to the same host ignore cert verification (CVE-2024-35195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3-requests+security-2.25.1-9.el9.noarch.rpm 39fdf07a55cb1155bff376088e22972d43c1fe701ed60ad845a799f7c9675768 python3-requests+socks-2.25.1-9.el9.noarch.rpm b63ae6449bd0d7789b885759466579381430772b987ded7c7423ddcc830c333b ALSA-2025:7050 Copyright 2025 AlmaLinux OS 0 1 Moderate

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Path traversal vulnerability in rsync (CVE-2024-12087) * rsync: --safe-links option bypass leads to path traversal (CVE-2024-12088) * rsync: Race Condition in rsync Handling Symbolic Links (CVE-2024-12747) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default rsync-daemon-3.2.5-3.el9.noarch.rpm 2fd37e5ea7af580d528c37cf5f398bcb366a912424c5a39416bfd18707881111 rsync-rrsync-3.2.5-3.el9.noarch.rpm cbe2d5773743f194e3fb7118ac001560fb1c18e7bb2f3058c13086b829e9375b ALSA-2025:7067 Copyright 2025 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: overflow when calculating ulog block size (CVE-2025-24528) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default krb5-devel-1.21.1-6.el9.i686.rpm 82eca122cd180aecaed416678afd690a6e3a6bdf7517ceea693e40d3f88e0176 krb5-devel-1.21.1-6.el9.x86_64.rpm affec26a69488ab6e2a9ae94a8a7ae5870f51cbf1607630027a0a21f98a8095b ALSA-2025:7076 Copyright 2025 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS (CVE-2024-12243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gnutls-c++-3.8.3-6.el9.i686.rpm 1c821a4a6a49291980909008fbe272186032dacf498ef5f2095706a03881bafb gnutls-devel-3.8.3-6.el9.x86_64.rpm 2ed5029781c37d9ff8955531675315e2b61ed85568d245657d21d7b1eee25982 gnutls-dane-3.8.3-6.el9.x86_64.rpm 2fe9a4f475022b104731134b7f73f8618a838cbdfa26b60b82051368503c90c1 gnutls-dane-3.8.3-6.el9.i686.rpm 602967e78e7db18025c304ea8e6350b04cb05fe365f09346848c265dd38e4966 gnutls-c++-3.8.3-6.el9.x86_64.rpm 796aa5ed725b704e6dc3db4e6648e5828fbade77a7c837be6831c9e111aa0147 gnutls-utils-3.8.3-6.el9.x86_64.rpm 838012b181d4ca1872730b4ccfe797deefc27ff06296d85a67b3abd8433d4ed8 gnutls-devel-3.8.3-6.el9.i686.rpm d1c89bd7e4132e9b42b495261fd5420bd32a2ae5d406865556f5020087c7467b ALSA-2025:7077 Copyright 2025 AlmaLinux OS 0 1 Moderate

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libtasn1-devel-4.16.0-9.el9.x86_64.rpm 2631e57ca7ff2eb2654d7b35a9555e6d207b166c68e6279cdad2fe6927106190 libtasn1-tools-4.16.0-9.el9.x86_64.rpm 97b214da8026f0c570c91502dda3a44cfaabc6bbc0331027491876023603d8ce libtasn1-devel-4.16.0-9.el9.i686.rpm b9ee186f8476ded044ba8a23829cf452fc50893e541753070fbc25be66e043bc ALSA-2025:7094 Copyright 2025 AlmaLinux OS 0 1 Moderate

aardvark-dns security update

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`. Security Fix(es): * containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service (CVE-2024-8418) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default aardvark-dns-1.14.0-1.el9.x86_64.rpm a50d6ef972c7cfe5f4333341e642b1bbf4cbfe40330880e6372ef8226a39ed8a ALSA-2025:7107 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.12-libs-3.12.9-1.el9.i686.rpm 401284dd70744da27e5630721e8ec523bfd8c8d8da30a0136ae6b678dfe017ed python3.12-3.12.9-1.el9.x86_64.rpm adf51e95ef81e93bd3e0f920a8e1880f436199e9e2816340bcdd6c2f520e7ac7 python3.12-tkinter-3.12.9-1.el9.x86_64.rpm bd1cb669dbd2c5a03ca4c1dcdc587290d7e199c107822b0a052c11640c482bb3 python3.12-devel-3.12.9-1.el9.x86_64.rpm c3ce8a967367ffc7e0f73b93d6b3eeaa6e5cfe0f1efde2b81289c642ae9e07f8 python3.12-libs-3.12.9-1.el9.x86_64.rpm d987a1df98dedd552188bb3e40ea515d1fc951a87877d869753e55e92fd4768b python3.12-devel-3.12.9-1.el9.i686.rpm e10a722cea87f1dcc2b43370158c6831a92c5455bf0a4b8ca55662ecd5433a44 ALSA-2025:7109 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.11-tkinter-3.11.11-2.el9.x86_64.rpm 0f6bb0c5c78c63b1aaa525c8836387dc50baa0e3937d7d5ddde485e0415949c7 python3.11-devel-3.11.11-2.el9.i686.rpm 38697c7d34e371997e67ee7b1b27cef6b620915e438c3aab6235aae1efd086be python3.11-3.11.11-2.el9.x86_64.rpm 9a0dc10176168b3071ffc41f5db22655c3eaf8966bb90c7740cb99a58e85ea50 python3.11-libs-3.11.11-2.el9.i686.rpm aee3e57e50bdc5c20c3c1e4d88f8c0254a3e01a267bb5fc8ba62fb1f23f880b6 python3.11-libs-3.11.11-2.el9.x86_64.rpm bfd008f9eba5d558c6c7688e9faca927e43e70cb490346a0e1fde7df87ee0163 python3.11-devel-3.11.11-2.el9.x86_64.rpm e52ad4e92feb9370d6a27680f309133411ca7afa822f78226fc0f1696e905f84 ALSA-2025:7118 Copyright 2025 AlmaLinux OS 0 1 Important

osbuild and osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default osbuild-luks2-141-1.el9.alma.1.noarch.rpm 52b194f8df542ea8e88d1c60f5180d5d1e5cc9f935cbfb1d8f366c46f8fe3034 python3-osbuild-141-1.el9.alma.1.noarch.rpm 562af1b3dc20c3bb6f488844c8137259d770f84759567a31b4c8ea44462b0631 osbuild-ostree-141-1.el9.alma.1.noarch.rpm 667e2ba8623ecb6582030899218616f3a903550c995a74c5c0d0fbc7ce17c9c5 osbuild-composer-132-1.el9.alma.1.x86_64.rpm 7e22a4e9f9ea5c32607128a0e700d81ff92b6975ed87bc1040f441356c7cf104 osbuild-selinux-141-1.el9.alma.1.noarch.rpm 7f5f30a05337341ac51825f404817af2e475b38e13fb5279a136cfc095fa061e osbuild-depsolve-dnf-141-1.el9.alma.1.noarch.rpm 8b6be495c04b1c26b03b62c5ab2f16357f1d462466d6658744a8a2f999e397b8 osbuild-composer-worker-132-1.el9.alma.1.x86_64.rpm 9d852421a8a5cf65fa11157edffa4b6bbae2483a5f3b4ec27cb646a21177a715 osbuild-lvm2-141-1.el9.alma.1.noarch.rpm b115c78ab66aa5e77d4eaf1db651cdaf37cc01a7612e684e4df22b6ca2efda7c osbuild-141-1.el9.alma.1.noarch.rpm c19104b6eb5c3ac9fc89dc773f6b18ef258db17759a95ea3ff466ede30fc5205 osbuild-composer-core-132-1.el9.alma.1.x86_64.rpm f860cef41e7d2a5469a7e44858ae5c55c38b96fc06d516b039d9591eb3d946dc ALSA-2025:7138 Copyright 2025 AlmaLinux OS 0 1 Moderate

protobuf security update

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data. Security Fix(es): * protobuf: message parsing vulnerability in ProtocolBuffers (CVE-2022-1941) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default protobuf-3.14.0-16.el9.x86_64.rpm 8f18b0aa571e313d62143916b0840a2d8ab2102c1072d9fa1af77151a91e251a protobuf-lite-3.14.0-16.el9.i686.rpm a8727282e3124f06e7fe9073528315d87d9e7d27d9db346eea419cb1e0a455a6 protobuf-3.14.0-16.el9.i686.rpm be7e09bfa8c62f8a62a70b4e1f88941f3912d52219d3456331b466a83572d34d python3-protobuf-3.14.0-16.el9.noarch.rpm c546a57850e4e03a42870602b2c4592d121475806e64ce282d08fb0f8d66cd37 protobuf-lite-3.14.0-16.el9.x86_64.rpm e67ee8505e6f6bd35493534008b917c5697808c3bae986e063b98944fa0036e4 ALSA-2025:7147 Copyright 2025 AlmaLinux OS 0 1 Moderate

rpm-ostree security update

The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and rollbacks. Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default rpm-ostree-libs-2025.5-1.el9.i686.rpm 07484417f4bf477432ea7d2fa4e0cd3ce5d77996482019492c3b7313e1e9c21b rpm-ostree-2025.5-1.el9.x86_64.rpm 3547785760bc114045d8ceec153b0777b3f945b0785f44bdffefe7e410ff134d rpm-ostree-libs-2025.5-1.el9.x86_64.rpm 5735a5bc44ec2f8affecfc398ace756566613feac01bdb782f28dee2cdc268d0 ALSA-2025:7160 Copyright 2025 AlmaLinux OS 0 1 Moderate

bootc security update

Bootable container system Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default system-reinstall-bootc-1.1.6-3.el9_6.x86_64.rpm 83de197f002719246aa53b0c24a4d9992274e188984c8d9475f3b0db71b3d71a bootc-1.1.6-3.el9_6.x86_64.rpm b70125fbf8b56117571d91b88a04b2d693c47e446eb97c6f18b6ad98d36a66ed ALSA-2025:7163 Copyright 2025 AlmaLinux OS 0 1 Moderate

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632) * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601) * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600) * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599) * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598) * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597) * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596) * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default xorg-x11-server-Xorg-1.20.11-28.el9_6.x86_64.rpm 0e3ce0653aaf756a956126907a4b0d47c52a238b0de494f290137d19ac45b0b3 xorg-x11-server-Xvfb-1.20.11-28.el9_6.x86_64.rpm 13dd572aad62992003d5fc51da1c5eda7b1293c4b6953596c257c6f8270fbac6 xorg-x11-server-Xnest-1.20.11-28.el9_6.x86_64.rpm 1ce52f3f89259b487f935454ccc2bc6b15011edefdf797ebddb6c1da93087d96 xorg-x11-server-Xdmx-1.20.11-28.el9_6.x86_64.rpm 6c799138119451d4895065230142fa1b2ae27bc8be0d470b4d89433b03b0eb6d xorg-x11-server-common-1.20.11-28.el9_6.x86_64.rpm 6f5d55ca2c882bdb3ed40dbd766b2c3fdd97cde4a7de7056b49a8e859332f8d1 xorg-x11-server-Xephyr-1.20.11-28.el9_6.x86_64.rpm 7467d0745d94eb7c389a2729c408288d4d899205667ab0645d7a146601ceb218 ALSA-2025:7165 Copyright 2025 AlmaLinux OS 0 1 Moderate

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632) * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601) * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600) * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599) * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598) * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597) * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596) * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default xorg-x11-server-Xwayland-23.2.7-3.el9_6.x86_64.rpm 12e5b24dbda30ccb9f8afc0f5cf2bb6f86f0672f1b63e8379acf50c0c4f89ed1 ALSA-2025:7178 Copyright 2025 AlmaLinux OS 0 1 Moderate

gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update

The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fix(es): * gstreamer: EXIF Metadata Parsing Integer Overflow (CVE-2024-4453) * gstreamer: AV1 Video Parsing Stack-based Buffer Overflow (CVE-2024-0444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gstreamer1-1.22.12-3.el9.x86_64.rpm 05e9901a920466947b8e1b841687d2507d270f4b76abb5934d97ff941ea3f81d gstreamer1-plugins-bad-free-1.22.12-3.el9.x86_64.rpm 1652e2cf03063af86c03bde5546e8c2fb0b0d9a82d04a40de70495ccd0944983 gstreamer1-plugins-bad-free-1.22.12-3.el9.i686.rpm 22e280b85124d67359bef045ba4de90fed58c051920411db8444a07af05d8123 gstreamer1-rtsp-server-1.22.12-3.el9.i686.rpm 357dbc11938b8da3f96827f2fff3ead11750928f36d2d92befac073b4e5ea166 gstreamer1-1.22.12-3.el9.i686.rpm 396812b167e3bddf664988c7e60273251ac5fab3834c2697ed7cad572cb99608 gstreamer1-plugins-bad-free-libs-1.22.12-3.el9.x86_64.rpm 7195e11e52f2543cdf55ebd98b5e8408e8b958e254c42e92ac18bdfc7e852b9f gstreamer1-plugins-bad-free-libs-1.22.12-3.el9.i686.rpm 7a12212933fd24136a10846cb9051d996c076712bd2dfbf04ef1bb09d517e073 gstreamer1-plugins-ugly-free-1.22.12-3.el9.i686.rpm 7f976c226dfb933aeed33fc7c364e2e7bca98add1bede6de57f2f3a612d5f9b7 gstreamer1-rtsp-server-1.22.12-3.el9.x86_64.rpm 7fda75ee21ab98ed9699374921612038a9f0e757540e9b3181bf26274531854a gstreamer1-devel-1.22.12-3.el9.x86_64.rpm a81de0cde48e38ebb8c70d9bf5526c58867e2e1c5dab87b326eeae3b2f8cca3d gstreamer1-devel-1.22.12-3.el9.i686.rpm ec7bc4c5a4e5324e3ba658755b71736d97b2bff8a5a1556d6506cd4ccfe5e582 gstreamer1-plugins-ugly-free-1.22.12-3.el9.x86_64.rpm f564e778593685ceea83e3504a79ef1f9be66003e63ae5dbb41d3bdbdb16d46e ALSA-2025:7201 Copyright 2025 AlmaLinux OS 0 1 Moderate

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Stack buffer overflow from 'orf_token_endian_convert' (CVE-2025-30472) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default corosynclib-3.1.9-2.el9_6.i686.rpm 1907074b58e6e38f909ccae66891e3e6fbccd1bd3306776ead3589fce9aeea4c corosynclib-3.1.9-2.el9_6.x86_64.rpm 615be72dad8227b0bba1c8fd99101aef9a672912c48a1cba09a9d1fe29068298 ALSA-2025:7241 Copyright 2025 AlmaLinux OS 0 1 Moderate

rust-bootupd security update

Bootloader updater Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default bootupd-0.2.27-3.el9.x86_64.rpm 1904e99f67a05f6eb96529b66fa383aa371b6ade2745fd481e7a98bb443570b5 ALSA-2025:7242 Copyright 2025 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: OOB-read in qtdemux_parse_container (CVE-2024-47543) * gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk (CVE-2024-47774) * gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk (CVE-2024-47777) * gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk (CVE-2024-47778) * gstreamer1-plugins-good: OOB-read in parse_ds64 (CVE-2024-47775) * gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing (CVE-2024-47596) * gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences (CVE-2024-47599) * gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate (CVE-2024-47834) * gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk (CVE-2024-47776) * gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling (CVE-2024-47544) * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47601) * gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples (CVE-2024-47597) * gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read (CVE-2024-47546) * gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer (CVE-2024-47602) * gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table (CVE-2024-47598) * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47603) * gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read (CVE-2024-47545) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gstreamer1-plugins-good-gtk-1.22.12-4.el9.x86_64.rpm 232256d7db990e4dcfba0dc6ac6b4ff98e767cf9baf52def7527986f7ff3d0b9 gstreamer1-plugins-good-1.22.12-4.el9.i686.rpm 3bda2e114790b0dde3041df033f5658c1ba7c63fb217df7d57bf80c8d2a06c45 gstreamer1-plugins-good-1.22.12-4.el9.x86_64.rpm 9b6cb0ad20c5a42ce5b60cabba947c51a6e805ac4f7d61422317a0aaeda4621d gstreamer1-plugins-good-gtk-1.22.12-4.el9.i686.rpm d4659d46127f89526ba95a8539fb5a054372971d690c54ec495370f1e2cabf4e ALSA-2025:7243 Copyright 2025 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer1-plugins-base: ID3v2 parser out-of-bounds read and NULL-pointer dereference (CVE-2024-47542) * gstreamer1-plugins-base: GStreamer has an out-of-bounds write in SSA subtitle parser (CVE-2024-47541) * gstreamer1-plugins-base: GStreamer has an OOB-read in format_channel_mask (CVE-2024-47600) * gstreamer1-plugins-base: NULL-pointer dereference in LRC subtitle parser (CVE-2024-47835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gstreamer1-plugins-base-devel-1.22.12-4.el9.i686.rpm 21ecc2f3ddb836c3801ee570c6f5dc0d729b24149497abbca517fc976f8f1333 gstreamer1-plugins-base-1.22.12-4.el9.x86_64.rpm 2fd84eabc9e24a91f0eea72662bca557e265b634c59302a4f16abceaf30a01ab gstreamer1-plugins-base-1.22.12-4.el9.i686.rpm 47aebf346f3a9fa2f63d8f2e5762d6b835b43ee5ea3f664e21de9a6178dfe7ff gstreamer1-plugins-base-tools-1.22.12-4.el9.x86_64.rpm 51ee1f34ad63b71f88588c815bfeb37cfdfdafd2b09a0a5d7874b4fe954a6bcf gstreamer1-plugins-base-devel-1.22.12-4.el9.x86_64.rpm 5675e98e174301ee4279ce13a42ae91697ecca5062d3087b717c9dd31973e846 ALSA-2025:7256 Copyright 2025 AlmaLinux OS 0 1 Moderate

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321) * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default git-lfs-3.6.1-1.el9.x86_64.rpm 0055acbcdadc22e53525abaaf225ea0496d860fffbb9800729297f6556f7cca2 ALSA-2025:7309 Copyright 2025 AlmaLinux OS 0 1 Moderate

openjpeg2 security update

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. Security Fix(es): * openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826) * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default openjpeg2-2.4.0-8.el9.x86_64.rpm 58a5a2b4e86c20b364a80b0401d472009e3cef7299f56e81a5ea32271373da64 openjpeg2-2.4.0-8.el9.i686.rpm 9f068eef7bce6b009abe58bc077c3664bcaa1846419dcc8886cec6348204e72f ALSA-2025:7313 Copyright 2025 AlmaLinux OS 0 1 Moderate

keylime-agent-rust security update

Rust agent for Keylime Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default keylime-agent-rust-0.2.2-2.el9.x86_64.rpm c1bf02caeb0cdc1e8cd370dfe47f4cdc0a2ea60a55ae6669703c1db1e9ef0656 ALSA-2025:7317 Copyright 2025 AlmaLinux OS 0 1 Moderate

python3.12-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3.12-cryptography-41.0.7-2.el9.x86_64.rpm 1cfb7cf556f0be75735df13710ce310cda434b0f60c567ee3bc4a04eead481e3 ALSA-2025:7387 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467) * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551) * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default webkit2gtk3-2.48.1-1.el9_6.i686.rpm 14dbb7715b97fc4bc1bcbe0b04ebf0e51efaa43adde2bf72eac4348115c62093 webkit2gtk3-jsc-2.48.1-1.el9_6.x86_64.rpm 46732ee34e22cdd121daa0bf2a1cc66cdc45077086d7a28d3e69e086469156f8 webkit2gtk3-jsc-devel-2.48.1-1.el9_6.i686.rpm 5d6f80f48902042fc49314f6273e82fbaf1fa80b72717cb945912bf1cae83242 webkit2gtk3-jsc-2.48.1-1.el9_6.i686.rpm ce6d3c821383d521009f06222f43de082196f02e5e707e46c325d8f94029cf89 webkit2gtk3-devel-2.48.1-1.el9_6.i686.rpm e5fa9f314a530bf789633cfe0c0d4178e6a6984ec7a942e195b9d3f0abd15984 webkit2gtk3-2.48.1-1.el9_6.x86_64.rpm e73b885f174fa9066ba0c3866795eb43f61153801dc70e8aa3e06c2ba67eb126 webkit2gtk3-jsc-devel-2.48.1-1.el9_6.x86_64.rpm f503d41f76b609cf4e8d6a22ebca8fc61956d377eae6b06fed2fc1dc64e227ce webkit2gtk3-devel-2.48.1-1.el9_6.x86_64.rpm ff9fbfaab6421977bc2df82232cfa909b050e815c4f7a8b61b024fe212d3db24 ALSA-2025:7389 Copyright 2025 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default buildah-1.39.4-1.el9_6.x86_64.rpm 28a5f871f25fd4f2fe7acc302d7695186055b5db56264592dda1d6f549105c4e buildah-tests-1.39.4-1.el9_6.x86_64.rpm 84ce5e282611bfc1b5d0198e66fa138cff64f85d025de59f9fe85c827d7c084d ALSA-2025:7395 Copyright 2025 AlmaLinux OS 0 1 Moderate

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default 389-ds-base-libs-2.6.1-8.el9_6.x86_64.rpm 788bc6f859436ac457d32ceba54b97092d8f7a84367a0aeb4e8ba92dd920e9b8 python3-lib389-2.6.1-8.el9_6.noarch.rpm 7b151073db62fe5f40927e6dbc9093ddcda9e24f71e58f48433da0a542c08ae9 389-ds-base-snmp-2.6.1-8.el9_6.x86_64.rpm bcf1377a36a691964d8d970503e4466ab438c51e687ea84484ebc1569dc79f5b 389-ds-base-2.6.1-8.el9_6.x86_64.rpm f1d323c01a3cc93c1307570e53728889415da25c294680bb1a62077e1ce7a0f3 ALSA-2025:7397 Copyright 2025 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default skopeo-tests-1.18.1-1.el9_6.x86_64.rpm c4819f0c1d07002e2daa8fceae65ab68b1fc3878314a53b3923a9835c1593696 skopeo-1.18.1-1.el9_6.x86_64.rpm dab6f033d4ec17c00a615079f3c95f5ffd4e2c54985c333d449ca24c44bc75fd ALSA-2025:7402 Copyright 2025 AlmaLinux OS 0 1 Moderate

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) * nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default nginx-mod-http-perl-1.20.1-22.el9_6.2.alma.1.x86_64.rpm 0708c4ade26b271ecfdc3f25c8bb395498eef1aa9b2a40e982b10bb1ff9e1751 nginx-all-modules-1.20.1-22.el9_6.2.alma.1.noarch.rpm 0a62efcf0ca9e93b6e836b834c53a731066049d98841218ddf7762b068764e90 nginx-mod-stream-1.20.1-22.el9_6.2.alma.1.x86_64.rpm 1944034e4ac59e769e7828de81285cc6e30854bf1f2f8eb953a5363446da8277 nginx-filesystem-1.20.1-22.el9_6.2.alma.1.noarch.rpm 51eab6d828519b14e8288279e73102654443d8d4b2ee143de72af4d4ef4f0613 nginx-core-1.20.1-22.el9_6.2.alma.1.x86_64.rpm 5e5f89b5616bad6fa6752af1e39bfd65424bb9688e03a257274664a99e57b94c nginx-mod-mail-1.20.1-22.el9_6.2.alma.1.x86_64.rpm 870bbcb0e128aaac8890139857a4be1e325359ed3d7a30d8e9e02a9dd971122b nginx-mod-http-image-filter-1.20.1-22.el9_6.2.alma.1.x86_64.rpm a13abe7204de6c41a6aacd8a651dc3b694c953acae8a659d4bdaf1170f593960 nginx-mod-http-xslt-filter-1.20.1-22.el9_6.2.alma.1.x86_64.rpm c1f3f693f722404cc1d12934b303064545bdbac40f25533c91d4d5dad956bbaf nginx-1.20.1-22.el9_6.2.alma.1.x86_64.rpm db2dcf23189cde6e519760c72db69e54c680422c21a98327d2d1e873b2485e2d ALSA-2025:7404 Copyright 2025 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default grafana-10.2.6-11.el9_6.x86_64.rpm b4e7041b0d635f0d7ff23ab4a70eca6a69bb0859b816105a951e8dc2cc72cf48 grafana-selinux-10.2.6-11.el9_6.x86_64.rpm f2783b919bc2d6184ecec8593abe5dee5e6675218f2f3fff4d472281636c315f ALSA-2025:7409 Copyright 2025 AlmaLinux OS 0 1 Moderate

git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix(es): * git: The sideband payload is passed unfiltered to the terminal in git (CVE-2024-52005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default perl-Git-SVN-2.47.1-2.el9_6.noarch.rpm 1a4df63ad4653c2eac127fbe96b4152d459b75c00b7e203f6ce8e15e91e5b8fd git-core-2.47.1-2.el9_6.x86_64.rpm 28b627755d4c580e51774af9f73bc393670637e26779dc04a647551fe10c84d8 git-gui-2.47.1-2.el9_6.noarch.rpm 2fe23070dd7a7fbf738126307b89c621fbef33816281f9d8adc70b9836ab315d git-subtree-2.47.1-2.el9_6.x86_64.rpm 3d9506eb43e164a1d702631281d99a26a7616e7dee3da3af3cd250e3691cdaf3 perl-Git-2.47.1-2.el9_6.noarch.rpm 4807317f0fadf25a4801e27e4bb1deb3cfff031549c7a0f54ac8d3708b4ffb48 git-daemon-2.47.1-2.el9_6.x86_64.rpm 4cfe217dcabd86d345ab8cf3d3b8a486ef49c0fd1f5eb0759fb08c6d78110435 git-all-2.47.1-2.el9_6.noarch.rpm 523e668620f2c72882421a02de14459b5631b44aa38c911d0863abc9d2b0a0eb git-core-doc-2.47.1-2.el9_6.noarch.rpm 61851157149a3df8cfb435f93616170279ae62bc20805007af3ad2e42dcefdf2 gitweb-2.47.1-2.el9_6.noarch.rpm 7027ee29072bae38696a10218b2fc35498ea62a20f825d0bee4caca48f7f7577 gitk-2.47.1-2.el9_6.noarch.rpm 70d038b486086465a9ee329088b541821a2c9599094e0b63b6579ee0e899adc7 git-2.47.1-2.el9_6.x86_64.rpm 73a0beb95740c9198f8750e2b32751a377b6efe3dea2efc7e7117242da0a0649 git-email-2.47.1-2.el9_6.noarch.rpm 83c4ad8276f7c92f2658704f136230b24c1f2708e67480d6e183cec8da5dbe29 git-svn-2.47.1-2.el9_6.noarch.rpm be421324905b15184565a0e2e2dfeb1e360c60d2d79d965c6ea0197a5e34391c git-instaweb-2.47.1-2.el9_6.noarch.rpm f2ac542a892f4ccf878441428540d22c76b2576e83e59d1a70403ef33aa3d56c git-credential-libsecret-2.47.1-2.el9_6.x86_64.rpm f72b9f7cea344dd4d22c491af5ad6d21ad7358261d56ff788432266d9217987e ALSA-2025:7410 Copyright 2025 AlmaLinux OS 0 1 Important

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libxslt-devel-1.1.34-13.el9_6.x86_64.rpm 1977a969bb0b8a2e06f7af4c275135d66bc1351f24c7405be86c737cce6e832c libxslt-1.1.34-13.el9_6.i686.rpm 895f600e80daa9dede5ffba70729e5399c5c730a8b0550e6054d82a0df119a2e libxslt-1.1.34-13.el9_6.x86_64.rpm a8ba4f14a3c9bf59cc254215e5e5632dd4f6f7bb7e6a612175d0bd24503b7dac libxslt-devel-1.1.34-13.el9_6.i686.rpm f2b8799fb3dd6f6235b76609a215f0f581723cad54d07d3d0cf6767484f2cd46 ALSA-2025:7417 Copyright 2025 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: dds buffer overflow RCE (CVE-2023-44441) * gimp: PSD buffer overflow RCE (CVE-2023-44442) * gimp: psp integer overflow RCE (CVE-2023-44443) * gimp: psp off-by-one RCE (CVE-2023-44444) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gimp-2.99.8-4.el9_6.x86_64.rpm 8f03754142260986d316d0d266808ea0df5408f31764292bba30789f76c54dd8 gimp-libs-2.99.8-4.el9_6.x86_64.rpm d6107b50d3c5561554b696f6d96351a1ca9c552318e15b4fc313113e077bdbc7 ALSA-2025:7418 Copyright 2025 AlmaLinux OS 0 1 Important

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default php-fpm-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 1cd753c0a915855917ee252d01c864eefe71d836abfc5cc53285376cf935e971 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.x86_64.rpm 1e95a29597aa5c8b102c97a7d8fe608712e1a7ac5f33086477259cdfd802117b php-dba-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 2944b1de4146169bc76b860fbdd82121877da2f7692425173feaa8a278652fba php-gd-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 297f282666d3cc3ebe24c0a6146295f8e5c602a539cf93ac73878b4214845519 php-odbc-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 3299ae67826f15ddbafc394d23ae240604be768e31a0a9d41f9503012b0c5d71 php-process-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 3618a76260e4bbfd4a291d054a4497861c62684bc1b1c20422c07fd924afee2b php-common-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 418d72a3df251fd5241dc6a58b824274a6055b5ff4dc23651cca9e2f104bcde6 php-embedded-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 41e3e5bfabddf0d870aa041139fc4440dada6248382c038040876fd4efe42dc0 apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-mysqlnd-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 4495d6e08ef346322c64d094867960c3f4420d233b4367bf6035fed14cf09864 php-soap-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 6d19d890a6ec6ae2cbda3cfeaf801f5ee0a0e04711627d7fe5d6f1df7348e370 php-xml-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 6fcf58d8dfe48faac4f49e0332ec0f702130428afc79ae21563d78ffa03d2185 php-enchant-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 7148a4ab283c503d1aed5cc58fd0fd7f6239b9b9e8f0003625971006e7a958c1 php-gmp-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 72c775a961ccfde0efcd3bddf2751eaaf9467b13c3b435bf3f4129699ef4ccfa php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.x86_64.rpm 743bd46886c6a79f5350c5311f49ceb9aa593e1170a63d5dac89d8a71bbad4c2 php-devel-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 7f76996dcc78a2c24f73d6b51415a0aa7abedbba1a65cbeb28ef183d0b8cf979 php-dbg-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 885e87717d9c48d0ad7a627e332cd5d8bf3af7efad4fb7156d226cafcb585f01 php-snmp-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 94647c9c1c375d87410913982f7314102b92097e505ac2b6bd1d3612bb7ad80c php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.x86_64.rpm 99c06ba2fd814c0fb56d7b3eb60b33b8044d5e39d8bd1a56219f94ee4316020c php-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm 9c7ecf405153954342aeee9a638a1fcdd3156b9a599bf3cd6a4af18cd0686383 php-bcmath-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm a08aa5975bd597539d0ef5625d21891866068b2b7961e38dd0c383ab76e35968 php-mbstring-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm a49536b2ad71a5731e95bee0eb6457dfa79a8b8dbc32c6d5367048832672fc44 php-opcache-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm b0cd9d3555c2fa854f8dad5f55b1ece19f542ab6b5e9926116ddf0a409066c4e php-pgsql-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm d24907342bf1f5711b41bfd0dc76a84e4f53eaac4370c8ae174d53c20fde2470 php-cli-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm db158f38a42f27340bbc95c20a0a8a46e104cdca807a8f239274a169b5f99b77 php-ffi-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm dc0bb07bf840692590e623b81ee7644482b24cd7bed184712eb2ba43ba205cfe php-ldap-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm dc676a0d9a05c4a81b9fa1b55f1db2160cd9c787a9825cf2bfc978080eb4d62b php-pdo-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm dc85a887b67fe2dd174f012cc1db4da51709f79e953bc4915f6b01d0d235a67a php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.x86_64.rpm dc8e8e3bdcbd1b2dd8b406088ace26218479eae330d5ff09131f4bb4d4ca9918 php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.x86_64.rpm f1056dbe8848484f897c6a4662953779cb96e88d41f3974a75759f5e27ce93e2 php-intl-8.3.19-1.module_el9.6.0+166+f262c21c.x86_64.rpm f560fe5cedd3223cee20cd3528fd1ef0f67e714c3ecd605043fc99f629759f7b php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.x86_64.rpm f7f650636fc002b970cf43dba6907dfe4e90d2de6ea57e6788a9f75920f28bc8 ALSA-2025:7419 Copyright 2025 AlmaLinux OS 0 1 Important

mod_auth_openidc security update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data (CVE-2025-31492) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mod_auth_openidc-2.4.10-1.el9_6.1.x86_64.rpm 0ab4371c1cbb332317d65ef09ec20471f9002d12c5f3ec5939e4130a4e2ecd3f ALSA-2025:7422 Copyright 2025 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751) * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952) * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951) * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954) * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953) * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default ghostscript-tools-fonts-9.54.0-18.el9_6.x86_64.rpm 03aa65fae40be2e4fa191b7a17213bf507d70347d14bd24263dd2a2b1fb626d2 ghostscript-tools-printing-9.54.0-18.el9_6.x86_64.rpm 1dc0a58411d8311c3e34f5e712a4efe4fac318b9dd53fe203b76b5f2dddd1735 libgs-9.54.0-18.el9_6.x86_64.rpm 285b2d27691177a3d1a28e08733901127a3d8d8169cdd698a830b1a682536566 ghostscript-doc-9.54.0-18.el9_6.noarch.rpm 5edef33c87504997d21f47ab6ccc07c2f369b7b31ced642fd40b07a2cb2e214f ghostscript-tools-dvipdf-9.54.0-18.el9_6.x86_64.rpm 80d36fc63b7342dec823c5e7d9ad7ef13ada599ec78046a342748b56fc320ff0 libgs-9.54.0-18.el9_6.i686.rpm adb277162c698a919bb3ffa9166612b01c11e88e2452298cf4b720896fef2c9a ghostscript-x11-9.54.0-18.el9_6.x86_64.rpm b4527bd69d928cc8821cd59825eef38e482b5dfddf8814c98ca02017606f9b91 ghostscript-9.54.0-18.el9_6.x86_64.rpm c2dc560b5c41c2f27a7451438a5d93c1479daeaf57ccf74fda7f4b74717fbebe ALSA-2025:7423 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633) * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005) * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069) * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927) * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-headers-5.14.0-570.16.1.el9_6.x86_64.rpm 0339a5f9fd446636ce4fd454d9ccaabc7dee94d627d108ec16a6bf08f1de125b python3-perf-5.14.0-570.16.1.el9_6.x86_64.rpm 038c240c122494c720a222c63e105bf319f890676cac9121ccdab86f35520d10 kernel-debug-devel-5.14.0-570.16.1.el9_6.x86_64.rpm 0aaac4bd58eb0b8b8c808a330ec469f8b02e94edc02b244ea9847ad90211ed8b rv-5.14.0-570.16.1.el9_6.x86_64.rpm 149da64dc8b7ed14caef509788cb721f1814b60423c6b2ae85a19019596c32ec kernel-doc-5.14.0-570.16.1.el9_6.noarch.rpm 42e734a4d0c6649dc443259e884203c0a4cc715675dcfa4eab65607c13056434 kernel-devel-matched-5.14.0-570.16.1.el9_6.x86_64.rpm 48b740a426097b585c810b5387b3fbc3bf3a16a7376041b2db98fba88af099bd perf-5.14.0-570.16.1.el9_6.x86_64.rpm 4ad9fcd4c7b6d190ba97735cc4eb2d071a9e82540ffbc8d92d7a0920f5a6abcc rtla-5.14.0-570.16.1.el9_6.x86_64.rpm 7998c1d423887fb1018fe9d05c5a14365f98727a105898db00d41baba601c464 kernel-devel-5.14.0-570.16.1.el9_6.x86_64.rpm bcb120943c1966c1cf4d1e1b3587d1bc0a773ffedd1da6d419a9dc509e78c549 kernel-debug-devel-matched-5.14.0-570.16.1.el9_6.x86_64.rpm e8541dadd2b081b6f5246ffd879a3aed8a831041437d97c4b1f45501aadb5364 ALSA-2025:7425 Copyright 2025 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default osbuild-composer-worker-132.2-1.el9_6.alma.1.x86_64.rpm 13e55026b078bd9085db98dac2623b7a25c4f4d3c98d1fd08b1a28be754734bd osbuild-composer-core-132.2-1.el9_6.alma.1.x86_64.rpm 7c83be5dc989ad24dc9290195771baade060f8874c768b3fbea5c32e96982088 osbuild-composer-132.2-1.el9_6.alma.1.x86_64.rpm fc227998bc4748cbfd56a03264ee87497c67e236b480121ff88b8ea3482d7ae8 ALSA-2025:7426 Copyright 2025 AlmaLinux OS 0 1 Moderate

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default nodejs-full-i18n-20.19.1-1.module_el9.6.0+163+d268fe53.x86_64.rpm 15da0b4bb6301b7aa2989464809318f84a74cb2e2a2575db71a09ecf333abb27 nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm 572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648 nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm 6197cdbcfccc2266f0d5e47e8b739375ef169fae31d46948b204964782b971f1 nodejs-docs-20.19.1-1.module_el9.6.0+163+d268fe53.noarch.rpm 65089a5aa3fab3affc41821e4dce9ae1e28d5b1f0b194fd80e7e08982e057ff0 nodejs-devel-20.19.1-1.module_el9.6.0+163+d268fe53.x86_64.rpm 6dcd5ef074a7ce000e07e1a9716b3953373ce315419d7d75c8cc13feaeb0d346 npm-10.8.2-1.20.19.1.1.module_el9.6.0+163+d268fe53.x86_64.rpm 8568ffb338e66cc75c7a9ea2e43c5a882b2a2db8e544445312c057f4f0ef7ad4 nodejs-packaging-bundler-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm 8672933a8a01356064a9acc4450fbb8322915abb9f7a09bb4979cc9c3695dfcf nodejs-20.19.1-1.module_el9.6.0+163+d268fe53.x86_64.rpm c6784bfdddc468ed4597e3320470521ac2aa005ef814ffc5663f46358c5fa1ee ALSA-2025:7427 Copyright 2025 AlmaLinux OS 0 1 Low

xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. Security Fix(es): * xterm: code execution via OSC 50 input sequences (CVE-2022-45063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default xterm-resize-366-10.el9_6.x86_64.rpm 759c00634a52dd9470baeb2e307c2703f2df6c0ef92c688703455133cf8ca0eb xterm-366-10.el9_6.x86_64.rpm 83c6f95e01e3fb3778b60ebde9bc803b09b8b35fd3e049a811344dcb6a3093db ALSA-2025:7428 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817) * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087) * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083) * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default firefox-x11-128.10.0-1.el9_6.alma.1.x86_64.rpm ccc9ca9bbe70fdffd74a1682aa6ec58f6fb2a1d581b89871e1040a66226c4b39 firefox-128.10.0-1.el9_6.alma.1.x86_64.rpm d724b876aca92c4aba3e4a7b070b2adf5be6bb7fa7a3d41879b0164f0397491d ALSA-2025:7429 Copyright 2025 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVE-2025-21605) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default redis-devel-7.2.8-1.module_el9.6.0+168+b8d8e900.x86_64.rpm 428de1f8ca8677646d02039c4dee9e118301aa5f738c185555890be3b564ce39 redis-doc-7.2.8-1.module_el9.6.0+168+b8d8e900.noarch.rpm 85258f80ee5fce874b978c6ba6d16bc5341167a148e6bdb4ea5186e05c6d2623 redis-7.2.8-1.module_el9.6.0+168+b8d8e900.x86_64.rpm 9bbf32e65965d3e4c44154d35b19748919184a7be3c5cf1462da96502b6a29cc ALSA-2025:7430 Copyright 2025 AlmaLinux OS 0 1 Important

yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fix(es): * yelp: Arbitrary file read (CVE-2025-3155) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default yelp-libs-40.3-2.el9_6.1.x86_64.rpm 0579f9888eeae78c3fbb69702a926e05047fb228493a13e1d611cb95ce257108 yelp-libs-40.3-2.el9_6.1.i686.rpm 599530162f0858c76afa59ada86e9ee0a9fa3ddc4e9e4a8a25c7516ef03fba05 yelp-40.3-2.el9_6.1.x86_64.rpm d9c1fde4845dbd15b8bff29e6fa04838603ae623c54003aad2c5e3cc65ce05a7 ALSA-2025:7431 Copyright 2025 AlmaLinux OS 0 1 Moderate

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default php-dba-8.0.30-3.el9_6.x86_64.rpm 087f430ea88605fc39d90d9e75356d881447a4ebc1ae5efed0ce8acb40e32bf1 php-odbc-8.0.30-3.el9_6.x86_64.rpm 0b2dd063ea4fe3cf9824d24009797918b0420120ceb04cabed95fded877b238c php-pdo-8.0.30-3.el9_6.x86_64.rpm 155b1001f3fa5cb329b0ad85eecb58798ecd561acbccb1c507e0e876096e2874 php-ldap-8.0.30-3.el9_6.x86_64.rpm 282fc553349bdbf8635f5c17cbc443f86e52248f45d7e1d63397da460df37956 php-process-8.0.30-3.el9_6.x86_64.rpm 328fbc451d24eaaf5605522360cb93bf556ad22c0e2ab0c89cfdb5f369cecc9a php-opcache-8.0.30-3.el9_6.x86_64.rpm 42785a142c5b6a40ad16526a3fa84f27cbe9ff970faba7d81fd1f3afd986dc54 php-devel-8.0.30-3.el9_6.x86_64.rpm 51f8bee596f00986673ae87fe615b2e9ac2ae4105de2fe0ec7d44cf868846949 php-fpm-8.0.30-3.el9_6.x86_64.rpm 6406a31e0efe751140152c6d1f80f8e28359211c77fb8ab610bc651e61216c80 php-ffi-8.0.30-3.el9_6.x86_64.rpm 6f21cc5ad789d1776d21a975c1a46e2b152d33736cc67ea36709eca96d43618a php-bcmath-8.0.30-3.el9_6.x86_64.rpm 76c4cefcd5867437887dc6d50c592fa3d361ec77319e3bf3e9bcbca8a81353df php-common-8.0.30-3.el9_6.x86_64.rpm 905c33b8e3daf3508b1b7aad93ffd49732bf506da21897b075327bba59bd9153 php-soap-8.0.30-3.el9_6.x86_64.rpm 9201c5c00843895abe6c6d5add746394a8e5788fc915c3e5569d535340715102 php-enchant-8.0.30-3.el9_6.x86_64.rpm 944f9fc1967af8a9a32c584482d4dd32393380301628355b42df008994a07aa3 php-embedded-8.0.30-3.el9_6.x86_64.rpm a0da83c47a0004b2d03648ebc0ae1b67c11cc0c3da91f075bdb81618dcc77a9d php-8.0.30-3.el9_6.x86_64.rpm ba3c23bd95006f7eefd58642e310ecf4a8fdf5a1dad645fa79743329f592eb7d php-gmp-8.0.30-3.el9_6.x86_64.rpm bfffe51d0f3b93024e4094d32d58b9f0255f8aa62c4f5d5c9f1cb8ac0199ab9b php-gd-8.0.30-3.el9_6.x86_64.rpm c0837f227c92ef5a36804df8c9bb7130b38b051fdbe8aff83d3b0a382edbfc06 php-xml-8.0.30-3.el9_6.x86_64.rpm c4d08bb0acd35e6c4630027f90d756508ab2bcdd1ba7028a2bf60a3dfde83273 php-snmp-8.0.30-3.el9_6.x86_64.rpm c967d4d3affb3dce117df6d0d9ea1b1b14910118b06209db38fa912ff0bd40a0 php-mbstring-8.0.30-3.el9_6.x86_64.rpm e00c09d1b5e24ec3c17506ff551ef27a9a20688a460a406a04ec6413db2d1e64 php-intl-8.0.30-3.el9_6.x86_64.rpm e797a304ad06c4545b4c11fd6634ff5f3fb10242e8db46d227c8fb0d95079fa5 php-mysqlnd-8.0.30-3.el9_6.x86_64.rpm e8bec104bafb80dec1078889a716be6d8d4be6726c2d832dba9192c2abcc7c6c php-cli-8.0.30-3.el9_6.x86_64.rpm f5d927f58dcf09aaaf7eddad8c0cefa1e14afbba1fe53fe86e5314c58f315f88 php-pgsql-8.0.30-3.el9_6.x86_64.rpm f9ccb57ac1098910bf784ecd362ed70941156db3f5f6e199e8f55afdaebf3b2a php-dbg-8.0.30-3.el9_6.x86_64.rpm fe03ef8a13e40299e3d1ec2837d26e024ce2195bb96d03c3d575c35c0b7ee924 ALSA-2025:7432 Copyright 2025 AlmaLinux OS 0 1 Moderate

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929) * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233) * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234) * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default php-odbc-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 160496d70268f027f5f65130297e1ed7bacea6a2e00d570e7cb1ee0ec8a07033 php-enchant-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 1f02d92064c6843df940ebd5adf0c41977a2d6808349da5d4e42abf10aa0ec5d php-embedded-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 209d7089b8a56ac20da700b971a112ff9aa5a95b6352e113026362ac522eb867 php-dba-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 24e2350d10ef35708ca47fbe4dce9bf6ca8bb264f67f5254e1461816f076adae php-cli-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 28990c426eec0f813c7779793057466ca0fe49dbfc62fb5ffc87447ffa599901 php-common-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 2dd33bacde100c3f57849974079a6bd601edf506becd4bb1520c7d7f0099f8c0 php-mysqlnd-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 2e7fe38006775668903a19f0b068e6986f4fc34f9bd1a619cff7bddd232e6b07 php-dbg-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 392751af13a779983f25e3431d02552ea9884715047045fffc1d4f852b091943 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-ffi-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 575e9647fd1307d3d708e2945f1db6554fecca7aac7d0b891a2d46ec68e2a4a0 php-process-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 611df878b21d016833417adb87cc99f82213e026e825999fe78461d985372cfe php-pgsql-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 645d4fd9c81181e474b4e5cda563a94a35e1c8afb84362eaadb0bf78749e9860 php-xml-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 652dd2010c1c59813865a6a8d4380b0e600ed481910238c8bf44afd45c9413fd php-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 7e13784195e6d7e6807d24b26a0240db31d345db7d4ea96b50067b82e9ad0585 php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff php-pdo-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 8387eca503877f571c5fca5fbf930aa8f6b2bbe8a5234a636c33eb1a379c158c php-fpm-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 845ba5cc215905d08442cdc4a8ac4ad0aaec57b98c5c0004ccba55abf1e8914b php-ldap-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 868460d0b48d7d36eb84a5b07af8ea30b471aca775168dd361e36564f5dba136 php-soap-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 89b0ca121f61063f18efdb058165f274b38868d65282c84b31bf8cf59e2a3b76 php-devel-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm 8d01fde33662179004e8566cd375e74a6345fd0ac570b531cfa9eec719c8a3e5 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm 96cc987054e929ded9dfb18f35b9c6912a9df307b6e6ffee3c409f85bafa2181 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.x86_64.rpm a05a23d56973cbb28cd6df434887268ea519defa51e9176928b1f6859bdd33f8 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.x86_64.rpm a0c7dad446e919bbb42213de89f00d65f58b08c51e4e1ab382707c3324627f7a php-opcache-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm aa181e44084c131bb69c65180a7ff8253f530c95ec86b637afc2179c9e720b44 php-intl-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm b5ebe88134129cff4ebf9f41259f28705b1eab6478fa0e415476d02439130ba4 php-bcmath-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm ce6eb5b97fce154ab62548b9cd05a8e65439b9c430091e1b7e11d912e33b0cc8 php-mbstring-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm d28d24ea203bb81731e7b612802596662ba9ace5527f770e60363c0bfa0e8305 php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm d4536864003ca10535ac907cbcc199da8c73c8b16a66b52aaeb1431f587b1ea0 php-snmp-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm dd33a849a35b4cc5082584f4c11e03df316ab8e5cfdcae6b18357f7ba3c248a7 php-gmp-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm f489186a6462e4e5e4349627b925ea5bf5a44b81f780c61cd9498ac1c0a0d685 php-gd-8.2.28-1.module_el9.6.0+165+cf879a7c.x86_64.rpm fe2b21549290ce82791cc2a4fdcd7bf49b46d66ffcb3877c0eb6c41f26a9b318 ALSA-2025:7433 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498) * SQLite: integer overflow in SQLite (CVE-2025-3277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default npm-10.9.2-1.22.15.0.1.module_el9.6.0+164+2d89b8ed.x86_64.rpm 0a709f8b7363747cc6f6db98d6dc5c97b760a51a688a4250609dc6cab9e5f830 nodejs-docs-22.15.0-1.module_el9.6.0+164+2d89b8ed.noarch.rpm 1880c5472b26a1ac86d5040c678e1769947bbbf50632e14d88ece1340af55821 nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.x86_64.rpm 1bf49b4741b259a2af882337aeacaf96364fc14d326f607280bb857ce46b2674 nodejs-nodemon-3.0.1-1.module_el9.5.0+139+09296491.noarch.rpm 6e5d4948e23b3a31194068e1ab1968e235602adad4a5d271b6287c52aa829d20 nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 6e5dbe8d2424ac728aebdaf575e4c092cf200795835ba3f46a27b4be8e757a2a nodejs-full-i18n-22.15.0-1.module_el9.6.0+164+2d89b8ed.x86_64.rpm 70b16a835fbacfd2f4469dfa48bdcbbc7f4b25ee58a4484a397254c1368ea7a5 nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662 nodejs-libs-22.15.0-1.module_el9.6.0+164+2d89b8ed.x86_64.rpm ca51e14c24b3e782fcadf986b720ca30907d4722a04e6ccb7c455d9cfadf0fbb v8-12.4-devel-12.4.254.21-1.22.15.0.1.module_el9.6.0+164+2d89b8ed.x86_64.rpm d813635f03553baff612ae5b155a31d3105fa6810049c1ea739cf07d462b55c3 nodejs-devel-22.15.0-1.module_el9.6.0+164+2d89b8ed.x86_64.rpm f4a3304d82c911cd9776214e08295dcdd5578191a99a8956c5dc501db34ed886 ALSA-2025:7435 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523) * thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830) * thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default thunderbird-128.10.0-1.el9_6.alma.1.x86_64.rpm ae21fd56c5442aa3c96d3bd897313f62add898cdcf9024f68c5929dc801c8af5 ALSA-2025:7436 Copyright 2025 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050) * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052) * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053) * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906) * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907) * libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value (CVE-2025-32911) * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913) * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421) * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libsoup-devel-2.72.0-10.el9_6.1.i686.rpm 0f31b1846118dbd06b7aa1e86d0f5b36c9b0ec888b18a6c1c4e79a8f13d3d5de libsoup-devel-2.72.0-10.el9_6.1.x86_64.rpm 1bf9e97c6fc34e4efada5e603b9d5488dc6e5e27ea546c71ca56f9928aa5df57 libsoup-2.72.0-10.el9_6.1.i686.rpm 37cf9a7666000de531ee16ab0554e472d72ac0e3d683e28c1b5ec8b7980ee835 libsoup-2.72.0-10.el9_6.1.x86_64.rpm f9de877bb6b0ae7be375447f5d0aeffa2e712e734918cbe2d60e7c9a405d4d56 ALSA-2025:7437 Copyright 2025 AlmaLinux OS 0 1 Moderate

avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers. Security Fix(es): * avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default avahi-tools-0.8-22.el9_6.x86_64.rpm 5172d0c22fd93b994bcd508229aab620b77cd65bad7a305ad65abce87fd22177 avahi-glib-0.8-22.el9_6.i686.rpm 837c87622cc5ad49c2316ba2931318d57f121eb5e94712d4956b8b7073acdbda avahi-autoipd-0.8-22.el9_6.x86_64.rpm abb1988dda92d63a883c156c27ed602e6f33bbe3a96371cdafafd3f26087fad1 avahi-glib-0.8-22.el9_6.x86_64.rpm e3819f2bc111c4c9d529050acf7e3d4943175820b06ec918a6c02c78ce1a56cf ALSA-2025:7438 Copyright 2025 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVE-2025-21605) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default redis-devel-6.2.18-1.el9_6.i686.rpm 16e34c6bf62f8789893ecf8864d750d7ed17304f67152cd4d230da017761932f redis-doc-6.2.18-1.el9_6.noarch.rpm 93eba1abf4201f69279dacf970ad71d66d6f2b0a01c67c11612070a57824abb7 redis-devel-6.2.18-1.el9_6.x86_64.rpm c068e18726db12ebb7edb4686ecf333e163af5f52bca0eb41d7728a061b1e0d1 redis-6.2.18-1.el9_6.x86_64.rpm e02a6d8628dd358e947720c1a26b71a92beb18071fd2851447200bdd4ca03727 ALSA-2025:7440 Copyright 2025 AlmaLinux OS 0 1 Low

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: use-after-free in function ins_compl_get_exp in vim/vim (CVE-2023-4752) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default vim-enhanced-8.2.2637-22.el9_6.x86_64.rpm 833aa800ec0b1bb039f1d0cc5d3fe08d00aba5f989f7b8f4765ebb37bc287adf vim-common-8.2.2637-22.el9_6.x86_64.rpm cae9cdde42356964d8dac1d1f4de7680e71ec27ab56242c45a1ad28a966843e2 vim-X11-8.2.2637-22.el9_6.x86_64.rpm f521ee6904fe9d5f03355a45d1aff482ff3c4cdcfd4866a8a54520cf9e1110e0 ALSA-2025:7444 Copyright 2025 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default expat-devel-2.5.0-5.el9_6.x86_64.rpm 2abd57c056d2acf3a318b51ba2ef2b717c7de48f7ec54e0ce305c7dc9caedfdf expat-devel-2.5.0-5.el9_6.i686.rpm e11fd44bf9d0efd94493d126621a6c3d4c36ed21414c1a36abdd10a8bdf2a957 ALSA-2025:7586 Copyright 2025 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default ghostscript-tools-dvipdf-9.54.0-19.el9_6.x86_64.rpm 10251da4a83e0636b0a72e08c5647dd8145ee10ddda1a4373cb045b31c3d87e5 ghostscript-doc-9.54.0-19.el9_6.noarch.rpm 551d86602a2f8eb57ad2d61c751a476604b9b177c0b8b70b558e0cc48af02691 ghostscript-x11-9.54.0-19.el9_6.x86_64.rpm 57cb4104a0ea303287707b14ee6363f531358dc5630a7121bcced4cbb4bc4586 ghostscript-9.54.0-19.el9_6.x86_64.rpm 6c8c76f06470a93d675f85716df98bc6f9c77104fd58407822beb53c6ad7966f libgs-9.54.0-19.el9_6.x86_64.rpm 80f423cc8ad8da8ae9eb137472d56f666d457569238a921a5ac6cf76a36c8559 ghostscript-tools-fonts-9.54.0-19.el9_6.x86_64.rpm 820f3b8435d7eae74b012d3bcbff0d29ee5e2655abe860906ae8ac431b909ae9 ghostscript-tools-printing-9.54.0-19.el9_6.x86_64.rpm 8559084ef83ba4df5fda39297dc7f91bebb346f81a75801d5317e4dd0caa1747 libgs-9.54.0-19.el9_6.i686.rpm a23cc834032a696134042b013dc24edadf597dc518506fa25f157e72602c2ee8 ALSA-2025:7598 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.Security Fix(es): * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default dotnet-runtime-8.0-8.0.16-1.el9_6.x86_64.rpm 05c9230e421dee777512ad2b32773c1de4d3a1390bf625e18397475e20c6874b dotnet-targeting-pack-8.0-8.0.16-1.el9_6.x86_64.rpm 42529772888bf6eb01b0ab2c70259426a3c8f77be255006b3e681a7a0dcdc248 dotnet-runtime-dbg-8.0-8.0.16-1.el9_6.x86_64.rpm 42a9ae5d479ba79b612bf4c82472949a99c88437fd12fc8ab3d58478b65169d3 dotnet-apphost-pack-8.0-8.0.16-1.el9_6.x86_64.rpm 84b29e793555a7115c9b61689e3a0d55e42d05914e46180b43653e9aa127a9fe dotnet-templates-8.0-8.0.116-1.el9_6.x86_64.rpm 9a3e56e29de25b3bc6fbaca959b28b3fae1baa08fff1d8b6cc76cfc2622bb44c dotnet-sdk-dbg-8.0-8.0.116-1.el9_6.x86_64.rpm aa2762b25a9aef10009e7ade4ab674cde2c8103cfa0cd2fba38780a4de21b016 aspnetcore-runtime-8.0-8.0.16-1.el9_6.x86_64.rpm aa663a3d5361a8f0759dab90058b9b23e510fdde5fe1c6f022a91271a58ca3b9 aspnetcore-runtime-dbg-8.0-8.0.16-1.el9_6.x86_64.rpm cf087a58a1531de81bce6ec40dcb6251c5ba7b7b564543db882404405d4a1101 dotnet-sdk-8.0-8.0.116-1.el9_6.x86_64.rpm f1a7a6ee81d370ef81e74ae4ea686ee92f4887ce46ff89aaa560d86b17523a07 dotnet-hostfxr-8.0-8.0.16-1.el9_6.x86_64.rpm f7cd7f69bb782f6a1b8d2328782224b14588209d6ed70fc3ba346f24339cc3c8 aspnetcore-targeting-pack-8.0-8.0.16-1.el9_6.x86_64.rpm ff7368df2b2b75741bf0c94422d3223f283c67df6fb80e08ea8d511afc8a2b06 ALSA-2025:7600 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Security Fix(es): * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default dotnet-runtime-9.0-9.0.5-1.el9_6.x86_64.rpm 3a9369ccb93a0c3b5ef86f17c72cf40ee55675044c72d3b140d5917ee275f9e2 dotnet-templates-9.0-9.0.106-1.el9_6.x86_64.rpm 3d70b92b9bb21e7195c79ba94577f8b3c127cbd8d4f5ba0c30ae18220419671b dotnet-apphost-pack-9.0-9.0.5-1.el9_6.x86_64.rpm 42ef195d7054d0896f8fb1b88b865e4a86459917f9ed51ed50d14d492dfa1861 dotnet-sdk-aot-9.0-9.0.106-1.el9_6.x86_64.rpm 4b8d7e25f64997e37da12e466825d3543d408c61e4ad602013b805680b64ecf0 dotnet-host-9.0.5-1.el9_6.x86_64.rpm 50a45c875db113ffb6cea46c61297759f9a42a8733f8a830007e537359651818 aspnetcore-targeting-pack-9.0-9.0.5-1.el9_6.x86_64.rpm 71e4071c46ae406401043997c53c74a2f166250541ceb4634afc0110f76f41c9 aspnetcore-runtime-9.0-9.0.5-1.el9_6.x86_64.rpm 7889a1f9a0f0e0bcbb4b61637ebd20fbb36796ae6bd68332ff6ab36cda913319 dotnet-runtime-dbg-9.0-9.0.5-1.el9_6.x86_64.rpm 7df74e8b98aa4df052ffec740dc62c6193db38825db57351d0573bc0d96ee7cf dotnet-targeting-pack-9.0-9.0.5-1.el9_6.x86_64.rpm 85c3df35bf480062f3942cd64b736d3e240cf2e9b6b98882a6db6b8f714d61f5 aspnetcore-runtime-dbg-9.0-9.0.5-1.el9_6.x86_64.rpm a53f793f83d11bfced8f59a71c2da3b2d138523d14e1ac8e0898bda01bb42422 dotnet-sdk-dbg-9.0-9.0.106-1.el9_6.x86_64.rpm a752c975b8191dfe86003edd2e4e71215ca4f8181945247f4d9a501ec4557318 dotnet-sdk-9.0-9.0.106-1.el9_6.x86_64.rpm ccd82744741044e371a2cdfc56bbb5fda65fbbab4d9ca4066185573fa47b487c dotnet-hostfxr-9.0-9.0.5-1.el9_6.x86_64.rpm f497d0ecf96e9a9ed35bc31f2ef103a138f3d232471f11836aa203fa8181bcb8 netstandard-targeting-pack-2.1-9.0.106-1.el9_6.x86_64.rpm f79d16d2fcb3e52de515e9f8c26d3d3b8ea935dda71d165ef18ed8f67631d651 ALSA-2025:7672 Copyright 2025 AlmaLinux OS 0 1 Moderate

xdg-utils security update

The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop. Security Fix(es): * xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments (CVE-2022-4055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default xdg-utils-1.1.3-13.el9_6.noarch.rpm 669fca3eba2910b6520236d569ff2529ba37d645ce73502fc68b69d720419342 ALSA-2025:7893 Copyright 2025 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect (CVE-2025-4123) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default grafana-selinux-10.2.6-13.el9_6.x86_64.rpm 0b9ba7fc5ff15fab0ec19929ec147959696810c2bfa58c63941bcd9c42567391 grafana-10.2.6-13.el9_6.x86_64.rpm f03ee2b279ac04919a2e999ecb16ffc87d2a5b979e16e542f782ff02b612d56b ALSA-2025:7903 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756) * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966) * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-debug-devel-matched-5.14.0-570.17.1.el9_6.x86_64.rpm 08549853cee219bd6b1b707cbda694edf3b2ad2a1df343940d37545a8fa2bdfe rv-5.14.0-570.17.1.el9_6.x86_64.rpm 5b224bda1325eb26ddcffd98c23a69f4ce8733c1975ef6c6be1309e8a2747159 kernel-headers-5.14.0-570.17.1.el9_6.x86_64.rpm 6a766ffce04508fe7c7c288bd4329a16093e6c52b5c7d9acbdbe9aa9833f1822 kernel-debug-devel-5.14.0-570.17.1.el9_6.x86_64.rpm 8535a01b6761b76a31767e33d70c01305a27565f6852eb09edf82623f58ff956 python3-perf-5.14.0-570.17.1.el9_6.x86_64.rpm 85fda4ebf2df03e7101478786c2ec271b9f4fcd69052bf31afbbf9756e5b0f76 rtla-5.14.0-570.17.1.el9_6.x86_64.rpm 999331b7b3511eaa4e6d08dcf11ffe709ed90ebb28e026382e22e43e70fa60fb perf-5.14.0-570.17.1.el9_6.x86_64.rpm b1521367d39c14fd0e34c4a1d03c4b73e075bf4d8d99831f8ec4db9848e57a05 kernel-doc-5.14.0-570.17.1.el9_6.noarch.rpm d47c606ba32563b48d6a7325fb5932ad9ace8a6d7ead35993a6bfdd857796bca kernel-devel-matched-5.14.0-570.17.1.el9_6.x86_64.rpm eef8b8fd0b8ceeba6868300bf89f0850046f876176d5cba3021c05d92ced388a kernel-devel-5.14.0-570.17.1.el9_6.x86_64.rpm f9841b6cf4fbf498433c2bfc27295f85b9c4736728a0a8ef906c89a9357ccf9c ALSA-2025:7937 Copyright 2025 AlmaLinux OS 0 1 Important

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default compat-openssl11-1.1.1k-5.el9_6.1.i686.rpm 99b6d98f306a819a4b1c0aa6da37b09582222ad15d9f350fa2d5079bf39a2593 compat-openssl11-1.1.1k-5.el9_6.1.x86_64.rpm d79780433dee504f0e0e09f7aa187d127c3386c6aec53e831b2d93b7920f871f ALSA-2025:7995 Copyright 2025 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-31257) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default webkit2gtk3-2.48.2-1.el9_6.i686.rpm 0580ef01b7ca03501594cb4141f775a6ebeae99218a7192bd055594bafd5991c webkit2gtk3-jsc-devel-2.48.2-1.el9_6.i686.rpm 1f50ff20398bc7c9c0905ba4e63d7c6e7b32de4a3ebdd18f2d2caa318ad10980 webkit2gtk3-jsc-2.48.2-1.el9_6.x86_64.rpm 33bb8225e4d3b867d5af463494d612ec607f05a41de9d73fbfd69282ec2e9395 webkit2gtk3-devel-2.48.2-1.el9_6.i686.rpm 3d098f42d961df6b8a8f07a265081bb5d02953522726c90daaa8d8b8f5bea5ec webkit2gtk3-jsc-devel-2.48.2-1.el9_6.x86_64.rpm 85e8e99b2eccacad23f8957fe23f39347758981044918514236cc20ab0554fca webkit2gtk3-jsc-2.48.2-1.el9_6.i686.rpm d447a6051bee8dbbce5038edc98ba1e7c3709125797bb715b54b9d3c4c89121b webkit2gtk3-devel-2.48.2-1.el9_6.x86_64.rpm e16e21dfe52f2b36516b8ed128193c2288700ee33b06aa9b595038ed1d8b18b3 webkit2gtk3-2.48.2-1.el9_6.x86_64.rpm e3aa23bc89a8d11295ba0ea3a8d5cfd0ef9ebb09f67e2c77e0ea14e9e76e4934 ALSA-2025:8049 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Out-of-bounds access when resolving Promise objects (CVE-2025-4918) * firefox: Out-of-bounds access when optimizing linear sums (CVE-2025-4919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default firefox-x11-128.10.1-1.el9_6.alma.1.x86_64.rpm 0f66cfc4fb0c82a7e918e79f417f0a2137202051763da5696a0e81ac9847913d firefox-128.10.1-1.el9_6.alma.1.x86_64.rpm 38dd8320953fe2465648485b080ab04b9c68a4b2bac8b89455a45172196e7dcb ALSA-2025:8126 Copyright 2025 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content (CVE-2025-2784) * libsoup: Denial of Service attack to websocket server (CVE-2025-32049) * libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process (CVE-2025-32914) * libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup (CVE-2025-4948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libsoup-devel-2.72.0-10.el9_6.2.i686.rpm 406ea4421f97b9dffffd9f24dc42d6729640334688b359bd72d1f3ff18d84413 libsoup-devel-2.72.0-10.el9_6.2.x86_64.rpm 59a6194f2216dcc300b500f3d7183118209007c393dd29ed4a71d14d2ef25a57 libsoup-2.72.0-10.el9_6.2.x86_64.rpm 7f640764d42466a1bd2d3a7d764f77e7754b46f4684eaf5094806d6fef3c034e libsoup-2.72.0-10.el9_6.2.i686.rpm 93898bee86f604429ba3c8d6e52cede32f11dd5f10cf33037da966ff06391b4e ALSA-2025:8136 Copyright 2025 AlmaLinux OS 0 1 Important

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado: Tornado Multipart Form-Data Denial of Service (CVE-2025-47287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3-tornado-6.4.2-2.el9_6.2.x86_64.rpm 80fd7f4071d0bd8051a1b2719826984f0a8d4986b7481ab54ea7f2da609963ef ALSA-2025:8142 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3-perf-5.14.0-570.18.1.el9_6.x86_64.rpm 1bfba1817f05e275d68a5781e1c5d544bcd764081797a8d1f81c9b7b692d0145 kernel-doc-5.14.0-570.18.1.el9_6.noarch.rpm 3a32577bf62ab56a7c94bf41f4df7d431f76ed060e6affb958794157b96f3e13 rtla-5.14.0-570.18.1.el9_6.x86_64.rpm 7a630eee9da71fdf2fe4670077de80069dc37a208ce21a41c98200d5a40df302 rv-5.14.0-570.18.1.el9_6.x86_64.rpm 84a09b040245aa5dabe52df82fbf9334166d37f01b48d0e0a961246d69806c0d kernel-headers-5.14.0-570.18.1.el9_6.x86_64.rpm 8a0b8debb22ab4a8396e4af9357e72f4e972c416d2d2a9e66c429570fa6fd2f2 kernel-devel-matched-5.14.0-570.18.1.el9_6.x86_64.rpm 9ee3193d5efc43a4062c16fc7ca92996be57c53ac55671b127da5b313d0b4a27 perf-5.14.0-570.18.1.el9_6.x86_64.rpm ab57586e36924dda0c1ecbcafff3def8bf721437c786a3ba681a6cfef2c702f4 kernel-debug-devel-matched-5.14.0-570.18.1.el9_6.x86_64.rpm cb59452f9e63e3863aa9a2be64fb4cb792484d9a0ce69dc5fced1b4ae1f86ab1 kernel-debug-devel-5.14.0-570.18.1.el9_6.x86_64.rpm e94943b60004d0078720f61d1666245647bc8d51a1b0a55cb668d48385c5b4c9 kernel-devel-5.14.0-570.18.1.el9_6.x86_64.rpm f4fe2acab64f6ba2d22ded46ef3ed9479259f7e3c3503ddd5a4f15bc1ccfce87 ALSA-2025:8183 Copyright 2025 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-3887) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gstreamer1-plugins-bad-free-libs-1.22.12-4.el9_6.x86_64.rpm 718715d5f8996ca4b382dc53e36fda3b6150b339a466902691511af681c04bf9 gstreamer1-plugins-bad-free-1.22.12-4.el9_6.x86_64.rpm 8c6e4e203a39c1477d061fc8b2c0c22ad7471318afac57d2b8b72d2c4b982c31 gstreamer1-plugins-bad-free-libs-1.22.12-4.el9_6.i686.rpm 9ee1466ec71cabecc6952381942202635885274086f5ea88023f8f07cddbf2b1 gstreamer1-plugins-bad-free-1.22.12-4.el9_6.i686.rpm ae20cf92e0448c24efc4b8423d55d50275705bc5ad8d25a6a3d819f219c625fa ALSA-2025:8293 Copyright 2025 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267) * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264) * firefox: thunderbird: Memory safety bugs (CVE-2025-5268) * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266) * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263) * firefox: thunderbird: Memory safety bug (CVE-2025-5269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default firefox-x11-128.11.0-1.el9_6.alma.1.x86_64.rpm 8f3fbe9f5c90268b0aed7570f2d9891728afed6e2e6f15409b4f2b2352b53c3b firefox-128.11.0-1.el9_6.alma.1.x86_64.rpm d71882247d17666c8d4a4ef88d5a90ca4b02e69e726c750444da3b2298cc9e09 ALSA-2025:8333 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default rtla-5.14.0-570.19.1.el9_6.x86_64.rpm 17db2102f919b36e59ebe570d853e3cb6ddcc84d004ddc234a8b6f15e881c1c5 kernel-debug-devel-matched-5.14.0-570.19.1.el9_6.x86_64.rpm 43db4919d4b07c1afcd850b807414c9c01e23048a442d3a96ab7a94d33c6c88e perf-5.14.0-570.19.1.el9_6.x86_64.rpm 95063d5966258aee90c12d79550a68908971b2f1782084a2d1a3d13cf93902ef kernel-devel-matched-5.14.0-570.19.1.el9_6.x86_64.rpm a87fc45c1e1f289f840981ecb750387177fd05fec3c6f445139b993fed53cdec kernel-debug-devel-5.14.0-570.19.1.el9_6.x86_64.rpm a99d142e55f8b9ea2c8e6b3e92c09454b14e10d5cf0cf5027873b45f5bca342e kernel-devel-5.14.0-570.19.1.el9_6.x86_64.rpm cb3dbfcb8b678fef7c3fc457fa3d9fd367d52b5e047641bacf27a603a59bbd99 kernel-headers-5.14.0-570.19.1.el9_6.x86_64.rpm d8c39b36d593ae2a80ff53f85bd48a01dcd50e99e5deed4eaeaef8d07d209aff rv-5.14.0-570.19.1.el9_6.x86_64.rpm e44982fb56b720e1f385e59a26e3596ad5d9f7757be801c44be6536c07a8c355 python3-perf-5.14.0-570.19.1.el9_6.x86_64.rpm e8a399ce6e29e88528ad5b8ba8f67a2415d1a6df0e61bb3539ddb94cf15e5283 kernel-doc-5.14.0-570.19.1.el9_6.noarch.rpm eb801210dcbf4a66ae9de54452ffd3c2a0711c45618a84fbbbb6281f55e8c4a8 ALSA-2025:8337 Copyright 2025 AlmaLinux OS 0 1 Important

varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: request smuggling attacks (CVE-2025-47905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default varnish-6.6.2-6.el9_6.1.i686.rpm 5e6ff12da3bdb00e0848df898889331919b459f4d68ba6a69ff7b23426480e38 varnish-6.6.2-6.el9_6.1.x86_64.rpm 8d64c2feb6b00569a705121f82c098157a1ec127a3e7efe5d2108ee2d4702069 varnish-docs-6.6.2-6.el9_6.1.x86_64.rpm fc158ab1adc18d444f64fc7260a673afd95de41f4ea7b9b98f75993b0313b28e ALSA-2025:8467 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default nodejs-libs-22.16.0-1.module_el9.6.0+170+f035de78.x86_64.rpm 62fdcba580fe462553ce8ac4bcdaf86f5b1ffe41997ee75d7c73681669a8f09b nodejs-devel-22.16.0-1.module_el9.6.0+170+f035de78.x86_64.rpm 6c29a82dfb62d66e0479a43be4e6612af1cdf28292495bfb560bb439feaa52e0 nodejs-docs-22.16.0-1.module_el9.6.0+170+f035de78.noarch.rpm 6da870e66186d9844f20cf11d6ab90c3c3ec2911c071dfe66bbc9dee34cbf1c3 nodejs-nodemon-3.0.1-1.module_el9.5.0+139+09296491.noarch.rpm 6e5d4948e23b3a31194068e1ab1968e235602adad4a5d271b6287c52aa829d20 nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 6e5dbe8d2424ac728aebdaf575e4c092cf200795835ba3f46a27b4be8e757a2a nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm 8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662 npm-10.9.2-1.22.16.0.1.module_el9.6.0+170+f035de78.x86_64.rpm a4256a60764173f489786d76e93ad3dfc130e5d2563ed8e788d6e2384c3fd410 nodejs-22.16.0-1.module_el9.6.0+170+f035de78.x86_64.rpm a4b20147bdccdc8f5e1ff8fec5f7e8a4e9470774bd88c99dcc286b1dc1f7775b v8-12.4-devel-12.4.254.21-1.22.16.0.1.module_el9.6.0+170+f035de78.x86_64.rpm c57ec542eb2742bb13b6c1ca53dcb80ea29de759f70aa1eadc9c5c0c30ee2cc2 nodejs-full-i18n-22.16.0-1.module_el9.6.0+170+f035de78.x86_64.rpm f5b9eeee9b6f4b8712028b893ce616625ce4b93437d3d866ad02cc15d8de4534 ALSA-2025:8468 Copyright 2025 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm 572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648 nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm 6197cdbcfccc2266f0d5e47e8b739375ef169fae31d46948b204964782b971f1 npm-10.8.2-1.20.19.2.1.module_el9.6.0+169+c9cb05c2.x86_64.rpm 7aa4eef10e8c54338b54983877c9cae0f83cdb4ba0eadafa377b379720c0fd08 nodejs-docs-20.19.2-1.module_el9.6.0+169+c9cb05c2.noarch.rpm 7cb015453402ce4793c1f94bf1a42248f44f3b10d6c18bd510973bc44ef767eb nodejs-20.19.2-1.module_el9.6.0+169+c9cb05c2.x86_64.rpm 82e00f4abdc160adc748446d7e804108af946ba11d26fc587d1c5b78d863027c nodejs-packaging-bundler-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm 8672933a8a01356064a9acc4450fbb8322915abb9f7a09bb4979cc9c3695dfcf nodejs-devel-20.19.2-1.module_el9.6.0+169+c9cb05c2.x86_64.rpm c7b40936cd0cf18aabbc6bb65457613fa84f95e09d9eec1afa9270c2789776d9 nodejs-full-i18n-20.19.2-1.module_el9.6.0+169+c9cb05c2.x86_64.rpm deab3a07c9511d9764ea56be5b0ab8a1e73f5f3c50bb078090ce9a4306b18c48 ALSA-2025:8476 Copyright 2025 AlmaLinux OS 0 1 Moderate

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default go-toolset-1.23.9-1.el9_6.x86_64.rpm 03288cc532552785c2cfb61928d5015e80b5bf4c2825dfca13ade8f94e630b39 golang-race-1.23.9-1.el9_6.x86_64.rpm 17edbc69c4f3ada74a7d395ca167415fa227e4d2f10be0735718c32825b43144 golang-1.23.9-1.el9_6.x86_64.rpm 24d7a033e8e6ca43b27da19762b6e7e62597c5f3a0116b9640a36d3f5eedce88 golang-misc-1.23.9-1.el9_6.noarch.rpm 3b6b59952001d719c0acf1a55f35b77f8487086be734e1a406d919819a30f69b golang-bin-1.23.9-1.el9_6.x86_64.rpm 401240e42f8201fba2f3bfb92cb14a8b4ff0126bd655ece0edcea76fe06d1aff golang-src-1.23.9-1.el9_6.noarch.rpm 7ba826ac99805837764362226fd1f95ee0512981200ff49b5aef45b71a95b35a golang-tests-1.23.9-1.el9_6.noarch.rpm a3c86d76cc668699bf31a417bd4ce5f4f40adbc3f9a3f91cc7aab4d1c5f43c27 golang-docs-1.23.9-1.el9_6.noarch.rpm c45b6b351e35765ff179b93d2feec84907483b37c81cff4d7416944e3407c759 ALSA-2025:8607 Copyright 2025 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918) * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919) * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267) * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264) * firefox: thunderbird: Memory safety bugs (CVE-2025-5268) * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266) * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263) * firefox: thunderbird: Memory safety bug (CVE-2025-5269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default thunderbird-128.11.0-1.el9_6.alma.1.x86_64.rpm 6e97578228ad3b07cea15611e8f362433ede79b3247f332593f6e70903368843 ALSA-2025:8635 Copyright 2025 AlmaLinux OS 0 1 Important

perl-FCGI security update

FastCGI Perl bindings. Security Fix(es): * perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default perl-FCGI-0.79-8.1.el9_6.x86_64.rpm 0618eab0105a97522c66a5cddc24bbc14467919020c87873453c14c0a5a6c0cf ALSA-2025:8643 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926) * kernel: vlan: enforce underlying device type (CVE-2025-21920) * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997) * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055) * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785) * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default python3-perf-5.14.0-570.21.1.el9_6.x86_64.rpm 0c78e9c0bc978a90c333750332390a8951e13b3b5bd6b23052e8a95d5fbd29e0 kernel-devel-matched-5.14.0-570.21.1.el9_6.x86_64.rpm 0ed03b7ea238bdc1dfdd36756da51de33f858465e67c20de2beded5b7afefae9 kernel-doc-5.14.0-570.21.1.el9_6.noarch.rpm 17b89c8b590f418da4bbe356d61ba0203bcc3b21eb10757cc894e5c77b5e406e kernel-headers-5.14.0-570.21.1.el9_6.x86_64.rpm 707455e7921b64ca65f4d2ddfd7bbc322b692b034debbf8fc1bff3e12a28b351 kernel-debug-devel-5.14.0-570.21.1.el9_6.x86_64.rpm 74895673279fc04d82703183f00f7e0572c06d2eb9e84139a09dca3d919d0496 kernel-debug-devel-matched-5.14.0-570.21.1.el9_6.x86_64.rpm 7a6175d94213451173ee647eae80dfb028c638f8e8f8c35adb3ad1915860ed1c kernel-devel-5.14.0-570.21.1.el9_6.x86_64.rpm 92dc5b5053af3f7666b1afdbd2f03dee62757cc456e861dcb54274cc1942dc51 rtla-5.14.0-570.21.1.el9_6.x86_64.rpm 9fdacbd97047f97569edb273e5b4a75d6a21353b77b121beb53fe402ad7dc6c2 rv-5.14.0-570.21.1.el9_6.x86_64.rpm b5ed93e6d90901ffee87c0f83b522fff9f87c7506208db97008729c32403db79 perf-5.14.0-570.21.1.el9_6.x86_64.rpm d41dac922a37e71c1831e27bc579818054b94a29e3abaca8d534e0ca2ec7389b ALSA-2025:8655 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default glibc-headers-2.34-168.el9_6.19.x86_64.rpm 066050ae9d5beb5fba06d93647c69fc8d0503466230ae2c48f1e1c45947898b8 glibc-devel-2.34-168.el9_6.19.i686.rpm 06cc00a690f6fd4d57cc193291d24513d339116bf2db300f124a0141172e576d glibc-locale-source-2.34-168.el9_6.19.x86_64.rpm 40726211220f5fc43dcd2f20d6673eda81c8ab8799a4e59bb3d0f59c714fa410 glibc-utils-2.34-168.el9_6.19.x86_64.rpm 76ed4271eb18820ad0ea06e2d1aee467006a46c60ac26d49fcc1a4c176f0cb9d glibc-devel-2.34-168.el9_6.19.x86_64.rpm cad0851fcc2755d2476886e4e4b469022030d0abeee81608ebe1c581687c2331 glibc-doc-2.34-168.el9_6.19.noarch.rpm cb324066e111baedd743ca2d7e80fbe5b5aa5005be90c6dfa303ed32a995b99e ALSA-2025:8682 Copyright 2025 AlmaLinux OS 0 1 Moderate

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default grafana-selinux-10.2.6-14.el9_6.x86_64.rpm 2a8a741eceb58c673c09e4a8b2a57988f934cee3cf606ad06efb5dd4b07e6c4e grafana-10.2.6-14.el9_6.x86_64.rpm ebe59ba6c12b1b5561f054991c0bda50b6cae40e35fcaf9f73984e676a18ca6a ALSA-2025:8813 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.Security Fix(es): * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default aspnetcore-targeting-pack-8.0-8.0.17-1.el9_6.x86_64.rpm 05b21525b0ba1324b2335c1d8618776d4453d32f20ccfe6a6fbb30ea077ca0aa aspnetcore-runtime-dbg-8.0-8.0.17-1.el9_6.x86_64.rpm 12e1e2931c267d98834d380687b1152a06208d992def35d227c2e9fb3c49a409 dotnet-runtime-dbg-8.0-8.0.17-1.el9_6.x86_64.rpm 1cd8c9c11bd01b8d45ec1a3d95365dbcc8cc149dbbc92986329c66d76688dddd dotnet-hostfxr-8.0-8.0.17-1.el9_6.x86_64.rpm 3db8c8ac0db4943c019334074c18efa3ee8125bf0a2eaa0a7ef06ff7647d8d6c dotnet-targeting-pack-8.0-8.0.17-1.el9_6.x86_64.rpm 4bbef277c60b4ba3093935081821b896a33653dc0eb30817b16ef4fcb45b648a dotnet-sdk-8.0-8.0.117-1.el9_6.x86_64.rpm 6418df3142a1a78c7cee17314f09a1028ea924f1c80ab2a7767f7bb98266886a aspnetcore-runtime-8.0-8.0.17-1.el9_6.x86_64.rpm 6dfb585590fb1007a13a6e8227571eed87ef1602e6860fffb40aa56ba6ff9382 dotnet-templates-8.0-8.0.117-1.el9_6.x86_64.rpm 6ece5829f63e18986c1a276bb7da503994375242a593b6a7667a6664ff9145ca dotnet-apphost-pack-8.0-8.0.17-1.el9_6.x86_64.rpm 76e63aafb5e1fdf21f9354c8121adc8eb4030cb55c47391239df6a1ab9aa0841 dotnet-sdk-dbg-8.0-8.0.117-1.el9_6.x86_64.rpm 8ec4d656ee116bd695c68f121d3533b5d585f6e5e5e9bb252734cfd54509ccc0 dotnet-runtime-8.0-8.0.17-1.el9_6.x86_64.rpm 9ff7a2d810962ae7d7ad1aba6b7e7c191355adc6ca5500b46fe7a2c545443bfc ALSA-2025:8817 Copyright 2025 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Security Fix(es): * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default dotnet-apphost-pack-9.0-9.0.6-1.el9_6.x86_64.rpm 00354df1850f799b45bba1b08a9c7a7a462acc973f5cb40b5b8a1c338a406605 aspnetcore-runtime-9.0-9.0.6-1.el9_6.x86_64.rpm 15d9d84a8970c6d4e52a18831137e2776dd0cca504706fdd1dae9ab99ebef428 dotnet-sdk-dbg-9.0-9.0.107-1.el9_6.x86_64.rpm 40c58c6364858e4b76ae52b882d408f611ac339b28700d2aca106932d1a574b6 dotnet-templates-9.0-9.0.107-1.el9_6.x86_64.rpm 43afa5abe14aa9f62345de9e1b850a3b404a850ecc80df9e63ea1e6298156b38 netstandard-targeting-pack-2.1-9.0.107-1.el9_6.x86_64.rpm 536ea58c69489756aa7c5ae3d884bfbda487765a79457786d7718da1af941b0b dotnet-host-9.0.6-1.el9_6.x86_64.rpm 57425b8e1b11243cc428a402ca623005582895ef05a36c0c11d395b3569c529b dotnet-hostfxr-9.0-9.0.6-1.el9_6.x86_64.rpm 680c8fef19baabc9b9953fd0108220c563b28a9fc27f4aed6d67143aa3485d92 dotnet-runtime-dbg-9.0-9.0.6-1.el9_6.x86_64.rpm 681114ee5a7af1ed62268f275e042bdd784e21728c2e8d6ff560b32c53d6c793 aspnetcore-runtime-dbg-9.0-9.0.6-1.el9_6.x86_64.rpm 8046940325927306dbd6f6ccc97e86a876f2594d350fcc8d83d0e85e46115bfa aspnetcore-targeting-pack-9.0-9.0.6-1.el9_6.x86_64.rpm 8f4406010fc12edb4348765b5a04514a81bcd5d47771e7f72813817f16c04e69 dotnet-runtime-9.0-9.0.6-1.el9_6.x86_64.rpm a26a993d5a62b4adc16a62e9d9bae9060c8bbcc444793a262ec21427f8b4f641 dotnet-sdk-9.0-9.0.107-1.el9_6.x86_64.rpm e1df6af667c3df678c2ec34dd05f52ffa607520e48cc68a7b96a30472de69d1e dotnet-targeting-pack-9.0-9.0.6-1.el9_6.x86_64.rpm e4524875dc2fcbc473e2a6c048ff1ea199b7d67d912f510e7da7d8646497c771 dotnet-sdk-aot-9.0-9.0.107-1.el9_6.x86_64.rpm ee9071ecf91b509a378ec13aeaaf698f8e5dca5d56ef793435c44ace88f25fa0 ALSA-2025:8837 Copyright 2025 AlmaLinux OS 0 1 Important

mod_security security update

ModSecurity is an open source intrusion detection and prevention engine for web applications. Security Fix(es): * modsecurity: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mod_security-mlogc-2.9.6-2.el9_6.x86_64.rpm e0fe0cac710a040f5e5bdd7e0926909ee5685845db042a89ae0794d645192292 mod_security-2.9.6-2.el9_6.x86_64.rpm f9fc6539d272231230ff29beb7dd34a9fb7235a811d7a0238bd89174724ae602 ALSA-2025:8916 Copyright 2025 AlmaLinux OS 0 1 Moderate

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default grafana-pcp-5.1.1-11.el9_6.x86_64.rpm cf50b756a5af9e6e8eecb5abf69ec310e546ec43d8b269a816fc9d6de90f4717 ALSA-2025:9080 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961) * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969) * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963) * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979) * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999) * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126) * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-debug-devel-matched-5.14.0-570.22.1.el9_6.x86_64.rpm 1ef8339fa35e8da5932acebf8219ad982dea5af5b1d80277a0f22938cf6621b6 kernel-devel-5.14.0-570.22.1.el9_6.x86_64.rpm 58be40168ec8cbdd94166d211d32aee3232ab63f079d8e3e2b97b3b3e34d42dc kernel-devel-matched-5.14.0-570.22.1.el9_6.x86_64.rpm 664640607132c6dc353a40e00c4c5d401276e38dc59fa9dd252bc49e6bdc5a41 python3-perf-5.14.0-570.22.1.el9_6.x86_64.rpm 789887d845ccd851f2c5ca1ca46802e5dbef28196d074236244f819d9c64f06d kernel-headers-5.14.0-570.22.1.el9_6.x86_64.rpm 82726668b3410b922f1b7a2d844f149d7e1210b22656a97a0720afb6511deb71 rv-5.14.0-570.22.1.el9_6.x86_64.rpm 9221f192dd4770d676ccc38a893f95fef2b9baa1404c58378496003082180c1f perf-5.14.0-570.22.1.el9_6.x86_64.rpm a9efb768d40f5a648aa432df8403820c097accaa9f3ff54e30bbf559785083a1 kernel-debug-devel-5.14.0-570.22.1.el9_6.x86_64.rpm b2180baee6ab09a92ccb1148038f9a66c7afc2218a0c3e06c0ea75d448e6e9af rtla-5.14.0-570.22.1.el9_6.x86_64.rpm b2389246212eae8c308fe76a27f45e4253b8ee575eade97f84835cb7adfc5f26 kernel-doc-5.14.0-570.22.1.el9_6.noarch.rpm c857d45652a136c40ec9e3de73282b60ee49322a50a4c864d0c5071854140ea2 ALSA-2025:9106 Copyright 2025 AlmaLinux OS 0 1 Moderate

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default git-lfs-3.6.1-2.el9_6.x86_64.rpm ddfa71b90323ecfd3d78727fd62655ea004693b2144603562df7cda3a6535fa7 ALSA-2025:9118 Copyright 2025 AlmaLinux OS 0 1 Important

libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Double-free in libvpx encoder (CVE-2025-5283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libvpx-1.9.0-9.el9_6.x86_64.rpm 2aac97031b51ea159bbc0a0d701dc9cc9ae487c255fb160a1d54c731cd09e75b libvpx-1.9.0-9.el9_6.i686.rpm 635214670b1c90029c2e271718166e59afabdea98de2199be09481ec836954c1 ALSA-2025:9143 Copyright 2025 AlmaLinux OS 0 1 Moderate

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default containernetworking-plugins-1.6.2-2.el9_6.x86_64.rpm b725688fc0a180919f580f563b2d308aa41536f02bb577d7de9096bb3fc65a74 ALSA-2025:9144 Copyright 2025 AlmaLinux OS 0 1 Moderate

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default podman-remote-5.4.0-10.el9_6.x86_64.rpm 02167a6443335c9822cd6a261083dbca8407996fc5a316be918f0731531196af podman-5.4.0-10.el9_6.x86_64.rpm 0ea14b816c26c8732f77c71ae01977d472e8715d8224f1bc74da3537c2369d2e podman-plugins-5.4.0-10.el9_6.x86_64.rpm 1b71226d20f85a0c3f860d8899c3b95c1996570fcbc16dfd8f7093a56d320c1b podman-tests-5.4.0-10.el9_6.x86_64.rpm 28d3a25126570f5d85ea2437f0f04093b20db9cbf7256f6c0a9dd0ff63f59578 podman-docker-5.4.0-10.el9_6.noarch.rpm f49149de86ea7bf4625e1a1e5d2360a5b5d0e642c4a1309016f13fcd5afa681c ALSA-2025:9145 Copyright 2025 AlmaLinux OS 0 1 Moderate

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default skopeo-1.18.1-2.el9_6.x86_64.rpm 44e7d787b374603756d59763f969e6c72582841a8143da87a7ce514db3c92dc0 skopeo-tests-1.18.1-2.el9_6.x86_64.rpm 6007e21120341d0e5d5401c29606f53b774b1a38952f0798d88f3893c4951ef6 ALSA-2025:9147 Copyright 2025 AlmaLinux OS 0 1 Moderate

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default buildah-tests-1.39.4-2.el9_6.x86_64.rpm aaac6e10bd04c9e14f54c083c807d7fd2009ad2f21adf6553d685368089f4bbe buildah-1.39.4-2.el9_6.x86_64.rpm eaa7f7f944c13241cb0738463be1efb76664a9ab2dea175a1482a4ddcbcc4923 ALSA-2025:9150 Copyright 2025 AlmaLinux OS 0 1 Moderate

gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gvisor-tap-vsock-0.8.5-2.el9_6.x86_64.rpm 1c7df3c92f525ad936c4e9d5be5f07fbf0520f35a824e25ad031ac58717e1a65 gvisor-tap-vsock-gvforwarder-0.8.5-2.el9_6.x86_64.rpm 6e658fb0c42ba769e6541b9a7bf381cc1c5061d5be7d8feae0ea6b3a96a1a390 ALSA-2025:9162 Copyright 2025 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: Multiple use after free in XCF parser (CVE-2025-48798) * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797) * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default gimp-2.99.8-4.el9_6.2.x86_64.rpm 17426bb20b47382dc7827a9f636387ef7da8d1c9afcb6cc2618f55fff4323f2a gimp-libs-2.99.8-4.el9_6.2.x86_64.rpm 58d95817cd42a5cfa47c788c725f25ac1d2a69e10d0d300b4f3bff5900c8557c gimp-libs-2.99.8-4.el9_6.2.i686.rpm cf8763e7512e2119890ed4b23026ff6ca392adf31ea9fa489f33331508decc02 ALSA-2025:9184 Copyright 2025 AlmaLinux OS 0 1 Important

ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default ipa-selinux-luna-4.12.2-14.el9_6.1.noarch.rpm 100dbe8a0a540a4ad40115e81f980f755c1bb872e5f933909d9802cc395385f3 python3-ipaclient-4.12.2-14.el9_6.1.noarch.rpm 150b252c993fd3c31195eb0d2df95482145f91fa1cdff136b90da13af14848c0 ipa-server-dns-4.12.2-14.el9_6.1.noarch.rpm 171eea3f9743163621ed2872dee699d7f48acafc9e7252c6ea6e006b01436fb0 python3-ipaserver-4.12.2-14.el9_6.1.noarch.rpm 557390d20bd31922e8996b60b8f4416e86285c3e67dd11804baff24000c7da3d ipa-server-common-4.12.2-14.el9_6.1.noarch.rpm 6450928a28711b7b21d127990d41e58dfbc98657728b6eae2d3f9472fcae4581 ipa-common-4.12.2-14.el9_6.1.noarch.rpm 6a1ef8872e035f7204279bd6c76c40fa9efa58912413abd29cede5b1f63e4f20 ipa-client-samba-4.12.2-14.el9_6.1.x86_64.rpm 6b0c7beae08f32aa7bc63a4b2de2a33caadfbfbd60ba1efd40e46b86943902d4 ipa-client-common-4.12.2-14.el9_6.1.noarch.rpm 8347d875a59f69572fac6696612b2938947c28b3b8e39c05ab6c9cd9c9f581eb ipa-server-trust-ad-4.12.2-14.el9_6.1.x86_64.rpm a22b4b31c5d9037557821e79bdd8d6c85e3e7a953f6de1052af1ef44ca52900e ipa-selinux-4.12.2-14.el9_6.1.noarch.rpm b322b523d6f9d7bf77384ec3b55242ea8dfc60c46339eacc7dabdec80b9209ff ipa-server-encrypted-dns-4.12.2-14.el9_6.1.x86_64.rpm d458dc65562cb77f9b5142cb834d98d1c235d907b767aaa0870503099342ac7e python3-ipalib-4.12.2-14.el9_6.1.noarch.rpm da414aa448fd3060bacb74b896fe3766bbd2eb95a3a2882819e72b2f5c063863 ipa-selinux-nfast-4.12.2-14.el9_6.1.noarch.rpm e32c59ae04a14234bd05db577bb44f34c1f54a69ed4dc2f962397ea201186a8c ipa-client-encrypted-dns-4.12.2-14.el9_6.1.x86_64.rpm eb7d768ff7a6cc36dc06ec525fad07dd1001b31fe7830dad96e32a6d7a49c9f6 ipa-client-epn-4.12.2-14.el9_6.1.x86_64.rpm f086e84889e3a5e24b282b353cdf9c8114b9617a45b325011a8b8d245a3e14d9 ipa-client-4.12.2-14.el9_6.1.x86_64.rpm f55a6f5b84f988f55c2ad82664d1e89ac1c2ee4e33c0de66c22ab8861507bfba ipa-server-4.12.2-14.el9_6.1.x86_64.rpm f9703f28afbdcd71add397db10aaf5eb6e15e32d1c6820f253fb9f5aa76ab4b6 ALSA-2025:9302 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883) * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919) * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104) * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150) * kernel: ext4: ignore xattrs past end (CVE-2025-37738) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-debug-devel-matched-5.14.0-570.23.1.el9_6.x86_64.rpm 083c5704381dc2b548ebd5f72c14133e4ccd39ec45c9c35024bab95f5804b64a kernel-headers-5.14.0-570.23.1.el9_6.x86_64.rpm 3d5b21366d531f504fe0c87037f7d1ed6994f333838c9bfc3ffeabb015430353 kernel-devel-5.14.0-570.23.1.el9_6.x86_64.rpm 4656a4d3d7f035ab7a42fb1c6a29b19d3cb5805c08de6a2795d168ba6062c731 python3-perf-5.14.0-570.23.1.el9_6.x86_64.rpm 5cf490e992b25c9d69ebd45454afd528a1c2fcd41b76ecc09cde8d685f3ebbc4 rv-5.14.0-570.23.1.el9_6.x86_64.rpm 7ab95ee8f0337858f0992749494971487e606bdf4ded6bd3d603da25a1e3f487 perf-5.14.0-570.23.1.el9_6.x86_64.rpm 86b5eed53a9d0f55f4082359d3dea914344d17a99768a82bf60d9d9eb35002e8 kernel-devel-matched-5.14.0-570.23.1.el9_6.x86_64.rpm 8d30fd2dcbe4511fcfd6ffe3f4ab91e102f0559ec57895115cd8180382833898 kernel-doc-5.14.0-570.23.1.el9_6.noarch.rpm b8b67a6418518b8d7a113d2f3199b670fbff4ebb0ed294fcc108bb41edfe1bf0 kernel-debug-devel-5.14.0-570.23.1.el9_6.x86_64.rpm c5d242fb28b7954264d82183bdf3043c72bcbf6c26cb4fb7d89ee11eb5ba29ad rtla-5.14.0-570.23.1.el9_6.x86_64.rpm d217bbdbfb6508ab1e5ce1c1a363d61170ab5f38dfdb9cc6eef4d2a7d88eb6fd ALSA-2025:9303 Copyright 2025 AlmaLinux OS 0 1 Important

xorg-x11-server and xorg-x11-server-Xwayland security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default xorg-x11-server-Xwayland-23.2.7-4.el9_6.x86_64.rpm 0e705a04c40b0d1b9f8b9953a0902634129a6f74005be781c28be93b9f090d9a xorg-x11-server-Xdmx-1.20.11-31.el9_6.x86_64.rpm 12b6d84eb7297cb4f47440c0187704c29d77089b16978d6b6ffaaeb8b988d128 xorg-x11-server-Xvfb-1.20.11-31.el9_6.x86_64.rpm 3f2eec5b2f38397267703463c6a1d313c992a682db9ad137a6cfeb0736b57525 xorg-x11-server-common-1.20.11-31.el9_6.x86_64.rpm 566f59767c12cb80b4e1e864aa3746a48c8b83505ad58bf18231a331037a1ea7 xorg-x11-server-Xephyr-1.20.11-31.el9_6.x86_64.rpm 91855178aede39dfef420cce6053dfe24a90e3702ded1ea1dc02a94840edf084 xorg-x11-server-Xnest-1.20.11-31.el9_6.x86_64.rpm bf14331e62b725e02f309c0453ea4b2e1bd3e86b190bb720d14066395c0c34fe xorg-x11-server-Xorg-1.20.11-31.el9_6.x86_64.rpm e1e16320746ef8a8f773ef85795a3bec56425c69ca3a3432113b78f014b1267f ALSA-2025:9306 Copyright 2025 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default tigervnc-selinux-1.14.1-8.el9_6.noarch.rpm 039326d5ebb4a47a17c6fdc8eeeaca51ee86bbc98affca4ffe8417c429d1c96b tigervnc-icons-1.14.1-8.el9_6.noarch.rpm 03f28159cba9a5972244944cb5ed1ba33362e120a279fb44bd86b94babfedb7c tigervnc-server-minimal-1.14.1-8.el9_6.x86_64.rpm 0bb3ee5c67c77f174c6b1114fb162fb760aa7adbb6668cebca73616cd65eadd7 tigervnc-server-module-1.14.1-8.el9_6.x86_64.rpm 3804e2d0959798ddfd399994eb57f4b4e0ded7d851ccdea726c71678f0e2747b tigervnc-server-1.14.1-8.el9_6.x86_64.rpm 89debf2ab605918504b2c122d5f18a3745da6f0ce8eebc4af3375066742ebf3a tigervnc-1.14.1-8.el9_6.x86_64.rpm a2f6d1e2f89fa37768eaacbe0670368546c5714930fffa905890a5d9b8af3b64 tigervnc-license-1.14.1-8.el9_6.noarch.rpm f626d756050528a683217a3547fec95fbb422dca31be312a009bf2447f6258e2 ALSA-2025:9327 Copyright 2025 AlmaLinux OS 0 1 Important

libblockdev security update

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Security Fix(es): * libblockdev: LPE from allow_active to root in libblockdev via udisks (CVE-2025-6019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libblockdev-fs-2.28-14.el9_6.x86_64.rpm 023f6575fbf74ce091f2bce65c6ba7c0dc75e39b0332614535e2a186aa30569b libblockdev-part-2.28-14.el9_6.i686.rpm 0cfa58aa6fc9e5c04817eb86fbbb27969cb4cffe61b2d5069c7f440fdee40520 libblockdev-kbd-2.28-14.el9_6.i686.rpm 16265cbdbad63b649f7be6ac3de89011a6da8e00d645f797ac17e62b5b91e7ed libblockdev-plugins-all-2.28-14.el9_6.x86_64.rpm 194d2a6d030c5262a9d20b209e656ad748dc4c8d086a5429a02f302ab2bf5613 libblockdev-loop-2.28-14.el9_6.i686.rpm 22f96f127916efbde275ce3de05ea915b3905dec62de9c8c769ec2c7d21d22ef libblockdev-loop-2.28-14.el9_6.x86_64.rpm 27c995605ec7e7f51ae620e10117a2027bb8384342114cbcf5c922a626f2db09 libblockdev-2.28-14.el9_6.i686.rpm 2b90b815c0484d49f8a67ed67dffceead9f6fba3945bec07bc119e870397a25f libblockdev-nvme-2.28-14.el9_6.i686.rpm 373ddc4730758bf478f13ab375482a5ef9e786264b41cfe4159022cadea3e9cb libblockdev-swap-2.28-14.el9_6.i686.rpm 39d66a3654c94fbaa985fc012a5e249d18fc399669305acfdd60a9d457637a5c libblockdev-nvme-2.28-14.el9_6.x86_64.rpm 42c100bb84a72f4c0aececb056cda39538dc1b317964a268d1ccf23fe821dcb1 python3-blockdev-2.28-14.el9_6.x86_64.rpm 47d2d7e390e1da04e18bb830c81a98708c391179da023ebf319dfa4580a0d72d libblockdev-utils-2.28-14.el9_6.i686.rpm 47ea6df9d97069326d453c1ddf504874640bd008318c124af9cb67aeabe74332 libblockdev-swap-2.28-14.el9_6.x86_64.rpm 4a7c7d76f55b92f9e34201bd6455253d600e98dd8a7b3ca1c6c60c9af5b5f34a libblockdev-utils-2.28-14.el9_6.x86_64.rpm 54ee124e242f404dd05eb8840460e3fd8ab974184937260d72ce8dd0f00a630c libblockdev-dm-2.28-14.el9_6.i686.rpm 6cf39146f123e06596db66f0b0b43413e1901a882ffa3981d940877e26bb2929 libblockdev-mpath-2.28-14.el9_6.x86_64.rpm 733a2639a4403f81576266d7998c445fe2464642c941306d71315b429f8a0e59 libblockdev-fs-2.28-14.el9_6.i686.rpm 7c0a9f48bc5ebb6c294daa6bc4229ab7eb894e07c711d604a9dfd39b3d651c93 libblockdev-crypto-2.28-14.el9_6.i686.rpm 7d9a294fd5220f8fb7533bd4d512e7426d8c729a30c189ee387370940dce6634 libblockdev-mpath-2.28-14.el9_6.i686.rpm 8008e3c5f312d2f83b71861bfe3df63231784179d9f41dfe30d1cd779238b246 libblockdev-lvm-2.28-14.el9_6.i686.rpm 8071a2c5204942fc6a7b3313d867e58b660058fde446846af3027efc159efcb5 libblockdev-lvm-2.28-14.el9_6.x86_64.rpm 86c83d0bab9c82ff394ff78e03a0d5d42cec48ca41cf0a4a7ab234629875a7f4 libblockdev-kbd-2.28-14.el9_6.x86_64.rpm a786f5781bdc6e79046c5e66c37c6da783604a479866540ead3db85f16a0c94e libblockdev-dm-2.28-14.el9_6.x86_64.rpm b67672bfd5fca648af956df72df74d541a5f64cb278a3bfd0112ddfa6445d16f libblockdev-part-2.28-14.el9_6.x86_64.rpm ba55088cfd2d65e9f032788f20db00985ef03cf4147df91d8da993fdcaa8f6b5 libblockdev-2.28-14.el9_6.x86_64.rpm bb56a5690ed2b3a19eea2602fa60f8282e0e5335e2d6a16d29b6f7ebdefc282f libblockdev-crypto-2.28-14.el9_6.x86_64.rpm bbc0c6f32047f66e831aca6fef11a9befa94cc13f8f62561f84c36a716da62ec libblockdev-nvdimm-2.28-14.el9_6.i686.rpm cb19b8cc59e3b66dda6f6a925e7f2b890d944c5e02a9d4493a4fff7477e5b76c libblockdev-lvm-dbus-2.28-14.el9_6.x86_64.rpm d5a371e1af520c101aee63678d6a0dc8617476b6c085f9dcb2c494f4c5ef2cbb libblockdev-tools-2.28-14.el9_6.x86_64.rpm d60ac5890870799a12f6e3e457941c45be7f8d8540559bdf48dc7c942f9a3859 libblockdev-nvdimm-2.28-14.el9_6.x86_64.rpm e25e87a8d6015e2dd8511e2b144e8686ce5968bb2d9539c420025ddf9eaca313 libblockdev-mdraid-2.28-14.el9_6.i686.rpm e39bd84da28e595491a17ca85a8fbafcf61d0bfa700b18e5c6041b5df11248b2 libblockdev-mdraid-2.28-14.el9_6.x86_64.rpm e7612bf17191f5202f855e121b5a9f9b57748e3e57adc7566a4c06c120407bf7 libblockdev-lvm-dbus-2.28-14.el9_6.i686.rpm fcf0b8084c2f78fbf3234bd2b6f1750d4f6b57e8dc4e07327119ffbdfb554f8e ALSA-2025:9396 Copyright 2025 AlmaLinux OS 0 1 Important

mod_auth_openidc security update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled (CVE-2025-3891) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mod_auth_openidc-2.4.10-1.el9_6.2.x86_64.rpm c90d3c7ae4584e4ab06414d0cbe06859cee8591af62596c7fdbcde46220ef210 ALSA-2025:9430 Copyright 2025 AlmaLinux OS 0 1 Moderate

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions (CVE-2025-3576) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default krb5-devel-1.21.1-8.el9_6.x86_64.rpm 9c53ffb94c9335067d8a45fa430e6cd125ee6dbcce2fd108cfbfd928d667381a krb5-devel-1.21.1-8.el9_6.i686.rpm cd4bc7c3a133c9afa5a5a68fd1b71f8e410feed1304b8d560e45be288af806de ALSA-2025:9431 Copyright 2025 AlmaLinux OS 0 1 Moderate

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libarchive-devel-3.5.3-5.el9_6.x86_64.rpm 8931e860954f4371c1da6e8bcaade32e972bde44154e77710da2e8423940c460 bsdtar-3.5.3-5.el9_6.x86_64.rpm b2fc9588e956c8396154aa3a851c1a0788777c065064aca5f590da0470701dee libarchive-devel-3.5.3-5.el9_6.i686.rpm d76e31c19be14a74d7f00363e95b5aabfa8cffbac5b817ffd97293930d47acf4 ALSA-2025:9432 Copyright 2025 AlmaLinux OS 0 1 Moderate

iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default iputils-ninfod-20210202-11.el9_6.1.x86_64.rpm 6e48c7e056abdc4062f6a3fa35b807939562c77d79be42d3f17b6318ce1832ed ALSA-2025:9434 Copyright 2025 AlmaLinux OS 0 1 Moderate

mod_proxy_cluster security update

The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Security Fix(es): * mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests (CVE-2024-10306) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default mod_proxy_cluster-1.3.22-1.el9_6.1.x86_64.rpm fcac471df80c51de61b9b947805ad7751a08a6d3d6c9b49915d9bf91b2891a2b ALSA-2025:9448 Copyright 2025 AlmaLinux OS 0 1 Moderate

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default emacs-lucid-27.2-14.el9_6.2.x86_64.rpm 1a3a805678fe16d13d0cffc94fb738d11347a33eeb4b39a3a7fcb2409839e226 emacs-filesystem-27.2-14.el9_6.2.noarch.rpm 25ec94f5d43ce53631d005dd315e24144fba0abf0c8295b2f6396d279c82ab92 emacs-common-27.2-14.el9_6.2.x86_64.rpm 3f6b97bcd65a78061498786cdf47db543314113e603adbf515c355cd5e384173 emacs-nox-27.2-14.el9_6.2.x86_64.rpm ed3fdadc56012763b29fdc21aad806be3f46771ba419db8723b938309ea5b2d7 emacs-27.2-14.el9_6.2.x86_64.rpm ef1dcbf4bbfc8ba2404998f89e8f10a9eae3cbde16ef0590a2dc3e95894bc42f ALSA-2025:9462 Copyright 2025 AlmaLinux OS 0 1 Moderate

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default qt5-qtbase-postgresql-5.15.9-11.el9_6.x86_64.rpm 02efe2038ad7e2557b0e363e17d271aea1efc3d62d3e4d868e8be16da8643a38 qt5-qtbase-odbc-5.15.9-11.el9_6.x86_64.rpm 0532716791ed33c10edc42b8c8bb096ffc5d85fbee097f621b610d2c1c896060 qt5-qtbase-5.15.9-11.el9_6.x86_64.rpm 180e8dcdcda5c7a92866b8bd8507ec1e2e538753f0826cfe0c6225283a817dfd qt5-qtbase-private-devel-5.15.9-11.el9_6.i686.rpm 3d997455bb54f50558f8a8784d6f3429fa94f6d71e413f463a9f89274a1b95ce qt5-qtbase-devel-5.15.9-11.el9_6.x86_64.rpm 4c8493122de0f3f893d457d948165c7806671003ffafc52b285c2ff7e5ac0edd qt5-qtbase-private-devel-5.15.9-11.el9_6.x86_64.rpm 531e98d4d10373c288b45625043ffb6646703509f512af5b13cd955f807542a0 qt5-qtbase-5.15.9-11.el9_6.i686.rpm 610a3753f38bed0f6ed23cd9fe581f03df2a7266d03e47e19a143bdd958f3052 qt5-qtbase-mysql-5.15.9-11.el9_6.i686.rpm 7857cd0e92a7308dc545c812bb114bc622cb8879b5b71440b7e36686eafda2ff qt5-qtbase-devel-5.15.9-11.el9_6.i686.rpm 7f1fef8cf11dba0d4896c3555b7b5927701d98ed0958d353759385ac957c1fcd qt5-qtbase-gui-5.15.9-11.el9_6.x86_64.rpm 7fe2189e4211ff1a8a4bc0f01079177eb85bdfa96be6dd5184319b47100dc427 qt5-qtbase-odbc-5.15.9-11.el9_6.i686.rpm 8b13759579de18237c501cc2cd2b5dff15e1ba724ceb61ec41b7f4343ba17ccb qt5-qtbase-examples-5.15.9-11.el9_6.x86_64.rpm 91408fb6457773e3196df565447b5319b8be5c96753b86695962dfdb6eb25705 qt5-qtbase-gui-5.15.9-11.el9_6.i686.rpm 9c5835a74ec79d26821217a7c49b32009baa53f1b4554d0659ba7f6d51756695 qt5-qtbase-postgresql-5.15.9-11.el9_6.i686.rpm c378c70f56d2b4f52b95427999c56547e9c259eb68ba5b0c6cf2414c90e7d0e0 qt5-qtbase-examples-5.15.9-11.el9_6.i686.rpm d894ea8bfcc21d2d1c07289d5a88a7cc4445e5514764a9d94fdb98843a394c26 qt5-qtbase-mysql-5.15.9-11.el9_6.x86_64.rpm d8c15d838ea2c2bd3c93170c7dbf45de6e8948a79ab56be5ea8910405b2b0229 qt5-qtbase-common-5.15.9-11.el9_6.noarch.rpm f1e99bd27dbbe60dc66c8efc0ec30a513fe14a1cb68f79b90f8117ce2672582b ALSA-2025:9526 Copyright 2025 AlmaLinux OS 0 1 Important

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Linux-pam directory Traversal (CVE-2025-6020) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default pam-devel-1.5.1-25.el9_6.x86_64.rpm b984c959ff32904a89a00e26e9bfa99438b774f4683aa1402b626898ec6cea9b pam-docs-1.5.1-25.el9_6.x86_64.rpm bfeb922b980cf1a83fd8caa852ad554614f7776a500febc1b0b688f79e2d771c pam-devel-1.5.1-25.el9_6.i686.rpm f8fbd35d3087a7206a08b7e6eac9f146c537a4e9b2a08086a723c9ac4560d230 ALSA-2025:9634 Copyright 2025 AlmaLinux OS 0 1 Moderate

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default osbuild-composer-132.2-2.el9_6.alma.1.x86_64.rpm 50e993a0d8e1bd133b34c3d3da2094f0ec5699ee42eeae8cf1c5cff8b16b1d4e osbuild-composer-worker-132.2-2.el9_6.alma.1.x86_64.rpm 910f8126e87e6ef4b335ca4d144f235afec3d00ee00905f765eb8bbdb4b9cec4 osbuild-composer-core-132.2-2.el9_6.alma.1.x86_64.rpm fbb6bf20e67206760c80e1f7a0d8367d9be641d8e45c1fb82d08c572ad5d5f4b ALSA-2025:9635 Copyright 2025 AlmaLinux OS 0 1 Moderate

weldr-client security update

Command line utility to control osbuild-composer Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default weldr-client-35.12-4.el9_6.x86_64.rpm cbacd12381707b6264a395c2d69432d07b2a7a4717aa92f28db8fbc56efd1055 ALSA-2025:9877 Copyright 2025 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Vector register overwrite bug in glibc (CVE-2025-5702) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default glibc-utils-2.34-168.el9_6.20.x86_64.rpm 05b4784435f8a5f8b3b93b36b8d93fa40b690323d52b4f2c710a180a93d8d034 glibc-doc-2.34-168.el9_6.20.noarch.rpm 28b3f946a5262828d8eb862e354c724ef9b3d94e4f67b478d0143d1e9602f990 glibc-devel-2.34-168.el9_6.20.x86_64.rpm 45e3f0cd2e1c6a8f52a8e4ee6570d8836d7af2465f75c525b372a67cf0771da3 glibc-devel-2.34-168.el9_6.20.i686.rpm 7f3725380c8885f77d3b62673941aa596d9a12326f74b4be05f2491455d17c64 glibc-headers-2.34-168.el9_6.20.x86_64.rpm b54c06338892ad6ac2945e2e9e834fb3538be546a22723a332d2c1b74853678e glibc-locale-source-2.34-168.el9_6.20.x86_64.rpm e09d3bcaae89d509d5f8c23193535d1c27bcf53152113957da218c2f66286633 ALSA-2025:9880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default kernel-headers-5.14.0-570.24.1.el9_6.x86_64.rpm 28ee30d3e7ba31ecd0ccd9c454ce88e238aa9318af693874a590d7ed3390233c kernel-devel-5.14.0-570.24.1.el9_6.x86_64.rpm 3946c63e293f4c2fb4ce48a0a3e19d7dff92dfecb30187127dbc5915eeaf9335 kernel-doc-5.14.0-570.24.1.el9_6.noarch.rpm 5247c5cbc83482e14a931d052280abf572fb4c0d7cd104e4836c7a757549193b kernel-devel-matched-5.14.0-570.24.1.el9_6.x86_64.rpm 75a9260de7f814ba1eede0c7aeccc4e804d2d62f0e5c466c2b36de0adbfad7df kernel-debug-devel-5.14.0-570.24.1.el9_6.x86_64.rpm 7b9e4bb3e88263f54792857880c79387a545e77eb5f49f831a99cbff2fc49ef5 rv-5.14.0-570.24.1.el9_6.x86_64.rpm 83dfec3d935d0b28af6306d97abaf4528bfa6edd8d0eca2c57888b78d53960f2 kernel-debug-devel-matched-5.14.0-570.24.1.el9_6.x86_64.rpm 8463393bfb93b881c7a1783def1cb3fc2d187476269428539d036f6620715394 python3-perf-5.14.0-570.24.1.el9_6.x86_64.rpm 86771c05d36c5d75ecddbaa2bb3b5f4fb579ae9fc69f3dcef100dd2d8858cd6c perf-5.14.0-570.24.1.el9_6.x86_64.rpm a9fd853aaad602e3844b547f3a24cfe30df75162b54f93d0bdce0f583324e799 rtla-5.14.0-570.24.1.el9_6.x86_64.rpm e88d601b8bb95ccbad1c2a58ca7abd8e20c4efd9a86b1ca0c9094a350936f363 ALSA-2025:9978 Copyright 2025 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: LPE via host option (CVE-2025-32462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default sudo-python-plugin-1.9.5p2-10.el9_6.1.x86_64.rpm e1616340735846ab8de3b7c86f8074c894a8b9d04ae838853796fd1b9a9dc30d ALSA-2025:A002 Copyright 2025 AlmaLinux OS 0 1 Moderate

open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools:A malicious actor with non-administrative privileges on a guest virtual machine (VM) may tamper with the local files to trigger insecure file operations within that VM. (CVE-2025-22247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default open-vm-tools-12.5.0-1.el9.alma.1.x86_64.rpm 0fbe488bdad282f7544d2f5dde0bf6a1d9fd1ad834c8e5f04f79cdfc08e4c8a2 open-vm-tools-desktop-12.5.0-1.el9.alma.1.x86_64.rpm 2b47c6c535198d09fa79bd0ecf7155b13a483f22c0a5bbba031f46a4897b51a2 open-vm-tools-sdmp-12.5.0-1.el9.alma.1.x86_64.rpm 8899d4e6c065c641580becb9b1f518efba37d5bf7fb242438eeb36a6f1f354fc open-vm-tools-test-12.5.0-1.el9.alma.1.x86_64.rpm b09eadb358b2e8c26830f5efcff1ea7eb8da63eb8838413d824d446ca31e8c80 open-vm-tools-salt-minion-12.5.0-1.el9.alma.1.x86_64.rpm cec6e079ec8fd46edb039daf20afb0992d331ed78ae39c90db0c22c059a3a037 ALSA-2025:A005 Copyright 2025 AlmaLinux OS 0 1 Important

libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API). Security Fix(es): * libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_6_default libblockdev-fs-2.28-13.el9_6.alma.1.i686.rpm 0247b50a0cff728500a019b0ca24b5d72ecf6a7bbb55d7aea6aff6a922c18871 libblockdev-kbd-2.28-13.el9_6.alma.1.i686.rpm 044a9645359189e0839ff539539df18556644deda8540cd483ea732d62ccbaf4 libblockdev-dm-2.28-13.el9_6.alma.1.x86_64.rpm 0ecf09d78e5d037832adce6d70bc4a5536a0a48813e7937730aa27896f41fcae libblockdev-lvm-2.28-13.el9_6.alma.1.x86_64.rpm 24effd24242d47854a169c017827769ec37feff0bd281463b2b76ba5e0e4b232 libblockdev-nvdimm-2.28-13.el9_6.alma.1.i686.rpm 28c013c1658a4e910ac7837dea9707834d4baabd51ee4d7691b533af97828931 libblockdev-nvme-2.28-13.el9_6.alma.1.x86_64.rpm 30443f949a5cce4cb140b2add950b59194cb155b3ab6f1f57ba3d888027ad045 libblockdev-crypto-2.28-13.el9_6.alma.1.x86_64.rpm 3e9fc8e2446d7e20a1424da7ca19eb2fba857f20aa7b715d4c1250216a58c3d7 libblockdev-2.28-13.el9_6.alma.1.x86_64.rpm 435c047f04f0289d4273b26f8f0b5e02cd09e535ca265e29f4c51666d5a7948c libblockdev-lvm-dbus-2.28-13.el9_6.alma.1.i686.rpm 4dbc3b2a4c2bd3ac9874eba537433ef0c54c7baf6f233a7adc37ece927e1075e libblockdev-dm-2.28-13.el9_6.alma.1.i686.rpm 5e1f522cd5a6d556ce7885107d60d2101272706ce08be58075ccefb9b8750bb2 libblockdev-nvdimm-2.28-13.el9_6.alma.1.x86_64.rpm 657bcf72442d88ade5a10661aab3ab8086bc0f95884f18e924041706e6fb3c75 python3-blockdev-2.28-13.el9_6.alma.1.x86_64.rpm 72a5f0cd25ec0f75fb5d44bc6fbf6fa2322b8a043124f6921aea8eb2b08dfc24 libblockdev-part-2.28-13.el9_6.alma.1.x86_64.rpm 72cc929d19c02feccc072e6436d079b43b4b5b9b7edede0a0e55c3aee000baec libblockdev-kbd-2.28-13.el9_6.alma.1.x86_64.rpm 730d7e4044d35678d606c84c2dafc5b1ae95aaacddb401bf78e6069e8b2b8ed2 libblockdev-mdraid-2.28-13.el9_6.alma.1.i686.rpm 73a13bc08a37954b519588a540e8f1a2b156da2cd26058bd2fac16776c21cbe7 libblockdev-loop-2.28-13.el9_6.alma.1.i686.rpm 819f364f8c1ae16e0038deeb7c76f4bacf80eea756d9ec0aed4680951109d5de libblockdev-utils-2.28-13.el9_6.alma.1.x86_64.rpm 867b9ff366afc7f4bd8e364701316be5908272b02d323319b6e78925b3904a9c libblockdev-lvm-dbus-2.28-13.el9_6.alma.1.x86_64.rpm 98361ba39d3fa97a993b7f3ca418813e153ec9a9dca66f27e0254240b5779d2d libblockdev-swap-2.28-13.el9_6.alma.1.i686.rpm 9cd80da4848c4a4bb034fce3d0e59f6f3acf8185ae768efa029c42e831c8eeff libblockdev-fs-2.28-13.el9_6.alma.1.x86_64.rpm a71710e0e667a075fd22a165c10f9db11795eb437b88a5f32aa3db9f87ab4c08 libblockdev-loop-2.28-13.el9_6.alma.1.x86_64.rpm a9aa9f207495b38ee4d730e6068ad9a0670504b02cdf6e6fbebd583d43fb27d1 libblockdev-2.28-13.el9_6.alma.1.i686.rpm ba9829c1288b214bb88282b338b0f6eb99c22ef86760b24bea06c51517febb32 libblockdev-plugins-all-2.28-13.el9_6.alma.1.x86_64.rpm baa24612ea42b98a1bc52538b6197b8ad1e0749a86d4c944310afced749aa0ac libblockdev-lvm-2.28-13.el9_6.alma.1.i686.rpm c4985eab6f95d2424d8370bd363cf23a49aa486a43a64e9d41533a0d69984d28 libblockdev-mpath-2.28-13.el9_6.alma.1.x86_64.rpm d419d94786bd4b2bf8074d29e2b01608be4dbb2b2da88f2c0bc927cb9bacee00 libblockdev-nvme-2.28-13.el9_6.alma.1.i686.rpm dc31aad54f393a3e9ba07f8de69bff4267427c40dcf432bfb3d37fd0590ee0f3 libblockdev-mpath-2.28-13.el9_6.alma.1.i686.rpm e43c84db94f75efe892e7f2f84c15c7dd71439b05ea293c9fbecca5fc5063c82 libblockdev-crypto-2.28-13.el9_6.alma.1.i686.rpm eaf5bdf6a270a89bd0394ba2e210e1b5fec58f9a9388409e7ef2724dc4a22d01 libblockdev-tools-2.28-13.el9_6.alma.1.x86_64.rpm efb6986a0aa2580d7070f37cf9ddf271212693bacd00293afa8b71ba65b092b5 libblockdev-swap-2.28-13.el9_6.alma.1.x86_64.rpm f3e37ec85db61c6b90c3ffd9fbbf0386acf51138f4a406a5bc9de41f54c79a26 libblockdev-part-2.28-13.el9_6.alma.1.i686.rpm f5fc2262be9449332633df0a0f09f3d198f7da26a7596375aa1fe8af38b77282 libblockdev-mdraid-2.28-13.el9_6.alma.1.x86_64.rpm fc0e0a53dd8318b52cc7c83291bbd9549f5fbc7e8dedfe85e9bfb6eebc709026 libblockdev-utils-2.28-13.el9_6.alma.1.i686.rpm ff053b0690b8cc962585a97b087954896a3af3d8207b65c8ae7b6c20d266fb9c ALSA-2026:0052 Copyright 2026 AlmaLinux OS 0 1 Moderate

gcc-toolset-14-binutils security update

Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gcc-toolset-14-binutils-2.41-5.el9_7.1.x86_64.rpm 1acc0e871bf48e063c1929471de4ef9ae24684a2299dae566f6c6869f1349cae gcc-toolset-14-binutils-gprofng-2.41-5.el9_7.1.x86_64.rpm 65922719f2e207ecc8b6e55cc90b48d64e6e37473ab1378bdb2c61397b30adc6 gcc-toolset-14-binutils-gold-2.41-5.el9_7.1.x86_64.rpm 7eff131fad2d27cf3d886c4508d9fe9f38876a05e8163d317646d74a85e729ff gcc-toolset-14-binutils-devel-2.41-5.el9_7.1.x86_64.rpm aeec28ac814da65f7a658a405da13b8d9aa60165942b03f6bab4dee56c071ee5 gcc-toolset-14-binutils-devel-2.41-5.el9_7.1.i686.rpm e11ad28af2656cba1acac6caafe6f605c6d135d3ea89c4d8d89b5fe0f2c65a4b ALSA-2026:0126 Copyright 2026 AlmaLinux OS 0 1 Moderate

poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default poppler-glib-21.01.0-23.el9_7.x86_64.rpm 019a23cc2d1d4508b6c1ed8abb0ccc79e682634fef6e2eb2ae42fefbb536cead poppler-21.01.0-23.el9_7.i686.rpm 1cd828c012e683305dcbeb04f4cfbe87f8cec3fdd22e18f2c3b94b72cc1ccca7 poppler-21.01.0-23.el9_7.x86_64.rpm 26b90422edc0cb75117d9806c621f1759b76a59d31339f9883aef4608ae1803c poppler-glib-21.01.0-23.el9_7.i686.rpm 8140a6cc1b0b64a542e80c78abb8eaa4fa520f092c9dd076957771362345c5e8 poppler-qt5-21.01.0-23.el9_7.i686.rpm 850d39bb2e508620ba7c1fe666658b6041d6e1751f0f8341cc91ba12d797ad66 poppler-cpp-21.01.0-23.el9_7.x86_64.rpm 901bb11ba1509cdbea74d3ad78a67c0d842ac6e57c142a4ccc1e12aac0ab1234 poppler-qt5-21.01.0-23.el9_7.x86_64.rpm 9ee9fb51b0a99817416d8b4aba536c05cebabf7cd55f5e9140af44bde7e05491 poppler-utils-21.01.0-23.el9_7.x86_64.rpm c18bad6e9296bdc8f7afc7b711a416f0401869905277b12ed722ce2fe2e90e31 poppler-cpp-21.01.0-23.el9_7.i686.rpm c291b2c0294f69f2f66fc51120921e3471209498de5d4923a9e4c1470e6301be ALSA-2026:0137 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default mariadb-oqgraph-engine-10.5.29-3.el9_7.x86_64.rpm 1a48fe6a308bd2b28a2fbf0ece78185f279b6a8c89b0ea61b526dd4475355bcd mariadb-server-10.5.29-3.el9_7.x86_64.rpm 2de3b1a71d5ed2b7b3ac89109e919d1c4f0004b9ef4212a2297ce1d942d19038 mariadb-gssapi-server-10.5.29-3.el9_7.x86_64.rpm 4e1b057425c9cd2cf2e684dfba30afc469852c86076c8e2af0e9a24d9700fd41 mariadb-backup-10.5.29-3.el9_7.x86_64.rpm 4fccc1b031a62042dfee37889810e88c95627b7e279970a15f7edff85f4a8f47 mariadb-pam-10.5.29-3.el9_7.x86_64.rpm 5ad6aa18c883884fde7a5f3f073884379122224c2fa910dea776ecf886641857 mariadb-server-utils-10.5.29-3.el9_7.x86_64.rpm 78ab8d79561df80890afd5802b86bb6b363ad1d83e9ff0faf0d2331ca03793e3 mariadb-server-galera-10.5.29-3.el9_7.x86_64.rpm bbbcab3dee116773e967219f5ce1f8c1bb770068bbe38e1e778eb249a87a6371 mariadb-errmsg-10.5.29-3.el9_7.x86_64.rpm bbdb700f673b78466aba2b70a2ccb36dfc5219b61ddf13d586e980e11c5abc62 mariadb-embedded-10.5.29-3.el9_7.x86_64.rpm cf48daeef28294ba5f7b2e6996841c70aacd8a09423cd9e3cbcf49e18b6db6c4 mariadb-10.5.29-3.el9_7.x86_64.rpm ec2491e3dd89baadee029d9fe53fe8afa7534d5771b306ba210c67414d322850 mariadb-common-10.5.29-3.el9_7.x86_64.rpm f2d07222627a2486be35af0ec79d2696bdc75dbcfb604ad26f6fee2c8ab02869 ALSA-2026:0238 Copyright 2026 AlmaLinux OS 0 1 Important

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libpng-devel-1.6.37-12.el9_7.1.i686.rpm 4242e55115da7d6f984351c7eaf826405b018d7fb5f28cb96241b96c079494b4 libpng-devel-1.6.37-12.el9_7.1.x86_64.rpm d9a65ac378db5a711478ad44410b5831af9f88885e14cb40099436c8789552e2 ALSA-2026:0247 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb:10.11 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969) * mariadb: MariaDB Server Crash (CVE-2023-52971) * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default mariadb-oqgraph-engine-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 170a0fa52e25b6a259290079c863910a2bef4c4d9ecab611fda571843c5525c3 mariadb-common-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 23667e96fd5e4add80d198ce10c34c8325725cc7da2ae7787d87843459f8a13b mariadb-gssapi-server-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 34f1959877e127495e201587f6bc015340e634141fad6a7391ce9dd947ae2ea7 mariadb-embedded-devel-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 4039f3934e8e2a5134f4125dadabf01bb5b4bb5b81db489e7446f91f110deaa5 mariadb-backup-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 5a8011ac7de18bf758ad5868563886a5a898abfad5e4ab89c686d7bd242da14a mariadb-server-utils-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 6cbd7c88f4a1a07a5d69a720f088133a79843d0b4911edfd052065894a3143c7 mariadb-server-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 78e76fe2a2c154c3215ed1b9ba9ae2690cca6f227a4bf2e81f689bbf0c74994f galera-26.4.20-1.module_el9.5.0+135+c9657a87.x86_64.rpm 867ac642cd84df665a6d5431ac55bf510b2cdc1885d88342c3c2663a22e946c1 mariadb-pam-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 8e90af9c75e26c4c79e07fb9986ca3628fd669d5f1f0e5a61c6d62c9bdb1fc28 mariadb-test-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 9a3191ac4de83264758f12c8d467ebd3e12bad32a0e2faa3d41db682105564ab mariadb-devel-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm 9f66fb63adabbe5e4164be0724dc265184cf41acc504e980c1b9469710e9990b mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm b88235c765c48d75ef6b819c7abdc98f6ccb66262e44df88e05335bc2c58d025 mariadb-errmsg-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm cc6af5571c8426f3f0641cc482cf1cd6151a1814dbdf7be361eaa1521f91c28c mariadb-embedded-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm d655192a21f66e29e7ee0f019a01608314a6fc76970f30bdae39ca8dc695ea33 mariadb-server-galera-10.11.15-1.module_el9.7.0+199+a988ea01.x86_64.rpm f64c9731b458bd7c1d14136c9779e9e00f5c50fbf2e0b114b94458c408da6c1c ALSA-2026:0312 Copyright 2026 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915) * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default cups-client-2.3.3op2-34.el9_7.2.x86_64.rpm 11c1c95aec14a50d464ea2d19bcd5be07cb9a84267d0fd3c065fd74905e8da42 cups-ipptool-2.3.3op2-34.el9_7.2.x86_64.rpm 1357cefe664153774af7ea48ee3a51e6c745afd775c878df59e1f14c308ed9b7 cups-devel-2.3.3op2-34.el9_7.2.x86_64.rpm 712d9a3138761139fe259d5122648dfd2d87627fb9d399f064c16276458ec8bd cups-filesystem-2.3.3op2-34.el9_7.2.noarch.rpm 73a56973f3c00f25c9e386d2cbfeb2233ef6c766c8ad30acd4e13b7c6533b6db cups-2.3.3op2-34.el9_7.2.x86_64.rpm 85686db9151a02304f813e35cc72fdb22bf429f93e60caac96d9f4221c446007 cups-devel-2.3.3op2-34.el9_7.2.i686.rpm 864460a018b8128960356185d4d7086ef9c8e7654edd87c72b71e40d2e07e646 cups-lpd-2.3.3op2-34.el9_7.2.x86_64.rpm c24daa63be4944b563104930aebe513f8171807bc9b58fdb87c9ce01dd33d330 cups-printerapp-2.3.3op2-34.el9_7.2.x86_64.rpm d30480808608615f1ccbd14d3ef81ea652482a11ad5ecb717c836f88a3714c74 ALSA-2026:0422 Copyright 2026 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins) (CVE-2025-14523) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libsoup-devel-2.72.0-12.el9_7.3.i686.rpm 541e093c3b57508ee165ee652b53e38a5bcf4ea1d4a94f9453a2909c16d5a7ca libsoup-2.72.0-12.el9_7.3.i686.rpm 6ee1445c4093689493ddac27169ef04d5f87ed29701576dbf7f67ccfc1de633b libsoup-2.72.0-12.el9_7.3.x86_64.rpm 7e44a9b5f138779562fbd4854a50956fae9f5919c90de9d5cf7a1478c941c7ff libsoup-devel-2.72.0-12.el9_7.3.x86_64.rpm f942b16438fa5385847338e65867e171fa35c19033034a56a0c1745471a25235 ALSA-2026:0437 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default buildah-1.41.8-1.el9_7.x86_64.rpm 5a288c31812e85a2ee31189cef3f87e7319373911fede7bfad3083043fc1559f buildah-tests-1.41.8-1.el9_7.x86_64.rpm 679528dc200071a403e7d6b69f6136f96302a941b61f6865bc0b1c0d2c970413 ALSA-2026:0445 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806) * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840) * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883) * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-perf-5.14.0-611.20.1.el9_7.x86_64.rpm 10ca5f19c8da85c0f4c66b053746d05229946f965e561b5433ef10144f00d0d6 kernel-doc-5.14.0-611.20.1.el9_7.noarch.rpm 19f5e32a89986b4cc831ce2d012ab03be8347212686369b676f8817537ce093f kernel-debug-devel-matched-5.14.0-611.20.1.el9_7.x86_64.rpm 26fc365f776637620cce452acfb4854e786307ffdce404a29ca27af59242af83 kernel-devel-5.14.0-611.20.1.el9_7.x86_64.rpm 49202a5495ee936fba74162ed872b12ffbcf37479acd6450b6757903e6edf1f6 rtla-5.14.0-611.20.1.el9_7.x86_64.rpm 74d122df34981b1fe9b9b1832c9186e08acf740d3ce0f58f9a0e568aa52484d1 kernel-debug-devel-5.14.0-611.20.1.el9_7.x86_64.rpm 77c1078ae4a8d850edf25bde8d39cd71bf34c06f93819f612626560368afa50a rv-5.14.0-611.20.1.el9_7.x86_64.rpm 8cac12ce049864b953ca584e5ee3ee6ca4042e49b28a313d42d845a72a5698e6 perf-5.14.0-611.20.1.el9_7.x86_64.rpm 98677572b5172f950c6abe7325297565117ff72c27b448a610016787d2bddf0e kernel-headers-5.14.0-611.20.1.el9_7.x86_64.rpm c1bd5bf3b79cf882b0a6ca4f02abe000e4031b26244cf3556afc39b5b7d24c0d kernel-devel-matched-5.14.0-611.20.1.el9_7.x86_64.rpm fcb1a615b8041eeab7a5ca83ccde5fe76fd0ee1dd684e551552bf100c29489bc ALSA-2026:0458 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libpq-devel-13.23-1.el9_7.x86_64.rpm 48aca0a4e3cc3f4064a3a3623244d8a479e5ec7f41fa2e6c5f9f5693b70c3ed1 libpq-13.23-1.el9_7.i686.rpm 6ebf0d0a60fbcdff076aeba4e22b0f3df6ac098f099ddffdcd81a58030db2677 libpq-13.23-1.el9_7.x86_64.rpm ce08391d7ad7061e3bdccdcebd143c11f58a834ad9d13e9e36215f3ae1c3ad79 libpq-devel-13.23-1.el9_7.i686.rpm d2162309b399de61ce62cebd6beea5fd3b0b702f80721ce3a1f863cbbf992e96 ALSA-2026:0470 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default podman-tests-5.6.0-11.el9_7.x86_64.rpm 2ee1d097d16c1f15876384d8c4b6a3f0170cc7d9283e533dcd54f80a7a85a446 podman-remote-5.6.0-11.el9_7.x86_64.rpm 4001bde80efc4bb5b1784c24f4aa5367578df06dbd3df31e5f2b80713fd22895 podman-5.6.0-11.el9_7.x86_64.rpm 9654eada00fd9060c6b07e098c567ba3a55c0a6e566e24f56e47e0aefdac8296 podman-plugins-5.6.0-11.el9_7.x86_64.rpm e6263a5d5a6c3713608c0f30f24a1c057eea9a1c0a33cdedc49012ffe54c1324 podman-docker-5.6.0-11.el9_7.noarch.rpm fe388f5da95af53e2b93750e8ad166315cfc9110e62c0b4194048f6e5a01a136 ALSA-2026:0491 Copyright 2026 AlmaLinux OS 0 1 Moderate

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default postgresql-13.23-1.el9_7.x86_64.rpm 36673b2aa541b69d7a2e1044f2de598539dd9bc46e4a83cf9518fd418c504e56 postgresql-plpython3-13.23-1.el9_7.x86_64.rpm 3ddcc9239a5b28e73b2cd17ca2f5517a4a355adf99c51403381068b336407d91 postgresql-pltcl-13.23-1.el9_7.x86_64.rpm 44edfdc797d7c26585e6e920b8955bc65bcc480ffd7611f28523a874b3bbd467 postgresql-private-libs-13.23-1.el9_7.x86_64.rpm 56978235c07e7fca9e265a353e3fede6b8b22fa6affb157745513c8db41ea238 postgresql-contrib-13.23-1.el9_7.x86_64.rpm 7be264b6fb48084e616b22d854434ae49bf317857f81b769318e98e4f6502425 postgresql-upgrade-13.23-1.el9_7.x86_64.rpm b4996c9708f7af1b20972b010c04cdf4467f9189a3aae184bbce96ed40a9351d postgresql-plperl-13.23-1.el9_7.x86_64.rpm c5c2fd49ae91a4bc7259be8bece21289058e7d5814dc8ba1cbab839fcf9aa7f0 postgresql-server-13.23-1.el9_7.x86_64.rpm fbd44a73d2400eb0be9ca68f826d51cad13841f581f810cbfebd890bbd2cd9ca ALSA-2026:0492 Copyright 2026 AlmaLinux OS 0 1 Moderate

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default postgresql-upgrade-devel-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 15121d0340a16807a4dbc72f843596e9d74b52028067fd726a37bb7a6f171771 postgresql-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 1b936e3b2f1e8c13acb99b99b71fca08bd191b90471bcbd2b83bc8e2e54c562f pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.x86_64.rpm 1c17fe11db244a9e23cf757cfe3615a7256f34ef84e836c69f08b5d37efc9ea0 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde postgresql-test-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 2c823591a95deb30827bee86ea80c240d4277ece4154b400930079199dc31179 postgresql-pltcl-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 32120c16c4b89204070e07385135b69662eece0096ef09cc2eeb2257ff7987ed postgresql-test-rpm-macros-15.15-2.module_el9.7.0+203+960b74c0.noarch.rpm 330684e3e7b8642ae37e872a613159ce42281f3d78c2649c0e26b56c1c939197 postgresql-plperl-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 3f06f125c141e74558367949710ca7f8d520dfb7d50cbac3635102a9165bb942 postgresql-private-devel-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 434cbcc1b4f310f936a9e2ee97044b27fe8084b43f1281a00d9c0b9bf79ca731 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba postgresql-server-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 5419fe5871341b9ddca707078230a228cd69ce76e59bd6b6d4f80d91e82d0d85 postgresql-server-devel-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 54ab1ebb81e98733a4d02769774bc5fea580379b1100736e6cd466d3d3fde540 postgresql-plpython3-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 6e71ac622f1f08e9e6e708aaafedb3dc62911a4ada42c310371810692eafdee6 postgresql-static-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 792616c3d9d02aa1ab4a5878019340af8126ee413aaa4c5bf533577bf90ba3e4 postgresql-contrib-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 7cf3d77635c8a74d7327529627806c494fa9ddff52f5eea9cb9ca0dbe214d38f postgresql-upgrade-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm 8694e609c80c5138ae29f7b745e0a4a6fcd765fff7e0292fae019162cea0a3f2 postgresql-docs-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm a55b6127d319bbf2ddc75195e829a1213e64d4b904dc3a99a2e31b0210b02768 postgresql-private-libs-15.15-2.module_el9.7.0+203+960b74c0.x86_64.rpm a9527344aba6154eb9d06f25d671a49969938d6468ea12d24d98ae8d72e20501 ALSA-2026:0493 Copyright 2026 AlmaLinux OS 0 1 Moderate

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default postgis-docs-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm 04cfa74a8c62fa4a87068b950026f691e674fdf92631991d2461f953dba9ce60 postgis-utils-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm 0ed020edde840a1db5c3f1dc045e6c5792a198092d634f60801c79c03f19d8f6 pgvector-0.6.2-2.module_el9.6.0+167+4e561146.x86_64.rpm 1141f322652c8d905035a08a39e707d5192236d5b4b442802732b66a0684e10f postgresql-static-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm 15be31f7080e22c06f94e29f2ae0deb7ba87df675f43df672913bdbea3cc27ad postgresql-server-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm 1b1f1a96ea7a83fdc33ae6fc323d0b04a0be7f0715858819aecdd99a6211cc67 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 postgresql-upgrade-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm 384f9d97863dc64aa838fe2a5452aaa8bb2bc42769574584cf5c3c26571980a7 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgis-client-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm 53c364d553438c9b8fb5540d3bfbb3399b126b996b30c0514c0ce1168931600a postgresql-test-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm 5a82df64073180b3ac20a9a74fdfcb936b0cea1f5bad33f4856a3c6b9c08fca3 postgis-upgrade-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm 5e828ee3b542841d6808d31956de9cc487b36262040179f34bf36297ca381f3f postgresql-plperl-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm 6dfa93bfc598815e71d6b41058e0794bed6cdf4aa70b99053d34a2b9c590daa2 postgresql-private-libs-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm 70e7f17d50c7babc9f8b0f24974d610ba2ab62da93d4220e130c8d4a4edd3e30 postgresql-docs-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm 7a8b063af395a32b2de46e3580b4c1be427150b6537842d1393115ee3f09489c postgresql-server-devel-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm 92d3fb7a7e288e230162d115ef87162d58b8d6742bbf06dd918984351d27b9ff postgresql-test-rpm-macros-16.11-1.module_el9.7.0+202+21427d8a.noarch.rpm 940c8264e2782e3c00d22deefd96195ab5ac1c317555d15c38115f2ca94b6bda postgresql-pltcl-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm a91bfb357d8cf622f1d8a95271266eb5eed441a031969c52d4844403ea9e79b6 postgresql-upgrade-devel-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm aa58e0c3bb6251d7602fa38c9c66c58814926911e1f89995ef827ed0deb56ba1 postgresql-plpython3-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm b5fbe758a83b54bb1937d889b7d9c3f9409f609c2dcec8cc15e1913a9300d86f pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.x86_64.rpm c660056970f41edeec199c6634387c8235fcf981c34cdf3f74d9d3b3fd36eb63 postgresql-contrib-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm c7251da25f62342553b2b8ebb4478d6f665652368112757968e5fa2d57b61037 postgresql-private-devel-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm ca00a88e37a5e944b3ef74979eb793e306e3822be6b7cd2921830b119ecedd21 postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm e15fef1425c6e23296c38c0a10587352caefee293655e5003d3b71019a52ffa8 postgresql-16.11-1.module_el9.7.0+202+21427d8a.x86_64.rpm fe4df606ad6cef6ded96ac4800b537044ef7030be76c75ee87166239c6d80a3c ALSA-2026:0605 Copyright 2026 AlmaLinux OS 0 1 Moderate

vsftpd security update

The vsftpd packages include a Very Secure File Transfer Protocol (FTP) daemon, which is used to serve files over a network. Security Fix(es): * vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing (CVE-2025-14242) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default vsftpd-3.0.5-6.el9_7.2.x86_64.rpm 8efb64aea738a93e7e63a76232ddcce621ea63c4e865f48862b77d5a58f2de8b ALSA-2026:0694 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878) * firefox: Use-after-free in the IPC component (CVE-2026-0882) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884) * firefox: Information disclosure in the Networking component (CVE-2026-0883) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877) * firefox: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-0890) * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879) * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880) * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default firefox-x11-140.7.0-1.el9_7.alma.1.x86_64.rpm 46428b4a102017a3c8ced98bb02d78f746a564611d8c2594f97080fcbdb9b248 firefox-140.7.0-1.el9_7.alma.1.x86_64.rpm eec4e15a9beade13af52ef2f935b79d6bd9e9482f11b0fd6d954a4acfae59d43 ALSA-2026:0696 Copyright 2026 AlmaLinux OS 0 1 Important

net-snmp security update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. Security Fix(es): * net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd (CVE-2025-68615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-net-snmp-5.9.1-17.el9_7.1.x86_64.rpm 1fbeee17fc903ee658efc720d22561835851fdf33de6f9546cf71fc0dc126513 net-snmp-libs-5.9.1-17.el9_7.1.i686.rpm 35701d4f809b72765189209b7deed40603696df04445563388278d56db22573c net-snmp-agent-libs-5.9.1-17.el9_7.1.i686.rpm 4965e9d7adb6738b583ee0b77cc9ddd202f2005715ecabb29b49c56a87622cb6 net-snmp-agent-libs-5.9.1-17.el9_7.1.x86_64.rpm 558a1187424e6792c18ab7118282b97e418c7a21b6d46578508b34319a4c5998 net-snmp-perl-5.9.1-17.el9_7.1.x86_64.rpm 559a47aefea218b4b10c47bc0458a8f71259664cd900bd66547120773242578b net-snmp-libs-5.9.1-17.el9_7.1.x86_64.rpm 682b4ab6679dae6270f4d49c4cd04e06bf6e12e6f820988344b30dad1bf57501 net-snmp-devel-5.9.1-17.el9_7.1.i686.rpm 9ba0f280a666f45914d8a19f48be37fb525f40836a603cc85f94ebeb7bf5ea0c net-snmp-devel-5.9.1-17.el9_7.1.x86_64.rpm e25b9af7b4f09ea85eeaf3c4e790fa50e8e579ae84739980c8b30e365ec43770 net-snmp-utils-5.9.1-17.el9_7.1.x86_64.rpm e8427b52763ad4402c557311b550db5fac5a464a1c3bb15ecf3ee382fb9b09ed net-snmp-5.9.1-17.el9_7.1.x86_64.rpm efd8ccac1d3fc2fa3d6ae3acdde6e7e87464d0ceda090ad2d090f767368d6424 ALSA-2026:0719 Copyright 2026 AlmaLinux OS 0 1 Important

gnupg2 security update

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fix(es): * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gnupg2-smime-2.3.3-5.el9_7.x86_64.rpm 83a6ecd66a67365c0c4a335b7f0bb676d4a62b2d2d29f2a279ef3e70c101a703 ALSA-2026:0771 Copyright 2026 AlmaLinux OS 0 1 Important

gpsd-minimal security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The AlmaLinux support for this package is limited. See <https://access.AlmaLinux.com/support/policy/gpsd-support> for more details. Security Fix(es): * gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing (CVE-2025-67269) * gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling (CVE-2025-67268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gpsd-minimal-3.26.1-1.el9_7.1.x86_64.rpm 34d6fa288cbbf1bf3f11d6c2dde739771d3978bbe136ac30795de11f1d6c0808 gpsd-minimal-clients-3.26.1-1.el9_7.1.x86_64.rpm 893b4a245ac2c272338fda9730228a78769220f7f4bbe54f967aee5843bd1ada ALSA-2026:0793 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703) * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933) * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277) * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-debug-devel-matched-5.14.0-611.24.1.el9_7.x86_64.rpm 3b139fd9c4e6649dc20f651fdad27dfcda25d0f427736ce4da6d7099a6be616e kernel-doc-5.14.0-611.24.1.el9_7.noarch.rpm 3e3566544ffcc913d62e40889e68ef64a6dbd2d44e1a21c1066a79a117f654a4 python3-perf-5.14.0-611.24.1.el9_7.x86_64.rpm 55f102f7d14eef149c686832d50fb511e15383538a8c2f36fe8016013484a72a kernel-headers-5.14.0-611.24.1.el9_7.x86_64.rpm 63091cba1000a591e9f910a6550c982c2802daf538be284674d4d19dd8e7d51f perf-5.14.0-611.24.1.el9_7.x86_64.rpm 8a358bf08c3d05a0781726c99ca63e5c4510e30082a78a542eaeff7b26d62a3c kernel-debug-devel-5.14.0-611.24.1.el9_7.x86_64.rpm 9d5d2e247b1811ae73d804f056392a214238a4b9dee1974a399b5b94d5888093 kernel-devel-matched-5.14.0-611.24.1.el9_7.x86_64.rpm a9433110207a273885c4f940b20dc4482e348478df921972d3bea6b9b4cc1776 kernel-devel-5.14.0-611.24.1.el9_7.x86_64.rpm b0fbbfc44469ea8a0517aeab674c07e904f3122b54c0b493bdcf5081e8d66a33 rtla-5.14.0-611.24.1.el9_7.x86_64.rpm da778d4aad0659829e4a649271b5fba2f8932e909163be3664cf9a7e96cbdfd0 rv-5.14.0-611.24.1.el9_7.x86_64.rpm f6cebee42b2b6c85fffe41e96180af6590a0da3ab965c4ec93b0646fba74bf24 ALSA-2026:0914 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow (CVE-2025-14422) * gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow (CVE-2025-14425) * gimp: GIMP: Remote Code Execution via XCF File Parsing Use-After-Free (CVE-2025-14424) * gimp: GIMP: Remote Code Execution via stack-based buffer overflow in LBM file parsing (CVE-2025-14423) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gimp-libs-3.0.4-1.el9_7.2.i686.rpm 38f81d55511e260dd6a7bb58e54dc7c50b582a841a9d61e819fac31128720e88 gimp-libs-3.0.4-1.el9_7.2.x86_64.rpm 7ce47328e49795aa6e0fb1cb1ec0e32ad4a302b516b30984363442f8ee7ded0f gimp-3.0.4-1.el9_7.2.x86_64.rpm be28c06aebd9fe4a059e806fc7ff74ab149d652a45178959adea301adb552903 ALSA-2026:0923 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default golang-docs-1.25.5-2.el9_7.noarch.rpm 017697f71acf4d64b058879907fa309ac1e13d27452eba8eac1a23e4d54acb67 golang-1.25.5-2.el9_7.x86_64.rpm 398ceaa3496323f6b8abafb798251438922dff036d7be7f86d4d5168b6e08131 golang-misc-1.25.5-2.el9_7.noarch.rpm 4ac06a4a09988615efa6f169678a08486a491e66c064483e6b2e7455d1ff8925 golang-tests-1.25.5-2.el9_7.noarch.rpm 55d6d6285f19148b604e70e01e03b893ba654ea41093344e35b5ab2642db501c go-toolset-1.25.5-2.el9_7.x86_64.rpm 78a883c40d011c21ef32efef5b818d8ea9b2212503b075f215e6fa2538d5c4e6 golang-race-1.25.5-2.el9_7.x86_64.rpm 976966e09e4682b083ba6ebe10753977822d2bfa9560c4865743bb62f92fe6e5 golang-src-1.25.5-2.el9_7.noarch.rpm bc52f91659c22e783be8b4ce726ce162e9e98ad2e1699408e3ef87111736c50b golang-bin-1.25.5-2.el9_7.x86_64.rpm d3733a0896800d388992a61bfbed5f7e2b6f5aa7d63014eda941c6c18664ac80 ALSA-2026:0924 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878) * firefox: Use-after-free in the IPC component (CVE-2026-0882) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884) * firefox: Information disclosure in the Networking component (CVE-2026-0883) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877) * firefox: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-0890) * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879) * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880) * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default thunderbird-140.7.0-1.el9_7.alma.1.x86_64.rpm 0a29889c8d7bdee2f36bd5206c88832e2a56591bf1c35a88cc0aa30af6dad615 ALSA-2026:0927 Copyright 2026 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142862, AlmaLinux-142881, AlmaLinux-142882, AlmaLinux-142883, AlmaLinux-142884, AlmaLinux-142885, AlmaLinux-142886, AlmaLinux-142887, AlmaLinux-142888) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default java-17-openjdk-static-libs-17.0.18.0.8-1.el9.alma.1.x86_64.rpm 1ba8b86cdabba46426bce392cd8097970e6e18d38f3adc84fab0ba7d839bff03 java-17-openjdk-jmods-17.0.18.0.8-1.el9.alma.1.x86_64.rpm 41cb2ef17e6acc7dedd3f68d226224797cef810711cc9ac2a0583bd04334ab92 java-17-openjdk-17.0.18.0.8-1.el9.alma.1.x86_64.rpm 4f1de4a16e97f18b772102c8e939fc632d10d774582bf81ef875a850e0d0aaf1 java-17-openjdk-demo-17.0.18.0.8-1.el9.alma.1.x86_64.rpm 62f3f30ac8f74e85002704461fe907e1395afc8d900bb5fcd80827b19cf37b00 java-17-openjdk-devel-17.0.18.0.8-1.el9.alma.1.x86_64.rpm 63f5639aad69a8f4d78ca5baac6f5fffc620fe4a82bcbc14c637cb69e66f4eff java-17-openjdk-headless-17.0.18.0.8-1.el9.alma.1.x86_64.rpm c995f3222f2331d9b8b41b497aa493d18db1494aef9bc6bafe51dee239d0c8f0 java-17-openjdk-javadoc-zip-17.0.18.0.8-1.el9.alma.1.x86_64.rpm d842149359e5d7bb243e6970a92829f328ab5296dc8948f412fcd4b8bb2071be java-17-openjdk-javadoc-17.0.18.0.8-1.el9.alma.1.x86_64.rpm ee4dc60a448a6a2f99a99be6ec5010208e32806628e3ce75a5b418be7f616e8a java-17-openjdk-src-17.0.18.0.8-1.el9.alma.1.x86_64.rpm ffd2dcef09c0406a5d2cd33763056cc8847b3204b7cd48eadd1d72c732942d36 ALSA-2026:0928 Copyright 2026 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default java-21-openjdk-jmods-21.0.10.0.7-1.el9.alma.1.x86_64.rpm 442cf869df2e4872d37c6dfcbbcdc02f5a1e7026739fdcd86cedfff0f64ade7d java-21-openjdk-javadoc-21.0.10.0.7-1.el9.alma.1.x86_64.rpm 4b19cb2c67b560064725e54d0fc4a6ff9c7da9173c2c16dbc15481bf10f580f8 java-21-openjdk-devel-21.0.10.0.7-1.el9.alma.1.x86_64.rpm 526d530b6d8e3aaceaa4e8c8a82aa81f62d93f5aeb9d71cfd62a4bc647eb63d5 java-21-openjdk-21.0.10.0.7-1.el9.alma.1.x86_64.rpm 73d6d10209af59bc15dd019c0e78bcb706b6674716a43e3f9210b688d3fbca74 java-21-openjdk-src-21.0.10.0.7-1.el9.alma.1.x86_64.rpm 8196ff78004f3dd166c47c1ea32acb1104ab132b966843c50eb10c3e1437c2a0 java-21-openjdk-demo-21.0.10.0.7-1.el9.alma.1.x86_64.rpm 9b5a33aa5cbcc200c70bc2bbb8fcdd89e8c6deafafe16f0f7d93ca499a16cc8d java-21-openjdk-headless-21.0.10.0.7-1.el9.alma.1.x86_64.rpm 9e1db5d1b72c0545fbb4cefc0b7c0f8e46b4503721c122923e17c656b03bbbcd java-21-openjdk-static-libs-21.0.10.0.7-1.el9.alma.1.x86_64.rpm f39aa8533de106093ce77ba74d8b845eb23fcfdf14297ce627b5d090f82f03e8 java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el9.alma.1.x86_64.rpm f56d758dba2c0bba5b9ba79b1bbb74e9eae48cf6e4bb4798889e5b48b11fc175 ALSA-2026:0932 Copyright 2026 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142865, AlmaLinux-142866, AlmaLinux-142867, AlmaLinux-142868, AlmaLinux-142869, AlmaLinux-142870, AlmaLinux-142871, AlmaLinux-142872, AlmaLinux-142873, AlmaLinux-142874) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default java-1.8.0-openjdk-demo-1.8.0.482.b08-1.el9.alma.1.x86_64.rpm 1ebe7c748f0813a7c47316da86a4df71670bba5c4152ed3685a129d4602d06d4 java-1.8.0-openjdk-headless-1.8.0.482.b08-1.el9.alma.1.x86_64.rpm 5ff72385632ae8e05fdf1f92630944dd7da759f5e83d357318854de5f89b428e java-1.8.0-openjdk-src-1.8.0.482.b08-1.el9.alma.1.x86_64.rpm 883bb54d07ad8cc611e9a62559f64ae08062559c6f508b3bbe4f59cbc84c82b1 java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.x86_64.rpm b70172f4620da331c2817b3334b005210fd4bd825bed9e040b1b578323b16ab8 java-1.8.0-openjdk-javadoc-zip-1.8.0.482.b08-1.el9.alma.1.noarch.rpm d1665a0e2c7d7440ada16a71ba16415ea2ae7ad001de712c7619cb874af50054 java-1.8.0-openjdk-devel-1.8.0.482.b08-1.el9.alma.1.x86_64.rpm e0f469c128eb257be4bd870999de18e35368bf30a489e1e600b7727c833c1dc5 java-1.8.0-openjdk-javadoc-1.8.0.482.b08-1.el9.alma.1.noarch.rpm fb04d6b0265ca8491c2b7ba3eef588a6f893083aebbbdbf01172e6e6e12db50f ALSA-2026:0933 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default java-25-openjdk-static-libs-25.0.2.0.10-1.el9.alma.1.x86_64.rpm 1116c3805616f718272779e2263ff9a34cecf840dc0b29c6cf11e15849c18428 java-25-openjdk-src-25.0.2.0.10-1.el9.alma.1.x86_64.rpm 23441725706dac0273dc975d92371b145339a1ac0f6717321df69112cc3a4e6e java-25-openjdk-25.0.2.0.10-1.el9.alma.1.x86_64.rpm 2b8b53d0568dfc37c866521b139e51b4d97ebfc2577ec21c557e8aca62d7bbf3 java-25-openjdk-headless-25.0.2.0.10-1.el9.alma.1.x86_64.rpm 36d0a698b379826777a33ea716ce600e906060d54a1d7e5f4c42d7b4fd4a8393 java-25-openjdk-javadoc-25.0.2.0.10-1.el9.alma.1.x86_64.rpm 95e51efd0540d3b17edfa95d8fa04bd4def7fb683b526094fbf90b6c5f699cfd java-25-openjdk-devel-25.0.2.0.10-1.el9.alma.1.x86_64.rpm a5a993271b27a92d508256930c8abe68b117f9599b9f2c9e4ef2f5ad9e3db947 java-25-openjdk-crypto-adapter-25.0.2.0.10-1.el9.alma.1.x86_64.rpm a687b3bc7c6654f1ce38324dd083155971fab657b88e13a6d7250d7d9034db31 java-25-openjdk-javadoc-zip-25.0.2.0.10-1.el9.alma.1.x86_64.rpm aa9641da13403697d40c1df590e9112757022135577fb32ce9797d4442fd4547 java-25-openjdk-jmods-25.0.2.0.10-1.el9.alma.1.x86_64.rpm ba055b7b9a8d9254da44d849aa05c497f0cf2c39a1c0788eab218d61ea75c257 java-25-openjdk-demo-25.0.2.0.10-1.el9.alma.1.x86_64.rpm e88dd57d1581aaebe13828e00896816e4f14c64d17e664df4f92e54b394693f0 ALSA-2026:0936 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default glib2-tests-2.68.4-18.el9_7.1.x86_64.rpm 2057ea7df53fa533695c8d0fdb4e2cff13cdcb34f9ccc459fdd6a93d569c8ea9 glib2-doc-2.68.4-18.el9_7.1.noarch.rpm 6c6a2d7e6276ee535a450ca9a72cd6b2b72f16a015e765b04ca6a049a1e9a5b1 glib2-devel-2.68.4-18.el9_7.1.x86_64.rpm d30751e2b66a54fe4db88a33891ab60b69083e1ed0a1366f5a622a4a52675538 glib2-devel-2.68.4-18.el9_7.1.i686.rpm e73b9fbeed84b044530411a1274d3572ff6dcca0ac50e6acb895f737e696e8b1 ALSA-2026:10135 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default buildah-1.41.8-3.el9_7.x86_64.rpm f251a0f0beb0ce9ae4ad236f739d1b6a0975222bd6a200bd1789ff8c8a137bed buildah-tests-1.41.8-3.el9_7.x86_64.rpm fbfd24bd304efccab2fd6f4e2aed48bcabb1a2c7a4c29a342dd60b873dcd47a9 ALSA-2026:10226 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Information disclosure of data-source passwords via public dashboards (CVE-2026-27877) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default grafana-10.2.6-20.el9_7.x86_64.rpm c36e77e33108340a97aa05d2469b44447f07b3553c6a6550755228de06b7d7e0 grafana-selinux-10.2.6-20.el9_7.x86_64.rpm f043191bcc123f866557fa4b48b48ae49b171866184ca585eb45d4b25918f213 ALSA-2026:10708 Copyright 2026 AlmaLinux OS 0 1 Important

gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gdk-pixbuf2-devel-2.42.6-6.el9_7.1.x86_64.rpm 46c07a60306fe8b13d64a751e3664d5dfb9e7e6e942bdd906c1413a84cd17b0b gdk-pixbuf2-modules-2.42.6-6.el9_7.1.i686.rpm 5679ff767378c29b38473c350e514ec13a2dfd2d523e6f0e9153992d1c759ce2 gdk-pixbuf2-devel-2.42.6-6.el9_7.1.i686.rpm 8feed3a1e30fa9c750fcd751521b71981c87f771e05db75c71acc21a1b0f4a2b gdk-pixbuf2-2.42.6-6.el9_7.1.i686.rpm a1d090a8b05ffbc6b7252e628dbd555feec8ac9bfede1e8fcfc864386a95a59e gdk-pixbuf2-modules-2.42.6-6.el9_7.1.x86_64.rpm a4aff183e7897a05f3b86795e0be1d4977c404e18f7872646badfde1a54f5d75 gdk-pixbuf2-2.42.6-6.el9_7.1.x86_64.rpm ba23690cc6a89a3cf59a537eb4dff938dc05c86d51bdb09d85404e0b1bfc8492 ALSA-2026:10739 Copyright 2026 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default tigervnc-license-1.15.0-6.el9_7.1.noarch.rpm 005a38e72a0b9894aa19c3c034f42447a4073f5f9b3ad8b87841ded9c8de8647 tigervnc-server-minimal-1.15.0-6.el9_7.1.x86_64.rpm 07a4a8f1a8b2c3fd57da96dd36c393a9ad0111fc6b5cfdf0d41a245bc9d58b50 tigervnc-1.15.0-6.el9_7.1.x86_64.rpm 19edbe2527d17651b7ae7ac04ddebf35d9ae72fbb917d94d3d3448e01adf7bca tigervnc-selinux-1.15.0-6.el9_7.1.noarch.rpm 1fd83a9aeafe3d2b0e2ce13bf6ec681a0ee8cfc847001cc628bd8105138c5560 tigervnc-icons-1.15.0-6.el9_7.1.noarch.rpm 40aef8541922e405fe3a7aab99933f17fc446a5e1226353e25fe1f359bd5f760 tigervnc-server-1.15.0-6.el9_7.1.x86_64.rpm c8ba922e72bd42ceeedaf5f2e695bc7a9f2a7b2d9b77393c85178015cefe2c5b tigervnc-server-module-1.15.0-6.el9_7.1.x86_64.rpm dd793b5631ca9f5da003028a0138e1e71af9641b074641fbc89aefa44f3f6354 ALSA-2026:10745 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.12-libs-3.12.12-4.el9_7.3.x86_64.rpm 249926e2f40769e0533c4b80e1d78d6e50cf2289fe2bd569c6228647f1ab0c2a python3.12-3.12.12-4.el9_7.3.x86_64.rpm 2e799fdc81b5e14c1087710d55387479806e1a5ba5fbba0fd3613404cf339bd7 python3.12-devel-3.12.12-4.el9_7.3.i686.rpm 4a59856e1586c4063d6365ce2bdbdbaeb8f1920f42ccc3dcddd42ac0316f1fea python3.12-libs-3.12.12-4.el9_7.3.i686.rpm 815c16b9e4baa02040cb497a07da6ae6242996340bc91366522fbb2c8e42f97d python3.12-devel-3.12.12-4.el9_7.3.x86_64.rpm 952efddb7db18bb41b216496ef538ada1fce83c3d1b8d5f7687ef0026dc49fbc python3.12-tkinter-3.12.12-4.el9_7.3.x86_64.rpm a7939a9befef11a03dacc4ef11de51b97594a71be517d580ee687f351269a1de ALSA-2026:10757 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754) * firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752) * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757) * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759) * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747) * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749) * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766) * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761) * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771) * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764) * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765) * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default firefox-x11-140.10.0-1.el9_7.alma.1.x86_64.rpm 4b1fb9cc53aa4ebe0bf8c073bf455da4774ad20275151c41830518e778401973 firefox-140.10.0-1.el9_7.alma.1.x86_64.rpm c91b8b4ca43493f6956f41bf549e5bddab02154ef0d6e215e940d3d7b57eca73 ALSA-2026:10774 Copyright 2026 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.11-libs-3.11.13-5.3.el9_7.x86_64.rpm 462bc12e21c0a1e168300d8512a3936fd26298bfd553c56b352b6378b90094d9 python3.11-libs-3.11.13-5.3.el9_7.i686.rpm 4d338ba38065305772cba961ffc9ae6079eaae46d705b415e0d76af61631fef2 python3.11-devel-3.11.13-5.3.el9_7.x86_64.rpm 73aff3aa6bce594b2c9fef59f8656f9a9ea699447e598b3258328fcd83b2aa92 python3.11-tkinter-3.11.13-5.3.el9_7.x86_64.rpm 8bad0695f6bc883cd122d2059606c17ba2ed064f6b8e6d8cc40f3aa2f0674afb python3.11-3.11.13-5.3.el9_7.x86_64.rpm 939e066090e3724599ced612ac64db275654a00001bcdbe986828dda92ec736f python3.11-devel-3.11.13-5.3.el9_7.i686.rpm b7f6784b2148ab027b75b214bd179f0c775755a19d6680a43e712e65fc9b2548 ALSA-2026:1088 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.12-urllib3-1.26.19-1.el9_7.1.noarch.rpm f2dfa0dfa555bd4576f1b672fa74ac00b98f720279157f2b1757be876c17e56d ALSA-2026:1089 Copyright 2026 AlmaLinux OS 0 1 Important

python3.11-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.11-urllib3-1.26.12-5.el9_7.1.noarch.rpm 6e373f5afd2a4649c04095e7c6eaa3f5e8fc5ff00f5ca28f18cbac8c0431ba56 ALSA-2026:10949 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-devel-3.9.25-3.el9_7.3.i686.rpm 2c2fe2a987c2f68e641bad7f7c331622c0340350b473f62d9a019f28fc27fbee python3-devel-3.9.25-3.el9_7.3.x86_64.rpm 2c7d3d2c7a14f05661b52509bce7040c0f60c0c9e63d5d91d49413df43210d6e python-unversioned-command-3.9.25-3.el9_7.3.noarch.rpm c5541934c80761357f3dfe9a92939bf309fbe7532439c6f05a4499c6d71150a6 python3-tkinter-3.9.25-3.el9_7.3.x86_64.rpm db062fd0f45e94288b11ac96c94c711e75ac2b9b69405d74930d857ce6b2cae7 ALSA-2026:11360 Copyright 2026 AlmaLinux OS 0 1 Important

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450) * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default LibRaw-0.21.1-2.el9_7.i686.rpm 3e23e852ea52b36c2e9cb0924f6b49fa0e35b910ca2e9c0fd41cec9099cbfdb6 LibRaw-0.21.1-2.el9_7.x86_64.rpm 8b0ae5a04c70ae7487c312d0771b5064bf96277ae1dacbd7485f0a73a4602af4 ALSA-2026:11369 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default xorg-x11-server-Xwayland-23.2.7-6.el9_7.x86_64.rpm f9feb48fd305ae8eb7883de3656042ecb4bfe8b0bf5d01c61361c91e031dea0d ALSA-2026:11388 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default xorg-x11-server-Xdmx-1.20.11-33.el9_7.x86_64.rpm 4f9583a21807cb2d2ae0a52a2544077367792c2160b3483630373c342cb426bb xorg-x11-server-Xvfb-1.20.11-33.el9_7.x86_64.rpm 58f0b97d83537c4d1f58fa504ecc693f3ab58333a28e3c748e0998972b470500 xorg-x11-server-Xephyr-1.20.11-33.el9_7.x86_64.rpm 92d2950e7eb5b3f07a11244af188216409ac7d44160c5cfe53dd72ecfb63dc46 xorg-x11-server-Xorg-1.20.11-33.el9_7.x86_64.rpm 992e55426bb04714795e01972157d2fa289e28b8510afde30197b120c8cb378a xorg-x11-server-Xnest-1.20.11-33.el9_7.x86_64.rpm d0441b5523da48847a4b58588c7ea237583e1e40000ec093b1f9086a47f70736 xorg-x11-server-common-1.20.11-33.el9_7.x86_64.rpm d5da19af398cc6b98f17fe2ce80cfe4cc710f3b7837a73ca561c9cfed47b885c ALSA-2026:1143 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141) * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349) * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731) * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248) * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258) * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294) * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301) * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-debug-devel-matched-5.14.0-611.26.1.el9_7.x86_64.rpm 0e438bf6398336da9c41efa4fa7b82cd77bc5903c4c63bcbc566ffcbd641ac4d kernel-devel-matched-5.14.0-611.26.1.el9_7.x86_64.rpm 2029ea07222fa2d91628d314dec4d3ab488b6800692966b535e593930028ef9c rv-5.14.0-611.26.1.el9_7.x86_64.rpm 24f8d002858ea760cc41f30da6fc7e4e85adfb3380c07d614c937ecd03f8df9f perf-5.14.0-611.26.1.el9_7.x86_64.rpm 4d73da35b9389109ebf7ca9edaeec17b2f2191e60381fdd88fade8cfe9562252 kernel-doc-5.14.0-611.26.1.el9_7.noarch.rpm 51197843401d1693a4f14257ce0b8959c5be5992f2aafac0a299c9ba1f4ec927 python3-perf-5.14.0-611.26.1.el9_7.x86_64.rpm 9bc26ba1d26fd8499295847d91d390b8ac67bff29f667cfb46d6ecde041efaa0 kernel-devel-5.14.0-611.26.1.el9_7.x86_64.rpm a58ec5fb57eeb27fde5ac88c52c54a80c167c1e112e8297faeb31e42ee46f884 rtla-5.14.0-611.26.1.el9_7.x86_64.rpm b9a40ddbf86d1fab4652975f1eb8e429652cd980fba38410b37a95f79364d8d1 kernel-debug-devel-5.14.0-611.26.1.el9_7.x86_64.rpm cb29c6ad809f586a381df88e4687c3b1be4da2f6c9b3d010f53c74c4f2448c4e kernel-headers-5.14.0-611.26.1.el9_7.x86_64.rpm ce9d5cc26d78674ab3273de4494d69dd84babdefae2293714ad857b65b34ea9d ALSA-2026:11504 Copyright 2026 AlmaLinux OS 0 1 Important

PackageKit security update

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default PackageKit-gtk3-module-1.2.6-2.el9_7.x86_64.rpm 07029d2dd75e0ecf8b5f504ce3891bf02aad8cb6ee513cf6897cd56a9d68064a PackageKit-command-not-found-1.2.6-2.el9_7.x86_64.rpm 25a83ef57e4d1ed00799f2ca25557434ff9ce7c931901ae30cb0926177dbde9b PackageKit-gstreamer-plugin-1.2.6-2.el9_7.x86_64.rpm 31d283944bfd0d604cadc68cc3622d7ce4efdfffe3a66ef90d7a477fe89af4fb PackageKit-glib-1.2.6-2.el9_7.x86_64.rpm 578c12abbe684305134e124d6cca186472d0f4512884877c59d5993efbf55d52 PackageKit-glib-1.2.6-2.el9_7.i686.rpm dc68ab4e066cfb687b09261e8a52f8b3ae13adee38decbbf3f5f6e102ee0d223 PackageKit-1.2.6-2.el9_7.x86_64.rpm e75df3f02c79964a1c2f49a7f6ea36f55b35115ae318ab327235144885a84cdb ALSA-2026:11510 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default vim-enhanced-8.2.2637-23.el9_7.3.x86_64.rpm 42356ec1afab4a71554442edb3f63f25e357d203589e2010fb041e1bc399aafb vim-common-8.2.2637-23.el9_7.3.x86_64.rpm 4c5daa2ff67c7d6850da8556b763fff9271a2009d90543eaea20565e5fafdb1e vim-X11-8.2.2637-23.el9_7.3.x86_64.rpm d903d7348ccf5ced3513810a75b8e8f593ba1f5968d1f180fc120b9bfc4051c1 ALSA-2026:12271 Copyright 2026 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libtiff-4.4.0-15.el9_7.3.i686.rpm 14340dbc06bf43171e481c312a1d783ca9220b98a8a0c4244cb84bf7ae493ce1 libtiff-devel-4.4.0-15.el9_7.3.x86_64.rpm c7848863a8f22392aea51d80cf49f5c56e5c76817153ecc240104ef3f225a17e libtiff-devel-4.4.0-15.el9_7.3.i686.rpm c96ea398a2ec06e922e8fadb26d1a036def86d7647314b22ebc9c294380fbdac libtiff-4.4.0-15.el9_7.3.x86_64.rpm d65fa9be7bd88aa247533b68d577476735f1ab7f59334ef460619d5734ca6c6e ALSA-2026:12310 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default sudo-python-plugin-1.9.5p2-15.el9_7.x86_64.rpm ee38024e7b7e8a9eae2c1dcbe54392517410def5032e37c7431300d32a72b670 ALSA-2026:1239 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418) * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default fence-agents-virsh-4.10.0-98.el9_7.4.noarch.rpm 0d610e37f5246d244b19b964a955fd204c908a418f3c1f2536b92147daf6e864 fence-agents-rhevm-4.10.0-98.el9_7.4.noarch.rpm 0db1baf79ebb2be2de9c5629ed4d35cfc743e3c11e90d4b9a2da1e15046bb8cd fence-agents-cisco-mds-4.10.0-98.el9_7.4.noarch.rpm 138f15e7b85701caa33bd10c03423a63b8019988506e977690f03a5bac79d008 fence-agents-bladecenter-4.10.0-98.el9_7.4.noarch.rpm 15732f541480add65f90255d2302497c4aaa4db28b51a7bb2631c1e743c4c300 fence-agents-ilo-moonshot-4.10.0-98.el9_7.4.noarch.rpm 161cfb14fea2f2aed70eff32076bcb07d62f7b0c8f7d97240d67b42bef3601da fence-agents-ibm-vpc-4.10.0-98.el9_7.4.noarch.rpm 1af8e6832deef48393b1409b2db5f4876ca3c78cca053cdfb304e386b7b7e669 fence-agents-apc-4.10.0-98.el9_7.4.noarch.rpm 1d76f9c447286267739762f7612088d49bdbbbda997ac040104307ad1710becf fence-agents-ilo2-4.10.0-98.el9_7.4.noarch.rpm 1db2a26c923c8a8f384ca86d8877e753897d53b662bf9cda7811d436718672ed fence-agents-ipdu-4.10.0-98.el9_7.4.noarch.rpm 248bc6380a6e11a7bb95b53ee7b2f5d97c4a4100a8f3661978cfb4fe80623f21 fence-agents-azure-arm-4.10.0-98.el9_7.4.x86_64.rpm 25bc10448ee29d49e26f9324e80151552e719dc9343095b270735f62a71741d9 fence-agents-eaton-snmp-4.10.0-98.el9_7.4.noarch.rpm 2df1dc85dd928062fb8526e3fcb6702eb26d471cdc964d20c48c057cc6c1a3c2 fence-virtd-libvirt-4.10.0-98.el9_7.4.x86_64.rpm 2e038ab2919e708281ecfa713676ca4d0758f29bbbaa885fbcce37059fb737b6 fence-agents-ibmblade-4.10.0-98.el9_7.4.noarch.rpm 2e9c11a01af961daac3dffb5019138d05524992221548997843fd4ca87f2a021 fence-agents-redfish-4.10.0-98.el9_7.4.x86_64.rpm 2eb4cc85bfb1220f6f5eef921452b3a949046592cd507f467d56f2b1e1be50a5 ha-cloud-support-4.10.0-98.el9_7.4.x86_64.rpm 339f6b85ba4748abae0eac0e1b5de92e29d0db508e3f4db08cabefe7ce2556c0 fence-agents-nutanix-ahv-4.10.0-98.el9_7.4.noarch.rpm 35a5b8f4e58c100db4d18c2abf025c5df05835ae62c328a35c3267cd162198f1 fence-agents-sbd-4.10.0-98.el9_7.4.noarch.rpm 4ad7a464a4aa963a7f661ae36c98566f15e462fcb3b617bf82810f7cc3b0c2dc fence-virtd-serial-4.10.0-98.el9_7.4.x86_64.rpm 52ae7da18f947b37e9a8e5d0fb092c171309b6f70ca1a9c269fb70f1988fd08a fence-agents-mpath-4.10.0-98.el9_7.4.noarch.rpm 5ef29a003c601fc5a6433efd6a69f7dd36d9062edafcc5106f7bd68c0bfd7ff8 fence-agents-emerson-4.10.0-98.el9_7.4.noarch.rpm 5fa9769156f3e6e84604cb82f1c305733cbcc70bca5832efa03b84f4fda7f7ff fence-agents-wti-4.10.0-98.el9_7.4.noarch.rpm 65c08d857e44b117c1af02f73420937807f9e296d2eb54b48cda5a65e35a6bee fence-agents-scsi-4.10.0-98.el9_7.4.noarch.rpm 6c637a686491d56ddeabee447596f3c9e4f88d460084ed0b29d7d9fce2256084 fence-agents-aliyun-4.10.0-98.el9_7.4.x86_64.rpm 7205723406fdd97b347e9c015bf87d968df7843afb964e05ff65a53df1a9d540 fence-agents-drac5-4.10.0-98.el9_7.4.noarch.rpm 7b7f3ef958a387a25f05ccf0e8588049fd8c21ee8cb4c758f984f23bc8f28095 fence-agents-lpar-4.10.0-98.el9_7.4.noarch.rpm 81c2e55c3a81389b8bf84c689516d902115215f984aea5df9f7182e7cb81c80d fence-agents-rsa-4.10.0-98.el9_7.4.noarch.rpm 84b0abaeabd4e2abf041f9e3a392f0b68816c9124b9fc77d69b334ea8a7a1c8b fence-agents-all-4.10.0-98.el9_7.4.x86_64.rpm 85e4e6100d2275774370895f06a49aadb2d86cf84066a5167d9f264a8548fdfb fence-agents-ilo-mp-4.10.0-98.el9_7.4.noarch.rpm 91f77135bdeb78abb48be05ca6b92a3198003c2cf2bd151683465e5fde87df07 fence-agents-hpblade-4.10.0-98.el9_7.4.noarch.rpm 929eae774ce4309db511bebe9b9bdcb417c23b5f234075a0a99335937ceb893c fence-agents-aws-4.10.0-98.el9_7.4.x86_64.rpm a300cf741d747c3a0bc21f36fad19cbf1eb1cb9b5437b7a9192929906237b00f fence-agents-cisco-ucs-4.10.0-98.el9_7.4.noarch.rpm a51e6aaa970c97d56e2f77832b2726c1b099f927b1625c11a0b2b067d5b58320 fence-agents-kubevirt-4.10.0-98.el9_7.4.x86_64.rpm ab720585d1f080ab538ab88acdcf7e179c60eda37667486ee6f0daa4ce713787 fence-agents-eps-4.10.0-98.el9_7.4.noarch.rpm ac139153f7f3e3d9b6db9113bf74dcb4d628083c0923bfd97a195b9bf9c1e6cc fence-agents-vmware-rest-4.10.0-98.el9_7.4.noarch.rpm b2f95060d4c89c0cffb8afea8b5896a680f85c69f2c084c707fc68e362229b20 fence-agents-openstack-4.10.0-98.el9_7.4.x86_64.rpm b4691602ad3cfa7ae72c46639210e61831f20606258ad948f69d6913b73554c9 fence-virtd-multicast-4.10.0-98.el9_7.4.x86_64.rpm b49a2e001a9c9ad4be16aa24b039abd1b27678474ea4dcb83f835b9042275d0f fence-agents-ibm-powervs-4.10.0-98.el9_7.4.noarch.rpm b6b52bc2673ea6f29d767a04d05023d71b94a86503e3d83e1b9560feb925d784 fence-agents-heuristics-ping-4.10.0-98.el9_7.4.noarch.rpm bfe4bd12ee15ef6acacd8a2b7884ab2866f6fc54865798db118e029c9802ceb9 fence-virtd-tcp-4.10.0-98.el9_7.4.x86_64.rpm c7c10478265354209e4bde3f5171794064aca22240c76a838ee77e427f63b25c fence-virtd-4.10.0-98.el9_7.4.x86_64.rpm ca3bce66a4716d6d09751effff82a2378d97b7500d6c41acd680c324237c7158 fence-agents-brocade-4.10.0-98.el9_7.4.noarch.rpm cbf8f508c639699281b4f259ddd4ab1ebdd78b960bd0e3601e26204a332112a2 fence-agents-ilo-ssh-4.10.0-98.el9_7.4.noarch.rpm cd92a1ba43deda5065815657e7b779a1b690407d2148739dc98e5f0ea4ab4a67 fence-agents-rsb-4.10.0-98.el9_7.4.noarch.rpm d0e454e0fbd0ce0dd6cdadab555dd2e295eecea15b765da92502b2924949f6e3 fence-agents-apc-snmp-4.10.0-98.el9_7.4.noarch.rpm d493b61707a277cd9449c39dedf737343f703984fedef60432da77905fce9935 fence-agents-compute-4.10.0-98.el9_7.4.x86_64.rpm de25d33f7d13e6a920051d87e56985692022f9dcc8f922005739491be61085d6 fence-agents-intelmodular-4.10.0-98.el9_7.4.noarch.rpm e2c6f75415feb280636a2f193880cb5d8321c585ebe6234914167834cf9f3e03 fence-agents-kdump-4.10.0-98.el9_7.4.x86_64.rpm e33b9218467098f1a992d043c0d834e9b0372295edb9d855c84e6b8b174606b4 fence-virtd-cpg-4.10.0-98.el9_7.4.x86_64.rpm e4357251c45d78f702cfb7bdcafdeb402612cfb1660cb3f43411383917c58ace fence-virt-4.10.0-98.el9_7.4.x86_64.rpm ef98bdc65fc5066ccce2f3f86242407fcb24ddc841e65d257b76efc84068d469 fence-agents-amt-ws-4.10.0-98.el9_7.4.noarch.rpm f0008dfc354d3719ba8d6fb2582af93d6178de9472f214efa2cad397e217d5c1 fence-agents-ipmilan-4.10.0-98.el9_7.4.noarch.rpm f25fe64093983d35c93af92b65f1a5cf3b400a6497864d649b66c1b81f783cb5 fence-agents-gce-4.10.0-98.el9_7.4.x86_64.rpm f3adf37f7ba39bae072d45042a2b0c093b5be93cc8786a73b51648f58bbcb83d fence-agents-ifmib-4.10.0-98.el9_7.4.noarch.rpm f4bdca6681831d57531894ce067ea312806e127fe4ffdfdee2c930c6f10c24bb fence-agents-common-4.10.0-98.el9_7.4.noarch.rpm fcf6e0bb5baacc7b57ba77267159a07e5082b456e81e0047fca0436197da7391 fence-agents-vmware-soap-4.10.0-98.el9_7.4.noarch.rpm ffc483c10f2741ed9dec2c88dac50a33b92bbd649523e2af48ff215225bbed57 ALSA-2026:12441 Copyright 2026 AlmaLinux OS 0 1 Important

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libcap-devel-2.48-10.el9_7.1.x86_64.rpm 355e92d4668fed963e1d8db10bfbd15dd227ec6d3a595aa6d73fc0baa93e2e06 libcap-devel-2.48-10.el9_7.1.i686.rpm 9821656967cef516935c8fcf6cd2cc19d333de9f9d8d26ef728eecbcecdc10ed ALSA-2026:13381 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385) * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414) * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387) * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388) * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default openssh-askpass-8.7p1-49.el9_7.alma.1.x86_64.rpm 4f704de3857bf18c688e7ac70ad9519a50dc5a9d6584a089538703d790efc6b4 pam_ssh_agent_auth-0.10.4-5.49.el9_7.alma.1.x86_64.rpm 8136fbfcfbcaca1fd0e9fbdd23a49de0f560d210d6b70ec51cb6a4b1a832ab73 ALSA-2026:1350 Copyright 2026 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: libcurl: Curl out of bounds read for cookie path (CVE-2025-9086) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libcurl-devel-7.76.1-35.el9_7.3.i686.rpm 7fceca894e1dff344a7da0332ce52aa5e24ad0690cf7529d64cd5f2e99a80990 libcurl-devel-7.76.1-35.el9_7.3.x86_64.rpm cc8b45d4006db2ca163594cdca1de7b800e5b0bab95059d4b0ad872fe1916e12 ALSA-2026:13565 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-debug-devel-matched-5.14.0-611.54.1.el9_7.x86_64.rpm 2dc7cfae9ca0a271ae279f77b5dd49edb4ab63de9492c8058951afed243dd070 kernel-devel-matched-5.14.0-611.54.1.el9_7.x86_64.rpm 33011bc3055d82c5f76f30d86bf16f86303d8105971ff562b8dd358e4c549a70 python3-perf-5.14.0-611.54.1.el9_7.x86_64.rpm 4d3b8f73c71b8edf7aba7ee1328a24aa9ab2a9e8596617674fd50bc89c153348 kernel-devel-5.14.0-611.54.1.el9_7.x86_64.rpm 4d843c0a48e78bb6a5b273f128b61d5e2e4cd4168a1e729e5c1935e2c97ab5e2 kernel-debug-devel-5.14.0-611.54.1.el9_7.x86_64.rpm 54d4cd72e39129a332c707fb47149f0b7d154fce1de34cb6f90b96d26328006e rtla-5.14.0-611.54.1.el9_7.x86_64.rpm 6a768d601e624ffeb0cf7d9209def17ea93af99a765dfd557ef5aa5cbe4071c0 rv-5.14.0-611.54.1.el9_7.x86_64.rpm 9b61f9f810e430cdd4ce01e5a28c2a4de94df1d0236cc3685688b4012d7ad259 kernel-doc-5.14.0-611.54.1.el9_7.noarch.rpm a47f1fe87fcb370c626b0ced74419df26af2133d618e5ed0ea026f11b0c55b7f kernel-headers-5.14.0-611.54.1.el9_7.x86_64.rpm c6e2ac047eca85b5c5246181e4098c0b793f578e3dd419c4cc999d06eb22fb10 perf-5.14.0-611.54.1.el9_7.x86_64.rpm cf9da3612c329ae99cd09327ff8c18939b005393e9d8c7e1bc035179e19619b4 ALSA-2026:1359 Copyright 2026 AlmaLinux OS 0 1 Moderate

gcc-toolset-15-binutils security update

Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gcc-toolset-15-binutils-gold-2.44-3.el9_7.1.x86_64.rpm 10397aa4f95283e82fc127fbee187c377f309623f7a893b61fccb79fa3b9087c gcc-toolset-15-binutils-gprofng-2.44-3.el9_7.1.x86_64.rpm 3a5b3683b73f82fca9ef506cd646f77670f1f88d78267f7e1bfafb46efedaa53 gcc-toolset-15-binutils-2.44-3.el9_7.1.x86_64.rpm 4a91584c12af255b90597995a74d4ae2cb86f625792848cdad491a8288efffb2 gcc-toolset-15-binutils-devel-2.44-3.el9_7.1.i686.rpm 83a014c2781176b756f846c00b28b0c18456391c192af333bf24c1ea261f588b gcc-toolset-15-binutils-devel-2.44-3.el9_7.1.x86_64.rpm f401419553acf63999713945face3dc562712fc278ba51ee834a599c7c6dbb0f ALSA-2026:13670 Copyright 2026 AlmaLinux OS 0 1 Moderate

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado-python: Tornado: Denial of Service via large multipart bodies (CVE-2026-31958) * tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments (CVE-2026-35536) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-tornado-6.5.5-1.el9_7.1.x86_64.rpm 756bdb24f9430c5ab77412cda741c156ea4078a95fe821435e01e997715c84aa ALSA-2026:13671 Copyright 2026 AlmaLinux OS 0 1 Important

image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default image-builder-31-4.el9_7.x86_64.rpm bcbe5267ca64ab4853d519382408b373df40e93383b6b7c222f73092b86891a8 ALSA-2026:13673 Copyright 2026 AlmaLinux OS 0 1 Moderate

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default corosynclib-3.1.9-2.el9_7.1.x86_64.rpm 37037bff26d4ed18c83af195707a964f7474d8bbaab2da0bdc812ebd21527f14 corosynclib-3.1.9-2.el9_7.1.i686.rpm 442fe31a04a4787d160330b0a0c2a5608b458e355c68c3f27a5c0360bd4e30b9 ALSA-2026:13677 Copyright 2026 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data (CVE-2026-29111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default systemd-devel-252-55.el9_7.9.alma.1.i686.rpm 33539cf3d7709fd9c25a14e49131b904aa8ffb41332c1151257e8a2592c185ea systemd-journal-remote-252-55.el9_7.9.alma.1.x86_64.rpm a8d0b9e19d2369fb86d2473e50548556d9048aa4115fdf0581308b8507e14d0e systemd-devel-252-55.el9_7.9.alma.1.x86_64.rpm d85061a55126ce99adf0281bcf9c1baf29410af0cbcd82c4d47049202267b56e systemd-ukify-252-55.el9_7.9.alma.1.noarch.rpm eb0c56d9e5f50d2d4c4af3aa464932d68bbb03711959541a90250d3678a0578c systemd-boot-unsigned-252-55.el9_7.9.alma.1.x86_64.rpm fab62cac0d7a2706e8f18c40bcd3aba31eda954bb0223c70bf7863fec00416e6 ALSA-2026:1377 Copyright 2026 AlmaLinux OS 0 1 Moderate

image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default image-builder-31-2.el9_7.x86_64.rpm f8839eb064a81394eb0cd715f83f78928a3a49157edfefcf6640afa2d29a4beb ALSA-2026:1381 Copyright 2026 AlmaLinux OS 0 1 Moderate

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default osbuild-composer-worker-149-3.el9_7.alma.3.x86_64.rpm 55cade98755101578398bc3e244c235ccb4f5a5cd3abfd62aef38c0cd47de7c1 osbuild-composer-149-3.el9_7.alma.3.x86_64.rpm 9b9dc7b1de8f68fe487312933bb7a00f0d8f1c65fe7508788332d7900eb1654a osbuild-composer-core-149-3.el9_7.alma.3.x86_64.rpm a145b3a9931a8171c76643eaaf78a7ea283a1c3a2a186183a62c2466a3fa5fc6 ALSA-2026:13857 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032) * dovecot: denial of service via crafted message before authentication (CVE-2026-27858) * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default dovecot-2.3.16-15.el9_7.1.x86_64.rpm 0dac577d4ab44f86349831428a08413b87a4f6c6ece05279985bac1cde58f75b dovecot-pigeonhole-2.3.16-15.el9_7.1.x86_64.rpm 2a8b78de95968e78eab74aa0891e31814c6c1c32c3ba71cac55379f9b60f984a dovecot-mysql-2.3.16-15.el9_7.1.x86_64.rpm 80130978a6080a30cb2961b883d515b582b841455129ae3bd0a48a060ad787e5 dovecot-pgsql-2.3.16-15.el9_7.1.x86_64.rpm c5efeee63e4e46a6989bdacda735a1c4ec93dc7e79fa6c0d2f2a3dd3d5983236 ALSA-2026:13917 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default fence-agents-lpar-4.10.0-98.el9_7.13.noarch.rpm 0519341423bd54e50d7d9f1cf8d1290635ca6a8fc8bfbb8396827b1b13a22883 fence-agents-sbd-4.10.0-98.el9_7.13.noarch.rpm 1006b2f604db3e736ac80c60cca1583f69cd1f2d6816183db5113b34036a5c11 fence-agents-emerson-4.10.0-98.el9_7.13.noarch.rpm 14d2737b0a2b6862afcbc75fed0f1683862ddb264a24e1b512797e4313c022d6 fence-agents-ibmblade-4.10.0-98.el9_7.13.noarch.rpm 15820041105e708b74d2c5328dc412bbd1382d53e172e5c3847a5a9680b85142 fence-agents-ilo-mp-4.10.0-98.el9_7.13.noarch.rpm 15f2bbc8651f16903d0d9a5b3b7b79f82a2faac3b3b60fd8f8cbd96e0b9cca14 fence-agents-apc-snmp-4.10.0-98.el9_7.13.noarch.rpm 17a1caa47085fe26e4e2808c40b7c984242909e1fb9935fc3b04d2c739266fc3 fence-agents-brocade-4.10.0-98.el9_7.13.noarch.rpm 19ddb9dc5cb6a82fcb9af6e73ceedba12e93e47371734ada9703f9ae63fa8822 fence-agents-apc-4.10.0-98.el9_7.13.noarch.rpm 1cb956ecb963c872f18ac872e7070f4eb373f181fcdea3e2899ddefe2b6fd6bc fence-agents-compute-4.10.0-98.el9_7.13.x86_64.rpm 1d09b670671c33f5240082ee9270e6d705c42ee53526305395d5fecce4c21311 fence-agents-all-4.10.0-98.el9_7.13.x86_64.rpm 20cb55382764647fd6eb4af8d00c2c9e1f6aabaed9d92be7a181c47cbdb41bd7 fence-agents-drac5-4.10.0-98.el9_7.13.noarch.rpm 21f8ab091340e3b7a7b2adef32f04097336574979b4b4640b663e490ffa93615 fence-virtd-tcp-4.10.0-98.el9_7.13.x86_64.rpm 282b5f8a2a000494ef4b8c949904403116fd30bd3bdc45b86b7190b728ac88ac fence-agents-aliyun-4.10.0-98.el9_7.13.x86_64.rpm 37f4d4415e52cd7518d17fc6dfeeeef22f0ea9301430a1e67e50c52a1b066e7b fence-agents-cisco-ucs-4.10.0-98.el9_7.13.noarch.rpm 3a8e0d5394bd53da1054905fb43b386e1960370f1400edfe183c3d03239703c0 fence-agents-aws-4.10.0-98.el9_7.13.x86_64.rpm 3f34f1cf21871a1e92ad08bdc0353a3d8ef8e1991f0e68398e641cfedff59dd4 fence-agents-ibm-vpc-4.10.0-98.el9_7.13.noarch.rpm 41f7b096b4b3f07c1f00bd93d4c38c36a5b59c5da2fcfc51032369f80a6018ca fence-agents-gce-4.10.0-98.el9_7.13.x86_64.rpm 45325d30a99e641ff457c881d00be1e6cca53ee2424570b4ed7328183da08e72 fence-agents-eaton-snmp-4.10.0-98.el9_7.13.noarch.rpm 472971420b4fd2ffb16f5cf94f84f169b1c203f90e1d30cfedad7485cafbf3ec fence-agents-vmware-rest-4.10.0-98.el9_7.13.noarch.rpm 514874272753bb7d471cb1d6f7d972402f2500bad2e0864841249a2aa7112368 fence-agents-ibm-powervs-4.10.0-98.el9_7.13.noarch.rpm 53c19ec6593e6a49a12b88627fb2e4662d93f710fda4ca7607049adde2d2bbc6 fence-virtd-libvirt-4.10.0-98.el9_7.13.x86_64.rpm 5599c81720f1da548142dfd4a8deb1d5a0faa6d8cddbc8712fc3763a70fcf140 fence-agents-ipmilan-4.10.0-98.el9_7.13.noarch.rpm 588379f7ffa02a9a5415e7bd565032c0e1a7503a5d8850a1ada195cbf049e3ba fence-agents-ilo-ssh-4.10.0-98.el9_7.13.noarch.rpm 58fb9408a734dbfef9ade8ced8dddc9fa6b335ddba0ff987cc0fe3e1cd26872c fence-agents-cisco-mds-4.10.0-98.el9_7.13.noarch.rpm 5929ed9011ebcdfcd0193318beeab6efd99e6668cc74db2ddc9a22aeb60cf5d6 ha-cloud-support-4.10.0-98.el9_7.13.x86_64.rpm 5d527e078d3320a5516ed4be2c96860323f6905a10dba2167a66682b7558c88b fence-agents-bladecenter-4.10.0-98.el9_7.13.noarch.rpm 5f1740d1e3182b6d0940f4237bfa37ff6a9512f39ada84661cef40abf7e26647 fence-virt-4.10.0-98.el9_7.13.x86_64.rpm 5f1f430b3a8a6814333ecb143351e99b22f2ec72f2b760fd90253efe75b974a8 fence-agents-azure-arm-4.10.0-98.el9_7.13.x86_64.rpm 66701c77f45eb3820a9561e40e818a92081bba074f23de7c9d93db1678f82764 fence-agents-rhevm-4.10.0-98.el9_7.13.noarch.rpm 6c9e4fca99f3693041cec59a712e8dee57832c14f6744ccae48f4d60fbe184d6 fence-agents-mpath-4.10.0-98.el9_7.13.noarch.rpm 7ac42a2ef1095405d2c439a31cd72b0e2ee686cd35e9a2fa20fb41c5981454fa fence-virtd-cpg-4.10.0-98.el9_7.13.x86_64.rpm 7c09c470ebeb6dc5d101ebda95a30b78081c29ab85f8364804f0e8a8d2469997 fence-agents-virsh-4.10.0-98.el9_7.13.noarch.rpm 7d5cd68fae30b6ca4f6562102b29a46e723299ba0c7ec77d25af7ca333576762 fence-virtd-4.10.0-98.el9_7.13.x86_64.rpm 7e7946933b9e808d43a6d01f62f5ebfc9223796a5e73e270a16595967164ba1a fence-agents-rsa-4.10.0-98.el9_7.13.noarch.rpm 803b2c9a8f70a58cbdf18b2647e85608ea55d6e964e8ac31fa2ce970db76619c fence-agents-kubevirt-4.10.0-98.el9_7.13.x86_64.rpm 80ec22e8b35d7fb0bd9ddda740d017a618ad3f9d4b859f207d743ee64b0176a3 fence-agents-redfish-4.10.0-98.el9_7.13.x86_64.rpm 85a46d185920c9efcb685b3e946f201ca8d0a77cb7a70b234ef8ff914df86a14 fence-agents-rsb-4.10.0-98.el9_7.13.noarch.rpm 8cc74c41cab822a3cbb3502927721123f1d4b6913690d69a33cc6dae21ee84e7 fence-agents-wti-4.10.0-98.el9_7.13.noarch.rpm 951e5068d4dda21798229794777398178ffa4d06fb19409b322b5c876f84391a fence-agents-intelmodular-4.10.0-98.el9_7.13.noarch.rpm 9f1f11517c75580b929f7bec26ee9251fe6b783fb9af5b7370a831170596cf1c fence-agents-scsi-4.10.0-98.el9_7.13.noarch.rpm a9331372668be69b5c14349d988bb229db6097f36bbc60e7ffd4b0d60b2d047b fence-agents-kdump-4.10.0-98.el9_7.13.x86_64.rpm aafdc3682796fb348cd661c9b2b212ee197af6d0f6eb9afd41485fb9fbef8104 fence-agents-amt-ws-4.10.0-98.el9_7.13.noarch.rpm b67705002ee1607aff425a381a976f474e27174787771cf1246aecf3de033003 fence-agents-ifmib-4.10.0-98.el9_7.13.noarch.rpm b7a5835e6df1631853e063a32755510fb6a51f8731227cb348133bd4c3f31f05 fence-agents-common-4.10.0-98.el9_7.13.noarch.rpm bc0bc285791f3ab5c13f9b7dfde0d0e46fc03ace2eb03b5a594725fe2c66912c fence-agents-ilo2-4.10.0-98.el9_7.13.noarch.rpm be0200c439b6dc6e4042a6a41c9041491e9be10ae248caedab103f62f62707c4 fence-agents-heuristics-ping-4.10.0-98.el9_7.13.noarch.rpm bf9b98be119b58ba74e89376c86e6976367c18108087f02353d2d24abf13a6d1 fence-virtd-serial-4.10.0-98.el9_7.13.x86_64.rpm c0fe954dee545af2923bb2dbe480438b5290b133ba055ffef774366e8e9f255e fence-agents-vmware-soap-4.10.0-98.el9_7.13.noarch.rpm ccc716496fcc3bf8e5aa784e399b213e8a30b092869e658dc1b2054842767557 fence-agents-openstack-4.10.0-98.el9_7.13.x86_64.rpm cfba34a69e41365d7a8f55edcf472e17c48c9f7d50b73434b10d04c3209e77cd fence-agents-ilo-moonshot-4.10.0-98.el9_7.13.noarch.rpm de95d74a88bc3023389bf160f3013227682d84d218d3587e59f3762dce55ce2d fence-agents-eps-4.10.0-98.el9_7.13.noarch.rpm e0ae9f5ed3e374fe2ff4fe53efdc75fd7c8021f1395dfc67653f47592916e486 fence-agents-hpblade-4.10.0-98.el9_7.13.noarch.rpm e79b2c3e3e073d96d868016a8141d855179e565f3c139e6698dfffb03e647d32 fence-agents-nutanix-ahv-4.10.0-98.el9_7.13.noarch.rpm f5cfd39dbe3dc9289fbf906accc85edfe33a23486c6e474daff088d34a36f277 fence-virtd-multicast-4.10.0-98.el9_7.13.x86_64.rpm f659ce2c7cf0b4555757de83ef5a45bd402865bf8966d4126777d3a761dcfabb fence-agents-ipdu-4.10.0-98.el9_7.13.noarch.rpm f955905b08c233f57eb9dab3797b722bd5a54554e073a332d56a0e58fd777825 ALSA-2026:13978 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libsoup-devel-2.72.0-12.el9_7.6.i686.rpm 3b33050a93102fd7545a1dd56e7e7d29eebfccbc07f3ebabf0e897eee9fcc413 libsoup-devel-2.72.0-12.el9_7.6.x86_64.rpm 7296ff4d2e175a0e6d48ca2bfa1a33b53ce02e6bee2315a7d10bd2d620afcddc libsoup-2.72.0-12.el9_7.6.i686.rpm e01b04c39c552e2e8e0827abe1acd277f193e57f04d6a02be7655de2625a7e8a libsoup-2.72.0-12.el9_7.6.x86_64.rpm ea98827e6bcdadf471015e85f3310e5caf328b8659b80352611f339baba435eb ALSA-2026:1408 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836) * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.12-libs-3.12.12-4.el9_7.x86_64.rpm 1e5c8d0d055c7c8d9f66f2bb04ca3ca151e982fcaff821fdedb405c6309e5f20 python3.12-tkinter-3.12.12-4.el9_7.x86_64.rpm 325531e527fc4377016088b144ed74253d65b03138823f76eac1bcb0876759a7 python3.12-libs-3.12.12-4.el9_7.i686.rpm 34057a5f64d9a440b87c2413b9a993ab89214418d4b933030b709c47c2a6f668 python3.12-devel-3.12.12-4.el9_7.x86_64.rpm a5be896edecbb9383f9525ce27f7020d7bc9cf42f58472db20ddf71baa7e9d69 python3.12-3.12.12-4.el9_7.x86_64.rpm bb2e5182bc06f1c1cfbc958ec36d8a47b7af1b78a81252b5bd9f3b2002c668b5 python3.12-devel-3.12.12-4.el9_7.i686.rpm c3ecc8dd5acf87e708cdf88007bc452d5d66ecc9933692f5c3f6031e4f0741a4 ALSA-2026:1409 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: pgsql extension does not check for errors during escaping (CVE-2025-1735) * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491) * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220) * php: heap-based buffer overflow in array_merge() (CVE-2025-14178) * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177) * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default php-pdo-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 039711d9bf19514a0bb5a9dc55982dbab7d90bb3003eecea299d5a7187c7763d php-odbc-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 0d5d73553f941ea91b9f862681e970c91371389d1932858b469ed00c3fdb3533 php-xml-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 17649711d1aaa44b64a6391528db9a56db34a787cfd8f7cfb552c1f74bb0dcda php-intl-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 229f012ff02faeb0a96df1a5d6886f00a5c12d1eff6c823941b3fc310902dde9 php-gmp-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 279ad4ac2a55b79569dc083aecc557f780a140a5a6a2449c1da033c9fb138116 php-enchant-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 3362cf05296d6abeacdc1970309ce3c9bad5e56608ec571979cd0b9961f7cb0c php-cli-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 3465921f67d97f530fc228bbecd227d9bb4a24ddd1df6cf6bd2793da8e183950 php-mbstring-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 35b510a086ea4ad9f1a2a2162be65caddc3489a3fb09fce4377601a5b8712b85 php-gd-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 3e6a0cea6aa445e798bae6e06e06c1dfd23cbf4b973f40cab3a172fca6acff44 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-ffi-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 4d83de4db29943781e5da2aad72d2eef42aa873eb1e079647e302b8894d90cb4 php-ldap-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 57689237670e0f858cc3ad3d6a363ac868f37a8536093751422083b4d5ef65d6 php-snmp-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 6339c8bd7d84b4a84630686dd4755b28cf560a72bd42dc948c3772d87e094bfa php-dba-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 752bc3adfde552f6468cec855eae7a68caa536718bfa6bfb3c5526e34fe85ce1 php-embedded-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 7a6e5fc5768c7c673426ab27eabdd3a77547302cba10d94cbd5901290bbbff98 php-fpm-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 7af16807e599e4df13243b59fc33eb1567456d4e504f934763e9f5cba60afe5b php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff php-soap-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm 81b1ac5910902feefd448b6b1638ce2202c2f0edb787c642838a07325dbb63e7 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm 96cc987054e929ded9dfb18f35b9c6912a9df307b6e6ffee3c409f85bafa2181 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.x86_64.rpm a05a23d56973cbb28cd6df434887268ea519defa51e9176928b1f6859bdd33f8 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.x86_64.rpm a0c7dad446e919bbb42213de89f00d65f58b08c51e4e1ab382707c3324627f7a php-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm ac232aa314397693598037141decec206119dc5add0f2c9f30791700e9c0e038 php-common-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm b07a7448a0a926b40a3c9bdebf1c6899568825bf0d460e498d78e5f5cda16123 php-pgsql-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm b07c35469ce5f913c01b841b56643f5a937d9da7b508e2c031ada4b609681c48 php-dbg-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm b1536b1e0556959592c5e74f0414c38066b3af6eb2ae717b86857620a9118cf9 php-bcmath-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm b71c69ed0a1713a30d4bc5326b3e788e2b47c695e4160df4c353dda03e978465 php-devel-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm ce56045f422f2ad4d0adecd0a46f1df26d8beeaf8ca3da783e13fcbf7c652a9f php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm d4536864003ca10535ac907cbcc199da8c73c8b16a66b52aaeb1431f587b1ea0 php-process-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm d6a953111045fa6d45e9ea6af4496b72e15087422572567d0b18d90e2fedd5f3 php-mysqlnd-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm f511a646d5ab0f0b03492f6dd36984457b3ed2c07f7a43c9d3996cf0d32b47cf php-opcache-8.2.30-1.module_el9.7.0+205+fe410f10.x86_64.rpm fa5e267e25d34e5e919dc5cadbe54397a42bcf7c9ad3f075d614ba258abbe3d5 ALSA-2026:1410 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836) * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.11-tkinter-3.11.13-5.el9_7.x86_64.rpm 228f8d7c46a15d20425ef0b9f2aba9592969aebc75eb440cb6d20879fa5a74cc python3.11-devel-3.11.13-5.el9_7.i686.rpm 2c53ff6dcf940c64ff6c3be26e0c481879e28ea1d74ffd1f0ea698db9db31b3b python3.11-libs-3.11.13-5.el9_7.i686.rpm 6de54d3387a7fe6e93bc618018a39902c127ad36c56eb6856ec95237e23d697f python3.11-3.11.13-5.el9_7.x86_64.rpm 75e207ff6c39b42ede2322fe0f6e27be8c1209f3be040b6a09fce608e32157bf python3.11-devel-3.11.13-5.el9_7.x86_64.rpm 83a6bc133f320c2f1751220d1d7ae45382777288109d54db61d2c15e575bcd00 python3.11-libs-3.11.13-5.el9_7.x86_64.rpm e6e551b27a22cefc371cea92f3f84692f328c4a625c4f81b41d6d19bf2a8f345 ALSA-2026:14200 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default git-lfs-3.6.1-8.el9_7.1.x86_64.rpm 90a8511e8f280460d6f2ea916e499d1bc0c47b89e9b6c6519e2b202a6dc9bc39 ALSA-2026:1429 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: heap-based buffer overflow in array_merge() (CVE-2025-14178) * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177) * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default php-soap-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 08304100d4667fe6e750165ab0cede0cfc08f0ec1bf4f003ed451a2e2e3de360 php-mysqlnd-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 0c6d914bf19cb2e5bcd3d179a2a3e323dadd3cde9a10758dc8bdbada49bc7ac5 php-pgsql-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 1bc8148b50d714860592cc3642d66fe8ab72437351351204a16dc8762b35c63d php-pdo-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 1bfab55d6feed5ec75abecf4c3cbceff0165484f79fa5884218bff1fde989a1c php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.x86_64.rpm 1e95a29597aa5c8b102c97a7d8fe608712e1a7ac5f33086477259cdfd802117b php-ldap-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 1ea66a5e0bb4a9bab52e06d5d126bad392f6186d2ff1d4fd76d81f84c152ca5d php-embedded-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 28a5e058d2e840d85cf50f86dcbcfe04f508f1b3e9b6aae61d21f04a15245116 php-odbc-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 301401549beb98f98ef696087ff7af67366220f861d4eb873a295d6db63b8f67 php-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 3809d0e977042c89fba1f4a55e665e970de57bc4cf0848816a31eed95d6a2f8e php-devel-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 3a676671728bba4a653dca7162940ce4753dabb02e7fb8631b48a0e9fab56e0c apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-ffi-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 4488e2cce438779319caa393b952a2b49da7ee39c2e46bfd1dfa7c0ffed4d713 php-mbstring-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 47aecd3334cdf47baf367045e02957792d7ba8f2b6b3764964c2d7589ada4b08 php-dbg-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 4c5657954ebf62fa1c33efa553d41119b04d8a7678e78d488724abc16e073071 php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.x86_64.rpm 743bd46886c6a79f5350c5311f49ceb9aa593e1170a63d5dac89d8a71bbad4c2 php-opcache-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm 917c0469ba5a60ce219ba3619ee22a7ebff218a856b239c07f9f040dc24f5a05 php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.x86_64.rpm 99c06ba2fd814c0fb56d7b3eb60b33b8044d5e39d8bd1a56219f94ee4316020c php-fpm-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm a0c7e04d18fee1daa5ddacb22b5ec9ca614aa630083390b39e7af6b246e84b88 php-xml-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm a9915a7f324fda0a733dfcd9f01b6069cc292dcf07b94d967ac9cdac99be3b00 php-bcmath-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm b1c131d32637597079af8afc1c56e8d058582fe173b9fd61f5e213dcfb9761aa php-enchant-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm b1ffcf03fc356ed9907f0292ff0309485785ec2219be9f91236f18154babc9d4 php-gd-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm c92f62f501b845fb249e6b0aa70f2f214ae7395b5171a173fbad1f3fb9339f31 php-dba-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm d5f72faa6e8f8d912618ad65ddcaca8a1816f77f74126ae8431dafbbbeb3ed4c php-process-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm d7d19b642f3df1de4de43643475041001400e2f923b3e305cd013d58a16c0c7e php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.x86_64.rpm dc8e8e3bdcbd1b2dd8b406088ace26218479eae330d5ff09131f4bb4d4ca9918 php-gmp-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm e05b6672347cd3d6aedda79ff300c744ff4a32881a0675031429fa8f12f4af99 php-snmp-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm e7a68c20d5d835e72667494e1b84663bc192dbe33babaeef7d5fae3a32067eda php-common-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm ea5622d0586499394dbfad2c3e66847685c603adef5328162b0ec7055ffa7500 php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.x86_64.rpm f1056dbe8848484f897c6a4662953779cb96e88d41f3974a75759f5e27ce93e2 php-cli-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm f34d95ed92d1ad6165e05f3ef001215d8d61a0d4f1f04a53df32cbab1ac66cb1 php-intl-8.3.29-1.module_el9.7.0+206+f4fec7f3.x86_64.rpm f4cf6bdf4e0ac269065719c91bc1907e520cf65ec3cec6dc77de6558e6d1d3d2 php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.x86_64.rpm f7f650636fc002b970cf43dba6907dfe4e90d2de6ea57e6788a9f75920f28bc8 ALSA-2026:1473 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file (CVE-2025-11187) * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing (CVE-2025-15467) * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling (CVE-2025-15468) * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation (CVE-2025-15469) * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression (CVE-2025-66199) * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160) * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls (CVE-2025-69418) * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419) * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421) * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420) * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795) * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default openssl-devel-3.5.1-7.el9_7.i686.rpm 3cc7bca283a309d7919cc67b29985c16cc5628beb1b510247b371a79d0baf5ce openssl-perl-3.5.1-7.el9_7.x86_64.rpm a6df70be54862d791d6f05b016b38de8e04a0812f156ac67214a8914a3f3aeb6 openssl-devel-3.5.1-7.el9_7.x86_64.rpm fa07c6ddcb4518a92f88008d8a2b47b28706182347f550994000cd2049651af2 ALSA-2026:1478 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-devel-3.9.25-3.el9_7.x86_64.rpm 2cad7d63fb3047cf07c7cf5d90162b29c84e6db84ee455f9312d429df77228f7 python-unversioned-command-3.9.25-3.el9_7.noarch.rpm 2f814b9350bbf5a449547530ceb346b389da066c1405c62ab4c23805b6fe5532 python3-tkinter-3.9.25-3.el9_7.x86_64.rpm a6cc5bd96dd244eef6c96f1d01408418124c90cdb60a2b0eeae8c128db7de4ff python3-devel-3.9.25-3.el9_7.i686.rpm dbdc0df791e356e74744df60b770472e5dea4de4af3c3ded077b1b9e9d302eb2 ALSA-2026:14791 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libpng-devel-1.6.37-12.el9_7.3.i686.rpm 62404b3060ad224810698623004a614f5b776629692570712c7f89832e1a49cd libpng-devel-1.6.37-12.el9_7.3.x86_64.rpm c1d6f7e2fefe8184c06e3fd1bde8657932ff6086d442d3d3139604f06bdea333 ALSA-2026:14819 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default freeipmi-1.6.17-1.el9_7.x86_64.rpm 45b4aec9034b97f33c1fb04d3d418de17e20d3ca558099ef41ff12dbf1ccd615 freeipmi-ipmidetectd-1.6.17-1.el9_7.x86_64.rpm 50f0c4501e22a6abfbf42e8cc9fdd978b2ae2de15930f89f2c0dc238268cd65e freeipmi-bmc-watchdog-1.6.17-1.el9_7.x86_64.rpm 7de41d65d1ad28607f21e70b2ed30cb4e58fb7b8590f54e1d3debf23592d6f20 freeipmi-ipmiseld-1.6.17-1.el9_7.x86_64.rpm 888c32a256516cfcc406b858108b751e0e0a626eeda0c24a8a0d7d31de70ee5c freeipmi-1.6.17-1.el9_7.i686.rpm a644035697f137c1704d1d0600efc401e58d0f8ef27321d4a37d0bdc2465a082 ALSA-2026:15887 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default openexr-libs-3.1.1-3.el9_7.2.x86_64.rpm 9e122e7fe4d7e0770f5dfcf3f9ba3f09bfaeb22fa93b5b9d986eb0e80ee1d796 openexr-3.1.1-3.el9_7.2.x86_64.rpm abb7f46a990f8665509c02f917083472874404763e2185b34c877e65ee8b2370 openexr-libs-3.1.1-3.el9_7.2.i686.rpm b7aa72fd0f3d13d3414600b65adc2180eee1e43c13329e478598f92311d60fd6 ALSA-2026:15892 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754) * firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752) * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757) * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759) * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747) * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749) * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766) * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761) * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771) * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764) * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765) * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default thunderbird-140.10.0-1.el9_7.alma.1.x86_64.rpm 100c3c8e1778843d2e375a93872ac439878a7ac02b41cf7ba5514b83fc43399e ALSA-2026:1595 Copyright 2026 AlmaLinux OS 0 1 Moderate

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default iperf3-3.9-14.el9_7.1.i686.rpm 14c50af9b6e19821f4aaddeb37978d0be096d26b2087cced93524f1e4dce11f4 iperf3-3.9-14.el9_7.1.x86_64.rpm 9777bd82f514a7b21a71f5c034a6ee39edc4fd9cba2592eb64a46b77e9c03f8b ALSA-2026:15971 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default glib2-tests-2.68.4-18.el9_7.2.x86_64.rpm 1d0cd97e4f5b541c3830fc12e8460814ce2f9ae59c171b85d9d1b301f14c97be glib2-doc-2.68.4-18.el9_7.2.noarch.rpm 25eeed2fa0bcc8f40954f99c404140152cc4b6aff601901836843e1aa348584e glib2-devel-2.68.4-18.el9_7.2.i686.rpm 38830b869c2e05d6b5288592c004e6c7c292d86b02504b75a428a0cbf801c67a glib2-devel-2.68.4-18.el9_7.2.x86_64.rpm 9b1fff8ad7754f3a56f33cc6442bc9d331682b4a68555216abc5fe8116a1bc7c ALSA-2026:1617 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568) * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154) * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-devel-5.14.0-611.27.1.el9_7.x86_64.rpm 05fe15f44f515ce92a422f8f9cfa5177cd06d0d486857c19d047f51a55f14ce0 python3-perf-5.14.0-611.27.1.el9_7.x86_64.rpm 30a0f14b50717835f5d24925766878894155e32b4fda344e434f16ac78fad000 rtla-5.14.0-611.27.1.el9_7.x86_64.rpm 645f3d5dd2ea98da168bc4fbd8dee702401d0d1f66434a6000c1b4518c6b31ad kernel-doc-5.14.0-611.27.1.el9_7.noarch.rpm 65a91727cc792fd9c201b43110d305b9d194aa95e8b372b07f7a68881cd6abe5 kernel-debug-devel-matched-5.14.0-611.27.1.el9_7.x86_64.rpm 6893d04fb0a7d6666663b42af143eb910f87afd991c207f0901be25aea583eef perf-5.14.0-611.27.1.el9_7.x86_64.rpm 7539e2d2c5ef2248785ad18b1e655ff2a222c9bbb54991b7e5077c5f1e8d737b kernel-debug-devel-5.14.0-611.27.1.el9_7.x86_64.rpm 76106b7b314a7297eefcb0bf671652c51bf0a842e2ba1435bbb9e5fac5350c78 kernel-headers-5.14.0-611.27.1.el9_7.x86_64.rpm 901c04943fda9b62adf6c0ffb716dcf2a09c6e687e23168516acb8835a3e20a8 rv-5.14.0-611.27.1.el9_7.x86_64.rpm d801b823c12564f30eb4ed90e8bdf3f5be15224874669536ebaa7fdd7c412d5b kernel-devel-matched-5.14.0-611.27.1.el9_7.x86_64.rpm fe0b898c1f9207762ff380f01e514f3a1a51c4ca9d0b8d7a8bf2b7129cd1d94f ALSA-2026:16206 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rtla-5.14.0-611.55.1.el9_7.x86_64.rpm 0c8b670bfe47f8cdffe6d694e8493420626794f04fc853aeaf0882521f07db7a python3-perf-5.14.0-611.55.1.el9_7.x86_64.rpm 2285caf3eb2ba92e688f0f8231726dc1822ec8d5b9321420207c5c77be1fe5e8 kernel-devel-5.14.0-611.55.1.el9_7.x86_64.rpm 366ae82715510c8aac5c5c9a05a81015393ffbf8eb69a68f1cadc5b1e93af249 perf-5.14.0-611.55.1.el9_7.x86_64.rpm 37c7bdc82db94f93ae85701626778fe65f3b47cd23ef4a04dff858fa0f31bd41 rv-5.14.0-611.55.1.el9_7.x86_64.rpm 472fe7bbed662731dcb6239259b947ef41c79fa1d8756ba5d8c6a9756ede6c8a kernel-debug-devel-5.14.0-611.55.1.el9_7.x86_64.rpm a292d01bf7cf244be62416025eb968d693160fa85def218feb1ee983ea46b12c kernel-debug-devel-matched-5.14.0-611.55.1.el9_7.x86_64.rpm c42bccae9770c24149874d0e7a74a0d245b0d3c85047fd774223a6600ef5bae1 kernel-devel-matched-5.14.0-611.55.1.el9_7.x86_64.rpm e0edf69b5f420622fd8c60036ba70fc3e98df3799e08c3f11034349b21366e1e kernel-headers-5.14.0-611.55.1.el9_7.x86_64.rpm e55b28d3f26c29b8c49878f90956f316d3a59b5cfacb1ff7d0e7e9b84ad4fe2a kernel-doc-5.14.0-611.55.1.el9_7.noarch.rpm f4dfed677e7f51b89919b1edb476f21a52a26c7a40b86808d047fb16b6a8591a ALSA-2026:16482 Copyright 2026 AlmaLinux OS 0 1 Moderate

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952) * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986) * freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951) * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775) * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885) * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884) * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883) * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default freerdp-2.11.7-1.el9_7.7.x86_64.rpm 75a94f94acf18d25bb33b2626d6dc1d62fa16278dfba4705173227c18b5ebe7d libwinpr-2.11.7-1.el9_7.7.x86_64.rpm 81792b2ec8b35fac45e98d0ea6ef0abf0d9e0f343d0eeba750b18e9fe26338a2 libwinpr-2.11.7-1.el9_7.7.i686.rpm a479de216c5eec50d434dfaa21fd25265b5bd2230427d5a2ae350337d376b246 freerdp-libs-2.11.7-1.el9_7.7.i686.rpm b29973b999b227b5bd40039a20a112559dcfe336acf5c86760279d854fbee3ea freerdp-libs-2.11.7-1.el9_7.7.x86_64.rpm fa67b1381b2d213fdf846b4e1a2d081ef4d402fa063fb64808d8b4ba87abb2cc ALSA-2026:16484 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887) * gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154) * gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow (CVE-2026-4151) * gimp: GIMP: Remote Code Execution via malicious JP2 file parsing (CVE-2026-4152) * GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150) * gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gimp-libs-3.0.4-1.el9_7.5.i686.rpm 263d9a5b10d38fd085bb798a49ad09f0c142097ae4416e47ae866de1541ac661 gimp-3.0.4-1.el9_7.5.x86_64.rpm 81cea0297bcf950bdc305f44aa70358916027c081c9d4c613f6940a8a155a30d gimp-libs-3.0.4-1.el9_7.5.x86_64.rpm d27c9ea8e34c83855a77dd3419029ee0f803476d98685abcf743e3a7e9e48d38 ALSA-2026:18028 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libpng-devel-1.6.37-12.el9_7.4.x86_64.rpm 665a7fbcb9d1e712c4b437e7cb7daaac6b47ea2da5e8c3a97bb4432a8d1d595b libpng-devel-1.6.37-12.el9_7.4.i686.rpm bf31cd69c7752dbe43afdcacfef98abdb37dd0049d41a3e78f2f7b609e5128a0 ALSA-2026:18029 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nginx-mod-http-image-filter-1.20.1-24.el9_7.3.alma.1.x86_64.rpm 2b96028a56e25d82a310d6a3a38324828d9a4502ad52acff5b9616b91a9f6bff nginx-all-modules-1.20.1-24.el9_7.3.alma.1.noarch.rpm 38a4515e74d4728c24577c55b05d5c004de5e25004dde1febcad35a0973da542 nginx-mod-http-xslt-filter-1.20.1-24.el9_7.3.alma.1.x86_64.rpm 56ee0e934acd0eb12b40996be212530394b17300efc3a6c4ea6f52ccf8acd37d nginx-filesystem-1.20.1-24.el9_7.3.alma.1.noarch.rpm 60a03a3eb1b58355a1274749d9d3db9e8fc70ce84b93a1d5f13e67a8ccfe86bc nginx-core-1.20.1-24.el9_7.3.alma.1.x86_64.rpm 7314bf0167e13cb5d34f779efc7d1dda6a9550f32069ecb93eead1a2b03d1f12 nginx-mod-mail-1.20.1-24.el9_7.3.alma.1.x86_64.rpm 8606fe1e4eaa7b141db220f5f8889b0f04985dac5a2598589f77aed9064ca318 nginx-1.20.1-24.el9_7.3.alma.1.x86_64.rpm 98f6fd4e0a740709718da33df5ac25918d644693d5a179eecee12b660e0d7185 nginx-mod-http-perl-1.20.1-24.el9_7.3.alma.1.x86_64.rpm f2767b0ce7a9d485da61adb2ed16a68870df22c87333a498749faf6dbe462f19 ALSA-2026:18030 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-pg-1.5.4-2.module_el9.7.0+245+447713a2.x86_64.rpm 08e412278c4bc3ba8330aad4a3ea82ecb1b1ab64f127dee5b2bd9cb609b4808a ruby-bundled-gems-3.3.10-6.module_el9.7.0+245+447713a2.x86_64.rpm 0f7e417e5c1deeab7d5f668a3ea50b6c2057733c59430a6e07d672a91bb8d312 rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 rubygem-rake-13.1.0-6.module_el9.7.0+245+447713a2.noarch.rpm 29f83cf57a8e54cfb879d5e2cabada9aa1d5b873000a917602a640566f6bc319 rubygem-bundler-2.5.22-6.module_el9.7.0+245+447713a2.noarch.rpm 2b63b3420daef02533f8ce0d80e230a7e5a1d65cedf81444b2ecb33bba9290f8 rubygem-power_assert-2.0.3-6.module_el9.7.0+245+447713a2.noarch.rpm 2cf9aa498f7c21261b123d8df83420973d406655e185f2b0ddfb6779b0ce06c1 rubygem-irb-1.13.1-6.module_el9.7.0+245+447713a2.noarch.rpm 405f23c3742c103973fc71e16a71a73200b587179ac88a5dd3c5c3c21a2e7126 rubygem-io-console-0.7.1-6.module_el9.7.0+245+447713a2.x86_64.rpm 48c494865c8805460d5cfde0eecf739918df93ae45c950bb30d1667b7f8857a3 ruby-3.3.10-6.module_el9.7.0+245+447713a2.i686.rpm 55cb329cef3186956e34d69b3b2c1a9f7887360d751088a1298a67a5e535e1dd rubygem-io-console-0.7.1-6.module_el9.7.0+245+447713a2.i686.rpm 5927e31b25a6ee01f057419235507f6c1a1d85a530e9051b150e225bc0b1e52f ruby-default-gems-3.3.10-6.module_el9.7.0+245+447713a2.noarch.rpm 5b4c471ef56a088eccc54904674aa3c8cb24dd5a5f294cdc5fc6fb236fcaf957 rubygem-psych-5.1.2-6.module_el9.7.0+245+447713a2.i686.rpm 5bc7556df32b5511af328ebd94976754c1d3e4d8d3ad0accdcbe9fd7a982b6f1 ruby-libs-3.3.10-6.module_el9.7.0+245+447713a2.i686.rpm 5c95b2303cb85500880d49712e315a8fbf02568ead441cf9e08a095d1b5a34c2 ruby-devel-3.3.10-6.module_el9.7.0+245+447713a2.i686.rpm 654db53c9a593565df00c8be2ab68fe0b5a177f17604f6b569e4cdc437c022fd rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.x86_64.rpm 6bc622c1c7cbd8cf9624faba7760337096a143b4c787be6cfeda71eb7abda16d rubygems-devel-3.5.22-6.module_el9.7.0+245+447713a2.noarch.rpm 7344931c790ba8cd1920edb78a83917b3a206ca173a6f94acfc62946f70bdaf8 rubygems-3.5.22-6.module_el9.7.0+245+447713a2.noarch.rpm 78b902511760bd5597f944666980219786fbeba2bd03d9ee0f8c5868d6f2111d rubygem-typeprof-0.21.9-6.module_el9.7.0+245+447713a2.noarch.rpm 7a531e2a991483f7ae81b9a84febcf945c5257f1b1253c88e47d3b68622ddcea rubygem-rbs-3.4.0-6.module_el9.7.0+245+447713a2.i686.rpm 83d9ab890c67034c1b56da4089f55dd0628071188a8c5c22da0fd9ee037f197a rubygem-rexml-3.4.4-6.module_el9.7.0+245+447713a2.noarch.rpm 8594cf74ea2a221d9328f771e23e4a22f592308d8d7413e93689c7b0e7dae2e1 ruby-doc-3.3.10-6.module_el9.7.0+245+447713a2.noarch.rpm 9657370a186549dcb06370d5ef6030626c2e91d8e06c1987044495cfcfc307ac rubygem-minitest-5.20.0-6.module_el9.7.0+245+447713a2.noarch.rpm 9a37fccce8aaff24967509f37e4b78256968a756e6938cfefaef821a6f7ae4c4 rubygem-test-unit-3.6.1-6.module_el9.7.0+245+447713a2.noarch.rpm 9d00a253bd956ca69d386458540220888d18bf8fd57be260051a620ba6deed56 rubygem-psych-5.1.2-6.module_el9.7.0+245+447713a2.x86_64.rpm 9fe3b810817661ca9dcb0ca8935a4828526f3b5010f34d431a768825be7dc69d rubygem-racc-1.7.3-6.module_el9.7.0+245+447713a2.i686.rpm a196777b77220ebeec7aa95ce1b682de734cec2c1554007d71160e9cd3880f04 rubygem-rbs-3.4.0-6.module_el9.7.0+245+447713a2.x86_64.rpm af847618ebbaad0d74db547a4832c89914b515ee93f36e883ba58f600bd81735 ruby-devel-3.3.10-6.module_el9.7.0+245+447713a2.x86_64.rpm ba5b2004a22429a0a713fde25288bb59238873d08e7505c402c39e4abe903d42 ruby-libs-3.3.10-6.module_el9.7.0+245+447713a2.x86_64.rpm ba96f44ce00a013d9ffc9874097061de64495cdb38720f9980daf37fd39cdc92 rubygem-json-2.7.2-6.module_el9.7.0+245+447713a2.i686.rpm bcfd7b45c71ad7c8fe44abcf9d092d2d6cde4357c47e35b50821eaa056dccfe3 rubygem-racc-1.7.3-6.module_el9.7.0+245+447713a2.x86_64.rpm bd237465107be0f206f1aaa111ec077a3a05b74c874bf04b35d8143f00c2d813 rubygem-bigdecimal-3.1.5-6.module_el9.7.0+245+447713a2.x86_64.rpm c4dd3910d330f0c6b8a552a9fb40dbc550cf4fcfbe820c92d951b367a01e22f5 rubygem-pg-doc-1.5.4-2.module_el9.7.0+245+447713a2.noarch.rpm c96338e6d5222b04fcb018874d6c36073340306f6f05aad2761a5a9b3a5b180a ruby-bundled-gems-3.3.10-6.module_el9.7.0+245+447713a2.i686.rpm cea2dfac5951554a1291dd3df74bf1afdddca546f19e70bc1af80d017e76fb5e rubygem-json-2.7.2-6.module_el9.7.0+245+447713a2.x86_64.rpm d883ebf5a06ba46e0fd525fd67de4e612aa919fbd24b8804d92d7aa45833ecd2 rubygem-bigdecimal-3.1.5-6.module_el9.7.0+245+447713a2.i686.rpm de66567662ee2a348b6b25d1468f06a8de6778702c86dce1d7549fb9df88b532 ruby-3.3.10-6.module_el9.7.0+245+447713a2.x86_64.rpm e565eb6be39089db29a741149065ca8d49db1d97445aa12f768a499cae76f603 rubygem-rdoc-6.6.3.1-6.module_el9.7.0+245+447713a2.noarch.rpm f27c9536fe103f69a6ca27f12139a22b69111c96831f3f37539974d6a093c068 rubygem-rss-0.3.1-6.module_el9.7.0+245+447713a2.noarch.rpm faacefab2813521921c9dd6d388f6947ce9f343a2837d0ea0a7a3ee4b34fb8b3 ALSA-2026:18039 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-json-2.5.1-166.el9_7.x86_64.rpm 05e34fbff5cc8ff18f502e441fe835617892fe258561fb12023308edb4697a67 rubygem-bundler-2.2.33-166.el9_7.noarch.rpm 0bad7e94500c71e6f2c11ec476c339f0ddafcd02bc77bb0891e3eb404d39b9d5 rubygem-typeprof-0.15.2-166.el9_7.noarch.rpm 0f6f6adce4e4803fde9cf84205be92ce6919cc8dbd724024d3aa876a5f35cdf8 rubygem-rss-0.2.9-166.el9_7.noarch.rpm 1cf0717648f5441f49fc6c2598299ac275537634defac4d7943276ee566b861a ruby-devel-3.0.7-166.el9_7.i686.rpm 2865abc263c1113a67f2f779da668af956d4bc7889e9c7205f49d748d179eb9b rubygem-rexml-3.2.5-166.el9_7.noarch.rpm 3989e6c4555a4385593f94d4fae489f9d6ae3515be7ef06afafbde114588b7a1 rubygem-minitest-5.14.2-166.el9_7.noarch.rpm 45d59869d26fcebf94fc2ade65cb64732bcc1b19468ee49b58e380342f2f39c6 rubygems-3.2.33-166.el9_7.noarch.rpm 5b24cefbeb265e4b8621ba6127afbd64590fb0ba3e41f5c429ba47ba136a3de2 rubygem-rbs-1.4.0-166.el9_7.noarch.rpm 61b1fcbffa33d6ed20973cb8bbd7a202ce2ffa6a1c43d1ccb03d3cc84909b241 rubygem-power_assert-1.2.1-166.el9_7.noarch.rpm 73e8ba3232340a72fb3ae8bac01abe87dfc1ed66c3b3fe693c1682bc1903c553 ruby-libs-3.0.7-166.el9_7.i686.rpm a1bce9be2661b27f0f9745833e1e1d62f6afc14184ae06ae50943e911c3176ab rubygem-irb-1.3.5-166.el9_7.noarch.rpm a20166c49d0d0cfa0895dc179a76debef1739f348a0ba7f79ad60107584f4781 ruby-libs-3.0.7-166.el9_7.x86_64.rpm a7d2069f5d40538fdd2930710d826366ff98349421031bef0e5dc3eab273eca0 rubygem-test-unit-3.3.7-166.el9_7.noarch.rpm ad09b55e91cd3e6cf722b41ba82f0626fd20194681a72e4da8035ae7b0f65bb1 rubygem-bigdecimal-3.0.0-166.el9_7.x86_64.rpm ad5ad63022583c98d5cd5e5f860862f325698733f6135021c323f2c034ee6607 ruby-3.0.7-166.el9_7.i686.rpm b23c10a3b35fc15dc2fe94fb25608c1c4dae1c4e74c646aa7b153e00ca2dc27a ruby-default-gems-3.0.7-166.el9_7.noarch.rpm b678874533eaf1ade4c0f4977833dd1cda16fe48195474c53222a156f61724c1 rubygem-io-console-0.5.7-166.el9_7.x86_64.rpm b81bb8d1be9d2435d44e068f444f92015b5f5b3bfd3e18b9f6158f5f5dfc7af5 rubygem-rdoc-6.3.4.1-166.el9_7.noarch.rpm cefe8f2699ba0797215393620138f5d577562fa81087857e2fb32c300d219837 ruby-3.0.7-166.el9_7.x86_64.rpm d330117bb003ff6fc7e464ebb020d3bec995c91c61423b79a9a24e6f70006b96 ruby-devel-3.0.7-166.el9_7.x86_64.rpm dcd2b20c3f0c14323ebd94a03be1a2d39d19a7cae02e5ab1cf347579abbd0afa rubygems-devel-3.2.33-166.el9_7.noarch.rpm e5fc18ba3cf07e01ab7c8afacdea1e9d131feb18ba7325a66c2cbc504f61a03f rubygem-rake-13.0.3-166.el9_7.noarch.rpm fac2f0a3f5c89d96bb269e263a4e6685a190cd8f2f3115ea231d878640464a53 rubygem-psych-3.3.2-166.el9_7.x86_64.rpm fb9182a686f5092a297708fa90d25d383d7e7c2a5c171ec9c6bc8bb48391bc2a ALSA-2026:18587 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rv-5.14.0-687.5.1.el9_8.x86_64.rpm 0dabaeaf064b05016489d51e514384ae037e5dae99f41ce8e677a4a43f1aeb40 python3-perf-5.14.0-687.5.1.el9_8.x86_64.rpm 16b9e0021d4f060370383b86057a6722ff6e201b44f2786651c5daa9a0189654 rtla-5.14.0-687.5.1.el9_8.x86_64.rpm 30db13cd43c5fb15e90303ae81e3930ca4e19d17382cfabdc4e01a9d7fd14373 perf-5.14.0-687.5.1.el9_8.x86_64.rpm 66b7cf8fe3e4d30a1aeb290067ff79774354097a7838ed0ba57ae731d0c8a31f kernel-debug-devel-matched-5.14.0-687.5.1.el9_8.x86_64.rpm 6b03fdaafd892d08f46d3d90f3ce05371ff9a98f638ebe461f31598842d6ede8 kernel-devel-5.14.0-687.5.1.el9_8.x86_64.rpm 79068ad6968ccc11ed9577e329d6cd825331d9c68f5e1a2939d0de3151bb194d kernel-devel-matched-5.14.0-687.5.1.el9_8.x86_64.rpm b9beaf67f97c08228f8ea1e29fb4774c1894a80d2e861006cb7868ef5b897504 kernel-debug-devel-5.14.0-687.5.1.el9_8.x86_64.rpm cb1b12d1f346d4b1d10cabf236bdc78e072886830dca8963c037154d7eb8c11e kernel-headers-5.14.0-687.5.1.el9_8.x86_64.rpm efaa7642a2766bbcadd249fb717448106bdb09739e7ac2f772861b869a67748a kernel-doc-5.14.0-687.5.1.el9_8.noarch.rpm f4e680a298e381dcaa4be5f6443e6856c12f0f9127e6d1581b8c2a2d471c05fb ALSA-2026:18597 Copyright 2026 AlmaLinux OS 0 1 Low

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * networkmanagr: NetworkManager File Access (CVE-2025-9615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default NetworkManager-config-connectivity-redhat-1.54.3-2.el9.noarch.rpm 01f5c57c79bb6ffd3128517e20cd3eeff773bc2820f7cbd70529406b7a827c80 NetworkManager-ovs-1.54.3-2.el9.x86_64.rpm 728097b14085de06a62480ef7c1416513534488920f5db6f2839aeaa792e538b NetworkManager-dispatcher-routing-rules-1.54.3-2.el9.noarch.rpm 7864b48232b85fea459582304b07c20c72d8da86f46d384c41cb5920a2e183ee NetworkManager-ppp-1.54.3-2.el9.x86_64.rpm c9732c8776e4c483d7d3e93031cfd3223c943e9c4f41477c1b4660acc7762852 NetworkManager-cloud-setup-1.54.3-2.el9.x86_64.rpm e38fef112b3218dce3ef077f0fec0dec960ec6b7c225a2644d6cdaf77daaacc6 ALSA-2026:18599 Copyright 2026 AlmaLinux OS 0 1 Moderate

p11-kit security update

The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): * p11-kit: p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default p11-kit-devel-0.26.2-1.el9.x86_64.rpm 42f6c1cb35202e5d65bf1af856e03e29d1fd9c0d936ba728f8e6316cdd70e5db p11-kit-server-0.26.2-1.el9.x86_64.rpm a147b33051ae48350b6ff1c5866bd8b96d6741da3fe33aa80d16605aba231c2a p11-kit-devel-0.26.2-1.el9.i686.rpm bef9bb1dec19ba892a6674b9407fa3ad9b4c5e6ffba0a2085bfd07cb3b2cc2a7 ALSA-2026:18683 Copyright 2026 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: Double Free Vulnerability in libssh Key Export Functions (CVE-2025-5351) * libssh: Use of uninitialized variable in privatekey_from_file() (CVE-2025-4878) * libssh: Write beyond bounds in binary to base64 conversion functions (CVE-2025-4877) * libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation (CVE-2025-8114) * libssh: Memory Exhaustion via Repeated Key Exchange in libssh (CVE-2025-8277) * libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966) * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964) * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965) * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967) * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libssh-devel-0.10.4-18.el9.i686.rpm 07fffb6d73d775f1f6a9e34204dde88ece182a3c410172666b536110a05ebcc4 libssh-devel-0.10.4-18.el9.x86_64.rpm 787439250b21c37053233165934ad62e9661784962d874655dff0aca714ee6da ALSA-2026:18748 Copyright 2026 AlmaLinux OS 0 1 Moderate

libvirt security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * libvirt: Denial of service in XML parsing (CVE-2025-12748) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libvirt-client-11.10.0-12.el9_8.alma.1.x86_64.rpm 0ef646b3c98a89c832df3d6bc9c4a010ea5c17c2a25ababd9a6a3fc6764763a8 libvirt-daemon-config-network-11.10.0-12.el9_8.alma.1.x86_64.rpm 276f9fbbf6d4ee0a04f99972e67650fd26ef149a7afaea2c8cd85837cfe382af libvirt-daemon-driver-storage-scsi-11.10.0-12.el9_8.alma.1.x86_64.rpm 375d77d37dbd05b3bc6760199268e8fada391a4dc7096874a3335b0ea700d480 libvirt-daemon-driver-storage-disk-11.10.0-12.el9_8.alma.1.x86_64.rpm 4081b532bfd733eb30f12d4e6a3643d13283b3f153f22b8762c66b612104477b libvirt-daemon-driver-network-11.10.0-12.el9_8.alma.1.x86_64.rpm 50246ff2189121fe1e6d681f3ac9cc44108404f234f2ae064ec5ceca9b8f4a86 libvirt-daemon-driver-storage-core-11.10.0-12.el9_8.alma.1.x86_64.rpm 531752a7c9165f8ab4019f63b6eef43ce6c180cc061059d7333559f437254975 libvirt-daemon-driver-storage-mpath-11.10.0-12.el9_8.alma.1.x86_64.rpm 6e25377d4e2b4740580d96264318a7771ac98bf0126ac9d462f37bc600b2b006 libvirt-daemon-log-11.10.0-12.el9_8.alma.1.x86_64.rpm 7025de056c51dc94539bd59626b13b1353410a6c1eaa7d0a342bcb1cd2e4621c libvirt-daemon-driver-nodedev-11.10.0-12.el9_8.alma.1.x86_64.rpm 722d0761eb11c115465eb5f4f9c5b6ba2b9b0eb75520b9415e4109dfffbe21cd libvirt-daemon-plugin-lockd-11.10.0-12.el9_8.alma.1.x86_64.rpm 75f405df8a7afd25dcc21b608980e335ec5792ea0637ff2015b3cc12e6c31879 libvirt-daemon-driver-storage-11.10.0-12.el9_8.alma.1.x86_64.rpm 830b1847eb76e46d8839ddafddb740f5c85546d7e08e067b75111048e4e838e1 libvirt-daemon-driver-qemu-11.10.0-12.el9_8.alma.1.x86_64.rpm 85ce0c6de6707c4208e3e52f42f3be71b9c85e48002e0a68202c8d0227a7fccc libvirt-daemon-config-nwfilter-11.10.0-12.el9_8.alma.1.x86_64.rpm 8a802c80448589147384a23b461d5c11a829ddbdd52599e369a339012411a0cf libvirt-daemon-driver-interface-11.10.0-12.el9_8.alma.1.x86_64.rpm 8d5bb063661a8b3eead7a7709692fd9acdc2639f6da01946c508a5ecf749dea8 libvirt-daemon-driver-secret-11.10.0-12.el9_8.alma.1.x86_64.rpm 8e5ba715e64ba3d26e65194fdfbf5937679a089ede1579ad7b7e018ac4c29bd3 libvirt-libs-11.10.0-12.el9_8.alma.1.x86_64.rpm 94157bda30a47c5000af8e692a0bc0ba9d20a5b1a773019724f685e3a88b9055 libvirt-daemon-driver-storage-logical-11.10.0-12.el9_8.alma.1.x86_64.rpm 943ed9eb70c92648197ceced6aca2720e0f4f0d75253115c543b8093b9c68bed libvirt-daemon-common-11.10.0-12.el9_8.alma.1.x86_64.rpm 9e4fd0e2b7fad82d10454348325f7976f3b47f56ff7c15a65016e3bfd39c62db libvirt-daemon-driver-nwfilter-11.10.0-12.el9_8.alma.1.x86_64.rpm a24053fe08fb6a0dca9deed1a8175fc0f3c8e313052826e120b0c235a54ebc9f libvirt-client-qemu-11.10.0-12.el9_8.alma.1.x86_64.rpm a45b8814f0e27b9d91bde4d3893ab9b2599c07ca4bb54c886d1920951c075fcd libvirt-daemon-lock-11.10.0-12.el9_8.alma.1.x86_64.rpm ab29cd75f56a32e51a5ce9fe8c7855444f592e9fcd64cc83c6f4a9398db571d9 libvirt-daemon-driver-storage-rbd-11.10.0-12.el9_8.alma.1.x86_64.rpm b012a912c72a9d56130767c5c170c1c2b1e6e9963e96c4786c715ba24f65c4fa libvirt-daemon-11.10.0-12.el9_8.alma.1.x86_64.rpm babbfbae1c959f63968d4e955a744a15e50af165cdb93c8ec447cd14b66b8908 libvirt-11.10.0-12.el9_8.alma.1.x86_64.rpm bd0cc4fc62177fd4111180c5b9ad67433bf31aa7b266032f38ec4926c0a7ec0c libvirt-daemon-proxy-11.10.0-12.el9_8.alma.1.x86_64.rpm c856248a1061be81947885b117ad29dfdc1a40241b72dd68e7a5769890826392 libvirt-daemon-driver-storage-iscsi-11.10.0-12.el9_8.alma.1.x86_64.rpm cdeb796ea900da707621af5cd760d8f76f4db8efecca714a9bab7e9097e4826b libvirt-daemon-kvm-11.10.0-12.el9_8.alma.1.x86_64.rpm d5595928a85a1489d82a72a07f7133cb29e3ccd68da61bbdc4af3dc6c3965697 libvirt-ssh-proxy-11.10.0-12.el9_8.alma.1.x86_64.rpm d671a03b535a0891c5df1fd785cf148cc9f9ada6d7a4a969880994b99ac7c0bb libvirt-nss-11.10.0-12.el9_8.alma.1.x86_64.rpm f72f2d94c9c98af4f79fbac5b04613ace8755cc072c6b9280e542e5bf23dab7c ALSA-2026:18772 Copyright 2026 AlmaLinux OS 0 1 Moderate

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default qemu-kvm-device-usb-host-10.1.0-17.el9_8.alma.1.x86_64.rpm 0397a91ea7dae6282dd9a241b70723c74d52b0c8e01f98effb1e8b8343013341 qemu-kvm-common-10.1.0-17.el9_8.alma.1.x86_64.rpm 0a4f9bfc2bbcf8221b91c6c6d2ac4a05c390e300373290b752e1d7cc04538f94 qemu-kvm-10.1.0-17.el9_8.alma.1.x86_64.rpm 101d502c333148406ef923d6dcca7147d84d67599f5b119c7398d424898252f9 qemu-kvm-ui-opengl-10.1.0-17.el9_8.alma.1.x86_64.rpm 2a4dd3a0694b94b503746942255bb30a61af89fe37e46883eeaa5de3ee36696d qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.alma.1.x86_64.rpm 3aee1ca070f5464a373491fbbd5487fda22cdc3a6fd873d99ff8b69b44433cfb qemu-pr-helper-10.1.0-17.el9_8.alma.1.x86_64.rpm 493cca252f6322c438b9ea957938b5c9ce8c943d00f9a3811c0cc2c529830583 qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.alma.1.x86_64.rpm 53e462d2f392ccb52a7343e1643ea484249fe284bbe8a76de98e1648dd3f202d qemu-kvm-block-rbd-10.1.0-17.el9_8.alma.1.x86_64.rpm 57e5a422a61c5152ded8a2f3b83861944f516d37a0c3548a79f47940efc180fa qemu-kvm-docs-10.1.0-17.el9_8.alma.1.x86_64.rpm 6b6f52e77fa9667a9d7e960cebfe09fda4cbe052654f568ffa88d4eb46d9770b qemu-kvm-audio-pa-10.1.0-17.el9_8.alma.1.x86_64.rpm 7168866b7856b83813702424fac28aef26eb972ce024af4305f583877301b252 qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.alma.1.x86_64.rpm 8a820d6077f15bd36c0a4fd8ce8863ffb02e5be06bc674cce1ac654becb79291 qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.alma.1.x86_64.rpm 970b9fec97da4ecccb2d3e2785ba5cfd584393b975a6957efc934f866b3e77b1 qemu-img-10.1.0-17.el9_8.alma.1.x86_64.rpm a20d611a8ff1d8aee64609a70f2f32fae41fb4016f305a17dd1efc5d85ab9c06 qemu-kvm-block-blkio-10.1.0-17.el9_8.alma.1.x86_64.rpm b3dd2210e1a10da07d82e433201d6c718dd403114a1cad68317de33fb1dcc16c qemu-guest-agent-10.1.0-17.el9_8.alma.1.x86_64.rpm b6f137dbf67faa23b73f34b9038b93e39647839cf98a1750c908a09b15238d37 qemu-kvm-tools-10.1.0-17.el9_8.alma.1.x86_64.rpm d087fe96495152d8d7de499de8c4075357c3929a9c5410a06c1f02f1e2b85670 qemu-kvm-core-10.1.0-17.el9_8.alma.1.x86_64.rpm dba2fab3cc786ca366d4531f563ff316e1ed8353041b11c2b23f2522c11c122e qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.alma.1.x86_64.rpm e7f795b2b5a4a02ecdfc73ef38485ecc49946305768c0f95e12e0fb611f38d69 qemu-kvm-block-curl-10.1.0-17.el9_8.alma.1.x86_64.rpm ed7280d9686a1bc8bb7fa1e383f189660b18435919c8d27cf9245b93ef653934 ALSA-2026:18786 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind-license-9.16.23-40.el9_8.1.noarch.rpm 0ff25c108b9f94989d77bba0c7fd7cde329cdab2e2cc257b21d372ba8067d492 bind-9.16.23-40.el9_8.1.x86_64.rpm 2cbf5dd345acb2ea74cc6aad43d64bc9e91e3fb4d3f623aba818523186e102f5 bind-chroot-9.16.23-40.el9_8.1.x86_64.rpm 49c7817340741206627b08a2c3f93d946c43aba4b167c0c42864191e47b12480 bind-dnssec-utils-9.16.23-40.el9_8.1.x86_64.rpm 77a59093e0a198366540de3d5ebdb312aca7896a23dadab8dde2691e6878c8bb bind-dnssec-doc-9.16.23-40.el9_8.1.noarch.rpm 97fc2609538dcca589fa85ba93ac2103d94f7e913df47a094d87089f05a623b4 bind-utils-9.16.23-40.el9_8.1.x86_64.rpm da4971cd56cbb252d9db84004192c72e0e71355a3f310ced5c47a0b74df6ee40 python3-bind-9.16.23-40.el9_8.1.noarch.rpm e22d04a5caefcca626811d95c7c8d88a3bbf382d27188cf6131a9888927646a5 bind-libs-9.16.23-40.el9_8.1.x86_64.rpm fcd94cb587709b74ac670a6e8217d8610fbeb2f2fe2672c3ea510769a84e1a18 ALSA-2026:18824 Copyright 2026 AlmaLinux OS 0 1 Moderate

luksmeta security update

LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux. Security Fix(es): * luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libluksmeta-10-1.el9.i686.rpm 1c0821fbd2bd988f41320d200252e086eb5f76a624899a3fb36502605f3581d1 libluksmeta-10-1.el9.x86_64.rpm 8287f96ccf23bfd2a467626bd777514cb9618c8a74c7fad4a53c3614dfe392ec luksmeta-10-1.el9.x86_64.rpm bb16f0308c5afa5312537327a8add10cd40df89490ff8fa633cd59ba1e49dbe3 ALSA-2026:18868 Copyright 2026 AlmaLinux OS 0 1 Important

linux-sgx security update

The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++. Security Fix(es): * qs: qs: Denial of Service via improper input validation in array parsing (CVE-2025-15284) * node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives (CVE-2026-23745) * node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition (CVE-2026-23950) * lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465) * node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check (CVE-2026-24842) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default sgx-libs-2.26-7.el9.x86_64.rpm 58c326a284befe012ea1f09dc993b5f3fbd09de05c29d027a3359caa86e06a43 sgx-pccs-admin-2.26-7.el9.x86_64.rpm 7c88566595207668ff32f121e2014d8d36a8cf7e3b9c9e585d2fd114c8c9706c sgx-pckid-tool-2.26-7.el9.x86_64.rpm 8522d6282463a61717fca65f8ce830f82c91b0281e495404487778d586f2213a sgx-pccs-2.26-7.el9.x86_64.rpm 85c0c947244c111919bd479adfa3bfd1ec8fd275790dbaf88a1d163fffac45a8 sgx-common-2.26-7.el9.x86_64.rpm a0300674924b51ba71e542fcb1e30f71f408f7afe25a4a63279939375a5f24aa tdx-qgs-2.26-7.el9.x86_64.rpm c27366ea4caec127b7fcd7bde8a26d169cd75a3989c5f509518181a8323e776b sgx-mpa-2.26-7.el9.x86_64.rpm c88c03251548a150befdd89f4b88d8ba704983bd4e44282e9bfa81e417c03820 ALSA-2026:18913 Copyright 2026 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default containernetworking-plugins-1.9.0-2.el9.x86_64.rpm f7c738c355c5c0801ed62102d3707090f0d0260b8b9a4a848e6d380a8d7f48c6 ALSA-2026:18931 Copyright 2026 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: DNSBomb vulnerability (CVE-2024-33655) * unbound: Unbound domain hijacking via promiscuous records (CVE-2025-11411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default unbound-1.24.2-2.el9.x86_64.rpm 1dee3e4654ae5493f04d3be6d5e11706cfd8313561a2544c5074d2ad26ba03bb python3-unbound-1.24.2-2.el9.x86_64.rpm c6fb5a3b2e18a22dec48b28b1608263eafc78f0409a7c8c0d7f5a2d5153a251d unbound-libs-1.24.2-2.el9.i686.rpm c8d26fa96629276abba83bb7bc268a9b0432bee51935f42a2523d2d966c77c81 unbound-dracut-1.24.2-2.el9.x86_64.rpm e2eacd773bd9ec4f52f3f1fe5c920dc574cce633738279ac201c7e9847a5ddf3 unbound-libs-1.24.2-2.el9.x86_64.rpm e7453bc09883613bc5c2d342a8ea5195c82010aea5ddffc1b0bf93aa3d7dffbc ALSA-2026:1903 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default ha-cloud-support-4.10.0-98.el9_7.5.x86_64.rpm 048e6caae2bcd0ea21bafe4b8215b7447e28e9e736f27beafdbe7d877d0fc329 fence-agents-eaton-snmp-4.10.0-98.el9_7.5.noarch.rpm 0a72c372ca1bbb9b4f95c5af019513c2377bc5613d0333e1dfb4ee1f79901d07 fence-agents-virsh-4.10.0-98.el9_7.5.noarch.rpm 0ca6c483d555044d94bad4656dd2584513dd6c1011f9865c5d1d724596edcc01 fence-agents-amt-ws-4.10.0-98.el9_7.5.noarch.rpm 0f363b6c118195bec277e0e0776be4e2743e4a1c518aed417398006c449b3058 fence-agents-azure-arm-4.10.0-98.el9_7.5.x86_64.rpm 0f43f7ec1b497498da7c469074f56e05f627f3eb4d96739e9fee2dcf65d58097 fence-agents-ipmilan-4.10.0-98.el9_7.5.noarch.rpm 17376c12166df49ccb3e4bb46c6703956700a060e56b1fb3c08526725e6abf66 fence-agents-gce-4.10.0-98.el9_7.5.x86_64.rpm 1ab3230951b7c05bb0cb85d9689937e3034ff8ddf0ec12570887d3fe1d7945f0 fence-agents-ipdu-4.10.0-98.el9_7.5.noarch.rpm 1c24a03341e5774f81f6d5b11513e7201d7460a1da4607aa9ab80f5ef1a2ab5a fence-agents-apc-4.10.0-98.el9_7.5.noarch.rpm 1d31a6e8ac91ac4bf0d2bcc2854594412761dbb8a39fca91bb9fa4a6f7f419d5 fence-agents-eps-4.10.0-98.el9_7.5.noarch.rpm 1d7eb98f49129ee32883e57f1985e57ba60f0145505a4eeae041b45d8debacd3 fence-agents-cisco-mds-4.10.0-98.el9_7.5.noarch.rpm 2bf09ee7a5ace98775ad8c7197443dfc2a0cc415c3b13632c5d4365251fce6c2 fence-agents-ifmib-4.10.0-98.el9_7.5.noarch.rpm 2c7dc7f2ddaf97a2216a953e4ba52c1ad623563fe55fa07aac96aa581aeb1a17 fence-agents-all-4.10.0-98.el9_7.5.x86_64.rpm 31d84a95470fe8da942bd8b271e03e544869d44ec8b6f184e5a71f4b1e4a2e64 fence-agents-emerson-4.10.0-98.el9_7.5.noarch.rpm 3262dab3facca2eadf80d3b54ba7484be542c59b0e35807bd216c0356718c3dd fence-agents-compute-4.10.0-98.el9_7.5.x86_64.rpm 38ae846f6b926a6b28fe9fc246f224a9f499121e093d3bf138053c261651a12f fence-virt-4.10.0-98.el9_7.5.x86_64.rpm 3943a77e127fa2817134f318e58ba5bf18b23da046e4c686f752ad5f8ed84c4d fence-agents-intelmodular-4.10.0-98.el9_7.5.noarch.rpm 40069141238412567b9e39ba25e4cd746439b9e34ac16c367ac103e20e7fe4f5 fence-agents-aws-4.10.0-98.el9_7.5.x86_64.rpm 40b7c03b091e5ec4fc285c0bc44526ab29b5e1f19a99035b03bc46b45e6c7b4e fence-agents-rsb-4.10.0-98.el9_7.5.noarch.rpm 434603eabe33f6851df7a710f6d85020be71679d12887158d462518c7d8567c2 fence-agents-rsa-4.10.0-98.el9_7.5.noarch.rpm 44d997f2e65c5d3aafa3c2ea7fa094479a02facb99532654da72412a24e60d08 fence-agents-lpar-4.10.0-98.el9_7.5.noarch.rpm 44e8e802710f69ae51e86aa413546ae9adf0e021d7251b3fa3de9e3a920fad97 fence-agents-hpblade-4.10.0-98.el9_7.5.noarch.rpm 471a83092c68d9ffc59544d3826ad79a2bd9876ff2525ac247d61c1887a0ec88 fence-agents-heuristics-ping-4.10.0-98.el9_7.5.noarch.rpm 4e1255b0fa64032f791781dc3d613ea046da9feeda4e5877f210dd4e2a570f8c fence-agents-drac5-4.10.0-98.el9_7.5.noarch.rpm 54888794665b03a1d0c8df1cf24a94f5589bdb5e87ab527df09546890888e92e fence-agents-apc-snmp-4.10.0-98.el9_7.5.noarch.rpm 5868830b44bf20352826b6006dc72f5677371f2a9e609c307dc4c1ae43b17716 fence-virtd-libvirt-4.10.0-98.el9_7.5.x86_64.rpm 587862521764bb7c4373d7bd40ba04c34fdd6674648f4b244baf2302185506fc fence-agents-vmware-rest-4.10.0-98.el9_7.5.noarch.rpm 59a8eaaafb8e63ecd813748131e5878197c7e76b09ab61a04e5feb8ea333a14b fence-virtd-multicast-4.10.0-98.el9_7.5.x86_64.rpm 5c3a296604f0febcb9d9aa2ec49ee8d47ce8043d6a3588e2961f9cd5793cff0c fence-agents-ilo-mp-4.10.0-98.el9_7.5.noarch.rpm 6bed968d59090b36dc78914af7090fab29ed62f4adbd76a4ed47a36f7563949b fence-agents-ilo2-4.10.0-98.el9_7.5.noarch.rpm 71225d333a5cc5071f7e59dac81315fdc9749d8280cf5c56aeca8456b40a8884 fence-agents-aliyun-4.10.0-98.el9_7.5.x86_64.rpm 76d8b8c1eb43cada327b0c2150aa03171c2c5f8648d1960d5670d7b7f5a7df82 fence-agents-openstack-4.10.0-98.el9_7.5.x86_64.rpm 8e8b041c280ac072af5fe6a1e8af6021d5eee6e7412a4168b54640a76afd54b2 fence-agents-brocade-4.10.0-98.el9_7.5.noarch.rpm 9149ab0f779704f4e097e688d48b8c5b82b128dadf3c42e8f7260593be83cac5 fence-virtd-cpg-4.10.0-98.el9_7.5.x86_64.rpm 969cf885de1122a62f11e0796a32f8ea183af6ffc3ec3883b165649c25dfe75f fence-agents-ilo-moonshot-4.10.0-98.el9_7.5.noarch.rpm 97d97d9f27da5e13a49b081fc489793a2dd3e51da0bf34e6a3a700f9e6ee08a8 fence-agents-mpath-4.10.0-98.el9_7.5.noarch.rpm 9e4b46f8ead566419123cacde5f268d1654a690c508949e37a562dcf8ea1f04a fence-agents-kubevirt-4.10.0-98.el9_7.5.x86_64.rpm ab7536507b3157d270e52d7c53f9c428ea3bdd657d2935bf6cb4287874bdf504 fence-agents-bladecenter-4.10.0-98.el9_7.5.noarch.rpm ac8fb7835f4e1070c33c6f0480b43ccf5f7677840c5d40822e663c2f4d762b31 fence-agents-vmware-soap-4.10.0-98.el9_7.5.noarch.rpm add0c1df0dad1d5bc7fd6b56e9a6f81d538d8974d60ee6eac32cc7e2c3360425 fence-virtd-tcp-4.10.0-98.el9_7.5.x86_64.rpm b718f5051e897f6dbf5bd937fd54acd84012db79081f325a816a520671536d21 fence-agents-kdump-4.10.0-98.el9_7.5.x86_64.rpm b8365d0259a93468dfc97815404e67596be754dda965c2310f75f09ef142ceeb fence-agents-sbd-4.10.0-98.el9_7.5.noarch.rpm bda2bf3ca14b8bac6dd8f1e5eb24f8c1884c46c263df37e67933865d95b4d390 fence-agents-common-4.10.0-98.el9_7.5.noarch.rpm bf90ae0ab6d11bae83d21aad9c9d75ac27cb6ac5108efd490f943358f268c02f fence-virtd-serial-4.10.0-98.el9_7.5.x86_64.rpm c6744e03d06bdbca67d6be787c38f6a1ff7b7c5871d75e4e1ac7f94b88518609 fence-agents-nutanix-ahv-4.10.0-98.el9_7.5.noarch.rpm ca03edb03a0e986bc79abaaf6ebf5426cc2926c0dbe760b6b06ec835c0c43740 fence-agents-cisco-ucs-4.10.0-98.el9_7.5.noarch.rpm d0803571c5f3e49830629b6f49f57bcb54d7f7ed6baf5a75290d209bfa406b33 fence-agents-scsi-4.10.0-98.el9_7.5.noarch.rpm d53a5f95a2bf1fe31530ba0b78f5c01803901040474a837a2d4223ec4382188c fence-agents-ibm-vpc-4.10.0-98.el9_7.5.noarch.rpm dc9900dc246c7d8543abec1e32fbaff6a408656ab0f7eaeb9a7fbbd5bbd855a4 fence-agents-wti-4.10.0-98.el9_7.5.noarch.rpm e113c4f2542bbc77d731a018ccbbb11b2727248c9e986a14454d64d063eea811 fence-agents-rhevm-4.10.0-98.el9_7.5.noarch.rpm e2b28924710f143cbea0a4f91d2d6aae8bb98ebfe9c63d4362f36e950948bac8 fence-virtd-4.10.0-98.el9_7.5.x86_64.rpm e381e9061d96d6909abf70db85ff9a1654bd9432699ee63456e6ae85b1fbc4b3 fence-agents-ibmblade-4.10.0-98.el9_7.5.noarch.rpm e40933d29a19ff92b72f339727336904bc931454a37183fcfb4cfda6fbc8a90f fence-agents-redfish-4.10.0-98.el9_7.5.x86_64.rpm e7e99151b1799837b212e8e60349f90facc2b0019e9207a32ed3d339c0c762c3 fence-agents-ilo-ssh-4.10.0-98.el9_7.5.noarch.rpm ee7fdf1dbbf04e60b16b6c443705789cca28b260f685e2f38233c3f5c88348f9 fence-agents-ibm-powervs-4.10.0-98.el9_7.5.noarch.rpm f5dc4995ef565b16e60151916f7570957d4bfad840ea52b44deb225ef5483ee1 ALSA-2026:1908 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default opentelemetry-collector-0.135.0-3.el9_7.x86_64.rpm d8ad952652d381daa086010da563abc56af8db960ca88475ee89bd68b106d41a ALSA-2026:1913 Copyright 2026 AlmaLinux OS 0 1 Moderate

util-linux security update

The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fix(es): * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libblkid-devel-2.37.4-21.el9_7.x86_64.rpm 1505e817564b21881b8dbfe6290e93a239733eb05203518bb254c0e66aeb699c uuidd-2.37.4-21.el9_7.x86_64.rpm 8eaad04e315afa2e894d337c9d7e5531d23b837c80aaa4e6c4fda6527c8bc050 libmount-devel-2.37.4-21.el9_7.x86_64.rpm aa13f9bfeca6c586752ffbcf77dc8752b78726984a28c8bd06ea0e0dbf230ed9 libuuid-devel-2.37.4-21.el9_7.i686.rpm bf88e40d452e5a25d19aed788bd463e6f2c0dff4c48c3f38f585ff46cbe0ad5e libblkid-devel-2.37.4-21.el9_7.i686.rpm d8ee28d34cfc352ecbf8b51d0f91bc98137ed1aa7fba8a690684d700a046197f libmount-devel-2.37.4-21.el9_7.i686.rpm dcef282b8754ca554bcf2014b83aab210d117e3dc6f4094dfee03f3feebbd811 python3-libmount-2.37.4-21.el9_7.x86_64.rpm e05a70733fba6c5aae436536aa3af80c93aa459bad60e49e70f18bda545e21a7 libuuid-devel-2.37.4-21.el9_7.x86_64.rpm e767615a101373771732d2b7cfc0c69edeecda4c81a7d78fee732416f5ef5fde ALSA-2026:19173 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default podman-remote-5.8.2-1.el9_8.x86_64.rpm 0d77929b65bed44d06e2bcbb7d113c6a83e3064267452f232ee5e55d45a0b6c5 podman-5.8.2-1.el9_8.x86_64.rpm 6b8e8686c92023fd223c7adf83cde6765bea7884692c224bb716c71a256f9a95 podman-docker-5.8.2-1.el9_8.noarch.rpm bf701b10c638d2f32f075d9b31a079ab7a604d3d2fe51c55ddf3db2ba55027f6 podman-tests-5.8.2-1.el9_8.x86_64.rpm c013043a1f087327215a8cbef63e9005f7b2894c53727820b3fbb3a45bddfe4d podman-plugins-5.8.2-1.el9_8.x86_64.rpm db29d6c65eff601bfd62774183982d6ac9445e6c12712e9e12a8fb8335fadc4c ALSA-2026:19175 Copyright 2026 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.11-devel-3.11.13-9.el9_8.i686.rpm 40c9372210deea52896c430c4b366722a68b73d3b374ac0cb81447b79fe82de7 python3.11-devel-3.11.13-9.el9_8.x86_64.rpm 53ec167a22e3981be6a5d4d60eb928c3b216ed419bd3e1f6a382e27a47a252cf python3.11-tkinter-3.11.13-9.el9_8.x86_64.rpm 978b8fe1cd2a91aad741f318994a00c2d4c21aa0ce554bddd7b00f9f346012d4 python3.11-libs-3.11.13-9.el9_8.x86_64.rpm e3b600462504fb68edf9cdf1c2c27f53ff42c99c74acbcf338721886d82ea2d7 python3.11-3.11.13-9.el9_8.x86_64.rpm e4dfe3713c03c1b19749de977278c4f9993cab137da809c6c631d0a530bce219 python3.11-libs-3.11.13-9.el9_8.i686.rpm ff69b1474d6567b5025117ed54934624b7adc24734d8463f16b3f8986989edca ALSA-2026:19176 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865) * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297) * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644) * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224) * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) * python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-libs-3.14.4-2.el9_8.x86_64.rpm 34a49d0d73b4fd877c7b9da9265928dd156e42de456e37056937afcee83f62bd python3.14-devel-3.14.4-2.el9_8.x86_64.rpm 4cde69155296b0e0af65a924b2a8a5e72275de13aa0ffd403525e8aa6846aad7 python3.14-tkinter-3.14.4-2.el9_8.x86_64.rpm 8b8a8c34d769ce5357eb399a71cbdf9db1ae2d5a4c7592d32a04367b572b7b8e python3.14-libs-3.14.4-2.el9_8.i686.rpm 93e02023a0fc96cbb7e14dad8227ab7737efbc045a3589b646acc2749829464d python3.14-devel-3.14.4-2.el9_8.i686.rpm e06896f63138baaa87f702b34066f59121349dd5cb1bd204c028d210fe6ee24a python3.14-3.14.4-2.el9_8.x86_64.rpm e09272cdaeeeff607a199349a6dbe84aa63748fd7d15851267c2c1bbf60c4170 ALSA-2026:19177 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375) * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075) * cpython: Out-of-memory when loading Plist (CVE-2025-13837) * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282) * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672) * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297) * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644) * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224) * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.12-devel-3.12.13-2.el9_8.x86_64.rpm 1c9c71cc8fefdc48e19c485f61b4469eb8dd8f33e193adb7461c52aa32fd8a83 python3.12-tkinter-3.12.13-2.el9_8.x86_64.rpm 3f3d30e29befbca26b0a7db32ed2f987725a2d35d6b6f642320852f7ae4317e0 python3.12-libs-3.12.13-2.el9_8.x86_64.rpm 43f947df3570ed891b1a747a3cdf9aac84b931be6950dd95d90eaa31841545b9 python3.12-devel-3.12.13-2.el9_8.i686.rpm 58d2939bb20fe2a564f147f85f4337d745b34105068065b996cb4aed630bb75d python3.12-libs-3.12.13-2.el9_8.i686.rpm 9b23514051a48591da9594f22ee6af5891a81951d1e07b4b9a15f3ed20de3e4a python3.12-3.12.13-2.el9_8.x86_64.rpm da3ad7fe9ba0f76a184594da9dc5e8887cef5946498a69a6f1ed49249f01c7bd ALSA-2026:19178 Copyright 2026 AlmaLinux OS 0 1 Moderate

crun security update

crun is a OCI runtime Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default crun-1.27-1.el9_8.x86_64.rpm 211ccce1c933cc76cb018563c09d10bb3da27671751940712affc3ae7ef50c45 ALSA-2026:19180 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-base-1.22.12-8.el9_8.x86_64.rpm 1f9df15fc0b63ea553a811d4142d39ffaa67b84636b7cb1d51c923a099d5cec7 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.x86_64.rpm 263111bac5e208b70a494e7649e4957bc5de395a0b34fb3f9c70876263b5efc8 gstreamer1-plugins-base-devel-1.22.12-8.el9_8.x86_64.rpm 334fb12f05527d75c87873cca0e221348aee742386ae4c219a47c16dce9d3c44 gstreamer1-plugins-good-1.22.12-7.el9_8.x86_64.rpm 5f732e28f698a18b51b227d42b4f9b14bc81ef928218e71bd87d0b1de7ffcd99 gstreamer1-plugins-base-tools-1.22.12-8.el9_8.x86_64.rpm 670d0bc9f936b3a365b3daebe9231502695f765b687f8acf144098c23afb64c3 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.x86_64.rpm 88b28c4e1641dca3eb33a419ba0bf91d5b9995f8f9097ce555d5cdb1e241f579 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.x86_64.rpm 89934b82fe0522bf8b1b3adf5d8ed85f883477952f1c128468bd9259381f67cd gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.x86_64.rpm 8ba3666ff3f5660a9b5f2880d69eae1131ed4db3954f43d6dba85ff0f4cf290b ALSA-2026:19181 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default golang-bin-1.26.2-1.el9_8.x86_64.rpm 04ea3f789fef5d7ecbfb5aed451a53077b00e11d16f01b93eb12269950e6e8bd golang-tests-1.26.2-1.el9_8.noarch.rpm 08e67e53fc3ce9c0ae96ee93a5e4ec66f4e5a3a2ffed7a0f9616d7670c9ee570 go-toolset-1.26.2-1.el9_8.x86_64.rpm 14d704783df52727e48c37386db5513e729deb815b4d5c24cdbf76eb12456215 golang-misc-1.26.2-1.el9_8.noarch.rpm 2b165165493a8b8fdd5580a8b1fb21b00df7d36596374379549a4d569feb2ac1 golang-1.26.2-1.el9_8.x86_64.rpm 5337dd6fe13576573d495f490306939cf9f776ccde8399fbdb500a4b5a5e1b36 golang-race-1.26.2-1.el9_8.x86_64.rpm b5c0e2d902db9e646fd8dc478b51c2cc356287cbd3af76383469c42f51c82ca7 golang-docs-1.26.2-1.el9_8.noarch.rpm c6f64db75f56c9be80e9d422eff77fb9d16eb9d3573825deeeef6f21aaba86fe golang-src-1.26.2-1.el9_8.noarch.rpm eb5fa14bbbf8d032e4aba23b5f3e28e92d877365ba212ca2df8ecd70381ea7ff ALSA-2026:19186 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default buildah-1.43.1-1.el9_8.x86_64.rpm 7f65c6cbc63c16dc90be94312a830839fe9f33ffd7ee102e2ca8535ea94a3f27 buildah-tests-1.43.1-1.el9_8.x86_64.rpm 82352622f0057131a1a6b6dd6dce842520fcccb05fb684654a62d3068c11c92c ALSA-2026:19187 Copyright 2026 AlmaLinux OS 0 1 Moderate

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default compat-openssl11-1.1.1k-5.el9_8.2.x86_64.rpm 32ee8f59bab07f77de56f65d60793fcad9c8ca7467b312d4ac7c65fc5895def5 compat-openssl11-1.1.1k-5.el9_8.2.i686.rpm df0d216aaf075c1f522edb95f27b397e31b6b7a36ba1c94a84f0dc5b87c51f29 ALSA-2026:19189 Copyright 2026 AlmaLinux OS 0 1 Moderate

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado-python: Tornado: Denial of Service via large multipart bodies (CVE-2026-31958) * tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments (CVE-2026-35536) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-tornado-6.5.5-1.el9_8.x86_64.rpm 3655733b10b3a7cc8d6193cfa67636ec8cb32f85552768f8386d2ec0cf38a2d0 ALSA-2026:19197 Copyright 2026 AlmaLinux OS 0 1 Low

python-jwcrypto security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens (CVE-2026-39373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-jwcrypto-1.5.6-3.el9_8.noarch.rpm e66316079d3883be28953443b67665f3a7fceb807b84eb38d480e8b6c6c2591e ALSA-2026:19200 Copyright 2026 AlmaLinux OS 0 1 Moderate

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default corosynclib-3.1.10-1.el9_8.1.i686.rpm 0e0e0e743d075b6fbe4b6b3a553b3f99ab2393d9ae0c0ba4e652ace2382d2913 corosynclib-3.1.10-1.el9_8.1.x86_64.rpm 905696744c4a21358ecf5e6c683e52109cae11b8d4c12c4ec5865ba60f76a8ea ALSA-2026:19206 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43213) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43214) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43457) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43511) * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-46299) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20608) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20635) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20636) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20644) * webkitgtk: A remote attacker may be able to cause a denial-of-service (CVE-2026-20652) * webkitgtk: A website may be able to track users through Safari web extensions (CVE-2026-20676) * webkitgtk: Processing maliciously crafted web content may bypass Same Origin Policy (CVE-2026-20643) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20664) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-20665) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2026-20691) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28857) * webkitgtk: A malicious website may be able to process restricted web content outside the sandbox (CVE-2026-28859) * webkitgtk: Visiting a maliciously crafted website may lead to a cross-site scripting attack (CVE-2026-28871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default webkit2gtk3-devel-2.52.3-1.el9_8.x86_64.rpm 04526a1f4c91dcddbb265f1e8a79d3358ca494d5dc58b44791be2ec51be2fdf9 webkit2gtk3-jsc-devel-2.52.3-1.el9_8.i686.rpm 1783dd00f5b2a0be44e2910c73309b94421db187f29c23102323eae70ac182ef webkit2gtk3-jsc-devel-2.52.3-1.el9_8.x86_64.rpm 261546d81d7645eaffdf4974be72a2ef471aeaf1bb3a21facf7f53a87417ffa6 webkit2gtk3-devel-2.52.3-1.el9_8.i686.rpm 484160192437be5798143226effec65c4864d824a871a6c73dae6b000cbe6972 webkit2gtk3-2.52.3-1.el9_8.i686.rpm 6b0429d7cef13ef373884b9427b54c66f141b10039c57c227745cef170b75bb2 webkit2gtk3-jsc-2.52.3-1.el9_8.i686.rpm 72fd1f4c178c73c208520d8ca8c54d9bebf165cf3db1c24e6d5d70bdaf06e198 webkit2gtk3-jsc-2.52.3-1.el9_8.x86_64.rpm 8bd2be1802c088c7ac0771fc517b2893dcf481ad9fea621b24642f89c4dbee16 webkit2gtk3-2.52.3-1.el9_8.x86_64.rpm 988e8c7e6a5304bd6c0d0f07fe605dd17ff92fa1eca0ef1aaac93ab317a51fe8 ALSA-2026:19208 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default freeipmi-ipmiseld-1.6.17-1.el9_8.x86_64.rpm 2d076c50fd6b7f36f24d84c9c66a85e6b68baca64f9ebfb454910d9da5ac6510 freeipmi-1.6.17-1.el9_8.i686.rpm 358e1faf87a7515cc00dea15a463cfe458db755703e88641222ce247bad0c96a freeipmi-bmc-watchdog-1.6.17-1.el9_8.x86_64.rpm 763dffc10bd95c7951b2cf21c61a941d517690cc4e21effed1f876952bd514c8 freeipmi-ipmidetectd-1.6.17-1.el9_8.x86_64.rpm 9b108d2370e14c00052e5a25ba2d6be5e9ec75ee2cd86f0d66a399987b17577b freeipmi-1.6.17-1.el9_8.x86_64.rpm f2e8f117e110f6386c834ac126b265574b94ff2d9c5a08c0293f7e94c75899cf ALSA-2026:19210 Copyright 2026 AlmaLinux OS 0 1 Important

gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gdk-pixbuf2-2.42.6-6.el9_8.1.x86_64.rpm 19ed92b1eda3da7ef65c679741667b4fd6484ddce62b6e5b7c1d889f30fdc96f gdk-pixbuf2-devel-2.42.6-6.el9_8.1.i686.rpm 5aa175dfae3d87a7e173694d63ec8bf9fb33fe9316299f46e6ab65a832cff27d gdk-pixbuf2-modules-2.42.6-6.el9_8.1.x86_64.rpm 77b40b33f645922f9269990160d03166d02c645d2c840ba2aa8a659739c39329 gdk-pixbuf2-devel-2.42.6-6.el9_8.1.x86_64.rpm 8d02d41fa83eebcfa6a4d9c0f08f79c6dcb2d6d220c76a85b080b27047842a8f gdk-pixbuf2-modules-2.42.6-6.el9_8.1.i686.rpm a444008e075cea5a324fb54948d46ac761f5a16c530475a30af3f116e2e1c810 gdk-pixbuf2-2.42.6-6.el9_8.1.i686.rpm c6c143a800622dc50501cd6dbbcd0cdf20374872f6589264f1dc3f60491224f8 ALSA-2026:19213 Copyright 2026 AlmaLinux OS 0 1 Moderate

systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data (CVE-2026-29111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default systemd-ukify-252-67.el9_8.2.alma.1.noarch.rpm 1a4f0806fd77d375c8c135c7e51d18fa9cbf1888602883cb3ecfc1b4474adcea systemd-boot-unsigned-252-67.el9_8.2.alma.1.x86_64.rpm 335fdd8e6571d251a3f0cf212bbc621fdc020b6e10c4bb4e4ff9b11320ce4228 systemd-devel-252-67.el9_8.2.alma.1.i686.rpm 85e9f47112b0e8f2a9bcde9e386852d4930b4271ee5730350f88fc3a01c9efff systemd-devel-252-67.el9_8.2.alma.1.x86_64.rpm edbaf6f2d4828dc86b4f335abaaef79c9a74b1ee7948a9dffd445c88d6c96a6b systemd-journal-remote-252-67.el9_8.2.alma.1.x86_64.rpm fd9fea8465e9dd037b9195499b3366ceb7af22517b264c2f92e42eb1d6c9ae47 ALSA-2026:19216 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-devel-3.9.25-7.el9_8.i686.rpm 1fc79d8568b025cf07cd616dc559a1f31f86bc3d12bbd0f1e1ff47b63bb1ae5b python3-devel-3.9.25-7.el9_8.x86_64.rpm 957a7292591278b987b6904229bc4d65497bb36b406bcb56ff913868eecbe589 python-unversioned-command-3.9.25-7.el9_8.noarch.rpm 9fe444f47227c4074646726aad56f37d6429f0194a82c959db352a2742937fa3 python3-tkinter-3.9.25-7.el9_8.x86_64.rpm dfdb0a07d5d13d5edad86db5bac7713768ec116643f5121e05567789e9126861 ALSA-2026:19218 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openssl-devel-3.5.5-2.el9_8.x86_64.rpm 32fe07b5bb8451ac51d7152a05629d499975893808980daf1aeb84bbdd215201 openssl-devel-3.5.5-2.el9_8.i686.rpm 3e7c29928930a811f40320ecf2d11e9ec99167e519c49b9c9c687ea63566f610 openssl-perl-3.5.5-2.el9_8.x86_64.rpm a010ba3ec0bf3850b7622f1acebe2d0b8e029ff4b3a9d147919b85d6af42a302 ALSA-2026:19219 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385) * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414) * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387) * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388) * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pam_ssh_agent_auth-0.10.4-7.7.el9_8.alma.1.x86_64.rpm 6b04b1f944301fb84d76fd0d80f9c6d36ef2a52e8496cd587bc9ecd46c89fd77 openssh-askpass-9.9p1-7.el9_8.alma.1.x86_64.rpm cb6a33522c24dc992bb47ec93c6688abdf942bbd3a3b017ce221fc74b9256add ALSA-2026:19220 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default sudo-python-plugin-1.9.17p2-3.el9_8.x86_64.rpm 04aa62ede4db8846cbd63b653f29e9599deaf647afb061ae9647c1bf47ee3668 ALSA-2026:19224 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default vim-common-8.2.2637-26.el9_8.4.x86_64.rpm 092e00ecd605684d054bb2b537a96b79793cdd0a0d795825589a7be275d0920b vim-X11-8.2.2637-26.el9_8.4.x86_64.rpm 41ee8b63f98c9cd78f20f97b3ffb357c3597a7682567348edf68152eba9390e3 vim-enhanced-8.2.2637-26.el9_8.4.x86_64.rpm 4e9ea06c9f70c340aff8c548603684b843c6015cce916582ee9eadb3a615e0b7 ALSA-2026:19225 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-headers-5.14.0-687.5.3.el9_8.x86_64.rpm 041b7e479ad368960f507f367f7e356650a88c7a285dbf14df02631fd0e1d4c6 kernel-doc-5.14.0-687.5.3.el9_8.noarch.rpm 33ca69fc070e55e4b840823a5d48ab5c3cde5157c69ef93423ad2fbc5402a62f kernel-debug-devel-5.14.0-687.5.3.el9_8.x86_64.rpm 37e5edba0a1f68ca9925ad1903453314f1424c2cd7762388294e6164bc8d3416 kernel-debug-devel-matched-5.14.0-687.5.3.el9_8.x86_64.rpm 402ba8d08fe9fe2b2688e09c66c8ec48f0871aa528707cd6d06bfd91802d2e4b python3-perf-5.14.0-687.5.3.el9_8.x86_64.rpm 5311b8705ae3ac51b733b10190448d14662ce71dce0d2640074b3ddde4185b1e kernel-devel-5.14.0-687.5.3.el9_8.x86_64.rpm 5b461f09912368eae089859d079fe953ae7ce5121439007a9b71db8da73633c5 kernel-devel-matched-5.14.0-687.5.3.el9_8.x86_64.rpm 725100d71bc30eb43ec9db5b6ddd13aa31bac6d28d09da6ff416614ea7c3f760 perf-5.14.0-687.5.3.el9_8.x86_64.rpm 77c75c6fb6aa8cc267ec1f007849f7f31b229d8c9043ed17684222dd9e12dadc rtla-5.14.0-687.5.3.el9_8.x86_64.rpm 9b6782c384eb849641181b921912b524498206048236f33cef2f32e3acb1a64c rv-5.14.0-687.5.3.el9_8.x86_64.rpm a9e71b8da415488918b38ca83addabcbc22e1c48de5d81737def2e141f93d519 ALSA-2026:19342 Copyright 2026 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. (CVE-2026-34000) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default tigervnc-server-module-1.15.0-7.el9_8.1.x86_64.rpm 141cd55fdf20de9f4e9992f76355304e414bd41c37794c7d110232056cbb4ae3 tigervnc-icons-1.15.0-7.el9_8.1.noarch.rpm 204dc02b0092c43fea77222b15f9ddd4c77b8c72beef2e9073b0c24894adcc08 tigervnc-license-1.15.0-7.el9_8.1.noarch.rpm 672089a8fee58da2e35ca630c893fd3e167a9eb513d9f6e54ffd88b4e0153082 tigervnc-server-minimal-1.15.0-7.el9_8.1.x86_64.rpm 6e675a3edf10024a9bd7a2dd3c0bf9cbf7bf80de8255e068cb12bd7d08b32a27 tigervnc-1.15.0-7.el9_8.1.x86_64.rpm a32f9eedb2630a6015d4ad3b05a7938ea623d28bfe47aae4bc3488976ed20cc1 tigervnc-selinux-1.15.0-7.el9_8.1.noarch.rpm ae1ca1cabd7da66c8cd0aba66e2ac735b06b37092ae2419168c3952db5fccd49 tigervnc-server-1.15.0-7.el9_8.1.x86_64.rpm b6de7cc9ac5fd95dad0b164cfda74729dfff4a3ed60e86bbaa4a4bc68c864154 ALSA-2026:19343 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xorg-x11-server-Xnest-1.20.11-34.el9_8.x86_64.rpm 3755ee9ee9de8acdba83d15154b24a492f972719641d89f1e007a0f10e30ab2e xorg-x11-server-Xvfb-1.20.11-34.el9_8.x86_64.rpm 39232e906d520e36069d2ab95e93af6290fdcf39cead6311d10ea94689961581 xorg-x11-server-Xephyr-1.20.11-34.el9_8.x86_64.rpm 5c23795a5b6e73fd0f505294099460b5a0263bd14745b521d940ff021a6c5a9c xorg-x11-server-Xdmx-1.20.11-34.el9_8.x86_64.rpm fb4389aac1f12453fd8579f9992ec48ba3f42f9d944946c88a43166f93ad15d0 xorg-x11-server-Xorg-1.20.11-34.el9_8.x86_64.rpm fd068637044941a80ca1533c21e0481bcb6ed73ef82e63a43b3ca4205f2edc24 ALSA-2026:19344 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xorg-x11-server-Xwayland-24.1.9-4.el9_8.x86_64.rpm e348a32ab86dc703e5d1050ae98a21ab6c1e7079d26772e78ca0b2a70870a74c ALSA-2026:19345 Copyright 2026 AlmaLinux OS 0 1 Important

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450) * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default LibRaw-0.21.1-2.el9_8.i686.rpm 1733cb4a73aa17dae8b67b47988a18565885f7ae60a95c281fcbf55c2fbac689 LibRaw-0.21.1-2.el9_8.x86_64.rpm 778b3d7bc998140cb273ae3e74d869696ac39dcb992e7273a0045f1fb791107c ALSA-2026:19346 Copyright 2026 AlmaLinux OS 0 1 Important

libcap security update

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libcap-devel-2.48-10.el9_8.1.x86_64.rpm 9e155f9f1b708b91224267410173059bde85f35063bf9ff88e02b7990de6513f libcap-devel-2.48-10.el9_8.1.i686.rpm a60b9502d00c84fdcbb93cdb5d47b4337fc6a70d51f151d1ed2243676a2634e7 ALSA-2026:19348 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754) * firefox: thunderbird: Spoofing issue in the DOM: Core & HTML component (CVE-2026-6762) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752) * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757) * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759) * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747) * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749) * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766) * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761) * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771) * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764) * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765) * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769) * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-6746) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320) * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322) * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default thunderbird-140.10.1-1.el9_8.alma.1.x86_64.rpm 296897ba94278edce268f0376fe73388dac5e448b82c8cdc23ed0107641baafb ALSA-2026:19350 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default git-lfs-3.7.1-4.el9_8.x86_64.rpm 44e4f9d716c29ab5360854fdc68cd8cfc3079f244bbbc3c4477f07f5640faa89 ALSA-2026:19351 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-pcp-5.1.1-15.el9_8.x86_64.rpm 4b98aaf905a71deda119a3df6a33ee1f836011dcfd88a1018c78b72f49643dc4 ALSA-2026:19352 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Information disclosure of data-source passwords via public dashboards (CVE-2026-27877) * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-selinux-10.2.6-22.el9_8.x86_64.rpm 82215c65588dcec00cfa1e8edcc065d57b858e473b91afb67b71779728e3e9e4 grafana-10.2.6-22.el9_8.x86_64.rpm bf3d78f48e180238482f38c372a1ba898891248eb7f780d3294f033743d3a12f ALSA-2026:19353 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186) * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default opentelemetry-collector-0.144.0-2.el9_8.x86_64.rpm c36437101fbffb292ef772628e87b0205aa71aee422ea697751e5fb71488802f ALSA-2026:19354 Copyright 2026 AlmaLinux OS 0 1 Important

PackageKit security update

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default PackageKit-gtk3-module-1.2.6-2.el9_8.x86_64.rpm 04fc84754fda59c70e1f2ad32da64105df6cc46f176b40b4dc54a6982486a4d4 PackageKit-command-not-found-1.2.6-2.el9_8.x86_64.rpm 40ef92c5f77d90262fbc5e0b70311a7364a5bc8aeccaed02fad71567ae465a8b PackageKit-gstreamer-plugin-1.2.6-2.el9_8.x86_64.rpm 54798f84e039d247c61f87d8373a87fbdd943ab25f78cfd260a84270cd96ff4d PackageKit-1.2.6-2.el9_8.x86_64.rpm b50eba27d092a87b3db0d8999ef8c13d9a395baf228c9ab51bc60a99a9240e0c PackageKit-glib-1.2.6-2.el9_8.x86_64.rpm b63c328f0e551b6f8185d4a044c32dcc0fd777f762ba5c716161dc12244fd477 PackageKit-glib-1.2.6-2.el9_8.i686.rpm c1448185a4015d52a52692fdf01c8accf751d639b6353b9c0b7c48de1d26e41c ALSA-2026:19356 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libsoup-devel-2.72.0-16.el9_8.1.i686.rpm 2740b273d01afee41425073d519cfaf2d44c806597ddeecb681e6730b7d596eb libsoup-devel-2.72.0-16.el9_8.1.x86_64.rpm 2c0454de732969482cd3491f20a2ac0e186444e6be73114ca3feed8a8c1976ab libsoup-2.72.0-16.el9_8.1.x86_64.rpm 3102839def02e018c6cbddc098ddde507cbfa82a849c8b64cd05cb3b0bd25b2d libsoup-2.72.0-16.el9_8.1.i686.rpm 4da08efd39fc677012248ea0373392f24ee2e1caa881da7450a4728f171c807e ALSA-2026:19357 Copyright 2026 AlmaLinux OS 0 1 Important

krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): * krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356) * krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default krb5-devel-1.21.1-10.el9_8.x86_64.rpm 943f164e5960d922e136be0e91817e3797c42d63f31a37ba1c535b8f2279bd5a krb5-devel-1.21.1-10.el9_8.i686.rpm ee05e9628f4bc1189de9cdbafc683584fe4b2e1510a221810e6bbb31e730ec40 ALSA-2026:19358 Copyright 2026 AlmaLinux OS 0 1 Moderate

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952) * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986) * freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951) * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775) * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885) * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884) * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883) * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default freerdp-libs-2.11.7-7.el9_8.3.x86_64.rpm 1fb8f665c2e3a91902fca606e394d074321717384d9d8f74f03e4e75e0212858 libwinpr-2.11.7-7.el9_8.3.i686.rpm 3bc785f8aab8383c0e35fbcb19bf183faabecffa3a634e118949c9a51e7c625a libwinpr-2.11.7-7.el9_8.3.x86_64.rpm 831326f6e5a8443a01dcded038207526b67c0ab52b728ee8edccd8daa21fd7a7 freerdp-2.11.7-7.el9_8.3.x86_64.rpm b5a444ec24d086e38e6a2c24f546108a91a98e1ff581a0a32a9b01ae0aa44d4e freerdp-libs-2.11.7-7.el9_8.3.i686.rpm cd7c87a2a6c9a4efc46d653db6539bb9bfac04ad63257f0bc11239ea263f573b ALSA-2026:19359 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openexr-libs-3.1.1-3.el9_8.2.x86_64.rpm 27ab68e7654dee3e0b447eee5f08ee5ab6fc359edddc3e6382c1afc1fd97f2ea openexr-libs-3.1.1-3.el9_8.2.i686.rpm 575218bae2742891bc3a9b8c0fea75cf74ebcb4617a683ed6889041d767887bf openexr-3.1.1-3.el9_8.2.x86_64.rpm 9335632ee3ff9ff3b5683337b1f5aefa851150daee5b8c6d64598ec8f5896460 ALSA-2026:19361 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default glib2-tests-2.68.4-19.el9_8.1.x86_64.rpm 46118434650ecedc3baf18695ec78f3f7514d0f21d955ddea13abfdb721d7bca glib2-devel-2.68.4-19.el9_8.1.x86_64.rpm 73bcb9cf5515f87ff9119c9cf096e2eed8d34e02d13670dadf3a94e9116ed7bd glib2-devel-2.68.4-19.el9_8.1.i686.rpm 98274659d7900748762614fac9cd7533811a3aa68fd5a199f01f9e3d8ccda2b1 glib2-doc-2.68.4-19.el9_8.1.noarch.rpm cda772d673741f8feb8166c8a9da05787ce099516f6e443d57ec2b2adbaebf33 ALSA-2026:19362 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887) * gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154) * gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow (CVE-2026-4151) * gimp: GIMP: Remote Code Execution via malicious JP2 file parsing (CVE-2026-4152) * GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150) * gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gimp-3.0.4-4.el9_8.4.x86_64.rpm 19c5e1ab5e92726957549c661bf682c291e9ba707e4ec1d9cd1dc4aaa0c04449 gimp-libs-3.0.4-4.el9_8.4.i686.rpm 47e24efe2d49ee0d2a1a443ade0a0c345e4b4c0780ff32302ef5cb1f8abb1217 gimp-libs-3.0.4-4.el9_8.4.x86_64.rpm ed6a5175fd31ae951390159a38dbad47623599227081feb80e9aac314d70f2e7 ALSA-2026:19363 Copyright 2026 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libtiff-devel-4.4.0-18.el9_8.i686.rpm 942a7655efbbe9146abb2eb8dbaf01bd52b9aa9676b4e39774115320ba9ecd25 libtiff-devel-4.4.0-18.el9_8.x86_64.rpm a68e7aa9dc86527dc411d9d175276ecc391b0fa6b37383324fefe37f445f0205 libtiff-4.4.0-18.el9_8.x86_64.rpm e8ddd4f17657394ec074299cdb01a725cfa1ba172631ebf1d91de2acdd2dfbad libtiff-4.4.0-18.el9_8.i686.rpm f2295d0cfe8183fd4c51afbeb5c955d34630cefd139e078343abfcce70d01ca4 ALSA-2026:19364 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032) * dovecot: denial of service via crafted message before authentication (CVE-2026-27858) * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dovecot-pgsql-2.3.16-18.el9_8.x86_64.rpm 2ef404db74290631998e86928c5f3a8d3f76a474e826a0f3eea626d44c923dad dovecot-2.3.16-18.el9_8.x86_64.rpm 6d9c706cd1c9b905fd152a8e321d469959d53be87c39061d25bee34a1d1894dd dovecot-pigeonhole-2.3.16-18.el9_8.x86_64.rpm 7bc2ce6ce6a2725f405d28a9fa267dd26bc9ade204028ea5126cd4cd0eb88106 dovecot-mysql-2.3.16-18.el9_8.x86_64.rpm b4a491ec72800585be9a2a269cc00f54fc0c9e8c0855619f15cdc3a7f0e6d4b4 ALSA-2026:19367 Copyright 2026 AlmaLinux OS 0 1 Important

giflib update

Please update For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default giflib-5.2.1-10.el9_8.1.x86_64.rpm 8541c9607c5445d4196d0a68fdb2ea10cc0a7fb5ea09987b3c3e8b6523c58509 giflib-5.2.1-10.el9_8.1.i686.rpm bb3bbafe689324d965e53a142fc1f58985ea11f8837bdbf1e2e70d31407ec8b8 ALSA-2026:19368 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync server leaks arbitrary client files (CVE-2024-12086) * rsync: Rsync: Use-after-free vulnerability in extended attribute handling (CVE-2026-41035) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rsync-rrsync-3.2.5-7.el9_8.noarch.rpm 43d9cf79fa9ce4a89b964a0232c459b19ee6c2e5985cf441871054079586ff5b rsync-daemon-3.2.5-7.el9_8.noarch.rpm 919ae583f77c1cc05f57aee5b61c4f5cdeef715158ae1b4e986d9e7e23fcfb12 ALSA-2026:19370 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320) * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322) * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firefox-140.10.1-1.el9_8.alma.1.x86_64.rpm 06266333ea3ce57b290f5589407d1ed299565c6cbe740cbb9179c39c945d0909 firefox-x11-140.10.1-1.el9_8.alma.1.x86_64.rpm 89fcde9002f9007bdcbcfb10b5eb2de8e1260fac9b3146722492b8cd440f2f2c ALSA-2026:19371 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-filesystem-1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1.noarch.rpm 4b75dc5e5a21e8910ba86a24f6e6258401f3621309f270bd5108dd80b6bf19d0 nginx-all-modules-1.24.0-7.module_el9.8.0+246+ef96a02d.1.alma.1.noarch.rpm aa4adf00fe9a29ad20661636181a70b59636f81647b8a23f56f13995636f0f96 ALSA-2026:19372 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-all-modules-1.26.3-9.module_el9.8.0+247+aa936373.noarch.rpm 79370c3b0f6d72f1c1c18536070f462a31f2caaa3e44a0f7655bbc1f2aae8bce nginx-filesystem-1.26.3-9.module_el9.8.0+247+aa936373.noarch.rpm a588c17f4b6c26252592c622da00137b3b8c446004b63892f235b283b8a7484e ALSA-2026:19373 Copyright 2026 AlmaLinux OS 0 1 Important

dnsmasq security update

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291) * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890) * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891) * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892) * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dnsmasq-utils-2.85-18.el9_8.1.x86_64.rpm 946d3104b4749bf2928f28d028455ca0e725145e9c0f746300c17bfbf8d1246f dnsmasq-2.85-18.el9_8.1.x86_64.rpm a63eb39966ca6c203df9be696ca73c32c522290560e0f4604157601713265dce ALSA-2026:19374 Copyright 2026 AlmaLinux OS 0 1 Critical

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-mod-mail-1.20.1-28.el9_8.2.alma.1.x86_64.rpm 067c7aac6b5fe714fb261fad99e68d7ab3b4bfbeb37fae16580621a2f8f82aaf nginx-filesystem-1.20.1-28.el9_8.2.alma.1.noarch.rpm 12f18b98da9a7faa44afda3b2668f321871594ee329ee860f6775cd29b059e3b nginx-core-1.20.1-28.el9_8.2.alma.1.x86_64.rpm 543893ce101ca1354d61b8b912f09427d2938c56c52118d25a5f54c710806692 nginx-mod-stream-1.20.1-28.el9_8.2.alma.1.x86_64.rpm 6b50e510f3249d856c73b2a17cb6db529c4e3c30bd4f77d3ada1818683a7e964 nginx-mod-http-image-filter-1.20.1-28.el9_8.2.alma.1.x86_64.rpm 7f2d25cbe050c404aca51090487795cc33e6b02ab6cbd5ab464381491e763fee nginx-mod-http-xslt-filter-1.20.1-28.el9_8.2.alma.1.x86_64.rpm b48a653534c37b1aad6578b63083726d7acc5c8ececa5f2e2b0e363caa22f131 nginx-mod-http-perl-1.20.1-28.el9_8.2.alma.1.x86_64.rpm c40b89314e9a0a6e254b06a794091115c5c03177195ca94a6e8561305217e8e6 nginx-all-modules-1.20.1-28.el9_8.2.alma.1.noarch.rpm ce5401d4547cbc480a1fcbb0a701d21434b2bf97b7b33cc45dfba0c5a7ee32f8 nginx-1.20.1-28.el9_8.2.alma.1.x86_64.rpm f1fa3ccf2912d871dd5c61d1c3dde9dc584c8d64465836a3a275ee2cd97cfd10 ALSA-2026:1939 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-wheel security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.12-wheel-0.41.2-3.el9_7.1.noarch.rpm 9413f53ffc095e36c05ec3a5d831494ae2982f7d1c8d756934be012af6221166 ALSA-2026:19568 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perf-5.14.0-687.10.1.el9_8.x86_64.rpm 21006de52814a44181fa49a7ced8c9b492747efa28e873f180e6b67cd7dfae1e kernel-devel-matched-5.14.0-687.10.1.el9_8.x86_64.rpm 30c0bdd547a7edcb952f24e2273d3cc017af526befa90d0d53efe41bc7510dd4 kernel-debug-devel-matched-5.14.0-687.10.1.el9_8.x86_64.rpm 596ab2413090292fbaff3f6db7532cd917e1dc196131ffb886c461244953ec88 kernel-devel-5.14.0-687.10.1.el9_8.x86_64.rpm 634bceb229435c90a143ef567be33c0f9fe6bfcb37254ec2f8bb4ce3059a7c73 rv-5.14.0-687.10.1.el9_8.x86_64.rpm 68f5b9b32a497d72481983b66b896247cf22059370093c21240c305e0afca9cb python3-perf-5.14.0-687.10.1.el9_8.x86_64.rpm 6dcd263e09dd6f23934a22dd1a6b4fa3ee7a36390765473e0cdbac5805b1dbc0 rtla-5.14.0-687.10.1.el9_8.x86_64.rpm 9d8c728778efa753bd3826964a28e37481eaf9704fdf5dee776d8a3e95b9a479 kernel-doc-5.14.0-687.10.1.el9_8.noarch.rpm c86d478183c0e93679c9cec4f8150367b9476143809996d576f886886b8dad83 kernel-headers-5.14.0-687.10.1.el9_8.x86_64.rpm d5f3559617aefa776da19f7335d49075227f7529d351fac993e5aae76316c429 kernel-debug-devel-5.14.0-687.10.1.el9_8.x86_64.rpm dfa1956698007353bf6b5d9e51309f9cd9473dedc37259d656102d900d31db04 ALSA-2026:19610 Copyright 2026 AlmaLinux OS 0 1 Important

libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libsndfile-1.0.31-9.el9_8.1.i686.rpm 528ab72baccdf1032afa3c684056ca55c90418fd6de803c5e97d73745e88b8fd libsndfile-utils-1.0.31-9.el9_8.1.x86_64.rpm 744f0bc811bdf535d8f00aa2c8751ee77700fe0eef5b1d9744f64894c9601c83 libsndfile-1.0.31-9.el9_8.1.x86_64.rpm edcbaa987b7c20b174b3926b058bccae7154608e31188e657ba3bf619d868eb0 ALSA-2026:2042 Copyright 2026 AlmaLinux OS 0 1 Important

brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default brotli-devel-1.0.9-9.el9_7.i686.rpm 3cb44ff622ec88b08c4daf422f7a367c70deb309c648b01bc3bb95cde6a98caa python3-brotli-1.0.9-9.el9_7.x86_64.rpm 5bc186448113e82c3dfcdde4670fc7f44b7c3a391093242c8c7b5ff110f064d2 brotli-devel-1.0.9-9.el9_7.x86_64.rpm 7931809458a64e3df2ff19cd0e5fa6636a8cdcb12feedb48238483aca33fb60b brotli-1.0.9-9.el9_7.x86_64.rpm a42d7c62647aeac7c1989384c403a9ea4728d845071de4e0eae68d01ef48a3c6 brotli-1.0.9-9.el9_7.i686.rpm e93a982eaf6f853bdf4f2829318b9a14df38b998dd8d67d0a902c6debfd785db ALSA-2026:2048 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530) * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884) * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883) * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533) * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531) * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534) * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default freerdp-libs-2.11.7-1.el9_7.1.i686.rpm 619d37ba8ea92b2cb82e958b79c54940987840f6d102a1be47cd9414d465aa7f freerdp-2.11.7-1.el9_7.1.x86_64.rpm 6bb9b5478f0a65504f657b4c8161b55ec73543bf0bc18e043509e254db1dec7f libwinpr-2.11.7-1.el9_7.1.i686.rpm 9b269c002e20f3a25604fd29ea7d38427e2dc1921867b57d93cb2155494e299d freerdp-libs-2.11.7-1.el9_7.1.x86_64.rpm ca1c3d726725abe268a331e386446e51a6ffb761b7dc19e433d572d1ca103cd0 libwinpr-2.11.7-1.el9_7.1.x86_64.rpm d96e090f8398d09e62f7620a8838abc798253b64b9e80208f8bd999043f0a6d6 ALSA-2026:20574 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Other issue in the WebRTC component (CVE-2026-8094) * firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 (CVE-2026-8092) * firefox: Use-after-free in the DOM: Networking component (CVE-2026-8090) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firefox-x11-140.10.2-1.el9_8.x86_64.rpm 2c56a229231f45e43883ed32b24c710c151b8a6202b0940d551a00121a7ce804 firefox-140.10.2-1.el9_8.x86_64.rpm 81479ea27b3654cda1424836aef0b3dab6645efc8b5bf4a9cb673c05bfa384e0 ALSA-2026:20596 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-pg-doc-1.6.3-1.module_el9.8.0+232+50f6dd36.noarch.rpm 012587b1454988d3ae9e2df6f066e9a9582859f741daa26cc97f6ce56f7cc40d rubygem-rdoc-7.0.3-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 0761b4ce8341503678c2633ae8d44016b45aa3e50bdd481c3ae958f2121f9b68 rubygem-irb-1.16.0-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 086dcd315919daacbe708f121fcdd243a2f8ae01b70285ee804a76ab3ec63e58 rubygem-bigdecimal-4.0.1-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 0eae2efc614715d39db220ed3b0c7a8a168812030ee7f91caac2aae193308e2f rubygem-test-unit-3.7.5-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 1773ab3b144fd3572d9e9c33356f308cbf16475977e2ca2c5723497f87914ddb rubygem-rss-0.3.2-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 1db5dd3f5f3afd32c809bd0c9b49fe18fd6911dad309d960b89b8f309942bad3 rubygem-rexml-3.4.4-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 20a363d7f7d01ca0d3c810380cef47f03803304ac1de85ec2d1513897239e2f3 rubygem-io-console-0.8.2-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 3a942745ba59b7c1fe86f15c3064f62d7fdf4b0fe351fb84c1b6d486a43c2882 ruby-default-gems-4.0.3-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 400e6ed87410488c293562d0ff4fd3746dc5c28e05b66d0899e120f3759354b1 rubygem-racc-1.8.1-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 41b817c909248277a91a5fee825129adb6f8251b6bd462042e70d8cf04f4d059 rubygem-psych-5.3.1-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 49cc707f01d5cda677740fcf0e3ed15cf3d141a8b6393465237960c995d6554f ruby-devel-4.0.3-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 4d2e0f9df823ba15eacbdbe8aca62635a95e9d85f472498acc02985187c2bc5b ruby-4.0.3-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 5b42b1d2a482985fb35207cdf8b4973509c7f41efc550333a4c47984185e67d5 rubygem-rake-13.3.1-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 5cf0a0ce0a7c2ae61008315eb0e36a3050cd5069dfaf41131b9376b2950b7227 rubygem-rbs-3.10.0-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 5f0ee0dc69852790af7a0053bf6f704d45eab3655e37f60edab9190da80552d5 ruby-doc-4.0.3-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 60f9b14298e80fff8d4bd034870ef3b34a2ad53c0662db91b64fc6bdf5024620 rubygem-json-2.18.0-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 60ff1b3a9cd09b1155c542e122116ad10cedd2e940de1cebad06590b9442f1b5 rubygem-minitest-6.0.0-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 714dc33f4604cba5fe409c0e0e823d48ef00c88a6ecd72307c49a4998f637f28 rubygems-devel-4.0.6-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 7157d7b21a4e836d8e71c7e96ff3b1208dcce1c10617ef0e15f2200ddfb4c697 rubygem-bundler-4.0.6-32.module_el9.8.0+251+5fdbd96b.noarch.rpm 7a6d2e335d6cda1e5b483e3c0bee4ffc86ce7fcc8da36ed60172b3c71ddf3aea rubygem-pg-1.6.3-1.module_el9.8.0+232+50f6dd36.x86_64.rpm 7f9032a32d75361237af186ee34fe7c85a8f586e859c8c4e02d26320b47d49d9 ruby-bundled-gems-4.0.3-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm 82500cfbebd4c495c044d472ba3246d088119debe34a92d8f3f679ffc5898df9 rubygem-mysql2-doc-0.5.7-1.module_el9.8.0+232+50f6dd36.noarch.rpm 97e11c128bce3071fdab6ecdaf0cc24053f436b72c10921807cbd89f4b2ff2d2 rubygems-4.0.6-32.module_el9.8.0+251+5fdbd96b.noarch.rpm a7661e9b7aa2032495805717adf06800705eeb3503cb44c8933d1e0aab72c277 rubygem-mysql2-0.5.7-1.module_el9.8.0+232+50f6dd36.x86_64.rpm aee9080e7e16dcdac40af6fc172e19d5448a0f46c5f752183651f4660fa4e9cb ruby-libs-4.0.3-32.module_el9.8.0+251+5fdbd96b.x86_64.rpm c87436dd0423e4165e062c651332e787fdded868616a4b0cc10fdd77e0711de1 rubygem-typeprof-0.31.1-32.module_el9.8.0+251+5fdbd96b.noarch.rpm d6a7ff8591ef0f77d29c077c7806318971787418b9e4f72e0512f542f3142ea5 rubygem-power_assert-3.0.1-32.module_el9.8.0+251+5fdbd96b.noarch.rpm e6a2d8460cd9cf237f34d4a50b800d2763f086bcebb12d6a4e11b1d0b8daa0c1 ALSA-2026:20597 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Incorrect DNS response parsing via crafted DNS server response (CVE-2026-4437) * glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions (CVE-2026-4438) * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default glibc-utils-2.34-270.el9_8.x86_64.rpm 0bbcafc1720d0f16013e584f6b7b7427cdfbaeca081a5eb70a1b1e2eb0379f45 glibc-devel-2.34-270.el9_8.i686.rpm 202b314f152903f3d7d21fde7ab042c4caf2b36ab3345deab3fd0d7bfde4d2a2 glibc-headers-2.34-270.el9_8.x86_64.rpm 35f5013ebffb86abfb4769b0f142a8465a831d5d94defa8fb75943c908a59824 glibc-devel-2.34-270.el9_8.x86_64.rpm 8f26d0c6d04f54fe36cac7fbf320a99004e021981ea69bdec7968687a1b53936 glibc-locale-source-2.34-270.el9_8.x86_64.rpm eefe86b79ec67a2015a441b775da6b4613232deb33f1d0d531f2f085797f4696 glibc-doc-2.34-270.el9_8.noarch.rpm fc1b2c6a3553ac4cdfdcf085c5eec39c85fdeabda7beaad2ce67276f76923f89 ALSA-2026:20612 Copyright 2026 AlmaLinux OS 0 1 Important

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009) * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845) * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010) * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833) * gnutls: Fix intersecting empty name constraints (CVE-2026-42011) * gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gnutls-dane-3.8.10-4.el9_8.i686.rpm 2421e3ed612ddc73d8d68dea1703f5ed704a0c15b70309950f42cad6315f9b1e gnutls-utils-3.8.10-4.el9_8.x86_64.rpm 321f41c7b28116d5fec5ee42c2d20802a4be68651c7cba57acb69435c78b89ce gnutls-c++-3.8.10-4.el9_8.i686.rpm 4870db39f4adca553373f034417cdaf726ccbef3af1379420ce49100626f4765 gnutls-devel-3.8.10-4.el9_8.i686.rpm 9d09e24dd682d603975e98dbc059765b715c9f60bfffca2737f03633e9eaeceb gnutls-c++-3.8.10-4.el9_8.x86_64.rpm a2a6f09ef512c5e5392c142f9f2e48d680e115ff5fc06dc846e4f74fe268f79a gnutls-devel-3.8.10-4.el9_8.x86_64.rpm c271a9f60529286c6b7bd0acb7e53705ff81bd17238aee59deba3fdc01c77a45 gnutls-dane-3.8.10-4.el9_8.x86_64.rpm ed1e3da5300dc3b8144219c58126a3ca6586b6713af24c1fe9b5b344e4dd54ac ALSA-2026:21293 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es): * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043) * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default aspnetcore-targeting-pack-8.0-8.0.27-1.el9_8.x86_64.rpm 263fb5f84814118b9e8307a2f2505135dc774acb880bc15d321852561345ed31 aspnetcore-runtime-8.0-8.0.27-1.el9_8.x86_64.rpm 2c265b4fcac16bbe1468fd830a4d3d87ac7695b24a92d0107fd4df45eab5865f dotnet-apphost-pack-8.0-8.0.27-1.el9_8.x86_64.rpm 4740ff6127f1e0a7c5cc1c7f448345b424bd58b8dce9e8933e88f922cdafc259 dotnet-sdk-8.0-8.0.127-1.el9_8.x86_64.rpm 62bc55d185b9391424fca8a5487f70d765186d5fa116ee78f655be9556520362 dotnet-runtime-dbg-8.0-8.0.27-1.el9_8.x86_64.rpm 789a50d5467128fcd720878e06d753ca07e7f5410b92c7c7b36cc87aa1e4e45f dotnet-runtime-8.0-8.0.27-1.el9_8.x86_64.rpm 9ef0045a008c6ce02cc7739d8966108ebbaa03453a8e5144cc27a137c5282e79 dotnet-targeting-pack-8.0-8.0.27-1.el9_8.x86_64.rpm ba587263f1478d003c01732f616f44a2075f6f0670b0c781894b7dda63a5732f dotnet-templates-8.0-8.0.127-1.el9_8.x86_64.rpm bee99bf036b3187fa5e8d360463b3de371e00a212d01ac029025be6161549eba dotnet-sdk-dbg-8.0-8.0.127-1.el9_8.x86_64.rpm dbdbe9d6ffe40e0d8c0c816ce7f61be5b37d3a40ca1928bc08e5f1fe5c1d3249 aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_8.x86_64.rpm f94c44c66f98ffc04437cb04373778a76247c6d13f1d747f13af5d83cfaf0a39 dotnet-hostfxr-8.0-8.0.27-1.el9_8.x86_64.rpm fe1a32503d264cbb0d85053e195fdd1b2d4ae7791ec3b265752bdb8d3381fecb ALSA-2026:21296 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es): * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default aspnetcore-targeting-pack-9.0-9.0.16-1.el9_8.x86_64.rpm 0a64056a846f36372780db2efb8629cfd93995ff041fb5d675c3b5f85dd0a097 aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_8.x86_64.rpm 1ecb05ba57386920222314a1e6a45e88545f2fcabe229e9502ca638b47616cfb aspnetcore-runtime-9.0-9.0.16-1.el9_8.x86_64.rpm 22d722f13d526ac19b815355b776fd25c82c1b00ca58cf5f1f0e4d4ff2455bd9 dotnet-sdk-9.0-9.0.117-1.el9_8.x86_64.rpm 281c0324d3e1c3d22034914986c1fd00be88e70cb528405213aaf7d017263129 dotnet-runtime-dbg-9.0-9.0.16-1.el9_8.x86_64.rpm 3319489abee8e16acc188ec35cdaa474b739fd2fabd3f957b2675d4ac82500b3 dotnet-runtime-9.0-9.0.16-1.el9_8.x86_64.rpm 3c297486b55fd7babfb1ecc7bf3557ea74a9ec7f0faf0270d6891ec4ecaec9d9 dotnet-templates-9.0-9.0.117-1.el9_8.x86_64.rpm 4c7a02a135c7b212ed56c2e48baea24c15318d3da3e22d3923ba341ade1f82b1 dotnet-targeting-pack-9.0-9.0.16-1.el9_8.x86_64.rpm 8019ab6d224e9a8a69dad5d6dcb68e033fba024d86e7159db069b1f43912789a dotnet-sdk-dbg-9.0-9.0.117-1.el9_8.x86_64.rpm 8b95e8fd176c2dfad41ae381d3acfe5ebd011ea1de291acdab994d2335eb151e netstandard-targeting-pack-2.1-9.0.117-1.el9_8.x86_64.rpm 9af419f30339425580eef094a6a616fd7f12eb2418578142aac60b341e44a357 dotnet-hostfxr-9.0-9.0.16-1.el9_8.x86_64.rpm b2f1eba86096ad09a1b06a89a0a2bd54f615872cc8a02e430bac1180a3a982d1 dotnet-sdk-aot-9.0-9.0.117-1.el9_8.x86_64.rpm b5164d021199e6a70f7bff40e17490e8ba3616a0aeb40b6347fec76bb2ff7854 dotnet-apphost-pack-9.0-9.0.16-1.el9_8.x86_64.rpm f934df09640084ead2ee21681772a59d62107598498087fd143f6257b3b81d98 ALSA-2026:21297 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime 10.0.8.Security Fix(es): * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-sdk-10.0-10.0.108-1.el9_8.x86_64.rpm 0317ba37f8b0fc10a2e1f4dc583332f2a9d8c865b5f4fdaadcbe580163f3388e dotnet-runtime-10.0-10.0.8-1.el9_8.x86_64.rpm 1b027a5c873c6ceb7b4773b989f2f67f2028d9311cb7673d99881443fb96651c aspnetcore-runtime-10.0-10.0.8-1.el9_8.x86_64.rpm 34fbee58bc98155dc3043d0e07c48b2af6040e82e7535e29927ba07a9eeae46d aspnetcore-runtime-dbg-10.0-10.0.8-1.el9_8.x86_64.rpm 435150ab09f4cfa05fce55ecc5553d8b1b424b2a1068e11d08fa44e0a6aa359a dotnet-templates-10.0-10.0.108-1.el9_8.x86_64.rpm 6699d63319bcf9837e9f937051a987551ec5e9b4b4c2e4cda073ec5fb25822e3 dotnet-host-10.0.8-1.el9_8.x86_64.rpm 6faf1c49b5f0028a125203a8c7a5d85fe6b21e80bb6ad2645deb42a3c98218ca dotnet-apphost-pack-10.0-10.0.8-1.el9_8.x86_64.rpm 7bbffc6dbee99bb9a2d78f51ae0b1ec19d9628a9e558ce20ea90798613af7ab4 aspnetcore-targeting-pack-10.0-10.0.8-1.el9_8.x86_64.rpm a334f0eb0940901656a0bb19d44c15bc9f0b3e44a96766b9e39dc382c790a77f dotnet-targeting-pack-10.0-10.0.8-1.el9_8.x86_64.rpm aaab33e5bf6f3a0efe58ceadd10a3e5d53090a453b7ea36b6171f1dc54a1c910 dotnet-runtime-dbg-10.0-10.0.8-1.el9_8.x86_64.rpm cff67a9c6c21288fd0ae0d1716ae1af2c34fb965f6f56b6864b3e9a51bde5673 dotnet-sdk-aot-10.0-10.0.108-1.el9_8.x86_64.rpm d874e0bac0886fc7e6a6602a4da9b1b3a921c0a977acf2e603b1f53ccbe4d8a0 dotnet-sdk-dbg-10.0-10.0.108-1.el9_8.x86_64.rpm e27e440308b7deb6eb482ac3e760f09dc297c910a27d53c40f04b3271af5e406 dotnet-hostfxr-10.0-10.0.8-1.el9_8.x86_64.rpm fc33651b1eae14a792eda11a3d5974594bff73f93761d1e639e56ff80d2680b8 ALSA-2026:21381 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388) * firefox: Other issue in the JavaScript Engine component (CVE-2026-8391) * firefox: Sandbox escape in the Profile Backup component (CVE-2026-8401) * firefox: Integer overflow in the Networking: JAR component (CVE-2026-8956) * firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 (CVE-2026-8975) * firefox: Privilege escalation in the DOM: Workers component (CVE-2026-8955) * firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component (CVE-2026-8968) * firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component (CVE-2026-8954) * firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-8958) * firefox: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-8946) * firefox: Privilege escalation in the Security component (CVE-2026-8970) * firefox: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-8950) * firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 (CVE-2026-8974) * firefox: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-8953) * firefox: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component (CVE-2026-8959) * firefox: Spoofing issue in the Form Autofill component (CVE-2026-8961) * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-8947) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-8962) * firefox: Privilege escalation in the Enterprise Policies component (CVE-2026-8957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default thunderbird-140.11.0-1.el9_8.alma.1.x86_64.rpm 18407b70483188fb1ea9b27b50070401bf0b8996d1d6147ed70583773f60d62a ALSA-2026:21391 Copyright 2026 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007) * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mod_ldap-2.4.62-13.el9_8.1.x86_64.rpm 1665a42b7f94c4fe9583df9080d6a4c00b586bba3a7bcf22ebdd0bf47e3559d9 mod_lua-2.4.62-13.el9_8.1.x86_64.rpm 27edc484b2e07080e6fecf6d4c847f611106597f554ee2cd3a67d89cb0a13dec mod_session-2.4.62-13.el9_8.1.x86_64.rpm 2c396038e94e9581c2f90d850c636d92ed7d79d243dff362f9d95bd20effc643 httpd-2.4.62-13.el9_8.1.x86_64.rpm 4cfc326215ba8a2b28672a2a185a4653932bcb115b76705ae129e6232115a657 httpd-devel-2.4.62-13.el9_8.1.x86_64.rpm 523508fb4f4a8c4d29ebd112bc53e957e62462d0e0609b7ff3fe0ce53d0d2f1e httpd-tools-2.4.62-13.el9_8.1.x86_64.rpm 731b7bdf00263c35ecfd88ef65d4e1de7617819272cbc9f2cf291478db3f7dc8 mod_proxy_html-2.4.62-13.el9_8.1.x86_64.rpm 7637fb6ec07c07734430bf56856b12ec163958a807ca5149ed2ae8c072390a49 httpd-core-2.4.62-13.el9_8.1.x86_64.rpm cc280eb8e79d27279f38e2feb6e81703d5dc66f97493914c25c761ffbf334b21 mod_ssl-2.4.62-13.el9_8.1.x86_64.rpm e72caa5b98ab0c5054459808cc40a4f0bacf797ee164f6b5bb64066fbb66b78d httpd-manual-2.4.62-13.el9_8.1.noarch.rpm e9223dcbdeb90eb5d457d6c73fc637da55357100d817faf8b124cf06fc13e816 httpd-filesystem-2.4.62-13.el9_8.1.noarch.rpm f78ac744ce7d15cf7665a6832386ef5c78eff67394972b82c66bd73b689a583c ALSA-2026:21468 Copyright 2026 AlmaLinux OS 0 1 Important

cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI (CVE-2026-4802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default cockpit-packagekit-356.2-1.el9_8.noarch.rpm 37861ee4d0ecfb3e385eacc38d6344e4416d27285a4f56bc6e61904d5282e326 cockpit-storaged-356.2-1.el9_8.noarch.rpm 8a0d02108ed04e514bf99ed16018067d3439b4b57b6ca725f660d86984537950 ALSA-2026:21556 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-headers-5.14.0-687.12.1.el9_8.x86_64.rpm 2f996eb93ca391edaa6172f29f43850ce0708fc9d798f7e9ac96fc509396beae python3-perf-5.14.0-687.12.1.el9_8.x86_64.rpm 53b9609a047d92890a672d72380d1894ea667b9af0e2ed0f8944dbc784ef55e3 kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64.rpm 55d19a35634bb678bb96ee1425e24c655787ac5b9b2fdcb675e78919266501de kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64.rpm 59a1bdc3c0a124d681392794654bb968f0497748cea23ca7135ac5d1aebf5cf2 kernel-devel-5.14.0-687.12.1.el9_8.x86_64.rpm 9dd36e55fd26a67c93cc0a6020c7e4c3d88b0dc12214582a5a810013177f75f3 perf-5.14.0-687.12.1.el9_8.x86_64.rpm 9fe93102d0a9f5886e3ae28834fd2dcfd3951eba4d9ee4e3d56f4a6646804f69 kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64.rpm ac803fcf37da94eba9d0a5b85f0556c86d33d1a7935c44d1cb387d5abd3fe55a rv-5.14.0-687.12.1.el9_8.x86_64.rpm cc844f99f0ffbde5d24a47a2d3207609978f82f35c6ef87ff61177f7ed341738 kernel-doc-5.14.0-687.12.1.el9_8.noarch.rpm dfa3ab44d65235f4e205d0a79959c122e6673db88d1ccfc39f42fabbd04226aa rtla-5.14.0-687.12.1.el9_8.x86_64.rpm e67a1f1f2d98723188836e772361699ab4b40711fc68b44b051f6b18e59c51d4 ALSA-2026:21755 Copyright 2026 AlmaLinux OS 0 1 Important

flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via crafted symlinks in sandbox-expose options (CVE-2026-34078) * flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation (CVE-2026-34079) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default flatpak-libs-1.12.9-4.el9_8.1.i686.rpm 1f09d300e92f5cc58c3b2296be56aedf1c8ae095e4b01afb421cdc501d6d50d8 flatpak-session-helper-1.12.9-4.el9_8.1.x86_64.rpm 29fa2ed3916718d07210bc86b6d9dcc47e61e08df1fc281f96d3c4bd0134ebb6 flatpak-selinux-1.12.9-4.el9_8.1.noarch.rpm 3a8c3e535452a1a754a11152933374d7b9278500b066e6fefbf5d5bd4b5c314e flatpak-libs-1.12.9-4.el9_8.1.x86_64.rpm 48971bd4a6c39493d27bffcdd5bfacc39c3f1366ccb081438d0cc157a620752c flatpak-1.12.9-4.el9_8.1.x86_64.rpm cf6764206001b307e8738021df70ac0d89df11d5547201cbf631f9f52b0393eb ALSA-2026:2212 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789) * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819) * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022) * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024) * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415) * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403) * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459) * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730) * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760) * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141) * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271) * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269) * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default rtla-5.14.0-611.30.1.el9_7.x86_64.rpm 5032b5bb81a207f232a8b1f93bada2f34d0b9ed410d521057f818360ccb5bc9c python3-perf-5.14.0-611.30.1.el9_7.x86_64.rpm 52e671223d86feabfedd5df33ba3346d7e10652b39384c430685761a911de716 rv-5.14.0-611.30.1.el9_7.x86_64.rpm 54b32f7f597ea7d139013f2362ae4d827f6cd26fc682be53643d65652cd83381 kernel-devel-5.14.0-611.30.1.el9_7.x86_64.rpm 64c4a8358756a82750f3ea0f68cc2e5a35db419fbe57bae6f732adc09194fe72 kernel-debug-devel-5.14.0-611.30.1.el9_7.x86_64.rpm ba6aea745ebb3222f9e8694ce8f9410d51d979b1b9bf41e992c62dfacd1d09fb kernel-doc-5.14.0-611.30.1.el9_7.noarch.rpm c0111c1cafe87d2869c26ac1632c8f3ccec81e1d538d4dde6f505d75bbd27b04 perf-5.14.0-611.30.1.el9_7.x86_64.rpm ea8e8063ba131a7baa809a23aedb5dc16bd05c06e1bbebd97f00d044b6837762 kernel-headers-5.14.0-611.30.1.el9_7.x86_64.rpm f1cb64c225b316e194c72e3593ce0976419aa4a9f53ce53fccc2f71eca31e054 kernel-devel-matched-5.14.0-611.30.1.el9_7.x86_64.rpm f31388eb476a91f128a86215411105994a37d5146d38674b081f157b929a3f2e kernel-debug-devel-matched-5.14.0-611.30.1.el9_7.x86_64.rpm fab0736bde831df64515a9d41142d4a554fe2f142612764d60448d175b7c193f ALSA-2026:22121 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501) * html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823) * cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819) * net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814) * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825) * cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817) * html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826) * net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows (CVE-2026-39836) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default golang-src-1.26.3-1.el9_8.noarch.rpm 07c7f200f7fe759ad19fd2a49c19c0cc56dc838622fc1885e067f8f964584ffe golang-tests-1.26.3-1.el9_8.noarch.rpm 1dd7494db6dc2017d066b16b3f301b9cf93618980649b49617f7aac39f43c58c golang-docs-1.26.3-1.el9_8.noarch.rpm 5b1b052e81efdac821156b9c6b24ace83a966ab7d2c26076b833c1cc07e193f8 golang-1.26.3-1.el9_8.x86_64.rpm a250a3c534e891ad2dc1cbb06b92d107857b2f3df3a050235b5c000eb73fc4d8 golang-bin-1.26.3-1.el9_8.x86_64.rpm ceb0d4fae4b73340a26b9ce51079c2fad720da9818f3d5cb9bd2809f6830fb6c golang-misc-1.26.3-1.el9_8.noarch.rpm cf1b59f238bbde6523c9aa3a9346a23371e1f0fc403733a78a666cdf74e22324 golang-race-1.26.3-1.el9_8.x86_64.rpm d57751d2ed62b0c074739826add81736971e83cd5a339e37b41115f6164ef04d go-toolset-1.26.3-1.el9_8.x86_64.rpm f4fc308a6bb6c6c5169ccb51e8abdefd14667e0e3c1d2d3e2bbe73bddefb762f ALSA-2026:22142 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735) * php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262) * php: signed integer overflow in metaphone() (CVE-2026-7568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-fpm-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 07e960e67a93abe2c7c88d7e0d3fe22d66e6232579d63fe9731f34394083adfa php-opcache-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 09e6a43832abf06674a4db4ba4df2f4fdb78d274839e6903f196c5ed8bc9524d php-ffi-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 11c3f9880d5e574a1eda666a57448f353144193ff33cd378bf6e0618a3fb7c50 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.x86_64.rpm 1e95a29597aa5c8b102c97a7d8fe608712e1a7ac5f33086477259cdfd802117b php-process-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 26a2625807eed56807a60b4ef1e53e24b9c144ee1b7aed4fc397e676390e307d php-gd-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 39266659d437fc289c52a1b3de9131f9c76632633df64e3a61c61ea97822495e php-dba-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 42d774ff99a3f49fda84e6a474606fcdfdb62412bc10fc748071deb493229db1 apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-gmp-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 599083a1ad05ccafe7d0de66aaff0176580431b71040d15f302f563d34369582 php-devel-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 5c7158c4c3289ead9ae492d102335f54f9663f2d4886d113d5e4a2de0ade2a36 php-snmp-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 61a03c586af60f57c0cd51f85a62ee346569abf61326e7ca50bd7ce2d0fc1a49 php-mysqlnd-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 666bcb97231bea8027b31a77c6ea5c694e4e76fc9ae5ec034bd79364f2caa5a4 php-cli-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 732b69d94cb274b02c13ad3c42d5a0be85423297338d81db0194c327c8798c39 php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.x86_64.rpm 743bd46886c6a79f5350c5311f49ceb9aa593e1170a63d5dac89d8a71bbad4c2 php-mbstring-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 75954ec531600f2167c913d46a12f786df6b2db2844cf93eec33615272660aad php-soap-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm 7ef18ec31c250a471d54904f504516e09271ccfd2097d6f1e902f4ef4ab44c5e php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.x86_64.rpm 99c06ba2fd814c0fb56d7b3eb60b33b8044d5e39d8bd1a56219f94ee4316020c php-dbg-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm a3041d20591dc43a5485ee60430c6d11cb268eb27499b40744bc82b14da4cda3 php-common-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm aeb6ae8272ecbd2cd2c416ffb4952a2a7ae7109e4d26af3ac9dbbdb16b743428 php-ldap-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm b1b7e908e39e351611502a878e200baddc7c2c7b82af764c1287f85c662bc782 php-odbc-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm b677778923b93cc56db8b7f6f53e042913b9b43b8028bf9bc90849097e281c2f php-pgsql-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm b7408aeaadcd67d7c6e213078cfbcc2fc81b6f1a4b80c7cb6bc69ff0e2e70c9f php-bcmath-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm b78be39dcd72080150b9b93ae6b787f77e614620c8b1293d60938b4f249dc0ba php-xml-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm c05b3fed79cd6a30686653b27d65ffb1cea321ebc5108e4e014e95cacee5d95c php-enchant-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm c3fd9bedec26bda56d5fcb4e959b33615a89e2c853e42c0480ae3d380a455e13 php-intl-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm ceb366ac04998cc35bbeeac8e88551f9d82190c0992f026022ee95ba371e33b7 php-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm d5b0d72e7c2cb9933d4c16fae1fade0b448c12f43c1e2cbc497a3609fecb340c php-pdo-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm d6f6985f1b5d8d8f3ab2087ea759870ebaaa774e9993242dceac3415b841a7df php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.x86_64.rpm dc8e8e3bdcbd1b2dd8b406088ace26218479eae330d5ff09131f4bb4d4ca9918 php-embedded-8.3.31-2.module_el9.8.0+255+747189f2.x86_64.rpm eb8435bdc6ffb6e4999d43cd8b056fc8eea0b9e2c89e3ac1efafffa29d69c316 php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.x86_64.rpm f1056dbe8848484f897c6a4662953779cb96e88d41f3974a75759f5e27ce93e2 php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.x86_64.rpm f7f650636fc002b970cf43dba6907dfe4e90d2de6ea57e6788a9f75920f28bc8 ALSA-2026:22143 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735) * php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262) * php: signed integer overflow in metaphone() (CVE-2026-7568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-devel-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 0c1f475109fd3dc67117bce1bbf6469d4fe3eca7a6cab07c9a186086cb1b4f0e php-bcmath-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 14fe6cd9452c36b2450972b60185ac6c1ca370cbab6d10943f9e678bc3a554c3 php-intl-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 1641003d0a38aae871b1d603679315d2c19d69b912ab43a9efd00d62bda393a6 php-process-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 18afe7dfd0fb23c3f0f42dacdc78f05172799a397e58b0b0fcd27e8c4ad8c4e2 php-mbstring-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 1df99e0ecc3bc345cc73521ea493f4cc0327ba8deff959307906c11d7ffa96c8 php-snmp-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 24b85c87cf02cebd85342cfd1a1180bedc3b56eaca3a87fb35de494934b50be2 php-ffi-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 275d01051e40648097a47d49e07793409a4e81a24b39f4fab5202ab53567312b php-pgsql-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 2869c20ec83104fa33a1de68626da8741dcdb87c039582567bde5e1d809e912f php-xml-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 3454f450fc8f143f20b0930ff17d09d0a68d32a75b71ca8acf608cb6c51051a5 php-soap-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 347b5c45976f6fe6db93aa4c00bbee58471b7b765187708f0290c960115015fe php-common-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 3c16106ebb85c3856db1b5379db41bb071890debde4357147fa5aab6cea43d0f apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 5c3c802ea3f9dd9f3f9b6cb5949182cf6169d4f82400195f1b44e18f49f5095a php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff php-fpm-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 84f99e04471d2d9dda9d19e6a394244b9c93ee96b2ee2296d0f6c43215bfb809 php-enchant-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 8e77428867431768ee53ce56e129826d1ee52ec2b8ada59601a014fc15264d29 php-dba-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 8f67879010d5c402b006846db29cc2bd4b3aa9e136b34af4c79b1f1802e1aeb4 php-opcache-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 96168ed2de8c552638c55e7458c982c985f57939eb84fb8d464362d72d9f305a php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm 96cc987054e929ded9dfb18f35b9c6912a9df307b6e6ffee3c409f85bafa2181 php-pdo-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm 97f74599d09f624a91b85b5efdfb625e7f1bf7b09643059fb290dc72b074085a php-ldap-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm a01e4c7b8822c063d5b8b44c2cd7e0957fccd2b595c4bfa56be149b7c2ee7ab4 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.x86_64.rpm a05a23d56973cbb28cd6df434887268ea519defa51e9176928b1f6859bdd33f8 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.x86_64.rpm a0c7dad446e919bbb42213de89f00d65f58b08c51e4e1ab382707c3324627f7a php-cli-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm a5993f449fa7f105f533281463e176245b36f7e8ecc5d58abeddce77bd43d8b4 php-gmp-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm b71a92da8982c8c73e1da276eee55d71df92a21a60edecb844b92e5527c004bf php-mysqlnd-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm bdc381354512a43a30c117437b06262ebdc9f0724e35e32bf34ef7bbc3be676c php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm d4536864003ca10535ac907cbcc199da8c73c8b16a66b52aaeb1431f587b1ea0 php-odbc-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm da7b8b8f8a95bff8da885a6145c12e15fabdc511a62cb38ab8acbc0f1b591090 php-embedded-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm de1331de9903863235c4bb0cb65902903aa6328d2b3de23bb147fa3ff8334d54 php-dbg-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm e4dff0c71db20727f2fe4ef510d03426c0da3df4560fa3f28bbb25df4f2e0917 php-gd-8.2.31-1.module_el9.8.0+254+5708f44c.x86_64.rpm eaf8f694865fbd7ac3b08e109c285b15624e62bda59c7f4515d53a54cc85ecf2 ALSA-2026:2216 Copyright 2026 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication (CVE-2026-0719) * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libsoup-2.72.0-12.el9_7.5.x86_64.rpm 0bbb5805ac8e984dd4abd0f1ef6832c996e6a8d59570902bc784ac0c25cf726d libsoup-2.72.0-12.el9_7.5.i686.rpm 60c3e974a86d0821f58e39ebea3645d469ec4e158fc37951a7e349e4b50d4e41 libsoup-devel-2.72.0-12.el9_7.5.i686.rpm bbec9e3ae66d5e659829e4595e472efedaf1778c6eaed10cf6e45fe3de3b4053 libsoup-devel-2.72.0-12.el9_7.5.x86_64.rpm f4c420ad11d73a14293ff244b0fe75063f54eca17af4e94c531f0cfb56dc1a51 ALSA-2026:2224 Copyright 2026 AlmaLinux OS 0 1 Critical

keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication (CVE-2026-1709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default keylime-tenant-7.12.1-11.el9_7.4.x86_64.rpm 74c7829e73fcdc8f55aa0a80efc7967768e19e35835b0d350948dc3e1604f486 keylime-registrar-7.12.1-11.el9_7.4.x86_64.rpm 77a68c2cc84f03c931c149087528402a3fc46ab587783d072568ebbe89f68b39 python3-keylime-7.12.1-11.el9_7.4.x86_64.rpm 7f3d09379c3756403688b5caf0d2f10f87394154e3019268c5e02db2c4e84357 keylime-selinux-7.12.1-11.el9_7.4.noarch.rpm 88ace794fbf4e50db3a4619a2caf1de44fce0c4e79733315d23fe3689d3a04b4 keylime-verifier-7.12.1-11.el9_7.4.x86_64.rpm 9fc39e7af3f2176dc323f4380592414c12af969ea201038948ec368630f9aed3 keylime-7.12.1-11.el9_7.4.x86_64.rpm e4010e2ef7f1dd8c82cf581d3a98577e41d7fef97b5ec8c058cbe828582335d1 keylime-base-7.12.1-11.el9_7.4.x86_64.rpm e8739df06e8a8ce8b72148578fc01d736ad03b1804f87e85986548bbf4955f25 ALSA-2026:22304 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql-jdbc security update

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. Security Fix(es): * jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (CVE-2026-42198) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgresql-jdbc-42.2.28-2.el9_8.2.noarch.rpm 72a729e12218dbeb67fe6a986d1d121fcd8cc4422f5b7f3b07f817d1bb79b842 ALSA-2026:22312 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openssl-devel-3.5.5-3.el9_8.x86_64.rpm 4018ce66acfd6da557b1d4d6338a9b43774f0a4f807ff5b04585d62ab934c149 openssl-devel-3.5.5-3.el9_8.i686.rpm dc900ef56c9165d91f5f21c8003cc105844c8730b22951bfcd4b1064beb186a4 openssl-perl-3.5.5-3.el9_8.x86_64.rpm e0a255f7278aacaca256fb13a5e8451935ffcbd8f83585f5f285059d11abe075 ALSA-2026:22313 Copyright 2026 AlmaLinux OS 0 1 Moderate

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default compat-openssl11-1.1.1k-5.el9_8.3.i686.rpm 96262c967ca060b82dac808ce62cb29e705d36a4531b832acafc32503686a03c compat-openssl11-1.1.1k-5.el9_8.3.x86_64.rpm ff811e885f2c7689de54f442edb419ec813268e0f382e66084382d30a930638f ALSA-2026:22551 Copyright 2026 AlmaLinux OS 0 1 Moderate

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mod_http2-2.0.26-6.el9_8.x86_64.rpm 396f5cabbc85ac690e7a53fde092571e745eb4d14c956764f4d92966e0554ad6 ALSA-2026:22553 Copyright 2026 AlmaLinux OS 0 1 Moderate

libexif security update

The libexif packages provide a library for extracting extra information from image files. Security Fix(es): * libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385) * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libexif-0.6.22-6.el9_8.1.x86_64.rpm 4fdf858725c87ca8108f4bcef19270202f124ba90d5ee5be1552a80d693c6332 libexif-0.6.22-6.el9_8.1.i686.rpm 7d29c31bfa40af39791ac2b1830b876234cb443f6a740d6acddc183a40ffd941 ALSA-2026:22717 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default vim-common-8.2.2637-26.el9_8.5.x86_64.rpm 0ef4babeab3533d5b46ab7bb16ceb12f1ca9486de213edc6fbeb0f2f6cd127ce vim-X11-8.2.2637-26.el9_8.5.x86_64.rpm 413378438d639eda18a237ef25621484b5d10dca92b8b2de6467093785ae4e0d vim-enhanced-8.2.2637-26.el9_8.5.x86_64.rpm 73ed4b5ba369623c1b7c12b08eb9e6fdbeeba9a30cb8f5e455945f4916689210 ALSA-2026:23229 Copyright 2026 AlmaLinux OS 0 1 Important

redis security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default redis-6.2.22-1.el9_8.x86_64.rpm 041db5e98b127671d4fd1fb58b2f5ee8a57243f69d9be9188d0bdba89d87c61f redis-doc-6.2.22-1.el9_8.noarch.rpm 0c7e7441492772c539d0a5cae713b66964677cd9e08c4d096fffb5c5428ddd6f redis-devel-6.2.22-1.el9_8.x86_64.rpm 295186a5eb1ea0249fc90a6d5877930363eff4b765e2f27ae173c25f98a894ee redis-devel-6.2.22-1.el9_8.i686.rpm 4a97bec915d44a1359e93929be61210ecfcce5f33111dc1c7deca7251b505507 ALSA-2026:23230 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: denial of service via crafted XML input (CVE-2026-45186) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default expat-devel-2.5.0-6.el9_8.1.i686.rpm 007aa5ec001e562e4fd022c76a8062edc7f3ba50df9462c7c9b3f784729b9008 expat-devel-2.5.0-6.el9_8.1.x86_64.rpm 7e0bfbd746b361325f5233e908a14c590b0869667786fc06c54c41c531a57269 ALSA-2026:23332 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mysql-8.0.46-1.el9_8.x86_64.rpm 30031712969c5afd2ae488a2a812bebd41d572d0295979bc726398cb8e937cbd mysql-libs-8.0.46-1.el9_8.x86_64.rpm 5c90b058c99d6280cf93f86c9d1691e79a45d9069b657742f059954e3d6e5d48 mysql-server-8.0.46-1.el9_8.x86_64.rpm 9210a1ffe5c78ebb96a1e768690c571e940f1defb2500ff52f514df326bcddf8 mysql-errmsg-8.0.46-1.el9_8.x86_64.rpm ae120fa455cf0a1ba8a663a8331dd7c57390b012f23bdeb72d02869fbdcf7485 mysql-common-8.0.46-1.el9_8.x86_64.rpm e44a20010207a78a8866024d47037fedfbcff471afeaa8c272da7f7f19c7300f ALSA-2026:24367 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039) * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind-9.16.23-40.el9_8.2.x86_64.rpm 1ca36f8de6d0794647695a288785acfae9fe83c6cf1ec88f99660e131d5966f1 bind-dnssec-utils-9.16.23-40.el9_8.2.x86_64.rpm 40dde7d47085b1e49d3fde8d18b5887dfe3e5ce76e8d83aba183539dd824a35d bind-libs-9.16.23-40.el9_8.2.x86_64.rpm 4974bfb13788ea6b417040ce3285c61840f64e87b9721df9d3e8d6180488edbd bind-dnssec-doc-9.16.23-40.el9_8.2.noarch.rpm 78ce8fa09289f337d1c9605ec59161b7ec062545be0257457b2049b135335eec bind-chroot-9.16.23-40.el9_8.2.x86_64.rpm 8e1806536599badd6f00898c305cf02ad0dcfcd905c8627b388ba05163cf6ae8 bind-utils-9.16.23-40.el9_8.2.x86_64.rpm b663c94990505fd6419c6a7ebe32cb280a94d8fc2735101f20895a247c5f9e8d python3-bind-9.16.23-40.el9_8.2.noarch.rpm d62b2932b3258c28a8da5012072e55ca68ebdaf6ad231b705ef07006e52ad166 bind-license-9.16.23-40.el9_8.2.noarch.rpm ee9de953de235be914cbf5de22b22afdd8182767dd2ca9f95eeee04a07552a60 ALSA-2026:24368 Copyright 2026 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039) * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind9.18-libs-9.18.29-14.el9_8.2.x86_64.rpm 469069e33b121d33c27d04ff930a7729b10ddbbd6febbf2585c7a26a75a84388 bind9.18-dnssec-utils-9.18.29-14.el9_8.2.x86_64.rpm 5f75a3de576826df7c005baf8dd595c90c696237556c84b4dcf671af16a3961b bind9.18-utils-9.18.29-14.el9_8.2.x86_64.rpm 7f9d776b2fab62b3206f49d4994aaa3657ac63a49cd0c071d97afbd09dc00ef6 bind9.18-9.18.29-14.el9_8.2.x86_64.rpm e5fda86215e0b7cd818e237e917bd9564b949284875d1664ad3c715efa311a5c bind9.18-chroot-9.18.29-14.el9_8.2.x86_64.rpm ec28995e185f2bfb2aed8d9a4acc7532feae3d76a981a7d8d62ac5ce05461ee5 ALSA-2026:24369 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944) * unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959) * unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution (CVE-2026-33278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default unbound-libs-1.24.2-3.el9_8.1.i686.rpm 22138ffb77930a8c5ca873589e61d36f34aac1c120e67ebae0f87dff4863c321 unbound-libs-1.24.2-3.el9_8.1.x86_64.rpm 2f1b1456334de6232f773a253cce790f003a365b6f450ef5fa999fdad3ac6716 unbound-dracut-1.24.2-3.el9_8.1.x86_64.rpm 360a86ecb10b6463aa5205ba4c534d51168eacf4803667a56957a75fded04fe9 python3-unbound-1.24.2-3.el9_8.1.x86_64.rpm 48d660a8d1fddbdd4a7f5b476c868343eac3d69de9f5e5a98d74378d7aa1ed37 unbound-1.24.2-3.el9_8.1.x86_64.rpm ba9c6755106e891076ea22cdee5219c4ceef8720cc0a2b906f9661eaedc6bf0f ALSA-2026:24370 Copyright 2026 AlmaLinux OS 0 1 Important

frr10 security update

FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga. Security Fix(es): * frr: denial of service via crafted FlowSpec component (CVE-2026-37457) * frr: denial of service via crafted BGP UPDATE message (CVE-2026-37459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default frr10-selinux-10.4.3-3.el9_8.noarch.rpm 781bd941283c3f90faf0deba317db50c9b40a431d1ba99b3f4bce29a8895fcb7 frr10-10.4.3-3.el9_8.x86_64.rpm 84815c68394130cab6210e31a175c7a8bec9a70a30b3ff2945010c584ceb0b21 ALSA-2026:24371 Copyright 2026 AlmaLinux OS 0 1 Important

frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: denial of service via crafted FlowSpec component (CVE-2026-37457) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default frr-8.5.3-13.el9_8.x86_64.rpm 9516cf5e219c8035a2a44fe244d997c4ae32b502d164dd097d7c7748d71f79f5 frr-selinux-8.5.3-13.el9_8.noarch.rpm f3d4c9040abdbc552bc5a5fad2c15e49efc021fd0bc624074688e7cc57683945 ALSA-2026:24381 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-headers-5.14.0-687.13.1.el9_8.x86_64.rpm 04dd316460304dd1b68c56bf75c4466a2def06b2357a72395a33391f2d77b3b9 kernel-debug-devel-matched-5.14.0-687.13.1.el9_8.x86_64.rpm 28392e7e3617731b83a7aa093902e39527ccca83e84c354880f15c8f835960ad rv-5.14.0-687.13.1.el9_8.x86_64.rpm 48973178ca2b2f8b52e437b95d7cf517a80a16302d96984f156883c61e8bc836 kernel-doc-5.14.0-687.13.1.el9_8.noarch.rpm 50f24be4b5835e3190d3216b4b9fbd7923274a14f9360ed3a65d69544c49d3ab kernel-debug-devel-5.14.0-687.13.1.el9_8.x86_64.rpm 96946fccfb1b2b121bc8a20045917523aa07ec914c9098d1c20c266e1e4364d4 kernel-devel-matched-5.14.0-687.13.1.el9_8.x86_64.rpm 9827d2ed1b4244bdd99d35ed8923450f485be4787a535a61a669e982dd1c5646 perf-5.14.0-687.13.1.el9_8.x86_64.rpm b51aa8a365dd24b76a09b5b88072aeb812e265d0fe6de805219997ad9bbe093e kernel-devel-5.14.0-687.13.1.el9_8.x86_64.rpm b8c2e39187b4dee8475cf265be71f1ec5a7e987a0acfb0a8f104b3a9cd91b3ca rtla-5.14.0-687.13.1.el9_8.x86_64.rpm c2a2580c2c832f8cb6036a7624fda2ef1b88c98758123d5ca2fe2c06f6b4d6fa python3-perf-5.14.0-687.13.1.el9_8.x86_64.rpm c91a18c4a3086e72485c9789d8fcd3d26e94ba14e6a9a4b475c41e43618dfa12 ALSA-2026:25049 Copyright 2026 AlmaLinux OS 0 1 Critical

samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Missing access check on reparse point operations (CVE-2026-1933) * samba: vfs_worm does not block directory modification (CVE-2026-2340) * samba: group policy certificate enrollment uses <http://> without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170) * samba: Remote Code Execution in SAMR (CVE-2026-4408) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default samba-krb5-printing-4.23.5-10.el9_8.x86_64.rpm 4b678907d0f97c896fec120ec34a4ba122e98234133b909be0d00c81f15d1938 samba-client-4.23.5-10.el9_8.x86_64.rpm 62efbae73aaa34cf6c3beb173c406ef2b1e453bf925c584f11aeb5af03b5aa3c samba-winbind-clients-4.23.5-10.el9_8.x86_64.rpm 852c0f2a9ee032a46a94a9926540b44601000b1e9502629dcbc144f7027fe5a7 samba-vfs-iouring-4.23.5-10.el9_8.x86_64.rpm 93ff626154aea097ffe971b96fc3f610c1dd5ed2e7616c91ddf1ffd8fe26325c samba-winexe-4.23.5-10.el9_8.x86_64.rpm 968526a5081170dc1e8cfcfd6b859493bd9b81ddf63ecd43cca92770572d9860 samba-gpupdate-4.23.5-10.el9_8.noarch.rpm c325a0e0088628360ca06b78809e6c90bb01bbeb11e2c19acee479e0383e4627 samba-winbind-krb5-locator-4.23.5-10.el9_8.x86_64.rpm cc3b24415df3e96ce98a5a8b01587052de3c75669eaeaff1a5a97710121ad85c ALSA-2026:25051 Copyright 2026 AlmaLinux OS 0 1 Important

libyang security update

Libyang is YANG data modeling language parser and toolkit written (and providing API) in C. Security Fix(es): * libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libyang-2.1.148-1.el9_8.1.i686.rpm 1ab03d6bff05352360a9eaa50b4006fc53f40080974561e80a87de1716e1a8f3 libyang-2.1.148-1.el9_8.1.x86_64.rpm cd38f812983c779b60055cde2b1ed903afc2df2a5e252f3673f1659f7838aa2a ALSA-2026:25052 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mysql-libs-8.4.9-1.module_el9.8.0+263+ff5e95cf.x86_64.rpm 009186f28f63d8a91abb968cba32471b173982b0db5cece9c97d5dcd55413caa rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.x86_64.rpm 15d11f3dd227603b75ea55ec5e5d58e48a85816370b46beaf974cdd4ecdb74b8 mysql-8.4.9-1.module_el9.8.0+263+ff5e95cf.x86_64.rpm 347ccdf76a50b3d975d61c7005ea3a159bc7fa878da9d5092a00bdec06ada2bc mysql-server-8.4.9-1.module_el9.8.0+263+ff5e95cf.x86_64.rpm 46a05dc4d0f9d68e224b83892f0f351c78dbd9598516e3bcea1c12c01ab47045 mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 5ac91bd521f27ff2898650b81f3c9955990a7c1611d7c24df1109ee306cfe85d mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm 67f9944422a6aee33d336ad9718cc8bcdb1ee47386bf22c3b2b482ce8e60f8b7 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 6af7ca5e430c3de27c47755ee182d363a208ee94a4550a502365026a3adef496 mysql-test-data-8.4.9-1.module_el9.8.0+263+ff5e95cf.noarch.rpm b102d96964c390d8c54754efd184d5927d4d6d4c4f2b507100ce55e02df85b5f mysql-devel-8.4.9-1.module_el9.8.0+263+ff5e95cf.x86_64.rpm bb24d4c5a125ac22ba5afd35e9fb30c833ccbe8041feec098cab34a1e7ff252d perl-DBD-MySQL-4.053-3.module_el9.8.0+235+a38ba90c.x86_64.rpm bc1c6ad4835ebba1c57bcb499940bbaa6e0cb1a1f6e70efc2eaf7bad6ae06ef3 mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm cde7f7ad433817f56a1963dc6f951f5ce54fbffa0b81b588ad4b43c5d751b0e9 mysql-common-8.4.9-1.module_el9.8.0+263+ff5e95cf.noarch.rpm d8cbf17ce48d657b62b19c6891bc7ad0445861ea6770ba0e037e23ffac6cfba5 mysql-errmsg-8.4.9-1.module_el9.8.0+263+ff5e95cf.noarch.rpm f2a1a76fb605a38e2220f85cf172bc2ed3e26a07681a9a2ef11653bba730b085 rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 mysql-test-8.4.9-1.module_el9.8.0+263+ff5e95cf.x86_64.rpm fc962a688837639398e50fee4937188817739cb5bfdc66bad403af1f97a0e46b ALSA-2026:25057 Copyright 2026 AlmaLinux OS 0 1 Important

mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mod_http2-2.0.26-6.el9_8.1.x86_64.rpm f093097a0de4ddf6ed83b60956fbc66096d72671c49970024ffa235a7306df15 ALSA-2026:25058 Copyright 2026 AlmaLinux OS 0 1 Important

poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default poppler-21.01.0-24.el9_8.1.i686.rpm 2fedfb399c57c52cfe60b29bba04d28a9c8480a594c43463417b6591d3f8619c poppler-glib-21.01.0-24.el9_8.1.x86_64.rpm 3fcd50935be24db7cd96cbf082dfaf6444fe1847b0c747f369578cc2f8f8a953 poppler-qt5-21.01.0-24.el9_8.1.x86_64.rpm 849869c6d79cff0e18bb939222f71a383dfd0116754e44967b83c328e630db30 poppler-glib-21.01.0-24.el9_8.1.i686.rpm 8643eedcbdb3b840421e6088aa499774cb7c1c333ffbe382bf907b1309907a81 poppler-cpp-21.01.0-24.el9_8.1.x86_64.rpm ad02252a0184e16fef23900cb521c5d2e029f0dcdffbbbd59d26a900d0bd541b poppler-qt5-21.01.0-24.el9_8.1.i686.rpm b5098714c2203a617fb9f52c13def9ad2763e2f536590e8f002c85af92ca7b96 poppler-21.01.0-24.el9_8.1.x86_64.rpm d850c8b5e3289a45f8b8fc09c2fc8765b4035be2a0fda7b12a08ffc7932aa632 poppler-cpp-21.01.0-24.el9_8.1.i686.rpm f2cb4ae21949e25c93bb1d2911d98a24f5232279d2fcff492be948669cf2cbfd poppler-utils-21.01.0-24.el9_8.1.x86_64.rpm f57d28747c3e780236860a43d90763db22bf94c4b035fcf0ef2368b064b458c3 ALSA-2026:25217 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-5.14.0-687.15.1.el9_8.x86_64.rpm 4360aa626230f3f28629e47c1fe3f8eaf1dc40d50c5a649b9d0529ed59b2672f kernel-doc-5.14.0-687.15.1.el9_8.noarch.rpm 46ca4f642096e10ff37d9ec5a5311072fc55575922e83524e8358638996b0b39 rtla-5.14.0-687.15.1.el9_8.x86_64.rpm 4d201c6854701bfadc8d5ed9c0d131cbf2887c9c828b004f0780f65956cedc90 kernel-headers-5.14.0-687.15.1.el9_8.x86_64.rpm 55c584c6f11e135e92d9345f969efd978919cec601dfac132737cc5276f1b1af perf-5.14.0-687.15.1.el9_8.x86_64.rpm 5fcf90f5a0f954629e7ffc2f9b4e3b85cc184e0c527cb477b414e49b5ad294ea kernel-devel-matched-5.14.0-687.15.1.el9_8.x86_64.rpm 6972c42118fa3d6ee1e2b0f0b8bf5b50cd8ba35fb07e36747c44e6e895408219 rv-5.14.0-687.15.1.el9_8.x86_64.rpm 7b6375a95bc5b710d413fa52e3f915d1d5911d8d4da09f190c44026c770ba416 kernel-devel-5.14.0-687.15.1.el9_8.x86_64.rpm 961b1c8e47238fa9bb73288b78b8099208e0677ba2d5088e3adf023d674573d4 python3-perf-5.14.0-687.15.1.el9_8.x86_64.rpm 9f957453ab8e3805d867b5b5981bb6ffdffe0ac3aa62082f62da60049eaf9ff0 kernel-debug-devel-matched-5.14.0-687.15.1.el9_8.x86_64.rpm e22e5bdb8eeb6f5450d8ee477d14017565a92afe38fea669cef0c58525dd2fcd ALSA-2026:25219 Copyright 2026 AlmaLinux OS 0 1 Important

redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479) * redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631) * redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default redis-doc-7.2.14-1.module_el9.8.0+258+b8f945d3.noarch.rpm 36de6c3ed6aae80f0229ecf365a3e6816a211966224f1eccddbdcccff6cbf232 redis-7.2.14-1.module_el9.8.0+258+b8f945d3.x86_64.rpm d250007ea42ad8fabda5b6b1f87173a083c1c0da4ab0deb01cb2f52b8e8847cf redis-devel-7.2.14-1.module_el9.8.0+258+b8f945d3.x86_64.rpm e13cbe51e490ba5301d198b5bf2e1b75c38f8ba051e7e676097dfa469df7abdf ALSA-2026:25220 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-apphost-pack-8.0-8.0.28-1.el9_8.x86_64.rpm 1bb5dcaccb63013bcc0a119d807e74686a29de3979e73d4b2a36f2acce61c0dc dotnet-runtime-dbg-8.0-8.0.28-1.el9_8.x86_64.rpm 33ea4e05cb34afa5641c3e0357059bc63111b44068337a2c43e95dda868e2c9a dotnet-templates-8.0-8.0.128-1.el9_8.x86_64.rpm 3d90669973da5d3c6bb6ad83025a8848ae3b833d029cf0e3b810b21deaddde0c dotnet-targeting-pack-8.0-8.0.28-1.el9_8.x86_64.rpm 49d83ae15341ec8fc338c03121de9650ce3bc96e7859b9c48b4739cf1f29edbb aspnetcore-targeting-pack-8.0-8.0.28-1.el9_8.x86_64.rpm 4e6ef6f5f36bdb7792d09ce0d93b2666326292bf44fcd59e30b51ad9b723779a dotnet-runtime-8.0-8.0.28-1.el9_8.x86_64.rpm 505137bae952448ecc5a6ea76be0afeb434f87d551e29efc51028748b92ed27a dotnet-hostfxr-8.0-8.0.28-1.el9_8.x86_64.rpm 7a2116acdb814b6d257cefd4f5dd6da0cb3a10e86756fe2840f5e780f8db6a46 dotnet-sdk-8.0-8.0.128-1.el9_8.x86_64.rpm a94184722523af2e52a86f48bb9bc4d8940f207e915b8090a67a9cf6d0e9c4e4 aspnetcore-runtime-8.0-8.0.28-1.el9_8.x86_64.rpm ab34082298d29cfb91defc89c5c0ad33957f2a6b58df9b1e8780dbf01704406d aspnetcore-runtime-dbg-8.0-8.0.28-1.el9_8.x86_64.rpm bfd6d4e8c1df563d85adb81b300f1cbdb98ffef10350ebc43d917537f58bfd0c dotnet-sdk-dbg-8.0-8.0.128-1.el9_8.x86_64.rpm ef57f4657ecf95eb8d5f5444c0398cf452dac0eafcf0751ccb18bf396c81efa3 ALSA-2026:25221 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-templates-9.0-9.0.118-1.el9_8.x86_64.rpm 29a7edb4151d17383b77e03efae46184d89d83603030198f27bea1542cb8c327 dotnet-sdk-9.0-9.0.118-1.el9_8.x86_64.rpm 4671d50a8db34cfbadb8ecb6aa816caadd952c6bf3bce6010f3cb823f384ee0b dotnet-apphost-pack-9.0-9.0.17-1.el9_8.x86_64.rpm 5d8293810f4176dac3aa7ef4f0d6756fb8f6f5f724d3cd50093c831d85eb7b90 netstandard-targeting-pack-2.1-9.0.118-1.el9_8.x86_64.rpm 6d1a0e59326899fd33dd1e6f8b765b3455cf62664c42dbce6b4a8eec14955833 dotnet-runtime-dbg-9.0-9.0.17-1.el9_8.x86_64.rpm 757efca68d7627f6d087e75ae770040b7af9c0bcdb658573c08b351c256f55c7 aspnetcore-runtime-dbg-9.0-9.0.17-1.el9_8.x86_64.rpm 7d7fcff9fb5347c29db08451f40ac29a30a5a18c71b6a2f4ac7debbe2cf1f8b1 aspnetcore-runtime-9.0-9.0.17-1.el9_8.x86_64.rpm 7e8bee6f4fbf3b20b33962c78e81c2abc957f0a73053a4e7057bfb473894f855 dotnet-sdk-dbg-9.0-9.0.118-1.el9_8.x86_64.rpm a303e02e346ea668e124f21c408fcafe7f64690055bb73b68c211503e67048c1 aspnetcore-targeting-pack-9.0-9.0.17-1.el9_8.x86_64.rpm a5e0938c1740bcec34eb6694cf51f5258001e9bf7cd2778c7c162e27a8c46edb dotnet-runtime-9.0-9.0.17-1.el9_8.x86_64.rpm ac2e387847a81f9289dd2042b8cf08351dfe174ee5ecf9fe4915d64e7646655b dotnet-targeting-pack-9.0-9.0.17-1.el9_8.x86_64.rpm c5f993dd40f4a98cba6b77547ee5829176b235bad447c3171b0665e9997676cc dotnet-sdk-aot-9.0-9.0.118-1.el9_8.x86_64.rpm e0bfb33d7b354a06eb8ae58b57a34c1a60b9a84bec2e09f8dbdc0e0c63bef954 dotnet-hostfxr-9.0-9.0.17-1.el9_8.x86_64.rpm e551e5c0c46fa27a8c8878fbd3ddc0a391e52bb6cc76cfcf872028a9d552486a ALSA-2026:25222 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default aspnetcore-runtime-dbg-10.0-10.0.9-1.el9_8.x86_64.rpm 0e971cbb602e867c8b7945f6c1eae965b3a47371c136402d6fe3a8e016246725 dotnet-sdk-10.0-10.0.109-1.el9_8.x86_64.rpm 289e110580c7ec59f39b04ac0180e409ee62d913f4cfc47bf0b4297902ff9000 dotnet-hostfxr-10.0-10.0.9-1.el9_8.x86_64.rpm 3641ab551ce4531133e2eb347e55dbd472c862756e37df0da66f16dd4c72ad30 dotnet-targeting-pack-10.0-10.0.9-1.el9_8.x86_64.rpm 3aae2a7e4e2bdc502d38ab7cdebd6914e69e107dbe1099edf9a12d3ba003b7dd dotnet-apphost-pack-10.0-10.0.9-1.el9_8.x86_64.rpm 52a81c827459a5d26b47e5b118584b75a8ac01933998bd83962959c171dc5ae7 dotnet-sdk-dbg-10.0-10.0.109-1.el9_8.x86_64.rpm 70ee76c0cc36d4489735e0430d7142cb8a537e35fce3a8f2ee2d943227fd1094 dotnet-runtime-10.0-10.0.9-1.el9_8.x86_64.rpm 7e502e4fd532c42b1c8a8dd861243c66c47a9898903fd9c6a00333102f428056 aspnetcore-runtime-10.0-10.0.9-1.el9_8.x86_64.rpm a1a42cd271be67eeb737432eb5cfd32a8ee2b6dad2e2585b3a594d19607f3f6c aspnetcore-targeting-pack-10.0-10.0.9-1.el9_8.x86_64.rpm a9331a7f1f3a2d53723141a8ff7a9be521e44fdcf28a9783a0f00b61d2ebbb83 dotnet-runtime-dbg-10.0-10.0.9-1.el9_8.x86_64.rpm c169040e14ec24a607609b92eac6e3eb88c8896ca10fb1a0e16961ab26f81967 dotnet-templates-10.0-10.0.109-1.el9_8.x86_64.rpm c767e8ebf42fc6d41bde3321cd5c33c90c0b75f1bb5d98dc54957680ae681955 dotnet-sdk-aot-10.0-10.0.109-1.el9_8.x86_64.rpm d5d8bcb224676e2c74dc7a5c6ae4895565a304cdee964fa845bb36e0ce8f929e dotnet-host-10.0.9-1.el9_8.x86_64.rpm ef3d9437fb51460ff15b421cbbf2e0a3058719a502125183f16efc6de4a15149 ALSA-2026:25239 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing (CVE-2026-7383) * openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption (CVE-2026-9076) * openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. (CVE-2026-34180) * openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVE-2026-34181) * openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182) * openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (CVE-2026-34183) * openssl: NULL pointer dereference in QUIC server initial packet handling (CVE-2026-42764) * openssl: Possible NULL Dereference in Password-Based CMS Decryption (CVE-2026-42766) * openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVE-2026-42767) * openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (CVE-2026-42768) * openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVE-2026-42769) * openssl: FFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770) * openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445) * openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVE-2026-45446) * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openssl-devel-3.5.5-4.el9_8.x86_64.rpm 070869255a2bb0b52af692bc249e4aa24c3ab84f863c5e91b6d801290765ac3e openssl-devel-3.5.5-4.el9_8.i686.rpm 3c21105b43d39bd16009e45665991acdc188f1a6e0cc594a19c3398df3794615 openssl-perl-3.5.5-4.el9_8.x86_64.rpm d1b1371f2385d3cb6ed54831d44da5d8546be0ac72b7a2884177e9f8cb4d11ce ALSA-2026:25925 Copyright 2026 AlmaLinux OS 0 1 Important

valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479) * redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631) * redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default valkey-devel-8.0.9-1.el9_8.x86_64.rpm 3526fbf5163c1bbba9f8625b33f134bfb8983ae94385c114ff173b6c7d7aea89 valkey-8.0.9-1.el9_8.x86_64.rpm b4d72b9156106f4a96fa1d05bb9c956f5267d50590d7ff5e31c9f85f1c615735 ALSA-2026:25927 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955) * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default webkit2gtk3-devel-2.52.4-1.el9_8.i686.rpm 06c5a08954934595a0c6fe7d463ac8ea8e6583e300b6727bf6c2f414b945413a webkit2gtk3-2.52.4-1.el9_8.i686.rpm 117e14ff8ed2ab5d86c4b20813199ddf5acd4a06a9c6c586a44c0a6ac1542da4 webkit2gtk3-jsc-devel-2.52.4-1.el9_8.i686.rpm 2783fa54b1c01884726fe418467b1a73d396abd4b897db425f990a1839579db9 webkit2gtk3-2.52.4-1.el9_8.x86_64.rpm 2e4d688d3fd1f5ab77c3b67edc42586fd8c5b784285dfe04d014278b0e942a3f webkit2gtk3-jsc-2.52.4-1.el9_8.x86_64.rpm 53ab049e93b01e23545016b05b03a8ac0c86a915bae53bad44c7adcfc60f8648 webkit2gtk3-jsc-2.52.4-1.el9_8.i686.rpm 6e695b37c4dbca64c0be0831e427b463c5dc05421d95e20574dfb9e24e874027 webkit2gtk3-devel-2.52.4-1.el9_8.x86_64.rpm 722bd9b5ad1ad83e3b37f7f97e9060e86cd6f3fe517c7b5f905bee16f548c5ed webkit2gtk3-jsc-devel-2.52.4-1.el9_8.x86_64.rpm f827a543e6545b87556da41c809372e3b05a786f06a9cd996254102713a176c9 ALSA-2026:26203 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgis-upgrade-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm 104ecaccef4330e0aa2d214a6151619cf5cfe4982524e4daaba24642174b045d postgresql-upgrade-devel-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 108f826b1ad0368abae3c1312401c42a85f5785ecfaad9a4e13f88083d68750c pgvector-0.6.2-2.module_el9.6.0+167+4e561146.x86_64.rpm 1141f322652c8d905035a08a39e707d5192236d5b4b442802732b66a0684e10f postgresql-private-devel-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 128c40ef6fe35f8c5f02f59fe430a9eb2b0766eb95015b4d070e703bcdbb5d08 postgis-utils-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm 2c88371e0af08a707d496a8a5891097400150f6e18415934a1b1c002eeb4e776 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 postgis-client-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm 3c147a93c46673dbcb8e9e3d9a9689aa0554ab90d0bcd4b009ff53333da8db8c pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgresql-server-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 55e238c514463291285b9ac53fc38ff43e2f2c005d32419e1feec4f2dc4e7aeb postgresql-docs-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 68b7f369d1aee49c0886727f379c027876bfe0f4d4ce10f783833e36dd30f177 postgresql-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 68d844b759f2056ee349e81fafb6613df28c629f385eb2142fca141ac699c123 postgresql-private-libs-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 745296a2fe620971aec8560e0a4467e20c43b1b9018d6a2908ed3f38966b3022 postgresql-server-devel-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 74b774f9bd95fe925ef0f8705f31a3cd6615f75914abfee51511ec40b8d2c0ab postgresql-test-rpm-macros-16.14-1.module_el9.8.0+266+1e661e97.noarch.rpm 9232351ae957fe56b5a13893ddc43647683af1ce4e933cb6b2e1651d097a4163 postgis-docs-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm 990bac10c5339141ca0fa90fb458bf60266c2fd87a53c203cba1e4b8d6466d83 postgresql-pltcl-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm 9ee7a8c0ff9d4e7846ebd476251fcc107ab23196caae9a650eeeccf324397656 postgresql-contrib-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm ad20f86037588c59d9ca27b961083e72776e81290513d70cdc253494cb8333ce postgresql-upgrade-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm b05f7cd69be2a127f4ebed2ba330407795cdf2c97c54d616033c3e4213c62c5d postgis-3.5.3-5.module_el9.8.0+236+2d3cbd4c.x86_64.rpm b5e92397c6157fcc211a53ddbaa44edb652b0e02a1af10e1c8d8805dbd15ee0d postgresql-static-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm c44a6623f277bf5ddfa5e8a62a096486f3eb88233840fbc69a3af5dfd442e678 pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.x86_64.rpm c660056970f41edeec199c6634387c8235fcf981c34cdf3f74d9d3b3fd36eb63 postgresql-test-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm d894a7734b80004654739b4e01cabb25c36e9fbf234b928ab3522732639f65f4 postgresql-plperl-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm fb23259a6272a801b7f504db9ad5bbe8527e2448efcc7553cbbd7f0a0ce6851e postgresql-plpython3-16.14-1.module_el9.8.0+266+1e661e97.x86_64.rpm febb3adc5838e85e77b9b9bf85bb966d1b77af11af3c9cc41a8d5d3d9e92a9c4 ALSA-2026:26204 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgis-upgrade-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm 037e0d3665e71b78f1404903e05475457f861b67f4ed942e721d4d8b616e221e postgis-docs-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm 21c72dfd427ebc7c946536cc37a6fc190e01174121eff47c9e569ef0a66b6ce3 postgresql-static-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 2c8a343a9c6baee7ce299d965b5c3ee2aca1e2eb2b63eb5e03d73392ebd786df postgresql-private-libs-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 3086e7973d210a04dc7c97a39d61b4fb30da25a834893c728afb061fc53c1893 postgresql-private-devel-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 547de31aa767bdc6a57a6751afeea770a3b1875df24d00aff444d4173aeebaca postgresql-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 6315027408242f599b4f71f331be7bc19c8c587988174579303cd0106914218b postgresql-pltcl-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 6ccdf5bc6a47493743c483099349b46a6c65b0ebe60c98d594e03ae6fa9000b3 pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.x86_64.rpm 73073e39b560916558cf7a8f43740f64b0941058d81dc88eaa8172312aa3ee09 postgresql-server-devel-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 7a98bc123d24c3f1a2fc85c0d32311bb651e98ab6f301c3791ff43b22fbc9ed3 postgis-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm 7c590a5ab1386f44b0889bf4d925dfd9ee44e508117b6c1439e44f6eef619883 postgresql-server-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 801ec1abac7fcf50ad68a4073f300d0370e25a823b4eee57f11418bf6cd1f7d6 postgresql-test-rpm-macros-18.4-2.module_el9.8.0+280+5ad12178.noarch.rpm 81dd7290e5be11670a1072bc113b92cf9e802f39ce597fd2b6c9d72761542cf2 postgresql-upgrade-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm 9587e1fc0baa53b13764b6747e90596a6586ac912a3626e9dc34027f833bdbc9 postgresql-contrib-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm a74cc678f1547e877944d9dd2e2034d9ae71e40ba5e36e19a757e22843296499 pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.x86_64.rpm ac5c05b5931f90b0f9c1905b375a1b91b30d967f960e149d92265259d6d9a484 postgis-client-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm b78a595d87e06de2b4ba04ad34230a07b1fe3e98ba85f65f958def1a45a1f4e2 postgresql-plperl-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm b9ec4d368a14e66a112d66698256b7d4996bf7887ec5e7205bb845d74fe67ab6 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.x86_64.rpm c187a7e2e80a5628dd7c120a1ad9bd8241f2f34a57986c68a2e92ddf59d6ab13 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.x86_64.rpm d6732e77dcbe9d5cb8e802b5fe884dfcc1d7b2857df1edf3c98988bfcf832e03 postgresql-plpython3-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm d6b50fd570a4a09ec72dca6a0c484cbf1b56022b5eaea8adee37f641c911992d postgresql-test-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm da2a4e27144d44849dc0c3f9da7a17b93d3e500a892c6313926d0704963e8fa9 postgresql-upgrade-devel-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm dc3528114a387334ab744eb2f90143679afd332cabebfeccc9ce1ac874c82444 postgis-utils-3.6.1-2.module_el9.8.0+239+6fb51d38.x86_64.rpm ee6b50bfd9bb34124a4395971cb483ee93f6ceaec01d6cd5950816dd14a1ee0d postgresql-docs-18.4-2.module_el9.8.0+280+5ad12178.x86_64.rpm f59fefc1fb825f16c64dd4bb18a9104aeeabec503ead5f4eb248f51a9331a18b ALSA-2026:26205 Copyright 2026 AlmaLinux OS 0 1 Important

postfix security update

The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS. Security Fix(es): * postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postfix-ldap-3.5.25-3.el9_8.x86_64.rpm 08892934b7e9e172731557c0c29a99be812372defcf044716f1858be8042bad6 postfix-pgsql-3.5.25-3.el9_8.x86_64.rpm 0e685e6d866d98456067efa032db95022a4081823493c21a65ef7397dbbf9c5d postfix-cdb-3.5.25-3.el9_8.x86_64.rpm 1303c23171083cee76b8724eceac50da397dcf157d2b6071464e40da5cf0cead postfix-sqlite-3.5.25-3.el9_8.x86_64.rpm 33df92652697957dc40aeb4100a6a0774b76224a4ca04829745b38b8fd1e5780 postfix-lmdb-3.5.25-3.el9_8.x86_64.rpm 367843dd1c31021c17543df2745bdb0115e2599e0dcf64bc7f8bcd63244b8843 postfix-perl-scripts-3.5.25-3.el9_8.x86_64.rpm 3f0d8e7ca77a9023ac30dbc52e5669b624e18ee7ed1cbd60fafdaf0afdadd1d0 postfix-3.5.25-3.el9_8.x86_64.rpm 6bd64b26db9d140187a2368a9c34a02d6939151aefb272d460c0a64fe062981a postfix-mysql-3.5.25-3.el9_8.x86_64.rpm 6fed6c1b59ca09a6cfdf335b88e6df40ecf29c460879fa4b95ae9830a1fa150c postfix-pcre-3.5.25-3.el9_8.x86_64.rpm bf6d5c6160334051b13d6569014cd8ff1690d507796ec3e0cdc6ee90b699f030 ALSA-2026:26206 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default fence-agents-kubevirt-4.10.0-110.el9_8.3.x86_64.rpm 00385e24a0099c9d552e8365892dedb46ba2d1cc7ed7f31cce2d30b43da5b90b fence-agents-bladecenter-4.10.0-110.el9_8.3.noarch.rpm 00e37728dda29b5db7f35488eabef0b9443f6661414cc56466b72687a452aa93 fence-agents-cisco-ucs-4.10.0-110.el9_8.3.noarch.rpm 07314381d6f3062faf4d14b1f8b5bb21035668ad128f74e83c6929c8215cceb2 fence-agents-ibm-powervs-4.10.0-110.el9_8.3.noarch.rpm 1c8b01a5621adf4e8e8b4253daa2e30f931e1b77ec555943aa215936c55d720b fence-agents-ipdu-4.10.0-110.el9_8.3.noarch.rpm 1df62191826513e27705a2656bd81946db58f11a8c31ee950af5ff259364a6cf fence-agents-ipmilan-4.10.0-110.el9_8.3.noarch.rpm 224a833d099b68da7ff864f73f319140df571fcc42de30dd684032d569574a23 fence-agents-emerson-4.10.0-110.el9_8.3.noarch.rpm 25d5e3af82025a90e11e690fb07089a0f8daf6a318c7cca8fc9846ed8a43a284 fence-agents-intelmodular-4.10.0-110.el9_8.3.noarch.rpm 286060cd04d785707cacfc62fc7ab5934ce6dddfdcb8d030ac75e7deb424eaed fence-agents-azure-arm-4.10.0-110.el9_8.3.x86_64.rpm 2a4e00c9348defbf203620950255c43148d93c7ea6d82209b1ab5d7415d0db31 fence-agents-hpblade-4.10.0-110.el9_8.3.noarch.rpm 2aa566bee9075d5a526555d9cf42b1d9580f669612c902599af1f4dadc49aab7 fence-agents-aws-4.10.0-110.el9_8.3.x86_64.rpm 398dd3aa2e2c1f381052846104069faaebeca14c8d59245c21819771effeb45c fence-agents-all-4.10.0-110.el9_8.3.x86_64.rpm 3dfd2dbb8938f4c56b6cac57f51417e17dd1bd484b660350eca38a8317a08f4c fence-agents-drac5-4.10.0-110.el9_8.3.noarch.rpm 40f6cdeac74af6acd4d4f3131a49eab7b861d23d5950d8339c41a9cae2a7aced fence-agents-rhevm-4.10.0-110.el9_8.3.noarch.rpm 4765fd5ed8600272a6785e78c78721a78fecf8015cc6911f07e51193b83d6eaa fence-agents-common-4.10.0-110.el9_8.3.noarch.rpm 48b240b9489fde1ae9a765be495a522d9decd867b517769be1d3df6fb1d0df20 fence-virtd-serial-4.10.0-110.el9_8.3.x86_64.rpm 497ada64741cbaa4c8883425d9618116ea04d92c64cf8c67558fb8368ebb76d8 fence-agents-apc-4.10.0-110.el9_8.3.noarch.rpm 53791efe9cd7b3501b56515af69217444d30f24d070525d3ea3ec35ae3fc2e8a fence-agents-rsa-4.10.0-110.el9_8.3.noarch.rpm 53d732cab69d63bb3fbb3ade4e046a63020cbfbb066c7c3efa12bc2406864eee fence-agents-mpath-4.10.0-110.el9_8.3.noarch.rpm 579ab4c114eb3eb54f82756de6baa60de68b980c1cb820b25ef85d8345c5eab0 fence-agents-heuristics-ping-4.10.0-110.el9_8.3.noarch.rpm 5a22ab5fd2021ee1192e62a8ec4dd6b536f1940661776286cea49825f36a6a75 fence-agents-ilo2-4.10.0-110.el9_8.3.noarch.rpm 5b53a6864e7158f4d316eff9f250db6c81fbc9b45d700d96e4600fb17ceda9df fence-agents-ilo-moonshot-4.10.0-110.el9_8.3.noarch.rpm 5c6a7d45cf476b342b5bda86914a0653750d99c8bc528e17a35fea466ae92b7b fence-agents-eaton-snmp-4.10.0-110.el9_8.3.noarch.rpm 631719558d0fd3add8ee1671ff950cd4b3aa7d4eab261f10f3fbbdd2c63fffed fence-agents-cisco-mds-4.10.0-110.el9_8.3.noarch.rpm 649bb606e84b0bd4ccb730aeb0915854dcf3b6418fc72b2f9c98af1d40d77738 fence-agents-amt-ws-4.10.0-110.el9_8.3.noarch.rpm 65f6a54f34c5b1ca7b2cfb072c44fb720956487cd021c29b751255a32a7f575b fence-agents-vmware-soap-4.10.0-110.el9_8.3.noarch.rpm 69936397859f5b697b9f5b6f1b392976d2a92d3507b0a2c9494c597cc7d4ce0a fence-virtd-cpg-4.10.0-110.el9_8.3.x86_64.rpm 73ae1a2d1f465f1f088a88a2e867fe84e8579ac479833e872f66c5251ed4f92d fence-agents-rsb-4.10.0-110.el9_8.3.noarch.rpm 759df41020d8ae447b079a590c4610b0b85c41016dea069d286434d7c9c96acc fence-agents-wti-4.10.0-110.el9_8.3.noarch.rpm 79dbc3ed7ac50cfbf3279e43328b0f56d0da1f24de7f72e3464d1e019606f1d5 fence-agents-aliyun-4.10.0-110.el9_8.3.x86_64.rpm 7d7e871636bd49c6f7f7b5dcad219496dac553f620013db53c4c04f13ff31d69 fence-agents-apc-snmp-4.10.0-110.el9_8.3.noarch.rpm 821056fad813d659253688f4d10394948ba5e31554d174c8fd8026d331ad6b22 fence-virtd-multicast-4.10.0-110.el9_8.3.x86_64.rpm 869bc495e59baaf1001aa12fdf86e633b52db93adc305a064191f1d120863e55 fence-agents-brocade-4.10.0-110.el9_8.3.noarch.rpm 8abbe378138e11b97a8aca78c63a33b000a2597e3f7613b111c9174e34d0d809 fence-agents-sbd-4.10.0-110.el9_8.3.noarch.rpm 91f498b308c9cd4ed2e8df90377000fb564a0dbda6671e93d3bfc7d57ba899a5 fence-virt-4.10.0-110.el9_8.3.x86_64.rpm 938439cbd2d9923051552eb5fc3547859d306b55f3bcc911d7ca2400c3248bcf fence-virtd-4.10.0-110.el9_8.3.x86_64.rpm 98eed4e30faee5111864cdbf3db74aff84a25f65b19eafb71356b1be263183db fence-agents-nutanix-ahv-4.10.0-110.el9_8.3.noarch.rpm a24939641caa8e05a93b2dedbdc6a0e46298f2613f9a976c88bee3c8ccf07452 fence-agents-virsh-4.10.0-110.el9_8.3.noarch.rpm b025cd9768ed20007f7285658b02fbb4d2facbb426e765932e4345c0ba68fa78 fence-virtd-libvirt-4.10.0-110.el9_8.3.x86_64.rpm b07e440716cabc8ba507ca36bf1e0e2223df105827d41264a41063c920171d26 fence-agents-openstack-4.10.0-110.el9_8.3.x86_64.rpm b5a65c3562e80f26da747da296656ce068bc7f20aff3641ae0fdf1b55b1f112c fence-agents-ilo-mp-4.10.0-110.el9_8.3.noarch.rpm b7390c0ffeb016811174dca151f06d152862c453dade59e7b56e8a5ac60cb6c6 fence-agents-ibmblade-4.10.0-110.el9_8.3.noarch.rpm c18942616d1fff28d17144af7baaf9a70a40fff6a83e5dbd88cb067933220942 fence-agents-kdump-4.10.0-110.el9_8.3.x86_64.rpm ca0ebd0b02123cdcad91bfc772a86378aec1a24a2565f1db5ca8cb9dfa28ef70 fence-agents-lpar-4.10.0-110.el9_8.3.noarch.rpm cf0e857b4d9ada11081753882a1da1fabd14d4b9825d2b8ca0cc3bf7085fc93d fence-agents-vmware-rest-4.10.0-110.el9_8.3.noarch.rpm d1eba44d3531ce4a799fbc8d02056d04f5dd4a556245be51cd7ba1c455ac40ff fence-agents-gce-4.10.0-110.el9_8.3.x86_64.rpm dccac829175ef31968a27d89e5002e5937b4a38ce3ad387e717ffb25bf41b1dd ha-cloud-support-4.10.0-110.el9_8.3.x86_64.rpm de7c7f8590da8351a555057e6cdd80f4a4037eca3419e45d23548bf6848a0bb7 fence-agents-redfish-4.10.0-110.el9_8.3.x86_64.rpm e285469d01366a9a29aebb884a3afdaeb4424a85d1ede95a8e2a79f6d3896cb0 fence-agents-ifmib-4.10.0-110.el9_8.3.noarch.rpm e4e01af89f856a43aa98614c741c950493755670e36aa46540bbc8224f49ed40 fence-agents-ibm-vpc-4.10.0-110.el9_8.3.noarch.rpm e6eeefc15b044228c808a6eccf3e9cc9d00c953b3a167a6c37b6c3b00e07ced0 fence-agents-ilo-ssh-4.10.0-110.el9_8.3.noarch.rpm ebfc9e72eaddafbe2c4636ddbca2aeb80c5915efed604cba68d06c82c27e842e fence-agents-eps-4.10.0-110.el9_8.3.noarch.rpm ec94d122859a024f2f8ff080bb3cbd32ab942e9d9e914e283d6cbe2ee5ecb234 fence-virtd-tcp-4.10.0-110.el9_8.3.x86_64.rpm f365cd06e99668213a58da0484aec156744652111627bbddd42d45b57daba4ff fence-agents-compute-4.10.0-110.el9_8.3.x86_64.rpm f896cff7cfd247a5b0d1db573a04b34c04a4e15c14114a2bd514ca962b702d0f fence-agents-scsi-4.10.0-110.el9_8.3.noarch.rpm fc7c22dc20aeffcae8b9269163145e3300c98ab7f29f433353991885621ded0e ALSA-2026:26297 Copyright 2026 AlmaLinux OS 0 1 Important

hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fix(es): * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632) * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default hplip-common-3.21.2-6.el9_8.4.alma.1.i686.rpm 2a233a72af95fe5d52fd52f17d7bd316efb8ed25dc5c5053652f12444e6b6666 hplip-libs-3.21.2-6.el9_8.4.alma.1.i686.rpm 3eafa98b557bcd863075ca4446059accebcdc1bee4ec1edfeb208db301030a6d libsane-hpaio-3.21.2-6.el9_8.4.alma.1.i686.rpm 99aeda1884aeed62faba5b6fdc18eb9011776701105e23caef9571de2b2c95da libsane-hpaio-3.21.2-6.el9_8.4.alma.1.x86_64.rpm aeeffa5498c8a5e5dd0b04cf7a6f98d12c6529e46e40daf4808ad5afbce4f6e7 hplip-3.21.2-6.el9_8.4.alma.1.x86_64.rpm b57e7d6e59682ef7e2a024bef9866614fa5c10288ec0deccb58241c11da97634 hplip-common-3.21.2-6.el9_8.4.alma.1.x86_64.rpm c298bd1c8c2512572acf48e7915b0f7b0c5e03737491a73fea69e986793adceb hplip-libs-3.21.2-6.el9_8.4.alma.1.x86_64.rpm fc8a35e40e35e7d545297bce4e895aa7b314a2d9bc0dd56fe19457281b019014 ALSA-2026:26323 Copyright 2026 AlmaLinux OS 0 1 Important

tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default tomcat-9.0.117-1.el9_8.noarch.rpm 0eaf642ae4d9b596cae38404933890210da1f9df790f8e9048a0cd1da7462feb tomcat-webapps-9.0.117-1.el9_8.noarch.rpm 239add45ed7dd4f81c8cca324d5025907a07c6f8154f263608d6a8bb1851aee6 tomcat-admin-webapps-9.0.117-1.el9_8.noarch.rpm 5db74dfbab55a95108ec95867e68efae6ace0041bd70e34f0c7c9e543e175248 tomcat-servlet-4.0-api-9.0.117-1.el9_8.noarch.rpm 6b940066457482981ae06d10bf4546889a9c3977799f1beb065abc122a0f2cd9 tomcat-jsp-2.3-api-9.0.117-1.el9_8.noarch.rpm 8aef4525d23bdc46eef0a553d8380a1bf95c895e8199e5ac4fbaa8e38dbfe7d1 tomcat-el-3.0-api-9.0.117-1.el9_8.noarch.rpm da3e298483b203f2aea7165716ca26b73a6727b31b13e4403c9a18753680a302 tomcat-docs-webapp-9.0.117-1.el9_8.noarch.rpm e389e1e320afb9af3019d8d47769716b24d72708042c378490416de9bb7a0a64 tomcat-lib-9.0.117-1.el9_8.noarch.rpm f36e5317418dbb0ed928719cdfcb5ea2d81f2b8e3263c119a7deed73cd000863 ALSA-2026:26410 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding (CVE-2026-43618) * rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. (CVE-2026-29518) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rsync-daemon-3.2.5-7.el9_8.2.noarch.rpm 7c0373557493e91c344f66b7d76726c6390c3877128300de73d1b1b2e80c463e rsync-rrsync-3.2.5-7.el9_8.2.noarch.rpm d87baacd988226823837afa1d49f2b03f17f919d9b31c9480abd43994e280481 ALSA-2026:26447 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default podman-remote-5.8.2-3.el9_8.x86_64.rpm 0a54af7b9f860c185c12f8baebbb011b8ee34234416d4fd99539cac1aff10a1c podman-tests-5.8.2-3.el9_8.x86_64.rpm 0c0d8cf0f9a0c455f6ea77d3f912d2ddafc08eb16640bd2054739a6092a1bc8c podman-plugins-5.8.2-3.el9_8.x86_64.rpm 0e3f85692bc517fa99ae1f5b3b69546a2bc4c44113edacfea5284bc62105994c podman-5.8.2-3.el9_8.x86_64.rpm e359e2b00f98099294dd518f188c761ff1a31b368bd8d3bb46e8788056bc2201 podman-docker-5.8.2-3.el9_8.noarch.rpm ea4950ecb9c95b7b1500b31873bbcbd8605c4ba657a2c19826324871dd9ae0ed ALSA-2026:26455 Copyright 2026 AlmaLinux OS 0 1 Important

389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064) Bug Fix(es) and Enhancement(s): * Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [almalinux-9.8.z] (JIRA:AlmaLinux-152356) * Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [almalinux-9.8.z] (JIRA:AlmaLinux-168967) * DS 12 does not handle escape char in bind user [almalinux-9.8.z] (JIRA:AlmaLinux-170269) * [RFE] Add OS-level thread names to all server threads [almalinux-9.8.z] (JIRA:AlmaLinux-174524) * Online export is failing when using the option "-s" [almalinux-9.8.z] (JIRA:AlmaLinux-180716) * Server shutdown during online reindex may lead to data loss [almalinux-9.8.z] (JIRA:AlmaLinux-183895) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default 389-ds-base-2.8.0-7.el9_8.x86_64.rpm 45de491eeafbd39193d21dfac7c779731e06f8c9c739f5c7c7393efbce307908 389-ds-base-snmp-2.8.0-7.el9_8.x86_64.rpm 6ab93e8531c1be6b76d3a0a06e259366bd19a8435ee1d73ca1d1b41144f08016 python3-lib389-2.8.0-7.el9_8.noarch.rpm 78804c83fd98b10a8c1d117c439e62fae0e5e25f3f58c1f77b69764f2d9e3d92 389-ds-base-libs-2.8.0-7.el9_8.x86_64.rpm d4d4629df95d6ec9816c2d55f1a7746334e4a1d32e07eb1ae0dac6ad036bbfae ALSA-2026:26533 Copyright 2026 AlmaLinux OS 0 1 Important

dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition. Security Fix(es): * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dracut-live-057-115.git20260527.el9_8.x86_64.rpm 34f2d21fa36b3fdb2d43aba7952d0ef2c94429efde485960ad713a893bc55281 dracut-caps-057-115.git20260527.el9_8.x86_64.rpm 8b32c812837a757cec7864731135f4f50da9b13ca227ebee71da2f14022a6b4d ALSA-2026:26590 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security, bug fix, and enhancement update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) Bug Fix(es) and Enhancement(s): * [xwayland] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184292) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xorg-x11-server-Xwayland-24.1.9-4.el9_8.2.x86_64.rpm 5b688f603b556f88c781179adf8045775e86ab7d2aa04c647d0ea57dac0dc8ee ALSA-2026:26610 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security, bug fix, and enhancement update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) Bug Fix(es) and Enhancement(s): * [xserver] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184288) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xorg-x11-server-Xorg-1.20.11-34.el9_8.2.x86_64.rpm 2e8615f98e240a1150591a787615775e30b5c0fdd5acb0d810a32fd70ce99b0f xorg-x11-server-Xvfb-1.20.11-34.el9_8.2.x86_64.rpm 6fb216923b06c3130bc41ba45df8aca2b0f01a3190a59d288b54dbe2ddbe6f8c xorg-x11-server-common-1.20.11-34.el9_8.2.x86_64.rpm 834c59fc347d776908ba88e2c17125261f2a11c28d06652538f730992c1294a0 xorg-x11-server-Xdmx-1.20.11-34.el9_8.2.x86_64.rpm a7386fc0ddf97ad5bb2c9ec67e78c26ff035834fbaa9898da3327dbfb589d5f7 xorg-x11-server-Xnest-1.20.11-34.el9_8.2.x86_64.rpm bc8c83acdfe0f8041d9ff488f7404dc54f7b56deda949f45bca8a06d963a77e9 xorg-x11-server-Xephyr-1.20.11-34.el9_8.2.x86_64.rpm fd14724f42b702132cfa95bb2682550dbddaa310afc091a4aa97cccf9bbdd1f7 ALSA-2026:2707 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: heap-based buffer overflow via specially crafted PSP file (CVE-2025-15059) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gimp-3.0.4-1.el9_7.3.x86_64.rpm a91f8eac67cbbf1b563d60b81102f8023a7a63ff4edc752ebcb0b3fdb3715a52 gimp-libs-3.0.4-1.el9_7.3.x86_64.rpm b1a6089fb216808e5d9d5dc0529ad38c3f625aa403dc49bb7d80f5e466f750e7 gimp-libs-3.0.4-1.el9_7.3.i686.rpm e341bd84bb61f055f1fb151da569bf9ed4a6402ccd375600b32800c196bd6d42 ALSA-2026:2709 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * cmd/cgo: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default golang-race-1.25.7-1.el9_7.x86_64.rpm 3a82cc284c7a6656c7d5cb7956be76cb93b5625107118176f382a60057474933 golang-docs-1.25.7-1.el9_7.noarch.rpm 686ac35cb0130236e1ba9f065e7fa2a21533ae475237498d0c222af295a5fe47 golang-tests-1.25.7-1.el9_7.noarch.rpm 7cb785edbb4f7d6eafc3e43e383b7d6bc925cd055c5bec99cedb8be289c830f7 go-toolset-1.25.7-1.el9_7.x86_64.rpm ae3c658c0ded9a686a89b465d8c577269626277a39b0d2729f420c20f8a0726a golang-src-1.25.7-1.el9_7.noarch.rpm b3ea6240252afc4aa1cd8e39e5e65f40e80fb4df1ced744cd5d613572c0b0049 golang-1.25.7-1.el9_7.x86_64.rpm bf27759843a9e13da29a4f604aec966174b6ce8c24dfd76fecb2e0a9270705c8 golang-misc-1.25.7-1.el9_7.noarch.rpm c12eaeb220c75cd9ace3ccca24d26329389573e2fbaf8cf5533b296b5bbd81f5 golang-bin-1.25.7-1.el9_7.x86_64.rpm ec8948c98c36c74e0fb7d65739a0a84df0c9126b493060adaae229ff9863a511 ALSA-2026:2722 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034) * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304) * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322) * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349) * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811) * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default perf-5.14.0-611.34.1.el9_7.x86_64.rpm 0da407f9b52ba6cd1ea3e42f9e83da0d541d17dc74206fe68c57cc4cd5e733b0 python3-perf-5.14.0-611.34.1.el9_7.x86_64.rpm 0e97ee67664c02097be2f2353d085e9497beed3e64121b105bffc8e2fc6bf4de kernel-headers-5.14.0-611.34.1.el9_7.x86_64.rpm 127ff4e001d52337a818db857db78b76afd15252ed0468d6c6c889557c567d86 rv-5.14.0-611.34.1.el9_7.x86_64.rpm 3567c1e6b58ba2a65436ed4d5c2d42d79ee2e8c8bc3d3fa2ed649cbde9cfdd0a kernel-devel-matched-5.14.0-611.34.1.el9_7.x86_64.rpm 3d2dcf43adf8045ca8efd793fec5411ab190f40b4f396bc045b3d17a60c62abc kernel-debug-devel-matched-5.14.0-611.34.1.el9_7.x86_64.rpm 906bfb5b2f7eb446465b53c7e1d2592f991dc5c42c4b43665c4a68308956059c kernel-debug-devel-5.14.0-611.34.1.el9_7.x86_64.rpm b91242c50115505efc84bc4a105ec55d72cc2743d3ae07f3186fe98da2f63a10 kernel-devel-5.14.0-611.34.1.el9_7.x86_64.rpm cc1929e550225afafb72dad46ff64c55fbf7cbd02c02cc6cd4d1c1c570b54eb4 kernel-doc-5.14.0-611.34.1.el9_7.noarch.rpm d6daa259ec2338d1f306e57d0667458a60db4dbd7884b3b326901e4dda3d4b3c rtla-5.14.0-611.34.1.el9_7.x86_64.rpm ddff6e0e147005cac3e64c649a43c35b9ca0d4053956716d56d3261c030c873e ALSA-2026:27734 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294) * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313) * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327) * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328) * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310) * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325) * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315) * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305) * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324) * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304) * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firefox-140.12.0-1.el9_8.alma.1.x86_64.rpm 4b13eaa56e4630bbb2396fc2b448af46019f6250a4d6c06fc5f0e3f7c51882d2 firefox-x11-140.12.0-1.el9_8.alma.1.x86_64.rpm 6402f4d0fdd8ea6d2483b067b2a108c4301b33039aef41421c1287eea21f64dd ALSA-2026:27741 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgresql-13.23-3.el9_8.x86_64.rpm 1cd5714d0e3edcddfba4a80d50b4faa3acb65b0100b687110bbe9dd2c79c6462 postgresql-pltcl-13.23-3.el9_8.x86_64.rpm 213d47a163a98cbff4764e9ca75e8b0f3eb570fb7585f85f40e041eb1b7cf5dc postgresql-private-libs-13.23-3.el9_8.x86_64.rpm 2f20757fd931af90a3e6688154c13901e14477c535310e78c0c2b514520ce84d postgresql-server-13.23-3.el9_8.x86_64.rpm 585b92f4e95e2a4beaf401b8b8c813e7efbaec43763207585333d442c67fb59b postgresql-upgrade-13.23-3.el9_8.x86_64.rpm 5f94bb2fb2872908f2c1319ed7f3af5a641388cf584d5373d40ed86560b8a5aa postgresql-contrib-13.23-3.el9_8.x86_64.rpm 894f21c85d35c22bf41da2c48361155b081602fa4635b00184b69e07c904eafa postgresql-plpython3-13.23-3.el9_8.x86_64.rpm a44c7212c696f49b64523a9eb2717a88365badff154f8dcc4852af9ae385844a postgresql-plperl-13.23-3.el9_8.x86_64.rpm dc2fa1c4a51a31b07155e40bcd226d5e48457998f5433f8bb1749f35e60b1bfd ALSA-2026:2776 Copyright 2026 AlmaLinux OS 0 1 Moderate

edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default edk2-ovmf-20241117-4.el9_7.3.noarch.rpm b5e7af0c61e51f6617ef9d9b9ae4fc554d01d0de332dade45c8bb7304457a20d edk2-aarch64-20241117-4.el9_7.3.noarch.rpm c529f43a57b1378db756550bd605d19c555f6d0c4d1b8d34861e2a5c1bfb655e ALSA-2026:27789 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) Bug Fix(es) and Enhancement(s): * AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048) * [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699) * DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820) * DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823) * ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308) * AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perf-5.14.0-687.17.1.el9_8.x86_64.rpm 021bcf70e34a7bdc88eed3147899a29de9cf0186cafca7e7a1848f385ba73545 rtla-5.14.0-687.17.1.el9_8.x86_64.rpm 0ff21465dea0474bb1f56b229ec016d97e451d56d9ad11c6b09dae6bba0afd91 rv-5.14.0-687.17.1.el9_8.x86_64.rpm 12ec214d4119fd18ba4ad248505112bc632535ce675bfda693b5f666d9839047 python3-perf-5.14.0-687.17.1.el9_8.x86_64.rpm 3625b0a4731310f6f4a59ed736867e5298062188df87ad9c7bdf21cfed800ac2 kernel-devel-matched-5.14.0-687.17.1.el9_8.x86_64.rpm 6374d94da608a8e473d14b1146e7ca8bc92abecc29b228217a3f4fa53c3fbc85 kernel-debug-devel-5.14.0-687.17.1.el9_8.x86_64.rpm 6dbce7abdfae5a1f87506aca2a42926cdb642572e0db2b299558d4efd953797b kernel-doc-5.14.0-687.17.1.el9_8.noarch.rpm 7f8264df925d7334c6806d74ac852a268d27036d7534fc5e7c464e75572e225f kernel-headers-5.14.0-687.17.1.el9_8.x86_64.rpm a3a483985a0a248d30a7ac5117e8b18dc4f5aff2ba0db3af8e13d28f22fdce3a kernel-debug-devel-matched-5.14.0-687.17.1.el9_8.x86_64.rpm b13e46dc6dd4dd04b5a84dfed68ab91defa2f3fe784bcf0317fee02c9acbb723 kernel-devel-5.14.0-687.17.1.el9_8.x86_64.rpm c5a7b6430b6e6a88a2ce0f87f793fd0ce1665d77a8bb9775f60777013b18df94 ALSA-2026:2781 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132) * nodejs: Nodejs denial of service (CVE-2026-21637) * nodejs: Nodejs denial of service (CVE-2025-59466) * nodejs: Nodejs denial of service (CVE-2025-59465) * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131) * nodejs: Nodejs file permissions bypass (CVE-2025-55130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nodejs-devel-24.13.0-1.module_el9.7.0+209+ecf6523e.x86_64.rpm 65027761f8181c78972b2ae55bbd6669a212755e1cbe744d89ad12082717c6ca nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.noarch.rpm 6688ca82e36c7f78fe80655131c4a7fad6d4c7b9c851130cb6202a27b946c979 npm-11.6.2-1.24.13.0.1.module_el9.7.0+209+ecf6523e.noarch.rpm 931ef73d066840659ef738e6282e95b16c91f6f620c8f26fd043d22f7444ae8c nodejs-packaging-bundler-2021.06-6.module_el9.7.0+198+8bf605ba.noarch.rpm 97b592d61e7cdad2e8509964064ddbff27be4f5aa478b78c4438ac2fd0d42bb1 nodejs-full-i18n-24.13.0-1.module_el9.7.0+209+ecf6523e.x86_64.rpm 999d3529b77792f66804c62e32912abae4683cbdf2dfd84380f2748694bc2bc7 nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.x86_64.rpm bfdaedf41f366efc408881091ce1bba734af67ff1b90b899dd9fa27ece36975b v8-13.6-devel-13.6.233.17-1.24.13.0.1.module_el9.7.0+209+ecf6523e.x86_64.rpm d4d7fa92842570df207934b26879619eb705cb8db1a63e5bdd1deb865448ef25 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 nodejs-libs-24.13.0-1.module_el9.7.0+209+ecf6523e.x86_64.rpm e485636e18bb2c05cc497d65fc1aa237f84d3f23ba0bdd964b6848d02e05459f nodejs-docs-24.13.0-1.module_el9.7.0+209+ecf6523e.noarch.rpm f3dcf4672dfa5ced1e0eb20f250035b95ef6641b4e73e39d51a627ecba152c4b ALSA-2026:27819 Copyright 2026 AlmaLinux OS 0 1 Important

evince security update

The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files. Security Fix(es): * atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default evince-40.5-4.el9_8.1.x86_64.rpm 46ad86571bd2b367966da8bf5cad4a237068419be2a2e08bd7452fb3c8bbcf2c evince-libs-40.5-4.el9_8.1.x86_64.rpm 4796e333d4723935017baecf318131da0d6fe3593c14e9bbe8000611f4861fda evince-previewer-40.5-4.el9_8.1.x86_64.rpm 7b25fdc8a8b32a27baef337d010fd03983515a163d3efa6e775140fff38158ae evince-thumbnailer-40.5-4.el9_8.1.x86_64.rpm a9da384324e42c4416aa88a0d1c09c660f7f92952bc3f0c93f247d0fb48af1da evince-libs-40.5-4.el9_8.1.i686.rpm e38ade428a9a5735615bf5868a813f95c49b8941b7a675cb37b4a0a4eb02592b evince-nautilus-40.5-4.el9_8.1.x86_64.rpm f4510ebc343c853833fc8dc4084e421b088b5320baef23fa7cd200d16fc517f5 ALSA-2026:2782 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132) * nodejs: Nodejs denial of service (CVE-2026-21637) * nodejs: Nodejs denial of service (CVE-2025-59466) * nodejs: Nodejs denial of service (CVE-2025-59465) * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131) * nodejs: Nodejs file permissions bypass (CVE-2025-55130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nodejs-packaging-2021.06-5.module_el9.7.0+208+fb06c0ab.noarch.rpm 0528eee629fa506b56c3cec5fd577ee9ade9ee3263827b8f394f53d54bbe1672 v8-12.4-devel-12.4.254.21-1.22.22.0.1.module_el9.7.0+208+fb06c0ab.x86_64.rpm 0b86ee80b9dcdfb5090365261a0552fc298b8b6e0f23d1d64f7cf57a6e303b09 nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.x86_64.rpm 5f459874472cf54c4bd6200d3acd90da753482f86c2a7ea40a11c2a3bcc431ff nodejs-packaging-bundler-2021.06-5.module_el9.7.0+196+ac40ca3b.noarch.rpm 7ebb5361e6442c86bcc948ea9b435aecc4c8bfd34de4f5d6529133fdaa23235b nodejs-nodemon-3.0.1-1.module_el9.6.0+172+f0ba00ec.noarch.rpm 8921c764fbe46df7cc2acc0214748ae816c81911a1ef010e4954d2f9f3f1f581 nodejs-devel-22.22.0-1.module_el9.7.0+208+fb06c0ab.x86_64.rpm 8afee73df576789ea58130e7cadd5705bf93d929a7a3ce135d6ad62bbd65a762 nodejs-docs-22.22.0-1.module_el9.7.0+208+fb06c0ab.noarch.rpm 8f3de5a8307d83d62844ec5660a43d92dbb1352be6470f6ca457e5ae5f80e28c nodejs-libs-22.22.0-1.module_el9.7.0+208+fb06c0ab.x86_64.rpm cfc3f590893ea457570baf9bb2811c605388a7703a55f7a5d047ebfc469bbef1 npm-10.9.4-1.22.22.0.1.module_el9.7.0+208+fb06c0ab.x86_64.rpm d0532c23d57f390a0e685f09b612d702d4427d7af2bce2f6d2f6280147dcb3cd nodejs-full-i18n-22.22.0-1.module_el9.7.0+208+fb06c0ab.x86_64.rpm fb101e89d5ba26fbdb1ad98ddc144e99b344e9a314d2ecc437203ead69992c0a ALSA-2026:2783 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132) * nodejs: Nodejs denial of service (CVE-2026-21637) * nodejs: Nodejs denial of service (CVE-2025-59466) * nodejs: Nodejs denial of service (CVE-2025-59465) * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131) * nodejs: Nodejs file permissions bypass (CVE-2025-55130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nodejs-packaging-2021.06-5.module_el9.7.0+207+84573810.noarch.rpm 05f86c49a68ad3d28eb5632b8d8cb414cdc8e1b609d53821410f46d958d55e36 nodejs-devel-20.20.0-1.module_el9.7.0+207+84573810.x86_64.rpm 1af43ccfd0c8959344961c80c564d041de865d9cf74a88e0bb70389dfab3ca35 nodejs-full-i18n-20.20.0-1.module_el9.7.0+207+84573810.x86_64.rpm 2fff99549272eba4c2bd112edeac361dfe696903011781367f7a1492bddd1e7b nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm 572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648 nodejs-20.20.0-1.module_el9.7.0+207+84573810.x86_64.rpm 6d3fdfc8776be4dbaa86d2439138cb26e3ea950842e07c35b7e9e12f352f5def nodejs-packaging-bundler-2021.06-5.module_el9.7.0+207+84573810.noarch.rpm 8aafd12f78157e86ba2ec7e2c9345b60105bf6f6ee017bd22496ac3e8d69f790 npm-10.8.2-1.20.20.0.1.module_el9.7.0+207+84573810.x86_64.rpm 917f9e95f83c87bf7a182369c55db0f155c4b45eb7cd4c8e0d002643af7c62d4 nodejs-docs-20.20.0-1.module_el9.7.0+207+84573810.noarch.rpm 9b45e7911e1228b9f6ae1ce27a752e5418a996eb6dc94653709a9cf4d18b9b3d ALSA-2026:2786 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861) * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915) * glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory (CVE-2025-15281) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default glibc-devel-2.34-231.el9_7.10.i686.rpm 4f85eb733db050572eea1800af1b4d259bd99d3f49a5d60aa66ffcfe82fde942 glibc-devel-2.34-231.el9_7.10.x86_64.rpm 68966d06daf50316fd65cc4dae32881ecfe001ad7b2ef3924b2b8269e17a943d glibc-headers-2.34-231.el9_7.10.x86_64.rpm b2eee05ad43c5a61e0369f45c2c128e3253a433f98e4f31a43bf492e868b1445 glibc-locale-source-2.34-231.el9_7.10.x86_64.rpm b913019c5c01d8e55dab33b41166a6d71e459a7b784a0dec5ec238805febfef1 glibc-doc-2.34-231.el9_7.10.noarch.rpm e146bafa6482576f31bdadfebf68eee5589d4e14b974824ede11162381569408 glibc-utils-2.34-231.el9_7.10.x86_64.rpm e927633de8cc9c20d2f8feeb9651b94da06b1beda0e71c3f5a17bdd65e81e63f ALSA-2026:27862 Copyright 2026 AlmaLinux OS 0 1 Important

memcached security update

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load. Security Fix(es): * memcached: memcached: Username enumeration via timing side channel (CVE-2026-47783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default memcached-1.6.9-7.el9_8.1.x86_64.rpm 46c653330cbab9e46b4cc72f916b31ec4c45c3423aa91e3ea5aafd0dd88faaeb memcached-selinux-1.6.9-7.el9_8.1.x86_64.rpm f9344a7a89572460a10fb5d4daa5b465318e8a32f8f2d851999bb265b40dc5a3 ALSA-2026:2799 Copyright 2026 AlmaLinux OS 0 1 Moderate

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: heap-based buffer overflow in array_merge() (CVE-2025-14178) * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default php-opcache-8.0.30-5.el9_7.x86_64.rpm 0046bc73f82220e0406dff8d928df22b204ec513eaea1c2ef4232f075fdc3f45 php-mbstring-8.0.30-5.el9_7.x86_64.rpm 0bde685894398ee528b3d44d75ca5ebc53116cd80c5b2e55825546a0a09e9112 php-snmp-8.0.30-5.el9_7.x86_64.rpm 0f6515343739cfe39953353201c54e2745cfb41c276bbbd5b706849ec76ed152 php-bcmath-8.0.30-5.el9_7.x86_64.rpm 210e8d403f97a55800a67944550137c8fa6494457020d4b4737f01af83e4e997 php-mysqlnd-8.0.30-5.el9_7.x86_64.rpm 2f21438b18995856eb96fd6d0554cc36afd9171c1ffb5aedf55a71a8934d2a85 php-xml-8.0.30-5.el9_7.x86_64.rpm 3ff5b84d8b9b4d639dbf2e631ee0f56932c0eada57c56a5ce1c3becd59bb79ed php-gd-8.0.30-5.el9_7.x86_64.rpm 4540fa538b1540aad72b8aa384cbb7c6d19cb429300e9d794875af83558da1d5 php-soap-8.0.30-5.el9_7.x86_64.rpm 522bc75440f61a586503a889853aadcfccd84ae0ba56cb5b8519d01630aeb449 php-pgsql-8.0.30-5.el9_7.x86_64.rpm 59cf984394d3e2a6d3706abe5402395194248cb517bfde9c609a4be48bac0d10 php-ldap-8.0.30-5.el9_7.x86_64.rpm 5e604500edb36f255380fb13829f29a036d9d298c8c30cd9aba3664d65a376fd php-pdo-8.0.30-5.el9_7.x86_64.rpm 5e6b4f94e8e38180871f9db66ffb3c906bc7b1fa7d285bfb253f24bfea230fc7 php-embedded-8.0.30-5.el9_7.x86_64.rpm 5e89dc39fa9637a17f9be3fb9d1c0a6b591364f4761f35035f69124e35e3564e php-common-8.0.30-5.el9_7.x86_64.rpm 6d24353471fe7c1a6d5e14232b949c832af0a46f90412f4b08de46b121f52c3d php-enchant-8.0.30-5.el9_7.x86_64.rpm 7bdc5c66380ed941aa6ed706fe03f8c9b88b9fdc55de24823c71b8e571e5dc1f php-dba-8.0.30-5.el9_7.x86_64.rpm 8a8d6f88fe7a6d52f59a0f4378373de291f4048c2be00f0182f44d665dca5036 php-devel-8.0.30-5.el9_7.x86_64.rpm ac04447f5e5702f369816e16e4f9539f64ddd430adfdc3b56910a63ced07fe8b php-process-8.0.30-5.el9_7.x86_64.rpm c1fbdcc81d2add8fbdf93041f7d1620763346467d6282bcebd936acf9e97468b php-fpm-8.0.30-5.el9_7.x86_64.rpm c24763677ab20a00704b457de0faab804c4126c01ffe55ff45a149f89bd7135e php-8.0.30-5.el9_7.x86_64.rpm c93f86882dfe7ee44c88424b30160ce3fb8c2b51dc571a04185304b625cc2a30 php-cli-8.0.30-5.el9_7.x86_64.rpm cfdbd231ba3a2ebd04b3b2ab8c758f6f086cec454c9230ebce5aabf82d4255b5 php-odbc-8.0.30-5.el9_7.x86_64.rpm d4bfd27e9fd09812be2953b4b519626ecf6ec842df5709f87e4aa434258e419e php-ffi-8.0.30-5.el9_7.x86_64.rpm eda8623ab96a325b7e63a64ddba0397f159d60492da2cbf4007d2b0a206794b0 php-dbg-8.0.30-5.el9_7.x86_64.rpm ee7a80b9fdecc349ac261b631a6c56880e2e96ee1bb121ed4ee7abe5cfbdd086 php-intl-8.0.30-5.el9_7.x86_64.rpm f2e863df07aaf53094bdfb049a168e5e880eba42a146aa2cb0c0be2dd945bd26 php-gmp-8.0.30-5.el9_7.x86_64.rpm f5933f2326b495f9846d5963db645d5664bb218c1cb7c4db765c4d4a2cba3104 ALSA-2026:28037 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgresql-contrib-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 118baa2e9ddb8ed4a69a048a476587e0d737c8d1fb9f4f07cbc62850aabe357c pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.x86_64.rpm 1c17fe11db244a9e23cf757cfe3615a7256f34ef84e836c69f08b5d37efc9ea0 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde postgresql-upgrade-devel-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 28ad2292afd94164f91fad2954468c9b968a8f6838bfbbdaee8cdc223344bc80 postgresql-private-devel-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 34b45e7e26003608d7c36bf4fadda181aae9ec98a083fdc6f69bae070e546fa4 postgresql-test-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 429b6bce664cd97e1dfa89025434a24c844295bb6cd21bb9f4f7268b7881f686 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba postgresql-upgrade-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 54162973650da76f1edb632dcadfb495fabd210674f445d5eb20fbc36f493d06 postgresql-static-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 5b7547a8fcde484878ffca2602989b5e7de9156f889901d4551f010d9ffb9b02 postgresql-docs-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 70f86c26e2b50136f587e3367f3a7217a13e9e11fa8db6ef59d540bc85efa94a postgresql-plpython3-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 72180c9c524012c8493eab2428bfce2dda7a8164326df858936e85601a947be0 postgresql-server-devel-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm 85c69004471aab7545b3162f51d6e5214c2df2a23538e06c7236a917b0708e52 postgresql-plperl-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm aa110234bf50657a4013612ef49942d8264e66de9c836ddf48ba953b56b9b8e0 postgresql-private-libs-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm b4526f6d053979e6dbd68f1d088734d1ae3c27c938dee967808e46e263b717ea postgresql-test-rpm-macros-15.18-1.module_el9.8.0+267+7c71b4a4.noarch.rpm c5e814edfdda4b6654b63f7ba294dfb634e345de80c9943d701a6a312008ad84 postgresql-pltcl-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm de7a9b73b5fbc4281c18551a931487a1c6c3de23774335bb89c8e1dfdc8f9b20 postgresql-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm f2ae2bea240feb614056a39a7109b7c4afb672a627634471e1bfecbbe9b1a627 postgresql-server-15.18-1.module_el9.8.0+267+7c71b4a4.x86_64.rpm f6bea994e69331f58a6bdd2023c3e1cde2df7441ac16605534e9cc845385c82a ALSA-2026:28074 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default skopeo-1.22.2-6.el9_8.x86_64.rpm 6342707579525e40c2f7234326333f230d6193ac1c2435b74eec4f26d924f108 skopeo-tests-1.22.2-6.el9_8.x86_64.rpm a6fb22c4c1550a2314504bdc9d92dc689e8c22520089e6fea9428c42ed3e9f57 ALSA-2026:28157 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432) * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-urllib3-2.6.3-2.el9_8.noarch.rpm 2fcfea7fd375e87dd3eae3be2e982a4f477a32f6c90ff0927c3f84735037577e ALSA-2026:28159 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432) * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.12-urllib3-1.26.19-3.el9_8.noarch.rpm 862cbefda8ef310d9b93ec705f7474e435661a59ac81ec87ebc561dc490d91bb ALSA-2026:28209 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Command injection allows arbitrary code execution via malicious tag files (CVE-2026-41411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default vim-common-8.2.2637-26.el9_8.6.x86_64.rpm 69a6d6a25a7c28aa08311ceafd4553f7ee85f132982161ddf30b7c8b31bd5a3a vim-X11-8.2.2637-26.el9_8.6.x86_64.rpm a0ea2f86ba5f8fdce78d4e5d9cb6fb9565db9186ea31700ba0ee8f77ffaeaa59 vim-enhanced-8.2.2637-26.el9_8.6.x86_64.rpm b8e4c3c8fecdf2724910c55e1314fbf5f4bf9d045158950d44d3f255bdbc60d2 ALSA-2026:28212 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-core-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.x86_64.rpm 06a1e90da5adec48561181714dd675eba1efebd4ba7494ba642343eec7918d31 nginx-mod-stream-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.x86_64.rpm 0ea730eed0af9ddf42bc312a2c957157ed11f2976ac1fe17ef0c8605eb84f59b nginx-mod-http-perl-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.x86_64.rpm 231122e9fb21e6f86689de548275c3cc8308d12d285e698d75a1feaef84576b8 nginx-mod-mail-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.x86_64.rpm 26492505fffdefb45a756e3e92da2a4b2bdee7e9307fab0085d493cfd6c62b64 nginx-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.x86_64.rpm 3033a10a854d9977e443b04db1b41c3c4a7c7e5839bfd407ac31e746a9d939b4 nginx-all-modules-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.noarch.rpm 535a701d0dd2f355598f9ca2728b825715b9d43b41d1b31b674367c98c954c67 nginx-filesystem-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.noarch.rpm c56f252d7b12e7c49af137e1608c5f89ce33fba245336267b34e950dbccbe6ab nginx-mod-devel-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.x86_64.rpm e4bb87beb3a15ad6e302688f5ab7d3699f49b50a524c7dee9fcd6a8ae7618912 nginx-mod-http-xslt-filter-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.x86_64.rpm ee14b5f23bf203efea9a13269d0b8856716bf778ab17eaf5b244c2ce47c1120c nginx-mod-http-image-filter-1.24.0-7.module_el9.8.0+259+a3b861bb.2.alma.1.x86_64.rpm fc87b5547f434fef04bb640a52fde631f2c0fcd1da9ed748d31585f7a3be389a ALSA-2026:28243 Copyright 2026 AlmaLinux OS 0 1 Moderate

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: use-after-free with key data stored cross-RVT (CVE-2025-10911) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libxslt-1.1.34-14.el9_8.1.x86_64.rpm 33e2afe992996563f54e3507df9469490f3d335c0a2d8373061eb0dae8e1d07f libxslt-devel-1.1.34-14.el9_8.1.i686.rpm 469c73d57fa97fb313f14eb0486a05d56c30349be756957bb382ec49718cd582 libxslt-devel-1.1.34-14.el9_8.1.x86_64.rpm b7e0d2cee998aacc85d1f1cc7b1a91d364d944f0bf993d221e4d731783bc9aef libxslt-1.1.34-14.el9_8.1.i686.rpm c99b72eb47ea6c6b306a1ebc695be17411a224b23c53133246393f76d9d277c3 ALSA-2026:28244 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng15 security update

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libpng15-1.5.30-15.el9_8.1.x86_64.rpm 85ff7200b8112c43955530aba84d92c614d883c7c5c93c4a8b8df3d4808b5c1d libpng15-1.5.30-15.el9_8.1.i686.rpm 87dbb73c3f6531dd2dd2467ab7585a7f95c0fe6ff6a939778876f9d800c0469f ALSA-2026:28247 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) * python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module (CVE-2026-6019) Bug Fix(es) and Enhancement(s): * [9.8.z]Update python3.14 to 3.14.5 for the incremental GC changes (JIRA:AlmaLinux-180642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-libs-3.14.5-1.el9_8.x86_64.rpm 052d81e4c4640dbcb760f8939abedc4b08abc30d8c6db8823f71c6aab355b496 python3.14-libs-3.14.5-1.el9_8.i686.rpm 2c4c75607128c757a0084cb400b4009d7fe40add049a1d6054ab28a3a2e088e3 python3.14-devel-3.14.5-1.el9_8.i686.rpm 4ad69624437a2bd131e95ffa539fad1da1ee4588e07a8765f0d57a4579cbc5d6 python3.14-tkinter-3.14.5-1.el9_8.x86_64.rpm 75a7c6181ef47a1ea4252f4709f8e8c42d494f5914afc61943c4b2fe1c1f2239 python3.14-devel-3.14.5-1.el9_8.x86_64.rpm 92fd0bf0002e14708a7861204e2e71a47ef0fcd6e1b9c0504354ffe5cda3cb8b python3.14-3.14.5-1.el9_8.x86_64.rpm 9441d196c7d31b05e363d82b83d69055ac442798ca97276972ee18dfe3a92bd2 ALSA-2026:28253 Copyright 2026 AlmaLinux OS 0 1 Low

libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libtasn1-tools-4.16.0-10.el9_8.x86_64.rpm ad974ad8dee0a76ff64263dfbe26cc9e8cc5742ffe747b8a3ee34b0d8e1edc74 libtasn1-devel-4.16.0-10.el9_8.x86_64.rpm d055014ef0f76dcbebaddb674f2ddf13d0370fdc19787ccc33ca134ce9d26f1c libtasn1-devel-4.16.0-10.el9_8.i686.rpm fabad67a59bda1318938e01bc69e2d20927870b89ba7965824738492188befa3 ALSA-2026:28254 Copyright 2026 AlmaLinux OS 0 1 Low

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libxml2-devel-2.9.13-14.el9_8.1.i686.rpm 3c252c132f00244481335cee853ea1a0519e7a0c8919780570290b5cca8d2256 libxml2-devel-2.9.13-14.el9_8.1.x86_64.rpm bec92fb03a08f283d24766254afca15638d8067840eb8d936396b0e6889e72b9 ALSA-2026:28255 Copyright 2026 AlmaLinux OS 0 1 Moderate

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libpng-devel-1.6.37-15.el9_8.2.i686.rpm 89b7cbc4c5f814102d2f09b57f5ab35d96e76d367a93f36f0b32c05689f08816 libpng-devel-1.6.37-15.el9_8.2.x86_64.rpm be8cd8ace92fc8f8475ebf2fef4e6add6386f1405076f02504ba696bc85036fa ALSA-2026:28290 Copyright 2026 AlmaLinux OS 0 1 Moderate

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libreoffice-langpack-tn-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 00210ef2f15122dd1d3d3c2240582e0dd3075c2026b26158073f6f2fe65d599c libreoffice-langpack-or-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 00471c750b14ee8280fee167ad1dab1416588952918ba29f86743c2d5e27616b libreoffice-langpack-id-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 0158860ab494c8a01b135d894891382d9b334cadde8e81521c96f89c100d798d libreoffice-langpack-bg-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 01c053f1b9d1078a9295a6c86645669f1f89641b418f1f4c851dec98ade3e3ef libreoffice-langpack-de-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 03f9734f291896dde0c2c1100df7aa112a246a370d090d90c4a14b8eeb71c54a libreoffice-langpack-ca-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 079bb0735df93db17ad711d44fbcb6247e17e2acf41b7b4f61da138a503f5529 libreoffice-langpack-kn-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 079d605bbb4dc7fabd26a859d506b07938ab6439a11016120c14492abfcfaeee libreoffice-langpack-br-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 0a3a1ce69084eee8fcf28f4bfe70a29398dcbc81af8409dee1f44af62e655afd libreoffice-help-he-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 0a72a13aeb930f4baeb1ddf4637e2b6419c20647cef62c64d49d0012183d4e49 libreoffice-help-ru-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 0c049a5b036b910146ebf33742d49cd5a19bc175e33b07ddc32045b1abbdeb6a libreoffice-langpack-ga-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 100b8381dd13735130b835dcdd87c1aec935c961580bc5c86d235c0efca077c5 libreoffice-help-cs-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 101c01b14cb25a7d382ad6e4284e3aa5e72d7386b00bc345292e820b5775c288 libreoffice-help-gu-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 104db0cb2135e1f9a32aeeb7f3f6eed6002083d7655abdb417ff4a2c3a661dd4 libreoffice-gdb-debug-support-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 115565a61cdec496c12d459eb875342813a5bf877ec2da5ce5ddeec3673205fe libreoffice-help-et-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 11b96dfa47e0189c5a8ce7dba5e79366c4c790c329727f9f2c0d4603e4618274 libreoffice-langpack-ar-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 1236e96eb779a965c974a3862eba85b312a81e8d9e49c2db21ea87bbeeb1167f autocorr-pt-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 126b5f360fe039f904e46655562f86bc089f98dcea4541d307cedaec64f419f0 autocorr-sk-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 12b637194599a36e87d18f21015606a2c9ed806ddcba04881a624abf0733153a libreoffice-langpack-pa-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 131c1f7c4e5a1ec5df96c9d030ea7c4cec9853a98974ca465dc1cd0e27e31f31 libreoffice-help-pt-PT-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 15c22db71d7c80c3b86cdc6860035ee20e3d8c1ed100c9862eecda05a67da57d libreoffice-wiki-publisher-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 16bb72e046b9bc90faafd74eb6f15c9ed71c14c3a2ecc222d6e117417a119346 libreoffice-filters-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 1a16fc298df943c6a1b6265a30c960680fd00efc29e35cc7d74b3714f82c59ea libreoffice-help-fr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 1a3c5afc81f2993b6fb1c62f9f813c5566da8063737e1e7fe248ec4b299c554e libreoffice-base-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 1ddbd6ac424447af19556ed8fd94db0f811175421ee4b564fa429352be03369c libreoffice-help-tr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 1e2bf05fb128a38832eabf383c9fd21fcd2f3de248fcb7d1a42df4b5d0253484 libreoffice-langpack-ss-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 1eaf15efe6575f11f596ed930acc872bfe10150f89e614ecf2a9776e506440b2 autocorr-lt-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 1ef0e9bf99b41347c298764671c10c2184dfe99899590fa43a5ae7fc3ed37da3 autocorr-tr-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 23343d598bbebe724cc5191cefd2f6dcb50588e329e69f68a4cfc11131ccc50c libreoffice-langpack-da-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 264b7b4401f7b94a925d2c8062c7912bd0608cdb268d71053a0689c53575cd9d libreoffice-help-en-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 28417734c6649cb7a48ad1d2959ba3c676bd44cbbcfbcbec7b4d02ff906474bc autocorr-ca-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 2a182ff93c468d1f6f3ea2dc61777d975458367c46e9a62b837809d717f6d460 autocorr-vro-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 2adef2f4dc75561f3fa633fd2df624d2ec19081234a72c2545cbc6f0955787cb libreoffice-help-uk-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 2b92a881eec6b9bf203094d0e5a654e1119b78dfc43d92931842dc7a48454ef7 libreoffice-langpack-uk-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 2c6edc4e046a27e6c8cd4ccef02bf6a93ecca8a9e54ef9749cd39aa644e10ffa libreoffice-help-ta-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 2cf2dd9266d176544db105f779b478910f67d442e5f5772e761ddf9e8bcb3f70 libreoffice-langpack-eo-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 2d4b8c53125fd7dfd4f1deb647a6cd91365e3fe37fc56c15e44f3f66d1321009 libreoffice-langpack-hi-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 2f8bcd5b4a5450a6779b330c7e2dcca04b88f1aaa9b1ca265a00d742ced6ea2d libreofficekit-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 3103837b284c2b194db2725cb33ac5b7e06d06bcfbab1f6f8898e8ad85a0e453 libreoffice-graphicfilter-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 3298e57fa96a15b547997a86637c66298f66d0cc8c028f55d69a96d779eab195 libreoffice-langpack-mai-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 35df5ebd246630a5f1469145c1b72c479c7157525650758672f014fca7284d3d libreoffice-langpack-fi-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 363b8a5b3b949e461d805d85492b539dfb790f5077bbf08ac1bd79de38093529 autocorr-de-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 370b74acbb3ce94ec2006ce1b3358cf3686c8252bb462b307875fcf1ef336a1e libreoffice-langpack-ve-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 37c9c081e6fe586ba174961e38e8a6df43383ce0035c0fbd99d830ce94dc61b3 libreoffice-help-eo-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 37d84429ca966362eb55e2ce215fac8bfe42238a9566ceeb9db55fec6932e789 libreoffice-langpack-sr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 3956b0167b48ad3ffef58ee168268660bdfc6800eb0b345809d06a145c16cfb6 libreoffice-help-dz-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 3a621a2de8ad47633d1169269e465129fb2daa7c3f604712ca2a706731053454 libreoffice-langpack-kk-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 3d085b3206132a8bfea0565c7173c221b1e0f58b61eae10af7d99ffad43ff99c libreoffice-langpack-te-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 44f27e1fb382dd48102385004cc58f5b5c08de0eb159ba3cb0f3701afdad3b39 autocorr-is-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 46b8c24fab852ba17fac05c4de035b097bc255247bdda72e28debb4644c09991 libreoffice-help-es-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 47be56e94dc21468d6ac83529b938c75733a13a0b7aaaaf5cb98e7dc0a80f254 autocorr-cs-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 48a612cf6160efb68c1d29c975f56da4c8ada658dd1d79ca6df16172bb49f100 libreoffice-help-hr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 48f26dd81cbaa86955908a451d9709f846aaee6ab767ef462c1993646f253e98 libreoffice-langpack-nn-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 4afe10fc06bb4515338702ce4843f4029c54ebf2389f28c60d838cd8894315e4 libreoffice-help-da-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 4bbf71a9eff1541fe194e170d83e12cc8e66be4ee3894c7ecf14962cb9a7a5b5 autocorr-sv-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 4ef45e773b5641f3dab3a5c96e1d41726c7ea59dd9a144c4832886a245745d9e autocorr-mn-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 4f84c34b62af83ed52383c2947bde1908cecce6c1a22179126d6e44e0472e9c1 libreoffice-help-ja-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 4f9cd693c28f9283e72aee65c463de55c64962f5ae02651560c3fc28d4367ef4 libreoffice-langpack-he-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 4fd10c9dab32924e339cc29cbdd0e950c3a7ca34c21b812ba8b921dce7e1d55c libreoffice-help-ar-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 511bd5a090521eb895eb5ec27142d609091ed34a5f1f0a3089810d2b1e529ad5 libreoffice-langpack-nr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 52589118a1535cd827c5d2ec4b76442416e5d4affae08d1d27aedf9543e2557c libreoffice-langpack-sl-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 53bc7fe0b372ffaf00381c51a95b3c1437e13e019c79088d22ac3924a06b49be libreoffice-langpack-zu-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 54b136bc8f4f188276e93500d6db9374bd0f2dc7d55bbbfe1e528bae435c0348 libreoffice-langpack-nso-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 55567e332a9de9c183ecd7224ae812e20c516b48251a4e2792fb4c68cf3d27d6 libreoffice-langpack-ko-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 55f1453dda6993d19bfea55bf4e7e7e11e352eee785903612b43de9cf5edecb0 libreoffice-langpack-ta-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 5622c1627303a9a91690a023d54f6a69856991c176460eba6120498e6dcd1801 autocorr-nl-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 56e3ca8fb1f7faf1876cfb11008ca588124d952c7782c94dce278d6145fac31b autocorr-ko-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 56fc0b34686c4125188bda6092e8bf3306ea4478eff5370fb13afa19dbdf94a7 libreoffice-langpack-eu-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 58ff62698d8f269a7fbf94cc9c1a41662298dd85b44b1e6a4e372b56b5c0ef29 libreoffice-help-zh-Hant-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 5a7a3a6d31b386deb5c23b9291498cd72eaa9053c367c3c3ecc5fb8673427070 libreoffice-help-fi-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 5a838da488af9ba21abeddc25eb7cba229ef7d5216fb44999150750ec075dcea libreoffice-help-nn-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 5baf8e252317c236e6031f5357d8c2187c9546e1ed30d0369e5986e6b22ae104 libreoffice-x11-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 5c7d408e9868a0e3b0fb020678035dcc083a7ab91a1882cf13ba5fa29dfd876e libreoffice-help-ca-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 5e6853d39522bbb213b0a34887802231bc2a684ed27f70f4c6c8d56b2f4b7519 libreoffice-langpack-lt-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 60b7beeead0c30c36521ebc4893e55f6f4082302a64b49fb4b02f485a1207735 libreoffice-ure-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 6135a7080a83d9ff93a675d8cbf44770a36c30af703fe7f511f1cfb355507116 libreoffice-langpack-fa-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 6287b29d4d672e8fe92403a425f7293c235a262c5ba0202715f678c4bf51480f autocorr-da-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 63f2e748fb33a01f7928bd53da923ce6a5b3497bbded5145d58f2432ea9dcec1 autocorr-hsb-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 645507bccd1276196190064afd53482fbfc9060406d9a31e47ef43cb56fac314 libreoffice-langpack-ru-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 646721f6cac42a1f49b2a80d019770bd29be10ad0914148e900b501ebd80b7ae autocorr-ga-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 654fbb10860bbef11394be44c3fc984ac267c4cbb3ca0aa151c49d5bbc56156f autocorr-dsb-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 658f15562751c64fc1c836d52480045f97d78d897d57f7e1fcd2b13c8fbb64c3 libreoffice-help-lv-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 68aed558a37bea25f4374c3ae991be38529c323828b379f95a33bc67e2651b14 libreoffice-langpack-zh-Hant-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 6bb9172167c1c738d06ba30cbd6a14e527a7cfee56642f70974a1a4752e36aad libreoffice-langpack-pl-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 6bf15db231e6f9c9e8ddd14b1010c6887d7848b398607609b7a5e05a4b1dc259 libreoffice-langpack-ro-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 6de6d85c83e81cf94826692ba4156563fc940e37e8244867cd417d296eaaa644 autocorr-lb-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 712d94951579928301ceb155052ab136fbb5ab6d611576bd486c661a40470111 libreoffice-help-de-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 731677986742f90ab875ea18f0b20020a89a394df5da046d848152b91cee2b6d autocorr-it-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 73309656b8d0d1e5790d9dba9e917535d76580fac542e70d442045f0d35a9865 autocorr-hu-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 736b577d90e096644199233df6a6c4de44f1b46cb6addf063936e0a3d29f877c autocorr-sl-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 75bbeefe8852e53f48ba0f63b8c7f07930b6597dc4c9f5f6838594199f8b3ae2 libreoffice-langpack-pt-PT-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 75ff898a8d95c9729cd98f9e98cf621772b5158aa96b7af98e5c54fd53ea9ca4 libreoffice-langpack-pt-BR-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 77d9bd6f2f57c34ce3671e30703145acec3688c9cf412d2991682893152df37f libreoffice-help-si-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 7826075a8368fffe77e55997d0718cb814b7e2b9f004834da064407c99bbea92 libreoffice-help-sk-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 79a328c571d71ba70147e0689b9e7b841b6989f13b2291d62d58897850c31929 autocorr-el-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 7cce1710297ddb684a27b258903bd55d41e4ffdff03164ccd5eced20ae66daa4 autocorr-es-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 7d2846b86a5a3b2f29ad1086ad940c42922bab9a75d8edc2f32e43c93aecb04a libreoffice-help-it-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 7ed6e3f1fe9b466386bbb6a91b308d848c97c50b26d38fe367d8ee2ca2346ff2 libreoffice-langpack-cs-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 822553d29e54aa9a432b1cb74bc0053c01850bf662f8859b95a4076c819ec699 libreoffice-help-bg-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 83bd5d5e300d1a54abeca8934c9920175b4e262aa746be89f4e395e42a1cd3db libreoffice-help-zh-Hans-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 8519e05164be563c775fef73eff7830161f382a77cf9b642720bb48126840df8 libreoffice-xsltfilter-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 869c526f5d5d84c9bfa3fe7568f497cad81a7f085c55a55b36720080090a813f libreoffice-help-nl-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 89da9983cc4c3721350290a014dbf845f7ce7790f6ccb17a81882bfbf5a4085d libreoffice-help-lt-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 8a79af566026d4a53fb336dcfc4e876c329d8e0053e416e8efa2450c4091508f libreoffice-langpack-xh-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 8d3ec3c6002149ff227aba77dfb10b5580ab5fb68d9066f783f9b8ef14c54ebe autocorr-en-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm 8d4dada0394bbc877c15cc65d5f19e9ed4f4474f17c37ac022efeba5dc88a504 libreoffice-help-sv-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 8df62fbc76ff382cea86db00ff2b0acba9bb64701569121a258b1dd98960a839 libreoffice-langpack-dz-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 8f6fb5dddf556412181a6b928cc4c98931a3a40641f252db4a5e402e1b50fe19 libreoffice-langpack-tr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 91b8c2d3bb90913af7497b0a787acc778ad35cda0b004acaa574061abce54b2f libreoffice-help-hi-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 95ca6ed63d3f5c0f1e3a3e523a4862031a39305f93bbd59d81fc4dc62c498ec6 libreoffice-help-gl-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 988a6257434124607ea780db02e5dd07e4e1dbc5dedae853f8fe49c82a89b21c libreoffice-langpack-ja-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 9acf62a3d10911e4ed11bb0f2f47f43f14e2a590b7b2e13c2a60b6b470a26dfb libreoffice-help-bn-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 9b3e842782a5397cf57bfdfd2614ef910a594f7cf001cdd8c0bad8445c83bb70 libreoffice-langpack-nb-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm 9ff8d90925d04697fdf7dc82bd384457fb240b8e00ea28cabb0b9f3e87728cc7 libreoffice-gtk3-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm a28b1e9742730ee6285c4935fe4f23f2d2cc197dbffb29de025a4b51955625fb libreoffice-langpack-gu-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm a3cf04f9649f666bdf557d532cc9aa47e1c8d9be6b86a2560ad80abd3c6b1259 libreoffice-help-el-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm a853653f557a698e62a18b3e893ddd2afa856dd5798d2b2478ceb24b17f34b08 libreoffice-langpack-fy-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm aa2e0b937b84578d119425478e3c95e2be28c0ef0172e6d30cb7245a24f08168 libreoffice-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm ac56a57b9c360c1138800f8da80d99cd2785e7f6a61dd50e85854709cf24454f libreoffice-langpack-lv-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm adfd7b8d80b30b33f1c9adf8e9508490a58a6efea2f650ddd97573695c0df610 libreoffice-langpack-hu-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm af2cbe871054e9076d6c1096238fc0bfe817feab1cbab75bfb18c9fbf6808daf libreoffice-help-sl-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm b1942ab5488ea3c16e4653d7a25f8ca151c5a229c4878a5c28d361ab6f7b31e0 libreoffice-help-id-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm b465522461c5a51b4cdc80c1b110e8b1812aeb046e94ef51d8c5662f2bda5aa7 libreoffice-langpack-af-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm b5195fe142467586801ee4b344bdee99a21c0bf3e954ee858e3cced118fd9e21 libreoffice-langpack-el-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm b654db855bbdf8fcc243049a902030bcaf55b633b08d422b3c47a2d4a8480288 libreoffice-langpack-zh-Hans-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm b728c5528cb776f9e9420edd29ec984f6c45e9dec1f949a629bb190c89ac546e autocorr-zh-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm b872bb0d0f46e38290c75d8f8727cf2f050a52f77497d16b705aab96baa9a7b1 libreoffice-langpack-sv-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm bc41dfedcef8d6cab6935b2e425550af4ed2a9c0265951a958cf86d49a236de9 autocorr-ja-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm bec72bc6f4a132105ff83abeff3c828dc33dc42cab8c8c393891cc33c094cc9f libreoffice-pdfimport-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm bf8c20607e0b69fa5dcda62a217f495a5c791a0d2b79461fc6db4b23368f5c84 libreoffice-help-ro-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm c07ab06aec1c0310f50c5112739d75dd7a48e4c7613dee9d8fa45fb3143a8b30 libreoffice-help-ko-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm c0a4b6d153b024b695d52bdd8854ee1d191acd76e2402f89f6d56e73f2f56618 autocorr-fr-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm c2ec143910db9c308d6845acc32bf6db42b81e6c1081c53dfb4a99074cc07a0e libreoffice-impress-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm c55b9c53a84849c5105fe8834466c3cebd4af6ecb76034ebef17b67188338bb6 autocorr-bg-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm c8222de505ea2ab6934fa7a258726fb68ab84f9b96b9f976ab97f114c85b932a autocorr-sr-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm c8929c6a70e97e980f9d550f5d790ba15795a0b671e2f344fb414332da76a088 libreoffice-opensymbol-fonts-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm ca886fe25341881c1712a7e4e326bace8869ee788334953851a521a76e0c3c2e libreoffice-langpack-nl-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm cb73ce3150fa0213cfc096ff30133179944f54fb724d932b37e2a351bb0eadce libreoffice-langpack-st-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm cbcf772d06682d68bf75f51002e1e33f194d00b7ffef26bbbd8cade6916a3886 libreoffice-help-pt-BR-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm cbec4d8905c2a8ad25aa34339c4baca3c72f94cf34721aecebdd162ef1df5aaf libreoffice-langpack-gl-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm cd64da54045793e5d5191c82dbc5a1b09caf8dd86098e2d426d3829c16f26105 autocorr-ro-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm cdae86430e7657915a6ed6e5b07297fe6491a4f965289f2d65af42e1da8d6415 autocorr-hr-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm cdfd06061d8e51e2347005308ae804d5036faf73a05b721083263d89d73fab7f autocorr-fi-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm d014a6907cc58089cbfae85c36ca7d660f41ce0f84f73be354c4015257c312bc libreoffice-langpack-fr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm d1c3335401ede3939d933f1a570e53a6281e0242a57caec5f3eba11f265d02a2 libreoffice-calc-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm d1dfff27ad90f413e1e0d0a2e7cedf3541c399eace6eb5dd7996857f0bd1252b libreoffice-langpack-es-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm d2d156a2986e0be15edfb736d998d83ac5916a4f0409ad19c31591fe4ae5ad85 libreoffice-langpack-cy-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm d3f061fcf80f262f09b3488e0320cfa4567b553bcb082050d8666c8922cd9045 libreoffice-data-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm d52494b0fd0c5299085d710fafb66a424dcfad326e900cb096ba6f44e3e1bf56 libreoffice-core-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm d87c61ac93f04dfe9031e37db7f00ec4cda1210a0a60cfa057fce49d9b3d4510 libreoffice-langpack-sk-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm dd0b10d8235ef1fd93878b34b2b1f3b064793d95cfc503a07ce74a199983e90b libreoffice-help-pl-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm dd98ca852e26b21c1bf425848ff0020c1c3a683fbe2fa833d046ec1ad264b9c4 libreoffice-langpack-as-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm de1d664d63d12ee55c740db8b0c07ceb76db4e49ec84f9035aabbb5a9fcaace5 libreoffice-langpack-bn-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm e0b637741fc474ecfa5147993cbbaff968be57fedfd4dcb93fe2336adc397cbc libreoffice-langpack-it-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm e1ce38f9cd7493fe130826bd20ef4ed1fd04931a8de74db9ec29b8e9f0df4577 libreoffice-help-eu-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm e42ae0889270eb4093a326b6c082fdfd06e8d71bf660423978edef4a6ecc9a9a autocorr-pl-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm e433d1b2eac78c3b56b51e49d9585b4eedcf683dd6379647a667da9488c337c4 libreoffice-langpack-en-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm e522921e331141bd70a43c6a7b84f9f5744761fbb39899400dbb70d4cbee2637 libreoffice-langpack-ml-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm e73135ca4ac0a1e402a86df7f627c04f2cdbcd2117b84a794c068e58a07b27c1 libreoffice-langpack-ts-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm e7c33e9b5a4aa1aca2cbd669fed540c23a97bfc4abdf3c0390cae537c7e4f928 libreoffice-help-hu-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm e9c380558d905a1ae0d71a6dd2eea7c244b828e31b6c1069abf7c4fb26eb9262 autocorr-fa-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm ea70d11fdecf7752f5a0ca78bf8fe278ad71b39aaf85614f6fbddaf45f205524 libreoffice-langpack-th-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm eba7c187a24fd03b32bc6aa20afd685412435520310a512fa5153c36b9cd501e libreoffice-langpack-mr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm ebf91202adc4e8a14a71831b49f7741d3c03b3488309fbe4d4311cb90ecd168d libreoffice-ogltrans-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm ec2e7a51391aba935df40c2415a3f9d47e45bf442229858f5f9f1f6140bea563 libreoffice-emailmerge-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm f00e155211c8c4be34d83316dfa194aca77b78078a233f60ddafc5061675baf2 libreoffice-langpack-et-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm f0f654411cddef8e8192c8acb5610c65b1a0e6dab74cf10529eafe36f058fb4f libreoffice-langpack-hr-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm f427e04679ede0bd6f823f7d81ebe5162f230fb195c02ad6cc530f0fa66995df libreoffice-ure-common-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm f46b562e3cffad96bb0bf9cf36dfed81d36f4eec411f5f8772699c30d39d3532 libreoffice-help-nb-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm f62f05c52be6dece8c31e156500ce5a0e26b6d8fb89a1c292437c788e6d4b61a autocorr-af-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm f80092429af39edec8efdef9b5923d414f7aaec8234f1a08f36740e10e36577e libreoffice-draw-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm f87fce7f5c65917d3c78f315a231161f911c67b7ac4517450c333098a42c843e libreoffice-writer-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm f9cef111e08a08905a2a9c62aa5e485c01f369d1c1a5acafb7e682c9fef602e4 autocorr-ru-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm fa5c74aff89b79c040b0998a46f875a7ab8423a89ea3a0bafebc0ecd715f090b libreoffice-langpack-si-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm fb01c523776841fbf98dba44f3c7560702da3d8ae0e759bd5fe9f78ed50bd96b libreoffice-math-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm fb4e72cae14c9315377795af400fa515cc3b210333c400e02a6e8ecec5f4e73a autocorr-vi-7.1.8.1-15.el9_8.1.alma.1.noarch.rpm fcfad0297d081bcef300487f831ef59c236cd61331a2b78b18328d65a797e799 libreoffice-pyuno-7.1.8.1-15.el9_8.1.alma.1.x86_64.rpm fde9ab671e359902e7e89ebf76134ad5752bd19c275d71e0228569f35b6810ce ALSA-2026:28973 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-all-modules-1.20.1-28.el9_8.3.alma.1.noarch.rpm 2062184586744de5e2e8ceb10a463786ea27a367938d7ea6df2780301a4969d7 nginx-mod-http-image-filter-1.20.1-28.el9_8.3.alma.1.x86_64.rpm 4073f6bca82d7236859be358ba0c54ef236d229726bd00f3bb20152629377246 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.3.alma.1.x86_64.rpm 463f3cbeda8ca05b60ce4e39f100cdbf17320df3e6d846728ba805219c8d6833 nginx-mod-mail-1.20.1-28.el9_8.3.alma.1.x86_64.rpm 6d9b61dc9040c3da68333f4fb7d1d3bf78c426f58c1a4ff2726314266bae6563 nginx-filesystem-1.20.1-28.el9_8.3.alma.1.noarch.rpm 9defcf603703c37571f3f54b2fd9cc57e8cf2a087072e028bbdc85530ec70838 nginx-core-1.20.1-28.el9_8.3.alma.1.x86_64.rpm a7228435c5cd50ea83fd02e1a33c15b3532f9c9df1b211712d5ffc75658538e5 nginx-mod-stream-1.20.1-28.el9_8.3.alma.1.x86_64.rpm c5b5e9f7c38a4b024d94f59659328b53e41cca824e01e4d0f3af67d007d4f9f5 nginx-mod-http-perl-1.20.1-28.el9_8.3.alma.1.x86_64.rpm c8ae54281016455aca0c2f56222cf7928b1b9afc83ef59ab127da037112e1b86 nginx-1.20.1-28.el9_8.3.alma.1.x86_64.rpm c9f1462b30d12fc8a9621454a3b3b14ce9ffc790c0f4467cf5ed0ddc17e192d1 ALSA-2026:29151 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-mod-mail-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.x86_64.rpm 25f6c65a0adff6992f73a96d5c4d14d94399039d92d601b3e153c4d9b5303e65 nginx-mod-stream-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.x86_64.rpm 4f814a01317ac55e8c515a6b38309bd728e82d589e3d3f94725a925b70b18963 nginx-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.x86_64.rpm 70523f11e961ae8144629aebab5f61f624d0f822aad54b10b69e859f6f023b82 nginx-filesystem-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.noarch.rpm 8f8165aa94a5caf0242030ba85c296e43e310117a9c4ab97817fccb0da660f2a nginx-mod-http-perl-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.x86_64.rpm 996d44c4aaec3d8c28fee440cd7c143d5df3c67d38e8f84dd947126ee82a468a nginx-mod-http-image-filter-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.x86_64.rpm a7b34a02a6efb2fbaed90684cdefe5b61df5080b3835024f971c29d72dc4d81a nginx-core-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.x86_64.rpm a9c6ce2993370df8be0a5a849fefc239d7f9ffd7389920e7444e71e7a2c058de nginx-mod-http-xslt-filter-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.x86_64.rpm ae716c65a44b498896fbbc81a615f42ff284c6a3c0569d8740d82da7c5d8c243 nginx-all-modules-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.noarch.rpm d8b17db41a4088718e5582fd2690997c2a0eb233e98d547a30890ff8befdbf05 nginx-mod-devel-1.26.3-9.module_el9.8.0+260+95b8e5ed.1.x86_64.rpm e2a1d200a3f104ee943fd4d105c16013d3900645f2513cf1a175ef0e8cf8002f ALSA-2026:2920 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross?Dashboard Privilege Escalation (CVE-2026-21721) * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default grafana-selinux-10.2.6-18.el9_7.x86_64.rpm 0d1239df5ebff601795d4d72f849809d1e0775ee5cbbf47de6535cb9773e0ec0 grafana-10.2.6-18.el9_7.x86_64.rpm 3fb7c4a5eed8b8b0ceb2113a0592aac1de497490390fe9999dc53d4c17f665ca ALSA-2026:29455 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default buildah-1.43.1-2.el9_8.x86_64.rpm d85777f8a262796c1a29d026312564709fbedc42c7daad5ed803dadc942adc16 buildah-tests-1.43.1-2.el9_8.x86_64.rpm ffaecf440953cede9a71562ec5e359b7f87783c8a213619d1d4d19cc7693520f ALSA-2026:29702 Copyright 2026 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default runc-1.4.2-2.el9_8.x86_64.rpm 06d9b5658a3ee0dd7da46a055a44d9e97132aa0c2c6373915d4f182d86e9c990 ALSA-2026:29703 Copyright 2026 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default containernetworking-plugins-1.9.0-3.el9_8.x86_64.rpm 99ed6b1a9551f42a3f144b498850c1d514a8d7516e61efa3e2f4db37033f142a ALSA-2026:29844 Copyright 2026 AlmaLinux OS 0 1 Important

tigervnc security update

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default tigervnc-server-1.15.0-7.el9_8.2.x86_64.rpm 249e15c8344bbc385c2e2759ab423df0e4b2f3863c93267297fda6ffade46c24 tigervnc-server-minimal-1.15.0-7.el9_8.2.x86_64.rpm 31eafafa782490616d35da3268b58dabbe5b776c56b2bb30c67cc6cd19ac7488 tigervnc-1.15.0-7.el9_8.2.x86_64.rpm 5e242cb4d5337d9025c6790f93578ffe7323b6f66ab01a89f58fc5d088086a5c tigervnc-server-module-1.15.0-7.el9_8.2.x86_64.rpm 6c2de50a8cdb0bf83e9ecbb017ce450e9d122dc08e96d4f9c47084c03d29c0b4 tigervnc-license-1.15.0-7.el9_8.2.noarch.rpm 6dc9356de382439479290e0fe573714ed7c54fac9cc3c5b4c1a5688b6a08d823 tigervnc-icons-1.15.0-7.el9_8.2.noarch.rpm bd5342a78bbda689ce234b9d474bec09298793ed5d18dba21fe3a3363d4ce456 tigervnc-selinux-1.15.0-7.el9_8.2.noarch.rpm c437c1ef0d78e64e2813217d6e58cf407792f913bb9adcb9f584f4b8bffe62f4 ALSA-2026:29940 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294) * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313) * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327) * firefox: thunderbird: JIT miscompilation in the DOM: Core & HTML component (CVE-2026-12299) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328) * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310) * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325) * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295) * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289) * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315) * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305) * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292) * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324) * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304) * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291) * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default thunderbird-140.12.0-1.el9_8.alma.1.x86_64.rpm 81917a39bc3bfe5af9a1af9be37facc366fcd657d8027438f94727644a034cd2 ALSA-2026:29981 Copyright 2026 AlmaLinux OS 0 1 Moderate

golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.4+1 [almalinux-9.8.z] (JIRA:AlmaLinux-183350) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default golang-src-1.26.4-1.el9_8.noarch.rpm 1a89a83fb0ecb4df041cfede9c040997d4b14c129d8db2ccb977ce238ad7d2e3 golang-race-1.26.4-1.el9_8.x86_64.rpm 2ac04a974984eaf9a2d644a169b288a701eb963ebee340acee5029d32b681821 go-toolset-1.26.4-1.el9_8.x86_64.rpm 3326f325e9d2905b8ffd99b40cd5c7a59227035ec48a19d88a20ef361488122a golang-docs-1.26.4-1.el9_8.noarch.rpm 4d94fd28d694656d5d2522b782d20b0e7b392d096994c5c7767d65e389044961 golang-bin-1.26.4-1.el9_8.x86_64.rpm 59936afb5f9a1cb5a9e6bd59558122b2664b1d3bd2c9fb63c2bba316f2b5cc23 golang-misc-1.26.4-1.el9_8.noarch.rpm ca0a04d0e7e96e7a6ea0dfeae36e2cf9034fba8463390c0337105fe1c4f30fb0 golang-tests-1.26.4-1.el9_8.noarch.rpm f78026c0f7115c1d75bbb67b794a76ac169f593d51429c4bc4465b9af02de804 golang-1.26.4-1.el9_8.x86_64.rpm fc90678d487f107661cc9f1c5a1ffb5f16c0d61bb0a7cf08878d15152451d8bd ALSA-2026:3031 Copyright 2026 AlmaLinux OS 0 1 Important

libpng15 security update

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng. Security Fix(es): * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libpng15-1.5.30-14.el9_7.1.i686.rpm dc4bdfd83f6384336f8005d2ad250fed9db62c481faf8799f9cee94014c4ef0e libpng15-1.5.30-14.el9_7.1.x86_64.rpm e0dd95df311be7e755f92e83d58a872eb81aff0a7f921eafa9194d5e3f20e26a ALSA-2026:3034 Copyright 2026 AlmaLinux OS 0 1 Important

munge security update

MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods. Security Fix(es): * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default munge-0.5.13-14.el9_7.x86_64.rpm 475c8f356d2aa867afeee3a80336cca395c1b9659e5b6eed82cb1e0c5f6b7c20 munge-libs-0.5.13-14.el9_7.i686.rpm 8ddb051d9385ede74397db6c178f5e5dea205d96815c247785e629c7904ed4dd munge-libs-0.5.13-14.el9_7.x86_64.rpm 9c83b853295cba9b3972bbdc74e253347287422593ce39cfe391d1222f6a9bb8 ALSA-2026:3040 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default grafana-pcp-5.1.1-12.el9_7.x86_64.rpm d916f5fe5733ef47447203f35f14989f5c8c8e064a28cd5fc2db2e5b5fb85c0f ALSA-2026:3066 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129) * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-perf-5.14.0-611.35.1.el9_7.x86_64.rpm 132ccfa4ef6127924c568cf915fb25cf91418e743bce8d0227dd729411679bc2 kernel-devel-matched-5.14.0-611.35.1.el9_7.x86_64.rpm 1ae46820dc6524ee2e96a85e60f5bf76720fb2fc48737a08cf16509295975852 kernel-debug-devel-5.14.0-611.35.1.el9_7.x86_64.rpm 33b794f7b312629480fbd3a121d0e33dddb41091056bbdb90bb7d396903d52b2 rtla-5.14.0-611.35.1.el9_7.x86_64.rpm 59d96c3e675dc059da154db3906656ecf215dfa4662fc75f75f0fab26e06a9f9 kernel-devel-5.14.0-611.35.1.el9_7.x86_64.rpm 6a1d944c01b61d9c175a110cf919342efe9630c85813c4827adcf7c9b727e856 perf-5.14.0-611.35.1.el9_7.x86_64.rpm 6a816bb292ed2c3f6e704f0e0e05739ba7c3ec45eebafcf69e514f74e0d3fde4 kernel-headers-5.14.0-611.35.1.el9_7.x86_64.rpm 6fbeee0eaec3193cb1910ff543a60abd5d8d27464d100f6190c26ea42293c9be kernel-doc-5.14.0-611.35.1.el9_7.noarch.rpm 83c32fd1cc9b21f2a2cf9fa3f0e639678f7e0f2825e0768db924ac804d139e37 rv-5.14.0-611.35.1.el9_7.x86_64.rpm b8f08267d9a414f41634f7c3180a0e4c47f1d9ab41d213731bfbd52f9afb51b9 kernel-debug-devel-matched-5.14.0-611.35.1.el9_7.x86_64.rpm cd2983b757b9ef6df47fb423b70388e31bfdbc4db0c6a56c23730565fe6d5e5e ALSA-2026:3067 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855) * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libwinpr-2.11.7-1.el9_7.2.x86_64.rpm 2e250953971725dc1493b57a90a8fc8ae7f6a7d8d49536d512770bbc258b5e9d freerdp-2.11.7-1.el9_7.2.x86_64.rpm 3cace72011a97996e82e79fb7d4ce2a1fbe55208654257e6117fd413515aa112 libwinpr-2.11.7-1.el9_7.2.i686.rpm 8ff1d7c9efe3bc140ee3002a05bf95e6265e139b1b809794090f8893b3e46ebb freerdp-libs-2.11.7-1.el9_7.2.i686.rpm 975c9aad99d2a2f3ab17100b2d2b445d1ecd27b43e88d79bd8a7abec30243841 freerdp-libs-2.11.7-1.el9_7.2.x86_64.rpm e04496146ab5d16088a34c8b5ab5c716c9a5b129ae1678e2c54b87741011e0f6 ALSA-2026:30844 Copyright 2026 AlmaLinux OS 0 1 Moderate

mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fix(es): * httpd: mod_md: unrestricted OCSP response leads to resource exhaustion (CVE-2026-29168) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mod_md-2.4.26-2.el9_8.1.x86_64.rpm e900debba01ec0223c172a239a036313d49e0bf036e9bff3f1d5585ef493d94b ALSA-2026:30848 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057) * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993) * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273) * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776) * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-perf-5.14.0-687.19.1.el9_8.x86_64.rpm 1913c9c8913b68a2a6054fe7f9c98f0f7fbc6eb2c9c112590e49d8f347194f45 kernel-headers-5.14.0-687.19.1.el9_8.x86_64.rpm 28870c30592cbaf4661fc6404241a3a27a67a2d75055d71671bc07a5ad507263 kernel-devel-5.14.0-687.19.1.el9_8.x86_64.rpm 6477d2370eb68b7263bb9d9135e71e071da305c595f8896e379b7a005621b268 perf-5.14.0-687.19.1.el9_8.x86_64.rpm 6b464bf30591c3130a8e7920dc332cd7912aad114f7683e0387f346a22174eb8 kernel-devel-matched-5.14.0-687.19.1.el9_8.x86_64.rpm 797607cf5b747327a6de1ce332c6a0826ddecdaaec1d5e2dbbd05e3e421fbcff kernel-debug-devel-5.14.0-687.19.1.el9_8.x86_64.rpm 81c4cff901172549a8f8567d0a0a4be7db3ab269d5b2fe440c9a1e8bfe7b2474 rtla-5.14.0-687.19.1.el9_8.x86_64.rpm 9508ca3bc922a3d12c298033391c3400b3e5e25d9b36b92051ca592f9eb429b5 kernel-doc-5.14.0-687.19.1.el9_8.noarch.rpm bcc36e7842e8b0a390b8c723333091fbc05aec63f401ab8aeb375823027e543f kernel-debug-devel-matched-5.14.0-687.19.1.el9_8.x86_64.rpm ce397474c208435c8f3969df9ffec5a215c10a638102586bc309ddcedf874ab8 rv-5.14.0-687.19.1.el9_8.x86_64.rpm e6669004cd05b21d541154f5582e48563014d2480e9046185c00be320f8bf179 ALSA-2026:30854 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default git-lfs-3.7.1-4.el9_8.1.x86_64.rpm 75818e15cef231380790f73839935315dde237c3ffa302f545df00e761fee870 ALSA-2026:30856 Copyright 2026 AlmaLinux OS 0 1 Important

perl-Archive-Tar security update

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support compressed or gzipped tar files. Security Fix(es): * perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access (CVE-2026-42496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-Archive-Tar-2.38-6.el9_8.1.noarch.rpm 029befe10d08adb5f1475f1473abce9e1bfefb173955c98013ace2f61db4891f ALSA-2026:30859 Copyright 2026 AlmaLinux OS 0 1 Important

perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries. IO-Compress supports reading and writing of bzip2, RFC 1950, RFC 1951, RFC 1952 (i.e. gzip) and zip files/buffers. The following modules used to be distributed separately, but are now included with the IO-Compress distribution: * Compress-Zlib * IO-Compress-Zlib * IO-Compress-Bzip2 * IO-Compress-Base Security Fix(es): * perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-IO-Compress-2.102-4.el9_8.1.noarch.rpm 9180bc36dc0e26f58a3079d46bf7aac1866c77ea730d2324eae291ada265a029 ALSA-2026:3095 Copyright 2026 AlmaLinux OS 0 1 Important

protobuf security update

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data. Security Fix(es): * python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default protobuf-3.14.0-17.el9_7.x86_64.rpm 7a3421a03f9e749de5b935d6d59f5bd40541d74f86fb317c4df461bb04e71e38 python3-protobuf-3.14.0-17.el9_7.noarch.rpm 85e3188bf898ebf9e10dbb9ae58bb3ec02cd6b77f7b5b082c7990b581e2f4265 protobuf-lite-3.14.0-17.el9_7.x86_64.rpm c6cda8b0838b3a4865b71fdacefb7ad2874abb0faf5e25a66a8800771d437952 protobuf-3.14.0-17.el9_7.i686.rpm cf8dcda3d5b19be15cead329f16b7289dac0f14dca60f1b02d9df7c30a234c5c protobuf-lite-3.14.0-17.el9_7.i686.rpm ee887cd2d044292d4b9597fe4c93e9258b5b0c5914fa7c5192ae9c398efad03a ALSA-2026:3189 Copyright 2026 AlmaLinux OS 0 1 Moderate

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow (CVE-2025-14905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default 389-ds-base-2.7.0-10.el9_7.x86_64.rpm 14493627ed287fed1034f6709e323024465b8bbe775057372f8fe360d177e1c2 389-ds-base-libs-2.7.0-10.el9_7.x86_64.rpm 42492bb8599dedd1e73bdb4615c5a5fd3d8971d9c0954586bda082e8adc2ca1b 389-ds-base-snmp-2.7.0-10.el9_7.x86_64.rpm 9c38750fbd125f74592513550b1a2b77ade7dcf7d559385e6877a1c359225bf1 python3-lib389-2.7.0-10.el9_7.noarch.rpm e01a4b3ef68c0a71ed6b10c63829a369bd4b005575e18530b85333e20b880f65 ALSA-2026:3291 Copyright 2026 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default runc-1.4.0-2.el9_7.x86_64.rpm 373b0a5b11d0d68481752cc9881a8df51ebb59bc321708959f37b5d8a22ca801 ALSA-2026:3298 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default buildah-1.41.8-2.el9_7.x86_64.rpm 09ecf31e3522402c3a94714f207544e46e84d792ca4b3b2f60451ef4a949ddc4 buildah-tests-1.41.8-2.el9_7.x86_64.rpm d0854285f5828999acaa5065a0ff6db24beb38df778a81bebb7868fcd610e7ff ALSA-2026:33226 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) Bug Fix(es) and Enhancement(s): * glibc: counter overflow in __wcsmbs_clone_conv if setlocale is called (JIRA:AlmaLinux-145156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default glibc-doc-2.34-272.el9_8.noarch.rpm 0743193855a12ae0fa37408df5abf1b3d2e78bcc976feb01197b31607cca58a8 glibc-utils-2.34-272.el9_8.x86_64.rpm 2420b5cfc7bde0e002989f53a74a285570d03b5c10b8dc36efdd31a25cffb0fd glibc-locale-source-2.34-272.el9_8.x86_64.rpm 4bf22f0c182c44bb2de40700fddd9b0f0801805c7eb35a26463e3fa4e7c709f0 glibc-headers-2.34-272.el9_8.x86_64.rpm 5d1238dd0009633d981b002f42573d0235c628ae7d5801a1c96c0c68ed2b7401 glibc-devel-2.34-272.el9_8.i686.rpm c853c0d7700b9c3733b773c0a7ec391790a3da209ec7bf2b8807341c2544b66d glibc-devel-2.34-272.el9_8.x86_64.rpm f78566bbe18564668b907b2820d6ce3abd4f7c868bea46a070864221e432d1e2 ALSA-2026:33285 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886) * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540) * tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rtla-5.14.0-687.20.1.el9_8.x86_64.rpm 11faa65260a7262146c8db27c032a2b7c7d3be0da1631dc1c6ae36213305f9b1 kernel-doc-5.14.0-687.20.1.el9_8.noarch.rpm 21557b6b4b7991a3f17284636922fd55984ded870ef89b70663775d317b0a465 kernel-devel-matched-5.14.0-687.20.1.el9_8.x86_64.rpm 217711a512585ef1df1767d1be3afc1e6f39e7ae5cbd54ce31b3fca321578dca python3-perf-5.14.0-687.20.1.el9_8.x86_64.rpm 36fbee750d047e4e04e4a0e5108b723c1f06649be50b12cfcf72fa17f21dde47 kernel-debug-devel-matched-5.14.0-687.20.1.el9_8.x86_64.rpm 5b77e9d54c9a16d5e3f4bf62c86241b5de75d0f19c9767df8afeb6d32b1237b5 rv-5.14.0-687.20.1.el9_8.x86_64.rpm 720c66ac633db2cfe31105544c69982cdd08498e553615fc3df7c02cf3515eab kernel-devel-5.14.0-687.20.1.el9_8.x86_64.rpm a5b65593e760456a4b507256d0ab6ab10574c07dbd42ea59756e4d0ae350b392 perf-5.14.0-687.20.1.el9_8.x86_64.rpm c1ae9c22f3aeca460f9ce3dff44db38b14018e89247a2742e34119d13ac3d304 kernel-headers-5.14.0-687.20.1.el9_8.x86_64.rpm d7e3c9fbacaf3dfab3bef5f23eb7042d94fb75995923686cf84ace33e2ca8560 kernel-debug-devel-5.14.0-687.20.1.el9_8.x86_64.rpm ea7d971d72730466c615119ef3c8431aeeeb054e548d3e3b635ec977509b7e2c ALSA-2026:3337 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default podman-5.6.0-14.el9_7.x86_64.rpm 3c4ba48f136f021d6fe6a36b81d251dd6fb2557fd5b1713aadb048f25a63052a podman-plugins-5.6.0-14.el9_7.x86_64.rpm 54ee34bddd5ac68865fdf2eb1df1ddd330d2db5f67d6ad39807fe97b654e3214 podman-tests-5.6.0-14.el9_7.x86_64.rpm 826ebe0cbb71f02a84b63bcb651f60ed447e00cd8516ae3c4df726ffe461b4c4 podman-docker-5.6.0-14.el9_7.noarch.rpm 90f0d253f84790d17063d4dde9ddda5ef355f2c3aa527a2d188e91000b803229 podman-remote-5.6.0-14.el9_7.x86_64.rpm adb5933f22640587194105963c43a50258554d04b4143174f4260043f136ff7f ALSA-2026:3339 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785) * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793) * firefox: Undefined behavior in the DOM: Core & HTML component (CVE-2026-2771) * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774) * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776) * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781) * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766) * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769) * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787) * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768) * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783) * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784) * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759) * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762) * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761) * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777) * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790) * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763) * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792) * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786) * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760) * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772) * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779) * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767) * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764) * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765) * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780) * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component (CVE-2026-2778) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758) * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791) * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default firefox-x11-140.8.0-2.el9_7.alma.1.x86_64.rpm 648dc026afb33dc570fb0754cd3fd7582982bddfb97ff4f2fbdcf4f8e57b42fc firefox-140.8.0-2.el9_7.alma.1.x86_64.rpm cb8bab98d96f8216ec6e30da302e50c509c1a88e8c51c2234af32fddc778a924 ALSA-2026:3340 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default skopeo-1.20.0-3.el9_7.x86_64.rpm f2bdd7dc2778c7a307e6f6927ecdf041157af40a4def0cfa1f3528b35a3c78ce skopeo-tests-1.20.0-3.el9_7.x86_64.rpm fe2a787a3d0f1e1cb2ff7269d950d1e6d03e22220ffaaf5cce976bce552f874e ALSA-2026:3341 Copyright 2026 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default containernetworking-plugins-1.7.1-3.el9_7.x86_64.rpm 2f039ff30f668ece923c980a97564446b2567f8fed8077e28d7988d786d48880 ALSA-2026:33449 Copyright 2026 AlmaLinux OS 0 1 Important

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability (CVE-2026-6722) * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735) * PHP: PHP SoapServer: Memory corruption and information disclosure via incorrect persistence handling (CVE-2026-7261) * php: NULL pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() (CVE-2026-7259) * php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262) * php: signed integer overflow in metaphone() (CVE-2026-7568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-ldap-8.0.30-6.el9_8.x86_64.rpm 02bf4968cff1fd25a870a3c12f89128e23ecf7b48005d270a5d6362cc741a778 php-soap-8.0.30-6.el9_8.x86_64.rpm 03f69e5a02f6afe76134aa12d93e9082b3f4976dc2131593b7604783769636b4 php-intl-8.0.30-6.el9_8.x86_64.rpm 044841fc576baf45f8955decb570c90069284944c2c3503c4d2a188b586be4ed php-enchant-8.0.30-6.el9_8.x86_64.rpm 168d73559b49239fb6ce7be12e203b2c247d7216ad6b5ddfe8431c888f4c0f2f php-pgsql-8.0.30-6.el9_8.x86_64.rpm 2d91545f931b7edcb70071868d5d9d055eef7d21a642fbd5e79bf3540ae4877d php-8.0.30-6.el9_8.x86_64.rpm 2e794071d8912a2394d6fabf2cc54933acfd09908e81710e5fc5afa7ce6f575d php-ffi-8.0.30-6.el9_8.x86_64.rpm 430dbb5019e1c3de357ec681fd6d092ac840447f77284f30901c9f9206489008 php-bcmath-8.0.30-6.el9_8.x86_64.rpm 6778bece8b3cf43db76decf5ae3eb9ebc8deac07100373dfd7a58481e94f4dbd php-common-8.0.30-6.el9_8.x86_64.rpm 688a7b28d8025c7df3759237baa677b934b941b47bcc335a8bb5168895157300 php-devel-8.0.30-6.el9_8.x86_64.rpm 68a8fef7c388d98f7e496b758713f087920c8d8581a870d178c6deb1b41d8bfe php-embedded-8.0.30-6.el9_8.x86_64.rpm 7977bec8a4fa88e2b4f8fded3a4cfde4011abd20131af74148c279bbc5665d3e php-opcache-8.0.30-6.el9_8.x86_64.rpm 85834235aee97db0a3860e33a6d6652b859e57a5d0b40389b30c53f11034add2 php-odbc-8.0.30-6.el9_8.x86_64.rpm 85f398d71f762c81946d09cb09e5c453ca532ce0ec8e17f9ced13f3bca411f4d php-mysqlnd-8.0.30-6.el9_8.x86_64.rpm a1a760b060487afa8926d87dcdc282bdbeeecbcdfd466e4cd21315fcf839d576 php-snmp-8.0.30-6.el9_8.x86_64.rpm a9621eb15e9abc6a04889b92ee5b521aa255b135f7c4b930e3e8bb101482007b php-xml-8.0.30-6.el9_8.x86_64.rpm ac276656cd7e4f1743334fcb7897932466fbf7ebf62711635705d18cc8f02954 php-dbg-8.0.30-6.el9_8.x86_64.rpm b33c562f2d406677022ca9ed64544790e0049e68e3d6e0e84c4036c4e32e08b7 php-gmp-8.0.30-6.el9_8.x86_64.rpm d7b9b5f6ad24e4aada9839f24e5796e144b9a9d7ea90f6b809958c938d2759ac php-cli-8.0.30-6.el9_8.x86_64.rpm dbd209c80c47351047ae4da5d832167364aa4eeb7b63b04e47b536f3aa18c55b php-mbstring-8.0.30-6.el9_8.x86_64.rpm e11780561aa1451bc87d44705fac298fc7bbc347c831da504fa5bc3dd139e59d php-pdo-8.0.30-6.el9_8.x86_64.rpm e365169bc833ab28a106550652ec64f676f8a95f49d4586bf642671df05b8a49 php-process-8.0.30-6.el9_8.x86_64.rpm e474c162b7a6a76329cb18b3d449880584d1ecddb3e95b62a0ec19ddf759e57c php-gd-8.0.30-6.el9_8.x86_64.rpm e513166059c40899f649c7dcf0ce6d816a7a217fbab96aa51bb875e1a8a80924 php-dba-8.0.30-6.el9_8.x86_64.rpm e7be4b9d20a615360bc35a9d9c2bba4765bb8f6d4583e5924b1230e69a58fb47 php-fpm-8.0.30-6.el9_8.x86_64.rpm fbf7cf37e057f6b8e0b28d3f63e04ddf3655aebe28220620f76b6ad0361ff531 ALSA-2026:33481 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb:11.8 security, bug fix, and enhancement update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] [tracker] Rebase Galera to 26.4.27 MariaDB:11.8 (JIRA:AlmaLinux-140364) * Rebase MariaDB 11.8 to 11.8.8 in AlmaLinux9 (JIRA:AlmaLinux-183085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default galera-26.4.27-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm 2073488266d29c4e8c162eafd2a8893f350d2e5d822d492e364532ca0f681bd2 mariadb-errmsg-11.8.8-1.module_el9.8.0+274+ad8c02e7.noarch.rpm 2ba6941e25c7b20c0770e5f9bf4bcb8a1ce5101bfe24d9d76f85b74967acb3ca mariadb-server-galera-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm 4d296a64ab86d5ccd5cc3538495badec5efe9ec85220c5706519c9875dba52fa mariadb-embedded-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm 57229f02e8fbe2c62749330e89603470a9672983cf4d9b7d103d7f280b8025b3 mariadb-devel-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm 59f264c2a55fa4caab93c1f0d3921f5ab7544b9e182133b2b0279f2649b52fd4 mariadb-server-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm 8b107790254594d3dde08d5eac3d284264b3dd08be7e2549fdc1ced85395152a mariadb-client-utils-11.8.8-1.module_el9.8.0+274+ad8c02e7.noarch.rpm 97ed99b2a6ca86e25055f5d77445e356a3798c4763f1591b0d6f28a89d2d9638 mariadb-gssapi-server-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm a16cffff65fcbf474006d225e94747852d5f25382ddf0d563f18721253401c96 mariadb-oqgraph-engine-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm a2cfaa9552d53ec0121834e5d88a4fea0718f04d04d87441fcf23be538210b26 mariadb-server-utils-11.8.8-1.module_el9.8.0+274+ad8c02e7.noarch.rpm a83e539558d45bc8c44c04b1a78e551a6d79e320de3f57dec6168405ac1d5902 mariadb-common-11.8.8-1.module_el9.8.0+274+ad8c02e7.noarch.rpm c0d482499e6ff0610af8fc431141ed3579fad01fa6bf9ec22150b068c1bfc646 mariadb-backup-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm c208b1be3d5d791534f02e59829edd558622571fa44d04e00a86b406040167ec mariadb-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm d3d85ee59dab1bec98eb72137d440abeac713d901e8a951640908300880d2850 mariadb-pam-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm e60eee0ec1e9f538967e472aa6ccb9fbd530c046349ae23d9c89b887ae74e3d1 mariadb-test-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm eee77f680128f6113542d700f8316336c3f4ad351bf5e3ca7cc5742c1c431777 mariadb-embedded-devel-11.8.8-1.module_el9.8.0+274+ad8c02e7.x86_64.rpm f4003ab71ba72cb384b7636f519332bfd9b327279215bdc5e749c9bbf6e02d6f ALSA-2026:33501 Copyright 2026 AlmaLinux OS 0 1 Important

giflib security update

giflib is a library for reading and writing gif images. Security Fix(es): * giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default giflib-5.2.1-10.el9_8.2.x86_64.rpm 1d99b8c161ed5be44edad98027c89700120c564515098241977fb862c004af4b giflib-5.2.1-10.el9_8.2.i686.rpm 972300404b5db3846a8ece6bfb173f48f96e1cdb3a66a7ad8405eb2067eae473 ALSA-2026:33512 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-rake-13.0.3-167.el9_8.noarch.rpm 017df6ed9c96fec4a2281f254f6d5606ebaa694de9bdbaa7d71bb99b86e531e0 rubygem-minitest-5.14.2-167.el9_8.noarch.rpm 0aae863ac7ee57ad68a07fdb6278ea18ac4383f2fad31d4ff2dfb7136299e32e rubygem-bundler-2.2.33-167.el9_8.noarch.rpm 0b5ccb37e47b7103dee9d1761ade9ff4b7df725cf2e3c6cd156915c4ac7655c3 rubygem-rss-0.2.9-167.el9_8.noarch.rpm 0f8fecc8dda580d9308084c9f4db3fc0511e7522040ef852f3300ce0372e86d7 rubygem-typeprof-0.15.2-167.el9_8.noarch.rpm 1a07250b43b7c4dbae60bbbe4fa6495a51661fd296aa7b0bca3fbd9c46391cb6 rubygem-json-2.5.1-167.el9_8.x86_64.rpm 1c3081da1f92fbf5a1c3dfd28c2bec9bccf4b3b255b2daf704c0da7b02716f5c rubygem-rdoc-6.3.4.1-167.el9_8.noarch.rpm 1f42368d368113554591d81da8195e05db2c2399a0f74ba8603105c0d7146eb0 rubygem-irb-1.3.5-167.el9_8.noarch.rpm 23a661be424a3c7090632a0c828c1f994399937d81de3b96ba7f227cbbf08241 rubygem-rbs-1.4.0-167.el9_8.noarch.rpm 260570e38293c026b6d93deaa8204757f94b0cdd1e20ddd3aea5d446d87a6e17 rubygem-io-console-0.5.7-167.el9_8.x86_64.rpm 3a4b9f536c08a5f1551fa0c9c1d9d28b5afe769ce20c874072bfe7e520f3bcc8 ruby-default-gems-3.0.7-167.el9_8.noarch.rpm 3e1e5f0386e1f92386686eca2e800ff9a6630765ade5d38355f6e5c9f843d8f0 rubygems-3.2.33-167.el9_8.noarch.rpm 406b971f265bc5f4a54e86dd5da25af3d3d1032704c1149c93f05035ed53d0a1 ruby-libs-3.0.7-167.el9_8.i686.rpm 7c273b413846504c5f89dd730e93180ae30f547b87e19b24f940df5078dbe57c rubygem-rexml-3.2.5-167.el9_8.noarch.rpm 7da0d9630451de9340a8a3aff361005c9d008e68e0043df0f64bbfdc7101d28a ruby-libs-3.0.7-167.el9_8.x86_64.rpm 8e383318853614494688f1e22297c4a75afa1543bfb92732fd8e95dca197489d ruby-3.0.7-167.el9_8.i686.rpm 8ea9a46c5eedc39181197d96094b66c2bbd0ebeaa5584d0bae112c0ba98c78d5 rubygem-power_assert-1.2.1-167.el9_8.noarch.rpm a4b554f30d56b6384ca2f0958b8b778735673be5ab6dae9cfa8aab9b1675af77 ruby-devel-3.0.7-167.el9_8.i686.rpm a90c301bd536c15d820e886c4a0b9c09513a8162e9c26452e07c697cc7d2ffea ruby-devel-3.0.7-167.el9_8.x86_64.rpm b47609a8a9c3ed2fd88ce374ab00480d4449fc78225bbb82ebbf42e6829def5a rubygem-bigdecimal-3.0.0-167.el9_8.x86_64.rpm b54bfba6898c39458f1d637e5c7e5c51eef59eaa9fbb18149b939fd0cec86d2c rubygems-devel-3.2.33-167.el9_8.noarch.rpm d3ccab346eac191a14ce56c6f3a1583f82660109843bb6b87d5689667d18108c rubygem-test-unit-3.3.7-167.el9_8.noarch.rpm eaf12f6786174f3df73ce52fff9a051766214710dd2c3fc0647fa7dbe1b8745a ruby-3.0.7-167.el9_8.x86_64.rpm f38807520777e34461ef7c013d08642def78680898d44325ca9d9a1252d54f24 rubygem-psych-3.3.2-167.el9_8.x86_64.rpm fb65b955942c96b2bc1db7ea280595f3e393a27a77ef6a8c6cca059ad3d957bc ALSA-2026:33576 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default ruby-3.3.10-7.module_el9.8.0+272+38177c5f.i686.rpm 0062db4c697623f312c64740ee7bee5f7de8e56019c8aa73e47ba28c26606c3e rubygem-bundler-2.5.22-7.module_el9.8.0+272+38177c5f.noarch.rpm 050ae5833f13601f3e3620e8b6bfe00a8ac08572e240aa18877cfdcf7636eb0e rubygem-rexml-3.4.4-7.module_el9.8.0+272+38177c5f.noarch.rpm 058ab8321139dbe2ad614b2180ac3d17b2ec1cd1b50b79b9b5d548478b75cc0b rubygem-pg-1.5.4-2.module_el9.7.0+245+447713a2.x86_64.rpm 08e412278c4bc3ba8330aad4a3ea82ecb1b1ab64f127dee5b2bd9cb609b4808a rubygem-rake-13.1.0-7.module_el9.8.0+272+38177c5f.noarch.rpm 09b047092a29c9ceb785b0cb8701504ffe883ebe14d676a49640dc6f3520473b rubygem-json-2.7.2-7.module_el9.8.0+272+38177c5f.x86_64.rpm 0d6a8aa62d4e74559f6084f61ca682ee3f28f7ca664b9bfde027a960542e6298 rubygem-rbs-3.4.0-7.module_el9.8.0+272+38177c5f.i686.rpm 1a8e55b1dcb299fd48050517ab654bd1ac49a110255ee4a1566916c3f29a6b3b ruby-devel-3.3.10-7.module_el9.8.0+272+38177c5f.i686.rpm 1e01d4803394ab3dc990db284fdbd5c923cc6ab552048591305fbafbaf6f06bb rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 rubygem-io-console-0.7.1-7.module_el9.8.0+272+38177c5f.x86_64.rpm 22d2ed20c0421636731c30ab28520d5ec6cde7a5045f640ed8f484c00c3934d3 ruby-default-gems-3.3.10-7.module_el9.8.0+272+38177c5f.noarch.rpm 2b2409c0a88976ab1ff3b135a7873396c95acf4008330a7c1c8965a5a2853954 ruby-libs-3.3.10-7.module_el9.8.0+272+38177c5f.i686.rpm 358ec466cd2e59725d89b699a627097a07b447913f756da5ba3838202ece2d64 ruby-devel-3.3.10-7.module_el9.8.0+272+38177c5f.x86_64.rpm 4befdde527ec089ef737079ee4e8fd8a5d2422a48d15042e5d568ba8ae531830 rubygem-irb-1.13.1-7.module_el9.8.0+272+38177c5f.noarch.rpm 4cb89d1ae91bce6c146ce23a402e37891d07d6b03edc48428743ea97e2d55d92 rubygem-minitest-5.20.0-7.module_el9.8.0+272+38177c5f.noarch.rpm 4dda41986f898c4cc5d6449900bcf14f5d8d6102770bae01b0212474b3225735 rubygem-typeprof-0.21.9-7.module_el9.8.0+272+38177c5f.noarch.rpm 4f412d7b6b60ba0b33049ad7f7aff96b44b17e314c6b234bb7492d4799dfe34a rubygem-rdoc-6.6.3.1-7.module_el9.8.0+272+38177c5f.noarch.rpm 4f9317afdb2c41c923a3709cfe6265b75ec26ad20562412ca1cf258960c40913 rubygem-rss-0.3.1-7.module_el9.8.0+272+38177c5f.noarch.rpm 5119b49ff6186942466ebe4826d46a0b708af76472ac026a04f32540aba6243f rubygems-devel-3.5.22-7.module_el9.8.0+272+38177c5f.noarch.rpm 5306445a1de5ac24de32f5fe5c97fd1c50a0ce48d1f3ad2a8582a1cebe736494 rubygem-bigdecimal-3.1.5-7.module_el9.8.0+272+38177c5f.i686.rpm 557eca701795db1cab9f5234171f5e87614d24f7af2aeaae6f1f738ea7723eee ruby-libs-3.3.10-7.module_el9.8.0+272+38177c5f.x86_64.rpm 57c17e7fd92fec28ce6f48294bfbab27ce3bef0ca746160a980fb853315abd5e rubygem-psych-5.1.2-7.module_el9.8.0+272+38177c5f.i686.rpm 689acb7f375aa5850ae209d1f2147a34c651c752c2667e4ddac7d600fb46a6c9 rubygem-bigdecimal-3.1.5-7.module_el9.8.0+272+38177c5f.x86_64.rpm 6b71fea6cc4144a0edcf46d6468eac384756eedc765239dddbe32799f3b95d27 rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.x86_64.rpm 6bc622c1c7cbd8cf9624faba7760337096a143b4c787be6cfeda71eb7abda16d rubygem-racc-1.7.3-7.module_el9.8.0+272+38177c5f.i686.rpm 754b6dada519ebd5cebdb5feae9461970c664fbb97feafcdd20b36e4324cb682 rubygem-rbs-3.4.0-7.module_el9.8.0+272+38177c5f.x86_64.rpm 7bdd751472b7a468a74af0bbe7b984d7acf5a347aa3c01a79ce0f6251fe85739 ruby-3.3.10-7.module_el9.8.0+272+38177c5f.x86_64.rpm 7ddef491f34e3ed9764140398738e4db46d249e061d1dc690b33fcd0050997ee rubygem-power_assert-2.0.3-7.module_el9.8.0+272+38177c5f.noarch.rpm 805863e2f5c1a0560b9544fdc1c724fd4bff6d25f2318a9ad0e2de6e0dda3700 rubygem-racc-1.7.3-7.module_el9.8.0+272+38177c5f.x86_64.rpm 8cd8fc4ab82d06fd996e8554af1ce0132726030ac3d1948ca43a6c2aeb7b568c rubygems-3.5.22-7.module_el9.8.0+272+38177c5f.noarch.rpm a57844af1446e0e8d452f900533ec3a9d71aa3b5f22b8392dce7d2352cd73c3d rubygem-json-2.7.2-7.module_el9.8.0+272+38177c5f.i686.rpm acf4722ab65f7c8cf8de15800afcb77e4886827665b519a31dae43774170d739 ruby-bundled-gems-3.3.10-7.module_el9.8.0+272+38177c5f.x86_64.rpm bc69bc296c3faf28fbdb01583d687c6e8eede99f88440f964219e7d7c0eeee01 ruby-bundled-gems-3.3.10-7.module_el9.8.0+272+38177c5f.i686.rpm c2236a294c7981d92b4cf797e7dcae0293fed79997cd92ccc8472a7b95c63e3e rubygem-pg-doc-1.5.4-2.module_el9.7.0+245+447713a2.noarch.rpm c96338e6d5222b04fcb018874d6c36073340306f6f05aad2761a5a9b3a5b180a rubygem-io-console-0.7.1-7.module_el9.8.0+272+38177c5f.i686.rpm cd955b92ea2f52c25b9531058eb270bea15d430071a3e18417444392858300da ruby-doc-3.3.10-7.module_el9.8.0+272+38177c5f.noarch.rpm f5d18551d08e0327beefbb09aa69130e88e101c7452f0c986c8a1f97c8f1732c rubygem-test-unit-3.6.1-7.module_el9.8.0+272+38177c5f.noarch.rpm f6950cca9e12e1ac5a2bb9b0fff0ff05bcc305fd93f11445260d987d39df57f8 rubygem-psych-5.1.2-7.module_el9.8.0+272+38177c5f.x86_64.rpm f7fcab4ab0d658701e0e947fd4fdba59c0de17ca083a4072f5d70d5576117be9 ALSA-2026:33577 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-pg-doc-1.6.3-1.module_el9.8.0+232+50f6dd36.noarch.rpm 012587b1454988d3ae9e2df6f066e9a9582859f741daa26cc97f6ce56f7cc40d rubygem-rake-13.3.1-33.module_el9.8.0+273+a67497ba.noarch.rpm 06a27e8affb9bd0f406ec44b702ccaabd733cda95e6c3f44defb2cd9491e1c70 rubygem-racc-1.8.1-33.module_el9.8.0+273+a67497ba.x86_64.rpm 103eae979d4fe88cf10c4f9af0b5d5eca1e3b148ed84beb125c90683fce8cc32 ruby-libs-4.0.3-33.module_el9.8.0+273+a67497ba.x86_64.rpm 122e4a80a934e0ba9acbb6c466bca53adebecbe33e9dc76068150791784455ad rubygem-racc-1.8.1-33.module_el9.8.0+273+a67497ba.i686.rpm 15162273e454415ed312a98d47d6e5aa9910a205b4e67e0d777cf82b4f58854e ruby-libs-4.0.3-33.module_el9.8.0+273+a67497ba.i686.rpm 2890f099aba18885ef3b216ff9df164047d03bc23667a61d1b2f01115a32fd37 rubygem-psych-5.3.1-33.module_el9.8.0+273+a67497ba.x86_64.rpm 2984143dd18f3a28aaa48deb8da0fb2719a019ad4c9f58ba6494a343908e95ff ruby-devel-4.0.3-33.module_el9.8.0+273+a67497ba.x86_64.rpm 2e2bd56948b7697f6f562228e03a3d1b10e5cc95fc1d596ea05fe606978d276c rubygem-bundler-4.0.6-33.module_el9.8.0+273+a67497ba.noarch.rpm 3a9f0cf94a291fb73496f14f2e40d3e9f8ec6a41762999d54c7c9ded48371ea0 rubygem-power_assert-3.0.1-33.module_el9.8.0+273+a67497ba.noarch.rpm 4d9b03fc4afee5ea5633edf2632b0a9c51e022025cb920c51f0e5b64b3a7a645 rubygem-psych-5.3.1-33.module_el9.8.0+273+a67497ba.i686.rpm 54c13b16cb1c21d5a95cbc6e8c8750c660bf4b5ca9b5c8c4510e5ed9d66acd9c rubygem-rdoc-7.0.3-33.module_el9.8.0+273+a67497ba.noarch.rpm 629fd1526b2b869694dbe666d55591a3a5ef70195236f181e340f247353ed0ed ruby-default-gems-4.0.3-33.module_el9.8.0+273+a67497ba.noarch.rpm 65043c6771a3bb3e39b54da409df6194a670c045543513d1c305a34925e712fd ruby-bundled-gems-4.0.3-33.module_el9.8.0+273+a67497ba.i686.rpm 771a823d7f26480f8c0d923b8e749880e46567fbda966cd535dc49f5abb4d1ec rubygem-rbs-3.10.0-33.module_el9.8.0+273+a67497ba.i686.rpm 77267e211c4c8e503f3dd0775e1a1c12520476e470736150767312d8dbecca27 rubygem-typeprof-0.31.1-33.module_el9.8.0+273+a67497ba.noarch.rpm 794ec4ce25a22612e62ec9f20ae1aea445a924fedc045326088241d7117f2d45 ruby-bundled-gems-4.0.3-33.module_el9.8.0+273+a67497ba.x86_64.rpm 7b788e44986d5ecaa74f787ab30eb9280a85620613fd2a983aa18b2194572b17 rubygem-pg-1.6.3-1.module_el9.8.0+232+50f6dd36.x86_64.rpm 7f9032a32d75361237af186ee34fe7c85a8f586e859c8c4e02d26320b47d49d9 rubygems-4.0.6-33.module_el9.8.0+273+a67497ba.noarch.rpm 80578fc98e4588fcf494f58714eb883676198f36e15c38473c5ba05005b3ae64 rubygem-rbs-3.10.0-33.module_el9.8.0+273+a67497ba.x86_64.rpm 8c1f6d979641ec2aa5ed09bcaaa46648247b9419cfaa86a7f4f75068a01e0ef2 rubygem-mysql2-doc-0.5.7-1.module_el9.8.0+232+50f6dd36.noarch.rpm 97e11c128bce3071fdab6ecdaf0cc24053f436b72c10921807cbd89f4b2ff2d2 ruby-4.0.3-33.module_el9.8.0+273+a67497ba.i686.rpm 9b3807347acdf9ea27020617f7c861ee780ba159ca2fc26d2b03b2dab60e612b rubygem-json-2.18.0-33.module_el9.8.0+273+a67497ba.x86_64.rpm 9ca139a75a6e7c700d238f5ff3ce052d93f730700a0e42f3cf05dacddc01a7ed rubygem-json-2.18.0-33.module_el9.8.0+273+a67497ba.i686.rpm 9d17b211997d6066aae09789b6d623c512dbabbf5ae678f9d7a0a0a362ed3fa4 rubygem-io-console-0.8.2-33.module_el9.8.0+273+a67497ba.x86_64.rpm 9d4edac04fedd43f16543237c0c334212da1c764b22607aa20de7f2914d98625 ruby-devel-4.0.3-33.module_el9.8.0+273+a67497ba.i686.rpm 9f9df320ad425aa4750f1da880fb01d85f6665fef4ee92a494a9a661ea8cbca5 rubygem-bigdecimal-4.0.1-33.module_el9.8.0+273+a67497ba.i686.rpm a6ac758bc426403d4ce4becd12abb91672b838e9c0c4a8cd111e21e2564a76c7 rubygem-mysql2-0.5.7-1.module_el9.8.0+232+50f6dd36.x86_64.rpm aee9080e7e16dcdac40af6fc172e19d5448a0f46c5f752183651f4660fa4e9cb rubygem-bigdecimal-4.0.1-33.module_el9.8.0+273+a67497ba.x86_64.rpm b4a28a7b346ed19e466e5775aea65286396cd28f48c3941fa2db729c80d27e4a rubygem-test-unit-3.7.5-33.module_el9.8.0+273+a67497ba.noarch.rpm ca3a0e27b2d4570d2bbd80a704f5dbdd2022b34d3084d6494c9880b8db733044 rubygem-minitest-6.0.0-33.module_el9.8.0+273+a67497ba.noarch.rpm ca79e939abba640f76c4c062157183efbb98111a4b7e701b02f12eebe19033b0 rubygem-rss-0.3.2-33.module_el9.8.0+273+a67497ba.noarch.rpm cd0b635abb6b71102d76a58a0641e9eb870ea8467903b4a0a9604b7afdf5fd9f ruby-4.0.3-33.module_el9.8.0+273+a67497ba.x86_64.rpm db0e4a77ed3bbeb504f3ca7c854eaefaa864869bf78cf835b1fb14d0e187c095 rubygem-irb-1.16.0-33.module_el9.8.0+273+a67497ba.noarch.rpm e4ea6581167549409ba6b667f1938ddeeeb0d4cb9fb1ba166c0571aa2322a179 rubygem-io-console-0.8.2-33.module_el9.8.0+273+a67497ba.i686.rpm ed5dc5ef4db84fa37e0a51a47aecd27323dafde2b580d780698d43515ee4f6fa rubygem-rexml-3.4.4-33.module_el9.8.0+273+a67497ba.noarch.rpm ef054123eb535f182ea93bcd1f450bd57d477788ced7665fb5bcae658dbeb3bf ruby-doc-4.0.3-33.module_el9.8.0+273+a67497ba.noarch.rpm f4cef4fec24644f99973e28610d0dd30c300be7fd6c46b1f9bb66d64058c3e95 rubygems-devel-4.0.6-33.module_el9.8.0+273+a67497ba.noarch.rpm fa6514837e26ce65192011cb0a76da4fc20715fb53408b005f4021a3c212c91d ALSA-2026:3359 Copyright 2026 AlmaLinux OS 0 1 Important

python-pyasn1 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-pyasn1-modules-0.4.8-7.el9_7.noarch.rpm 185f28965ad6cc22b7e1767295b2443e3d13e8d9d8af115978aa137f5d3b4dee python3-pyasn1-0.4.8-7.el9_7.noarch.rpm eff31a478fa68dcb64c7c6c3c391eb6f137e148de9738698d9fab752e84f4c82 ALSA-2026:3405 Copyright 2026 AlmaLinux OS 0 1 Important

libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): * libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801) * libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read (CVE-2026-22695) * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libpng-devel-1.6.37-12.el9_7.2.x86_64.rpm 0ba9c4bb118d9df97fdc0b98612cca371105d637f7e64828f6ef6678a41357fe libpng-devel-1.6.37-12.el9_7.2.i686.rpm 0c704b37749c27fb4f129158a5bd4dc9a5c964f4f67979d7be77cfc5b1b6d26f ALSA-2026:34156 Copyright 2026 AlmaLinux OS 0 1 Moderate

rrdtool security update

The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create applications using its Perl, Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data density. Security Fix(es): * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation via unbounded DS/RRA arguments (CVE-2026-43958) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rrdtool-perl-1.7.2-22.el9_8.x86_64.rpm c731bcaebbb4e384fb48f556cfddf37beaeead949f03969055841090d2ecfa80 rrdtool-1.7.2-22.el9_8.i686.rpm e235cfe61a8c2f912489a5673faad4e242001194d3fe4da3bf3569f7bccae45a rrdtool-1.7.2-22.el9_8.x86_64.rpm f33be890b62d467242375d0427f1aa7afe120c9aa53cc7e20dbb05007978ce6d ALSA-2026:34359 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154) * github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151) * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default opentelemetry-collector-0.152.1-1.el9_8.x86_64.rpm e05fe987bc690d3afe668c592856240e6ec49720b9d051493aaff9e9ddff0931 ALSA-2026:3488 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168) * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085) * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default rv-5.14.0-611.36.1.el9_7.x86_64.rpm 0514f124ac194e55992e30c758ac672d875d52a3d1432f6ae57e662b6fa4bc8d kernel-devel-5.14.0-611.36.1.el9_7.x86_64.rpm 30224a3e54327adc6f0450ac4a620b985ae2db94d56375593f36f8f45c0cdbcb kernel-debug-devel-5.14.0-611.36.1.el9_7.x86_64.rpm 38d540471a175aa1a9dd232b1e9de2f570e2f5a197407e40814c0a8778c738db perf-5.14.0-611.36.1.el9_7.x86_64.rpm 3af686d08d28ad90e0ddfd9787f83efe142b85ebec376e4a043a24b0762bbb3c kernel-debug-devel-matched-5.14.0-611.36.1.el9_7.x86_64.rpm 7d3202850f4dffa85c49589db56fb09cf180e361ffe59b52693b82c68d005924 kernel-headers-5.14.0-611.36.1.el9_7.x86_64.rpm a5c3f36bc3624dd4d5579200faec7452f78da2af1af2841369ff257599f4b084 python3-perf-5.14.0-611.36.1.el9_7.x86_64.rpm ab3fb813e1fdfb9c6ee1138352f9a3106560d6eb7f5204f48d2dead921d5db7d kernel-devel-matched-5.14.0-611.36.1.el9_7.x86_64.rpm bd1bc78de0096ca25406606955de22aa2b32936838d8276dfcf2008b50da3d6f kernel-doc-5.14.0-611.36.1.el9_7.noarch.rpm c5a4c443e64ae4995e8975ddff5642b01b33428d15f6bd6c06b89e94ba479e83 rtla-5.14.0-611.36.1.el9_7.x86_64.rpm c86434f6605558592079f54f86519a42306de8433fedf527a93f77f5c755b095 ALSA-2026:3507 Copyright 2026 AlmaLinux OS 0 1 Important

valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts (CVE-2025-67733) * valkey: Valkey: Denial of Service via invalid clusterbus packet (CVE-2026-21863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default valkey-8.0.7-1.el9_7.x86_64.rpm 1a94806c1a8134e23842f55dcb2e0680f42dbcc2306a1f4a8162c2067baf798a valkey-devel-8.0.7-1.el9_7.x86_64.rpm 21ada768383e0c835966670442b01c4470a874acde7114da75278d47cc6fa7d5 ALSA-2026:3516 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785) * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793) * firefox: Undefined behavior in the DOM: Core & HTML component (CVE-2026-2771) * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774) * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776) * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781) * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766) * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769) * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787) * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768) * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783) * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784) * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759) * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762) * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761) * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777) * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790) * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763) * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792) * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786) * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789) * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760) * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772) * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779) * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767) * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764) * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765) * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780) * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component (CVE-2026-2778) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758) * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791) * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default thunderbird-140.8.0-1.el9_7.alma.1.x86_64.rpm ca31e26bf94e762932f64e1d00b601cb57aa6ade172802b40c5f51adcadf9105 ALSA-2026:35828 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-10.2.6-23.el9_8.x86_64.rpm 3e02e97025b67cf4e1d7c6e9006b875c50d3b446c62162d8f3df0f23db689c89 grafana-selinux-10.2.6-23.el9_8.x86_64.rpm a9d328526d8af2375f7cd0b7dc670a9e920ed7df8681acef9f70b61d9ab247e2 ALSA-2026:35829 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-pcp-5.1.1-17.el9_8.x86_64.rpm d33a1acbb9a4488a85746b0fb5c064bd08bbee835501feef8613770fa199fcb5 ALSA-2026:35891 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (CVE-2026-42338) * undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151) * undici: Undici: Information disclosure due to improper cache-control header parsing (CVE-2026-9678) * undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733) * undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (CVE-2026-11525) * undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697) * undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734) * nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames (CVE-2026-48619) * nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling (CVE-2026-48930) * nodejs: Node.js: Unauthorized file metadata modification (CVE-2026-48935) * nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() (CVE-2026-48933) * nodejs: Node.js: Certification validation bypass in TLS host verification (CVE-2026-48934) * Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency (CVE-2026-48928) * nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling (CVE-2026-48615) * nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch (CVE-2026-48618) Bug Fix(es) and Enhancement(s): * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-9.8.z] (JIRA:AlmaLinux-186580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nodejs-devel-24.18.0-1.module_el9.8.0+277+61fc613e.x86_64.rpm 1d19a13bb45469fc60cceee42d3dce8ffe73d7bd7583c68395467a46dfd76a92 nodejs-libs-24.18.0-1.module_el9.8.0+277+61fc613e.x86_64.rpm 2203bfbd6b1620b46b138f89a147ba10e559a305467a583fbf39ed533f486dd0 nodejs-24.18.0-1.module_el9.8.0+277+61fc613e.x86_64.rpm 382ea6f2540746d1529e70c14d948bfd4d4d11bedbff4c6611a0582f5cb5da86 nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.noarch.rpm 6688ca82e36c7f78fe80655131c4a7fad6d4c7b9c851130cb6202a27b946c979 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a npm-11.16.0-1.24.18.0.1.module_el9.8.0+277+61fc613e.noarch.rpm ace4b9e51c9ab9bcaf5f6ba5ecf44f9f7d86c93508085ffb7326fffc3b897cc1 nodejs-full-i18n-24.18.0-1.module_el9.8.0+277+61fc613e.x86_64.rpm ade1f52b937844add774a59a8b0cbb7a8fca4fcc2b43d84ed2abf93a633c1038 v8-13.6-devel-13.6.233.17-1.24.18.0.1.module_el9.8.0+277+61fc613e.x86_64.rpm bb817030a485ab91213b39287c2122f672cb361947ed8e5b627d3ebc1c6ca5ff nodejs-docs-24.18.0-1.module_el9.8.0+277+61fc613e.noarch.rpm c5a5530de75944a2fbe70c1c64475e26c1bbac2be3d1ad947e0dcd8681aa70d5 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 ALSA-2026:35892 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (CVE-2026-42338) * undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151) * undici: Undici: Information disclosure due to improper cache-control header parsing (CVE-2026-9678) * undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733) * undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (CVE-2026-11525) * nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames (CVE-2026-48619) * nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling (CVE-2026-48930) * nodejs: Node.js: Unauthorized file metadata modification (CVE-2026-48935) * nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() (CVE-2026-48933) * nodejs: Node.js: Certification validation bypass in TLS host verification (CVE-2026-48934) * Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency (CVE-2026-48928) * nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling (CVE-2026-48615) * nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch (CVE-2026-48618) Bug Fix(es) and Enhancement(s): * nodejs:22/nodejs: Rebase to the latest Node.js 22 release [almalinux-9.8.z] (JIRA:AlmaLinux-186622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nodejs-full-i18n-22.23.1-1.module_el9.8.0+276+8b329b47.x86_64.rpm 0826d4d394471548f6fd50fc5241ee70a23bd870dee7c3289d3988cfc308aa6e nodejs-devel-22.23.1-1.module_el9.8.0+276+8b329b47.x86_64.rpm 651359f67f9b0e2ce1241e82d499ed927e9bd50830f47e820def150336006c57 nodejs-libs-22.23.1-1.module_el9.8.0+276+8b329b47.x86_64.rpm 67d283c70851990e09324128deb0c64fea0cdb8bcc1c73fff5eab0f1ced628b9 nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 v8-12.4-devel-12.4.254.21-1.22.23.1.1.module_el9.8.0+276+8b329b47.x86_64.rpm 6de0c4b18aa633d4ed734fd0d28e79fee9fb4788910ecfd2728762f3451b64a6 nodejs-22.23.1-1.module_el9.8.0+276+8b329b47.x86_64.rpm ad83ddc300ce082fddf6ed99213840c9455f8246449a709392d81b75920e4cdd nodejs-nodemon-3.0.1-1.module_el9.7.0+208+fb06c0ab.noarch.rpm b32744158c91e29f4466c2e744a254de07ebfd0471383b6a1a5b556d3529fc33 npm-10.9.8-1.22.23.1.1.module_el9.8.0+276+8b329b47.x86_64.rpm bee0dca4c165ad6b660f128d5c96dc2e7f116f3665f662df4d15c8d2906c57be nodejs-docs-22.23.1-1.module_el9.8.0+276+8b329b47.noarch.rpm c6286fb14b457a558bdc65b14bf9f8056ffd2913dcde7a930fd306cf581bdf8a nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:36018 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rv-5.14.0-687.22.1.el9_8.x86_64.rpm 03ed55729c6eb293826dc7c14b44aefd01d280c11fdf4f044df2a3d4396c715d kernel-debug-devel-5.14.0-687.22.1.el9_8.x86_64.rpm 04d4781659d21b4df04b25ec4d32b11ab78d56ad6bd8174bf92e21567d7ae527 kernel-devel-matched-5.14.0-687.22.1.el9_8.x86_64.rpm 473899e18e50a787c918b5bc6d30a32d679a60213f615e4f8795f6c721c958f8 kernel-headers-5.14.0-687.22.1.el9_8.x86_64.rpm 4e2464c0b09211fd64136b0cbe32985fae2f95eb18e10abd6383e3f68797b822 perf-5.14.0-687.22.1.el9_8.x86_64.rpm 5d9ca16b823be4004f58528d02672135c95f95d863c18e6c026c407c158aebbf python3-perf-5.14.0-687.22.1.el9_8.x86_64.rpm 939dff152ed0f329ee035d72a940219f479c7b9d6c929bf47bb0856005949e98 rtla-5.14.0-687.22.1.el9_8.x86_64.rpm a127826a66917f77ec4d15ecdc5a33d5bf2718ed645a61360809af81dcc41b79 kernel-doc-5.14.0-687.22.1.el9_8.noarch.rpm bba4f9c48e614ac5facc9cd9584f1bd336725d21dc71d24ccbe59e97cf1fe63f kernel-devel-5.14.0-687.22.1.el9_8.x86_64.rpm e045191b9096d71ecafa866237e820a5256a551f626cc871ebc2bd079ae2ac65 kernel-debug-devel-matched-5.14.0-687.22.1.el9_8.x86_64.rpm feb4be0e0c2ef8c4de293b3b1bcc209af3a1f05d10a4834de5928664a3376c81 ALSA-2026:36195 Copyright 2026 AlmaLinux OS 0 1 Important

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610) * 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-lib389-2.8.0-8.el9_8.noarch.rpm 1022a7bcb738465acebfefd3cee5251b0570838eae57563b936e0e86030043a4 389-ds-base-libs-2.8.0-8.el9_8.x86_64.rpm 7e20b081ef9400bac6d010585f651d4afaaa1a59fabe7ea652c5c3f00024dd1d 389-ds-base-2.8.0-8.el9_8.x86_64.rpm afa7a559f38d3cab6b7d4d4bc5daef3f064e0f2d729102f792d32a2560c3b175 389-ds-base-snmp-2.8.0-8.el9_8.x86_64.rpm cec0b482081197af5d328bcc3cfa458435fd282225b9a2e06b81e5da86b85e4a ALSA-2026:36210 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (CVE-2026-50031) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default freeipmi-ipmidetectd-1.6.18-1.el9_8.x86_64.rpm 3e6dc1ae70c852f4857307f58ea7c3b0d136bfa0378e5b048d6f3916df1b06db freeipmi-ipmiseld-1.6.18-1.el9_8.x86_64.rpm 84bb6c7b2ace7161d2fe75aba7a61c1935f4d1a5fcf3cf0d326029702437e45e freeipmi-bmc-watchdog-1.6.18-1.el9_8.x86_64.rpm a31fc013c04da9d846c6e2f35be7c8b2a58237a4fe8a642b22aaf7c504fc2750 freeipmi-1.6.18-1.el9_8.i686.rpm b8733da69de6daca55969ec73f18c864ef1b9b57f6eb2f42d1ac22191c42cf0f freeipmi-1.6.18-1.el9_8.x86_64.rpm f40525ca43bcf95398ce1766be1a6f4cdbfa701ac2aa6a8c566c0e1b81a003e1 ALSA-2026:36315 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14-pip security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (CVE-2026-8643) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-pip-25.2-3.el9_8.5.noarch.rpm 3b05f65fd48d6f30f49fe2e3d980cf42230cd0878772bbd374e8a54cddd51190 python3.14-pip-wheel-25.2-3.el9_8.5.noarch.rpm 86909c297af71c0c2bb5b22b0d411ef3f12434c764e4d7b933347d0e69d4be7c ALSA-2026:36317 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default skopeo-tests-1.22.2-7.el9_8.x86_64.rpm 5720b101162905fd53eccc2c9d7f5dd07fffcd4ebb39407cf79cf3e2734e747a skopeo-1.22.2-7.el9_8.x86_64.rpm 5cdeb2f433160e0e9882e562533d0fccf743e202f55b4163485280eae9ce11db ALSA-2026:36318 Copyright 2026 AlmaLinux OS 0 1 Moderate

aardvark-dns security update

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`. Security Fix(es): * aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset (CVE-2026-35406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default aardvark-dns-1.17.1-1.el9_8.x86_64.rpm 6189aefafcd26c49693df81d7fdec6459005a94e3a1201a52d37c68db3ac5647 ALSA-2026:36331 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) Bug Fix(es) and Enhancement(s): * nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-190800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-mod-http-xslt-filter-1.20.1-28.el9_8.4.alma.1.x86_64.rpm 0c3d86ce5158c7cdf316eafb67fb1e887db594331e984ccf2ee406b9501a50ea nginx-mod-stream-1.20.1-28.el9_8.4.alma.1.x86_64.rpm 3540dfe10a5be7ccd213eeb0ac4f8a0a9a65d27597d045a309887fc5c29f79da nginx-mod-http-perl-1.20.1-28.el9_8.4.alma.1.x86_64.rpm 6be06086f733cdb7a2a2f82c0ec0ab5aa50e209bc6431c762e04ee6aa324a22f nginx-all-modules-1.20.1-28.el9_8.4.alma.1.noarch.rpm 8665b30d7efc8fb465161906dfc71481ce9fcae1abc34d23a76bad6a123e214e nginx-filesystem-1.20.1-28.el9_8.4.alma.1.noarch.rpm 8c0988d8ac95a3a733ba01e39ce1a88f106bba6456f114a97696d2ef4dc0eb68 nginx-1.20.1-28.el9_8.4.alma.1.x86_64.rpm 8cc0a6d551d2d1019807b26f072312bd4e8f2c9728d408ae83728a6434dbf6ff nginx-core-1.20.1-28.el9_8.4.alma.1.x86_64.rpm b9a1309add4d111b780144adc7c599b67820f2459d206e616b857bb1ebef72f5 nginx-mod-mail-1.20.1-28.el9_8.4.alma.1.x86_64.rpm c20e5ec27052502ee3595a8a0174305bb7544ceecb0f8e90329906d15c0edcef nginx-mod-http-image-filter-1.20.1-28.el9_8.4.alma.1.x86_64.rpm e519f0ec61c27cbdc3338f5a84468939b4ab0e3a447ab0c751d2630070156ff1 ALSA-2026:3638 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nginx-mod-http-xslt-filter-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.x86_64.rpm 2fd6ff9e31638b269a7cea01fc87b66be1d8f153ee996c6e7d1bff6fc17a10b1 nginx-mod-http-perl-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.x86_64.rpm 3714cfb6721c1dcc58b2c41a1cb530101acc08668c13a189083738bb706f9438 nginx-mod-mail-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.x86_64.rpm 499491b648d9128be1f0a1360cad1bb5f975778e1effc6025a914caf2697264f nginx-mod-devel-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.x86_64.rpm 49b50a83c6f7e81a5134e4e73d0cfc671d98e6b5f47a15f57e1c620dd97d00b8 nginx-filesystem-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.noarch.rpm 5a3f5b22c1ebb25c16a8d580f17b5b555ef8fe552a3987514f70542f23ed706c nginx-all-modules-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.noarch.rpm 8dcb64f1ff3f4826abee42be90fba7e110364045aa78cc7cf1b73ddcc937e492 nginx-mod-stream-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.x86_64.rpm 96f22e3c36be2b993411fb3ac200eefc0a2afdf874bf5f0621904a022da95ac1 nginx-core-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.x86_64.rpm 98c2739f4f430ac5891c4b594325ec32dadc92626bef4508d0efa89f4ec5f89b nginx-mod-http-image-filter-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.x86_64.rpm af628ccc3c58a6e26f21590f4f13c765f44f7b0526ce43a8fb6de995218143ae nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.x86_64.rpm c8d1084b5eb5e52fb47d76f5d783d1a924728c90eec556d5c697b7a818c608c3 ALSA-2026:36617 Copyright 2026 AlmaLinux OS 0 1 Important

oci-seccomp-bpf-hook security update

OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default oci-seccomp-bpf-hook-1.2.11-2.el9_8.x86_64.rpm 5039da6b134add93967658be3546d85e3cd2106dc6a3d5bae9c39e441eaa981d ALSA-2026:36618 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.24 security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) Bug Fix(es) and Enhancement(s): * nginx:1.24/nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-191773) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.x86_64.rpm 085bfa0210acef9a5e7cb843fd2486ac5ed5dfc44112cb12b0a2883523714b42 nginx-all-modules-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.noarch.rpm 19456fe1d88b5010becd6fb7fb15d91883d58c25c15ae8f09eda7292be441940 nginx-filesystem-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.noarch.rpm 2d154b2847267c46570d522255c6ccf3cd2a83f1def6822328c01b88aac76aa5 nginx-core-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.x86_64.rpm 3563025f3e2b476aaaaa1a8e6431ed720570b7f940f5c8fb1d21c373d5128293 nginx-mod-stream-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.x86_64.rpm 7055a9bac3cb44132c7479f9ef70eb88e8baedbfef43799c47b3225f28a9cc0e nginx-mod-http-perl-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.x86_64.rpm 7cad86c60ce531511be802bfc2c154a9ab2eae592247f13f324fbb09941307ba nginx-mod-http-image-filter-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.x86_64.rpm 9143f12842d4f2426304ad95f94ad53d5bfedea67083a13470f772504258a157 nginx-mod-mail-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.x86_64.rpm e9c9bd793dd1644e71f498c450b0de93015e2e2749eb9557d93f719e6a77316d nginx-mod-http-xslt-filter-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.x86_64.rpm f0efe139a5268898d5d1e2ca3bf27b2f20118542951cf6e9beac79a7dd4795a6 nginx-mod-devel-1.24.0-7.module_el9.8.0+278+b57266e8.3.alma.1.x86_64.rpm fbff4630f1e65feca4136520e0ed6f8c157a07ff4f9c9b0fcee22fd7f7d7eb20 ALSA-2026:36639 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.26 security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) Bug Fix(es) and Enhancement(s): * nginx:1.26/nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-191774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-mod-http-xslt-filter-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.x86_64.rpm 070ed1fd4d7d1fb5c70db9102c4aea0ae1037324399e12812768eef79f12f145 nginx-mod-mail-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.x86_64.rpm 3754299720ceca0e75c6a37e31efef8dabeb82165497da33d5f2e5e11fa1b483 nginx-mod-http-perl-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.x86_64.rpm 3fe19a3a728ede0de4a0162fdc6cfd4938ecb1fd6428b118c9dff83e647ccd76 nginx-mod-http-image-filter-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.x86_64.rpm 82a8965b2803997c3299a69f70f012061471496f4f17cab72112feaf62d7f351 nginx-all-modules-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.noarch.rpm 88730ac825490f706a8a59483ef93af7b86d2fe28e8c2451a142029a8a963731 nginx-mod-stream-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.x86_64.rpm a692a4ebf8f4db14b35b9f827b9d158887dda1fed26740bc95f01573d2cef045 nginx-filesystem-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.noarch.rpm a6fcef132f9a64e3040a525037819bab499ab63d692dfe6ac1589b0363351934 nginx-mod-devel-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.x86_64.rpm cc0e2d9b3a8c84ce1365de99efc6ce3d6cb91af53729a37c86f881a03ace2b66 nginx-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.x86_64.rpm d0db7ca1b554b26a5afc24f1d186bc6bd61f3f2cbc1e81ebd784fac14f6c5c35 nginx-core-1.26.3-9.module_el9.8.0+281+75d5e6d4.2.x86_64.rpm eed1dafe38aadf3ce2ba67190fb16026bd0b8847ffbc774ec7a0f3bf3c860f32 ALSA-2026:36645 Copyright 2026 AlmaLinux OS 0 1 Important

kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266) Bug Fix(es) and Enhancement(s): * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [almalinux-9.8.z] (JIRA:AlmaLinux-182344) * [AlmaLinux 9] Bonding reports unknown speed/duplex for tg3 interface [almalinux-9.8.z] (JIRA:AlmaLinux-182768) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-devel-5.14.0-687.23.1.el9_8.x86_64.rpm 08bafa8aa98b827cca80d506008419d140080ffa78e0d664192ad2afcdcd5eb2 kernel-doc-5.14.0-687.23.1.el9_8.noarch.rpm 0bec269327c0cc792d25ad644d3649cd96f2a6b21c893bd78c488e40eba1060f kernel-devel-matched-5.14.0-687.23.1.el9_8.x86_64.rpm 248a6be97ab3103246a4a1f9d78560c039cc8ff1487cadcc36854a410eb8e8d9 perf-5.14.0-687.23.1.el9_8.x86_64.rpm 3f8dfa6e97dd100126f0f63b8633de0debae080ba4606df1084a4dd4ccc4cbe5 kernel-headers-5.14.0-687.23.1.el9_8.x86_64.rpm 4e662a5c0e4b3da9c688af570d7639ede17289bbb22817e484063e2d6fa7aece kernel-debug-devel-5.14.0-687.23.1.el9_8.x86_64.rpm 5b80e3689e65ff6e02ed059138e8c9605fb3c256fd34196665a8b67e6835841e python3-perf-5.14.0-687.23.1.el9_8.x86_64.rpm 6bb12fb777262b6f08c2bc56d8514dd35bb58f079a9b944745684febeb7c1ef8 rv-5.14.0-687.23.1.el9_8.x86_64.rpm ec3e974c9eeb4fbd95f24a39e5cee7315cedae8c904b124b763c4669c98f72d3 rtla-5.14.0-687.23.1.el9_8.x86_64.rpm ee20013f43bcc5535a6af7cd32b80ffa270985397b40e265cb8e6fb1b96c1782 kernel-debug-devel-matched-5.14.0-687.23.1.el9_8.x86_64.rpm f255b6b37c0626c1dc521aae02a665d69c2fae7a83c188b4932f2c82b71d816d ALSA-2026:36674 Copyright 2026 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL. Security Fix(es): * gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser (CVE-2026-53703) * gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser (CVE-2026-53704) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.1.x86_64.rpm 3d772ab7ea148f6ad67a01cbe259cbfb59b3792f8677cf8b3455c1d3cad568ef gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.1.i686.rpm 44a194460970a1ae60a7e02504e5d57432c59dbfc844abc9efd07501a75bf782 ALSA-2026:3668 Copyright 2026 AlmaLinux OS 0 1 Important

go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fix(es): * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default go-filesystem-3.6.0-13.el9_7.x86_64.rpm 821b4792e2a078996c6411cc23e6ceee780a1d204a116e537c285fea1d5b2de1 go-srpm-macros-3.6.0-13.el9_7.noarch.rpm a8c6d9c83a99b5a1a2c97245231465840ca92610087c1f6fc97c2ca2baedf49b go-rpm-macros-3.6.0-13.el9_7.x86_64.rpm c52c36fde80777b8a333511b3bf4da30f21154fc5dd87450b4b8867e7ca1c983 go-rpm-templates-3.6.0-13.el9_7.noarch.rpm ec55a8ec96c689ee62e71bb540e6522865cda785bcf3a9e23491a42b3c6a1e0b ALSA-2026:36777 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Denial of Service via excessive EDNS options (CVE-2026-41292) * unbound: Unbound: Cache manipulation via 'ghost domain names' attack (CVE-2026-40622) * unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets (CVE-2026-44390) * unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic (CVE-2026-42534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default unbound-libs-1.24.2-3.el9_8.2.i686.rpm 48cc80caa9e995510ab8a454a7fb6f02a35851451114ead47eb0b0e79049ac75 unbound-dracut-1.24.2-3.el9_8.2.x86_64.rpm bc771cf8f33d3807e14e2ed1019b85a7679f753a9d62c5edeaae6b42d58b9246 python3-unbound-1.24.2-3.el9_8.2.x86_64.rpm c3bcc1c8626ad89c81f77756c156739755341a89b397af61e28605ff72fc92af unbound-libs-1.24.2-3.el9_8.2.x86_64.rpm e03730a14bd0749dacacc8ec5233871b0ad00cf7e2e18489d9b9c03743e8b60f unbound-1.24.2-3.el9_8.2.x86_64.rpm e68d297863fc0358bc1a3c16e4d6ac0edd83622b8f380c6bc4a7b8437f7e7516 ALSA-2026:36832 Copyright 2026 AlmaLinux OS 0 1 Important

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation (CVE-2026-8357) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libreoffice-langpack-th-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 0001a03b1a9561247b7a8bb3bcd48449d68ebb7c118544645426ddb7e1fa71d0 libreoffice-help-he-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 00777d923f8e45ab18f37cfe2ba70c5e598404dbfa8368cb87aa1b6054fc43f0 libreoffice-langpack-sr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 00f7bb0a4846ade45cdad5ca8f6c8f97d87861d772111d091724d9e5990b0900 libreoffice-langpack-et-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 0208e69cfcc527d176b3ec191e0d0301729953a37097d01879ed004d9ce9bfb2 libreoffice-langpack-nn-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 03ea501e714d82482b9fb2248ca5b28ee83e69cc0822941be82ee29b4a4598a5 libreoffice-help-ar-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 0439b18f2cdd09edf6f4d50305879e94678266358ee8a2a8a32e72239a894683 libreoffice-calc-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 0512459e9d145de4eb9ea2a94beb59fbe23f15953e639525b37e6d77d0f7aacf autocorr-ru-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 05a2912d61bca8cdf15aafbbe3c22b8ba57c829f11c47eaea9e59a2d832e6b17 libreoffice-help-et-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 05feb0960a6c5d4b67f9a96cb0a2dda974ca4cbd7fd94d5bbcad451c1baecd93 autocorr-fi-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 077f5efd706abe6754803affcacd920658ae2a1be358d40d446cc40a2f6b0748 libreoffice-filters-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 07d1a589758f33ea9c8119920db4836bfa3dc0da31598b21730a66adb76066ba libreoffice-langpack-zh-Hans-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 07f8e37fd6ae26656ba5918bd35ead99549967d89e98948b4c107d0dceaacb50 libreoffice-langpack-ru-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 07fd252bb7439ac008147accc13df84e845c0228edc77abd1d00fdf3096dfbe5 libreoffice-langpack-ss-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 084790671191a2ed3e6932a3215d05a3ef47d07fb8c44cd092920b76a4dc6eca autocorr-ko-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 092af5389a1039e58950bf93de80e94a9c8f85115acd3464d8aca88056613c82 libreoffice-math-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 09cbbef42efeba3563abee1c73fc5f355d441b354b1acd5c259cf774db4aa7c4 libreoffice-langpack-br-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 0ccb92ea88a770867a0fd3eafe54e62f2cfc98a957a23e9824ec4758016a2020 libreoffice-help-gu-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 0dc5494caaa4e4f868877e4d0945f6599e22b088054445ca8ade943d7ce7e25b libreoffice-help-hi-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 0ff8fb2d3410d83e9b7d986d1034190ee0a5c03b3ffb16a70b1d1c95276ac951 libreoffice-langpack-tn-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 1045e23d59effc69a1ec97b82c7c3ce27dd621c8b5c75684ebf0c41bf68e53a3 autocorr-hsb-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 11e2e90115c06350ae9d35c25129268a3e38dcda36192a5bbee57831ff29a547 autocorr-bg-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 131f464f777ae5aa40747ae25a5c6b39411b7d6e2fc0fc1d477144fb793588e1 libreoffice-help-en-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 1486ef42126004d25da27f2e6a5a0288d75b0f05a7b0ca32ba132cd0297371d5 libreoffice-langpack-fr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 1491f130180e21ea1a3129fe92509e184d0cf685c99ec002deab9a69933a1230 libreoffice-help-pl-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 15546bc92523a6d9b6464f1d7688518274e2632cbe802e6703b66c4eec1fcf42 libreoffice-help-bn-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 16adab766e85a7863c5d6c968f7591db26dd07bf3563544dbd5caae93ff401df libreoffice-opensymbol-fonts-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 174388abe33af674b8b4336a25786bfec5226cab90aef4e25726d55b320c8927 autocorr-dsb-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 1745674717fb32e5a390cb1b013404f2d2235f69e986a12b0313add3ac579028 libreoffice-langpack-sv-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 18d1be3acb6a19f880221d8d57d28f8ee82a0da54ca80b7084511216e089e4af libreoffice-langpack-pl-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 1a433959b990ee910dc503a8aa1bb9b15985b395d236fe1057a2cc80bb28b396 autocorr-sk-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 1ba54f6eff31cff16a4fc3e3ea5c045bdf8613f31f7771698a58eaa04f1c56f5 libreoffice-help-ja-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 1cca0e543e0ee862467c5308fb57de25e5e1dc62f3c541d64ef218472e50d4d5 autocorr-da-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 1e835eac3643b34586394a3a4f0e05085f70d10aee16500247047bbbb71e0bad autocorr-vi-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 1f9807142c833a5c4f75e8b9ca74b35d4401ee3db549352f713be60a894fe30b autocorr-nl-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 23c68cff69b8a925aaba7fc9394f6303282213ddb1fd2dbc61c4673c427c38db libreoffice-langpack-gl-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 24d702c4d720506af4ab30ba74f6a622e99145623e3f121063963be23e8a4d73 autocorr-es-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 254d3bfb8310e5bbd1abb9a1f64eb066d69684697c3cd6434aeb9a7979713bf1 libreofficekit-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 25d61ed4a72546a603b850ce47cb3900a7c7986f89e1d7f0f68237839f32367c libreoffice-langpack-xh-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 2a0b4d2f7fb687e191cb264ab9bcd929a99b9565dceb1ae6a7648b83db8e7214 autocorr-hu-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 2cfebce0350bb87d327e39caf3bf63c4cb20bb808b623a6f3466e1e0db7103e1 libreoffice-help-fi-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 2d22b94ffeda316563446c434a56b2d69610fdefbce2e9e6807ea17ebcb939ce libreoffice-help-es-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 2d6abb59534748047dcc80a19c74f6089668a6b4003056bd13e1135bf43ac569 libreoffice-help-pt-PT-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 2f893db7d081095e8ef0c582e4cfa4148ae90a4fa547b07572c925d26be83e87 libreoffice-langpack-sk-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 2fa6cf8ba2276e9d907ae6e56789d032905dd2acec47e74a327f0bede1db3838 libreoffice-impress-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 33a2f9b91466f75b9f62b4c19f5ec2031826fc994afdb20f8dc87f1b53a030ff libreoffice-ure-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 3503219015c2ca49b2a6ff74d8d3628aa39d2d3fcb6187f3fbe653fbd1a9d441 libreoffice-langpack-or-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 3563f8b112db2541468109c641eceb38cf0454b6e3a298aa138461321be54964 libreoffice-help-el-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 36b8cdd8ff49851e0cb7a36f7ec358229256cf310ec9a7d188ac753f2b1df5e7 autocorr-pl-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 3813df42e79d3b3613796e2e6275b240864ff5914604aa2746a0bb37e7f8442d libreoffice-langpack-hi-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 3a1d6acac7f0f205d34538ab40e3aa8a6e2ddb1998fa3d69a2662c1fe44ee4d3 libreoffice-langpack-da-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 3ab47378e9cae7c4d515339c93baa1facd9a2694ac73b7a4f049e338d56a6e7a libreoffice-langpack-id-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 3c743cb9a1b2cea6d5ec2cd3b59c77c53709e31be182593ca99d61eef3ea02e4 libreoffice-langpack-af-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 3d52fec07ea0f1f553c40cc99421aa9f95adb657215a228b84081fba7d0f3c7d libreoffice-gtk3-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 3d8b178a72019e6b365f55a1d5d5e62c2baa79a3e99d56cfedf45b0776a76df0 libreoffice-data-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 3e4c4636f54323e5bd9a0d13f2a8f53ee377d1a114d42c269a925235dc4bf97e libreoffice-langpack-cs-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 3e956388021600545e74b01c1eeb8028071b0acd8fe443c93de2be352afd8cb3 libreoffice-help-ca-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 40130af72451fd93c0ea2319387e89c60b1788dee4cd19fa2aad22c0b11e2856 libreoffice-langpack-kn-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 436f0e143ba91e9789d9d2c25168d7050630ca9db16c3b89f056420577bb1a72 libreoffice-help-sl-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 44a023c29305d2d8dab0ec047ba677d8c1a9052d3542088e1f9d8ca8d1f28a69 libreoffice-langpack-ko-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 458a944a460012e1ff533046b2438d3b6bc8e24a6563d95b7e615a1dadaa501f libreoffice-help-it-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 491b8962d468c361ecc5923e06b27a91725e6d24146b1a10e4f0cb804099f448 libreoffice-langpack-lt-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 49563bf8ce879570e9cdd8ff96c01c3a56bc471725936f6e5675169ff6e12c8c libreoffice-help-pt-BR-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 4a5d9772f14eda888f79d82e55b6c8974c9d7e94c2ea224dead47e66c91ec0fd libreoffice-help-lt-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 4afff222cb496b94748ce3c0b3248161b579f6486f28128e1add54020e1f3d4a libreoffice-graphicfilter-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 4f8e6c05a7df5fa1c04d7ff86b74b901e11320eeccd9afa85b88755d41bf6592 libreoffice-langpack-gu-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 561b4a9c2a7dc2de608405f2a19ab954a4899745641231db2b41b19f309685da libreoffice-pdfimport-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 585678732b40b576da58fde915a4b0e82f273b34fdd1ebd154ac97a4e8b112d0 libreoffice-help-sk-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 587db0bd56d3d034780125b1fa1916bd9735e503e2422160948f7d259b5e1012 libreoffice-langpack-it-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 5a1f5a396e191310fb28c17cc2cd6fc80dd95b096b21b781f0aca55abe32c325 libreoffice-ure-common-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 5ab2aeaa63394fc80103e21f4ff476789d9afb82a772071e74d48ef7b117ec28 libreoffice-help-eu-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 5adb15e5801f9d459473fc68508d48ee69b7a0c9082e5b76a6d0c079e609321c libreoffice-help-da-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 5b0b091de7b4bf26134465902f6be92722c0f2f828ee9f84af6081b10bb03467 libreoffice-langpack-en-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 5cb4b6ac6679c82203f0a53279264ed58f21c7cf82ed7534d0d8445b1162b7c5 libreoffice-wiki-publisher-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 5cdf7606c77de6ce2c3b2591e444fcd612c9ae402673839b8ce0285c9f8741fe libreoffice-emailmerge-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 5d39a6a82951b3db9c8333f1762a6dcda70b6e2e8e4d03b6ea3514e7dd118c3a libreoffice-base-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 5e9909aa5976f78875c15972e96ac47c80fe5d74d0676a46455552b5e2a7381c libreoffice-help-dz-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 6339fd7e65b2f66a5ec5d6e156a16e3c44c4bf1f244b6eab52f867b8ec04a1de libreoffice-ogltrans-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 6379ae8ed2d50d1dd18041535c0c83b2e4e2fb0a48e34acda2c88e60830e570f libreoffice-help-sv-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 641f2071ef0d21e46cfafb959219d61749fd1842ecaf5311bd9bac4bd1c47df3 libreoffice-help-lv-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 66477700b16f0359d6ac1e070fd090a9df5e25f93dcccf424d1ead9c0d878dbe autocorr-de-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 67ea0846cc7bce2472a5f88d9d7213781d5a9c3e7bbc8384b8f958df78de8ec6 libreoffice-x11-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 6b1ad14ee429f4f9434929bc51bbd5121e00c59531c4d76e4750a798f8ab785d libreoffice-langpack-es-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 6b9a5df6d7e494a136e061c43ad27f5c63ff8d20b7c98598dc406ac972b2df7b libreoffice-langpack-lv-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 6e58d1d747d8772a0457c3693da4983f17b309cecbee3ffefdf43a85d952a43b libreoffice-help-ta-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 6f6d1dd8b46cb2f985e04f65ee5ea96a6eb33bbd260b85a300c34fc89e73da75 libreoffice-langpack-ca-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 6fea51fc62174c509859acff79aa4f65dc5264bde58345e4de9d9d6690b4958e libreoffice-langpack-nr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 6ff53cbb95964998d6e9504a58576ce1765dc6550eb2476fb57c5654dc977166 libreoffice-langpack-nso-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 703fda5999601503a1e5486eb3f0195e36e28371089f262cde4ff5deb34fee4b libreoffice-langpack-sl-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 71abc06ba423c8a22a9f8bcf746bc2666d2911da8b5bb7a38a9b52a86aeb3887 libreoffice-gdb-debug-support-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 71eaded480378945884072e20fa73c993db18922451e7aaf180898ee3234bac2 libreoffice-langpack-ts-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 72896242c94278c5ea7ff86fa5ae4aec3eaf467c0f66f3ea9f69065b4b8add30 libreoffice-langpack-tr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 7562b0a62131e500cdae750d6b00e3ac56670acbdc3ca97e68927c24a2c33844 libreoffice-langpack-pt-BR-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 75e31e0ad7df1573bbb4478f33710d6862f9b17ecf47274a8c8df2d864a8a93c libreoffice-langpack-de-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 77b6d5eea98ff36535d265f3c47075ad0d80c13067ca537922f62161a1f540ce libreoffice-langpack-zh-Hant-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 78d77b7cbf4246ac300ede811ca765257321e0b4e35228790c12b4d44e50cb82 libreoffice-langpack-as-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 7dbb3f3eea853e1ef08bd8d00c5f4b91ee172f012b04c19f00537cd8e4ba085c libreoffice-core-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 7e2b8826d2d8cdd3fd2605dfdc38d2e730dfbd5f4343ca1c1b74ce47ea8ff4f2 libreoffice-pyuno-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 7e4b1419c7f647bfafe541e34ca982aab7afa51e12fed448f439258fa4278d9a autocorr-cs-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 82f4ef8d8d406217486ef49b184d37d64691929c01e1c235f1d8297389377935 libreoffice-help-nl-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 84e2aa6816f9cb329e7360a2def2a0655202edb84d905a4257ba3ba5511e3ebc autocorr-hr-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 88262c92ff987b8766f8b8ad6c619342c885bf072b6ff788efd4fa19aa99a0b6 autocorr-lb-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 891ec234983e48015d92bcc1615f3ba0ea864f57cdb6ac405d648147eef126e0 autocorr-mn-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 89b99ddaf7e1b2ef6b8b657137e7464b78a185f12f694116afdd1e84d41ca105 libreoffice-langpack-el-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 8ed25918ed5991dc893dcc0bc848d97b7759fc6c0fd533d1746bf41c6373a321 libreoffice-help-nb-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 90e2225d812d9424eb682914e86eaa1d22d8a86cd387a733b8c8838c4cb7da8f libreoffice-draw-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 936f4bdb6cc4c548ea5fa2fb923f601018307ac90c721d7328d373cb8535a2b2 libreoffice-help-id-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 9410555830084624901310b348d2eebd7a4e6da33c4ba05284affcc205f84dd2 autocorr-el-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 9520e4f8bcb257e0672acafd211da5a6c2f2bb8174f5613d235b90dde711793e libreoffice-langpack-ta-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 95401d9db89c26cd7a9343634bb6a58837b7af90e8fd3395d55ed2529bde0dee libreoffice-help-de-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 963eb22a65f3cd927b8926f508808c5b1010174c868adc9e76e00adb07ca3b1b autocorr-ro-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm 9670f2b1eee4512381c27f82d68da4465c83e0272342b759c364d69355ee8312 libreoffice-langpack-fy-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 99e9f737d683d6f13f03cf1cf3a543e86842e5900239c0dd187867ce4d9f0b06 libreoffice-langpack-nb-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm 9ad6aef1c4918884224509d756433ac2566694fe501445ca683a9839138f9068 libreoffice-help-zh-Hant-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm a2084e96c3b17c11aae6de709cf05c0a09ef42751662a25841bb39b75f1adf5c libreoffice-help-ko-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm a459d42180a6a13a24a48f007027dbaf096fdc628a1069884aab4487d4fd0354 autocorr-ja-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm a704da7ab3300d46afe2d6b1db2d883e60e1b4404e7b123e728b92907c9eeb0c autocorr-vro-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm a83d296cf29b5affe8ab26d0904aedd68e4bc2c6814bb506ad5be4bf594bb873 autocorr-fa-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm a8b62f5706ba50987e04bc3689d5d46863515243ef020adb78e11acd0dd0154f libreoffice-langpack-dz-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm aa461ebd2f0d12f9db4b3024028ce69fa3dda74d4f287b3e11225c0a39b1c969 libreoffice-help-cs-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm aae4dc4636457696f5529c27b5d0d7ed5eade7de1cc7ae34031a450db1107725 libreoffice-langpack-eu-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ab381a757602945e60506121c71eba2004bfc4013e3f92cbe88e7ae07dbf2166 libreoffice-langpack-ve-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ab7144be1f1f0092cb4fafed83629d02c46d367ba513156a96a444c142a3070d libreoffice-help-ru-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ac3fd4c41f72e78d5a03ca7d420a7fcdf33bd6003f74091e8cfc9d49e5d813b6 libreoffice-help-ro-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ad492380267465cfa22790c14324e00d79ec02cef97eaf3ac78d1fc9be81feea autocorr-sl-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm afe239c300287646d29dbd485a6dc317c5496b8d30d6d8d33c9166bd1b240559 libreoffice-langpack-he-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm b0834c9e3cef5417e1a9dd483a1a8a9859346d5c4529d3e9159d3d0a005ddca4 libreoffice-langpack-zu-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm b08a726cbf92648da34c509ed3938bc396457c9c9dbfb761bdc47c6714a4c993 libreoffice-langpack-ml-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm b3cc5cf3bad32beaa9829ecbdf95e056656c3914515e335c5a5f02e62d473cb2 libreoffice-langpack-bn-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm b4a1828662dbd9e1e177d59946aff21796f6efd5b793205a8a176c5ab7cfc91e autocorr-lt-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm b9074206c197cc1ce78ebfd34a4271b1e207acadc263375121f96444e970ab2e libreoffice-langpack-kk-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm b989a93c3787607811ffe9c2b3915c1f8dc37164075424c881f775a328c4912c libreoffice-help-nn-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm bd622ae63e7e4916651f8d570f42012a4689903bd6afc2443448eaee5be2d47a autocorr-tr-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm c0728f92a40feb87738231ac12552f8f9d83273bc69a097af807dabc73592d7d libreoffice-langpack-mai-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm c2683cd9ddedac250292061774631feb958ecacd420238bf23b26aec644b9bed autocorr-sv-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm c2a0d9a0448e805b90c5c6a1841dc10d6c9a4a78b699547ec0b1d4506b121e7e libreoffice-help-fr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm c2ea9f79cee6ae74c42f193fda92f8b69e3c96a2553bc1cbe51e444faa2cf38f autocorr-pt-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm c628695dc7125a64c1e9254be8130a9dcd933f25b9af3eb6faf29caeac64e2b8 libreoffice-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm c813bc52b9fcf6b28b829017aca56d2e15b559f2359e45d58bf57a9ef61ea4cd autocorr-zh-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm cc035a7dd26c432d7716850f49839962ca43f9332e21a0003aa7da68442a946f libreoffice-langpack-fa-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm cc0e4ca031c3e9e3ee4c5fdb779c31eea678ecb85697d137f6bbc34eb80c24b9 autocorr-sr-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm cce9adad97aac1c4700c08a826b2381071adc25c5c0f8a58347a399b8f68b7bb libreoffice-xsltfilter-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm cf17708edfc0440fce3e7f0d624ad5106f4d28b16f4018de9ed41c4a790556df libreoffice-help-eo-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm d375323564bc7a87b742bbdc410a92bf0a62281127de4c2915eae712045f6d72 libreoffice-writer-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm d7cf64d18e2e258fbe4cb80ff6103ca16633fe406aebfeab02cbe79ab3883729 libreoffice-langpack-ar-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm d7df3557b403e18f8cb68072c47166e4b2912ffbd14aa6b5f027f4fb73a82329 libreoffice-help-tr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm d9a0c929a8e4c514d24cf8126da98c8d521a611b09933f4ce67befbbe65c4b7a autocorr-fr-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm db5133aa690e53c13cb2c2c887ee79252edefdf61e699b4b855a504bd285d951 libreoffice-langpack-fi-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ddbb11d80c7660004e53f734f2ad2dba19c72c11c4c9f3efa347195c1baad7b5 libreoffice-help-zh-Hans-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm deddb299f496cec60a02b41e413097d4ccc14a52f2efa042d6aca46f54cf42ec autocorr-en-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm dfcae3724bcbe86e9083fa1f33f585655601a6f44893a95cb5dad4b11e3f976d libreoffice-langpack-cy-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm e1cd27e29a4e69f8d5a804775ac2e8763ffacdeef41bfad9b25ead4393c4155c libreoffice-langpack-st-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm e261ef3e7099642bf5349cf293c19df0c8922ea215752b36daf5ba7548e34f06 libreoffice-langpack-si-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm e66047ecc1b4edf417e93d5646590f0fabc6dfc1074fd786343f9c2768651863 libreoffice-help-bg-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm e7d97f193adebb25c1749d1cac218bca5bbe72b4b43429accc6cff777beaf92b libreoffice-help-uk-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm e806ea68f6e05d77a765466dfa11b116fb0890f6d95a074f3e71acc197502617 libreoffice-langpack-hu-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm e979510cc9c81a2879d61901cd8104e6f9b2a24b6dd800fce48f510690faf5dc libreoffice-help-hu-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm e9875aec19a8bce800c9f3b70609967a302d54b5174d6c7de1ee7801f6d0cf2a libreoffice-langpack-te-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm e9ccde770418b0f513685cf2dbe3dfa9d9e8d12eb683e2025e8815e4b0366d1c libreoffice-langpack-bg-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ea56717f8311afbbe6c2bf799761810448a0e1962e4951e21f256b1dd9a282ec libreoffice-help-si-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ea6cf6a78eb28cd2941e3316bb98104d5d4cc0ffc12df0c176053cd24c925d53 libreoffice-langpack-eo-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm eb57ded4432fc33019c26a5f66e0150ad0bdc467ab06ddf407a26f153df8945b libreoffice-langpack-pt-PT-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ec2a7c38d8785c1ebd6f027f8d4df8581a6797e177a7ae3d79a41d39d940ca27 autocorr-af-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm ed665837319a55253922a5161864f886d14c10e3fd11f0b38707555ef4738f06 libreoffice-help-hr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm edd84e8bddf40c48f2644ac75ec9b52fbc80948ef5e156ce53bb0f3ac864c81f libreoffice-help-gl-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm efc6a185ec5feb71f3e4927d62760bfc4c1db0d977fcfde0c08e6b0aa1a073be libreoffice-langpack-uk-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm efd69da4bbf1be9b07900a7a82a4ea1297b2ad39f4284084aa5f115c4bfe1e40 libreoffice-langpack-pa-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm f1eeb734d2eca9b861523898eb6c2d9effab60aa61086263e79fea4b9df0a693 libreoffice-langpack-ga-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm f3caf1e5701ece3c5a04171e85e196df4f8bf79c46177a1703d39f1a24c762e1 libreoffice-langpack-ro-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm f3cd6ac7f1b904dda1df1ec20e714b3b38011a5a130103062de62c1de1129efb autocorr-it-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm f47496c6d795f0b1b9d0482ed43fa855b9f37ed31072a97d595c41941c9ba0f6 autocorr-is-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm f68750ad94432e34db496b79abc3de2c95169286bf97e04e45e38aab16e7a47c autocorr-ca-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm f8a4efc97d342931ba3780bb8529eeecbf62a4d016654a914fb44c588547d160 libreoffice-langpack-nl-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm fd573e13437f6e5d23e4f135b3d5a93e9162c6fa4c8f806a3e43c5b54670c9bd libreoffice-langpack-mr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm fe007a1b5d0a474e6f6a56ab5878fac92e398e7187b48b4369d01819be4092a3 libreoffice-langpack-hr-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm fecda34809984fcd81688bb90bb1007f4285417859def3815d74edfb9d87787f autocorr-ga-7.1.8.1-15.el9_8.2.alma.1.noarch.rpm fef4ed87110cd1f720c12b697887799ba94171e9aa40b659f48f2dd22517bed8 libreoffice-langpack-ja-7.1.8.1-15.el9_8.2.alma.1.x86_64.rpm ff61b2aea6e1d1d427f39fc95ec0eefa67eae1273b93fd8351d99537b335eb09 ALSA-2026:36834 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tile_list_obu parser byte/bit confusion (CVE-2026-52718) * gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (CVE-2026-52719) * gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb (CVE-2026-52720) * gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling (CVE-2026-52722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-bad-free-1.22.12-7.el9_8.1.x86_64.rpm 3d3ac49f8a2c04c4d407d8b690f58635f102e06b3fa184cda81491c3da0cfc59 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.1.i686.rpm 79484f8358c193a60952847db9b85a7fa4aec6753b56ca8d1798367c37497479 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.1.i686.rpm b803ef36af864c8f1eb741f63d316f58ddd6d34de283c625a3999eae522e323a gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.1.x86_64.rpm dd8f00eb5b1ab3c7c35c3186ee0ee1281a5c98637535f1c1861ce6f760ced584 ALSA-2026:36879 Copyright 2026 AlmaLinux OS 0 1 Important

tomcat security, bug fix, and enhancement update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146) * Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486) Bug Fix(es) and Enhancement(s): * Remove tomcat clustering JAR from RPM builds (JIRA:AlmaLinux-183992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default tomcat-admin-webapps-9.0.117-2.el9_8.noarch.rpm 21b54338c8911f7d0570dfc4074336245d72ecd7fd23b957b38844adfcbf6080 tomcat-lib-9.0.117-2.el9_8.noarch.rpm 45d3d9c3b65f47423d088727c129740f81222b9b8bfa692878e832ef6390c98d tomcat-servlet-4.0-api-9.0.117-2.el9_8.noarch.rpm 466e8297da209d0af30af01e14bbef7218bf09463c608d213849d4582e764d0e tomcat-jsp-2.3-api-9.0.117-2.el9_8.noarch.rpm 96d0aed85ef0a69f45bb8a77dc6b293ab62c284f4a1a45d9c015e69c58864a9d tomcat-9.0.117-2.el9_8.noarch.rpm a5150c547f61bd7c396c7176e7d473f5dd29a61aca9f1feea88c733601d78dbf tomcat-el-3.0-api-9.0.117-2.el9_8.noarch.rpm b1bcaee9dc8dbb1ce4809e011e7a60dec43f5b5b22f04a7b83f18ddc347a5e66 tomcat-docs-webapp-9.0.117-2.el9_8.noarch.rpm b283f9775d07ccfe3e013e36ecfa6a528400aa77ad95f9d2b03843579919f90a tomcat-webapps-9.0.117-2.el9_8.noarch.rpm ef598638b8b6b5ed0398ec7653df1c400833b2a665d7ef817ad3ddedcf6ea83e ALSA-2026:36957 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-5.14.0-687.24.1.el9_8.x86_64.rpm 11200724a48c8d7a2f15ac0474c0a70e9e79b064cd6aee47e9125e05169f1841 rtla-5.14.0-687.24.1.el9_8.x86_64.rpm 240c27dbefe06710460bdebc4a7ce0fd6672cc249648092613f7089df8d14c4e perf-5.14.0-687.24.1.el9_8.x86_64.rpm 4293e6b3955a447b74596aff2e2b25a86f7784a48336e0a5c4823d4a9e2ff30c kernel-devel-5.14.0-687.24.1.el9_8.x86_64.rpm 534befb0b8417544e55b967f8699c8d169ec4cb52d0bff0d40e8b355619fa34c kernel-doc-5.14.0-687.24.1.el9_8.noarch.rpm 79b42120a5094ce2bd3ad52d2879cb41299578c704cbb6536cae41311578233d kernel-headers-5.14.0-687.24.1.el9_8.x86_64.rpm 9b355a10d2de07440222f8bb815cbff689525d7b8e643cdf50bf80c5bd63fff2 kernel-debug-devel-matched-5.14.0-687.24.1.el9_8.x86_64.rpm b5b2133f8c4b1d9381c964eb3365c3894a437b0b7355efa345498fab069b3bf2 rv-5.14.0-687.24.1.el9_8.x86_64.rpm ba73036fc2f1590ac5e5437d9143fed1565f5cd6de1d80096ad7ba2fb871cd29 kernel-devel-matched-5.14.0-687.24.1.el9_8.x86_64.rpm e62758917d3ef31fd2e4c79f9d3a93d767eea60d1a2fbd12b00c3967a8a5adfc python3-perf-5.14.0-687.24.1.el9_8.x86_64.rpm ee7fcc814029842aa2237cd03fb790bb1a1fe4f9a8265f3e7c2a0e4de4cca946 ALSA-2026:37123 Copyright 2026 AlmaLinux OS 0 1 Important

podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832) * golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508) * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) * podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231) Bug Fix(es) and Enhancement(s): * podman does not clean up all files and leaves orphaned files consuming disk space [almalinux-9.8.z] (JIRA:AlmaLinux-173988) * [FJ9.8 Bug]: [REG]The "podman-remote save" command fails for rootless users. [almalinux-9.8.z] (JIRA:AlmaLinux-192439) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default podman-5.8.2-4.el9_8.x86_64.rpm 302afaae502eb927cb41faf9db99d0b7d7abfc7f52a4773eeda7c49f378d383e podman-plugins-5.8.2-4.el9_8.x86_64.rpm 92b5512dc4cd7cb174676edbcdf62289cde0aa5c3cad50d1ab843a06a2a83fc5 podman-tests-5.8.2-4.el9_8.x86_64.rpm 9690cf8817a8ae6303e7d492d1bc8dffd8c24e1410e9dd59219758eade17fbab podman-docker-5.8.2-4.el9_8.noarch.rpm c8fc0fc3eb88364d645aca2cfaadcbcbc1af1a30567728916ae77481d5b25e34 podman-remote-5.8.2-4.el9_8.x86_64.rpm cf3650ffb617fe230c1cf4e51606f73c8039ffdb608d31d0d85e4f58987a1bcb ALSA-2026:37129 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow (CVE-2026-53705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-good-1.22.12-7.el9_8.1.x86_64.rpm 2a9eadf0a9820dc3820fab4a0dce29a5a8cf1c736b6f681b062d92b3963eede9 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.1.i686.rpm 9229e7e1c91716c9b9c7079093c3d1f0ea662872baff935357f17b67061db6bf gstreamer1-plugins-good-1.22.12-7.el9_8.1.i686.rpm 98dc9b22b20ab8a22f3f441ad8355ac29bb2aae8d1294888c0151f7bd453f6c5 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.1.x86_64.rpm 9d594a8a94a106ef5fd67ea84bab3989e1cc6f212d9a8ca776a20fafc4be7fe1 ALSA-2026:37207 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default freerdp-2.11.7-7.el9_8.4.x86_64.rpm 141bb0dd3a5db647e320880afae73bda9b9611c6ce86feaf0ee87cbd38c96dbf freerdp-libs-2.11.7-7.el9_8.4.x86_64.rpm 1f4e945aa9a12ec639c9de5f5b4b397c139416db20eac4db24951b15268242db libwinpr-2.11.7-7.el9_8.4.x86_64.rpm 9ea7d05cef1a973bf3e94bc43b6f5fd572a9ee43b29b1921b187115647dd6de6 libwinpr-2.11.7-7.el9_8.4.i686.rpm 9f87e0387f20b04b1009d9f008ffa5977902cf2a4f93ef93acaa0adade8df0b3 freerdp-libs-2.11.7-7.el9_8.4.i686.rpm b0e459f44c5be4e501729fe03dae5e170f5254c7d1aaa131ac6d88ccc5ffce3b ALSA-2026:3730 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default postgresql-pltcl-13.23-2.el9_7.x86_64.rpm 2237d452242e5fc3968cd8e4f0802c978623d4f9d2cbab002d5cc070de8413cf postgresql-server-13.23-2.el9_7.x86_64.rpm 4bdbbb307e1a407da445f84c3d131fe22ff45eb17dab7f78ce0e41fc9ff3c954 postgresql-plpython3-13.23-2.el9_7.x86_64.rpm 5484b4e628a35046823b2a464e5d285f51f8e56a2d330fe47e9e32d1829c843f postgresql-plperl-13.23-2.el9_7.x86_64.rpm 78244300b223240b9ad24475b84584340a68d67a5b0c71e538042ab24680475b postgresql-13.23-2.el9_7.x86_64.rpm 97389f87671faadfeb6d9747d7f425cf3c5a94b16379dbdb7275e43f96eb31b4 postgresql-private-libs-13.23-2.el9_7.x86_64.rpm 974478d51108c4bd117732bb83c1dcd43e2e64545845fe3bd513aa16458a956f postgresql-contrib-13.23-2.el9_7.x86_64.rpm d279e4a036de2ad6ad9a58bc5c9617e4b560f09c37b99988a377243cf83baea6 postgresql-upgrade-13.23-2.el9_7.x86_64.rpm e8b71c84d3e261317221eb94118304542ab708e4bc755b1f8ce63a875f8d8db7 ALSA-2026:37410 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default buildah-1.43.1-3.el9_8.x86_64.rpm 548132e51c8f4e48042aa928e895a48d47d9b0fd82983094e07a87c8c017a2d1 buildah-tests-1.43.1-3.el9_8.x86_64.rpm cfaf5a8e8b6922a028a317d8fc0363cb12453da1bebe5c716ef15e95559e2712 ALSA-2026:37435 Copyright 2026 AlmaLinux OS 0 1 Important

golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.5+1 [almalinux-9.8.z] (JIRA:AlmaLinux-193476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default golang-bin-1.26.5-1.el9_8.x86_64.rpm 03e3d972b1361bd57891355e4c3a57070a7cf3581b80ff2a8540a796bd5ca248 golang-misc-1.26.5-1.el9_8.noarch.rpm 1b0cbee9a35a7b9c8ca6a706b29e919de7b40cfefc3905814997aaf1f191b47c golang-1.26.5-1.el9_8.x86_64.rpm 4733eb14d134fbd998bd68e625f384a037ffdca111d09ba8107ae3a86878bdfe golang-src-1.26.5-1.el9_8.noarch.rpm 8c9194ab73cd3e8966a44f7ed9332e5eb88c0fbc7b1fe0092a748d3d1f8772c0 golang-race-1.26.5-1.el9_8.x86_64.rpm 8f9d3ef413a52aef4b6ce6050c73564b10bf4e995a7e8b3b0432f8c2407c2a5b golang-tests-1.26.5-1.el9_8.noarch.rpm acf98e39d416ff38b57a2190f23f2bfb43b7a3ee35e7fd1dd39433ea4f24992f go-toolset-1.26.5-1.el9_8.x86_64.rpm af98712f74d083aac00e7a92d6e3b7a8216076a521b35b89d8cd246d70f2590e golang-docs-1.26.5-1.el9_8.noarch.rpm f15ecea52d7dfe2a6228d2a9b4c75c71e1e51f9ab50ea0ac0d4d004026d64a36 ALSA-2026:3753 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default osbuild-composer-worker-149-4.el9_7.alma.3.x86_64.rpm 1cb1363561049faac16aa9b61cc3dfc15b99d682f0149c65c13b79f8aafba211 osbuild-composer-149-4.el9_7.alma.3.x86_64.rpm 9bf4d0af426120fa74b5f4174ae0bb0f3de6743c55ba91723ac97915670e237d osbuild-composer-core-149-4.el9_7.alma.3.x86_64.rpm e4af96613ca38e3c81d6b6ed0dbefe4ac6f8c271e80ee85113a4465922613c65 ALSA-2026:3839 Copyright 2026 AlmaLinux OS 0 1 Important

image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default image-builder-31-3.el9_7.x86_64.rpm 0fe0404404b147514402ad4bbd679281d271985eea37ac3a0516bf0b087789a1 ALSA-2026:3842 Copyright 2026 AlmaLinux OS 0 1 Moderate

delve security update

Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out of your way as much as possible. Security Fix(es): * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default delve-1.25.2-2.el9_7.x86_64.rpm 527748badda49d9f368e73a853df0115e1f5280c0fdff6c3697a6cf13c484633 ALSA-2026:38486 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xorg-x11-server-Xnest-1.20.11-34.el9_8.3.x86_64.rpm 1d3a9450944d547914d8109bafac818d1ea11dd44712c2aaee4f59df29bdd8ee xorg-x11-server-Xorg-1.20.11-34.el9_8.3.x86_64.rpm 82b9d26d1a9d3681831813b3a90b00ba775207089fa3c6c620819421de8ebcd1 xorg-x11-server-Xdmx-1.20.11-34.el9_8.3.x86_64.rpm 876df8d2343f806db798a49e176aa752b8ac890a22d4a1ed8afaf5f0787b4277 xorg-x11-server-Xephyr-1.20.11-34.el9_8.3.x86_64.rpm a878faa2f3dbda0cf0f9680df1d18e430806f643dc2c7a1727132658146e9007 xorg-x11-server-common-1.20.11-34.el9_8.3.x86_64.rpm b92c5b02828b4877aa9a0fda14d14f091feb3d0d9019b279e5fd2675983a506f xorg-x11-server-Xvfb-1.20.11-34.el9_8.3.x86_64.rpm f1be7923ddeafef69c9db661c2d0d69c75097540db353f28540ba64ccf547d4a ALSA-2026:38491 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) Bug Fix(es) and Enhancement(s): * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-matched-5.14.0-687.25.1.el9_8.x86_64.rpm 59fb5d5be6e43c9d4284baa60709da82ad7ff169000d4e4e5c0ca6cbe30644aa kernel-headers-5.14.0-687.25.1.el9_8.x86_64.rpm 66fa758810c83fb9da2648e0b40a9d96ecee60f0bd22e8c95fce0066c6b15251 rv-5.14.0-687.25.1.el9_8.x86_64.rpm 7b71f170dc20ac9f110e7ee4f52434fd5f69a96ad0f9f837bfa994a1008abbb8 perf-5.14.0-687.25.1.el9_8.x86_64.rpm 961e7470222f94c8c573fd44ce0a7c67f939b754061ccd47c4bae56024662e68 rtla-5.14.0-687.25.1.el9_8.x86_64.rpm 9a8be3372471b9a73ad464f5a4d2a0c503be686f72f6165b1a414c3c78bdc77c kernel-devel-5.14.0-687.25.1.el9_8.x86_64.rpm a196599657d48c1ecf6d98c0366ed753c1c6f711cf875ec4327818adb917f26d kernel-debug-devel-5.14.0-687.25.1.el9_8.x86_64.rpm a7f4f89c7daf7006505f26790a7ad581782dca8267ee8d8d806f3d813fa49a14 python3-perf-5.14.0-687.25.1.el9_8.x86_64.rpm b801d657909e737fdaa6307478baf587ae8e3b56912b209b51a5fb41799ed24c kernel-doc-5.14.0-687.25.1.el9_8.noarch.rpm c3fd89f4618f0665b6991c8a594e011a4e91c896424e1919dc750befdcec1396 kernel-devel-matched-5.14.0-687.25.1.el9_8.x86_64.rpm c5fbdf1e1fd6cdd6e3919c6999463465572b8cb99c9a1498788d2af0d208f464 ALSA-2026:38493 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default buildah-1.43.1-4.el9_8.x86_64.rpm 24beb1e2f9f083c056a593bcb2eb3231a74421c35e0903d5f337d1090b9f10db buildah-tests-1.43.1-4.el9_8.x86_64.rpm 9c01f812e1a31d9e12ca74ed0df21ea9c5543077e7cec077baee57c90f425652 ALSA-2026:38496 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: gimp: Heap buffer overflow in read_channel_data() (CVE-2026-58379) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gimp-libs-3.0.4-4.el9_8.5.x86_64.rpm 991117e415fe27700c40d5a9b8429883276bcc738118b8b08f80bf8a7781fe09 gimp-3.0.4-4.el9_8.5.x86_64.rpm a6bdf6e5fc0519ac634b6ed6cbc9469a3159052f1ed4364b8537b65c504faf39 gimp-libs-3.0.4-4.el9_8.5.i686.rpm ca4350da8ae72eac2cdcc75329eda84c6e3ef3b35eeaa3d03cceda522d11df36 ALSA-2026:38497 Copyright 2026 AlmaLinux OS 0 1 Important

gegl04 security update

GEGL (Generic Graphics Library) is a graph-based image processing framework. Security Fix(es): * gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing (CVE-2026-2050) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gegl04-devel-docs-0.4.62-1.el9_8.1.x86_64.rpm 169624789b5bb970a7efa4dab8465a2abb0964c4d807c573ebc53e8496ae1461 gegl04-0.4.62-1.el9_8.1.x86_64.rpm 5bee877d5a93a90282e968bfcd3a4cfcf47f98b5fc1838f48b10df644ae806c2 gegl04-tools-0.4.62-1.el9_8.1.x86_64.rpm b8d207b1c958f7e363fde201ded0bf4e21c8d736ed06e841a7bcbc65a4f1b07b gegl04-0.4.62-1.el9_8.1.i686.rpm f2e3bd7fc6a89bba47f97317921d9fd470a407c4bac9829b91adb619e697330f ALSA-2026:38498 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing (CVE-2026-41142) * OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files (CVE-2026-42216) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openexr-3.1.1-3.el9_8.3.x86_64.rpm 0d3e5718a613f1e124c8d2f4181feb2a17461b262098fae6ab6ac0a6a5855c9b openexr-libs-3.1.1-3.el9_8.3.x86_64.rpm 26578da5fb192009f183f50d3ece39f110c277aced9d28c8c329736699f605c7 openexr-libs-3.1.1-3.el9_8.3.i686.rpm 265808c523fbaf1587be35ff1c2fc6660e2503bc20c88d746709a6f3b0a49436 ALSA-2026:38500 Copyright 2026 AlmaLinux OS 0 1 Important

maven:3.9 security update

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fix(es): * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default sisu-0.9.0~M3-7.module_el9.6.0+148+fb6dc857.noarch.rpm 0068d3862eac581d1244a88f8aabd8da4bc2a149214df3e6332f6d1881756263 maven-lib-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 013a955ca67a470521cf125f30fe0c80d6fc2f0cd4074e5467b9bc06e94a7920 google-guice-5.1.0-23.module_el9.6.0+148+fb6dc857.noarch.rpm 125ab240f75159463d459a50b70127aa61a66ed6466c1b98e7e72a65156116b8 apache-commons-io-2.16.1-9.module_el9.6.0+148+fb6dc857.noarch.rpm 16174a73cfc84903af6f4471c24018b74535c335cf5aa29d3a82dd0f88facbbc maven-openjdk11-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 193ca7922bdab1bebc00cfc84cdb04c583329734a296dae47377e44e46d9f861 maven-resolver-1.9.22-6.module_el9.6.0+148+fb6dc857.noarch.rpm 206efd1b0da9d7053e07d3fa65d24886f20e2ddddbad3c6f2837145dbc559005 plexus-containers-component-annotations-2.2.0-10.module_el9.6.0+148+fb6dc857.noarch.rpm 23f68d37cb57f3040a2f06ca0ad0b7425c4776bef698284bb5c32641e3d9b9ce maven-openjdk17-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 2fa08ecea399a1912665d3fb1703c05fe278656bb5eb2c35afd45a42555d2063 jansi-2.4.1-12.module_el9.6.0+148+fb6dc857.x86_64.rpm 32cfff77103127edce3f33c6e08f16c517b90c6a872fd2a02ca96b3496df3ada plexus-sec-dispatcher-2.0-28.module_el9.6.0+148+fb6dc857.noarch.rpm 355f079b47dd677a1fa96c87b03ff84dc41d9fa1b1f5d216e09d5b64ebd01beb plexus-utils-3.5.1-17.module_el9.8.0+282+e62fc403.1.noarch.rpm 42ffb75bbd9b3e338c7d32e8d104f10f840c61eef11abca0bc8c1d3f585d9fce jcl-over-slf4j-1.7.36-9.module_el9.6.0+148+fb6dc857.noarch.rpm 44944cc4a43b396145ddfff53aee410c0ea976fa7fb408e461af66e2350c3d2a slf4j-1.7.36-9.module_el9.6.0+148+fb6dc857.noarch.rpm 451b9bbb1235ad094a6c78342fb8355ff77d4fd6b3669e64dc9f8b556a10047c plexus-classworlds-2.8.0-9.module_el9.6.0+148+fb6dc857.noarch.rpm 51d092c60f21d54c339c021d92cc8fef9003e664d4a24e6c7de8ce46112eb5ee apache-commons-cli-1.9.0-4.module_el9.6.0+148+fb6dc857.noarch.rpm 56cab142f75ee073a33918f63cb431f3f149d9759be85e2a291721a35b661a10 maven-openjdk25-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 754addd6d3f04ab900c47775cfc8190a8da0985c86ebc0d8b3e1d6d2a98e9d8f plexus-interpolation-1.27-10.module_el9.6.0+148+fb6dc857.noarch.rpm 7ff65c99b5cfb055a1ba6ce4e965c70bd7e9e43550ce7df4fd3ab16c917ac172 httpcomponents-core-4.4.16-21.module_el9.6.0+148+fb6dc857.noarch.rpm 8ab2f7de652b168e63235a2cdb1aa18bfdd65874de65b98131071fff64308595 maven-unbound-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 98411993464cfc1be59b326861976a020c081b9ecb3e00020886626c0f5738cd apache-commons-codec-1.17.1-8.module_el9.6.0+148+fb6dc857.noarch.rpm 99d95463c03e6bf061ba1d4cee25e8001708017cd08afca31f787641bda5c216 maven-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 9dc575ec379acf23c42f2f24723564418f241254fd0ecc2609f7721d04615bbc plexus-cipher-2.0-25.module_el9.6.0+148+fb6dc857.noarch.rpm 9ee651942405bd06f4f0051fc30526737f6dae92e090ce141e202372281eeac6 atinject-1.0.5-14.module_el9.6.0+148+fb6dc857.noarch.rpm a2970b4cf013e030528956075c7a5fd78763309f8a33b72e6aab2de9456b5d36 maven-openjdk8-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm a5c21f9b7b9b729197addc6cf1f0acfbaf7a7e98b3b98d64e1ae4cd91276ebe1 jakarta-annotations-1.3.5-38.module_el9.6.0+148+fb6dc857.noarch.rpm a5cd127cea4d1a3b7d5976617ccedcec1a881b8b993ee1d4b3a74c971c90daae guava-33.3.0-5.module_el9.6.0+148+fb6dc857.noarch.rpm ad3c8ee977ad4ba8691c734349c9b4f0099c2db54c387a97a4386b3dd390a494 httpcomponents-client-4.5.14-21.module_el9.6.0+148+fb6dc857.noarch.rpm add1d5437455f933172e1a1e8d88d3d830a27744aec457792abf5e2c38281688 jsr-305-3.0.2-36.module_el9.6.0+148+fb6dc857.noarch.rpm bde7485a59bd2cebcec0886b030996bbd471cd9d2a01e133886602602ab3ce3a maven-shared-utils-3.4.2-19.module_el9.6.0+148+fb6dc857.noarch.rpm c3fb1a2a3f787c705c7c5ea4b59d8603aa51215e2f4248e13fd79faef4b81552 maven-wagon-3.5.3-17.module_el9.6.0+148+fb6dc857.noarch.rpm c637e1092cac547cd8b9bcae126bc7e2d5d138f8862aca9493ac13301804da08 maven-openjdk21-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm c6c41819a4134c9548a573ee36bf34df4d4b3276008fe9741b37e2751e159c1b aopalliance-1.0-51.module_el9.6.0+148+fb6dc857.noarch.rpm d8789fd27e9fcd05738d1310118583738d264ee4d5a84ece00c3e06a71ea6d7f ALSA-2026:38511 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: command injection when decompressing .tgz archives (CVE-2026-46483) * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162) * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858) * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default vim-X11-8.2.2637-26.el9_8.10.x86_64.rpm 1829770baa094673ad8e05ccc3b7589f4774142619f0bc8e363212934aea6e5b vim-common-8.2.2637-26.el9_8.10.x86_64.rpm a62c10256524f7f78dd577ca140c187529017c6ac7fb2c7450253f3fd107dfdc vim-enhanced-8.2.2637-26.el9_8.10.x86_64.rpm b3a003e2401a5cc6452cc1551756b7a3a327ac44f1acc799384478313a849b58 ALSA-2026:38512 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fix(es): * DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.1.x86_64.rpm cb3d9bac4edb04e0f5da3aa91aafea286fc45786d03b6366289200e7d10d7f45 ALSA-2026:38796 Copyright 2026 AlmaLinux OS 0 1 Important

plexus-utils security update

The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for a full scale application server. There are many reusable components for hibernate, form processing, jndi, i18n, velocity, etc. Plexus also includes an application server which is like a J2EE application server, without all the baggage. Security Fix(es): * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default plexus-utils-3.3.0-14.el9_8.noarch.rpm 83674d69aca9951f1245d4c6899f7352451489b852ed1df7ec085e28cbb56cf7 ALSA-2026:38878 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default podman-tests-5.8.2-5.el9_8.x86_64.rpm 346b209ab9ddfde33358da4a398f8206a62ca1fc332333151700d406d9709bba podman-docker-5.8.2-5.el9_8.noarch.rpm 3d08400ee877ef9e0f3484afa9a5edb7b404546085f79f9d29378584c58193c8 podman-remote-5.8.2-5.el9_8.x86_64.rpm b4e88be5ed631c7a74e30629edbb2c16e79731fb6cee127bbeeed9c0a396b7f3 podman-plugins-5.8.2-5.el9_8.x86_64.rpm eb2a4927f3efaf5132a5708cdf45644f702eb22cb0b2b711e6b8cdbe0bff1847 podman-5.8.2-5.el9_8.x86_64.rpm ecc1fa0c103817b85f0360fcf12fe4b93da1029269ce4925156fc766321317dd ALSA-2026:3896 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.x86_64.rpm 1c17fe11db244a9e23cf757cfe3615a7256f34ef84e836c69f08b5d37efc9ea0 postgresql-pltcl-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm 1c4b64f793684c69bea1bb1c029721b885725483c7b2b1c1138d9c42b770a4b2 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde postgresql-private-libs-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm 287a53e9dacea45062f20211d5ae763655c03de985a0ce0869c7c4c9116f28e0 postgresql-docs-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm 3e45f3bcfc4d5206e60cdf0e276eb2a37d2af805488c5576de612401cb92c71a postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba postgresql-plpython3-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm 46a23a2f685ba82b6f42ebeb3a78db30040c7ddfd3317416afa4eac06490da69 postgresql-upgrade-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm 6e10addc708174e67252f19a9ca1c04e3de383ca32cbc988c97cc8bfde7db1ef postgresql-private-devel-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm 7da143b29462482593b581949408cbddc8b688f84f871bca5ef8a6ea34a87e1e postgresql-server-devel-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm 861413b9c7ab45a01fdee4c410718de9f9e34ab5c41c2b4cbe9e330f77d087d7 postgresql-test-rpm-macros-15.17-1.module_el9.7.0+214+91f631df.noarch.rpm 92d7410aeb90fa0ed2a802d15be612836a4eaa2ccc45639000941b46086dc542 postgresql-contrib-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm 98f77bfacb7271880c283f91ab184273f5d17135c5295164b00f5865fd7634b8 postgresql-server-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm a1dabac595ca9de8a477e20bdecf116776d2ece8d240b2c8b52f2c97dd7050e5 postgresql-static-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm b1c0d95469e5da8ccfd91e6cebba808b9997751fb77147699959124e347afd2b postgresql-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm d4c7939f4cb99d50c2560247365fb92b2acd5ebc43812493462dc74fd1c392c9 postgresql-test-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm dd9b3df5d811107cf43e329f18a8a1be21293f543eb41780d25a8183934728a9 postgresql-plperl-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm e989c1a478241b84ece01bd849490c2eb8778a99280b30f4ec1e6b5369f6b116 postgresql-upgrade-devel-15.17-1.module_el9.7.0+214+91f631df.x86_64.rpm feef9b9fc54e8b4252704125f51ef3dd03ea2717d2aefbf0afb3038de5480899 ALSA-2026:3928 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default git-lfs-3.6.1-7.el9_7.x86_64.rpm e42fa651e413391a29e1d9dd315e527a5e2358f18f222270cf558b8c55ad3a51 ALSA-2026:39309 Copyright 2026 AlmaLinux OS 0 1 Low

capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Security Fix(es): * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default capstone-4.0.2-13.el9_8.x86_64.rpm a82656852ecc8729a4f2d4af24db6ab7e9703a019f9a63d744d2487d42441993 ALSA-2026:39311 Copyright 2026 AlmaLinux OS 0 1 Low

qemu-kvm security update

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling (CVE-2026-48914) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default qemu-kvm-device-display-virtio-gpu-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 01757245504fddfae0168cfcbc847a59b93b631674645aa9be94bbc4a033ca19 qemu-guest-agent-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 04122be1f3dedef53b6d0ae6e44b93bd19c0c58dab850e6abf4be890a54eb190 qemu-pr-helper-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 23daf7a568cc48f329815780ff4a00f0d0fe4713fe8ade0cb221e27aa950c678 qemu-kvm-tools-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 2569dacefd70a01bfc001d5ab73368469e1da7c70ea63a7759db15cb18a1fe04 qemu-kvm-audio-pa-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 336b850996b47f963faf72212f14f4821fdfa92be6d9b5f781712c156cd06ecb qemu-kvm-device-display-virtio-gpu-pci-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 38201ff1ecdf033c86020efce4be9a49947bf439e3243fe95fa407b5172889ea qemu-kvm-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 42ef0f6d27a620c6d3ae07367d66b0ee2f9e3bf1d1534f9bc6648631188f5cd8 qemu-kvm-core-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 52657be4b35afb9a5ffd98e1ea44b8eda16f901a95e96aec4dd9377f3c6f212d qemu-kvm-device-usb-redirect-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 5cc4bb81f4357e0d267861e43c36786b88daf8bac890b40cf0fc84cf5a9c70d1 qemu-kvm-device-display-virtio-vga-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 97802a7961eee04440c8444af31661b34fbf7f3a2ff4ded5e2d52747b11cdd94 qemu-kvm-common-10.1.0-17.el9_8.4.alma.1.x86_64.rpm 9be96bff008e65c95366a5faa3a80bdacfc3696bcd2ba0ef976a9fede7b9c69f qemu-kvm-ui-opengl-10.1.0-17.el9_8.4.alma.1.x86_64.rpm a03464dce0efd9c0f4c84b61ba37f25a13446fde0305b86bfd8cb78f4cbb3a7b qemu-kvm-block-curl-10.1.0-17.el9_8.4.alma.1.x86_64.rpm c0a8b0079e8344c55901438bf92529186350b6d0308ee9abb6b8a821042f810f qemu-kvm-block-rbd-10.1.0-17.el9_8.4.alma.1.x86_64.rpm ce35772ef5b713cabf42734a3250a8f6cc5f3ed5275dc5839a4fb724d5b27fd6 qemu-kvm-device-usb-host-10.1.0-17.el9_8.4.alma.1.x86_64.rpm d6e71190f7227479617dc8991b1e13fac5ba63305a2b6509a0f840170890d6b1 qemu-kvm-ui-egl-headless-10.1.0-17.el9_8.4.alma.1.x86_64.rpm d6f67076b3802506b2e968bdaed0063998d5fb8b15a03344543f53a35df8018b qemu-kvm-block-blkio-10.1.0-17.el9_8.4.alma.1.x86_64.rpm dcd90e23c10d405a78f6850415dc660ff73a549f83dfd3eb979b51d59734a315 qemu-img-10.1.0-17.el9_8.4.alma.1.x86_64.rpm e3bf0974b719ca927f5aef83d94c4c47794cffec992ba5a1706e3a797b691767 qemu-kvm-docs-10.1.0-17.el9_8.4.alma.1.x86_64.rpm ee4baa21bcc2d120890418a2586e887bae752c0d2b2dc0069d6c0f7e91119708 ALSA-2026:39315 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-solv-0.7.24-6.el9_8.x86_64.rpm 5aad313de264f86db7c14849346dda7343b04758fc534715e27001491c1484ee ALSA-2026:39316 Copyright 2026 AlmaLinux OS 0 1 Moderate

cups security update

The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network (CVE-2026-34980) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default cups-printerapp-2.3.3op2-39.el9_8.x86_64.rpm 2338f81a2a4f0f9d913e1bcef02655cbe34ad6c75f53a33975bdfaa26d67674e cups-ipptool-2.3.3op2-39.el9_8.x86_64.rpm 459b91d79c3998d79a1e7f7c1cae93f7edcf4588594c9015e2be39862954bae5 cups-lpd-2.3.3op2-39.el9_8.x86_64.rpm 5cc751558e9a9ffd42088cbf01d52d237de1628adc58da0cf001fc96762ff158 cups-devel-2.3.3op2-39.el9_8.x86_64.rpm 9be654041fc23d0266fce17d8b641a809e72c846f280cc4e7ab7dc155b6a88c8 cups-2.3.3op2-39.el9_8.x86_64.rpm df4095d88886021ef06886a43acdf12b3d470f9f1d8bb4fc9eb549c7a079443a cups-filesystem-2.3.3op2-39.el9_8.noarch.rpm e6a12c11938fcba6e5a16bd90a2f88d21c18c5a2d767a05bd56e9901397c9815 cups-devel-2.3.3op2-39.el9_8.i686.rpm f2c6119d0412f8dbbb6af0b1843f23425760cf348d2edc7296d5c94ea3de6124 cups-client-2.3.3op2-39.el9_8.x86_64.rpm f9abd4ac47050a2b5c2365d4c66d215f2a5210a884426e5ec792880e73861962 ALSA-2026:39317 Copyright 2026 AlmaLinux OS 0 1 Low

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling (CVE-2025-6170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libxml2-devel-2.9.13-14.el9_8.2.x86_64.rpm 156d0b4a84e030549cb3b4d05da02e15f889c6c8dc024fd8cd71c994475ddad6 libxml2-devel-2.9.13-14.el9_8.2.i686.rpm b552a9839eec6e7ab22e73831009ab76353fb03941f3728e77f720ba3b2e5125 ALSA-2026:39319 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default git-lfs-3.7.1-4.el9_8.2.x86_64.rpm af245d13d42a201fe9781605e80d970ef0c8b0c9c02d14c4babf8ee901314ae6 ALSA-2026:39323 Copyright 2026 AlmaLinux OS 0 1 Important

pacemaker security update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): * pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pacemaker-cluster-libs-2.1.10-3.el9_8.x86_64.rpm 0a7c242a53e8fb2fafba34868c0789f5e0d9261ba1aad3a9af2a32d72ad1db14 pacemaker-libs-2.1.10-3.el9_8.x86_64.rpm 2a4e0c734b8ff6b8db8dbc9d6049a9b734045a2c4361bdd7df9d63cedcd3ccd2 pacemaker-libs-2.1.10-3.el9_8.i686.rpm 3772172b05db0f21f1e9cb7b4f1f8fc822bd982aabca95920f7fe32edb19a0d9 pacemaker-cluster-libs-2.1.10-3.el9_8.i686.rpm 8e9db1e04ff454da24f85f8092b9a2babdf8e5f5bae8eae8fc0efaf976755ddd pacemaker-schemas-2.1.10-3.el9_8.noarch.rpm a589196ef5ee06f85babd1361cfed46835235482de7612a1a68e023eb7eb09a3 ALSA-2026:3940 Copyright 2026 AlmaLinux OS 0 1 Moderate

nfs-utils security update

The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Security Fix(es): * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nfs-utils-coreos-2.5.4-38.el9_7.3.x86_64.rpm 3e6a5e7014a9c606beb2018829cceb3009c493eac22d9733ab1714b74a5e13b2 nfsv4-client-utils-2.5.4-38.el9_7.3.x86_64.rpm 682f9030908319d50175d2b348d8346ccca34894b4694a9020c6cb015320f26a ALSA-2026:39553 Copyright 2026 AlmaLinux OS 0 1 Important

perl-XML-LibXML security update

This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation. Security Fix(es): * perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-XML-LibXML-2.0206-5.el9_8.1.x86_64.rpm 2d8384ec390475abc3f2675f06ee00b8e70b179b79f649949e641e961be8ccac ALSA-2026:39576 Copyright 2026 AlmaLinux OS 0 1 Important

cifs-utils security, bug fix, and enhancement update

The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system. Security Fix(es): * cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505) Bug Fix(es) and Enhancement(s): * cifs-utils: regression with kerberos mount [almalinux-9.8.z] (JIRA:AlmaLinux-192982) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pam_cifscreds-7.6-2.el9_8.x86_64.rpm 84d746e65337d3bef62d27d48ad778b93d92bb96d2d2f7c12878d91ef1a57326 ALSA-2026:3966 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106) * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-headers-5.14.0-611.38.1.el9_7.x86_64.rpm 06330ecdf8e52134ca76cb7271d80e5925861eb68efc21a87e2a26475485de37 kernel-debug-devel-5.14.0-611.38.1.el9_7.x86_64.rpm 5001e70164b1368ae74584d444c669bc0a021bfd059236fad38580a70ffb74b4 kernel-devel-5.14.0-611.38.1.el9_7.x86_64.rpm 6c30573316e8620a455f86e49397c8ca59bc3bafd48eda925de8778c7c53a24a kernel-devel-matched-5.14.0-611.38.1.el9_7.x86_64.rpm 7b29cbfcfcf057b360d52bd561a3730e6645f355d6b5a82afbc5f05ff77768e9 rv-5.14.0-611.38.1.el9_7.x86_64.rpm 98b65a41d08181bd7fb96b5a2ebbf20c85eabcbd0995057a0da548669280e9b5 rtla-5.14.0-611.38.1.el9_7.x86_64.rpm a7ff44ff74c6a19ec1fb708cab329b58b8acd790017c2004ba49b5c2c3df4e5f perf-5.14.0-611.38.1.el9_7.x86_64.rpm b50ea2e6ba6448bf353176322ea1ca51bdd950b67416ee7f2b00df05349310b7 python3-perf-5.14.0-611.38.1.el9_7.x86_64.rpm bc858c4d89de92c7902dbb3d12a2aafd091ac9f478f7fe9d382f690d6353f5e8 kernel-debug-devel-matched-5.14.0-611.38.1.el9_7.x86_64.rpm e189913b0c7f7fbef6c9da76a08851d11707417e0885e8b476f432b4117a49de kernel-doc-5.14.0-611.38.1.el9_7.noarch.rpm eb36db504b5dd7e640af106b50d3a99d515546da64a02fb117247f560454925e ALSA-2026:39771 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.12-3.12.13-3.el9_8.1.x86_64.rpm 61040c3c065e2edf2c0704c7718c7350959c5fa4dddaad5d3c1812541002f1b6 python3.12-tkinter-3.12.13-3.el9_8.1.x86_64.rpm 67c4ef3ffd2fb9ff7e184419e4eb44686e3d35cdc2683a3f302d6cfefb2f91b3 python3.12-libs-3.12.13-3.el9_8.1.i686.rpm 7fe05d8b09a424e42372bd862d7cd6845195055c736d1abe09438064224e172c python3.12-libs-3.12.13-3.el9_8.1.x86_64.rpm 86115e02e3757140c7925d37e404ebf5426fa9f98b4d22906509bfad254f5751 python3.12-devel-3.12.13-3.el9_8.1.x86_64.rpm c714cba44f253ee6452c9b830e5cdfa84ad30396288e6eaec030c9401e354888 python3.12-devel-3.12.13-3.el9_8.1.i686.rpm e461ff38a9be10f595711e6eaa6ebab1ba3b4f8ee88e856aaa5a49571f1eb7c0 ALSA-2026:39798 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) Bug Fix(es) and Enhancement(s): * python3.9 test_ssl fails ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data (_ssl.c:4192) [almalinux-9.8.z] (JIRA:AlmaLinux-194207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-devel-3.9.25-7.el9_8.2.i686.rpm 49d12bbd469029444cdd4656c32a9821db460475af60963d95a53bf76b77366b python-unversioned-command-3.9.25-7.el9_8.2.noarch.rpm 5588d5f207e73d570e257bbe685f875ce372c4b756f89f28f8f0b836b1a88451 python3-tkinter-3.9.25-7.el9_8.2.x86_64.rpm bdaf6704f1f5028460521b5078355dd03a0363b4ddbfab0950e47dbaa08e6979 python3-devel-3.9.25-7.el9_8.2.x86_64.rpm f66b41684521c73218373d2cb4bad63a19adee96b567b494d8aa536b5807b45c ALSA-2026:40416 Copyright 2026 AlmaLinux OS 0 1 Low

php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD (CVE-2026-14355) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.2.32 for CVE-2026-14355 in 9.8.z (JIRA:AlmaLinux-192622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-devel-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 0457f02a427eaca352851f9ad8410c4c6037936316c0723173caf1670f434f00 php-common-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 1d0043c768349f4aa067e7972ee1e5e114f1bf943883887709a53137df1bd60c php-fpm-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 1e8da64987e0f4c04a6a186e2a9d217dfd659af7b28f2cefa15c9a0c8f112dbe php-snmp-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 1f7f3a4c77bc1c5b4b838bc40c849f3e91b098e277c67d0cca2540a00a4197b8 php-embedded-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 2ed78f2cae6f6913a031ee112134dd4a426bad1eac88bc4d88b404e0fc4e29ff php-mysqlnd-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 303f83c007cd88d58d8c0717ea2158185b7d7b597bebe84d33cb0a385a04922a php-dba-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 3671862926283b8ab34122a199633166bd3370f5d3df0e954853a1bccedb70d6 php-dbg-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 3f91c6a73ee790b17c7152ffb2e49486b905454fd23bc79888824e45f5f4ead4 php-gmp-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 40144763423bce8875e816215577efd3ed07800865876217a4f1602eded23190 php-ldap-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 46ae7a4feef5a04b29c388be20c9ac50cee2b3a2d200af45811a66dbdb6225e6 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-enchant-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 4f89998658ee8e9fc7c3856d1ffa3e9a337f2c6ee98c1582657052e50cd7a0ea php-pgsql-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 641d442d6646d37061d0506aabb970b16085e1913c680f0d4ed8bb36abe51ebf php-opcache-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 654a36fb5157a6fde1b640aceeb87c8bff66afdbb8e6294cbafa1fa0006af725 php-intl-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 805abbb059e804368ad2623518239123ffe32967f2ae302230dbee3f6e50cc0c php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff php-cli-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 812a8181bd6f6aca13a0b943387f0f47f42cc2551d5f29ffe1609834a217e652 php-bcmath-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 8133acc647fca155235d9595e6c6f5e16310bf29104f76e31fa426e706b1dbf8 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm 96cc987054e929ded9dfb18f35b9c6912a9df307b6e6ffee3c409f85bafa2181 php-odbc-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 98b78015de2876a66e83e84191b04930515be231ff68cac336de10740086bd82 php-ffi-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm 9b0f231caa4355450624b530f8cade1e9933f81be9e33f520d2cd57c8f51a831 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.x86_64.rpm a05a23d56973cbb28cd6df434887268ea519defa51e9176928b1f6859bdd33f8 php-soap-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm a0670459611e7f84d884f0e02898dc9b9e40e5e6510bb57032b2995ad7f5ec6b php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.x86_64.rpm a0c7dad446e919bbb42213de89f00d65f58b08c51e4e1ab382707c3324627f7a php-xml-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm a315498d696d63a11f84a148af656cb7399fc935ecdb6af7c4ea194bb5fe85f5 php-mbstring-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm bf7e1ff549af8600e7bb2786b10bc646c785048e2c273e32ac78d7ce7b04fa6b php-process-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm c7e88c2198538db7daaa63ecde9054851bace88ece90f04c284adf4d4fcaa7fd php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm d4536864003ca10535ac907cbcc199da8c73c8b16a66b52aaeb1431f587b1ea0 php-gd-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm ec4a610013a784b58e1333d82bfbd5fd7651d361ef3e01cfd8e00f734a931dab php-pdo-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm f56cda8d6a80ae32f11f4502b314a2db0a9fc40e2260baba82080d90ee679cdd php-8.2.32-1.module_el9.8.0+284+2e0ccc92.x86_64.rpm f658cca3d9fcf6e094a7d005dc1a043e1e5ade1d15c6d12ed95b31b008b2ce90 ALSA-2026:40751 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() (CVE-2026-58380) * gimp: gimp: Integer overflow in read_RLE_channel() (CVE-2026-58384) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gimp-libs-3.0.4-4.el9_8.7.i686.rpm 106c2c1a52844f5593f4b50e0d2fc26096887ca104905c3a7510ba59b79a743b gimp-3.0.4-4.el9_8.7.x86_64.rpm 1ae5ebc836bb822047006a09f54cd61c6a8cca07fd133ef67fd8f2eaeed37d26 gimp-libs-3.0.4-4.el9_8.7.x86_64.rpm 4a4e00ac43520cdc7828336f14522bea82c044e39f4ea3359c6fa4f026ff4d2d ALSA-2026:40831 Copyright 2026 AlmaLinux OS 0 1 Important

hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fix(es): * HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default hplip-3.21.2-6.el9_8.5.alma.1.x86_64.rpm 0146e29df09850977752288e8f4cfe1498278912fe0706dcdf5f0d17992287b9 hplip-common-3.21.2-6.el9_8.5.alma.1.x86_64.rpm 02b0e091d53d04e0016bf7bf3455c273ad84a5aca0168a562998c620a6003872 libsane-hpaio-3.21.2-6.el9_8.5.alma.1.x86_64.rpm 07933dcaa726d44a5818bd4b2906d7a6c019af48b16633544ed631a3db06849a hplip-libs-3.21.2-6.el9_8.5.alma.1.x86_64.rpm 8b7fd153eddf093dddf7945f78f09b027dd04c97903f2a52d18883499116ad5e hplip-common-3.21.2-6.el9_8.5.alma.1.i686.rpm b7618bbb236704391f92b86ff0b5ad8da1b2afaa215812ba6980a6c3e4c6e84f libsane-hpaio-3.21.2-6.el9_8.5.alma.1.i686.rpm e9195deee6c41a35143b43112c7222d9f2010aa1ba2e81f47b244d437260e174 hplip-libs-3.21.2-6.el9_8.5.alma.1.i686.rpm ee04480f906cf2c859aa8549551b085ff4119c3b3ec99c8d75cd93d7e80441ce ALSA-2026:40895 Copyright 2026 AlmaLinux OS 0 1 Important

jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): * jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513) * jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pki-jackson-databind-2.21.4-1.el9_8.noarch.rpm 5d70286446cdb2416a754f1113a794c5cd48ff1bbec59db6163f2e5e2d29997b pki-jackson-jaxrs-providers-2.21.4-1.el9_8.noarch.rpm 645bff697f24f756541b9fc6a3c323c13ae54c4cdbe7efd9677c77e135267cd7 pki-jackson-module-jaxb-annotations-2.21.4-1.el9_8.noarch.rpm 71839cc322908f26d651befd7abf661b8a1ac508e56bd55cd19f822c83dd21ba pki-jackson-core-2.21.4-1.el9_8.noarch.rpm 8435724b5a5b5e037898b15d17880d3c1202e1a82c9b8ef93d9a9bbef6c9c240 pki-jackson-annotations-2.21-1.el9_8.noarch.rpm 8b9b129b1ac53f3c58858b72d8367e01a4bc7b489bec6695e97c6cfbbeb87942 pki-jackson-jaxrs-json-provider-2.21.4-1.el9_8.noarch.rpm e5de871877caaca1638b95c9577c8b0cf3ad1757d1b62c2671288758b8402e31 ALSA-2026:4110 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default postgis-docs-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm 04cfa74a8c62fa4a87068b950026f691e674fdf92631991d2461f953dba9ce60 postgresql-server-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm 0a0e03f72ebacd9cc589a02e6f1917ee1a39dea08acca327ad1eac187f13a292 postgis-utils-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm 0ed020edde840a1db5c3f1dc045e6c5792a198092d634f60801c79c03f19d8f6 pgvector-0.6.2-2.module_el9.6.0+167+4e561146.x86_64.rpm 1141f322652c8d905035a08a39e707d5192236d5b4b442802732b66a0684e10f postgresql-test-rpm-macros-16.13-1.module_el9.7.0+213+65e1da69.noarch.rpm 3033607f375f822e2e026542ab0333cc58d6bbb3bc5b12eb086b3c47622de34b postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 postgresql-contrib-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm 351d375bf54fbfa337a331ea247f9c8e88d35691bf2e4c3b9acc8c897a8e1108 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgresql-test-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm 45424b8a6b65a932cd4158571a44f9850bf7cf9dd6441910473e5c37615a8dc4 postgis-client-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm 53c364d553438c9b8fb5540d3bfbb3399b126b996b30c0514c0ce1168931600a postgis-upgrade-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm 5e828ee3b542841d6808d31956de9cc487b36262040179f34bf36297ca381f3f postgresql-upgrade-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm 68f87edb9de10074ea5b6850a08ff8d4c2f7f99663bb55f36f422151c0b17b56 postgresql-server-devel-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm 77b52a357ff6304929da28db6fcd5764cde59499359a83ed6fec19aabcafc925 postgresql-pltcl-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm 82dce048fb117e5180017d9352cf6c28d24966c1c9aa5b7678452e9ffe3f672a postgresql-plpython3-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm 9d204bd0f09888c6c6b1b7dbfad64b27a7b78fba77584af5ab796f1810b3188a postgresql-upgrade-devel-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm 9d4394f6765dbeb7a291e2c3cd272d2cfb52847253d8371615dab238dbf3c823 postgresql-private-devel-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm aa5cc3d114d2ed940c358f4a3b41544f18e09fc150c16966bd2e9016c4196a34 pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.x86_64.rpm c660056970f41edeec199c6634387c8235fcf981c34cdf3f74d9d3b3fd36eb63 postgresql-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm c9b4c459eb88e958fbdf0402ba2b0cdc3df13077e9c5d9ff354d2329bcda392a postgresql-docs-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm c9ff9cb14e0d1fb7953126d6d1f1e3935c16c8485e583c181b151fa6e8e52236 postgresql-static-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm dbb9f964b29b9f698108aad43b505b4fadd67e4d81eb0be4e9036d41d4cf7d66 postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.x86_64.rpm e15fef1425c6e23296c38c0a10587352caefee293655e5003d3b71019a52ffa8 postgresql-plperl-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm f56efae1f7fd8fbebd3556d3473e24124acf7f37906b4e533a5fc1f8c2f8b431 postgresql-private-libs-16.13-1.module_el9.7.0+213+65e1da69.x86_64.rpm f9a26b5ccc65d5ecdfdb1c35eec13ff145566e2a3bcc2ce0aedfc01b65a43e05 ALSA-2026:4165 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366) * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367) * cpython: email header injection due to unquoted newlines (CVE-2026-1299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.12-devel-3.12.12-4.el9_7.1.i686.rpm 30b4e789c8e6f0f5cc81795f63f1757e49ae0ef0ef809ff0696bad5848f4885a python3.12-tkinter-3.12.12-4.el9_7.1.x86_64.rpm 534fdd974c7e2f08179a4fbe0fedc12d1674ba470fd07c71e27c2315f5847a8a python3.12-libs-3.12.12-4.el9_7.1.i686.rpm 8b28d903cf009860b8b3e8e83df4f811d24f6c34c877bd9e7475c7b01d0156dc python3.12-libs-3.12.12-4.el9_7.1.x86_64.rpm 974d210627226a54a39e4930c8c75bd5ca3ba52cc9dd4d7dcf07411a2473de8b python3.12-devel-3.12.12-4.el9_7.1.x86_64.rpm bf9d9f41ef544d53d717450888baa418929c24fc92ccfde25a231db6cfe91d58 python3.12-3.12.12-4.el9_7.1.x86_64.rpm ecfaaa8e4d325f0ce1f519f92f2137697bf95a77a190cd213c59e087bca3f261 ALSA-2026:4168 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366) * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367) * cpython: email header injection due to unquoted newlines (CVE-2026-1299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-devel-3.9.25-3.el9_7.1.i686.rpm 26ab1c4d8525d01f1277c89d4745a0c47488024fcb9036b0661917ae9c213eb4 python3-tkinter-3.9.25-3.el9_7.1.x86_64.rpm 76e1abebc93837c1afaf77aa6c456cc42c4569f9e9240f39cd65fd722012fff9 python3-devel-3.9.25-3.el9_7.1.x86_64.rpm a1a69a6bad7b0b0949c57a5edbaba063f9b6b28494a81035749f758b3236b134 python-unversioned-command-3.9.25-3.el9_7.1.noarch.rpm fc2bf48a97fb5743bbf48ca1cd3be9b7a5e50de38cb2be4ca3e05881ad308ce4 ALSA-2026:4173 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing (CVE-2026-2047) * gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing (CVE-2026-2044) * gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing (CVE-2026-2045) * gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability (CVE-2026-0797) * gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability (CVE-2026-2048) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gimp-libs-3.0.4-1.el9_7.4.x86_64.rpm 5583ae30e289d87f716c375dc3a5e2ba9967d8461f218d6cbc59dd2c6e12cff2 gimp-libs-3.0.4-1.el9_7.4.i686.rpm 5ff8a5d1e3dc800171250cad150f626992c4ab2cf3986b5feb85fa429e9acc80 gimp-3.0.4-1.el9_7.4.x86_64.rpm ba85319dc2fd30e9814d352bcd2be6ad34b508c9c5b06a6ae6ca95552580bb5e ALSA-2026:4177 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default opentelemetry-collector-0.144.0-1.el9_7.x86_64.rpm 45cb85c28b8df9d245b0034496802ba6b143f0bca7f2037bee4e25d1c1e50310 ALSA-2026:4188 Copyright 2026 AlmaLinux OS 0 1 Moderate

gnutls security update

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (CVE-2025-9820) * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gnutls-c++-3.8.3-10.el9_7.x86_64.rpm 28246d466b350d88796f72741710f1f87edcf87c6e1eaeb98184dce9714c3650 gnutls-utils-3.8.3-10.el9_7.x86_64.rpm 471c7ba3535e9c8e1f9cddee26a6d25dd75990793a7be9147ec235ce13e6051d gnutls-c++-3.8.3-10.el9_7.i686.rpm 5f0c246a418f76b887c125926f0d1bfed3f595e6b3f397e3cde362e0362ab0aa gnutls-devel-3.8.3-10.el9_7.i686.rpm 638d485e1992864ce07e358506514910eb07dbbc64fe6ab47ca61489f5dfc672 gnutls-dane-3.8.3-10.el9_7.i686.rpm 656e78c63a0e0f31a2af8597caa4edda4633cfff879efe06f21cdf6f1802f1cb gnutls-dane-3.8.3-10.el9_7.x86_64.rpm 84d6081f70259f2ab2e257c517669c9ead62ae9975d10936d8d9e7b9935643fb gnutls-devel-3.8.3-10.el9_7.x86_64.rpm c2988f1aabc7e22c763643339bd1e6e4c18bf6f5fdc0dcb9fdd1c62d113facca ALSA-2026:41894 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [almalinux-9.8.z] (JIRA:AlmaLinux-192467) * dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-runtime-8.0-8.0.29-1.el9_8.x86_64.rpm 42e056567b3fcc25ace3684b1ebd19a589dfdc8fa638927dda14506c10047699 dotnet-targeting-pack-8.0-8.0.29-1.el9_8.x86_64.rpm 49863161677b581d71c4ca648b69f23d983480dd19aeeb0a2a7e207493996ed6 dotnet-runtime-dbg-8.0-8.0.29-1.el9_8.x86_64.rpm 61307e80110c09d70f5cbea83cb247d80c90d8fed8658dd55b9191698c848f35 aspnetcore-runtime-dbg-8.0-8.0.29-1.el9_8.x86_64.rpm 67e9bae19136700d4473a265e77058dee31e6817b0620c5479eb0fd6f457d833 dotnet-sdk-8.0-8.0.129-1.el9_8.x86_64.rpm 6db44f12773b5d3ed42a6d80612e6372692f302884b399ddfe7a753a35a90361 dotnet-hostfxr-8.0-8.0.29-1.el9_8.x86_64.rpm 720d7fb3a74d78fec534658859d36ae328572b5ec4e15e77b392da904e4e5398 aspnetcore-runtime-8.0-8.0.29-1.el9_8.x86_64.rpm a5a11d3fb29bafd863c9a93ec6dd63558208e8ca0f891e11ffd3181096af49e6 dotnet-sdk-dbg-8.0-8.0.129-1.el9_8.x86_64.rpm b816c11b99282ae3c7e69b14c79d83d772e5b570d1215b8f6e09c30d38668614 dotnet-apphost-pack-8.0-8.0.29-1.el9_8.x86_64.rpm be6932d0e0e8c40e3e3c678134cd0d7b44e820e66bef399dc567f5aad620c636 dotnet-templates-8.0-8.0.129-1.el9_8.x86_64.rpm cb9a3fab700f32fd7a2b6b08455ec8de227384cb4b95d66a0096523f7f8dfb6f aspnetcore-targeting-pack-8.0-8.0.29-1.el9_8.x86_64.rpm db32bb43e252f06063513219541e975caa49ac29261272ad5dc322569e9a6ded ALSA-2026:41896 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.119 and Runtime 9.0.18 [almalinux-9.8.z] (JIRA:AlmaLinux-192472) * dotnet9.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192338) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-templates-9.0-9.0.119-1.el9_8.x86_64.rpm 037939bf2111e062fda014fb5a5c5585a086ef4e9af46d3f220185030a6188e9 dotnet-runtime-9.0-9.0.18-1.el9_8.x86_64.rpm 066bb4a2fcf0a9cb388e1b835019424d8557c780001a12b2011d74b7acb1ba2b dotnet-sdk-dbg-9.0-9.0.119-1.el9_8.x86_64.rpm 0cf4d1e0fd069856674ec31febc424f422a8a12cb4c1569795e2abd0c61f535e dotnet-targeting-pack-9.0-9.0.18-1.el9_8.x86_64.rpm 0dbfe0eaa6fdb713246a540cc544d1836a4b8e19d0bf88b953ed145351de6c6d dotnet-sdk-aot-9.0-9.0.119-1.el9_8.x86_64.rpm 216943392b3ff925229d2baa510c32c415d744b4ca309e817b54736066b7bce2 dotnet-runtime-dbg-9.0-9.0.18-1.el9_8.x86_64.rpm 379eda65d820f95373285e7bbd5a66d3b1eeaee34a1cfe8b6aec2f990b3d249f dotnet-sdk-9.0-9.0.119-1.el9_8.x86_64.rpm 603d02a1d9f9af9c7f50320c432e931303f91fb9fc071707d8262df24403d9a7 dotnet-hostfxr-9.0-9.0.18-1.el9_8.x86_64.rpm 82b5a59b9327a82b150c9625773efb555a233d678bd45f4406d6774f0439e03b aspnetcore-runtime-dbg-9.0-9.0.18-1.el9_8.x86_64.rpm 93304c21bd9a1127795f027ecaeb74e13c6ad6d574fd1c91fafceac599dbeff4 aspnetcore-targeting-pack-9.0-9.0.18-1.el9_8.x86_64.rpm c7d557dda0d4f5f2f87e5754b77f5a4ef08575595224637915b7618d2e70f9e1 netstandard-targeting-pack-2.1-9.0.119-1.el9_8.x86_64.rpm c95c7a1d028e934d824e1b101620b70b2279697ab85f3b164344bf17de843c89 dotnet-apphost-pack-9.0-9.0.18-1.el9_8.x86_64.rpm cd4dcb56713f4c059d12d0ed2028749acffd8855f5affc7f7b9f7263ad711211 aspnetcore-runtime-9.0-9.0.18-1.el9_8.x86_64.rpm ce3b57815f489d0300bacdf99fc7632bb611e1d31dfb15c67f8fef1646e797e8 ALSA-2026:41898 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.110 and Runtime 10.0.10 [almalinux-9.8.z] (JIRA:AlmaLinux-192462) * dotnet10.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192336) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-host-10.0.10-1.el9_8.x86_64.rpm 0357aaecb8c49467a6502466599253e29d1433d5980494d310cb371145575d8e dotnet-sdk-dbg-10.0-10.0.110-1.el9_8.x86_64.rpm 223dbc77cf0f582bf7b5c5df6eade48a16467ac92be90687a0eb93b4e13c6445 dotnet-runtime-dbg-10.0-10.0.10-1.el9_8.x86_64.rpm 3ed48d7aad3f57d956af26782b7a30b2ec510e1c1b4a8f367094180f9b945b5a dotnet-sdk-aot-10.0-10.0.110-1.el9_8.x86_64.rpm 4d81b353947ed28b601feaf3b8656c8deb0c83a36ed5a6d26290942e87844ce8 dotnet-sdk-10.0-10.0.110-1.el9_8.x86_64.rpm 67b627f968c6b8a800d196def7ca9d61964252ccec71c578c85f9800b0a81119 dotnet-targeting-pack-10.0-10.0.10-1.el9_8.x86_64.rpm 6d96dd3236bd3a0d16218f39ba13d6e3f01213a137ffab3f2e340fff43a28aae dotnet-runtime-10.0-10.0.10-1.el9_8.x86_64.rpm 72a37e467e17fde60e26fbc5c2f363d4fc45bfb3678c8b151f6dc6b295fe7779 aspnetcore-targeting-pack-10.0-10.0.10-1.el9_8.x86_64.rpm 7d8d42e015cdc2730a72cdf3ffd8d8f9e7c18a632c6f1ca0dc713caf07a44435 dotnet-apphost-pack-10.0-10.0.10-1.el9_8.x86_64.rpm 92fb843152399123fe8e35358f44d1980c585b8a1ebf13da274f02ee98a84165 aspnetcore-runtime-dbg-10.0-10.0.10-1.el9_8.x86_64.rpm a489b9890b2af39351b99bc1b4469e866bda0d11602610788db9c53293d8daa2 dotnet-hostfxr-10.0-10.0.10-1.el9_8.x86_64.rpm cfeb9767c515d8320ab682328cbd9ea91bf9e708a0eafd24c76d5b5241671c38 aspnetcore-runtime-10.0-10.0.10-1.el9_8.x86_64.rpm e34eaee1d2226802ca02c7dc535f5efaa791950540d95022a08bbdd1376bff15 dotnet-templates-10.0-10.0.110-1.el9_8.x86_64.rpm e42b19bd3b0d365e2b9590d6e141f3eded0f51473c2614984b9d9975c30339a4 ALSA-2026:41905 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dovecot-2.3.16-18.el9_8.1.x86_64.rpm 3857511d951ebfda475568c8de73d6d7e44d4092a077eebe8506613261c91887 dovecot-pigeonhole-2.3.16-18.el9_8.1.x86_64.rpm 5c29f5231102d93c4c6169206ff9651e87eb5472adbcf09f6161be560c23b0ff dovecot-mysql-2.3.16-18.el9_8.1.x86_64.rpm 778ecbf7a39d65068dbfbd1f3801a3c0ecc2cb41fe5ba4a2d217102a91c0d6b2 dovecot-pgsql-2.3.16-18.el9_8.1.x86_64.rpm ce06a0bcd372816d8e2a477b7fa11972aba4cd64b67cfa3a77a9993555caa58b ALSA-2026:41906 Copyright 2026 AlmaLinux OS 0 1 Important

httpd security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) * Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation (CVE-2026-24072) * httpd: mod_auth_digest: timing attack allows a bypass of digest authentication (CVE-2026-33006) * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) * httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) * httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) * httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) * httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186) * httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue (CVE-2026-42535) * httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) * httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951) * httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges (CVE-2026-44119) Bug Fix(es) and Enhancement(s): * address Moderate severity issues from httpd 2.4.68 [almalinux-9.8.z] (JIRA:AlmaLinux-184520) * mod_proxy_html regression in CVE-2026-34355 fix [almalinux-9.8.z] (JIRA:AlmaLinux-192752) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default httpd-core-2.4.62-13.el9_8.5.x86_64.rpm 0db229d8f6c095b8fbef70d77be5f5d1a7c0fc4f523b152fc8a9d0a4467f83e4 httpd-2.4.62-13.el9_8.5.x86_64.rpm 18b9df4549235555a664b8543c8ae0bc4068cc22d1f72dfcb29b66925efe9de1 httpd-filesystem-2.4.62-13.el9_8.5.noarch.rpm 4c04f408e6394dcbe2bb7ccca5cb12834258a843eac44ff7fe5558f6fa073d18 mod_ssl-2.4.62-13.el9_8.5.x86_64.rpm 51b51b6ed3b128f1b0b538d6e27ca301a518129ade87cf06ddd5b7ad1613a39c httpd-devel-2.4.62-13.el9_8.5.x86_64.rpm 8e6ef0ab752affb6d35fa42f51206e80157ec4a17887054ba8fea4ac61c30271 mod_lua-2.4.62-13.el9_8.5.x86_64.rpm 93136207de7e6ea0ef96c6981fddbdeb9edb248f038d6d4698ab73d3f8c9fe96 httpd-tools-2.4.62-13.el9_8.5.x86_64.rpm 943bf6bb663bb976977576b343b3c15df1fce0cf138ba0768d0236adff806956 mod_proxy_html-2.4.62-13.el9_8.5.x86_64.rpm b7b4e69403bdb27f705d693d55be4e8a9180966c07d1420ba207cdb50ccc0cf9 mod_ldap-2.4.62-13.el9_8.5.x86_64.rpm c3333a819ca905a716ba0a985894acfb697ac749492b0b77326ac9ef0a27e0b4 mod_session-2.4.62-13.el9_8.5.x86_64.rpm cee06c5b8b37b3fae4b54ea01132989b67d921cd0e3c9449c7fa8f50d70b553c httpd-manual-2.4.62-13.el9_8.5.noarch.rpm f385fb8cd4918d9180d8f574c70c9f3d6c7e1ab572c7bbfdc488706f96497b4d ALSA-2026:41949 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-libs-3.14.5-1.el9_8.1.x86_64.rpm 2d6f0fca9e8b0e05d7d0125ebbe757d6e9ae286bd12ddcb1602341caf37cb1cc python3.14-tkinter-3.14.5-1.el9_8.1.x86_64.rpm 42326c85ee1f0d1b086eed1f43c71677cb5318a5c16ec4aa1d3ede4d5616d8da python3.14-devel-3.14.5-1.el9_8.1.x86_64.rpm 5fd76c5f146f1bb1d57dbac3a652632b24b41bc86bc28e49347319be165732ff python3.14-3.14.5-1.el9_8.1.x86_64.rpm 8bc0a6da55dba23388079381f6c3b14025f66ca1f23acc9515b92781ee885ee6 python3.14-devel-3.14.5-1.el9_8.1.i686.rpm b3fd275b8618cd62f9d5f3653bfba691b887bb52411c8900aa6779436f1f27ff python3.14-libs-3.14.5-1.el9_8.1.i686.rpm d2ae5eef444dd3b6ffd7cd659f61fcc889859ee860f96290bfe68550d260005c ALSA-2026:42062 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699) * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712) * webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720) * webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721) * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727) * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731) * webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734) * webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742) * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default webkit2gtk3-jsc-2.52.5-1.el9_8.x86_64.rpm 0c56e4fe6434db6837a0ca6256a9ab0044e12610b14045a0a49d2e8034d22de0 webkit2gtk3-devel-2.52.5-1.el9_8.i686.rpm 483c5507fde5253785d8d0676788e7960506a69117c9197c993d959feb451ed5 webkit2gtk3-jsc-devel-2.52.5-1.el9_8.i686.rpm 5c7519d0ce3ba910803d7a7ba3b39531733b1936bba043d68d74daaa45d2e2e0 webkit2gtk3-2.52.5-1.el9_8.x86_64.rpm 630250c90dc75cdaf864e586f1048d91148e7b016ebdfc9afb689815726685cc webkit2gtk3-2.52.5-1.el9_8.i686.rpm 92867645ac344be9b565a8adef038466e3a80591a5f2dd91e1a6b768b6a3d23c webkit2gtk3-jsc-2.52.5-1.el9_8.i686.rpm b05a0d947227bbdf3f32d04b1a5c81ff85e9ea022ca6ab251c8f59825901c6d2 webkit2gtk3-devel-2.52.5-1.el9_8.x86_64.rpm c93a6d388d504371dba66f31d22e0c219fdf8548e58c81c427e8c4b3f26be9bd webkit2gtk3-jsc-devel-2.52.5-1.el9_8.x86_64.rpm e6b73f579daa751a048099633d4f399f4e9edc7b350948846e3e6f8efc20505c ALSA-2026:42089 Copyright 2026 AlmaLinux OS 0 1 Important

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default glib2-devel-2.68.4-19.el9_8.2.x86_64.rpm 378bd5d77f042804c66bb26d12e74a4dd9f2da0d7881313b6d56f0238dbc71f8 glib2-devel-2.68.4-19.el9_8.2.i686.rpm 3eb2e1e71caf18c0c23bbff0f2110531bb34d6b8c4b12a8fcbd5ebbb6111b9d0 glib2-doc-2.68.4-19.el9_8.2.noarch.rpm 4ea9600e51edaff4be40f5e510f7ac1c8c0b0cd99aaa1b168af3bd36cb6d1e12 glib2-tests-2.68.4-19.el9_8.2.x86_64.rpm 72c138b09b2494b777faa7ec97deee0e83300d564e7caa8d1a542945eba34d9d ALSA-2026:4216 Copyright 2026 AlmaLinux OS 0 1 Moderate

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366) * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367) * cpython: email header injection due to unquoted newlines (CVE-2026-1299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.11-libs-3.11.13-5.1.el9_7.x86_64.rpm 0730d7c2b43848dfa571d8f8b0e99f44cd746182222845b2a35713c6332ba8a9 python3.11-tkinter-3.11.13-5.1.el9_7.x86_64.rpm 660960cf63e7b6d51540a0d78c1b21f9d2e36465d3b00371cee957abb6aa087d python3.11-3.11.13-5.1.el9_7.x86_64.rpm b17a01ae7324cee5637e380ec7584d5734825b7039ef28813b34fdb9355db86b python3.11-devel-3.11.13-5.1.el9_7.i686.rpm b1debc2181aa91d13be982e881c5860693c6202dd5e6d2240bf3df97d2b9a6fc python3.11-libs-3.11.13-5.1.el9_7.i686.rpm d7154b0283db7223ca13408f0ebc798a0e72cc8ac0e3ab4a9a8336769b583e09 python3.11-devel-3.11.13-5.1.el9_7.x86_64.rpm fb7e9ce40c4d185d0aea8dbe6a2dadbb78168d2f31e114fdb646be1911ca46ae ALSA-2026:4235 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nginx-mod-stream-1.26.3-2.module_el9.7.0+215+8d94e91c.x86_64.rpm 3f3ad4e4fc9d5294d5fec589407c5a7857a1f00434b2a364102e893800084fda nginx-mod-mail-1.26.3-2.module_el9.7.0+215+8d94e91c.x86_64.rpm 5313d1f73aea5f8f2ddc5d2087614c2a88810a81671c60a29256d75319578d7e nginx-mod-devel-1.26.3-2.module_el9.7.0+215+8d94e91c.x86_64.rpm 68075d09b75a971d6af5e88a22ca393c2c519d448c60512b192e4566ad10b5e8 nginx-mod-http-image-filter-1.26.3-2.module_el9.7.0+215+8d94e91c.x86_64.rpm 73c0f3f6dc46e4d83e20f9db03cc3572b6e066117b56738f23e2980558bc3c57 nginx-all-modules-1.26.3-2.module_el9.7.0+215+8d94e91c.noarch.rpm 8ffdcb2b101503e11324958ae7605842acc8d0d33faf2ce2994e65e879aff1fe nginx-filesystem-1.26.3-2.module_el9.7.0+215+8d94e91c.noarch.rpm 957cba1da903a4338c9daa2e5e4cf2079d71679d740dadc0f051b466213a971a nginx-core-1.26.3-2.module_el9.7.0+215+8d94e91c.x86_64.rpm 9be4f3390b2c16c2b40d70a4749aca472e93fd8279911c75540ffabef2127b0d nginx-mod-http-perl-1.26.3-2.module_el9.7.0+215+8d94e91c.x86_64.rpm a4cac5ab9e073b76cc25ab78f3de0568b8801893a225bf14dd265974b435ac8c nginx-mod-http-xslt-filter-1.26.3-2.module_el9.7.0+215+8d94e91c.x86_64.rpm b88700f8034253138152e9860c30d1765854bbf7e6b0ef07d295d1f685933c17 nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.x86_64.rpm fa6e4517d9c8923d63829ae0c15128a68398525721477f0255f0b799358999b8 ALSA-2026:42668 Copyright 2026 AlmaLinux OS 0 1 Important

libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libtiff-devel-4.4.0-18.el9_8.1.x86_64.rpm 162ba210d542bbf52951054f4d7869aac2a5e44acf47b2fe4ae985b2a2c2c854 libtiff-devel-4.4.0-18.el9_8.1.i686.rpm 1f78eb29a57569a7d4b8d422da2db89521a09b2429ac135229a927b950956fb1 libtiff-4.4.0-18.el9_8.1.i686.rpm 5b6a6d3f1c6f219f4f3a5d43df1e82908507f1c741c992fe6b42accf925660b5 libtiff-4.4.0-18.el9_8.1.x86_64.rpm 5ee55075b2a1edd0a5524de18205ee6e64d6acc65e94a88b0d799c72c7fb2c44 ALSA-2026:42736 Copyright 2026 AlmaLinux OS 0 1 Important

acl security update

Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fix(es): * acl: Symlink traversal privilege escalation via libacl functions (CVE-2026-54369) * acl: TOCTOU Symlink Traversal via getfacl/setfacl (CVE-2026-54370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libacl-devel-2.4.0-1.el9_8.x86_64.rpm 59379198854138009da4a95ce9d5ee81ebbf0f713e35efb07b01c5a561797d4a libacl-devel-2.4.0-1.el9_8.i686.rpm c899cd69d30cbba97d54eff686a998eb2eb96d4bf2ccce29723820b6f49a1ba6 ALSA-2026:42877 Copyright 2026 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Improve Nashorn index handling (CVE-2026-47057) * JDK: Enhance Dataview Implementation (CVE-2026-47058) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212308, AlmaLinux-212309, AlmaLinux-212310, AlmaLinux-212311, AlmaLinux-212312, AlmaLinux-212313, AlmaLinux-212314, AlmaLinux-212315) Bug Fix(es): * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212319, AlmaLinux-212320, AlmaLinux-212321, AlmaLinux-212322, AlmaLinux-212323, AlmaLinux-212324, AlmaLinux-212325, AlmaLinux-212326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default java-1.8.0-openjdk-devel-1.8.0.502.b07-1.2.el9.alma.1.x86_64.rpm 1eb75204f567f4bd59073a03480db1bcb54566a71e4f7e8a1482a76aed8c5f1f java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.2.el9.alma.1.noarch.rpm 27b91e2cf01e8b16e3092266801f4afa6345f02a105c3e28d9b795625a42bfcb java-1.8.0-openjdk-src-1.8.0.502.b07-1.2.el9.alma.1.x86_64.rpm 65f8b32877d5c46059861e92902fe7c739b903a01d0bbb260fc47ba21d8fecbd java-1.8.0-openjdk-demo-1.8.0.502.b07-1.2.el9.alma.1.x86_64.rpm c5029f90df8283747c5473d407267c3a2aa64cdc95181e29fdd3488856cf7c35 java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.2.el9.alma.1.noarch.rpm ebada0731a844a8ede5f6a4f511920669645c19e9538ed92763250b6d67dee5e java-1.8.0-openjdk-1.8.0.502.b07-1.2.el9.alma.1.x86_64.rpm fbbc42dfb5e63673b4f074fdf2add7ec078809381ad5bd07dbf744fdb7f26526 java-1.8.0-openjdk-headless-1.8.0.502.b07-1.2.el9.alma.1.x86_64.rpm fd7205060bd6f138d40ea5a22a66c80c24eac0596baa423fc053f05063757d10 ALSA-2026:42887 Copyright 2026 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212474, AlmaLinux-212475, AlmaLinux-212476, AlmaLinux-212477, AlmaLinux-212478, AlmaLinux-212479, AlmaLinux-212480, AlmaLinux-212481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm 06b1abba536e1f005c65ccf716415406166ecddabf1635667ad31317f2c50e5f java-17-openjdk-demo-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm 5e6e655a7801c89110f30bc22133930d7ed57d5163f0fd9ffea544c462fadad0 java-17-openjdk-jmods-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm 64205018422adce075536d4096cc6221ccbe9597216c34000a2c904f5e0d3f39 java-17-openjdk-static-libs-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm 6934045bd7208381b97712b2bfed5e2ab17567b478f33d60b1944888e3726337 java-17-openjdk-javadoc-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm 9dfdeb2b8779a37d6b2b4fec67232838f51268bfaf263f50fa8cd0e0e515c156 java-17-openjdk-headless-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm bad89c6b7d0896d8e556f36b65c759af79aef7aea69df7e7b206bb62b5748703 java-17-openjdk-javadoc-zip-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm bc99a3444e338846f86d22286c7bf4b7bdd7f5400a13587acae8424685a613fd java-17-openjdk-src-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm d28726d7e7475d8b8356d6a3eee087316da9a1948230da1f3bdae4765f41f64d java-17-openjdk-devel-17.0.20.0.8-1.2.el9.alma.1.x86_64.rpm ebfd265d5613b479b1f080cf0b9b679690ac6bff32d203faa8202cce1ff67ec4 ALSA-2026:42895 Copyright 2026 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212337, AlmaLinux-212338, AlmaLinux-212339, AlmaLinux-212340, AlmaLinux-212342, AlmaLinux-212343) Bug Fix(es): * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212353, AlmaLinux-212359, AlmaLinux-212360, AlmaLinux-212361) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default java-21-openjdk-jmods-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 00457737034449575f8ccaf8d8f9c2bc1591eadfeb381f96d12879e710fef6b3 java-21-openjdk-javadoc-zip-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 00e24021201d6d5352383eb15ed773c9cc5d10617cf282e6b1d5c0f6b90bc090 java-21-openjdk-static-libs-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 01c2fc84d5e2fb48a0cb33c90f51c74c1774010214c793b483d5ac7cf6b4b61a java-21-openjdk-demo-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 16b8a2ad082452ca017ba19cb83170440446dbb9a7f413848c4088c8f74e58d8 java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 28ff99a7f196babff78c6e8a884a74fd79f536f118cd47244b42ef241048d49c java-21-openjdk-headless-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 3a1ec127b8fb892722677dcabcc80df0a34073e2f79b624dd7be50887cbe0ee4 java-21-openjdk-javadoc-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 78f3f13af174fbcf4d87b342019b17a49de7382ba660d26dfbca7ec57f00533c java-21-openjdk-src-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 8eab8ecc29b958dafe0e63a765eb2e14a0c50d44ab3c9727cf4a54b2d4b749b0 java-21-openjdk-devel-21.0.12.0.8-1.2.el9.alma.2.x86_64.rpm 8ecf1e0fddfb7945274b156110f25e545ac4b36e03490605e5fdae2f5a1d7da2 ALSA-2026:42899 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Enhance TLS certificate handling (CVE-2026-46968) * JDK: Improve DTLS handshaking (CVE-2026-46917) * JDK: Enhance JPEG handling (CVE-2026-47010) * JDK: Enhance XBM image support (CVE-2026-47021) * JDK: Enhance Jar file processing (CVE-2026-47027) * JDK: Improve certification checking (CVE-2026-60147) * JDK: Enhance AWT ImagingLib (CVE-2026-47059) * JDK: Enhance Jar handling (CVE-2026-47063) * JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancement(s): * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-211046, AlmaLinux-211048) Bug Fix(es): * The performance of the Math.pow function regressed between OpenJDK 8 and OpenJDK 11. This was due to an absence of constant folding when applicable (for example, Math.pow(2,1) being replaced by 2). This release reintroduces this optimization. (AlmaLinux-211050, AlmaLinux-211052) * On AlmaLinux 9 systems, the alternatives list a JDK and architecture pair (for example, "java-11-openjdk.x86_64") followed by the path to the binary in brackets. AlmaLinux 10 systems have a simpler format that just lists the path. Because the OpenJDK 25 packages for AlmaLinux 9 were originally based on those from AlmaLinux 10, they used the simpler format. With this release, the format for OpenJDK 25 packages on AlmaLinux 9 is updated to be closer to other JDKs on that platform. (AlmaLinux-212650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default java-25-openjdk-devel-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 71006bb0aa223921218b43992bbb3209ecf2f32760396373846c1eb257cf6839 java-25-openjdk-src-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 79614c6310d4e3d2eb3dc8b2cd75267c7a8f67b6a415fe3edf19be58e18ad2ba java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 96b9831d60ad3d6ac5224ac02e2a66cefd55f5756b3fff2a911654bb9229075e java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 992a9d1340a4cb08c84f70e455468d0dee50a2d7436f94c47d793239b6a68ee7 java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm 9dc827f7c705c19fa0879f23ff46a1a0e1284c8979aa458d514e561fc2a499c7 java-25-openjdk-static-libs-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm a1da945133be6df764fd0d876eb9f5eb9f4bb5142d07568c46f29dad5e9a2c58 java-25-openjdk-javadoc-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm c393f00411a7e3bd69dbd77558b82f48a1b6971034a0d5b6b8e63649376dde31 java-25-openjdk-jmods-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm d153539678983748fde0d964716251c5d5e6ebf24a2b32b128f4ccbda076bb1e java-25-openjdk-headless-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm d6346c078622f05ee08390d961c5cf91184d168703d84b7e5bf732bff1b85ba9 java-25-openjdk-demo-25.0.4.0.7-1.1.el9.alma.1.x86_64.rpm e1f6603e5a81340b6d23729e624a469e5404548404d920069f511d3f300eef54 ALSA-2026:42952 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928) * glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435) * glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default glibc-locale-source-2.34-274.el9_8.x86_64.rpm 0a9c027fc44bf13f5f91a40183c1b01cf780814a5bce92e07dba72dbdea11c4a glibc-doc-2.34-274.el9_8.noarch.rpm 332fdfcadab1579de5501aa922f181113a9d53319166ffdabdb3c2675a4b6c0b glibc-devel-2.34-274.el9_8.x86_64.rpm 55e8cad46e5fffcf0aef83ff71e4e8327256be58fe94e3e074f1208e279b7e32 glibc-devel-2.34-274.el9_8.i686.rpm ce185de51fa95c6f273cde1781a4727a859cf9a05d2297553e1abf0b4474ed6c glibc-utils-2.34-274.el9_8.x86_64.rpm d32c3b1890457d14e9afeb92f2d2aae8f60502b26606fc67ab74f1f7411d8ceb glibc-headers-2.34-274.el9_8.x86_64.rpm e209d83147af013533a5826c5a9ccdc856ddf89966b6fe6786cb978a4debe5ee ALSA-2026:43307 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-9.8.z] (JIRA:AlmaLinux-183980) * [AlmaLinux-9.8.z]: mlx5: include bug fixes (JIRA:AlmaLinux-188121) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-9.8.z] (JIRA:AlmaLinux-212061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-headers-5.14.0-687.29.1.el9_8.x86_64.rpm 0ebd76cdf739c86472d4229fe3c0a1d25b9d9576abb53efa45f3e5e674bfa12f kernel-devel-5.14.0-687.29.1.el9_8.x86_64.rpm 2e10756a71dc66a54f67b830ec305f4a2cf29c940a1784b7bc143d3c13a15f77 kernel-doc-5.14.0-687.29.1.el9_8.noarch.rpm 41c9154892abc79cd84394c0904c85e36a644fcf6374d3cdf878eaf994c6e487 kernel-devel-matched-5.14.0-687.29.1.el9_8.x86_64.rpm 63183a7bf63cfe4b4602b3ef283581a382baf7d143782b503de37299e4b5a506 python3-perf-5.14.0-687.29.1.el9_8.x86_64.rpm 636bcd87cb35984497843d98175ee4824c8f8a98f9453c4d8c8381861efaa7b2 kernel-debug-devel-5.14.0-687.29.1.el9_8.x86_64.rpm 67f9f90f131df517bd31bd9591f560b3abbe088b0ebeaa7687dac31403844c95 rtla-5.14.0-687.29.1.el9_8.x86_64.rpm 6c1ee8c8a905fb6e23157b7c74a6a1790227d377ee576ba574e5dcd5b978ed5d kernel-debug-devel-matched-5.14.0-687.29.1.el9_8.x86_64.rpm 7856cd5f689414779d8d89504b9ca7c3d73528c81284121302c2706de25e5897 rv-5.14.0-687.29.1.el9_8.x86_64.rpm 8e6beacd29cc1c3391a52feebb457324b6293be6dec97eef6456354b64ae0bd6 perf-5.14.0-687.29.1.el9_8.x86_64.rpm 98087c585af12cf4e35a88adea48aa80ad72553880bdabb1185e53d98fbe679c ALSA-2026:44308 Copyright 2026 AlmaLinux OS 0 1 Important

libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libpq-devel-13.23-3.el9_8.i686.rpm 138d5d63f5d51cdcbba3510fcca8768b6a137a376d6c08601da2f81606e081fa libpq-13.23-3.el9_8.x86_64.rpm 43079f3d3756045509a48082323cde3ecd02d982a7d90b661cec4f04eafb831b libpq-devel-13.23-3.el9_8.x86_64.rpm 784ba967d989b6673c604a7a6608259953b27d7f2cae7ff7613238e7c9a69c66 libpq-13.23-3.el9_8.i686.rpm c4b5d0360b6c4e2780b3fc5b3e9df4dc2c142aedb28d9b90384c4c210482033e ALSA-2026:44438 Copyright 2026 AlmaLinux OS 0 1 Important

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default compat-openssl11-1.1.1k-5.el9_8.4.x86_64.rpm 19e04daa10e1fd36faefbfe6b1c42021c6e27e0900b059a41a70894d383d9a73 compat-openssl11-1.1.1k-5.el9_8.4.i686.rpm ed5ead36a001d777456dba5ed0963ca9bc07040478d3d52c1d4a0aaeb5dd1da7 ALSA-2026:4445 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es): * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127) * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default dotnet-sdk-aot-10.0-10.0.104-1.el9_7.x86_64.rpm 092f7ddd9b6ad114bb4a5094a2c7b54aa38253a3607553a62cf05da1ca5d67d0 dotnet-sdk-dbg-10.0-10.0.104-1.el9_7.x86_64.rpm 187e0f005c65215a10cdfb3d43ad08ad8f1556797903b9d4662ea9fb49477f17 dotnet-runtime-dbg-10.0-10.0.4-1.el9_7.x86_64.rpm 38a1289d7f1cfa1e0b9d68cf7523b5c2ed85b530d1768193ec7d7a758c60e091 dotnet-sdk-10.0-10.0.104-1.el9_7.x86_64.rpm 5b528beb9b7b4f55ce05d6266d051c960012680dfb47cb886b823f1891b428b8 aspnetcore-targeting-pack-10.0-10.0.4-1.el9_7.x86_64.rpm 85e7fe5aafbce36c5f09443048900da08d23e13c11139f4b7940ee1405cca165 aspnetcore-runtime-dbg-10.0-10.0.4-1.el9_7.x86_64.rpm 8f82502caa145626f86ca323b68b03588d5059a2935fa57ae88e81293d9e3248 dotnet-runtime-10.0-10.0.4-1.el9_7.x86_64.rpm 995413e1f31a0608cd980838a3045c825599d5b58c25cd4ed544e76c561eaca7 dotnet-host-10.0.4-1.el9_7.x86_64.rpm adb58bf6ad899b19a598d5bc4940b6519f7106b0042d0becd0dc66064884aa5b dotnet-targeting-pack-10.0-10.0.4-1.el9_7.x86_64.rpm ccc8031426f2751eb0dc8a3ac55bca17bf7590549c49e3bf54984689caeca923 dotnet-templates-10.0-10.0.104-1.el9_7.x86_64.rpm dacd913e9b6126269ea95587a3be1ac793e9705e6f3d0805b4b2124a90c6ef5d dotnet-hostfxr-10.0-10.0.4-1.el9_7.x86_64.rpm f006d64ae0e254920faa00a72fa221dd80e5d26ad29fa15ec2a1eefd0b013407 aspnetcore-runtime-10.0-10.0.4-1.el9_7.x86_64.rpm f9f3ef5476af5e48880abc9d06b2fcf5c754e06207ffec365ab3c0741407fe4d dotnet-apphost-pack-10.0-10.0.4-1.el9_7.x86_64.rpm fb4486d47e911113fcc441ae0cb7c9fd23b7d5152f61cf6fd3046188f9c1c876 ALSA-2026:4447 Copyright 2026 AlmaLinux OS 0 1 Important

libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libvpx-1.9.0-10.el9_7.i686.rpm 9300dcac41ba925fa8267f0ed6a52ab5b5502c245e36f7bd22498ff3a2ad4425 libvpx-1.9.0-10.el9_7.x86_64.rpm c14f3b618187c33bf15bd213b51d536d9a7413f991b345c3f0b028e76ffaf5c3 ALSA-2026:4454 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es): * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default dotnet-runtime-dbg-8.0-8.0.25-1.el9_7.x86_64.rpm 2a25b5e6c2af80c0f9ae2ba16a611ad09517bc962877f400f1e937a60a82ddfb dotnet-sdk-dbg-8.0-8.0.125-1.el9_7.x86_64.rpm 2c326bfcc060106a9e1b53d625ba10e89c42f179c0edc4a9b0d5596970ade940 dotnet-templates-8.0-8.0.125-1.el9_7.x86_64.rpm 67c51130a1150cf1c1f1a10cb97ad33a1a0bd93560dd0f6338f3187599e35f47 aspnetcore-runtime-8.0-8.0.25-1.el9_7.x86_64.rpm 6dc95b9797863aeda79dcd65c37c72da45f885c868819d948c25777ed93f7b9f dotnet-apphost-pack-8.0-8.0.25-1.el9_7.x86_64.rpm 7766f3fa9c6044bab6ef5dee2206f5cc90032f4d5e738df1273fde7011cc6aca aspnetcore-targeting-pack-8.0-8.0.25-1.el9_7.x86_64.rpm 9256ad688782fcf798ef874de7abba641c6f3c2bc6ff2e07f49883eab0ae2d54 dotnet-sdk-8.0-8.0.125-1.el9_7.x86_64.rpm 9c16db5da889d3479a4866d0502380f3c590eed353f71b2d104c4633284c851c dotnet-targeting-pack-8.0-8.0.25-1.el9_7.x86_64.rpm a4365648254dbbff698b3eaccde5fc64c5136ed4e4a53556339c6ca480674ad9 dotnet-hostfxr-8.0-8.0.25-1.el9_7.x86_64.rpm cac11144c7bcebe58dffe20ded251eaf5bf4cdb1169bbbd4e927125b7cefa8b6 aspnetcore-runtime-dbg-8.0-8.0.25-1.el9_7.x86_64.rpm f3b7648d17d65cec1c14e4f962bbbfe68c5941c9d2aa007cc5315f728381d6d6 dotnet-runtime-8.0-8.0.25-1.el9_7.x86_64.rpm f4810092f088fc4e3df77f3a5186eb5f23afc6c0f7fa25888b22914dfe23d8fa ALSA-2026:4456 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es): * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127) * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default aspnetcore-runtime-dbg-9.0-9.0.14-1.el9_7.x86_64.rpm 0faa9794f82e45426a8faf2af5e448840e064b60b418387aa3eec69fe3a8773b dotnet-apphost-pack-9.0-9.0.14-1.el9_7.x86_64.rpm 34aec30a56690c91df429214b9d3a4b64085ceb99f6c997c631612b4f5ad2794 dotnet-sdk-aot-9.0-9.0.115-1.el9_7.x86_64.rpm 657df7e4ddad9618c18dd4ce42b48f99c92823501adf99e9546da528202d8f6d dotnet-sdk-dbg-9.0-9.0.115-1.el9_7.x86_64.rpm 788166eedcccf5a148e51d3633af1aa45e7229e32379fb3005b938671e22dee0 aspnetcore-targeting-pack-9.0-9.0.14-1.el9_7.x86_64.rpm 8d3fbde273210d7d9fd122b7899152f4fb90ebdec3b84d7ff9e381c7810ebfb3 dotnet-runtime-9.0-9.0.14-1.el9_7.x86_64.rpm 8eb2f48b0c41b3f7786772555067c486db1f359537550d636b6b977d73e062b3 dotnet-templates-9.0-9.0.115-1.el9_7.x86_64.rpm a435e3a2dbedf7a97e2cde2323b0c502b716457127e070b23d1b0b1f585a03d4 aspnetcore-runtime-9.0-9.0.14-1.el9_7.x86_64.rpm bd1fa04ee10a2e7613d4d8e906cb9a7fb0f382fcbc66e23d94cc1f0c196f03f5 dotnet-targeting-pack-9.0-9.0.14-1.el9_7.x86_64.rpm bd786c48b4924e97ee6e7fafec4ed8795e83fc029cf505b284193d06cabd47ad netstandard-targeting-pack-2.1-9.0.115-1.el9_7.x86_64.rpm cccd8462f3d26ae1e1a7c0052665317459201a13eaf57948aa172a5033592564 dotnet-runtime-dbg-9.0-9.0.14-1.el9_7.x86_64.rpm cff9c78cf94b5543ab7fe4593c9353bcc980249d8d9019b7cf27ed3aea5352d4 dotnet-sdk-9.0-9.0.115-1.el9_7.x86_64.rpm e01c8fbf1dd7090f790cf8b20456eae6adc86634b46eb1089d7c29e50c6f7b27 dotnet-hostfxr-9.0-9.0.14-1.el9_7.x86_64.rpm f4297ba938b0c6ad81d72f0fac4ceaa0c10a137ea1a9f047f51bc73cfe49f33e ALSA-2026:4472 Copyright 2026 AlmaLinux OS 0 1 Moderate

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default compat-openssl11-1.1.1k-5.el9_7.1.i686.rpm a6b417b216dbc3a821faca40e32d4eb2e703c5a4f34612c563f91c481e2b9dcf compat-openssl11-1.1.1k-5.el9_7.1.x86_64.rpm b66bd2df0d0812d261dc807ddba53e11fdd34dcf79cf16f6cb2945ab153c42fb ALSA-2026:45192 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) Bug Fix(es) and Enhancement(s): * scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412) * [AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-perf-5.14.0-687.30.1.el9_8.x86_64.rpm 0c98302905218f3e0fa76ebfca85499d94faf8757ef0a684100f8c2ba910fdd0 perf-5.14.0-687.30.1.el9_8.x86_64.rpm 1887d808ea10d4c42b0ed99202e5ad291cfb8fb597bfd61fa29b400b9a26301f kernel-debug-devel-5.14.0-687.30.1.el9_8.x86_64.rpm 258d334af75d46237bd439e57d644528c49ececb678d8cfef2a9a1a026da1f95 rtla-5.14.0-687.30.1.el9_8.x86_64.rpm 6af0a1c14d755b0b57f9d488af16418323ba84ac9ca8e05c002ba84a998d108e kernel-debug-devel-matched-5.14.0-687.30.1.el9_8.x86_64.rpm 76bf95b56edaf5bd1633a58d253e6d9a6468dd29cef9c1ec852c8f1e75a0a5f3 kernel-headers-5.14.0-687.30.1.el9_8.x86_64.rpm 7bd39234bdce705291991795061792fb83f5209d55fcf04d8d56e811d57e2c66 kernel-devel-matched-5.14.0-687.30.1.el9_8.x86_64.rpm 827f05305c01bc01b56c258d6ee079a4a7f24b93da97ed73f1f553508103468a kernel-devel-5.14.0-687.30.1.el9_8.x86_64.rpm b5d6f6718b8403d1b0c60c9bf02342d4e201f52edf397f5fb75a94e183f940ce kernel-doc-5.14.0-687.30.1.el9_8.noarch.rpm e64a4138098d41c0bee27aab43dc52f0b29436027f50d17e6adb8731b0a01b88 rv-5.14.0-687.30.1.el9_8.x86_64.rpm f1c74383aa0b338eb97c86dc67371984eefdd98b2fa5460223af47521d7d19ef ALSA-2026:46397 Copyright 2026 AlmaLinux OS 0 1 Important

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload (CVE-2026-50721) * librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload (CVE-2026-50722) * librenswan: IKEv2 Denial of Service via malformed fragmentation (CVE-2026-12413) * libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process (CVE-2026-14957) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libreswan-4.15-10.el9_8.x86_64.rpm 162383871b2d8b391ac06f55945c85b2a5788b346d9659c4b935143ab313bc4f ALSA-2026:47040 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797) * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) Bug Fix(es) and Enhancement(s): * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257) * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rv-5.14.0-687.31.1.el9_8.x86_64.rpm 25e304f19e40473454a4e5fa71742e61021d2a99efe845cdfffe6f23071ded90 python3-perf-5.14.0-687.31.1.el9_8.x86_64.rpm 396284e7139e350cbfc45ab02b5abc2e3ae8a3fda216fa2682ad424a4422c421 kernel-devel-5.14.0-687.31.1.el9_8.x86_64.rpm 66e4c4cfcb9a7f5d4260ac43b8a19790cc075bdb6c98c1c4345322d76b292341 rtla-5.14.0-687.31.1.el9_8.x86_64.rpm 6acd696db76b99a42d4ff251857d1715bfb8de19b42cc08f596ddc485ad7b5d6 kernel-doc-5.14.0-687.31.1.el9_8.noarch.rpm 84a5833f92fd516f4623488bd44c12eb66d77e2bd03f59f59ebe41d6ea020676 kernel-debug-devel-matched-5.14.0-687.31.1.el9_8.x86_64.rpm a1e2112b9344fb237243fdf26408ecef405b2cbb483acf4351c0e825d9ea2430 kernel-devel-matched-5.14.0-687.31.1.el9_8.x86_64.rpm a316b717939b445522f9a943af95a033d4e0ce603d7e1adacc69a24cf0613ccc kernel-debug-devel-5.14.0-687.31.1.el9_8.x86_64.rpm be7e783bcf118f5e70a71b16d433bd4a64c4e157bd493a65f11e721227dd168c perf-5.14.0-687.31.1.el9_8.x86_64.rpm d4d1423c519732e0ed1a7f31db3b03f875423a4c0661433a328146c635457536 kernel-headers-5.14.0-687.31.1.el9_8.x86_64.rpm eb8ed1ff3e5472dea17cf56a5255d03cf187aeb899fe38c1218e374afd9df713 ALSA-2026:47057 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874) * tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm 16c08207394e16d85af7150c7fea3122aab98755e1912812aff2a2ef1e64e08c nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm 78871dba67f073f37329a8f44a79398f11f1216fa20a86cc7b3a473e385ee3e6 npm-11.16.0-1.24.18.0.3.module_el9.8.0+286+9023ffdb.noarch.rpm 8e61e682f568aab5e0ffee64e8f19d13ab323ff7264dcd0039237189a351dc87 nodejs-nodemon-3.1.14-2.module_el9.8.0+286+9023ffdb.noarch.rpm b09ddf0f03d8df5ac2e78c82a437fb736aa7f4abb64e9b6c426b73e5e6f5d7bd nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm bb2e1683d975b818de04a43c990ad5c74a3634871d3f18d2aa1b3f68072865f7 v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.x86_64.rpm c4dce6818802abb6fa7adcec32a4ef093b53309cbf09c176a123aff3290bd074 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 nodejs-docs-24.18.0-3.module_el9.8.0+286+9023ffdb.noarch.rpm e962b7e2f2384848cee4bf0f840c21d10d7f29262944b3f62f55483d1ebb568c nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm f133c1e46f085ab631c7c537729f4dc33dc7308181006b1ccf1fe2237b7b1331 ALSA-2026:47058 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874) * tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm 0635e96de4a124740fe3036afd779bfff573fcd49a2bd1b1d0319aa2ed34e9fd nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm 0de0e99b05289d2da3cb731b896be3730de19bbe111c3332a05d3e7b3ee4fcce nodejs-docs-22.23.1-2.module_el9.8.0+285+5c3b0251.noarch.rpm 4149d8345a3ce567b08472d195eadff6c3ca00bde93ed53a5ed2e7d7f16946d6 nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm 443152d25dca94a50140f1c8c7d0150658d64d51df9a816eeb290697d86172c1 nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm 51e54c6cb51465e0bbb3e107ae385236bff1476b573b2ac45dd5987f7f72116a nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.x86_64.rpm 9b330eeb96528147b93c275ecf65df4c38d7139e8b88c3c55317dd16e98f6f7b nodejs-nodemon-3.1.14-1.module_el9.8.0+285+5c3b0251.noarch.rpm a9628e7429ef5cf14b877a8372ad29f9f90b850434bddc3188c940493b68bacf npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.x86_64.rpm debd49d3a3da28388a2c71c83f3cd0e20528b7da4522d3b66a62be2079676017 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:47082 Copyright 2026 AlmaLinux OS 0 1 Important

pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fix(es): * pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading (CVE-2026-5674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.x86_64.rpm 32044f4bee5862acbeb0e9d942eccecea878f37e5e66734db126f4c0d7a7b60f pipewire-libs-1.4.11-1.el9_8.i686.rpm 3690fce8505a3fed8f8de56b26630d58dcc770592a983d4b1c2bf1a0de1da54b pipewire-devel-1.4.11-1.el9_8.i686.rpm 7a18a36401d56a6a619b29429ef193b942b6a6fe608a15f9a70e66e7cc9254cc pipewire-gstreamer-1.4.11-1.el9_8.x86_64.rpm 7ff7166bb3a503f87a6010ad16ce956bf71f344ce4452438bd54e84600486759 pipewire-devel-1.4.11-1.el9_8.x86_64.rpm 8706afc34b6dd925df2753df30bd144710ec151b6f1833655842eb96bc392690 pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.i686.rpm 87572a067831824b6ba1b0f187b71de6aeb1e6ac5ceb71748c6fc01780d47df1 pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.x86_64.rpm 9812c6bff5b8fa1f240177426f2c534f66b096bf6108a2219c4c8629a488510c pipewire-pulseaudio-1.4.11-1.el9_8.x86_64.rpm a252ea38c6989d519c9c027a5d9c3741802dec8021f3e14c2f4acbdb4314d300 pipewire-alsa-1.4.11-1.el9_8.i686.rpm a2c375f17253a4d787d418f3ea8d2c823dfcd9a955633faa4a9c818c299f9657 pipewire-gstreamer-1.4.11-1.el9_8.i686.rpm abdf644b911c9ff3ce44ff17318f87747686c5107382ff78e1503ead1fd2b802 pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.x86_64.rpm c2a6f542e2637e209e35098a00a7abbd28a3a4a64898f92ae700e1a1fd8bd46b pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.i686.rpm c46a09a3bb5bfbebdd577b8e771b9c22bb77b6576d30ef32a7565037636daf6e pipewire-1.4.11-1.el9_8.x86_64.rpm cce996b9375202b1e65c22a0b85f15b2166ca95d11a1f4de6aba219ecb8650be pipewire-libs-1.4.11-1.el9_8.x86_64.rpm d051e58ac2d3d0262bc496a2afc86f51806262f2263c2671acc3386fba16e056 pipewire-1.4.11-1.el9_8.i686.rpm dc844c098fc6e4e6850f23fc8c3ab69a2b91731491f470c442f197331da299bb pipewire-utils-1.4.11-1.el9_8.x86_64.rpm e1bc5cf1d0ba5912b17e5dea70213dc1c422892d33ed774ff8e99ca57b096eb7 pipewire-alsa-1.4.11-1.el9_8.x86_64.rpm e3ad0dea5a304741cfcbc607a6a5eef985c1c5db6f1b20cb8e3cbb5b5bacb2d3 pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.i686.rpm ed44f78c83caa2b2ebcff8ab5fda1aea95ecb46656a79414e9fad48c2297a582 pipewire-module-x11-1.4.11-1.el9_8.x86_64.rpm f17e97c03cbc2e487af7357c15dd6feec95b962456762ea796b4dc1377dae1ce ALSA-2026:47084 Copyright 2026 AlmaLinux OS 0 1 Important

libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fix(es): * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001) * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libXfont2-2.0.3-12.el9_8.1.i686.rpm 8687e060e36d1de17ab13f49dd439fc86b7326a7d26d51b74188feb904aaaadb libXfont2-2.0.3-12.el9_8.1.x86_64.rpm de6da4108847c479482857258cf2c7949a52c391b41b7063246f69e43df46451 ALSA-2026:47104 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208) * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368) * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360) * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362) * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358) * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387) * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357) * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351) * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371) * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354) * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359) * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383) * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369) * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353) * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396) * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firefox-x11-140.13.0-1.el9_8.alma.1.x86_64.rpm 5d3fab53d3bcc0b372f4dcd2d72e925510b950d04fc382bfa67258cf882dc2cf firefox-140.13.0-1.el9_8.alma.1.x86_64.rpm ecf07bb7811ac65344e30ced2941ad55f3f95c995750537468e7c3e29c193eb3 ALSA-2026:47178 Copyright 2026 AlmaLinux OS 0 1 Important

yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fix(es): * yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default yelp-libs-40.3-3.el9_8.1.x86_64.rpm 04e68a3d0c4456328a83d85c226c84a26ddaec9a0a59a10f15d589b3c3397c7a yelp-40.3-3.el9_8.1.x86_64.rpm 05b2937b2634cac00399f2e968528fb375d63e8dac2edfadba1d6ad91db254fb yelp-libs-40.3-3.el9_8.1.i686.rpm 583e9242333de909ca0830218ec83a808e6cbbed760a04d307687dfea6fd7cb4 ALSA-2026:47179 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691) * gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.i686.rpm 10461af212f753de26ca66dfc35f04f8b6c2f2c98038a4d61f4ff20a93508c73 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.x86_64.rpm 4aac33f087fa8159f793d550877ebaeefb79ec65d8c963e77bb5a81d90c89025 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.x86_64.rpm 6c3cdd85c5e94807d8d415c345031ab62db91ee70102656cf49794c1d44d8712 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.i686.rpm c9d80cb2a52bec5bd671cd0553b907622a56749489c0b28b60580fd34889bea9 ALSA-2026:4759 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818) * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-doc-5.14.0-611.41.1.el9_7.noarch.rpm 089b13ed0872058aee2449d47e7add1a1130f2a4051aa75e5355cdf2c52793d7 kernel-devel-5.14.0-611.41.1.el9_7.x86_64.rpm 1bb090b7e6eb9bec3ae83946c1280551969be70145e60dfafb0241c58627ce24 kernel-debug-devel-matched-5.14.0-611.41.1.el9_7.x86_64.rpm 20869d61adf0d118009a53b56c5478767f8245ad930e53b15db5d3b6027454e7 perf-5.14.0-611.41.1.el9_7.x86_64.rpm 59968bd682d1a14272c8e40fe2a94e89103a14ccb82a9ed41652b22acd232d66 rv-5.14.0-611.41.1.el9_7.x86_64.rpm 90ab7277a85287a8fa3961fe020906c445435f8e0b18fdc83f3815c5f5941875 python3-perf-5.14.0-611.41.1.el9_7.x86_64.rpm a8a3c38d9ed38685b6a415055d80d190e0734a95cc39d49e0ce53bce0970766b kernel-headers-5.14.0-611.41.1.el9_7.x86_64.rpm a98c3d34ada9586fc75b85e4cf03978734d28fe702b43ac7157c81f52722dd33 rtla-5.14.0-611.41.1.el9_7.x86_64.rpm b252a749eec1f27b7476dd27afb0f284ff89912a526c132c73f68ae25516f347 kernel-debug-devel-5.14.0-611.41.1.el9_7.x86_64.rpm b52af4dd5b5cecf6f512189b3ec81efc3ff72cfea21ac8d9601575e8fa1d8a40 kernel-devel-matched-5.14.0-611.41.1.el9_7.x86_64.rpm d06a9f6392e10aab66aafcb4b09ee8c38658496a993857362a1c20b57b43ee1b ALSA-2026:47756 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655) * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653) * openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654) * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002) * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openssh-askpass-9.9p1-9.el9_8.alma.1.x86_64.rpm 5059b183da9b80ff8a3343e6d04993aaad9691e6a1d63b7070a4539cc632ac93 pam_ssh_agent_auth-0.10.4-7.9.el9_8.alma.1.x86_64.rpm 9445a51a162e6d3e3e331f897114082455103ca528299953f871b0c91cc939a7 ALSA-2026:47982 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455) * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456) * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693) * vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856) * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default vim-enhanced-8.2.2637-26.el9_8.13.x86_64.rpm 1c840fd4bd75bf7d2656779bdbbe6736bff6ab6179a7df9eef016dc862d20141 vim-X11-8.2.2637-26.el9_8.13.x86_64.rpm 2ddf650f86b0ae9f8b232c38c46d9690e8372387b3123880203b6efa76fa44c6 vim-common-8.2.2637-26.el9_8.13.x86_64.rpm 3cd2655703e97072207e28c7a15aac407bc529f800458a49ca8652bbddbb857a ALSA-2026:48197 Copyright 2026 AlmaLinux OS 0 1 Low

php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD (CVE-2026-14355) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.3.32 for CVE-2026-14355 CVE-2026-12184 in 9.8.z (JIRA:AlmaLinux-192620) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-pgsql-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 0ca9260cbe577536e171abecbf34d6bb01792b5374de400452adc8fec59d83d7 php-dbg-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 0ee67cce06248e5b2bdf919e4b0fec224dd2330fd5028ae1b7dc022293b78b2b php-soap-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 12cde66d255f32d2df22af0b1396052196dc94381390885140ea5a556412fda2 php-snmp-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 141a96d4a23f54a37a4c0969eb1e9a676e760c832a594772e73f055c50ec618b php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.x86_64.rpm 1e95a29597aa5c8b102c97a7d8fe608712e1a7ac5f33086477259cdfd802117b php-fpm-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 1f335935a7d386a7056739dc6b114a32e3dae74f7eebc959a339a2358fd8e33e php-opcache-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 22e3c48ffd84b19ceaf799a943e591dbd6e04f65a8bc49a57a9ee9d832f6bb1f php-pdo-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 24a0a19a4e311794eb0e7eed234e9bd512aae8fe2c314232cf340e911baf280f apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 48f2d31a160240e4327d604a28b2c43f9c6866eafe9d5a1dcf2ef6a1970e7190 php-pecl-xdebug3-3.3.1-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 4c4a29cc6b850d8d4bb68f330b91295d8c57b028fc2d86d5f5839fd84320a619 php-mbstring-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 543ce7695dd0651405c9e38170fc43e137998a9fbe22e43d81e3949d06994eda php-ffi-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 763c9d63c7f1a394ffbba6e7b9e125bd42e861ecf0180e1bfb2b14586609cc13 php-cli-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 7d09296c2639191d40f977b7821cd0f84f78a34531120508ee160a114fdd472b php-pecl-apcu-devel-5.1.23-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 8512b5dc68f79bf2f150a23fb1e6e9287d8c9b8a4b33641e542df7c172c4b128 php-pecl-rrd-2.0.3-4.module_el9.8.0+287+a9a5bb73.x86_64.rpm 868eeceba907f3af5f8af4492d6a59a3e674e6e68952e94ef8d88ff32e02edc1 php-process-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 8aee13df99bb13f4979c73d5ec8ac374f795f2e31a032db11e9aed5109853c1d php-odbc-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 8bf38e6f646a56324016d5c48493d3d324562fc74ce93ad5e9d16997321b5b06 php-ldap-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 91adb0068e8115650758dcf652fdf81e8441d77a956e0f7e1592e253b6bd2797 php-embedded-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 9514be4d06864e2d27ea78883b9b6b6b6aa8d1d0939b97ec3a866b97ba3bf932 php-enchant-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 97da0eb06266447b6c87195021ccfafde85ecafbf920ab57f320c83b98054848 php-devel-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 99974ca13b330c37816ff0b28d2f66c08b2c2aa20179628810d1b62055c9e6cc php-intl-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm a0205170a79b66cf105b05b74210af1cdc80233014d003b8a0b1c4abe1650ef3 php-mysqlnd-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm a8c546fca42ba20b2f8d117d06a786637f0a9d4b801c13559e0564495e501107 php-bcmath-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm b2fa0c0c66ff319f5864de183521e1d09ccdb835f8486b6159eeb93463089fb5 php-gmp-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm b6adbd9648c2d1431151d2a7d9c5c8602daec9b03720eb4c81bb81d765f966b7 php-dba-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm c7434002a82861d1e7b7d9270bf65cff751fe060b18b02629e680e6795659063 php-pecl-apcu-5.1.23-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm c7b0c8e3f15734067690c85fa999f4527496af3a279df9283b6f8abb3a6f7252 php-pecl-redis6-6.1.0-3.module_el9.8.0+257+89d727f2.x86_64.rpm cfbd00b1767223062f3a8b4d7a1e2991f248c1bca9195593ba4b2fa89514e1ed php-xml-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm d8ff67aac4883fb61439f83c4990382c7a6233e18065af99c3184414dc64596d php-common-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm f7616270c8ea0b0d9f852749b243175fc028c282544cfae3b667c994e1fe5c2d php-gd-8.3.32-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm f962ee898f11536c757da2645084d521f9925a85b86f2825b6b4c27f570d22ec ALSA-2026:4828 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948) * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968) * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default mysql-server-8.0.45-1.el9_7.x86_64.rpm 012420e552936eadc61a4f3365d991f2ce6d89c84527f175eea6a87ecebab798 mysql-errmsg-8.0.45-1.el9_7.x86_64.rpm 3e5ec4b8a6967c57b1187143aa097da6187d827ef4cae26d0a58ce63c4b02156 mysql-libs-8.0.45-1.el9_7.x86_64.rpm 71cbf08baccfaf2fe2e4de405f35b28b36a2d040febe19f41a57750870fc649a mysql-common-8.0.45-1.el9_7.x86_64.rpm d214acddedfb5d35d1f5b7065bb61cac9245ef4b4e3ad2d2dc58cf42a4bc0641 mysql-8.0.45-1.el9_7.x86_64.rpm e91be15e673f4539ad8ce5cc00f50cf40cf6a9a1660111f6bb62f11459f73462 ALSA-2026:4898 Copyright 2026 AlmaLinux OS 0 1 Important

capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Security Fix(es): * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114) * capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default capstone-4.0.2-11.el9_7.i686.rpm 08c42000740fbe013142ffc86b3bb1c455c8a110928411f77e2ba44e19bc8984 capstone-4.0.2-11.el9_7.x86_64.rpm 6046bf5e7108764afdae2c674c2eb7390475181eba5def4ddb1234fccc7bfda1 ALSA-2026:49212 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () * kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-perf-5.14.0-687.33.1.el9_8.x86_64.rpm 137aae19dfe5df4df5b632a1bbb30de4fe8cc0c72439715482d9eb54d8b667eb kernel-debug-devel-5.14.0-687.33.1.el9_8.x86_64.rpm 1c84077aaad589368596bf96fc8bb14998f268956546308efc34e1eb28d5cc46 perf-5.14.0-687.33.1.el9_8.x86_64.rpm 28a13b18943b1166f6fe3feba4addb15456305efb73e6d5295b4f6aba831f227 kernel-headers-5.14.0-687.33.1.el9_8.x86_64.rpm 2b5311cb86ec25b9846c21045a5322a2737de9269962ffbd5e58ab77a6a26df9 kernel-devel-5.14.0-687.33.1.el9_8.x86_64.rpm 3f1cca8945cbcb748ef512fa7c52aabd2ce0585781ab90a0120c07aa0162618f rv-5.14.0-687.33.1.el9_8.x86_64.rpm 7c95919fb4462ec0654675620471b07e84d8b3a46961618f6d00f2cb2b7df6bc kernel-doc-5.14.0-687.33.1.el9_8.noarch.rpm 7eab449a837d5105f4dc026af678941793b1f4232c4b244f7f74019f10377725 kernel-devel-matched-5.14.0-687.33.1.el9_8.x86_64.rpm a8cb04ff6b3454696c6b87e99646a0c4cc820dae61d0e8214f5adfc5de978f78 rtla-5.14.0-687.33.1.el9_8.x86_64.rpm bc0a364e16c13b49f9dae5ac7e65de8d1b3fda326d6160c7e5ef3432cbc0af02 kernel-debug-devel-matched-5.14.0-687.33.1.el9_8.x86_64.rpm eb12792786202b596d526d8c692f2aeea5b5c7cdc293da3172a5fe87173e230e ALSA-2026:49525 Copyright 2026 AlmaLinux OS 0 1 Important

perl-Archive-Tar security update

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support compressed or gzipped tar files. Security Fix(es): * perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size (CVE-2026-9538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-Archive-Tar-2.38-6.el9_8.2.noarch.rpm 74793931ac60339989344ae76edae7f07d84e54591be77be8328a2f7f6b91b2e ALSA-2026:49527 Copyright 2026 AlmaLinux OS 0 1 Important

frr security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460) Bug Fix(es) and Enhancement(s): * Zebra is not installing the route in the kernel after flapping one of the physical link on the ocp worker node. [almalinux-9.8.z] (JIRA:AlmaLinux-152300) * frr triggers SELinux denials when reading root's Python site-packages directory on AlmaLinux-9 (JIRA:AlmaLinux-176258) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default frr-selinux-8.5.3-15.el9_8.1.noarch.rpm 28b90322fe0e517b6678a97af89552cdcd90d85a98188a067b7927be3a71f11c frr-8.5.3-15.el9_8.1.x86_64.rpm b0997893037d5466f9fd6d82abb443f6b82c636b1f95961a5137a49a7110748b ALSA-2026:49607 Copyright 2026 AlmaLinux OS 0 1 Important

frr10 security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga. Security Fix(es): * frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460) Bug Fix(es) and Enhancement(s): * frr10 triggers SELinux denials when reading root's Python site-packages directory on AlmaLinux-9 (JIRA:AlmaLinux-222338) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm 84b33c63ff314179325a4007f214925c475e13863a5c79287fda0a068efbcdb5 frr10-10.4.3-3.el9_8.2.x86_64.rpm 8f09b6b19ee43904bc4911dc2cbb63fbd594fd606b85dfb949164b4473138a85 ALSA-2026:49612 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fix(es): * DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380) * DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.3.x86_64.rpm ee9d13be1c3ea892033941f454dc163fcf454aa22c6fa0dea802713389e1d526 ALSA-2026:49667 Copyright 2026 AlmaLinux OS 0 1 Moderate

p11-kit security update

The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): * p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing (CVE-2026-13757) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default p11-kit-devel-0.26.4-1.el9_8.i686.rpm 399d70371cdd038b88986ccec442e42476b1e11ab6707fd0cf613ab89a26061e p11-kit-devel-0.26.4-1.el9_8.x86_64.rpm 421f06bc2d5f573912e306cba728a8eb82060a2a40b5e039882401efc4467b17 p11-kit-server-0.26.4-1.el9_8.x86_64.rpm 6afb5d1548b13b99643e0fa0ee51aba13cd463cb1cd66ffd8bf4383a20e0f3fb ALSA-2026:49838 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security, bug fix, and enhancement update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) Bug Fix(es) and Enhancement(s): * bootupctl backend install --auto fails bootupd EFI metadata missing (JIRA:AlmaLinux-185745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default osbuild-composer-165.1-4.el9_8.alma.1.x86_64.rpm 29c3844c807dc5975ecb84ccb1b9a77781b1dc662566487e133c2c803021456a osbuild-composer-worker-165.1-4.el9_8.alma.1.x86_64.rpm a7d9420c97738d50e2ea6c84ef299e1c72d9748d98f449638d94ad34d3b01918 osbuild-composer-core-165.1-4.el9_8.alma.1.x86_64.rpm abafbb229aee409f5da8dde1e6340415b9d25a4ed92f9b563b5fec2d61487b15 ALSA-2026:49870 Copyright 2026 AlmaLinux OS 0 1 Low

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) Bug Fix(es) and Enhancement(s): * Possible regression with FM350GL [almalinux-9.8.z] (JIRA:AlmaLinux-184273) * AlmaLinux9: Fix downstream-only regression from 532af53c [almalinux-9.8.z] (JIRA:AlmaLinux-192430) * gfs2: xfstests generic/363 failure [almalinux-9.8.z] (JIRA:AlmaLinux-214021) * AlmaLinux 9: Backport b95e0e792822 [almalinux-9.8.z] (JIRA:AlmaLinux-216471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-matched-5.14.0-687.34.1.el9_8.x86_64.rpm 01087b9cb18fd813444ec27ce2cffd1da5c8f1bc240fc7eb6a9dd96ce8eb48c2 kernel-debug-devel-5.14.0-687.34.1.el9_8.x86_64.rpm 02a43757c66dc18610310a7e5cbed8c4f826a50e4daf0c7ba254b653548dca3f kernel-doc-5.14.0-687.34.1.el9_8.noarch.rpm 11665fa1991b6ab2b2fa02c32a69b60c3411b043582794a4facae7338358986d rtla-5.14.0-687.34.1.el9_8.x86_64.rpm 3c68133f7d8b60d47934617a329819b9e0551821d7c80e1b8544a6536ffd1da4 rv-5.14.0-687.34.1.el9_8.x86_64.rpm 620ceea8f941640ce953517fd1eaa0811bd5737c5e481087f4aa765e96fb2958 perf-5.14.0-687.34.1.el9_8.x86_64.rpm 687e9d5a1703a150518062e74b3d7dc6b4dbd5a1143e7fc7140f916faa72affd kernel-devel-5.14.0-687.34.1.el9_8.x86_64.rpm 6c2b4945b8ddabe3f30c58da40848d3f90643cc563893cdd19e28bbbf33eb048 kernel-devel-matched-5.14.0-687.34.1.el9_8.x86_64.rpm a8c6b402e396edc455a62737b175c8dc564cc019fe4a77e315a4f554eba14a46 kernel-headers-5.14.0-687.34.1.el9_8.x86_64.rpm d03d4c090b7fffd70d333ae12f200731d2dee9e60bab28c5c262764fb4b4c9ce python3-perf-5.14.0-687.34.1.el9_8.x86_64.rpm f476868d7c6c180ca074ff27a2864ed26be8a4753943d286ccaeee4b4df838a4 ALSA-2026:49921 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368) * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360) * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362) * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358) * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387) * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357) * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351) * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371) * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354) * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359) * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383) * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369) * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353) * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396) * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405) * thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding (CVE-2026-14899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default thunderbird-140.13.0-1.el9_8.alma.1.x86_64.rpm bdc7706b5d6ec250882c5fa51259a839a2d50f576f11b3ddd43e16ac8988e3b7 ALSA-2026:50108 Copyright 2026 AlmaLinux OS 0 1 Important

ldns security update

The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to (for instance) create or sign packets. Security Fix(es): * ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching (CVE-2026-10846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default ldns-1.7.1-12.el9_8.1.x86_64.rpm 90d684d3890cbb25d1b4ef72e41da8973c8b89d6179369bcaa779076b38b5d5c ldns-1.7.1-12.el9_8.1.i686.rpm be7f28b97c70fc748d25e341a14dea855de64a32f6549d3c2be5d8bdedb5899e ALSA-2026:50147 Copyright 2026 AlmaLinux OS 0 1 Moderate

libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libgcrypt-devel-1.10.0-13.el9_8.x86_64.rpm e6ab361bab6ef7490f2e5cb2a2098ddf662d8a742e0751f8cb3de26000c0d027 libgcrypt-devel-1.10.0-13.el9_8.i686.rpm f044eb83300e9444db09bcae7a026c10c02816f718ea26c0b0a2d9ec45db6a61 ALSA-2026:50317 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies (CVE-2026-59939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default fence-agents-virsh-4.10.0-110.el9_8.5.noarch.rpm 0cef2152a3e141c5d0839223e691ef38852771b95fc7f253eceedbd243119686 fence-agents-wti-4.10.0-110.el9_8.5.noarch.rpm 0fb2c32f55eb2f3fa1d316a66cf4855ed921e142f30de7c06dc0032e4a9e96e8 fence-agents-eaton-snmp-4.10.0-110.el9_8.5.noarch.rpm 162b28d6cff7551588e248212c03c56947738816fc7a46324519c90315d75da8 fence-agents-amt-ws-4.10.0-110.el9_8.5.noarch.rpm 16a1449402fd9550d13585ea7e973269afa99a7e31aeed9e0bb05e68f99c0895 fence-agents-heuristics-ping-4.10.0-110.el9_8.5.noarch.rpm 16d21c41ab1a1f920afd2dc9d585a522b8d787b36dc7c091f289cbb46f6f52a7 fence-agents-emerson-4.10.0-110.el9_8.5.noarch.rpm 1c493037b20ae20cfe85da10dd423f918a970757dae84583cabd35321ac37f7c fence-agents-vmware-rest-4.10.0-110.el9_8.5.noarch.rpm 21faaf014b0eeb611eef3ed0192901da2a9420d9ecbf95c781afcbef29c03851 fence-agents-common-4.10.0-110.el9_8.5.noarch.rpm 2573df3eb377fae8f7cd0171524d9bec0b0566291707628f4e51524e94657b88 fence-agents-cisco-mds-4.10.0-110.el9_8.5.noarch.rpm 2b328cc4a25e848c566fb945bb3bfacfffd86373402ea9923fab1b675690795d fence-virtd-libvirt-4.10.0-110.el9_8.5.x86_64.rpm 2bd9f3d93c7f7bc07360f637e3e686174c129af701ba8f52f877751a033db7f1 fence-agents-sbd-4.10.0-110.el9_8.5.noarch.rpm 302233c721a5377579fe6196d0f75d0911ddc678f08c95614186d4218795a15e fence-agents-nutanix-ahv-4.10.0-110.el9_8.5.noarch.rpm 34a44fc977bb429e343e3c0529b7c4ae1f593535cb9a534c17db9c663d288c24 fence-agents-rsb-4.10.0-110.el9_8.5.noarch.rpm 38a58778de27e61451a3104299cb59f3086f44b8b7805f25625a2cc17b7575d3 fence-agents-drac5-4.10.0-110.el9_8.5.noarch.rpm 3a69ef8a3afb4d8094c84538446cb87b49780b5e89e85fc309e665fd2867d40e fence-agents-aliyun-4.10.0-110.el9_8.5.x86_64.rpm 3bfd54268dcc3cbc4e08bfe7f93353cbd891911314965f78027cfea6f95bf7eb fence-agents-mpath-4.10.0-110.el9_8.5.noarch.rpm 3d613491abe75229775f1bb7672532e4ab1df2cf9d58b01c353079ba022c779b fence-virt-4.10.0-110.el9_8.5.x86_64.rpm 3d7182323dbc298398201e247a135967a99f761f069fa7dcf13943239a0830d6 fence-agents-redfish-4.10.0-110.el9_8.5.x86_64.rpm 3e703c036ba4203c8790219b7459b5d40453124f47746dfc754623c6bc1a9eb0 fence-agents-kdump-4.10.0-110.el9_8.5.x86_64.rpm 41cecb1688f6361e0e59dc014f43fa45e04bc531c6d612aa3628539fafdf8b01 fence-virtd-4.10.0-110.el9_8.5.x86_64.rpm 4404155be9887d9ae41dc11d5d6e3633232a05822801bbbb1de93d008cffa968 fence-agents-eps-4.10.0-110.el9_8.5.noarch.rpm 446eb8119057afcc9618db13d1321766d09c7f6e74a4e5e9cc21eb6e852fd780 fence-agents-ilo-ssh-4.10.0-110.el9_8.5.noarch.rpm 46dfded7553c339a8af33cadf3f6b9d38b6fb4dbdd4923a7ea0554ba47993deb fence-agents-ilo-mp-4.10.0-110.el9_8.5.noarch.rpm 47c0a9a124c93cdba4dceb59a6adc6801f0daed021ecae28e684cb27f2efcac0 fence-virtd-cpg-4.10.0-110.el9_8.5.x86_64.rpm 5113571e641ceea601e7d4b1fd4438f124733a8847e48c3bfe2693c8fb679a6c fence-agents-ifmib-4.10.0-110.el9_8.5.noarch.rpm 5e13da10beb9186e7b48e1e3fc3988eb7643577729cb054c10ce1d2338f78139 fence-agents-ipdu-4.10.0-110.el9_8.5.noarch.rpm 636dc83233d61e1da0012c5f4f92467e06d6b6693fe9d58c364a6f5885f8a5a4 fence-agents-lpar-4.10.0-110.el9_8.5.noarch.rpm 6b6578feb9467298fcb45bd421aaace01a1c3246f4d75691f636b36fd178d8f3 fence-agents-aws-4.10.0-110.el9_8.5.x86_64.rpm 6f0f452b99bb1afa07fac562ca14f7530e26f13cd2d8c2f2a6a3f8afd20dd141 fence-agents-azure-arm-4.10.0-110.el9_8.5.x86_64.rpm 71e6a9d1bf31f063ca0ad096a713682cefcb91113b62a49eac603502f4b56456 fence-agents-apc-4.10.0-110.el9_8.5.noarch.rpm 721db660ea7bfad7d4f6e29a9a610a66c2ffd9c384ff9789b98677bf8e267458 fence-agents-ilo-moonshot-4.10.0-110.el9_8.5.noarch.rpm 759d68a4653d07e0eeb05837551ffbf56f5e81c14a0def2397eb2a3a4fd74abe fence-virtd-multicast-4.10.0-110.el9_8.5.x86_64.rpm 7e579dece6c645f5a780f9d747bddbbe453985338fa59c98ec6e1ee339172e7d fence-virtd-tcp-4.10.0-110.el9_8.5.x86_64.rpm 823ecc0bcfe31f6f7de6b2ec574b0d0c7a3431561f21da2aad3ea91b66c3e761 fence-agents-bladecenter-4.10.0-110.el9_8.5.noarch.rpm 926f895ca4718c5df2589a2279be1a9df61f62f6e5ea95acd5b6c1fb7b562f7f fence-agents-all-4.10.0-110.el9_8.5.x86_64.rpm 987626a2a60e047bfdffcd5b31d05d9968d422275a219b16574134640ed1dc0d fence-agents-apc-snmp-4.10.0-110.el9_8.5.noarch.rpm 98b93e967c2442806c5c4090148b7ee1c210a3fbf4e6e34d56ef7a018d1e2687 fence-agents-hpblade-4.10.0-110.el9_8.5.noarch.rpm a4a541ecd56333c15dfd167de0a2730e70044cdab1335e5d318be096a5aba044 fence-agents-ibmblade-4.10.0-110.el9_8.5.noarch.rpm adc2202a323783e5944338729ab817ac462dd0851761ce78d02dd54750eb57bf fence-agents-kubevirt-4.10.0-110.el9_8.5.x86_64.rpm aed725cd731821cd28009ac860aa7291fef3fe88369640f0cb4f5e9f8978cb0f fence-agents-cisco-ucs-4.10.0-110.el9_8.5.noarch.rpm c5d9d69b72aa673a9446b9124e8d9a59edb0102b35bd88837ee928dd6ab705a7 fence-agents-vmware-soap-4.10.0-110.el9_8.5.noarch.rpm c72426aa9a21d4fd21add7725f9bd38934fe02e2cc0508b2a5d4290a90e726ee fence-agents-ibm-powervs-4.10.0-110.el9_8.5.noarch.rpm cb18caa8d3a24e689691e0202abe3b90661fb82b8750bce2f58da33a6cdc161e fence-agents-rsa-4.10.0-110.el9_8.5.noarch.rpm cd75a7335eb94f2e5eabe8dfdff4140c3db649d77a5e2bcf7b2f59e32083bb77 fence-agents-intelmodular-4.10.0-110.el9_8.5.noarch.rpm ce23dae152f9fd25a9a6ec120991547cdac7f36543b76f917e6c9abdfeaa74c2 fence-agents-compute-4.10.0-110.el9_8.5.x86_64.rpm cfc17208349cddca1a53e7ac2eee6a95d4381a3d5c0b50718ec996e50090d54d fence-agents-brocade-4.10.0-110.el9_8.5.noarch.rpm d169dace236ba20ea0dd8468fa2739ae82bac540cd68c559c3da2631eea9a4e2 fence-agents-gce-4.10.0-110.el9_8.5.x86_64.rpm d4c875e81f056431056d6ca7618c5c952ca9b99641a7549b72a68bf2612f4219 fence-agents-ipmilan-4.10.0-110.el9_8.5.noarch.rpm d6ce6563e85b8fc48fe49feab70c82aad5d3facfd257225d917f6e023f0e314b fence-agents-ibm-vpc-4.10.0-110.el9_8.5.noarch.rpm e5c8ba740f2f20b8551f5e4d2b038046e06bb5b89ce0261a5d0fe945d15dfbbc fence-agents-rhevm-4.10.0-110.el9_8.5.noarch.rpm f581413a133d843060234d3795e58f8925bd592f14361cf3e2d6d56a8f0c0d6c fence-agents-scsi-4.10.0-110.el9_8.5.noarch.rpm f5a5b154a4704ec25a2ef7278f107f1631a60ac09d9adb2dab1adc0df4cc204b fence-virtd-serial-4.10.0-110.el9_8.5.x86_64.rpm f66a7da1a63c31228a135db0381b7fbb8bdd004c518964b0cbea78d321b8ed17 ha-cloud-support-4.10.0-110.el9_8.5.x86_64.rpm f858ae9f327533afa19490af91850626ec272edbd4375cac44b54679efc992d6 fence-agents-openstack-4.10.0-110.el9_8.5.x86_64.rpm fe0237723f7a8730461578d2dc1fed91fc6466a9887ebacfc9846ccaf1a31a30 fence-agents-ilo2-4.10.0-110.el9_8.5.noarch.rpm fe74aef1ac8528480e74bc6b7d752d57168935db99ff646b1e932d668b6e3166 ALSA-2026:5080 Copyright 2026 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive (CVE-2026-4111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libarchive-devel-3.5.3-7.el9_7.i686.rpm 38b28db03f121acb4a90c09f5ec2093a75354257432c0f2a7c6e5d61b07725f2 bsdtar-3.5.3-7.el9_7.x86_64.rpm 3af7ab8c9a224e18bb0972668647de14246ec7d8b826cd691304cdbfb12b181c libarchive-devel-3.5.3-7.el9_7.x86_64.rpm a5b5c142c3dfeb70f181851152c1a845cb1e76071e48c5d0de2f246a5917f265 ALSA-2026:50817 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) (CVE-2026-42169) * gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images (CVE-2026-66758) * gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted ICNS images (CVE-2026-66759) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gimp-libs-3.0.4-4.el9_8.9.i686.rpm 230c1bfa61326ddf228c181af29bdd6a0f369ca7d02f4f4025b7abdd45800c4c gimp-3.0.4-4.el9_8.9.x86_64.rpm 8533d646b536c6e18fbfd56a816bcc8f56a33a1af32ef24653c185861acd07bb gimp-libs-3.0.4-4.el9_8.9.x86_64.rpm c0cc43b0dfe4792e0d96063816e0d24c103c43ced0b22053ee13486e25bbc766 ALSA-2026:50827 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:4.0 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257) * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256) * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240) * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242) * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241) Bug Fix(es) and Enhancement(s): * ruby:4.0/ruby: Rebase to the latest Ruby 4.0 release [almalinux-9.8.z] (JIRA:AlmaLinux-211301) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-pg-doc-1.6.3-1.module_el9.8.0+232+50f6dd36.noarch.rpm 012587b1454988d3ae9e2df6f066e9a9582859f741daa26cc97f6ce56f7cc40d ruby-bundled-gems-4.0.6-34.module_el9.8.0+289+5a070f48.i686.rpm 0cc7cf777abe79b0dcce4bf43030f18d48b6f9573ad8f00a0f15ba748314d826 ruby-4.0.6-34.module_el9.8.0+289+5a070f48.i686.rpm 1689e660a0e04524f113828846aef172b99fee2653f324c11afad2cba6f8fdf2 ruby-libs-4.0.6-34.module_el9.8.0+289+5a070f48.i686.rpm 1f89748fb4527d03b29ae3bec0a415ecfa0f12901b0c5f83a57c929f02df0cb5 ruby-devel-4.0.6-34.module_el9.8.0+289+5a070f48.x86_64.rpm 2a9bf520707b16e54076eff99e81c0971fdcead0c891a16100fdd71049eaa7d0 rubygem-rdoc-7.0.4-34.module_el9.8.0+289+5a070f48.noarch.rpm 2b33fa77783cc93de8c0883faa6892329f442300d0cbf5e82a6125b00b71fca4 ruby-bundled-gems-4.0.6-34.module_el9.8.0+289+5a070f48.x86_64.rpm 37d7e3b60ef2de4052c5ea16bec4db2518e40ff6aabdd5cf48678f4eb3672b72 rubygem-racc-1.8.1-34.module_el9.8.0+289+5a070f48.i686.rpm 4e9886e3bd9adcff306fe4c6145f38e9ad083f5fa7097dbdd41b1fbeb3458267 rubygem-rexml-3.4.4-34.module_el9.8.0+289+5a070f48.noarch.rpm 4edee87df2da657900eb98f07642c3d83a1037438ed3582662ca71dc5c3b568f ruby-libs-4.0.6-34.module_el9.8.0+289+5a070f48.x86_64.rpm 57d7a51556fde844b0b6c604560db08ea04a34d543cb7d5b846918910624f2cf rubygem-racc-1.8.1-34.module_el9.8.0+289+5a070f48.x86_64.rpm 5ecd8c1ef0d793d9465372898db7479bd46cfe6ea4c332a5edb73bfc1dab8a04 rubygem-rbs-3.10.0-34.module_el9.8.0+289+5a070f48.x86_64.rpm 5ee48bbf3ae1ccc1fa970a3e087a69cdaa1e461d2902dd53ad050a0f62e9c6d0 rubygems-devel-4.0.16-34.module_el9.8.0+289+5a070f48.noarch.rpm 5ff0a58b9db973f8f827485142a5c70c50eaf99fbcb947c16c74638d7a2a9b29 ruby-default-gems-4.0.6-34.module_el9.8.0+289+5a070f48.noarch.rpm 6474d9bf6e42880f15ad8265fb7fae51ff54f75a245dcf6d39eb4632f7f81838 ruby-doc-4.0.6-34.module_el9.8.0+289+5a070f48.noarch.rpm 7383a71f0ebaddfc76ab3a8b8751b28d27f749dd3c97ed8a0f8382edd75adb4d ruby-devel-4.0.6-34.module_el9.8.0+289+5a070f48.i686.rpm 7f03d4d2a8ee0ff45462308726118bb806cb4b3c1fea8e2c1ac374245f0c625f rubygem-pg-1.6.3-1.module_el9.8.0+232+50f6dd36.x86_64.rpm 7f9032a32d75361237af186ee34fe7c85a8f586e859c8c4e02d26320b47d49d9 rubygem-json-2.18.0-34.module_el9.8.0+289+5a070f48.x86_64.rpm 858e1bd155e41c047090514fcf920c0ad28ef3988809fce1534592c892eeab96 rubygem-irb-1.16.0-34.module_el9.8.0+289+5a070f48.noarch.rpm 8d1764e23f29a1b6728b3e33ab74c0d1ba702c7be0d9fa862621aa3cb76d4d51 rubygem-mysql2-doc-0.5.7-1.module_el9.8.0+232+50f6dd36.noarch.rpm 97e11c128bce3071fdab6ecdaf0cc24053f436b72c10921807cbd89f4b2ff2d2 rubygem-test-unit-3.7.5-34.module_el9.8.0+289+5a070f48.noarch.rpm 98dfab43af99dcb55d9ad636a9e00e9f441f54b539261d335f77a250c3b87944 rubygem-io-console-0.8.2-34.module_el9.8.0+289+5a070f48.x86_64.rpm 9ba44fa68896b4c48e04ddc5766b20d57c80e15c150e7359290184717da82986 rubygem-rss-0.3.2-34.module_el9.8.0+289+5a070f48.noarch.rpm 9d8f32cc4b8324acfc9b91a11957b4315f2194772e4af2c1ac254d3f1e96e131 rubygem-rake-13.3.1-34.module_el9.8.0+289+5a070f48.noarch.rpm a0e07a6db4215d2166f1a1cf135e0ed46b6acf714d5d940a78e75de5f0311ceb rubygem-mysql2-0.5.7-1.module_el9.8.0+232+50f6dd36.x86_64.rpm aee9080e7e16dcdac40af6fc172e19d5448a0f46c5f752183651f4660fa4e9cb rubygem-bundler-4.0.16-34.module_el9.8.0+289+5a070f48.noarch.rpm b37144bcb7e8ef9ab689609c444876b235350c49b15794514f2505690c5ab572 rubygem-power_assert-3.0.1-34.module_el9.8.0+289+5a070f48.noarch.rpm b44d02d06a9abfc05496a212f9445555603fb80658dc9fcae5578d9f84ce27b5 rubygem-psych-5.3.1-34.module_el9.8.0+289+5a070f48.x86_64.rpm bbfc72cc3289174c80f18cdef1c215e815da6d86c3a80efecb73d925fab13150 rubygems-4.0.16-34.module_el9.8.0+289+5a070f48.noarch.rpm c0ab99a9946b709580b35c70248b9e15c7e5f1c9a8dc0f4cd163296f45a9b4b5 rubygem-rbs-3.10.0-34.module_el9.8.0+289+5a070f48.i686.rpm c82b499eb6c34850aa8cf1fb1a9aad57d8c76ba210012c8c172da81a5d7e5caa rubygem-psych-5.3.1-34.module_el9.8.0+289+5a070f48.i686.rpm d4e582639d3a4af2ef34bc65424f881a6000c78955a30095eff884889fdead2a rubygem-typeprof-0.31.1-34.module_el9.8.0+289+5a070f48.noarch.rpm d6aa930ee8efdbad15e5c5e89ef82a900530f8669c79bf2d4de1ea56ed703041 rubygem-io-console-0.8.2-34.module_el9.8.0+289+5a070f48.i686.rpm d929156c351a6c6c2be076817c51896ae3a47cc20aff94b842414abb3b3eedf1 rubygem-json-2.18.0-34.module_el9.8.0+289+5a070f48.i686.rpm e1d5ad26c355cca1461fd62c5b0592fa91b258a78e6c09b16237b8c974af5812 rubygem-bigdecimal-4.0.1-34.module_el9.8.0+289+5a070f48.i686.rpm e9ac987c4a8c35f1566f545dc1d47723a5f2196935ec09ae3c6e8ad010da2904 rubygem-bigdecimal-4.0.1-34.module_el9.8.0+289+5a070f48.x86_64.rpm eef7afdb9b18eac5b2b616bd6504340cbb6bcbb814d2612215c09763991dd9fa ruby-4.0.6-34.module_el9.8.0+289+5a070f48.x86_64.rpm f87a62ccada9b578606e3e6f61e162298e32442d586dfa1290f695896f5d504e rubygem-minitest-6.0.0-34.module_el9.8.0+289+5a070f48.noarch.rpm f92af6d127f8ccb7327da1285fe8625679ce8a870dccb7f9a67d298b37b20d26 ALSA-2026:50828 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257) * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256) * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240) * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242) * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241) Bug Fix(es) and Enhancement(s): * ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [almalinux-9.8.z] (JIRA:AlmaLinux-171335) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-racc-1.7.3-8.module_el9.8.0+288+22f1c9f2.i686.rpm 02cd01f44c2cff8865d035100c2e51c60bc95eecaaa0bac81509577b4e83d0c6 rubygem-rexml-3.4.4-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 08941feb88c6e4503609950cd6c317ba783b13e41053f2d7e1350cc313034839 rubygem-pg-1.5.4-2.module_el9.7.0+245+447713a2.x86_64.rpm 08e412278c4bc3ba8330aad4a3ea82ecb1b1ab64f127dee5b2bd9cb609b4808a ruby-bundled-gems-3.3.12-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm 2170c9c6022e155e56b020eeb809f469e4760ee739c8be391ff171190c3635e9 rubygem-power_assert-2.0.3-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 21a684a94095692f90c1d4f707f35459ec30a83b2628fbe9ccedb28b77a2d221 rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 rubygem-psych-5.1.2-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm 3bc6bfa8f5dcb49e56c2dd2882fb6309a2fb87fb53fbae858b527f52c672d87f rubygem-rbs-3.4.0-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm 4384c508082c34b84f387753db0fe657fd0f50938ca276b1d595134c177bca73 rubygem-bundler-2.5.22-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 52fba3af6956af7fb08fa4061b3c1f186a2ef5b4dd0d748aa195c77b59a7833e ruby-devel-3.3.12-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm 55787b2069a872c3f3c9a3a35d1d9b8b010b07d19bf5523c48ef7baadbae68d2 rubygems-3.5.22-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 5869b9a1d9d3d28b213bd1949cc08e12d108beaaf583630b8b6154e4a81cbbe0 rubygem-json-2.7.2-8.module_el9.8.0+288+22f1c9f2.i686.rpm 666a418526956b7ba09316bf4defdb7c00c8ca564a2f3a484131f769a17c3d6a rubygem-rake-13.1.0-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 691c8f4a92d8176937fb1c4a4de6fb5564cb9c8856d3c83512909d625436895b rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.x86_64.rpm 6bc622c1c7cbd8cf9624faba7760337096a143b4c787be6cfeda71eb7abda16d rubygem-rss-0.3.1-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 7e862cfa3c0e06de4775310186c1e6d5e7e8a6ad6f7ab030429589586e23f87b ruby-default-gems-3.3.12-8.module_el9.8.0+288+22f1c9f2.noarch.rpm 86c55844fcd391a335cfcf6332ed204c2845cd045998b9d52498a1478579ea8e ruby-bundled-gems-3.3.12-8.module_el9.8.0+288+22f1c9f2.i686.rpm 8b1fec62bd1ecb6f6113de20f4f687bd66bab7deee4da3458fbd46ab5520cbf3 rubygem-json-2.7.2-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm 92c3a08e36e8af6504889278326fd6d328a6751f478962afabfc73e95c314879 rubygem-bigdecimal-3.1.5-8.module_el9.8.0+288+22f1c9f2.i686.rpm 9abd62b6f3e3d14fd9f5a2c770437884f1e344e197476a3c41c4e015d28c2e02 rubygem-test-unit-3.6.1-8.module_el9.8.0+288+22f1c9f2.noarch.rpm a603fa7d65af99c20611af32fb62b93bbfd519c4456cdeb7cd99abf4b882f05c ruby-devel-3.3.12-8.module_el9.8.0+288+22f1c9f2.i686.rpm a92112673354138adcffaf64a86823a270d2ca88e9691be3e9c830bd0198d9ed rubygem-racc-1.7.3-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm aea181a0b8cbbe515ca30c70f1f90f234db1e56c59eef303b8ef46bcd0c712d9 rubygems-devel-3.5.22-8.module_el9.8.0+288+22f1c9f2.noarch.rpm b8f0e70b46d8bb742651e9c75fe1f701e485071e8434ce5662697c418d473916 ruby-3.3.12-8.module_el9.8.0+288+22f1c9f2.i686.rpm b93a64d3570a82767f7cf719b5e1488d7d27f023584e80bd06371ae5450bef90 rubygem-rbs-3.4.0-8.module_el9.8.0+288+22f1c9f2.i686.rpm c4579ade94ac55c08b8424449e77e6bc62e6d23fc3c8d5fe71be5e15fd08b1ac ruby-3.3.12-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm c6df9477ef8958c91201ce62b12ebea40fe665e0584430a8ffd195d28415cc8d rubygem-pg-doc-1.5.4-2.module_el9.7.0+245+447713a2.noarch.rpm c96338e6d5222b04fcb018874d6c36073340306f6f05aad2761a5a9b3a5b180a rubygem-bigdecimal-3.1.5-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm d21a2f7299905c31cbd453a68c7f3111af032028a869fa60fbd44656d48a845d rubygem-rdoc-6.6.3.1-8.module_el9.8.0+288+22f1c9f2.noarch.rpm db86eba24a4f37c9eeae9051a56bf231f8ebd280c588773265e2746a9d315431 rubygem-psych-5.1.2-8.module_el9.8.0+288+22f1c9f2.i686.rpm e17ca3bf0626a1065a7e5f499c2d1f0afea76b1fdf75dbdd722feb4d27bfea46 rubygem-io-console-0.7.1-8.module_el9.8.0+288+22f1c9f2.i686.rpm e27dc317273db6462a8ef233f7760f604af053e43ead4f9d345cf536fecf4590 ruby-doc-3.3.12-8.module_el9.8.0+288+22f1c9f2.noarch.rpm e5794b7f0c658541af4601ae6d3f0fff3ba04ee228a89f6f2365ce7099a7645c rubygem-irb-1.13.1-8.module_el9.8.0+288+22f1c9f2.noarch.rpm e9440430241b604a2f50f6e1fdcefa97d58bc91a08531be103df4efb4837168b rubygem-typeprof-0.21.9-8.module_el9.8.0+288+22f1c9f2.noarch.rpm eaa3b6b736b5a153be01570b0936c942616c18918cc279dc70def0d181fe00b4 ruby-libs-3.3.12-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm eb75b6f64ee0f4f4585037ac1ff819e0d761cf6dd9c6b5512f2729244167f269 rubygem-minitest-5.20.0-8.module_el9.8.0+288+22f1c9f2.noarch.rpm f7c01f4b74fc897bb3bd0cb0aa7287013db8b616396a8020355d3d6e3c6c437d ruby-libs-3.3.12-8.module_el9.8.0+288+22f1c9f2.i686.rpm f7de95aaa878746d20a1844c5e8da19d5f9755d2692f0fa258dc3c88c438bbb8 rubygem-io-console-0.7.1-8.module_el9.8.0+288+22f1c9f2.x86_64.rpm faedc70a31007a1a74a1688489dda721cb43276efe01407367c6f6b6de6247cb ALSA-2026:51035 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-9.8.z] (JIRA:AlmaLinux-186331) * [AlmaLinux 9.4] Kernel memory reclaim bug [almalinux-9.8.z] (JIRA:AlmaLinux-211058) * Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [almalinux-9.8.z] (JIRA:AlmaLinux-215575) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-perf-5.14.0-687.36.1.el9_8.x86_64.rpm 1901d074cfafb3b649579b044d3df894c55695ffba1bcb940d6a851df1a312f5 kernel-doc-5.14.0-687.36.1.el9_8.noarch.rpm 1a442d3d69f8f169857d626a3a6f91a302c21c597469664971c626ac25e11bcb kernel-debug-devel-5.14.0-687.36.1.el9_8.x86_64.rpm 26d76c0683a8d8873d65956cf736667ea0c30ed0471abd5dbe5efaac3a3052c5 kernel-debug-devel-matched-5.14.0-687.36.1.el9_8.x86_64.rpm 2dabd18bafca1ccd566e2e711c2ced7c8460f9e69b6759c0582d90de0251ed83 kernel-headers-5.14.0-687.36.1.el9_8.x86_64.rpm 51b935d555eaec098286143ece4b81ad3e998ff2e5b42644303e2622aea8d12b kernel-devel-5.14.0-687.36.1.el9_8.x86_64.rpm 682487daf111ba1a123a470126000e3ee6cd365bf791abf87c827b8c0b446d8c perf-5.14.0-687.36.1.el9_8.x86_64.rpm 7620910c804bcc68941df490200a453a8d96a4362155adcd2dfb36eae98042de rtla-5.14.0-687.36.1.el9_8.x86_64.rpm cf7303e24156564cccc12d44f094d536420aef65eca712802d31c82e4cb996cb kernel-devel-matched-5.14.0-687.36.1.el9_8.x86_64.rpm d29bf8d8136d5a96fe1737646e8478ecb32f743384081629bc5cb4c7524b561f rv-5.14.0-687.36.1.el9_8.x86_64.rpm e3cb747bc4d89123627b9bb80b9a14dd16564cd9424bd25419004e897401ed68 ALSA-2026:51105 Copyright 2026 AlmaLinux OS 0 1 Important

LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). Security Fix(es): * LibRaw: LibRaw: Buffer Overflow vulnerability in image processing (CVE-2026-51235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default LibRaw-0.21.1-2.el9_8.1.i686.rpm 265fccad2fe3e01e1e7c4239eac3cfba66b57800a3a1cb10ff99d393eb924e56 LibRaw-0.21.1-2.el9_8.1.x86_64.rpm 7c024785b7e430bce45e5885ba2558bd0051196264f08c47cfad88638485322d ALSA-2026:51153 Copyright 2026 AlmaLinux OS 0 1 Important

gpsd-minimal security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The AlmaLinux support for this package is limited. See <https://access.AlmaLinux.com/support/policy/gpsd-support> for more details. Security Fix(es): * gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution (CVE-2026-58459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gpsd-minimal-3.26.1-2.el9_8.1.x86_64.rpm 39fa3f05448aac610677e3478938ea80d2531f090818de0769551d6ded7b9c1a gpsd-minimal-clients-3.26.1-2.el9_8.1.x86_64.rpm fb68944b6a2d5d6bfdf15c558beef910d9369f7f23ac0251be8eff16c9a6ad02 ALSA-2026:52395 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation (CVE-2026-6479) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgresql-13.23-5.el9_8.x86_64.rpm 0e9729658049736f4f23b00bc387918e672e7d84512137500ce62cea10be46bf postgresql-pltcl-13.23-5.el9_8.x86_64.rpm 577dee5495c85f5b5160691ae17b6595c0c2b4bd0e803a9cd4c27b722e2d26b0 postgresql-upgrade-13.23-5.el9_8.x86_64.rpm 5cc333f2ef83370d615798a927974faa5759aace5297e4d6d4bd85846b646688 postgresql-plperl-13.23-5.el9_8.x86_64.rpm 7017bf89c0e7e7a05258fb4c20b77490a9579f09f97707f397d251d71eee881f postgresql-private-libs-13.23-5.el9_8.x86_64.rpm 8bc08b59612a0b18c5d4131710db65eeadac58d16acb15b4b86019fd63ac26c1 postgresql-server-13.23-5.el9_8.x86_64.rpm 9f5969cd833e69f0bdd7fc816fc08f7b25e8fbffa091aecb0448d1ff53fb6c26 postgresql-plpython3-13.23-5.el9_8.x86_64.rpm b1f715f39cb1461f34fb86b875c63458b828b6a4f49faaa0e23f10d8d139434a postgresql-contrib-13.23-5.el9_8.x86_64.rpm e0a9a36b9a1db1683a2038cc5daf36479d0ce304d3f5c6e55d288fd04f5971e6 ALSA-2026:52674 Copyright 2026 AlmaLinux OS 0 1 Moderate

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() (CVE-2026-14164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libarchive-devel-3.5.3-11.el9_8.i686.rpm 496e586d53ffd802c425f17deee2023fd06afdc0c26eaacda2f7efd13201fe7a bsdtar-3.5.3-11.el9_8.x86_64.rpm 7c68957bfe20f8ee798be200d7c731893dca852bc64951c7800a62b7e5a15510 libarchive-devel-3.5.3-11.el9_8.x86_64.rpm b284425fe725e789336715d199b0f7eafd5e90b876b5f4ead63737fa74e8f6b1 ALSA-2026:53329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-9.8.z] (JIRA:AlmaLinux-213036) * AlmaLinux9.4 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-9.8.z] (JIRA:AlmaLinux-215578) * AlmaLinux9.4 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-9.8.z] (JIRA:AlmaLinux-215580) * cifs: periodic IO errors when rename races with lease break (JIRA:AlmaLinux-192999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-doc-5.14.0-687.38.1.el9_8.noarch.rpm 16548bf32d1865acebe9e6d0e58aaa3d3a18f92882477ba21efa1c64d9ce6e6f rtla-5.14.0-687.38.1.el9_8.x86_64.rpm 237a0c6c75b03b89a3a5c25b2a61d72ffbd2375bcee717a6dc5620363c3bf7f2 perf-5.14.0-687.38.1.el9_8.x86_64.rpm 31d91646ef9c7a2c2a8eca78393a031605cb7a68cacbb0a25d6fe56f55c625fd kernel-debug-devel-matched-5.14.0-687.38.1.el9_8.x86_64.rpm 4c9397b8666fcb0c2bb1a3ac7f3fdd85f53ee150ed5112241ec495caac961297 kernel-debug-devel-5.14.0-687.38.1.el9_8.x86_64.rpm 509945abcd02cb152d2bfdd0341659d567248b625c80966a299e8cb1171fd2f3 python3-perf-5.14.0-687.38.1.el9_8.x86_64.rpm 93c364427a945e0a526cf3282f2c16f9e50d0c9c9fb996f045ce2402b304fe55 kernel-headers-5.14.0-687.38.1.el9_8.x86_64.rpm 94ef55e54e8b84123c74e417198b7dc1bec79ab6076876d4cde82c8fc815a50f rv-5.14.0-687.38.1.el9_8.x86_64.rpm adeb09c537ba7a3422ee55847f0c30bd33b4dc922b6b4b3561d6cca76e04ea53 kernel-devel-5.14.0-687.38.1.el9_8.x86_64.rpm af70ea4c9601cd5f0e56a0279511db0811face7afea4601c5a5cde291829cc6b kernel-devel-matched-5.14.0-687.38.1.el9_8.x86_64.rpm ec433f56b79da0b44fc842dba3ee75ce6eaab2a31eb9d83892c710d17fbdd09e ALSA-2026:53365 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default fence-agents-cisco-ucs-4.10.0-110.el9_8.6.noarch.rpm 03a01304b9c37ec088e842b2c0ae03b6ebb6984de4e67e85ab173d3002658461 fence-agents-ibmblade-4.10.0-110.el9_8.6.noarch.rpm 060bbee172f57939405c11d549c55f7048e27e9be0feea9da9a68b9612c708be fence-agents-nutanix-ahv-4.10.0-110.el9_8.6.noarch.rpm 07555078a78092683b0b5871e53259ef7677cb52bc56dc1063f44b1f3d3fdb8b fence-virtd-multicast-4.10.0-110.el9_8.6.x86_64.rpm 0d7691e7bfdbec300c3625263086cb477ab864bf3cb4f57251bc1304603cb2a0 fence-agents-virsh-4.10.0-110.el9_8.6.noarch.rpm 11fcb5ecb847b323df8e20e61f4c8f2bd5399f029c94dbe1ef01af9888509697 fence-agents-apc-snmp-4.10.0-110.el9_8.6.noarch.rpm 12e53976dd1e4bc2ba46579ba914f8d9e735243980be30c8b47461e4e94d8945 fence-agents-openstack-4.10.0-110.el9_8.6.x86_64.rpm 19b3e0a27a1bf90280380728eb491d910160ad116e837c6dead93de3a1a46e41 fence-agents-rsa-4.10.0-110.el9_8.6.noarch.rpm 1dec887654e43ccdecb9f7971beeee11d0a4e90c126329b07ef6cc62a98c240d fence-virtd-libvirt-4.10.0-110.el9_8.6.x86_64.rpm 22ae91ab4d1d8e2062a5bd14ffc16b718a4c902c7fa02fed920dc0c8e200d298 fence-agents-ipmilan-4.10.0-110.el9_8.6.noarch.rpm 264b5028a6830e7961242f5dae9c2a632a16b6021a8cc22d43f29841bd67b1c3 fence-agents-redfish-4.10.0-110.el9_8.6.x86_64.rpm 33d560725e6630cf61de95db2161ae7e63196da9a684fdf6184f9cc5b7df1bfb fence-agents-mpath-4.10.0-110.el9_8.6.noarch.rpm 3582804328377ba5d686811f84cb172798d7a320bc3d6e4a0ae308f28f8b570b fence-agents-cisco-mds-4.10.0-110.el9_8.6.noarch.rpm 3c1b1f6c5ddece7ab12f0dd6e9d792fdfab3c0e804ef28ef8be6d4b1af6fa1bd fence-agents-rsb-4.10.0-110.el9_8.6.noarch.rpm 3c4ad17f55b5e712c64123718f1fcafe76f6511c1e4b4b120dca69e7c2f4e763 fence-agents-aliyun-4.10.0-110.el9_8.6.x86_64.rpm 4d398d0bfd6619b84522ce8d49eed4cbcbb3b2f335cd6cf62d5e8fd826e4eb27 fence-virtd-serial-4.10.0-110.el9_8.6.x86_64.rpm 57e6917a36c2dda2a9f67d7d92d3889aa01d8d829355ffb26533e38dd9fdb28a fence-virt-4.10.0-110.el9_8.6.x86_64.rpm 66bd9d7a63be3c64f220766197b7f66994cc33cf7fa86db871d475dc038220c9 fence-agents-hpblade-4.10.0-110.el9_8.6.noarch.rpm 670558453db71723c4c8af89eb8faff4e692a85aa93a420c3ada95efabb28462 fence-agents-intelmodular-4.10.0-110.el9_8.6.noarch.rpm 6819f2e84e06a26b0208e9aed004f64a29af5fa117f2b5c0109432bbc280487d fence-agents-ilo-moonshot-4.10.0-110.el9_8.6.noarch.rpm 6c0b8c824e9217430b567fb1a5c0a7d1b24fe8015aa08d69312daf54273bf656 fence-agents-amt-ws-4.10.0-110.el9_8.6.noarch.rpm 6feea0acc3517b9e11ab8d5d6a80cd4c5ad6ffc4a3465ea93de53adb500a2bd4 fence-agents-ilo2-4.10.0-110.el9_8.6.noarch.rpm 73480334426701a3c65eebfb744f4b52fd774b79c045ba7b0e76f6ff41b618aa fence-agents-common-4.10.0-110.el9_8.6.noarch.rpm 7914eea628a1f334a2c3ab3c94e1c35814671aaeb2af38c8e0db0b2ffd9fd686 fence-agents-wti-4.10.0-110.el9_8.6.noarch.rpm 7d2dee7ab9c4a22711b368f03a627733ff93a977e734db13ef9704b1a9efadec fence-agents-vmware-soap-4.10.0-110.el9_8.6.noarch.rpm 7eaff6e3d7aff29b083809aba8941397e3cbf5aa3073fe6e733f41c5f9b0d119 fence-agents-emerson-4.10.0-110.el9_8.6.noarch.rpm 7ee2fcae6d87fe7ea2b5e36bd7777029555dc3715511142090923d29b755812e fence-virtd-cpg-4.10.0-110.el9_8.6.x86_64.rpm 82540597ac6a4354b04421d69c8a6c809ca893cc0ebf23e17474103279585f81 fence-agents-azure-arm-4.10.0-110.el9_8.6.x86_64.rpm 838bcd0649450391ee9f75e49aa81961d9a9acd8e30e316b25c7afd8cf14b501 fence-agents-kubevirt-4.10.0-110.el9_8.6.x86_64.rpm 88f041ef62c01e32f537af3d3e5213616375118d982ff33ac881d2b956bb4f80 fence-agents-drac5-4.10.0-110.el9_8.6.noarch.rpm 8ec902f12ee35a927f8cbf94f925ab5b60dd5cdd4b9702dd7b3448fc1cf486a1 fence-agents-all-4.10.0-110.el9_8.6.x86_64.rpm 918b6046b9551ce97364a147850ee1e54b150eecdb0e360d84ed8c925b6562fd fence-agents-aws-4.10.0-110.el9_8.6.x86_64.rpm 93d076fd10b96a04e0276e9fd09212ac25dc18c4efa233ca7c0c363287a483f8 fence-agents-ilo-ssh-4.10.0-110.el9_8.6.noarch.rpm 942e9fe5ef868ca84b95f4a4030d9dbf70cd7149bcd101baabee4f7752d1d96e fence-virtd-tcp-4.10.0-110.el9_8.6.x86_64.rpm 962ad4bf99446fd08b3e19b84040950dbf31257c0a892fff689807694bf071aa fence-agents-eps-4.10.0-110.el9_8.6.noarch.rpm 9d18d9b0c128ffeb59b3ef229f6af7fce1d163cb12f965dee4d07b2cb21ed5f8 fence-agents-gce-4.10.0-110.el9_8.6.x86_64.rpm 9daaa1646983c7b0eb3426b39b9df1190141b5bc1b656beb086d6a8144dc2328 fence-agents-ibm-vpc-4.10.0-110.el9_8.6.noarch.rpm a8df680acd7e63bdb6493a4f10fb3c262a6d2b50b90731398b1beff9c6c6884e fence-agents-eaton-snmp-4.10.0-110.el9_8.6.noarch.rpm a8e1e1e3cb5dd76f1be0a90657bea1c5512786bc65eb419e34ce84b9ecf4b5c8 fence-agents-sbd-4.10.0-110.el9_8.6.noarch.rpm aacd7f63b4da4f4d7bfceb6184033174e124f9419dffe6dca64138fee9413d62 fence-agents-vmware-rest-4.10.0-110.el9_8.6.noarch.rpm ac145950d1098b9893d6679a937269ffac688ff6f96f1c9a7782b846a6dd25f8 fence-agents-lpar-4.10.0-110.el9_8.6.noarch.rpm ad4378e16d78590da19a5e097fce655ff3dc6010a6a72e737f15582d7bd10924 fence-agents-ipdu-4.10.0-110.el9_8.6.noarch.rpm ad4d750d233ccd4ca130d5aa07ca7ce04d814df06fc067116141d13e510970da fence-agents-ifmib-4.10.0-110.el9_8.6.noarch.rpm b9a781cf5b1bdc0692ec7f4f971fa47d94b59310e43364a797094b238babe1f1 fence-agents-kdump-4.10.0-110.el9_8.6.x86_64.rpm b9c9e5fdf6f63436bb70a1b9dcc940a970d1e1c77fad69116eb9dd877c8b9657 fence-agents-heuristics-ping-4.10.0-110.el9_8.6.noarch.rpm c40fc5242a7e313ffd826538fc8727bbd42221fb04b43f3c08567360edc4b4de ha-cloud-support-4.10.0-110.el9_8.6.x86_64.rpm cff66d238ffa7f1388baf656ac46292f0c71b779ce8dd244a74537ae8ebe914e fence-agents-ilo-mp-4.10.0-110.el9_8.6.noarch.rpm e57db7ea5b956d100b2eae25fc255c790d8e83df70cad7ffb68f4981e32d19d8 fence-agents-apc-4.10.0-110.el9_8.6.noarch.rpm e6bd2ff2f5244cc30ea7803f0ac46a04df2e59e876076c8992210571b9b08a4f fence-agents-rhevm-4.10.0-110.el9_8.6.noarch.rpm ee7f0344d660f949ca64ecefe0d5f7f31d85de4a96586d19e70a5c6b4e68dc75 fence-agents-bladecenter-4.10.0-110.el9_8.6.noarch.rpm f548089b6e6c80a09a2effdd76f00c3dfd6b037078bfffe5c5a96dd95eb53b9f fence-virtd-4.10.0-110.el9_8.6.x86_64.rpm f9bbfa9e2af2492036f1681529f8b5a977e6da1d1ab964146ca8045ac75919f6 fence-agents-ibm-powervs-4.10.0-110.el9_8.6.noarch.rpm facce29f07bdf0bd90ab090a1272d71e59b450dbbe313a423380533dcd7541f3 fence-agents-scsi-4.10.0-110.el9_8.6.noarch.rpm fb6b7b4d44d59f8fd7b70c1c60ba9c96c940fba551e75e9548ff4aceae526a7b fence-agents-brocade-4.10.0-110.el9_8.6.noarch.rpm fc9cf8ff93a72bdd5b95da926fcabf485a5f8948e7f3b3f23d9d1602a6d5a421 fence-agents-compute-4.10.0-110.el9_8.6.x86_64.rpm ffd9577c36e8729aa36a49a1bd1d120b7fab5b81895750062665dd336dba62c1 ALSA-2026:53452 Copyright 2026 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.2.x86_64.rpm 2dac6bebea02470ce7953e3fd8f5fec080b8da16978c72b392f3c9423f30a8de gstreamer1-plugins-good-1.22.12-7.el9_8.2.x86_64.rpm b982507be44f10a9e3ab84e9942d2a16daaff8f383cae2bb6046c13f83096a84 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.2.i686.rpm bdf88f7766240c778a45310a86b4e445fa80282d028da64c1c4122b22478d044 gstreamer1-plugins-good-1.22.12-7.el9_8.2.i686.rpm d808324c09c9ec4cf9c6b3de2653f52d3050800031bc9f26b58d61cbf87157e3 ALSA-2026:53844 Copyright 2026 AlmaLinux OS 0 1 Important

iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks. Security Fix(es): * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944) * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943) Bug Fix(es) and Enhancement(s): * [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2.x86_64.rpm 40d7b913469b904b0ced5500ebdd17a57640e67fc8920afd49ddce75300dc79d ALSA-2026:54184 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads (CVE-2026-42127) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-selinux-10.2.6-23.el9_8.1.x86_64.rpm cf616c50dad1e02642c01f8d6cb8c660cde1b473538cb572bf09721258e0ece4 grafana-10.2.6-23.el9_8.1.x86_64.rpm f65aa6058649bc14bcd833121e64dbe582fe8aa51c4c9ddec68c3a83a0e0b977 ALSA-2026:54268 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python-unversioned-command-3.9.25-7.el9_8.3.noarch.rpm 06a501fe9bc86175f9fec26616a459a62a2b166060d2a11c0e75a9cd51d36e0b python3-tkinter-3.9.25-7.el9_8.3.x86_64.rpm 4d3a29ccac1330f18c55f645dcbb5239dc96c2dee878c53ee7c75307b865eaa1 python3-devel-3.9.25-7.el9_8.3.x86_64.rpm 5a8c4001e5869a1f93f6841234a0fbb7ea3cda0cf5306fd9849198ca9e8247a2 python3-devel-3.9.25-7.el9_8.3.i686.rpm c3ca80fff371a92bdbce34f64547bc3305a249e43165d852155195a8deeaef53 ALSA-2026:54443 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-9.8.z] (JIRA:AlmaLinux-214434) * Kernels 5.14.0-434+ may lose page table dirty bit (and page data) [almalinux-9.8.z] (JIRA:AlmaLinux-220787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rtla-5.14.0-687.39.1.el9_8.x86_64.rpm 0f541613e089b0970df27b31e14996d3300fec7231946da81d0021e16282b50b python3-perf-5.14.0-687.39.1.el9_8.x86_64.rpm 1c88fcd383e2399cb517451696f6416e7998d07252f962fdca05d2178d3f2336 kernel-devel-matched-5.14.0-687.39.1.el9_8.x86_64.rpm 5291d6d1c91825280adae7185a8f94f3a9993a9bba14d917cc6cd55c7065fa0e kernel-debug-devel-5.14.0-687.39.1.el9_8.x86_64.rpm 58227eb512b57fe2779647b940303568ba81db46ce80d552f2cfda870c5cedab perf-5.14.0-687.39.1.el9_8.x86_64.rpm 84a59df7351bf240187ba91bfb33c81793762d2cff9769258db28203dde18a9b kernel-headers-5.14.0-687.39.1.el9_8.x86_64.rpm 852232c74f9b0151c22757d69c465706fbd8500d598c2f720ca01654a3881aa6 rv-5.14.0-687.39.1.el9_8.x86_64.rpm aa9451730057e564b5680b277696f30ca4d6901346a9ed07ad53b3bebf1a4c5c kernel-debug-devel-matched-5.14.0-687.39.1.el9_8.x86_64.rpm bd34551c73bdab7d459b84c37e3b20b3ae349b09fc89fc87be08b3bac97fed67 kernel-doc-5.14.0-687.39.1.el9_8.noarch.rpm d71ca0a30dc792876b9bdb0aa986f3cbb314c5f90cb083736927ad15d2297106 kernel-devel-5.14.0-687.39.1.el9_8.x86_64.rpm e06529d36511176a39c2b84124dfc50841c60764b05c08be24e6cfbf37bde27c ALSA-2026:54487 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624) * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299) * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289) * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow (CVE-2026-68580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libwinpr-2.11.7-7.el9_8.5.i686.rpm 300f9ea89c714ae97f94de345c233550dca300671fdc8115ae731b5d2226edd0 freerdp-2.11.7-7.el9_8.5.x86_64.rpm 4aa27cfffd642da40e5bc5e27f3cb78356f83f325bcf12e688bfedbabf96406a freerdp-libs-2.11.7-7.el9_8.5.x86_64.rpm 61fa171aaf2f6ab6ca94a2cf876cb0e5980bb336c64eacb24632129eccca9571 libwinpr-2.11.7-7.el9_8.5.x86_64.rpm 67f1bc008366856bb069bf9bda4b69cdf159763e833be422074325da2005cfcc freerdp-libs-2.11.7-7.el9_8.5.i686.rpm 76b27b40d4e91e1150e10c564c9183ec3343a6fd2c71dde55071706dab832eec ALSA-2026:54510 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331) * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321) * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind-dnssec-utils-9.16.23-40.el9_8.8.x86_64.rpm 06874913d73150dfe502c2064b26183fea495e82b58262d0348e1674f76c3ce8 bind-9.16.23-40.el9_8.8.x86_64.rpm 13eaeaf75f92881b4f6197e178165c934eb653c91928a1a18520dfbb82dd4960 bind-utils-9.16.23-40.el9_8.8.x86_64.rpm 5d632f34dd19d0f68ee665653aba9af01335a2a4758e9f9b000866a4883d2d22 bind-dnssec-doc-9.16.23-40.el9_8.8.noarch.rpm 6433eff2e76b241a99cc9a386e2fb06c5d9533e22a413bd4d862fb6109857dcf bind-libs-9.16.23-40.el9_8.8.x86_64.rpm 8b9d632cab90d1689c9d818511a55cd695efc5481130207ac20a09d5e09000f4 bind-license-9.16.23-40.el9_8.8.noarch.rpm 947b2ea665eca12f5c7c9ba9da27dafee27caedc3d5cc453f49e00d2dceab840 bind-chroot-9.16.23-40.el9_8.8.x86_64.rpm ae65a6a6dc113cdb0e77acb638986d0d31ebff9aa4d23d063cf1f0341f93bf42 python3-bind-9.16.23-40.el9_8.8.noarch.rpm d26933328930f69a07eaf5eefcaa302fc57416f02a419bd5932fbba18cce169e ALSA-2026:54571 Copyright 2026 AlmaLinux OS 0 1 Important

dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition. Security Fix(es): * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dracut-caps-057-120.git20260728.el9_8.x86_64.rpm 1b0121c16f61c806cb6f52da5d412948904413544b1e3c9c45ed1e8bee45252c dracut-live-057-120.git20260728.el9_8.x86_64.rpm bf5096db8804644196e676789316f42fd78e5c983b8beaddb1138dee4f59d315 ALSA-2026:54574 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.130 Runtime version: 8.0.30 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.130 and Runtime 8.0.30 [almalinux-9.8.z] (JIRA:AlmaLinux-235471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default aspnetcore-targeting-pack-8.0-8.0.30-1.el9_8.x86_64.rpm 0193ae05eb2e49d48b07c1cd289224f8481b03872936babb95d71dcc90d0872d dotnet-sdk-8.0-8.0.130-1.el9_8.x86_64.rpm 019f46f402b642ad3728a98efa2cf54891078c65dfe46eff037b25872a9266e6 dotnet-runtime-dbg-8.0-8.0.30-1.el9_8.x86_64.rpm 0b41da9ae53a3d5c4fd7f31a4d3f1e1731d1b696160350738c3d4c8f5bd95c28 dotnet-targeting-pack-8.0-8.0.30-1.el9_8.x86_64.rpm 28e96a103baac30be12ded826ef299f6f78ef636376c70ed23d83deb8a21fcbc dotnet-runtime-8.0-8.0.30-1.el9_8.x86_64.rpm 29477198322b8c922064b10be9392c70b812a9fdefbb96ddf92bc560259c8bd2 aspnetcore-runtime-dbg-8.0-8.0.30-1.el9_8.x86_64.rpm 802a0894230c29bd97b6aef6a31bbc8ca47cb20ce7bcaa2494a5ac6f33d687e1 dotnet-templates-8.0-8.0.130-1.el9_8.x86_64.rpm 965f43473cb6afc0db3f46780e1211fd19cd88a5bb777a596d856f06106422fa dotnet-hostfxr-8.0-8.0.30-1.el9_8.x86_64.rpm 9dcfe17ea12226dc8d7636eb13d10be8de694e4dd371d88b42b7405d94ea4162 dotnet-apphost-pack-8.0-8.0.30-1.el9_8.x86_64.rpm c883372ac5d861b8184c2e550d96ec8708a125f158b2fea18c489cbb652e4879 aspnetcore-runtime-8.0-8.0.30-1.el9_8.x86_64.rpm db428552eb8998de83491eef5717b213ac8a8e0fd661aa1387f9a576fb67762d dotnet-sdk-dbg-8.0-8.0.130-1.el9_8.x86_64.rpm fd4ccf921279258434190d06a55875654b50dfb999ed875a2671cf05d2f34b9c ALSA-2026:55423 Copyright 2026 AlmaLinux OS 0 1 Important

389-ds-base security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) * 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) * 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default 389-ds-base-2.8.0-9.el9_8.x86_64.rpm 7c6dcd50b656fd16b2c7eeffb214a13ccc10b9596c10dd7640e1951fe3bec16d python3-lib389-2.8.0-9.el9_8.noarch.rpm 94aef5c4492dd0017c07a974db60910e4e300449f1b5765b51bbc57b93310f83 389-ds-base-libs-2.8.0-9.el9_8.x86_64.rpm b530f0044e3af586fbf316ffa30ca7ea86c9a10ea5b4735933cd7066d4b6e9f5 389-ds-base-snmp-2.8.0-9.el9_8.x86_64.rpm dc8d5108313496336ca955b4b080c801d8f7279b4aa1132a6d8afd20a353bb38 ALSA-2026:55436 Copyright 2026 AlmaLinux OS 0 1 Moderate

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433) * gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.4.i686.rpm 91102cb4ec4f3924c9e56d51db66b04f3bcc8674c5e7aadecb01e3524f749689 gstreamer1-plugins-good-1.22.12-7.el9_8.4.i686.rpm 9344f402fbb686ac7f5ce24feaebe6f76e25bdfc45a48b0a44e8269d15e567d4 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.4.x86_64.rpm aa2f5745752f1289bcf47e82dccf465c8ff95f13c884c72ddb5ac190356a8605 gstreamer1-plugins-good-1.22.12-7.el9_8.4.x86_64.rpm ba66244802b42d6831987924c34b80c6ec07555f248bf65b767bff66ddb5f6ad ALSA-2026:55439 Copyright 2026 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication (CVE-2026-1965) * curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect (CVE-2026-3783) * curl: curl: Man-in-the-middle attack via SSH host key bypass (CVE-2026-9547) * curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libcurl-devel-7.76.1-40.el9_8.5.i686.rpm 3ed08f9c67618cb026d86837cb12cc409457aa53461a4f1a5bef54c31ae0dc13 libcurl-devel-7.76.1-40.el9_8.5.x86_64.rpm 5408f135a95eb8711518edd31b9498f991a4fc98d20dbb23616b0d6d02516bf9 ALSA-2026:55440 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default glib2-doc-2.68.4-19.el9_8.9.noarch.rpm 3be03920c4cc51ab48f65ffa0c62f9afb51c928c3c6caa8ec0f2a86ccfc1214f glib2-tests-2.68.4-19.el9_8.9.x86_64.rpm 62b31a9c3bf600e606e2d679b8050a8a8a7e744cec5a19709c6f6932732929ef glib2-devel-2.68.4-19.el9_8.9.i686.rpm 6c98f4ec4a4d93cdc9a837306c9607156e105ccb087e739681f9267b819013f0 glib2-devel-2.68.4-19.el9_8.9.x86_64.rpm ef8482a9dcbe1121d98a2c630dbb1f5624699f84bba017c7b57a90c575a964d0 ALSA-2026:55442 Copyright 2026 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331) * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321) * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind9.18-libs-9.18.29-14.el9_8.8.x86_64.rpm 10f16a034a063c2f77b356c0cf8a59de9d2ced00758799f5880598f5bd2b6a9d bind9.18-9.18.29-14.el9_8.8.x86_64.rpm 5824a9601d7b06541a1b18f51626c72df5a3c6678296fd61be6068ec312509e6 bind9.18-chroot-9.18.29-14.el9_8.8.x86_64.rpm 60a72511b3cc71f7c7c7a06316b4f66e9e362a5f01bec4d9218213087034fd89 bind9.18-dnssec-utils-9.18.29-14.el9_8.8.x86_64.rpm 91fddf893f03f88e4b48e404d54bedee7f2cc73c76e28ecce280aa605f4320ec bind9.18-utils-9.18.29-14.el9_8.8.x86_64.rpm b27180963caad5ec8776cbe9b9f51308c67334aeb037aeec0efeecc59781950f ALSA-2026:55447 Copyright 2026 AlmaLinux OS 0 1 Important

libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fix(es): * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679) * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libXfont2-2.0.3-12.el9_8.3.i686.rpm 0d968a583d488ff035e4400190e91334f03b3d78834d4c18469a47dc1e41393c libXfont2-2.0.3-12.el9_8.3.x86_64.rpm 4dc09d143d8d0494277bc678d742a3f01724a9b2ff5bfce73aea9030179701a5 ALSA-2026:55601 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function (CVE-2026-14257) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nodejs-libs-22.23.1-3.module_el9.8.0+291+0bb98cce.x86_64.rpm 297507bf2bad133000bd3358570409b2117c5909e4b817aa07dac0d414443e2c nodejs-nodemon-3.1.14-2.module_el9.8.0+291+0bb98cce.noarch.rpm 36bfb4903244fdf5e11e5ef3cf579bd330a0b7dc8b53b9d7e7a3d490ff6c1e4c nodejs-devel-22.23.1-3.module_el9.8.0+291+0bb98cce.x86_64.rpm 608d85b5fee9d2913073ff16ce9c2593c06ca6aa515bf5b4805c6a81760135c7 nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 nodejs-full-i18n-22.23.1-3.module_el9.8.0+291+0bb98cce.x86_64.rpm 7a560e1041405d84bf5e5e04c732ff5e99210dbbf29f0c3e0ec1564dd56af4e5 nodejs-docs-22.23.1-3.module_el9.8.0+291+0bb98cce.noarch.rpm 80351d45622e81ab7e34b6e82d9da149a69bd9d62175482b820f275532fd9695 nodejs-22.23.1-3.module_el9.8.0+291+0bb98cce.x86_64.rpm 983632743dab07b474f42fcae880b426b1c1a471b2a913a1e08a22496aa4f269 v8-12.4-devel-12.4.254.21-1.22.23.1.3.module_el9.8.0+291+0bb98cce.x86_64.rpm ab1411e9253f0db7b7718f6f2578b90bd2ba161da913d78ae5b13f1100dd4ddc npm-10.9.8-1.22.23.1.3.module_el9.8.0+291+0bb98cce.x86_64.rpm ac13edab98fea9faab9aa09e988fd05c184f2c2c7c78151b2c7cb5d2c335c1be nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:55603 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function (CVE-2026-14257) * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification (CVE-2026-54272) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default npm-11.16.0-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.noarch.rpm 1b005d31fb45adddbdee96b5dcf17f14a5a7ea61afd6780ff3735b33dfa864cb nodejs-nodemon-3.1.14-3.module_el9.8.0+292+f4eaf8b2.noarch.rpm 34593bae84e3eda22d3c85db93eb84f883d07844a6d2c91217637b2c000e7e3b nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a nodejs-libs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm 99e2a6f62154c36a078efee417392bd69c65915794e4bdb3b517e9514315afd3 v8-13.6-devel-13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm aeadb32335017021aea176b1de5f497f0a16cb875dc7d150e6d5383f3503d88e nodejs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm b85cb78c9e2f6e87a1ec70b888ab9daa79cd2cd1bf145f706453d3a26073a035 nodejs-docs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.noarch.rpm b88690db148d544aa4ad64b894f87f220091e46636c3caf1eea2c6f664f8ece2 nodejs-full-i18n-24.18.0-6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm c553ed154cd8389b4149fb50c51ab234132973f5b182286e1183e62bcae0659d nodejs-devel-24.18.0-6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm c651230ee75a8bca789c8e77b3c0c18dfca427a06bdcd6cd26f337dbba426088 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 ALSA-2026:55740 Copyright 2026 AlmaLinux OS 0 1 Important

pcp security update

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fix(es): * PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection (CVE-2026-16524) * PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability (CVE-2026-16526) * PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules (CVE-2026-16527) * PCP: PCP: Denial of Service due to signed integer overflow (CVE-2026-16529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pcp-pmda-apache-6.3.7-8.el9_8.4.x86_64.rpm 00a32e66f812798a6079ad876359e6b5e3f63b5e09cabbe788e29a713414a3b1 pcp-pmda-pdns-6.3.7-8.el9_8.4.x86_64.rpm 03f9bbb8fd23e7e43800fe71d091bf9a8d80abe4a67475b0d144b2b042facbc9 pcp-pmda-snmp-6.3.7-8.el9_8.4.x86_64.rpm 08e435116133590e7dde04bab0e6c35b7a01f13c0e52287d768669fb6245e634 pcp-pmda-lio-6.3.7-8.el9_8.4.x86_64.rpm 0a1c8498b8db9122e6265a336a913e1979f610a46817d50c23d6b22a53de98da pcp-pmda-cisco-6.3.7-8.el9_8.4.x86_64.rpm 0e2598ba1f2ba79d143bfba1d3f8a5e769e37d8163f051d8cb5dc317b81d39b9 pcp-pmda-summary-6.3.7-8.el9_8.4.x86_64.rpm 0ee854aac5485cd70ff51bf1486892717e3e49535602959c975dbf1c4994ff18 pcp-export-pcp2elasticsearch-6.3.7-8.el9_8.4.x86_64.rpm 11fe57d0f3a2836a8cc9bd4b982da3f13f5323df1e50518e24ac17167fd6852f pcp-pmda-bcc-6.3.7-8.el9_8.4.x86_64.rpm 12a0826d68866c2f9911c1249a7aa7f2ddf60e5eebcb87a1467da595a2297eac pcp-pmda-ds389-6.3.7-8.el9_8.4.x86_64.rpm 151d852cfcbde06b94f3c5ec650cd289f5c80ea6b80cef0d6a8ddd149743ed76 pcp-pmda-oracle-6.3.7-8.el9_8.4.x86_64.rpm 15c20bca2533d6b1b8dbb555d99928a4d358c44c61cdffa287443b01dd2b37f4 pcp-pmda-dm-6.3.7-8.el9_8.4.x86_64.rpm 1921e003feaaf433b83b253934be4ab64f9a2097776c2065b8f3d2590b31ec84 pcp-pmda-unbound-6.3.7-8.el9_8.4.x86_64.rpm 1a0c64491150c9195f07da9a645db406648bda8f619c11413d7879ed046d2200 pcp-export-pcp2xml-6.3.7-8.el9_8.4.x86_64.rpm 1a9f2083dfcb67cf945d363cc64f9b84fc8be2fd3a388a23586f4665002ad1d0 pcp-pmda-bind2-6.3.7-8.el9_8.4.x86_64.rpm 1bbfd42824358de7c943fcf2ceeb9baf6f8f29c4290bfb32bb930da2a3590533 pcp-pmda-mounts-6.3.7-8.el9_8.4.x86_64.rpm 1dad05f8601aa7237ac3edc24ee5a0e1a2cacf87a2b8e956e215903ba1ff1a15 pcp-pmda-podman-6.3.7-8.el9_8.4.x86_64.rpm 202f45b80cddbaf861997dadc61ef3680f2c28e2814bebb93954a94e6d78bca6 pcp-import-collectl2pcp-6.3.7-8.el9_8.4.x86_64.rpm 22dc4c57b2585014b2bee8976469dd5a795b6d9f17d92aa4a5ea2d2a3c10e827 pcp-pmda-farm-6.3.7-8.el9_8.4.x86_64.rpm 267dc1d01a22cacee655465786189ed1b17ecc180b096b12ddfb03467cf1a27f pcp-pmda-rabbitmq-6.3.7-8.el9_8.4.x86_64.rpm 29935865d8b2cb7a6b013c1b7e9776f147498a61160180d5bfeb76c4f4e51312 pcp-doc-6.3.7-8.el9_8.4.noarch.rpm 2f0cf2eeac31be8021a1c7ff4a5333b80404bf0805966c814c95b338982629ac pcp-pmda-infiniband-6.3.7-8.el9_8.4.x86_64.rpm 3343960027acef1295f0d7d0c11f806c2ef74732b2c746570211d2793a145db1 pcp-pmda-bpftrace-6.3.7-8.el9_8.4.x86_64.rpm 34369118c052241c0390ee07bbc86827347fbc82875354bec9d2a1fbcf9046bd pcp-export-pcp2influxdb-6.3.7-8.el9_8.4.x86_64.rpm 355f53bbeb7c09b5eeaa5b93fd6843bb5b989f7cb99c080e16f387135ef35b27 pcp-pmda-memcache-6.3.7-8.el9_8.4.x86_64.rpm 35eecd4406540d261aaa71ff0e9caa632616afb9a3427d66c712b114cb4db2d6 pcp-export-pcp2graphite-6.3.7-8.el9_8.4.x86_64.rpm 398d649b54a293f45a2593c4e5c539b8381d94fef34076270264e59dc28174af pcp-pmda-openmetrics-6.3.7-8.el9_8.4.x86_64.rpm 39c7ca4d03416f6e0e6f6cff1c458feb73fe75aa9f3ff1b0b62d8e2d63873dce pcp-pmda-sendmail-6.3.7-8.el9_8.4.x86_64.rpm 3a5ed8973b561f4ab95a8ec61cbcd8ed1044ff7fdbeda85b70a7f010adec019b pcp-export-pcp2zabbix-6.3.7-8.el9_8.4.x86_64.rpm 3a7fd748cd10b714a61a7ed05a984e4c304558dda8ff7cd464ca4575dae1d293 pcp-pmda-trace-6.3.7-8.el9_8.4.x86_64.rpm 3cc2cb5eefc50c65705524dfddea197960f281067aa8aa6269dd4fb24f2940fc pcp-devel-6.3.7-8.el9_8.4.x86_64.rpm 3ff1c208811517a1dcc2c9a11f507898831eefa730458530a2597c792ce2eb31 perl-PCP-LogSummary-6.3.7-8.el9_8.4.x86_64.rpm 40b10bfd9e4f71ca36224d1675f0337bbfbe663d26f9cd9e7e384184ac671775 pcp-pmda-bash-6.3.7-8.el9_8.4.x86_64.rpm 41b371c2854bbb6374acfa40d0f12a586f81fc2e49abd302d297a737505bcced pcp-libs-6.3.7-8.el9_8.4.x86_64.rpm 4312cf1f8e3cfb4e05130dbe080f8107a431f56b6e6c171a97e14adfcd77472e pcp-pmda-elasticsearch-6.3.7-8.el9_8.4.x86_64.rpm 43e0e718bc6b8ff5179b88245abaa96dd80ca65609464714aaf5e1c6ffc2382e pcp-pmda-nginx-6.3.7-8.el9_8.4.x86_64.rpm 47c9dd00a96d6e25633f1e01863535b31d536196686b7a41dab0968b8a0618d3 pcp-pmda-samba-6.3.7-8.el9_8.4.x86_64.rpm 48e2fc7937591345de6a930691dd65e9bcde55a048798f60b02f0453bd3dcbb3 pcp-pmda-smart-6.3.7-8.el9_8.4.x86_64.rpm 4ba2e8d6c5f0c7d4774b8c1f6ffdba102b3d8004509918204ab095afe821d7da pcp-6.3.7-8.el9_8.4.x86_64.rpm 4cb260182a5e6164c13b9fbbc32921c9ba69f33a6e63a34548256ab61d34bb1b pcp-import-mrtg2pcp-6.3.7-8.el9_8.4.x86_64.rpm 504dc122fabc4d9ba1347151da116694c903fc6a74c17bfc3741df95b164039a pcp-pmda-nvidia-gpu-6.3.7-8.el9_8.4.x86_64.rpm 52b310282665ebea5c17cf4055c1c3fb21d7f90a711c505a0c6edc3195cca0f5 pcp-pmda-zswap-6.3.7-8.el9_8.4.x86_64.rpm 569896a4dbb4d55f0dd6c434a6624f6ff73f030f8177c8cc11ff36168c1bcc74 pcp-pmda-netcheck-6.3.7-8.el9_8.4.x86_64.rpm 56da005f6797e316ce4398e9ce225beedc9f02029efc11a3e69e4cc5ef9be25b pcp-pmda-roomtemp-6.3.7-8.el9_8.4.x86_64.rpm 58a3ffaf720db4e9ff07d73e6437d3be4d533b0224c4f79c74a43664fa34d56d pcp-export-pcp2spark-6.3.7-8.el9_8.4.x86_64.rpm 5c1211d82d8043a8b396b955d28d8819f6882f7ba7124ada55493019d67a31c2 pcp-pmda-dbping-6.3.7-8.el9_8.4.x86_64.rpm 612ecd8127f87f686b8b9a69d9c7cb46312abd235a40f64514902ad80e742aef pcp-pmda-slurm-6.3.7-8.el9_8.4.x86_64.rpm 638e5188da6255834cf2e6cf23c841654fda91e65379d72b3e5ba98cbeffb929 pcp-geolocate-6.3.7-8.el9_8.4.x86_64.rpm 64693eec4c285abdf38b85cc92f5cf603b42189a237878f9973f7b139d9c7c45 pcp-system-tools-6.3.7-8.el9_8.4.x86_64.rpm 685abd4a2647e352e2cdd5821fddcc22dd26c439f0fc276d9f2ddb2cf431534f pcp-pmda-systemd-6.3.7-8.el9_8.4.x86_64.rpm 68e7a72d773c9eaf83e9c2b414d7770e28428fcca8ff7a8187b07ab591ea82d7 pcp-pmda-openvswitch-6.3.7-8.el9_8.4.x86_64.rpm 6a3a4f6791be6b897f626aa2f61b6b3421054a517666d590641de81d5801b3b1 pcp-import-iostat2pcp-6.3.7-8.el9_8.4.x86_64.rpm 6a738deec979602ea5e201c2a5f3a58422f2f6c99f63a468fb3da4761daed216 pcp-pmda-resctrl-6.3.7-8.el9_8.4.x86_64.rpm 6b9a6e41207dfa3466969e36dc7fad53406e0f30caea58d7c9aa5cbe5f0d8684 pcp-pmda-lustrecomm-6.3.7-8.el9_8.4.x86_64.rpm 717dcf3101bca8b6de2c86e4899f5767ddbb33d04ad30602b2fd8c4fb15bae59 pcp-pmda-postgresql-6.3.7-8.el9_8.4.x86_64.rpm 74b7b3f8bf11e6228ab301d06992f5bdcc473bb1483987492d44e2d346a1bb80 pcp-pmda-redis-6.3.7-8.el9_8.4.x86_64.rpm 7fbfdfb128a606d411280e2793245cce935f2184fcd6a44fbdd93652b22ef30d pcp-zeroconf-6.3.7-8.el9_8.4.x86_64.rpm 826e2487edcad720cb0c7a0fc6899f05e3ae7ad1d75ede4aa9d3c0f2084f8182 pcp-selinux-6.3.7-8.el9_8.4.x86_64.rpm 89679150aeb7e6821c891285f46c1d87dcc4e4d177b83ff461bd37363ccc2f7b pcp-pmda-named-6.3.7-8.el9_8.4.x86_64.rpm 8abdb1722a89ab8e302b51173b99a8d9f5977d9932011f912752d7a1c93b3c87 pcp-testsuite-6.3.7-8.el9_8.4.x86_64.rpm 8eefa407f67908c32265fd4cafdf99217eda5c77447483f3287d611ae45ad739 pcp-pmda-rsyslog-6.3.7-8.el9_8.4.x86_64.rpm 8fddf52522267380a944fcddd05dfd3f6d9abd2e9da2ce529af65d46ebafb842 pcp-pmda-lustre-6.3.7-8.el9_8.4.x86_64.rpm 9268f401c87ab81500df03eb525fe6cb71628202c1304e5a78174fa2a8db521e pcp-pmda-ds389log-6.3.7-8.el9_8.4.x86_64.rpm 93c0eecb786b7b0f82abd6ae8eb78dea64471d035de79bc1a11716dc89d2065c perl-PCP-MMV-6.3.7-8.el9_8.4.x86_64.rpm 97185124f64a531ffc1f142fe12010577811baa2106c06bd21f692abea9591b0 pcp-pmda-gpsd-6.3.7-8.el9_8.4.x86_64.rpm 9729234f7d5b96c2f0d60d1d3dc401fc808d39227184b89466cf0e0a8b475e8e pcp-pmda-docker-6.3.7-8.el9_8.4.x86_64.rpm 97d92af043d47a29b34fb7eb1a5cc4aa05353473796b2f64a4394bbae603fdfb pcp-export-zabbix-agent-6.3.7-8.el9_8.4.x86_64.rpm 98a7bbc216059ff8870e212b0a1039d265b06d8230936014cc9256e71acf9d78 perl-PCP-PMDA-6.3.7-8.el9_8.4.x86_64.rpm 9dad3ee4101b44473217089b89f4e9387ebb8d2dc2a68929a6c8119896b40891 python3-pcp-6.3.7-8.el9_8.4.x86_64.rpm a0197410c75439913c03d5b7f41c497066c48474bdb0b97cb849354b859a85ef pcp-pmda-nfsclient-6.3.7-8.el9_8.4.x86_64.rpm a268e7a50866d54c08aef7969afb9835e03e76e957412d740cdecdc554db9918 pcp-pmda-haproxy-6.3.7-8.el9_8.4.x86_64.rpm a32dc278aa2c21c08858b700d5f2cd6f7194fb88cbf228d76872d3e02e86eac3 pcp-export-pcp2json-6.3.7-8.el9_8.4.x86_64.rpm a4f40d2144edc91048995bcf7ce2fe1aa5cbe2158da460733c43c32988f32a3c pcp-gui-6.3.7-8.el9_8.4.x86_64.rpm a581e6301ce88580414368b803ae20d01217041556f932ab9bcfeb5ae8a0ffda pcp-pmda-mongodb-6.3.7-8.el9_8.4.x86_64.rpm a64bebdd559709fe9218a3a510653f0daecdf170ba1c52d4b52d9d1c3a639c5f pcp-import-ganglia2pcp-6.3.7-8.el9_8.4.x86_64.rpm a7543004720be74393025410519cf753101ea29f6583afaa81bc2d313c885ef0 pcp-export-pcp2openmetrics-6.3.7-8.el9_8.4.x86_64.rpm a854780b095dda975a9d3c473819dc2f4cc1f5fd7cc98d0b209426e1e3e00ac9 pcp-pmda-sockets-6.3.7-8.el9_8.4.x86_64.rpm abb2cf36b03a6d61712c276a7aac83d8be210e815418ccf8df5b1c375b4dae8b pcp-pmda-gpfs-6.3.7-8.el9_8.4.x86_64.rpm b0dc4f15d2a3b7d6182ddedd1e95b88ef169e57230f77d2b4f8b92592d3f86e2 pcp-pmda-libvirt-6.3.7-8.el9_8.4.x86_64.rpm b1e4c961e78d9cad95cf7d2b502b9e06c7b87e01d0290b71516b58462267977a pcp-pmda-gluster-6.3.7-8.el9_8.4.x86_64.rpm b2b88465cef454429c1eb394c51f4bedf6ff7e8f6b4e391508c70dce793f2e61 pcp-pmda-denki-6.3.7-8.el9_8.4.x86_64.rpm b2d57eef88e7af90aa9bb78609b9dbd14627bb09f8472a46227d77958d1288dc pcp-pmda-logger-6.3.7-8.el9_8.4.x86_64.rpm b331a77e2376f12f31a333ab22aa7e3e3070fb9fd18db00d06964b030bb0db30 pcp-pmda-amdgpu-6.3.7-8.el9_8.4.x86_64.rpm b72212d2e90768b33c71600eeb591a2b0df957a2347e159a4a22ca308c099079 perl-PCP-LogImport-6.3.7-8.el9_8.4.x86_64.rpm bac3d606e35ec108d6ccbbb5f092ce691311cfd10d5294eb8b8dc1a25bd5c642 pcp-pmda-bpf-6.3.7-8.el9_8.4.x86_64.rpm bf0b096e69965186d6e93cd05f2dd556d9e27145013ea296374cdbb0538feaee pcp-pmda-mailq-6.3.7-8.el9_8.4.x86_64.rpm c74bc15e4c32718ac1d491b0b4eee85ff2ff41c9a5b20c8c5db778c4b57b7b7d pcp-pmda-gfs2-6.3.7-8.el9_8.4.x86_64.rpm c87b45a2fd95a09309afe42d0b8b6e532dcd16f7f766ad19b63a4ce47189f4db pcp-pmda-mic-6.3.7-8.el9_8.4.x86_64.rpm cc0ba7de0ffc410f3c19c6fc7dc84d8e331c448e2f062a6139a9b519d0f526be pcp-pmda-zimbra-6.3.7-8.el9_8.4.x86_64.rpm cc699d8db0bda35512fa7abf54b1d430d372be775e7989f8d14ac26a4c80d5b6 pcp-pmda-lmsensors-6.3.7-8.el9_8.4.x86_64.rpm cd264580a8da77feead5465f879722490310b52767107af708558d07c5a82534 pcp-pmda-bonding-6.3.7-8.el9_8.4.x86_64.rpm cde1073e50ce57811e31eaabcf3f2f71a0e972c718c241f8f9a389aa5005d95a pcp-pmda-netfilter-6.3.7-8.el9_8.4.x86_64.rpm cedf91d6a0a9eadde5b1195ae08d7c218d177cf198d717d8ae0fa250679a4e0a pcp-conf-6.3.7-8.el9_8.4.x86_64.rpm d38cd8790afcbd6b734a7d5201ad308458dd640ae05ca99200f65aff15eef580 pcp-pmda-uwsgi-6.3.7-8.el9_8.4.x86_64.rpm d393c1226efccff471474eff1946d3e03f84d8fad2b80accb55d3292c51a505f pcp-pmda-json-6.3.7-8.el9_8.4.x86_64.rpm d663ac2183bd6cd1b6805b687862d516aef11509534bfdfe0ad6156d07e4fcbf pcp-pmda-news-6.3.7-8.el9_8.4.x86_64.rpm dbd00c97607dd6e50a2f69879660620544338889232478187d8ae861da8eb1e2 pcp-pmda-activemq-6.3.7-8.el9_8.4.x86_64.rpm ddd43989996210d77c0f3c394331d8e875dd7b0eadb5075ec3a91145c9d405c7 pcp-pmda-cifs-6.3.7-8.el9_8.4.x86_64.rpm e142977e21bdce209f9238e8661e5933d0f445e9920634fbf57fbef42050ed38 pcp-pmda-statsd-6.3.7-8.el9_8.4.x86_64.rpm e3ef23bdf31ec34a02b23b8cab6428f7c451db4d1c12192a9b93e552f8f1a4a7 pcp-pmda-mysql-6.3.7-8.el9_8.4.x86_64.rpm e6b48851215cb540d07ffeab6c92a4dcc58d0ffa73ca8a38176112c2112ca536 pcp-pmda-postfix-6.3.7-8.el9_8.4.x86_64.rpm e83314fd7dd0fdc1422ab1006bfcf55474252b46ea60db9ee205c88438e7ab9b pcp-libs-devel-6.3.7-8.el9_8.4.x86_64.rpm ea62948d876acf1e309ad7c020945c84e3e0fed1eca7a8fc86459c4f0fb8397a pcp-pmda-weblog-6.3.7-8.el9_8.4.x86_64.rpm ee1d794484882bffb4ae679a75a82863315703963aa0a115bb7ef05a82f8f070 pcp-pmda-shping-6.3.7-8.el9_8.4.x86_64.rpm eed60236b3c6e5bd15a0e9ce0cf30bd4ca0366b8318f1416db58629040376b1e pcp-pmda-mssql-6.3.7-8.el9_8.4.x86_64.rpm fa0294d5bd313e699f101b8582b106c288795abd6bddd49f8ed429126b8a6840 pcp-pmda-hacluster-6.3.7-8.el9_8.4.x86_64.rpm fc49686e9ac08933651554699c06471654f2ccf29f6f0c2f36f6b330f779df10 pcp-pmda-perfevent-6.3.7-8.el9_8.4.x86_64.rpm fd24f1f884b4b9e423c72b3383277ff67659004e92ece51ab4136f2cf04feaaf pcp-import-sar2pcp-6.3.7-8.el9_8.4.x86_64.rpm fea5d5c0cda15ce1761c09f730d7cc74e5cac33c5b29f295029d0ff1ad2b001f ALSA-2026:55772 Copyright 2026 AlmaLinux OS 0 1 Important

haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions (CVE-2026-55204) * haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling (CVE-2026-55203) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default haproxy-2.8.14-3.el9_8.2.x86_64.rpm e1ddbb16b15f435cc2751ea38fb8ae2c7e111e61329096818b4d2aa2babf6df4 ALSA-2026:55775 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default java-1.8.0-openjdk-demo-1.8.0.504.b01-1.2.el9.alma.1.x86_64.rpm 69f0170ba0c16b913f84fdaae4b6fb73b5904427fec20140917f38f416279a83 java-1.8.0-openjdk-javadoc-zip-1.8.0.504.b01-1.2.el9.alma.1.noarch.rpm 70213d0fbad4bca3f75cf0839a47219d446efe84e9537f89ac78ed5f6dc8fe8c java-1.8.0-openjdk-src-1.8.0.504.b01-1.2.el9.alma.1.x86_64.rpm 845cdd79e4568d223372fff47b027febd7aeb16f479f51827fb7da35c6630e89 java-1.8.0-openjdk-1.8.0.504.b01-1.2.el9.alma.1.x86_64.rpm 857587e69c8487974674f8863b64dcd4f4a3aadbeb82df9a822d48f5a790df14 java-1.8.0-openjdk-headless-1.8.0.504.b01-1.2.el9.alma.1.x86_64.rpm c87981f2a4729efebf9f4990ca7cce24c2b27d5342660ba9301d4ce2d968d29e java-1.8.0-openjdk-devel-1.8.0.504.b01-1.2.el9.alma.1.x86_64.rpm d9e51f28cd9c08f10de511e35313c23406736695e523a9e3063c39e3a25b2d5a java-1.8.0-openjdk-javadoc-1.8.0.504.b01-1.2.el9.alma.1.noarch.rpm fc80ad9aad73fd14ae873c4fc285642bd70fae86b34e36f1724c1154f7f1b63a ALSA-2026:55781 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default java-17-openjdk-jmods-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm 1b8aaa3f775da1b6d2c6c941da7045ca11399b6edbd462ba7bce135473ef10a9 java-17-openjdk-static-libs-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm 35bef46856a178aa3c3b11638ac12d54df81daa8ffc760e813f461dd855f41f2 java-17-openjdk-javadoc-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm 49e5861d36908c9cde46c77e3397bd84541f6e0db0d08c9de42a111e39b3e16f java-17-openjdk-src-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm 6ccb22ffe70707ce80e82e7d31fceab52844fa55d32a3bd96886fa7d81abff70 java-17-openjdk-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm 7320c3de416fd9d054bb56738946997216444a3f450f3872765183e20e344782 java-17-openjdk-javadoc-zip-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm 7b2a275d59586f0790b4746b9308289bfd97f8f6ae6d038eaf0a1552dc56381f java-17-openjdk-demo-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm a8b80b63c40e77e963629fb9cb1a9baed5a790a22c1e7162ff378da465ff6a3a java-17-openjdk-devel-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm eaabd351b4dbeedee9fb25af6d73592998041c9050c9c347e7f133e379286f05 java-17-openjdk-headless-17.0.20.1.1-1.2.el9.alma.1.x86_64.rpm f2d970fa38bc34016d3895bbd6e19ec1c0aa10a7ecb71e176b266dc9e82f002a ALSA-2026:55787 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default java-21-openjdk-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm 164f10b9bd9f35c37f96328ee7371c397d43fdd93d9eb389a9e383969e3c231b java-21-openjdk-jmods-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm 1db7480955f638f4636e56bfaa300e11503062134df49e7aae06d1799b4b0b1e java-21-openjdk-javadoc-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm 3130259a417710d00f7bf5a6166431d80023f64ad3813c708a41f457647c94ea java-21-openjdk-javadoc-zip-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm 73837e443c4a97e0336d413c29fbf853b1ae75a982818c7bbca2f81028503a0e java-21-openjdk-demo-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm 7aa7f37ed2c7274e75ac35bf5028e3673eba06cf495c14538e1825af33480f3d java-21-openjdk-devel-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm 7e12861692b63912bec1d846cd10d90e06cc7d4f0efb61d24398faff2ae4bd1b java-21-openjdk-headless-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm 829916b4d2b87421b88bd4e8efb0442bc845f51168e6a808c3360264132b702d java-21-openjdk-src-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm ef6ab0ac0cbd3a5d811cb1c7248f5242b2c4d60bc132ce792cd161fa5743ecec java-21-openjdk-static-libs-21.0.12.1.1-1.2.el9.alma.1.x86_64.rpm f6f4a8b62408713850d7e7f8bea01c42a44e50fd4c9924e474e7947981538050 ALSA-2026:55798 Copyright 2026 AlmaLinux OS 0 1 Moderate

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Improve font loading (CVE-2026-70906) * JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default java-25-openjdk-javadoc-zip-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm 05fe98068af146a58318540e361dffa276846bbb7b5c52c4b51f9405f4795922 java-25-openjdk-src-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm 3c9420ff7d6ffaa9b8be4d36da666c313e70510fcd0b7dc1f2d1b1923c48d243 java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm 4d2bbfbfe4987b74f2717f144bd4899fd5e27957d4f61595c8ecfcf158c5efcc java-25-openjdk-demo-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm 75e9ea1a32f61344d0172ce7767bad5b65b4f9da17a2c66c608d892a66a5d06e java-25-openjdk-devel-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm 87b946b798fe49b1a935a020c55c6c06174e7a818894881c2ace022873ef420f java-25-openjdk-static-libs-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm 91c885a16db7a26a5b07122194e5226878651b739e4896033f23dc31172bb4cb java-25-openjdk-headless-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm 981b9067b9bccd3618991073dcebcd55893d0a7c280fb5c4b806ba1485e374ca java-25-openjdk-jmods-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm c3f31fe9ca796b5a18ddb4921e98eb9e21985edb08f3141b2132b67c3369f3a3 java-25-openjdk-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm e2b9f66c451ae0b6e038c4b726fb84bb5fc6dd67ee1e1640e8abd3b7c17b00b6 java-25-openjdk-javadoc-25.0.4.1.1-1.1.el9.alma.1.x86_64.rpm f8d20fdb842878d771f409b3cb5c2954199210271e2bb1b1915f30ea583cc52e ALSA-2026:55841 Copyright 2026 AlmaLinux OS 0 1 Important

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes (CVE-2026-44690) * unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option (CVE-2026-55973) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default unbound-dracut-1.24.2-3.el9_8.4.x86_64.rpm 027a2a102afb505c17d0330fb8c0b996d3db4ec886fc2b5c00d4fcc0449eef79 unbound-libs-1.24.2-3.el9_8.4.x86_64.rpm 0692d53b749f7afeada5ed7cdca96f8f1ba0fcff7c4d33b9654ebf355d6227c7 unbound-1.24.2-3.el9_8.4.x86_64.rpm 0f403a835448a2731a474d356eb4ef7f70d6275bc486065b31b6d14642545596 python3-unbound-1.24.2-3.el9_8.4.x86_64.rpm 777efc352f65c06655a89b20ce56fba7c2c9f0dfb7d701734eecc06e8bfbda92 unbound-libs-1.24.2-3.el9_8.4.i686.rpm a1e74c6055966d76f9c2f3e6ad4cc3d006a55a9ecf46c961069414ecabb3ad8e ALSA-2026:55856 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.120 Runtime version: 9.0.19 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.120 and Runtime 9.0.19 [almalinux-9.8.z] (JIRA:AlmaLinux-235476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-templates-9.0-9.0.120-1.el9_8.x86_64.rpm 0ec3f368e6a23f8586812d7605df4e58406420415ad1abaad507bb5d7bb882c0 dotnet-targeting-pack-9.0-9.0.19-1.el9_8.x86_64.rpm 1b461e5826dc2a90c93b7998a2bcfc59f6308d4f33e498dd3aa1afa50a76b6ab dotnet-hostfxr-9.0-9.0.19-1.el9_8.x86_64.rpm 33865e1bfb411762a1e38aafbd4ed59a50f580fb11a8eb53b948dda5e20d678a dotnet-sdk-aot-9.0-9.0.120-1.el9_8.x86_64.rpm 3dd1556b49b8f0728994abcfcf166c45f1a12eb6d2b75effcc47682e521d27cc aspnetcore-targeting-pack-9.0-9.0.19-1.el9_8.x86_64.rpm 44d6dde8a58ce2e14ddeec49d78b5a8774d97ed3191081b5f8e280a6347a1a76 dotnet-runtime-9.0-9.0.19-1.el9_8.x86_64.rpm 56cb04222c80749a889fee2a40bc9b44071a1299c8891830be224ab49aed8d83 aspnetcore-runtime-9.0-9.0.19-1.el9_8.x86_64.rpm 5da6c478dfea812059d76ece209b1f36570b882baacd9b7827761d1be781eb1e dotnet-sdk-dbg-9.0-9.0.120-1.el9_8.x86_64.rpm 60742fd6c9576d7db6886d1f474556afea322c39c3a407940bc3826159ec1e7e dotnet-apphost-pack-9.0-9.0.19-1.el9_8.x86_64.rpm 803135419fccfbc36bf9d7cdaebf55b5de6d3829d12492380c47f830aae511b7 netstandard-targeting-pack-2.1-9.0.120-1.el9_8.x86_64.rpm 9fccd747aa3d4f2a6a13a8effe1c8a6143b7e1205e0fb418456e8ae02e2b2350 dotnet-sdk-9.0-9.0.120-1.el9_8.x86_64.rpm aca6d83f195f51dda3c057f2d8e9c16a003f50c9cec2750c1b2c8f6498d22b68 aspnetcore-runtime-dbg-9.0-9.0.19-1.el9_8.x86_64.rpm df9f5280fc168e8981db03d38b8887f88e117453c99008a29807adf57bf81113 dotnet-runtime-dbg-9.0-9.0.19-1.el9_8.x86_64.rpm f3599e460d0db9ba436fe92d6555063ce6fa196bb0e56aaf7839146881d92760 ALSA-2026:55857 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.111 Runtime version: 10.0.11 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.111 and Runtime 10.0.11 [almalinux-9.8.z] (JIRA:AlmaLinux-235481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-host-10.0.11-1.el9_8.x86_64.rpm 14d7fa153c21d8328e6cbd04e599285b65984caf33ff3046f120a7d6cfa5cf69 aspnetcore-runtime-dbg-10.0-10.0.11-1.el9_8.x86_64.rpm 1b4efed7fd5a31d33c5356c0e4f027f37164347ef70865fb9227002d4bf888d0 dotnet-runtime-dbg-10.0-10.0.11-1.el9_8.x86_64.rpm 229896147f1f06cdbd076a41bc51ffa944ba9172edd73bc4cc7d626f35cbecb3 dotnet-runtime-10.0-10.0.11-1.el9_8.x86_64.rpm 2781efb4936e7a4747be380d730a743ccb06340b7930070fe4bf1c2cad7eaa78 aspnetcore-runtime-10.0-10.0.11-1.el9_8.x86_64.rpm 59db31a7a8e90001e7b447e4ded636a1f80a2363a3630b29c26ed7eac2f4b318 dotnet-hostfxr-10.0-10.0.11-1.el9_8.x86_64.rpm 68fc81e587ebcb56f46745b339a0146f3850de2a2e4be6b4cb1234f36f266d4f dotnet-sdk-10.0-10.0.111-1.el9_8.x86_64.rpm 7a5f5d68171eb578eb526f5c1d9d4e98d1abcd19942efb8f0eb9a3fabcb34911 aspnetcore-targeting-pack-10.0-10.0.11-1.el9_8.x86_64.rpm 828afc9671ea5283300f23cde0d77d73e4c1d7edcf26fc7d0b83352ae1aa7954 dotnet-sdk-dbg-10.0-10.0.111-1.el9_8.x86_64.rpm 8f8417e49ce231d3a7d014204e3b372f2287f258c2db294d0061ef0f1aaed2a0 dotnet-sdk-aot-10.0-10.0.111-1.el9_8.x86_64.rpm 9ce5d4a60c8502ac6decf2913fb3ba35eca6b20b4eede1ab9ada374677952239 dotnet-apphost-pack-10.0-10.0.11-1.el9_8.x86_64.rpm b8a538ba5efaddd5d74c31097fe06d58934c79a46bf6830a53d915fe9afd5cf8 dotnet-templates-10.0-10.0.111-1.el9_8.x86_64.rpm d1a82c4602fad667ecf6669861d05a40948d8bdc0a1908e58d7b202864197700 dotnet-targeting-pack-10.0-10.0.11-1.el9_8.x86_64.rpm f8b0458798f42841c812991db59d5049a405778d78340d69ce4d08b5ac894fb2 ALSA-2026:55865 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387) * gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.i686.rpm 1a30c7e8c3e7d855d63cf4460203f6ab45b449958d5df7903022bcff947b3ccb gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.x86_64.rpm 29e44fb3676ef36bc31e62670399e555d18ac9aa1c7dd7f8111bf0c6f4055463 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.i686.rpm 49ea5ccdddfc5cd3fd49c1ea8ffdf63b74ba53048f685938aecc807780ae4a91 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.x86_64.rpm 8b9123ebacbcafef4b94392861fa08fc8ffb02b2fd7968a948471260426b94ae gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.i686.rpm a66cdc8b6a2bab0313fb855f339b920de333aa30d960e285ad8fe7ac41127887 gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.x86_64.rpm dd25e1aeeeeb2ced132b0284387c66925b0a7305150a9247760a25e24e592223 ALSA-2026:5599 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nginx-mod-http-image-filter-1.20.1-24.el9_7.1.alma.1.x86_64.rpm 42dc2011a45c97a2eac250915cb2cd7531ac2269dc437454c0a543936e338599 nginx-1.20.1-24.el9_7.1.alma.1.x86_64.rpm 44db9487f79db95981803c83007df8302f656e93a6930f67d47784f9d6ca676a nginx-mod-stream-1.20.1-24.el9_7.1.alma.1.x86_64.rpm 5fc8c88bc595b80e143a2825ff87cf6aacaeda40db3ff0bc1a1b42f3db7d61a3 nginx-mod-http-xslt-filter-1.20.1-24.el9_7.1.alma.1.x86_64.rpm 6969ac3577d438c63b96ba6607c81e56e2ab9173f306c00f4b10e4108c571ab8 nginx-filesystem-1.20.1-24.el9_7.1.alma.1.noarch.rpm 7dae549904b5701335273d41029de59f878d9869e1234fc20ae0f1d03596f001 nginx-mod-http-perl-1.20.1-24.el9_7.1.alma.1.x86_64.rpm 8d776dec6d79ac75c6cb234d451d29d6542ba1e647a0e5d3daaf41296599b76f nginx-all-modules-1.20.1-24.el9_7.1.alma.1.noarch.rpm 9bc3e6946e0b2d1e943885546354ef6e8adeb1474848f060f0156dbebe276b0c nginx-core-1.20.1-24.el9_7.1.alma.1.x86_64.rpm ac0e905b85315d1a196afb695ffbd1a266f31b87af47db3e1f83b222e2900d0a nginx-mod-mail-1.20.1-24.el9_7.1.alma.1.x86_64.rpm c2c943f38fb62905ecc7d48f62f2018170eaf1b8e6a251b7e47df5cac989dc58 ALSA-2026:5602 Copyright 2026 AlmaLinux OS 0 1 Moderate

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default vim-enhanced-8.2.2637-23.el9_7.1.x86_64.rpm 6fd408c71586dc371fe1f2f3e16140aa4a037df638766b09c2247395a71f17ab vim-common-8.2.2637-23.el9_7.1.x86_64.rpm 988816711c9e5de8ae008adf388b57ea07453bf3ad512c9e66647a5bc8e25a9a vim-X11-8.2.2637-23.el9_7.1.x86_64.rpm bcf4c67e8bae647cd289a8b126b843d09d1b67420b4e425180a4d7c3d24fac8b ALSA-2026:5640 Copyright 2026 AlmaLinux OS 0 1 Moderate

mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948) * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936) * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968) * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.x86_64.rpm 15d11f3dd227603b75ea55ec5e5d58e48a85816370b46beaf974cdd4ecdb74b8 mysql-test-8.4.8-1.module_el9.7.0+219+aca48cd3.x86_64.rpm 232fc67ab5aef5d1b9be92a456e698c14e8a77fd0f642539b44f337f936ea6da mysql-libs-8.4.8-1.module_el9.7.0+219+aca48cd3.x86_64.rpm 23e360a863f2556df3d3d942f856790d81bafc7ac4d4a563c4ebc6bbefc5d635 mysql-errmsg-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm 43b2e927250e941eda0c95183368842b966dcae63133c155c3ef362324e82b50 mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 5ac91bd521f27ff2898650b81f3c9955990a7c1611d7c24df1109ee306cfe85d mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm 67f9944422a6aee33d336ad9718cc8bcdb1ee47386bf22c3b2b482ce8e60f8b7 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 6af7ca5e430c3de27c47755ee182d363a208ee94a4550a502365026a3adef496 mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.x86_64.rpm 73f9efe41fa1b6ddf3d96e66d047a52e899ed92f30a9092fa823f9e4ba2e6d65 mysql-test-data-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm 7f198cea09183f443e64a26121b6203a8fe55c9e6e8e82fdd9ab3a567d843589 mysql-common-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm 81a027ddbcfb8c0e798110bc79852f97c31d9934b416fae86a3b14b0a6046cc2 mysql-devel-8.4.8-1.module_el9.7.0+219+aca48cd3.x86_64.rpm be4424c279e02fe00e7341e2f6b5a9557b99588c4655dd4d88631b9c3c7dc3b0 mysql-server-8.4.8-1.module_el9.7.0+219+aca48cd3.x86_64.rpm c202b5b78318b54cf72f22845356e2da7b268a8efe8f94c7e2014f1c6e34bdef mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm cde7f7ad433817f56a1963dc6f951f5ce54fbffa0b81b588ad4b43c5d751b0e9 rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 ALSA-2026:56970 Copyright 2026 AlmaLinux OS 0 1 Important

perl-Date-Manip security update

Date::Manip is a series of modules designed to make any common date/time operation easy to do. Operations such as comparing two times, determining a data a given amount of time from another, or parsing international times are all easily done. It deals with time as it is used in the Gregorian calendar (the one currently in use) with full support for time changes due to daylight saving time. Security Fix(es): * perl-Date-Manip: Date::Manip for Perl: Denial of Service via CPU exhaustion in date parsing (CVE-2026-60075) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-Date-Manip-6.85-3.el9_8.1.noarch.rpm 359a33e31ca3b8143e9143264dd3d3b9ce02f0bda32b3d865699bd050119a734 ALSA-2026:56973 Copyright 2026 AlmaLinux OS 0 1 Important

mysql:8.4 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177) * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145) * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936) * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186) * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315) * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096) * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163) * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185) * mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178) * mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183) * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187) * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585) * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182) Bug Fix(es) and Enhancement(s): * [tracker] Rebase MySQL to 8.4.11 (JIRA:AlmaLinux-188045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mysql-8.4.11-1.module_el9.8.0+295+1681b9df.x86_64.rpm 0ed9e7dcddb7378351917498293f4b66da72bf521bbfe368dcea5f578e27c4b1 rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.x86_64.rpm 15d11f3dd227603b75ea55ec5e5d58e48a85816370b46beaf974cdd4ecdb74b8 mysql-devel-8.4.11-1.module_el9.8.0+295+1681b9df.x86_64.rpm 1f676679c0e362a1b92f44b4aa9075ee7795db2a3228c061ea4dda6a5d24464c mysql-test-data-8.4.11-1.module_el9.8.0+295+1681b9df.noarch.rpm 38c63cee1e72da103bff5100ff9a99f01151d0cd470d07af75fdf02bef332b1e mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 5ac91bd521f27ff2898650b81f3c9955990a7c1611d7c24df1109ee306cfe85d mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm 67f9944422a6aee33d336ad9718cc8bcdb1ee47386bf22c3b2b482ce8e60f8b7 mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.x86_64.rpm 6af7ca5e430c3de27c47755ee182d363a208ee94a4550a502365026a3adef496 mysql-errmsg-8.4.11-1.module_el9.8.0+295+1681b9df.noarch.rpm 7a864d6adc01cac0aa1bb90e99b7addaa5201ac09694dd539c74d02c53ac1034 mysql-common-8.4.11-1.module_el9.8.0+295+1681b9df.noarch.rpm 99781d1f09005cde55db8c299e4b5616461a434c7c02d5f5fe3c0a5099c1d050 mysql-test-8.4.11-1.module_el9.8.0+295+1681b9df.x86_64.rpm bbb0c77fea7bd47ae819deb21d6095a815a77de84c5a606ad043b3bfa37bd09c perl-DBD-MySQL-4.053-3.module_el9.8.0+235+a38ba90c.x86_64.rpm bc1c6ad4835ebba1c57bcb499940bbaa6e0cb1a1f6e70efc2eaf7bad6ae06ef3 mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.x86_64.rpm cde7f7ad433817f56a1963dc6f951f5ce54fbffa0b81b588ad4b43c5d751b0e9 mysql-server-8.4.11-1.module_el9.8.0+295+1681b9df.x86_64.rpm f8c51a7a0119d871294d8c9df47b736cec7f7ec0da96f85a08eb11f6ea103039 rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5 mysql-libs-8.4.11-1.module_el9.8.0+295+1681b9df.x86_64.rpm fa045a155220be09252a69c66732a674f6beb530850e0bc8e2a9ae87e8f2123d ALSA-2026:57149 Copyright 2026 AlmaLinux OS 0 1 Important

ansible-core security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): * ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default ansible-test-2.14.18-3.el9_8.1.x86_64.rpm 6ff30ae7a16762d3d1fc418a75dedacd4e9e5f3edfc6e91b9995e45f037827e2 ansible-core-2.14.18-3.el9_8.1.x86_64.rpm a786bebb8e312ac20213ba762ab5ddc9ad663729e1cbd5b2b4ee51330f27c37f ALSA-2026:57252 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233) * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-perf-5.14.0-687.41.1.el9_8.x86_64.rpm 2f97838df9ec7e4d2715ffce3240d1590e252b4ac40e68a232ba4e67274647cf rtla-5.14.0-687.41.1.el9_8.x86_64.rpm 519a526f0c8309d799fd6cb7beeab11753da7488c4f54a7a353cbf6819702b6b kernel-debug-devel-matched-5.14.0-687.41.1.el9_8.x86_64.rpm 7886357a364e7b20115cf7c9f366f2c863326e027f6529adc27cd11c81d2d1ec kernel-debug-devel-5.14.0-687.41.1.el9_8.x86_64.rpm a5e11002977b3f00c0eb12b5c2bc8776a11e766bdfe5b69e0e72ca8cd2d12701 kernel-devel-5.14.0-687.41.1.el9_8.x86_64.rpm aa26f6bb8b452176259439c9bf561d30a9ce2252aed1737a842ebe7126ebc3c0 kernel-devel-matched-5.14.0-687.41.1.el9_8.x86_64.rpm cc4d8cdac9169ba1213f01cdab4982545970c304439a28af43545820b3ba7db2 perf-5.14.0-687.41.1.el9_8.x86_64.rpm d1db53152549e516eae0366cc440ccf422c45ff10ddddc5bf64aeeb48b72bcc3 kernel-headers-5.14.0-687.41.1.el9_8.x86_64.rpm da1f76bf2d26e4a6934969b934ca0ce296bb2d2332a91eb7dca145425ed2aff9 rv-5.14.0-687.41.1.el9_8.x86_64.rpm f746719faba156b7740a98ec2a19b5d6d0e98e927ab224651650e0ac4462c4ad kernel-doc-5.14.0-687.41.1.el9_8.noarch.rpm fa08c4e291121a9371826286972c2cce15dd036a3e6ed5303b91aa12bdd265c3 ALSA-2026:57539 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) * php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223944) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-common-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm 122eb770e1dd3f0db79d128788e159e636c99d9304e68abb88c1fc3affcf6ad9 php-ldap-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 14ce5bae3278b11ad3229e1833315b51114e126dcf5859e3f4104292c5f0168a php-embedded-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 16b7f846e1286367430fc37d87909fcdc97e32b836f60edc0fa8e6372f1a9174 php-bcmath-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 170bf1179a5b743596d86b02087eb40bd96ae066d1b26b38e748af936b8ac694 php-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm 19faeda45c06804514764567f6dc0e9242861bdacfe91591726c797b3d79feb1 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.x86_64.rpm 1e95a29597aa5c8b102c97a7d8fe608712e1a7ac5f33086477259cdfd802117b php-pdo-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 380b46820c2e4fbb9408d9ac79627622446c31a69b51c818faab14bfd4e37e24 apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-fpm-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm 4a086fbb6c85b7a3ce217363b5ea5d601d306d8565a97e75cc272600fb5052e0 php-soap-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm 4b779a84259a7727141789effd3cd9d3e253106bf43263179392842f874c2fa5 php-pecl-xdebug3-3.3.1-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 4c4a29cc6b850d8d4bb68f330b91295d8c57b028fc2d86d5f5839fd84320a619 php-dbg-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm 50f053f816e898633d3b2c16c9b08af691588e8369efbc16640a9a233537695c php-gd-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 549b54ddba807ec1dc4b6c4c687b731f192c0ca267745c3cec559c8341b2f69b php-pgsql-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 587f2b1956ce48d57194ad30489f1d150b61bbd91ee084a3e84b6b89e0f876d3 php-process-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 592c3d05972e352337c9e0513268365196884325e21a0f4d1f1ff15ae5f28955 php-opcache-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm 5a829f6e1061b99a39708a6d562392af1ce57c53d523e65a115ba0188f22f1a9 php-ffi-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 5fcb58685acb037cf15c727dd1e234aee1b37be3117555c9eb4174231f7af1d7 php-cli-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 6a609cd5779f1d1594dfece39536109733c96010e3b5cc7cf98cbea4b84f1685 php-dba-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 7b5b39a9e21f0a11055f1130f284483524c9394a60ba956b64f1deef49d68738 php-pecl-apcu-devel-5.1.23-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 8512b5dc68f79bf2f150a23fb1e6e9287d8c9b8a4b33641e542df7c172c4b128 php-pecl-rrd-2.0.3-4.module_el9.8.0+287+a9a5bb73.x86_64.rpm 868eeceba907f3af5f8af4492d6a59a3e674e6e68952e94ef8d88ff32e02edc1 php-mbstring-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 8ba8b2d35fb34eb42f148973511ce93c182bf4fd8626545d853df42118062908 php-intl-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 91ac88c60f5589634805413c82b9f2d2663808e06fc4da706c58d3d3072aa4f6 php-mysqlnd-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 956488be608a58ef621d1b3333536645a7d2ec513b85e5cb80e9210d9382ee69 php-odbc-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm 9a5343dc521794618aa8114707215088eeb3b13b4f8311092c96c3d3151683a6 php-gmp-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm af98a72e9f3c926c8735e2e40a604824c593cce65f6bf44ceeb35b306346992e php-xml-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm b47e2ad9be6c19b587ae6c54c3c11abc857ba0c4a8890c8301fda178dfa20b65 php-devel-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm bafa962e38186fbc02622ce468499ae128245157545ce8a1cfe49a38e7c4aba6 php-pecl-apcu-5.1.23-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm c7b0c8e3f15734067690c85fa999f4527496af3a279df9283b6f8abb3a6f7252 php-enchant-8.3.33-1.module_el9.8.0+296+9aab6c42.x86_64.rpm cccff12b68d35f6f5ebc6f2b31ff990fe1e87d118a38a46178650e385b5cfed6 php-pecl-redis6-6.1.0-3.module_el9.8.0+257+89d727f2.x86_64.rpm cfbd00b1767223062f3a8b4d7a1e2991f248c1bca9195593ba4b2fa89514e1ed php-snmp-8.3.33-1.module_el9.8.0+297+88e7f1bf.x86_64.rpm e30fb70201dfd9e632a0bdee2224253b2c5428333de48969682afedf5637c3ad ALSA-2026:57600 Copyright 2026 AlmaLinux OS 0 1 Important

mrtg security update

The Multi Router Traffic Grapher (MRTG) monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fix(es): * mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation (CVE-2026-72694) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mrtg-2.17.7-12.el9_8.1.x86_64.rpm 102343af3dc3b5e87227d60dd63dc56b69cc3f0f2f74f8352dbac656129c2fc0 ALSA-2026:58560 Copyright 2026 AlmaLinux OS 0 1 Moderate

cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. Security Fix(es): * libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG (CVE-2026-64612) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default cups-filters-1.28.7-27.el9_8.x86_64.rpm 5e2f7399392abf30394f9281bacbd1d3687a28959fd5969cb5aa57ae0a8170ee cups-filters-libs-1.28.7-27.el9_8.x86_64.rpm 63a5a77d7cf70dce71e334cd1d493d8aee53abf4d037d447dfa09393ed842571 cups-filters-libs-1.28.7-27.el9_8.i686.rpm feaf9bab10de95882b70b6f92af03fc46fb5c728d45e3c2505616f88fe58e760 ALSA-2026:58572 Copyright 2026 AlmaLinux OS 0 1 Moderate

NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Security Fix(es): * NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend (CVE-2026-10805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default NetworkManager-ppp-1.54.3-5.el9_8.x86_64.rpm 0f9134eb47ff5954d4b202258ce83de48ac586dfd6263400671dc189fff03fe7 NetworkManager-ovs-1.54.3-5.el9_8.x86_64.rpm 910ea27ced11be0c09c1253b3734283911d7777cbc89f26750640b8a029db1ae NetworkManager-config-connectivity-redhat-1.54.3-5.el9_8.noarch.rpm a0baeed81520696adc7e95383d698538e44f0a90b2d17928a2223ba00fb74352 NetworkManager-dispatcher-routing-rules-1.54.3-5.el9_8.noarch.rpm b37ba551c6f4b3afee1a51cececb09bf99f0e6e2e265567a0df920155d04fb1a NetworkManager-cloud-setup-1.54.3-5.el9_8.x86_64.rpm b8f08c73f4896f1e4eb18cb0dc1fe5f3286d2c7e2ab461f3dc566a99e478b103 ALSA-2026:58897 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983) * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934) * firefox: thunderbird: Privilege escalation in the Networking: Cookies component (CVE-2026-74953) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987) * firefox: thunderbird: Information disclosure in the Graphics component (CVE-2026-74948) * firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943) * firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971) * firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component (CVE-2026-74941) * firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946) * firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973) * firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-74936) * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940) * firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960) * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-74969) * firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976) * firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974) * firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957) * firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component (CVE-2026-74967) * firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942) * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939) * firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972) * firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945) * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-74944) * firefox: Integer overflow in the Graphics component (CVE-2026-74964) * firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962) * firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firefox-x11-140.14.0-1.el9_8.alma.1.x86_64.rpm 1303d117573cbdf9c87f4876b2c5b597e99d29d14d0dd263cb17a478341508b5 firefox-140.14.0-1.el9_8.alma.1.x86_64.rpm 92f9c23f28f208d0c33d48cf43b51932f1209305d32ceadaf2f035fb85927b14 ALSA-2026:58901 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-devel-3.14.7-2.el9_8.x86_64.rpm 2bae98e850bcf80d97f03f668bb377992dffbd91fb4d5c734d76c939bf9673ad python3.14-tkinter-3.14.7-2.el9_8.x86_64.rpm 3a048aacf7992394657db2d52d09bc3efbdf88342778890b60608bb07e6e93b8 python3.14-devel-3.14.7-2.el9_8.i686.rpm 4c85032d28cb4a5a219ac1e13fc0a86ac54f0f9f4f138b649cd396f1c0323b03 python3.14-3.14.7-2.el9_8.x86_64.rpm 521427cd1cf08941e6970ef8b511844af360cdd2283d82717887ff12931d0d96 python3.14-libs-3.14.7-2.el9_8.i686.rpm 8e8f2a6b7e57649dc93e959a6996e6ec4da514f481586e67d417cea8333e51cf python3.14-libs-3.14.7-2.el9_8.x86_64.rpm f56668549797ef01574d8eef7dcbadb0803c7507b5df9e53af61994ad15217eb ALSA-2026:58936 Copyright 2026 AlmaLinux OS 0 1 Important

sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default sqlite-devel-3.34.1-11.el9_8.i686.rpm 21992a912a6b216b1acec003de5259ecb5b356942ba21ad3315ce518ba5f1d27 sqlite-3.34.1-11.el9_8.x86_64.rpm 57ed1d417b016e7fc1c66355c0086575258fb6ad94100c93e23104555f470a4b sqlite-devel-3.34.1-11.el9_8.x86_64.rpm 6048dcb9e797920237981d7273aa5d82da02f18944f8f99d9e1b1af78c1c5392 sqlite-3.34.1-11.el9_8.i686.rpm aeabe13994354bebe0d2e9355c2ba057582f3d0e0639966111ee6ed62cc881df ALSA-2026:58982 Copyright 2026 AlmaLinux OS 0 1 Moderate

grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Privilege escalation via dashboard overwrite (CVE-2026-33377) * grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default (CVE-2026-33376) Bug Fix(es) and Enhancement(s): * Avoid unbounded memory growth [almalinux-9.8.z] (JIRA:AlmaLinux-242865) * Limit the size of the request body before processing it (JIRA:AlmaLinux-242866) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-10.2.6-23.el9_8.2.x86_64.rpm a0ccf1ca2aee555e910eba32e4d5ebbf33bbb694f5291cb9453dfcd61986d947 grafana-selinux-10.2.6-23.el9_8.2.x86_64.rpm e2baf80ca498198bcbc00b1c476b1080b42043c44850ffdd76280146661d97ed ALSA-2026:59009 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.12-devel-3.12.14-1.el9_8.x86_64.rpm 09bd3b7e19aeec0931809782316e6082b5eaed082fc45cdc7fe7d42d585f3549 python3.12-devel-3.12.14-1.el9_8.i686.rpm 0b853165a1c08d27bbf58376c53f7bbc599276bc4aa1438a839962db8457ec46 python3.12-3.12.14-1.el9_8.x86_64.rpm 0d019668db228b63b4a8b53492616ef04358d01a86c33c634f565e56a24c736e python3.12-libs-3.12.14-1.el9_8.i686.rpm 2d61c8e5d716a519b80a331051c33c479545072ef4f5c5f30c68cdead0f45131 python3.12-libs-3.12.14-1.el9_8.x86_64.rpm a6f9b6180fcc7d62228d241fddf629e44945e94e9a3ceff2c41e325897f911e6 python3.12-tkinter-3.12.14-1.el9_8.x86_64.rpm c644cc10f16fd0db4ac933b3e1241714cde0782c3d7d295f8a26ca7ccbb73685 ALSA-2026:59152 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296) * gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298) * gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299) * GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.i686.rpm 08a883b64611c9f070c02d6424f18b33a80b018eb5ad6e7202a757b6e09e18fd gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.x86_64.rpm 8267ad2654e2a88c08650cc4c4cc28b0c090474f7a96e2700bf4a49740754afc gstreamer1-plugins-good-1.22.12-7.el9_8.8.x86_64.rpm 979fa9a4f04c642d7f3ed796cec07c762d09659f6e015b95e10e5d54b5a9a99d gstreamer1-plugins-good-1.22.12-7.el9_8.8.i686.rpm be6dd0aa3e752776f62f0c55cbdc0c493624d9ddea4240df4773d9ee48d573d1 ALSA-2026:59242 Copyright 2026 AlmaLinux OS 0 1 Important

python-pyasn1 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-pyasn1-modules-0.4.8-7.el9_8.1.noarch.rpm 7a7a0f6915b23f755d0805ab5d44d058890215d719b0e4d10ae39073b22d5dd3 python3-pyasn1-0.4.8-7.el9_8.1.noarch.rpm 8dcf51f1e3e30a88c5cada4667ae5447149fa014722f019f5e5efffc0f4ee13d ALSA-2026:5930 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721) * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698) * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716) * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705) * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710) * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708) * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691) * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699) * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694) * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720) * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707) * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVE-2026-4687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default firefox-x11-140.9.0-1.el9_7.alma.1.x86_64.rpm 458407cce9408f4b36234de0574e93a7950c29c1aefb65705219e0198d68b662 firefox-140.9.0-1.el9_7.alma.1.x86_64.rpm 458c5e71e7bfa0f01bc4cfac45257b0ec58ac1ae9c1e3675f76c97647b0e08c1 ALSA-2026:59347 Copyright 2026 AlmaLinux OS 0 1 Low

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default httpd-core-2.4.62-13.el9_8.6.x86_64.rpm 08d5a7a7e3fd0daf28b9b60d3097d7a86ed316ea31eaa2bd91877f64c3243b21 httpd-filesystem-2.4.62-13.el9_8.6.noarch.rpm 11d1969830d2eaf25303f4b88b60582158166266af1d71d33c23ce5bee42bc15 httpd-manual-2.4.62-13.el9_8.6.noarch.rpm 2ec8ba93ec079462e7a98dec94f245389851b8d8d38ce753c2c555d6fd0d1e2c mod_session-2.4.62-13.el9_8.6.x86_64.rpm 4ce4be139320e5612ee5aeedb2e4e35945f7423ea38b19b906cb03fae5584c15 httpd-tools-2.4.62-13.el9_8.6.x86_64.rpm 554bfec8f301f81a30631fe3a3ca47905070f8e586703b0374eb1c5154b88cde mod_ldap-2.4.62-13.el9_8.6.x86_64.rpm 7d4fa350baea499216f0982b26bcc7a8db794c71a6e93e5da83fc7d9df6a61f2 mod_ssl-2.4.62-13.el9_8.6.x86_64.rpm 8365499383163a67ebdcf918886fa6963c035d3ba3e73606b629a48505776791 mod_lua-2.4.62-13.el9_8.6.x86_64.rpm ad1646c99e4a95e28f8509536949193ec91085da6e0cd4aa3a11a7a355029fc7 httpd-2.4.62-13.el9_8.6.x86_64.rpm b4774ed6acede4b80bdad66ff3ae113096de80eeb3d80553179081dd1ee9b457 mod_proxy_html-2.4.62-13.el9_8.6.x86_64.rpm e3a06dd37c1f5bbc135f2120bb12f07217648da1d88ae0d6a1a61850743de443 httpd-devel-2.4.62-13.el9_8.6.x86_64.rpm fa47f2f194b03950e474306acad9d90afd88ed85ffff1981be352bd16deefa82 ALSA-2026:59362 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-filesystem-1.20.1-28.el9_8.5.alma.1.noarch.rpm 04836f924d852c9230a481032cc7d59ce5e0b6ac958a577f8b01db877f035330 nginx-mod-http-image-filter-1.20.1-28.el9_8.5.alma.1.x86_64.rpm 31adac9534d4c97c4b697ac07e4f3338499f15c5097479d83249c0083e7dbc81 nginx-mod-stream-1.20.1-28.el9_8.5.alma.1.x86_64.rpm 43abb095d751093e2dda6166f3fc0fde3dac496d4217a4e027f4483981b548d5 nginx-all-modules-1.20.1-28.el9_8.5.alma.1.noarch.rpm 546e0c4eabdfe1df61bc24bdb226ee059323da8db517161e7f4a0e8d9fd68933 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.5.alma.1.x86_64.rpm b282854e32ca85cb0b930a0780994ae8c69c1a69d74fb82b96d231e393850fb9 nginx-core-1.20.1-28.el9_8.5.alma.1.x86_64.rpm c397d194169124ef5f1389964e0a1977867225f52f277e60cf856fd9b72643ae nginx-mod-mail-1.20.1-28.el9_8.5.alma.1.x86_64.rpm d9a6c83b14c159051b8995d649c0be23a5a3449f36014cc9913cac13f5c0eb7c nginx-1.20.1-28.el9_8.5.alma.1.x86_64.rpm dc98d7c025846bc0942b99405573c00e81e427d515bcf4c9d7b76dbee71cf625 nginx-mod-http-perl-1.20.1-28.el9_8.5.alma.1.x86_64.rpm f6eec441134374b4a9acb624f328941efb9271b89681fb000ada0381e72ccd0f ALSA-2026:59387 Copyright 2026 AlmaLinux OS 0 1 Moderate

mod_http2 security, bug fix, and enhancement update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service. (CVE-2026-48913) * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951) Bug Fix(es) and Enhancement(s): * address CVE-2026-43951 and CVE-2026-48913 in mod_http2 [almalinux-9] (JIRA:AlmaLinux-190583) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mod_http2-2.0.26-6.el9_8.2.x86_64.rpm 4d5af2a51dbd92efc05cde9a366cf985fe36d70465537ce6eb7709c082eae541 ALSA-2026:5942 Copyright 2026 AlmaLinux OS 0 1 Important

golang security update

The golang packages provide the Go programming language compiler. Security Fix(es): * cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default golang-src-1.25.8-1.el9_7.noarch.rpm 45a4c4bc4bafc9f3cc030f532a49bb2916cf525a2f90fccb9034a0bf674e380f golang-misc-1.25.8-1.el9_7.noarch.rpm 5a5c777474a1afe08ff05fdba78bd9e029acb30f5f712ae99a1b70f0bc26f617 golang-bin-1.25.8-1.el9_7.x86_64.rpm 6e9b9fccfacc5e34b2e28a84059d916f21b298cf2fac547311dba520aebcaef2 golang-tests-1.25.8-1.el9_7.noarch.rpm 8396ecbeb0978e795a5ebd4033fcb83709360f0802ba4b3b9ebe8bb782727fdb golang-race-1.25.8-1.el9_7.x86_64.rpm 85e4474e48b24883fa3c95e9c13b5c1c79fa28e82858dd2944c95af56489cee2 golang-1.25.8-1.el9_7.x86_64.rpm ab1df21d9d402ecd331ec78056d05d3169194682ac034c041b062ab123f3ff1f golang-docs-1.25.8-1.el9_7.noarch.rpm bcb2fec225ae078b804b886ab40ac56bd8ff2885fa27ceda5e0887a8624c81ca go-toolset-1.25.8-1.el9_7.x86_64.rpm d2ac1acbff8ad1aca634176d37ed89d846935ab58b16c368dd87018080fb4bd0 ALSA-2026:59490 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-mod-devel-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.x86_64.rpm 6937a2fc9e005f5348f5d74fc10f73ecab8ca0edb2765f3c80b8816ae3d90d18 nginx-mod-mail-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.x86_64.rpm 78c3d7633ad5700fa1705c40f5bacb650287cf2f240c11f7d41edde5c437ac69 nginx-mod-http-image-filter-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.x86_64.rpm 7e3b16762591907b13af42cc573e596a833c6a73f49983aa3062b1c2ab3a428f nginx-mod-http-xslt-filter-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.x86_64.rpm 855f64b9ec8e46ea4445625d2a61130a86f3aaa31e91e41434953fabe3d582ed nginx-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.x86_64.rpm 8ca2c3a4ab1460fec35ccc98240dec799d0b82bf1bbf803cdb47bc7b3768808f nginx-core-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.x86_64.rpm 965ce1e4f7a208061aa6723becf903ef36d649c1849deb7243ddf259d9c8e7de nginx-filesystem-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.noarch.rpm a2d9495a2c4bbe3f98eda0d9d347366a0de4dc232f5f711e1b90aef137545042 nginx-mod-http-perl-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.x86_64.rpm a7418de61d0723a1118743fd05e770259d61a5a1d14f8c560b84773220d47e91 nginx-mod-stream-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.x86_64.rpm b054c338d1580217caf1fa689a09e27e583dbafda2d7f74d0cc9f4bfc6b817c4 nginx-all-modules-1.24.0-7.module_el9.8.0+298+469955e3.4.alma.1.noarch.rpm b9e4f0ea7748c335ee5b3d5aa3700c91386cb94d0229583370e5a806d21984d1 ALSA-2026:59496 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-1.26.3-9.module_el9.8.0+300+0781a894.3.x86_64.rpm 4a31735cc60cca273915a979b67d94e388a3ca0ddeac377e9b31ca4293ff4ab8 nginx-mod-devel-1.26.3-9.module_el9.8.0+300+0781a894.3.x86_64.rpm 610a3218314b6d88c9eb12806dad13b80d83c77244604b11dcd9479c8f979a18 nginx-all-modules-1.26.3-9.module_el9.8.0+300+0781a894.3.noarch.rpm 61459217a8cef686f96e73cbc4848db3c0558ed07576219c4f4bf4c499b65624 nginx-filesystem-1.26.3-9.module_el9.8.0+300+0781a894.3.noarch.rpm 6df3a09d14e1aa4f86305f9f4386e058a6def79b3c97e635890054f2a4032638 nginx-mod-http-image-filter-1.26.3-9.module_el9.8.0+300+0781a894.3.x86_64.rpm 755da0f2067c6efb986dd5d40b8f371906c8b3b76d58849d6fe19f460589a24e nginx-mod-stream-1.26.3-9.module_el9.8.0+300+0781a894.3.x86_64.rpm 93e6f743e1ea14b88da9ef59715b7b82e8b4712b8b8f8745ce5f98a4c9bf395a nginx-mod-http-perl-1.26.3-9.module_el9.8.0+300+0781a894.3.x86_64.rpm 9c89e38ffe69c76fce86290c1f7acff74815cc8646d540bdaa00bae2f677cf21 nginx-core-1.26.3-9.module_el9.8.0+300+0781a894.3.x86_64.rpm 9ec8e0eb44015038b914b4173b6106233b6b6da91e2a6b7d17d4dcd1e41aa260 nginx-mod-http-xslt-filter-1.26.3-9.module_el9.8.0+300+0781a894.3.x86_64.rpm b217bf8ad2a55780a08e35777a8131703f786f6e87fe574eb2c06b1054d62244 nginx-mod-mail-1.26.3-9.module_el9.8.0+300+0781a894.3.x86_64.rpm f9ce1bcccf7fcbfe5ecf8dee97c47e13af5a6fad63332607d9662272aaa34bc9 ALSA-2026:59723 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-166118) * ss core dumped when there is an SCTP session [almalinux-9.8.z] (JIRA:AlmaLinux-212398) * [IBM 9.9 FEAT] zcrypt driver overwrite function - kernel part [almalinux-9.8.z] (JIRA:AlmaLinux-245333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-matched-5.14.0-687.42.1.el9_8.x86_64.rpm 2edb1637d48a7d15253c4343a2805229bee5ee5ae4d9ab03da4678a45ab342fd kernel-doc-5.14.0-687.42.1.el9_8.noarch.rpm 495e55d1e5d1300ec04749a165ba6ace04e569160eac9c0b50b08e841220949b python3-perf-5.14.0-687.42.1.el9_8.x86_64.rpm 767da107944b366b07f9a04f337a61a2f730ad540bc0035277e362fdf6e598f6 perf-5.14.0-687.42.1.el9_8.x86_64.rpm 811887df94a8b5e857eba3554aa44640ba150e85c8b284c0212af278bf6f466f kernel-headers-5.14.0-687.42.1.el9_8.x86_64.rpm 9d06e2795a1fccb70edbbb09c2e250c1bd993e45ae51b4dcb49e48950e499a44 kernel-debug-devel-5.14.0-687.42.1.el9_8.x86_64.rpm 9f0f6b902a1ea8e492ede28dca27458afb273ae5f8f1cdb5c97cebdb9d3be71a rtla-5.14.0-687.42.1.el9_8.x86_64.rpm c53bb04d0d393c6c061d748853f8e4ca03bca3d0ec488330081d772ad7187d36 rv-5.14.0-687.42.1.el9_8.x86_64.rpm decfdca899faee7cd24393c369d705e9d26d17358d8d51dc9b61e3ecb2e4f7ef kernel-devel-5.14.0-687.42.1.el9_8.x86_64.rpm e95f9161eb237ba11ec5245c36c379b65fbf9cfabc5a6f5722157de7f4495667 kernel-devel-matched-5.14.0-687.42.1.el9_8.x86_64.rpm f9a60d7316b04f1d27f0cdbd7f30d2d62c127d83564abdc0fc44ca04b9aa3f6d ALSA-2026:6004 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965) * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default freerdp-2.11.7-1.el9_7.3.x86_64.rpm 05567d855658c68d7c3b396a31be031b58dae2d1b2e724fdf53662fa7e6a1f3d freerdp-libs-2.11.7-1.el9_7.3.i686.rpm 4e33ebd03b62cb3fdc00a9f1655605b934ca86ffaf7151bf12a3e43b4f5826cf libwinpr-2.11.7-1.el9_7.3.x86_64.rpm 933723d73854c882d49caf8124c2b7468270fdec4b9c3e6f1917da4620ed86f8 libwinpr-2.11.7-1.el9_7.3.i686.rpm ae53258d4788adab7c8ad8b8091d47eea27e4fdafb53874e3366b995fff56f1a freerdp-libs-2.11.7-1.el9_7.3.x86_64.rpm c30c383e845da732aa9b780466908219a3fc5f53f6bf3c47b580d29159536f87 ALSA-2026:60215 Copyright 2026 AlmaLinux OS 0 1 Moderate

assertj-core security update

A rich and intuitive set of strongly-typed assertions to use for unit testing (either with JUnit or TestNG). Security Fix(es): * assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE) (CVE-2026-24400) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default assertj-core-3.19.0-9.el9_8.1.noarch.rpm f9e024bcec7e266199a95d255ad248bbe8bea590cb36edeca0d8e00008631900 ALSA-2026:60226 Copyright 2026 AlmaLinux OS 0 1 Moderate

attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fix(es): * attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libattr-devel-2.6.0-1.el9_8.x86_64.rpm 22d31cf21d5a0c587e76adf05c0d89cee80b519c470b4ee041bc942d8a696ce5 libattr-devel-2.6.0-1.el9_8.i686.rpm 747a12e9021d7620b8103d2a39a7b2e4275d0d79359536c6bc1d9fb640a736f0 ALSA-2026:60304 Copyright 2026 AlmaLinux OS 0 1 Important

golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) Bug Fix(es) and Enhancement(s): * Go 1.26 -- maxThreads limit hit in CGO threads blocked on RAND_bytes in FIPS mode (JIRA:AlmaLinux-215845) * Update Go to version 1.26.7+1 [almalinux-9.8.z] (JIRA:AlmaLinux-246425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default golang-tests-1.26.7-1.el9_8.noarch.rpm 14565ae19f03ef4227d82ce3e4030df52c335f26e02d86d40ec0fd398b774d22 golang-misc-1.26.7-1.el9_8.noarch.rpm 178902393cee6104035c55b9908d625f2a8470f53a6e7ccc120fa9d86cad8b36 golang-bin-1.26.7-1.el9_8.x86_64.rpm 2f9251481565a04fd9971362563062656ebbc7e3617611d864fd9e22ed2dc819 golang-src-1.26.7-1.el9_8.noarch.rpm 5ecf0e5a09fbe760b856ca58376955d75fa597b3f82e28aa2df227a620012cee golang-docs-1.26.7-1.el9_8.noarch.rpm 700d9e89173b96cfbdaea70b82bb4cec4428ef2addc69f9e4d8dc3e2ba2a367a go-toolset-1.26.7-1.el9_8.x86_64.rpm 871e494399d1c9ba1b03f797461a0de85f9455b4d35f5ebfe3df8e218b43f5dd golang-race-1.26.7-1.el9_8.x86_64.rpm 8acf0770938bc52e198cf1149bb3d4f93e56f6f48bbf887800efb4d7e44e139f golang-1.26.7-1.el9_8.x86_64.rpm 919fbc82132dc4b9a0321cbce11b64b084691f8b7f7fff3e458a52f19d2d0668 ALSA-2026:61240 Copyright 2026 AlmaLinux OS 0 1 Moderate

pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fix(es): * pipewire: RAOP RTSP NULL Deref (CVE-2026-14324) * pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pipewire-utils-1.4.11-1.el9_8.2.x86_64.rpm 0ababca05a9db95cb9deeb2dfb67c0ddf769148e73087a7880bfb1f0c3cb2014 pipewire-alsa-1.4.11-1.el9_8.2.i686.rpm 0b3dcc9275f0fc2a04c1685bbda0f91d3e39d69280bbdb48a3dd378de53a43ea pipewire-alsa-1.4.11-1.el9_8.2.x86_64.rpm 18a5a29c436979364ad94256dc36ec9cf91b633eced6ee887f1c35b91013d3d0 pipewire-module-x11-1.4.11-1.el9_8.2.x86_64.rpm 349d49bbf974f42524d7b51e01b30bac13ef7e5aef363485ea4419d812bc134c pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.2.i686.rpm 3a3c97bd486eed58aef2861e9e6e3ba2d3ca1acd5de34b9dd3eed0236ebb5f6c pipewire-libs-1.4.11-1.el9_8.2.x86_64.rpm 500d69e0fcdaf5296597031dba25185cbb46612ab6c48ae79697c35d6bf2f97a pipewire-1.4.11-1.el9_8.2.x86_64.rpm 540c566524fd083200e7e72186d1c80f0abafda274d9658713a064f281fc09e2 pipewire-1.4.11-1.el9_8.2.i686.rpm 54442fa3284c1aedf35b8c7f3caa623e55ceb772aebe218c5e00e4312b956436 pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.2.i686.rpm 5d0214426c1d01983fa4e8f65b60e83db33fd6e20c27075bdd27af29fd579e2f pipewire-devel-1.4.11-1.el9_8.2.i686.rpm 653ccd494bab50536d8a9dbf7e761a8233d3a6faa1f6d5f756384ff6b2f2501d pipewire-devel-1.4.11-1.el9_8.2.x86_64.rpm 6e5f1d652f3e3b185c3f0a8329330ef5c5af19e919199b3ffe40efac3ce7234c pipewire-gstreamer-1.4.11-1.el9_8.2.i686.rpm 7da4c0f57311381e45111e94288c0a76aff59dded56adb1f39d14976d49d8ac1 pipewire-pulseaudio-1.4.11-1.el9_8.2.x86_64.rpm 932f82aef0b7114ddc94caf52678aac38d32bf167500b6d9fa05bbcb3f7f40b7 pipewire-gstreamer-1.4.11-1.el9_8.2.x86_64.rpm 9f3322859b51b3178880d2ce65114baed11bfebf83eaaf4cb33fd4ce78dca640 pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.2.i686.rpm a69886f6131bc4d7e2f5dd07d6911f15d25a53eb445f9dffdfa951745b5277fd pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.2.x86_64.rpm a74ba1a27379bf35dd35d4ee11a05313b4f29773c74718d6ed28b0a01c91eeef pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.2.x86_64.rpm aa8325dcbe6203545338881bec682fff00637743bb3c2d93c7d5fd9fa7221cf3 pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.2.x86_64.rpm b1f82f72f7ea4de2f201ce31db678c6e64de6bd8a1c8a8200bef201174486aa8 pipewire-libs-1.4.11-1.el9_8.2.i686.rpm f1aaeb180b92dc897c4b7fa33fa047022eb8310a7397a362671abcb3538d7324 ALSA-2026:61247 Copyright 2026 AlmaLinux OS 0 1 Moderate

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653) * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libxml2-devel-2.9.13-14.el9_8.4.i686.rpm ee8de935444f809273f1c94d5cdea53f210ad32b2b72e393e620daaf7556b983 libxml2-devel-2.9.13-14.el9_8.4.x86_64.rpm f062256ba13c0873c0d099e6d98d91ee667c9ec3b2897d8664568b44e799b852 ALSA-2026:61259 Copyright 2026 AlmaLinux OS 0 1 Low

php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD (CVE-2026-14355) * php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) * php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): * Backport fix for CVE-2026-14355 to PHP 8.0 in 9.8.z (JIRA:AlmaLinux-192624) * Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 8.0 in 9.8.z (JIRA:AlmaLinux-223940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-ffi-8.0.30-8.el9_8.x86_64.rpm 172b05e099aae7b1524ca752be05002a13d7ac39a7e655f00b74b11590792f6d php-gmp-8.0.30-8.el9_8.x86_64.rpm 2391a6a34b41155ff0ff15abc1a7913b8d2efc6c45aa08340f907a9de09add7c php-opcache-8.0.30-8.el9_8.x86_64.rpm 2628f2bff1a7c9574f28ecad42aeb3ef54a1680fdd9cca0e2a0825bff892ad09 php-snmp-8.0.30-8.el9_8.x86_64.rpm 31047c2aba2cea047499179467cec193656fcc6f46bd123c9f737819425ab0f7 php-8.0.30-8.el9_8.x86_64.rpm 35852d90c99fa191d9d2b6ee475b33edc929e1b87de57c9411b456a2103a8669 php-embedded-8.0.30-8.el9_8.x86_64.rpm 3a1089f6251e7b2c167838ece1f8c756f9256126be99d62681de807f33a0ace7 php-bcmath-8.0.30-8.el9_8.x86_64.rpm 585222534ecaf25365c4c9e733bd340d578aa2486b24baf874fbb73b3b6354e4 php-odbc-8.0.30-8.el9_8.x86_64.rpm 617105b59d75a838557c31b0310ddcaca7d378631b79360a959498b6a1cd51b5 php-mysqlnd-8.0.30-8.el9_8.x86_64.rpm 6fe5d2006650f467725c46f139310708c5170c990f0d280ec0bbd4a166aad816 php-soap-8.0.30-8.el9_8.x86_64.rpm 73fcb0ad57030be8482c633787fe34ffce93349fd748c093e5adf40cced6b8c2 php-dbg-8.0.30-8.el9_8.x86_64.rpm 7553000f62375451de59bbcd958a3ddc28f064cbec30be7f4cfc80a239d269e0 php-common-8.0.30-8.el9_8.x86_64.rpm 8822db8dcad02e4fdcd9d90d23452e8a9deaae5c9e62d88922a12e25767ee4b1 php-devel-8.0.30-8.el9_8.x86_64.rpm 9a353bbd5d7b545ec42a77efdcad39a1eaac305e3e00627143c01fb8643a56b6 php-pgsql-8.0.30-8.el9_8.x86_64.rpm a0a182b420b8bdce5f02417324b23f2007738ebcfb29bf61aa45a66b0005137c php-process-8.0.30-8.el9_8.x86_64.rpm a58224766604404393cf43e75aecfc62ee0246960da8dd907bff7fd9d081a0b9 php-enchant-8.0.30-8.el9_8.x86_64.rpm a97bd033ef2267cf43f755ac4b846689f85aa4abad4bb4fa6460410b87440cfb php-ldap-8.0.30-8.el9_8.x86_64.rpm aae3a61583487368aaf1618198d0233aebb00fe7cd071be50eadfc977e50d3ca php-fpm-8.0.30-8.el9_8.x86_64.rpm d673761576e8a1c37fc1d3a3eb7a091512333764f8412dd11cace68c16087c5f php-dba-8.0.30-8.el9_8.x86_64.rpm d8d85eedab4db3ffd9027b5a1c850e383bd0068d6c88fa3e63d145992f09189a php-gd-8.0.30-8.el9_8.x86_64.rpm e65120b60d7b9502285150db420aa8b1aaa2c074e263c685bb8622efa62bb8a7 php-pdo-8.0.30-8.el9_8.x86_64.rpm eb2d8300bbf314582b9998db4c29d95b621ad7911949c5e8a1e0acee2928998b php-mbstring-8.0.30-8.el9_8.x86_64.rpm eeaacfafe315501f5a0c68b052e043d2c3017b4a631add23e9b519fe07ffce2e php-intl-8.0.30-8.el9_8.x86_64.rpm f776eac81f9dc03cce4ba3d0f1d5d6030e8b46fd0d2146341014897c93ee33c9 php-cli-8.0.30-8.el9_8.x86_64.rpm f8baf3d19fd35507a3bcd09824cda8419e2b271aa2247d1231317d137eea196e php-xml-8.0.30-8.el9_8.x86_64.rpm fbf30d78d8cede4ccd3a8f4b6f310e0d7b5d6234a4ee8b06a5ef7271a3211e0a ALSA-2026:61316 Copyright 2026 AlmaLinux OS 0 1 Important

xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML. Security Fix(es): * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xmlrpc-c-client-1.51.0-17.el9_8.i686.rpm a883e2f467c0e35c1d778d052e5a3812b890c94ba6740f77554e59de4508247d xmlrpc-c-1.51.0-17.el9_8.x86_64.rpm dbf9897a247e4e7816f5e4ed14af0faf01caf86cbd675a19468c8097fa6ca1bd xmlrpc-c-1.51.0-17.el9_8.i686.rpm dcd63db3bdf379e3ea7462c28c1f1a887eaa8f56d543d7c492212ae57e22a980 xmlrpc-c-client-1.51.0-17.el9_8.x86_64.rpm f574358451f5d4a45f46428f0e649e41d4bfb3b6f99f6f8c0f24ba414d186954 ALSA-2026:61379 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301) * FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288) * FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291) * FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libwinpr-2.11.7-7.el9_8.6.x86_64.rpm 169db0638d557591b61833c607e685df5b67eda6e6e245fe3cdefff0eb3772a9 freerdp-libs-2.11.7-7.el9_8.6.x86_64.rpm 466db0543f0f7598a3293af48b75182fe7af2dc8f6e227e9a8cffb1701ae2c5f freerdp-libs-2.11.7-7.el9_8.6.i686.rpm 8f6ef403c5c79281f476b7ec105fc7dfd2525e17c27ffc726802cad5b81b081b libwinpr-2.11.7-7.el9_8.6.i686.rpm cc7b824edc386917d2430a9f3a7e5d559971f4d3ce591121ccdc88e92e98d6ad freerdp-2.11.7-7.el9_8.6.x86_64.rpm cfc126f862697eaa02af055bca11a4aa426f670f3cbe29ea80da0607c6567b64 ALSA-2026:61383 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nodejs-devel-22.23.2-1.module_el9.8.0+302+959ebcd4.x86_64.rpm 33c5555e13b76ce1aff62f1e4baed7ec9e3703fe4d5aa925a006e164a66dd4f9 nodejs-nodemon-3.1.14-2.module_el9.8.0+291+0bb98cce.noarch.rpm 36bfb4903244fdf5e11e5ef3cf579bd330a0b7dc8b53b9d7e7a3d490ff6c1e4c npm-10.9.8-1.22.23.2.1.module_el9.8.0+302+959ebcd4.x86_64.rpm 5ebccce833a59e82df34194a29fd744401613bef8cad339c724d1e5437b6d79f nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 nodejs-full-i18n-22.23.2-1.module_el9.8.0+302+959ebcd4.x86_64.rpm 6a9282497350e46e2c258ffc9fe40628b4d6d22339a62cd5e0514517869e8722 nodejs-22.23.2-1.module_el9.8.0+302+959ebcd4.x86_64.rpm a9ccf373da04b5903222a0f8083dc0505c2e42071909f9a254041c503fcb0cf2 nodejs-docs-22.23.2-1.module_el9.8.0+302+959ebcd4.noarch.rpm d5f00dee1013bd6ca5404a82ca89d383299eeeb366e77cdf7a21bdf73a8a7351 v8-12.4-devel-12.4.254.21-1.22.23.2.1.module_el9.8.0+302+959ebcd4.x86_64.rpm f715186e306b5c8abea108cfbcf84c6296cf44a8aa3b2a7937fdac3324a6780a nodejs-libs-22.23.2-1.module_el9.8.0+302+959ebcd4.x86_64.rpm f9e86707de8fb75fee60f40ab4aa2caf0aaec7849da687ad49caae2897f36654 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:61386 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw (CVE-2026-58043) * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846) * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default v8-13.6-devel-13.6.233.17-1.24.19.0.1.module_el9.8.0+301+084fac05.x86_64.rpm 3168bc49859833c4962d765eb5903657043c6c3d989a2c0451de0434e1a70035 nodejs-nodemon-3.1.14-3.module_el9.8.0+292+f4eaf8b2.noarch.rpm 34593bae84e3eda22d3c85db93eb84f883d07844a6d2c91217637b2c000e7e3b nodejs-devel-24.19.0-1.module_el9.8.0+301+084fac05.x86_64.rpm 3d78c33784b651fa7766be86bf762bd74543a36f22fea5a8064d9178a50ccbfb nodejs-full-i18n-24.19.0-1.module_el9.8.0+301+084fac05.x86_64.rpm 4c57bb265ab09c45eca60f9c8513a3c082b64ace2cf6f60fab45bd5fab148839 nodejs-libs-24.19.0-1.module_el9.8.0+301+084fac05.x86_64.rpm 5eae72f3f701b84092706cb0be7197d7a61e56546cf2a67bc17e699727feb460 nodejs-docs-24.19.0-1.module_el9.8.0+301+084fac05.noarch.rpm 6b79a2f327c28ae2162ae997dfdb6299749be495174f71a83bfc01986ade4afc nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a npm-11.17.0-1.24.19.0.1.module_el9.8.0+301+084fac05.noarch.rpm c6914f0c7aa777d9357f2895ae67a8bae88b7446eb82b6c70af657b804da2e1a nodejs-24.19.0-1.module_el9.8.0+301+084fac05.x86_64.rpm dbbadf3b2dfc05c322ecda9e2582de3f950ad19ec12bcc0e4f1192068aa9340f nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 ALSA-2026:61389 Copyright 2026 AlmaLinux OS 0 1 Important

iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (CVE-2026-71217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default iperf3-3.9-17.el9_8.1.x86_64.rpm 1d0e1ea10a800eab748d3a948b09cb8ce7e2201a4b87240b9edcbeac93b7924f iperf3-3.9-17.el9_8.1.i686.rpm c08d9e817740e2a30973c88f863e2a324bd67c24ca57f74169d41c8c8280df16 ALSA-2026:6153 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180) * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096) * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144) * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171) * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193) * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-devel-matched-5.14.0-611.45.1.el9_7.x86_64.rpm 18b0566bdbd25c3611465f004baad0eada0d4b5fd4af5f03cc6508610003d97b kernel-debug-devel-5.14.0-611.45.1.el9_7.x86_64.rpm 1ec6b3b2a77d012027d30d7cc86c3a69b7f5f2b68aaa5e813382ab1cd78e3181 python3-perf-5.14.0-611.45.1.el9_7.x86_64.rpm 4861355ee85c9c15ccf34981b6960b6078b79c89316adccce7188b0bf46d1bef kernel-debug-devel-matched-5.14.0-611.45.1.el9_7.x86_64.rpm 4c316c23bad44d5c3b9b281c79d98bb425a49c03c834df98719dcf5207d4d4c2 kernel-doc-5.14.0-611.45.1.el9_7.noarch.rpm 51ee35bdc30cf1b987ce698d9f5b2bd289787990115917651e634cec54466fa4 perf-5.14.0-611.45.1.el9_7.x86_64.rpm a0705904d27c70b6cd8ccc8f0ef4796bfd02c82652252d41dc1294504f2ff455 rv-5.14.0-611.45.1.el9_7.x86_64.rpm c08c4567b28bae37cbcf64badc9ae453ed3475feac054c04fca3d1dc7454b966 rtla-5.14.0-611.45.1.el9_7.x86_64.rpm cdcb3144762c49a3b20765362284a5dfef94aed8fd8fe454880a223930eca4a7 kernel-devel-5.14.0-611.45.1.el9_7.x86_64.rpm ed69202c890bb70ff6584fb9cf5e276808329deb2decb76c365caffa0fb868ef kernel-headers-5.14.0-611.45.1.el9_7.x86_64.rpm fbed3fd052c18ae7db576bfce16c7a56c22bd6a143e0ad1ee9502979847c3748 ALSA-2026:61587 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090) * gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304) * gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301) * gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow (CVE-2026-18308) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302) * gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305) * gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303) * gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gimp-libs-3.0.4-4.el9_8.10.i686.rpm 5df60b439f06465ba5dae264b1c12c93f24d46cc19d215f5deb2b22b4f90bcb7 gimp-3.0.4-4.el9_8.10.x86_64.rpm 8b88fc813c785ee7df3944e077e60d40b3e0edc657819fcbbef82a86cde70d28 gimp-libs-3.0.4-4.el9_8.10.x86_64.rpm b49af2b5571f2a28901a615a1ac0ee26b5f74d8b7cb7cf79e91e0d119066e1a6 ALSA-2026:6188 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721) * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698) * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716) * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705) * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710) * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690) * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686) * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708) * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691) * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699) * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694) * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720) * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707) * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVE-2026-4687) * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371) * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default thunderbird-140.9.0-1.el9_7.alma.1.x86_64.rpm 013977d494982c091cd315cb994ad2ff65fe9a257b847ab25fa14eb68b2180fd ALSA-2026:61903 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) * php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223942) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-ldap-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 0b9d31ab465a67fbfbbdcc11ab74371ac7c581cd487b3eee83b53b7676b074cc php-soap-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 0ed4ba2965ad889cdbc5eb13572afbb725d40f45d8feecd646bf16098fe9f744 php-snmp-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 1e9ea4ba8f6aef316219c3a2b87e9a6c7eb6eeccfbf2ed3caf736c6951ff5547 php-opcache-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 20b8e0e812e9686f5c6a146a43722ade67f8abd1b9cd697b3ea6be25d427b37c php-common-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 2fca2ea3fa95db622aa3370b1ae2acec0ade18cb38510528405571366f669155 php-intl-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 419ecc41dfeb7eb2858987cbc4e1449b41f14e5752ecbc404b1b434c75f08c76 php-dba-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 48c88beb88f17ba60cca7e3746703073a8875f8295ed6daabd53f684d5bf2223 apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-bcmath-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 502f63bbf13f0489c1ee2889f4d5ae8801dc2df704651790991f1d46a5f59d50 php-gmp-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 55d826d59c3ca428baa8af7208d123a3e0d7c641addd607629db09a90d7c41a6 php-mysqlnd-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 5bf56a0e2d9f74b8c5992e357012104f117a7eed56f2d793727e0942e36f24d2 php-enchant-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 628f6ad8e54d0fe23841ede9bc3dc4e960d4f69e7b3178d2499bb987377767b8 php-dbg-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 6303b4c44a5d04ae0758c93f674f917556c0b57184385f993cd2499fcfea09ef php-odbc-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 7674c25bcf5e5448c1e33dac37d392c83819ea4f6a6340408f68e466b9b1ffe2 php-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 77b2ae45e414aa626eaa1b5f5c9138430cd464cc6637759a48d94439e6fd9a5d php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff php-cli-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 94b45b21a64ea9d598de14403ddbd2f5221517f59fd7e3dd641596340dca72d3 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm 96cc987054e929ded9dfb18f35b9c6912a9df307b6e6ffee3c409f85bafa2181 php-ffi-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 98a49481ac390aad6020874f495bcf188443e9fd4b4c271d3cfee3d1773db17d php-embedded-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm 9b7199a3a72143ea3e5d22146dac7d8c8e72e5365af6bfbe205768beaf2e63bd php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.x86_64.rpm a05a23d56973cbb28cd6df434887268ea519defa51e9176928b1f6859bdd33f8 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.x86_64.rpm a0c7dad446e919bbb42213de89f00d65f58b08c51e4e1ab382707c3324627f7a php-devel-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm a12268fd0d788e69e4ed1039030a69a1bf5fb2b29dccf56cdb8e59c2bb797678 php-pdo-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm a202e8f0edfe2121277c4da18230b455e95b63fbe6e8c542f9fae765ab1d92fe php-gd-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm adf2eb0a0f9d7a0276512354581ddb44621a5e94a1f7f837b7550453c9d3fa86 php-xml-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm b4e84c973b315c0124161f79945e3010757d5ad92ecf812622e10b831ff4f714 php-mbstring-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm c6e7f007fe96a2a6152ca6c336e3b70ee7ee22254b7292ead0bc6ba3ac215185 php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm d4536864003ca10535ac907cbcc199da8c73c8b16a66b52aaeb1431f587b1ea0 php-fpm-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm d94e399223d982c429fa85af5a9a34e5f594e113e5ed9aa801fdc1eee5af1172 php-process-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm dd60a09d72aaebfbd7639ff8045759b30761eddecf519caa07fa037380a3636b php-pgsql-8.2.33-1.module_el9.8.0+303+1bef6c12.x86_64.rpm f70a0ec1a7a5bfab105a8d1da17b434af02a85dc1b296c35b77684b1145537f3 ALSA-2026:62143 Copyright 2026 AlmaLinux OS 0 1 Moderate

wget security, bug fix, and enhancement update

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption (CVE-2026-58471) * wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute (CVE-2026-58472) Bug Fix(es) and Enhancement(s): * wget async unsafe code in signal handler context [almalinux-9.8.z] (JIRA:AlmaLinux-220497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default wget-1.21.1-11.el9_8.x86_64.rpm 832eca3a83c8903f6d656adc6509da0cfec899e27b6d35489635fea7dabb80fb ALSA-2026:62170 Copyright 2026 AlmaLinux OS 0 1 Important

gegl04 security update

GEGL (Generic Graphics Library) is a graph-based image processing framework. Security Fix(es): * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gegl04-tools-0.4.62-1.el9_8.2.x86_64.rpm 528bf5007a146fb7f00a8c6857a92c6ee3dde0af061c34bf8b884a082511b5b8 gegl04-0.4.62-1.el9_8.2.x86_64.rpm 735e9456ce8c76f2f3f0f66dc367597c6aa278e9b4c11e1fca4fc8cb74a29317 gegl04-devel-docs-0.4.62-1.el9_8.2.x86_64.rpm 75b39192743d19f8db05b5dbc169f2d72ff2343f78f7b379f1a67945cafd6e27 gegl04-0.4.62-1.el9_8.2.i686.rpm 77f48c54384137a7a1ff86aeb1a4ecfa2534b440de7ba6e2733c7aca9d65286b ALSA-2026:62217 Copyright 2026 AlmaLinux OS 0 1 Moderate

libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844) * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845) * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846) * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847) * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848) * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libssh-devel-0.10.4-19.el9_8.i686.rpm 1da4397cbe56f5301b463e0a7c0b0581e20b62aebcc4704e97fed80447ff0adb libssh-devel-0.10.4-19.el9_8.x86_64.rpm cb8ad51b9067e81c2529c2f2d1cdaa21858bb0eae35aa17158231b5a05507840 ALSA-2026:62406 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-10.2.6-23.el9_8.3.x86_64.rpm 2135c5e42cfb4a96dd020cf16055ecf015786a1e12e9744d5412c2f2830cd72f grafana-selinux-10.2.6-23.el9_8.3.x86_64.rpm 33edca33386c44bf97935360a87bd21bc7e6ff828b79e3e97f0bc7db9fe772e3 ALSA-2026:6266 Copyright 2026 AlmaLinux OS 0 1 Moderate

libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Processing web content may disclose sensitive information (CVE-2023-40403) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default libxslt-devel-1.1.34-14.el9_7.1.x86_64.rpm b7acf825f4a47a7385123c9568cc8d65438e05364748e7627b1e8be94cbcf1b6 libxslt-devel-1.1.34-14.el9_7.1.i686.rpm c60523bfef7030ec52e3519ba225ca726be4858f3002a53f8035febf53bc38d2 libxslt-1.1.34-14.el9_7.1.x86_64.rpm e1ed057cc419054f5cc67a62cb2dc6338058fd48348b538e1ccc772a0d9631c7 libxslt-1.1.34-14.el9_7.1.i686.rpm f42c90b03c628dfedafa7a6828121c598120231d9dbc4ef171cbe342cef46775 ALSA-2026:6285 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.12-libs-3.12.12-4.el9_7.2.i686.rpm 1658a87351177f21c31a81c9d49cfa1477530b2d4c5c21a7b19c27f5e9c6e419 python3.12-devel-3.12.12-4.el9_7.2.x86_64.rpm 76a155e97b5c3c78087110d928cf9ac05c8a652bc76991cd77feec64d5a082b6 python3.12-tkinter-3.12.12-4.el9_7.2.x86_64.rpm ba3be79af4b58f6362963bdbdf7df634527ef5b343171487ce2d9d5c5006772c python3.12-devel-3.12.12-4.el9_7.2.i686.rpm d0e9b85517ac6e66404efe1c2ae8b6fa85dc1062d1998d0d5b10d34e60bb5260 python3.12-3.12.12-4.el9_7.2.x86_64.rpm e913652aa0ed578fdcdf7cd15959ebf72dc68df449cf17530a4ae992d22b1915 python3.12-libs-3.12.12-4.el9_7.2.x86_64.rpm f83d77d04961a5d135e312e66c9ba9b1c9c8f12c745f175d4a2c1b65eb41554c ALSA-2026:6286 Copyright 2026 AlmaLinux OS 0 1 Important

python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3.11-devel-3.11.13-5.2.el9_7.i686.rpm 2378de93ecb99b3f72392fbfc33b97edc62fdf6e581fbbb85262ea096e16b1a3 python3.11-tkinter-3.11.13-5.2.el9_7.x86_64.rpm 56cbe159e7e5baa469a530848a5cebee09dad67071861c9a5b81ce4969b9a731 python3.11-3.11.13-5.2.el9_7.x86_64.rpm 81a5221400fdb28d8c63df8f65a095f8b974cf1bfa3db58910162c52ff7948f3 python3.11-devel-3.11.13-5.2.el9_7.x86_64.rpm a2ed6140f1e9c6b75155e80291091b38a9ccdd65f34725ffa8e3825a1b9e80bd python3.11-libs-3.11.13-5.2.el9_7.x86_64.rpm bdc33bb88c990665c7713068218c92c561a02a8a23f100801173d559d046cfb7 python3.11-libs-3.11.13-5.2.el9_7.i686.rpm df7e34e5ee25c31ad0e3b0495112448b2bc22e1562a2ba6f37e0afaa0eecd77f ALSA-2026:6300 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default gstreamer1-plugins-base-devel-1.22.12-5.el9_7.x86_64.rpm 2bbadacac2cce6cc2b97bce097ce2e4e16e753ff94076b84f1aa26ad4d49784f gstreamer1-plugins-bad-free-libs-1.22.12-5.el9_7.x86_64.rpm 302737a62b9ae074a1ec39a29cc42bc53e99274abc76e6b9f0671c6463221a9d gstreamer1-plugins-bad-free-1.22.12-5.el9_7.x86_64.rpm 3ae1eec3405d8b569326623f609169730b91454c2e9d859fded1b66d7416becf gstreamer1-plugins-base-tools-1.22.12-5.el9_7.x86_64.rpm 4d568ac8fe735a87ba8cdaec66452ced99e9eb765d6ede6ae02dba5538ec2700 gstreamer1-plugins-good-1.22.12-5.el9_7.x86_64.rpm 59db62eaaafc77251ca26671ce006f985c4a2e7c2e7c4216ccea03335903c3ee gstreamer1-plugins-base-1.22.12-5.el9_7.x86_64.rpm 5a66f50a29d484f4064b6924735e65be60fee01e00cb37eee18ecc6c98278986 gstreamer1-plugins-good-gtk-1.22.12-5.el9_7.x86_64.rpm 65b6f4470001ed9e4000e328952dd8cece6024f4be8bd9051d18e8ae7cf86eb2 gstreamer1-plugins-good-1.22.12-5.el9_7.i686.rpm 7b643e35c52368e50b3f88c6719735d95489acebe024bcae268bf5790c71f5b6 gstreamer1-plugins-good-gtk-1.22.12-5.el9_7.i686.rpm 896759b2fb7a0f8af42ddf6436e4b5e83e5eb61c69e8d04341efe248639290dd gstreamer1-plugins-base-devel-1.22.12-5.el9_7.i686.rpm 91312da75751d2baa0c895694205e0c3288181db575a3e5626fc56d951346358 gstreamer1-plugins-bad-free-1.22.12-5.el9_7.i686.rpm a9dcafd59942379449d00cf70b0a5605ab386149be096f73ac4cd5fbaa450295 gstreamer1-plugins-ugly-free-1.22.12-4.el9_7.i686.rpm d28264fce3299d1fdcd25636a59867253d6384f22ca1bd6edab5719d5b1152ef gstreamer1-plugins-ugly-free-1.22.12-4.el9_7.x86_64.rpm daf3ba36ca4a9c35cbbdf702fa4361713b1c8b081093e39fae22a7681d1a02dc gstreamer1-plugins-base-1.22.12-5.el9_7.i686.rpm e9b715dcebd8a53cae22dfb752ab02a7f093d5b3274fe7349bfcf47b06dd6370 gstreamer1-plugins-bad-free-libs-1.22.12-5.el9_7.i686.rpm ef11be27b6e3efe26e5e46caeb32d301b3649d20db52bce9e9d3dbcc59316118 ALSA-2026:6301 Copyright 2026 AlmaLinux OS 0 1 Important

squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fix(es): * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526) * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default squid-5.5-22.el9_7.4.x86_64.rpm 7b1f5130faf1e6c7261204fc731f528f009c64995c398b64382bf5176f03c17f ALSA-2026:63129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9] TPM becomes completely unresponsive and requires a full reboot to clear [almalinux-9.8.z] (JIRA:AlmaLinux-213940) * RT scheduler livelock caused by missing backport of 94894c9c477e [almalinux-9.8.z] (JIRA:AlmaLinux-240634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-doc-5.14.0-687.44.1.el9_8.noarch.rpm 03698724499a5b6f1e72b1d1ae3f100231c1455364dee05353c9e065e2221441 python3-perf-5.14.0-687.44.1.el9_8.x86_64.rpm 0448212d165a72ded1799ea4b5c208ad29dd2b878767ff392562795438a52c9b kernel-devel-matched-5.14.0-687.44.1.el9_8.x86_64.rpm 245fb51d8617a4a8f1445255e7d58380a0b8f18cb2e7153ea7a5f6ca0785f405 kernel-debug-devel-matched-5.14.0-687.44.1.el9_8.x86_64.rpm 3e4291138beff758c0324b2851434f6d896e688d69f410dfebdb16870c8777c9 kernel-debug-devel-5.14.0-687.44.1.el9_8.x86_64.rpm 70e56d910607db616fb35185f3c04ff45d3f8350835291d095754b895ac6581d rv-5.14.0-687.44.1.el9_8.x86_64.rpm 9b7db1d8c5f50de1314f1094c086ce3fa6486b2f4b8f1542fb9790e51a1f21e7 kernel-devel-5.14.0-687.44.1.el9_8.x86_64.rpm b8645150ca39d49e99fb080d62c7dbb69fc7a20df6d19c949e4fb9d966c8e448 rtla-5.14.0-687.44.1.el9_8.x86_64.rpm c2a3213f70d94490d5f5630ea4e874530522447d9200adffb1d0dfb9e2e74b33 perf-5.14.0-687.44.1.el9_8.x86_64.rpm e00439c0dcf99671c0b0119f237c51cf04ad6b2e49ac4927b7a02d765511af12 kernel-headers-5.14.0-687.44.1.el9_8.x86_64.rpm e21cf0361d9cec7a31da05859872a2730f2922dbf82b7fdd9b56e8778fdbf72f ALSA-2026:63136 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-pcp-5.1.1-17.el9_8.1.x86_64.rpm 00ab7bf988973722bbf5cb9e498648808e450626e31be42c9ad9376a1df9a8dd ALSA-2026:6340 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852) * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732) * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676) * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491) * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948) * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684) * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681) * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683) * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679) * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675) * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages (CVE-2026-31806) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default freerdp-libs-2.11.7-1.el9_7.5.x86_64.rpm 3d56a5b49cf6774c63ccfcb8332380b7d8b482022a3c1e0284a85fc8977ac3df libwinpr-2.11.7-1.el9_7.5.i686.rpm 5917a3c28a1f49a0d28bfef594443e3b89d2ed252a5bc883396e593eda170af0 freerdp-libs-2.11.7-1.el9_7.5.i686.rpm 7057b45eb9ea357b1eec414aa8e1fa55162b4bcabaa0f905737dce021621c3f8 freerdp-2.11.7-1.el9_7.5.x86_64.rpm d8015fd576922c4e348d0e28daf03e1e1348dba97f45b71890be0594a64cb756 libwinpr-2.11.7-1.el9_7.5.x86_64.rpm ff7add20df0a3770aa0dda963665f0ed8ee6ebafc4970191ee22753189bd3799 ALSA-2026:6382 Copyright 2026 AlmaLinux OS 0 1 Important

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default grafana-selinux-10.2.6-19.el9_7.x86_64.rpm 29c20b25d27741f0bebfb7199abe423b6541a6eadb146b84191a25ec66e39cbe grafana-10.2.6-19.el9_7.x86_64.rpm bda6d0e5549ce48d3ececbe6b96f22d00d0a43460b87da00e789a451402ab3ac ALSA-2026:6383 Copyright 2026 AlmaLinux OS 0 1 Important

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default grafana-pcp-5.1.1-13.el9_7.x86_64.rpm 07613d487ad7234dd3cc90e569c5420bc456a2a87350076df382faf38c169340 ALSA-2026:6390 Copyright 2026 AlmaLinux OS 0 1 Moderate

rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: Rsync: Out of bounds array access via negative index (CVE-2025-10158) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default rsync-rrsync-3.2.5-3.el9_7.2.noarch.rpm 20e6827622e2407f70397002101336f2142c419bdfe5782a1049359d24b4f3d5 rsync-daemon-3.2.5-3.el9_7.2.noarch.rpm a5609c71037630d4e81495e31dd61408a6fbe7f4791a36590b17e112d3eab1b9 ALSA-2026:6462 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default openssh-askpass-8.7p1-48.el9_7.alma.1.x86_64.rpm 4218bd15cb0cf9e92aa02dfc70da5ffdb5a4ae25f041453eab2010bf2e9cbef1 pam_ssh_agent_auth-0.10.4-5.48.el9_7.alma.1.x86_64.rpm 9efdaee740dd92b3af1ea3bf04a8e88256c6f8ec294dfde1b3c8ce78f3794fea ALSA-2026:64774 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building (CVE-2026-69249) * python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees (CVE-2026-69248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-cryptography-45.0.4-4.el9_8.6.x86_64.rpm 2f0cc81ac11c87119dc6804b95ac364c76cf0c50a1aad289a7eb4fe443c2c4cc ALSA-2026:64784 Copyright 2026 AlmaLinux OS 0 1 Critical

389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() (CVE-2026-18355) * 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (CVE-2026-18453) * 389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property (CVE-2026-18922) * 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN (CVE-2026-76560) * 389-ds-base: 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS (CVE-2026-78701) Bug Fix(es) and Enhancement(s): * lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [almalinux-9.8.z] (JIRA:AlmaLinux-244467) * fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [almalinux-9.8.z] (JIRA:AlmaLinux-248766) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default 389-ds-base-libs-2.8.0-10.el9_8.x86_64.rpm 10b2707f7ee29dff1de00fece5eae2bbcde0d8c23b332a9f207a43b88f176568 python3-lib389-2.8.0-10.el9_8.noarch.rpm 2f022fe85918e8c3d7805a320a2c2ea198144e5d740733af6dee9815ddf5c6d0 389-ds-base-2.8.0-10.el9_8.x86_64.rpm 5eaaca7a1996252028ff94307498bfeb15e82286512965c243ea787094cea737 389-ds-base-snmp-2.8.0-10.el9_8.x86_64.rpm 77a079a6c898321b1eb46e6051da3300df76644022e81195cb3312623660d181 ALSA-2026:64800 Copyright 2026 AlmaLinux OS 0 1 Moderate

glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVE-2026-16118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default glib2-tests-2.68.4-19.el9_8.10.x86_64.rpm 285dc4c4065cd1d4110df5a631abd55e256e602d889a73734144079d8e6afc90 glib2-doc-2.68.4-19.el9_8.10.noarch.rpm 55c729bcddc62dc33bd00fd4f8ebdefeb2d7b5583398d2f625431c882cac74c8 glib2-devel-2.68.4-19.el9_8.10.i686.rpm 8295f7e0ec148fc51911e009b8c307cc72ba36164d52c66b44f85ac7169a4bbd glib2-devel-2.68.4-19.el9_8.10.x86_64.rpm a3993a5eec4ea13cb7aaa48e28b778572830eaed462ec4c0198df3882ee428f9 ALSA-2026:64807 Copyright 2026 AlmaLinux OS 0 1 Important

valkey security, bug fix, and enhancement update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373) * valkey: Valkey: Remote code execution via use-after-free in stream deserialization (CVE-2026-63639) * valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free (CVE-2026-56684) Bug Fix(es) and Enhancement(s): * [Tracker] Rebase valkey to 8.0.10 (JIRA:AlmaLinux-216778) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default valkey-devel-8.0.10-1.el9_8.x86_64.rpm 18b55aff80e10ad7bd99ad091e8088c05f72ec367d9ac6fb782d6dd17f3c711c valkey-8.0.10-1.el9_8.x86_64.rpm 899a9aaa7ababa32c1cc7b1c5d56b21bc902e73835d2bb43948221ca28242095 ALSA-2026:64808 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004) * kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933) * kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319) * kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-headers-5.14.0-687.45.1.el9_8.x86_64.rpm 102176d90001eaf31e01c2569de5f6abcf65ffd85c8f040b779383b783755798 rv-5.14.0-687.45.1.el9_8.x86_64.rpm 1e3cd80a849d8c37973fb24c9fe890afbc222e44a83335c107a6e3fd2d97bbdd kernel-devel-5.14.0-687.45.1.el9_8.x86_64.rpm 2997a86289270ff5ca4638bf582dba8f84eae16af9fb0c44276b64a0ed284bc5 python3-perf-5.14.0-687.45.1.el9_8.x86_64.rpm 51a9e33d8cc4b9a50d187aed0403390ec163f3c520810538d90c7c5672a3c8cc kernel-doc-5.14.0-687.45.1.el9_8.noarch.rpm 76953329178d6b5f01af29f7b2e9d21d9460a2c61aecbc869ca8a2decab062be rtla-5.14.0-687.45.1.el9_8.x86_64.rpm a230ed4224fbdb9cc5ea3dd277098a0c96b18c54f6848a31a2bc2a976b9cefff kernel-devel-matched-5.14.0-687.45.1.el9_8.x86_64.rpm ae2132ff47e42dccb9f6b675244e834a1479e095930c6860fbcb2cd5939d7bc5 kernel-debug-devel-matched-5.14.0-687.45.1.el9_8.x86_64.rpm b02066140f5844493af94ada84e4351969d57971594fe94bf5a6f78f8787cc77 perf-5.14.0-687.45.1.el9_8.x86_64.rpm e7787af3addca01115caa4ce5ba16435fd80f4d79898ceff8d778e83e103bc3b kernel-debug-devel-5.14.0-687.45.1.el9_8.x86_64.rpm ed83f4f6b8419e3142de65d9ea9e159f505822e3c0645c320ea7c8b074920d9b ALSA-2026:64812 Copyright 2026 AlmaLinux OS 0 1 Moderate

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) * expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default expat-devel-2.5.0-6.el9_8.3.x86_64.rpm a9c49e8d2808beb9610c9bea6f145066be57a1252d8e57c8d91bc8a721a1b226 expat-devel-2.5.0-6.el9_8.3.i686.rpm b0d03d080a7e2e967eeb4c1459163072035606da26debd575ecc2b618b293662 ALSA-2026:64815 Copyright 2026 AlmaLinux OS 0 1 Moderate

pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE age(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pam-devel-1.5.1-28.el9_8.1.x86_64.rpm 207d190a55c9fd11e44b1f4dd023a8bc917930c03736e318e3223af8525779c9 pam-docs-1.5.1-28.el9_8.1.x86_64.rpm 9db3a72515adb3b38af1b3a43a50961fe16337c6f8de3670c6a33d2758ccf0a6 pam-devel-1.5.1-28.el9_8.1.i686.rpm ad6784a045c2ce4d6850d725d5b6a3507d8ecfa61d5e57c444e3a900cbe83dc2 ALSA-2026:64824 Copyright 2026 AlmaLinux OS 0 1 Important

redis security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): * redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373) * redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934) Bug Fix(es) and Enhancement(s): * segfault because of Unsupported system page size (jemalloc) (JIRA:AlmaLinux-180910) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default redis-6.2.24-1.el9_8.x86_64.rpm 6eaaa9c6e492ec61cfb63cf9e5ede04bbaf897f89cc4d013906542f1912bdd01 redis-devel-6.2.24-1.el9_8.i686.rpm 81eab57555e8fb6d9b625c8f6c79465a1bd9ab333ab2b753af1026e5af35ae94 redis-devel-6.2.24-1.el9_8.x86_64.rpm d962dc7f7c86e266c7c6d71dd278fb8c2ed7a673bf907a170a6dbb0cebafc428 redis-doc-6.2.24-1.el9_8.noarch.rpm f050c028af04be9971fda16c89bb59a35b725f68e3c63742004653a905dee012 ALSA-2026:65117 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default opentelemetry-collector-0.152.1-2.el9_8.x86_64.rpm 15cd86cd30e85ae46e2d83521bc1db42cec2036dac1c1b4f857ec0510b33fcee ALSA-2026:65153 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * golang.org/x/net/idna: golang: net/[http:](http:) golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default osbuild-composer-165.1-4.el9_8.1.alma.1.x86_64.rpm 38b528875dff86cff57f30915d52df540d9b56eb387047471ef8370b9564d95d osbuild-composer-core-165.1-4.el9_8.1.alma.1.x86_64.rpm 4a57e45060c0ad49d9cd47a66bda221238ca517a9aecd4d9396f3335f31d518c osbuild-composer-worker-165.1-4.el9_8.1.alma.1.x86_64.rpm 7af3e45a941d34910441b6605cef17ecbe118e2e1f050c8dd97f857e4e527df4 ALSA-2026:65158 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74987) * firefox: thunderbird: Use-after-free in the Graphics: ImageLib component (CVE-2026-74943) * firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component (CVE-2026-74971) * firefox: Privilege escalation in the Shell Integration component (CVE-2026-74965) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-74946) * firefox: Race condition, use-after-free in the Graphics component (CVE-2026-74973) * firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component (CVE-2026-74949) * firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVE-2026-74990) * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-74940) * firefox: thunderbird: Site isolation issue in the WebExtensions component (CVE-2026-74960) * firefox: thunderbird: Mitigation bypass in the Storage: Cache API component (CVE-2026-74959) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-74976) * firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component (CVE-2026-74974) * firefox: thunderbird: Mitigation bypass in the Safe Browsing component (CVE-2026-74957) * firefox: Privilege escalation in the Remote Settings Client component (CVE-2026-74942) * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-74939) * firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component (CVE-2026-74972) * firefox: thunderbird: Information disclosure in the Graphics: Text component (CVE-2026-74945) * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-74963) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-74944) * firefox: Site isolation issue in the Networking: Cookies component (CVE-2026-74962) * firefox: thunderbird: Privilege escalation in the DOM: Networking component (CVE-2026-74935) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default thunderbird-140.14.0-1.el9_8.alma.1.x86_64.rpm daf354dfa94b1ab935c64bdf126ab3ae107c1af369dcb9c057bf94b913e815fb ALSA-2026:65606 Copyright 2026 AlmaLinux OS 0 1 Important

gpsd-minimal security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The AlmaLinux support for this package is limited. See <https://access.AlmaLinux.com/support/policy/gpsd-support> for more details. Security Fix(es): * gpsd: gpsd: Arbitrary OS command execution via code injection in gpsprof utility (CVE-2026-60122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gpsd-minimal-3.26.1-2.el9_8.2.x86_64.rpm 199874fe570eec013b9e7d6816829652d8db6c8feec2e56ee92e4b7c41c13ebf gpsd-minimal-clients-3.26.1-2.el9_8.2.x86_64.rpm ada03fbe19eaed654c136faed8a0851b0ef2adc4ea9243207c3bb8148c7a937e ALSA-2026:6570 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-headers-5.14.0-611.47.1.el9_7.x86_64.rpm 047a7b610c8aa512f29ab81034353f65bb1cd8189002240dd68bd2079825a62f python3-perf-5.14.0-611.47.1.el9_7.x86_64.rpm 1d52089fc28f0570696d61ea95a59d43320e20e8e8ca7dd0e89e5672e2e02056 kernel-debug-devel-matched-5.14.0-611.47.1.el9_7.x86_64.rpm 1d5840f4812839e8ac2df4db645bbed62e2350b4eaf5866f6329b766731c3c3a kernel-debug-devel-5.14.0-611.47.1.el9_7.x86_64.rpm 4d16fb82aceb5c48e1925f9b59f43ab89444d229d68854b83f7437a4c1ffe399 kernel-doc-5.14.0-611.47.1.el9_7.noarch.rpm 64897f10f4ec67a6df5fa39e0ec8ecfc5cee61c6168a1c230a32b1f1c8d3faf2 kernel-devel-matched-5.14.0-611.47.1.el9_7.x86_64.rpm a541c23fe11defefeeba6be520978ff7c54e34ca519d6fb4917d9a008cdedb8f rtla-5.14.0-611.47.1.el9_7.x86_64.rpm b90f4dcf5767bc1a84c042517aff3a6fd65308a7135789220922e4cad003b1a8 perf-5.14.0-611.47.1.el9_7.x86_64.rpm e2fbc8679e8606473f2df11d6c6c9fa8206d7967ea5de698e37c6c179d95ae14 kernel-devel-5.14.0-611.47.1.el9_7.x86_64.rpm e647dc80d7a32502509d80b1102ff63dade4ee83651d55eb44dc7e9d14e76210 rv-5.14.0-611.47.1.el9_7.x86_64.rpm f414d134972be44d893b86fff916d0c08355dd6b39ef63d725046e182ef2d1e9 ALSA-2026:65993 Copyright 2026 AlmaLinux OS 0 1 Important

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: Qt: Denial of Service via out-of-bounds read in text codec handling (CVE-2026-9499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default qt5-qtbase-devel-5.15.9-11.el9_8.1.i686.rpm 058c02ca7eacb6b76dfe541f1a8b735351d9e5fbc83be40833523fbfcae39fb3 qt5-qtbase-devel-5.15.9-11.el9_8.1.x86_64.rpm 1b51f054f7972eb3bb74e5499be7f0111467a1651808a8dff14aabf850458ed7 qt5-qtbase-mysql-5.15.9-11.el9_8.1.x86_64.rpm 331cd52fa93745e46d72cfc0769ff8d5f611fd211d42ec5787f5b17ad2b91f51 qt5-qtbase-gui-5.15.9-11.el9_8.1.i686.rpm 4108c71b26e06cc667b6eff9b40a188662937d7c2a2c2c2bf6a005e55cb07c5a qt5-qtbase-private-devel-5.15.9-11.el9_8.1.i686.rpm 69a0a04038d637aa9edb03b266b39f71d2cc52215683796d0beb0f3392688c26 qt5-qtbase-mysql-5.15.9-11.el9_8.1.i686.rpm 769a5d16bf60c94dd405e315b9313874f6b1db98701d42db144f38744eb9ab51 qt5-qtbase-examples-5.15.9-11.el9_8.1.i686.rpm 7ac4b4e4ea51d103d9fe692e7d93de99101a993d7efbd5c608c6f880291b719d qt5-qtbase-common-5.15.9-11.el9_8.1.noarch.rpm 8200d322f0868b16bfe5e1744a0f8e4d45310a89141ff46b84ebdb59a5d4d6d7 qt5-qtbase-5.15.9-11.el9_8.1.x86_64.rpm 9459004e5e490b1144bbe55f9b5efdf1f18d13bc3313c43d411d0305251b760f qt5-qtbase-postgresql-5.15.9-11.el9_8.1.x86_64.rpm 99a5ba17c34550821dbd0bd0bf7d077cc952ac1f3ca5c695107b55d612049e14 qt5-qtbase-gui-5.15.9-11.el9_8.1.x86_64.rpm a104571b5c6ce69f780a4f72cf4b201614768ed87c7bc3b23aaef104d5c0da57 qt5-qtbase-private-devel-5.15.9-11.el9_8.1.x86_64.rpm af9cfc16d1f29a92c25e6301115cdf4b4b9d69bc33dcb6b94d14133a7e75b1ed qt5-qtbase-postgresql-5.15.9-11.el9_8.1.i686.rpm c8f659767543b1c88fa4e33b3e24fbb391733072bba3dc4d8484583a3dfd06c3 qt5-qtbase-odbc-5.15.9-11.el9_8.1.i686.rpm d12c944ead3a956f0b970dfbc2386bb3aa27e748617466ee8b5443a87d939eef qt5-qtbase-odbc-5.15.9-11.el9_8.1.x86_64.rpm ea9f087e305932ca655a8b23941cce59a2d50a8753e8ea66df9c28409e1c04bd qt5-qtbase-examples-5.15.9-11.el9_8.1.x86_64.rpm f3dfe5b9bed35d3197132d14223b2c230aeedd1b18fdefc8d889ce067d9b3add qt5-qtbase-5.15.9-11.el9_8.1.i686.rpm fd3ef22fd7488a4c842f6bb1fabf50629bce12fe5b8c421a54f004b0ca2a804e ALSA-2026:66179 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fix(es): * DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-19546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.5.x86_64.rpm a9627113e7244514e72d1b97cb0ce0f9e90af54ff5ffb1502df9b6d4d9bdb673 ALSA-2026:66180 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266) * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306) * kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) * kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002) * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223) * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275) * kernel: ipv4: account for fraggap on the paged allocation path (CVE-2026-53366) * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563) * kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) Bug Fix(es) and Enhancement(s): * KSM to deduplicate only zero pages [almalinux-9.8.z] (JIRA:AlmaLinux-249161) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-5.14.0-687.46.1.el9_8.x86_64.rpm 3075f6a09f6bc1cef4daf652cebcac8c84251bf95c4c20adc7d80840d3ffc5af perf-5.14.0-687.46.1.el9_8.x86_64.rpm 37112993fe7966e8e709e4aef0c9148a90b7c5b462bb066bbb6bc21acafc48e7 kernel-devel-matched-5.14.0-687.46.1.el9_8.x86_64.rpm 41b30f07cdd66d1c980f92ca326640d794c71530943391065b535477b743106e kernel-doc-5.14.0-687.46.1.el9_8.noarch.rpm 5558018523ede0ec038847ea2ac92108f58b79f421c42473ca786811a88868d6 kernel-devel-5.14.0-687.46.1.el9_8.x86_64.rpm 96f6d47f1538914e0529a3aa69834247d6f57f3091a1eb88eddf6dec31cf2e7b kernel-debug-devel-matched-5.14.0-687.46.1.el9_8.x86_64.rpm 9f06555d33afb53276d1e0eb86a305517cece943d571730ede2d1122d48398d7 rv-5.14.0-687.46.1.el9_8.x86_64.rpm ed3f734c5794a892aea515db1e808a3479211a3e50176891db059ad421045244 python3-perf-5.14.0-687.46.1.el9_8.x86_64.rpm ee455a576ff56230410f921569e17a3791cb2e03cc8fdc9b65188bd858bbd58b kernel-headers-5.14.0-687.46.1.el9_8.x86_64.rpm ee584e7990e3adaa4e555fc09a8553cff16edc458938768705a3b51188b8e26c rtla-5.14.0-687.46.1.el9_8.x86_64.rpm fb2de3bf1059ea89a8818e3e7e233cb1b1fd087da946cd4537dfce82905b216c ALSA-2026:66203 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-lxml security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href (CVE-2026-49825) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.12-lxml-4.9.3-2.el9_8.1.x86_64.rpm fe8768ad3f7ed881187daed35cadd3863b45bd0a190cb7ed14eb9d7aac8abe69 ALSA-2026:66204 Copyright 2026 AlmaLinux OS 0 1 Important

python-lxml security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href (CVE-2026-49825) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-lxml-4.6.5-3.el9_8.1.x86_64.rpm 4beb075a36ba7e0097af88942d486c1bd3fdcfa576a686d298bee4ca483e1352 ALSA-2026:6621 Copyright 2026 AlmaLinux OS 0 1 Moderate

crun security update

crun is a OCI runtime Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default crun-1.27-1.el9_7.x86_64.rpm d6b4e5156a628888d2c32cdc169612aaf7bc9bce8967111c749e4488554c9536 ALSA-2026:66341 Copyright 2026 AlmaLinux OS 0 1 Moderate

apr-util security update

The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fix(es): * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) * apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) * apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack (CVE-2026-32327) * apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default apr-util-1.6.1-23.el9_8.1.x86_64.rpm 023fae22a1712b8fe27dcdba7e0db4c06699b1a2358f1dd6bb6c6979abf87a03 apr-util-devel-1.6.1-23.el9_8.1.i686.rpm 20f05588b028732b414ea1663377050505f479d4f353d980d46fe3d980e2cc70 apr-util-mysql-1.6.1-23.el9_8.1.x86_64.rpm 2af00b0d493bdfcb194edc3d0544114a874396f3261f4477354de9e3584a4d3d apr-util-sqlite-1.6.1-23.el9_8.1.x86_64.rpm 39f9f47951a25d99828ca698063d97657b6723f5705e9bb536ab1eea1888ab62 apr-util-1.6.1-23.el9_8.1.i686.rpm 4363581de36585e3bd1ce256fa8772113e17ee4a6bc2a736e19867fc5258da4d apr-util-devel-1.6.1-23.el9_8.1.x86_64.rpm 6eaf13a4ac3d3b424a1dbcea5084226437a9a7e8bd1649c998d053d1eabd9734 apr-util-bdb-1.6.1-23.el9_8.1.i686.rpm 766ed3130aef3f75b08d64c44a7d4f89b38ba884f4d363384426a75d89f118db apr-util-ldap-1.6.1-23.el9_8.1.x86_64.rpm 952789eb473bf51d37b785426aed1a9e19526ff5896e032e7d8dc4ac44c73824 apr-util-pgsql-1.6.1-23.el9_8.1.x86_64.rpm 9a6b8ff4b93566c95f314d3c640dbd5e9ebc509a9023e0fcfe0f8617d04d0524 apr-util-openssl-1.6.1-23.el9_8.1.x86_64.rpm cdeaa64fdf5b9dce70ca7f31a8a82bcd919dd2512729c3121ed557b695cfe34f apr-util-odbc-1.6.1-23.el9_8.1.x86_64.rpm e08bf94f1616fff28d6d6a6999641b726256dfbdad794bdf0997dc036becaa83 apr-util-bdb-1.6.1-23.el9_8.1.x86_64.rpm f6af1563ef7e69d525ccf23c3964b644ec4ddfd19cda62fb81c09f55fa4e4eaa ALSA-2026:66347 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway (CVE-2026-55193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default freerdp-2.11.7-7.el9_8.7.x86_64.rpm 42f1805e0cc7a2a4c73f24626b25413ea73cbf00c6b432dec452dcb6a23470d2 freerdp-libs-2.11.7-7.el9_8.7.i686.rpm 4adeec6117e6cf73d0d2d28340472804b4192ecf572d7c2c4f68fa1456a2e1b7 freerdp-libs-2.11.7-7.el9_8.7.x86_64.rpm 658b3b510855e5598cdcd07e145aa2d9a8b9cfe234efa707d9e65e100cb741cc libwinpr-2.11.7-7.el9_8.7.x86_64.rpm 8e320d044f0217e289d09449c22457201c4e8c0179b871054b814d9ca85ef7c0 libwinpr-2.11.7-7.el9_8.7.i686.rpm a5f9a0baf808b6c44c0a3d3e609e1c896dbe2109a6c2b565ed0adf26d50eed26 ALSA-2026:66364 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default git-lfs-3.7.1-4.el9_8.3.x86_64.rpm 2c421162594c49cb225e4cd503b21956b41c5da167c191c82caaeb1e2b20c9fd ALSA-2026:66366 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420) * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859) * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892) * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857) * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076) * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072) * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078) * vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default vim-enhanced-8.2.2637-26.el9_8.21.x86_64.rpm 384b21652cbf11a852e2d56d7b4aff880ec7441d9e46451d41424e0b5c62a090 vim-X11-8.2.2637-26.el9_8.21.x86_64.rpm 82fdd17cf75c575ff66442d94ca84360fee314fbfb640accd8451f974c33f2c2 vim-common-8.2.2637-26.el9_8.21.x86_64.rpm a9add156fce944f9bbebb6557038ed6896b81745735457fa4dd2a8b2f5a59d97 ALSA-2026:66542 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.x86_64.rpm 0fb985ac01111c69690abe543c1c01fd0907a5b5127a491d430c0386d4c1bb6d nginx-1.20.1-28.el9_8.6.alma.1.x86_64.rpm 199d9c42372273c15ae2414aae52c9c2eab348bd45e3fe9995cfa8a8f86089e8 nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.x86_64.rpm a163907c0aa431318d667d64a0c062fbc16ef242d3c7656101226ad76f547f9c nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.x86_64.rpm a4557f4fb49a678168605a0d13259681d750895977568cfaf20a22a0e89d8f6c nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.x86_64.rpm b8d0f7a55061cafadace21c5948673003853ef711dd919db4126f06824ac1ee1 nginx-all-modules-1.20.1-28.el9_8.6.alma.1.noarch.rpm c9379a6934a1a7fd2b289b46490b776c8771eb4c5e3e37e9cf8e998e08d2494b nginx-filesystem-1.20.1-28.el9_8.6.alma.1.noarch.rpm cae767fbb7a5a0aaab79574a1a6798e5ff8527e17c48621ce618aab8810fc920 nginx-core-1.20.1-28.el9_8.6.alma.1.x86_64.rpm d3109cb116d0798457862fb6c43de469b0a4b06531da749a5f26acb01c9b3d3b nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.x86_64.rpm e68adc04df4c2f14f32bf8e1eb37b649ebf8b0f387968d0a748252f2a95c9841 ALSA-2026:67133 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365) * firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874) * firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121) * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145) * firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119) * firefox: Use-after-free in the Audio/Video component (CVE-2026-84120) * firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124) * firefox: Use-after-free in the Audio/Video component (CVE-2026-84122) * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firefox-x11-140.15.0-1.el9_8.alma.1.x86_64.rpm bbffd862ae401243408654a8f5f4c3f167d67f22cc9f9a5e3233a77aae164f68 firefox-140.15.0-1.el9_8.alma.1.x86_64.rpm ce1f1471485ddea9e9a20f5d440ce6a58d9be771615e76b0522a0cf57e8858d4 ALSA-2026:67146 Copyright 2026 AlmaLinux OS 0 1 Important

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado: Tornado: Information disclosure via improper handling of credentials during HTTP redirects (CVE-2026-49853) * tornado: Tornado: Denial of Service via uncontrolled gzip decompression memory consumption (CVE-2026-49855) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-tornado-6.5.8-0.el9_8.1.x86_64.rpm d56c8c961c68bcdf354a1463f39e4986cdbf25f5537a2d3a8a4c34467d9c03dd ALSA-2026:67150 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CVE-2026-63945) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Wi-Fi subsystem out-of-bounds read via crafted frames (CVE-2026-68402) * kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376) * kernel: wifi: cfg80211: validate PMSR FTM preamble range (CVE-2026-68406) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) Bug Fix(es) and Enhancement(s): * gfs2: Various xfstests fixes [almalinux-9.8.z] (JIRA:AlmaLinux-178219) * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-9.8.z] (JIRA:AlmaLinux-193025) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-9.8.z] (JIRA:AlmaLinux-193050) * Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch [almalinux-9.8.z] (JIRA:AlmaLinux-224489) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-matched-5.14.0-687.47.1.el9_8.x86_64.rpm 0b115485df3057c7254edd73bb06b263797e1b4bb20263145bf40ff927a85ba7 kernel-doc-5.14.0-687.47.1.el9_8.noarch.rpm 18764989ced67c1daf14bccf38bb7ee740ca86ad859cedb9f676b672eada1882 rtla-5.14.0-687.47.1.el9_8.x86_64.rpm 1b3caeda88bfe3ea7e588406c31731bf2eb05cc36d4dd9d747e40762de481896 python3-perf-5.14.0-687.47.1.el9_8.x86_64.rpm 1dbefe30d4ed3e50bbfd61bb116d3b632cebd1683b3e17054767ec048b8a413a perf-5.14.0-687.47.1.el9_8.x86_64.rpm 2dc32cb79865f958d42a995f14c5649a107005c834a1509f7b0e3ce2e2310d8b kernel-headers-5.14.0-687.47.1.el9_8.x86_64.rpm 350f8c9a2d27ac4961a9430c51f5fe9da5b67f3dae8b37385b4d243935217f84 kernel-debug-devel-5.14.0-687.47.1.el9_8.x86_64.rpm 69cfa69385bc6ab48459f337275ab3a8410b71abbfcb65352ffd8a1819d056d2 kernel-devel-5.14.0-687.47.1.el9_8.x86_64.rpm 9e17b007e0357705e674c0557b8c05f24a70f961810718fb57ca0edae1d0cfc6 kernel-devel-matched-5.14.0-687.47.1.el9_8.x86_64.rpm a972c829aa98449ae1eb80c106341dc6ae80377cf156814702858096d873bbac rv-5.14.0-687.47.1.el9_8.x86_64.rpm d9014a8b008156c831a12fa622587e47246799494076c3891f4684af44407c2a ALSA-2026:67155 Copyright 2026 AlmaLinux OS 0 1 Moderate

perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-blib-1.07-484.el9_8.noarch.rpm 00cc82d2a7da11891c9d091d76a26ebe5d3dbd10a1dae3cbb977505ef877c564 perl-NDBM_File-1.15-484.el9_8.x86_64.rpm 15d2253452e96da5718dce1eed32e430020f4c871cd689f831ed3c4777f51ad8 perl-DBM_Filter-0.06-484.el9_8.noarch.rpm 16d44a931822311966c33def0b37947ac345c6289f4d3130ae2ccbcaf77af7c0 perl-sort-2.04-484.el9_8.noarch.rpm 17e3465a8f0680366f3637f3d803a8fb1eeeb6d37714b3a1bf09251be3aa5f31 perl-AutoLoader-5.74-484.el9_8.noarch.rpm 1cf438a8dd96414d5f0b322ebca079ce9cad9c5c24c2555cad438a3a3c523e86 perl-Attribute-Handlers-1.01-484.el9_8.noarch.rpm 1dcbcab009b552a8ea6e2c1583c10713d81339c8c7a081e6653ff3b10c95d562 perl-Tie-4.6-484.el9_8.noarch.rpm 1ebcd58c278904e454051a06bc90dcfcffbda7bf0dad30e74581fb0b98dc0600 perl-Devel-Peek-1.28-484.el9_8.x86_64.rpm 1ed8a183a4d37d66e27108d2942919f07e445721f5034405e29ba0bd63a361cc perl-Thread-Semaphore-2.13-484.el9_8.noarch.rpm 21001f0da3f9cb1613b27321361ba5da95d5fa7a0776b42126082ca0a886c414 perl-Net-1.02-484.el9_8.noarch.rpm 237eb2caefb414e076fa5cc363e7250d461cbe83670e2892e5f7c700f8c3a579 perl-deprecate-0.04-484.el9_8.noarch.rpm 258bc3e54dcc4c96412e21ec2d7e53287a314c0d31af1cf60cbfa50b63db5062 perl-meta-notation-5.32.1-484.el9_8.noarch.rpm 29bd4b007b84bd0d80cdf04d354488b6d7ae834970ceea6c50bb995f71ff73c7 perl-Pod-Functions-1.13-484.el9_8.noarch.rpm 2bb30c5477f2e1eccb33517f4bd808e51ee9eb193118a12c34f8aac8d18d8a71 perl-Search-Dict-1.07-484.el9_8.noarch.rpm 2f861eff655b40760ca58ba206c6886a00c11872c2e797f3870e94fdaebbd91f perl-Sys-Hostname-1.23-484.el9_8.x86_64.rpm 30b1949906386f3bc5245ce0b231eb973f7691f02c34b3300a4c57feee8dddf0 perl-English-1.11-484.el9_8.noarch.rpm 3275aabc74b472dfc28d281f71074ff65537c2fc665e810fb7ef0eb1f982a48a perl-FindBin-1.51-484.el9_8.noarch.rpm 339c83f70d416f740f1632fe8295395701bbeae96fd73ca87f5fbdc7ea103e95 perl-I18N-Langinfo-0.19-484.el9_8.x86_64.rpm 34f53fd664b961daa4a16ed377a1bff5d63577d380ee115720ebe07f32f99cd2 perl-DynaLoader-1.47-484.el9_8.x86_64.rpm 36f8aa69cedae4cd0aeebf01f1164b4f1f9c33cca645594967bf798a9329584b perl-Pod-Html-1.25-484.el9_8.noarch.rpm 3b56ebce8d1be0cf96e4bf5a32339d6eaa909ed6729afea93fe897aa0dafc8d5 perl-vmsish-1.04-484.el9_8.noarch.rpm 3ddc18fb4e524ed78afdbaa43440ff98fadfd765532595e8ed3d33ac9b034970 perl-devel-5.32.1-484.el9_8.x86_64.rpm 410853ae1d5c5481aacebb5cabbf390eb28edddede9f1e85be8780eb83101e03 perl-Term-Complete-1.403-484.el9_8.noarch.rpm 416d1800396f431cb97382a296fcfbcc5157ca66c350ba9c17f2040339a973bf perl-Term-ReadLine-1.17-484.el9_8.noarch.rpm 417f0cdac648871329d765f06838412c44441d73350ebfb560fec792833082ad perl-IO-1.43-484.el9_8.x86_64.rpm 43b202644c110364690358d55463ad6627da7c10bd01b700353984f4e2552eb1 perl-IPC-Open3-1.21-484.el9_8.noarch.rpm 449c2c55c0a3a5335888d65bc92982174ee17b92a65015a963de90551c2135a0 perl-interpreter-5.32.1-484.el9_8.x86_64.rpm 458f55ffef009ee7ada9312305367692868f918129f157be60852a98a1e40322 perl-GDBM_File-1.18-484.el9_8.x86_64.rpm 49315efeb5721ae6d575b7a22197149e2bcb3adce436f90fdc3b7608859c6096 perl-Symbol-1.08-484.el9_8.noarch.rpm 4b30d52851ed594b6d7cde7d42e273a340e76118d048e42f1ebc7721a18993da perl-ExtUtils-Embed-1.35-484.el9_8.noarch.rpm 4f301e82cf5a1f46cb31fee55a39197c8f4922aee857fcd2767e594f4b4aa8fc perl-ExtUtils-Miniperl-1.09-484.el9_8.noarch.rpm 51d913e23a195f6d2d48645b24a6ea4d4a407bf1ebc0769dcfae2373c08afafa perl-vars-1.05-484.el9_8.noarch.rpm 54f8049ced1fb889e765db13ded12191a48d87ba0bb3b792a905e9a91ac3da61 perl-open-1.12-484.el9_8.noarch.rpm 56a5a7e7d66017770405976d4316cb28f8a5a9efc73c90a1210cbe2165c92e4b perl-overload-1.31-484.el9_8.noarch.rpm 5ad9293d799e79332f906c4c828f6868f5f9c613e35c4c4fe3a1d997421c0e3e perl-I18N-LangTags-0.44-484.el9_8.noarch.rpm 5bb968c2803ac1bae02a495f63508d008b0c0989f496879f3460e5f0f2346ee3 perl-NEXT-0.67-484.el9_8.noarch.rpm 5cd550d963e9b691e01098a80a60d53759f55e929f4885abbd8658817de8bdeb perl-Module-Loaded-0.08-484.el9_8.noarch.rpm 5f067c1f1b18dd62411fb2d90f40500735789cddb332675b6861caeeefea7896 perl-libs-5.32.1-484.el9_8.x86_64.rpm 5fb976cfeebe640002af012552b961eea499141e207ea30df2ad95396d0ac3fb perl-B-1.80-484.el9_8.x86_64.rpm 6132a20d905f457deec08f76037adcf6ca03a0d93c39d45727da6b33ed230217 perl-ODBM_File-1.16-484.el9_8.x86_64.rpm 63be44eea872f74906b4e74921e3756caac9b77aa29a72b4e27969ecfe883a8b perl-libnetcfg-5.32.1-484.el9_8.noarch.rpm 6469a50f43dc76dec4d7556a5d3962da2a508be83267eabd11d7cd4eb3bba0b5 perl-sigtrap-1.09-484.el9_8.noarch.rpm 649a95544e85d3d43547370f982970f85c2eefe0451b136ac197238d4cdbd562 perl-User-pwent-1.03-484.el9_8.noarch.rpm 6552c9fc991b25ea6116eebe8632c7d517a5eba7f2515c4da7f13361cc4c05e7 perl-devel-5.32.1-484.el9_8.i686.rpm 66dc1b7d2d7b67c80e9da3ede26ee5adb525e9cf5eba5ad56f466c9e491b8798 perl-Locale-Maketext-Simple-0.21-484.el9_8.noarch.rpm 6ab6c8a42114b9c2b0c5e5e54b58cddf889bc7cecdfc247415f0dc3bb24f6b08 perl-subs-1.03-484.el9_8.noarch.rpm 6bbc7f4ba10a589cd76b8f4664bc56e6d198848e873d21869a72418bbcc8757b perl-Opcode-1.48-484.el9_8.x86_64.rpm 6f0d256f973b32e4403418e85ff61251c4264b60514d300d2dd3362dfa1f8e80 perl-File-Find-1.37-484.el9_8.noarch.rpm 70807ce72e63326eac639e9f618a71977bfdabed1e8da0d8413be4075b7beeee perl-POSIX-1.94-484.el9_8.x86_64.rpm 7093de5003c35188e4845cb8dc8510eb443798de5cdf3437ff8b2db00e0e19e2 perl-Tie-Memoize-1.1-484.el9_8.noarch.rpm 7338d3d4b05c5df631635a0dc95577396c062f58831194922da8e4a569ad923f perl-SelectSaver-1.02-484.el9_8.noarch.rpm 73f700dd3af882a6f445153fff51f8f30e458751b2072685ebda4cfd0f335886 perl-Config-Extensions-0.03-484.el9_8.noarch.rpm 756682247d5016a0c7e99a118e83fe908d577cc644a38c2e02aaae6bdb5c1c94 perl-Fcntl-1.13-484.el9_8.x86_64.rpm 76607ba009886cad530f7669170168e49997bc174994a310b33d57200b0c81c2 perl-lib-0.65-484.el9_8.x86_64.rpm 76dfae39335ea13f504416038b8c82b5a9cb90dfe7c14a40845e76b876d42ec1 perl-mro-1.23-484.el9_8.x86_64.rpm 77df90611f660f8259ee5197c4e839a6489b730ba0f37d05f6624ffcea3d3850 perl-libs-5.32.1-484.el9_8.i686.rpm 7b4fa389527f692274584652656944b3939e20d0c6ba7fece2bcc86dd3eba18c perl-filetest-1.03-484.el9_8.noarch.rpm 7d06e7f83713990fe0c5c99aa169d60a7bea5ff8e7d155a5e6395c3f4f6d2836 perl-Safe-2.41-484.el9_8.noarch.rpm 864b968966cbaade9ff404fe050888d39e39c2a15a28071a5b08b148ca980b1f perl-Class-Struct-0.66-484.el9_8.noarch.rpm 8f67f3ed843a2d3feb33062b477ae557430942c97fe83518bc64c4aec8955a12 perl-doc-5.32.1-484.el9_8.noarch.rpm 92ab603ca3fbfd442dfadce225de4026792a70dd13a270b4c4bf4471b4c2e03d perl-Time-Piece-1.3401-484.el9_8.x86_64.rpm 9837502bd28104e2a4a63a5928759c97954dc9f2ab207fe898ffdb782ec02b9a perl-Devel-SelfStubber-1.06-484.el9_8.noarch.rpm 9a49903c536ee3061f48c5949382cb55691e4ff4db17e99ad3ddca246e6b306f perl-Text-Abbrev-1.02-484.el9_8.noarch.rpm 9bb896b991d1f5be44561deec9eda7220033bf5c6aefc3fadadca3bc7bb09c34 perl-Hash-Util-FieldHash-1.20-484.el9_8.x86_64.rpm 9d8a8c1b82d1829b07d287f3ee21a54cff298ab158ac3c2902d7db7b87ec870b perl-DirHandle-1.05-484.el9_8.noarch.rpm 9db1b85a2df0e5127271d5be92fa477368d4c1f98350031ff3d5423483593b0e perl-Time-1.03-484.el9_8.noarch.rpm a1601554940c061da13a5ff5b0d3029d201fc114d410f5ecab43435886bc9439 perl-macros-5.32.1-484.el9_8.noarch.rpm a48242ea9810e229336c6c1d8c2d6b0ed1130d4062cd24287417aeee5e3405b2 perl-Thread-3.05-484.el9_8.noarch.rpm a4b0626e6b7ee1aad585cfc9cf0adbf43df9d9b3fc46330d5795971678f79907 perl-File-Basename-2.85-484.el9_8.noarch.rpm aa3dce56ce5aff117a52bc8dc2efd1a1ee81430386832255011800b409775cbf perl-fields-2.27-484.el9_8.noarch.rpm b2ed105529d93aa111302c55f7bb0ae932840eae2d7e46214c5a74b6921091c2 perl-Math-Complex-1.59-484.el9_8.noarch.rpm b4535e173ab53ff9165338ebedf4f9532de417099598dfd5dd3514022b774081 perl-Hash-Util-0.23-484.el9_8.x86_64.rpm b929702ed62fd8c40bb58c9b1180f595e58e396d5e8d5f9fc4b6cfefce984e7d perl-AutoSplit-5.74-484.el9_8.noarch.rpm b95cafe18febc1c92183d4c3743daa09fa329308415aa375b8eb47fbeb31bdfa perl-5.32.1-484.el9_8.x86_64.rpm bf5c4ed5231acaa6a045828093e4be6217846e3a98e2b07513e20afd0486ae2a perl-SelfLoader-1.26-484.el9_8.noarch.rpm c2be0d0a75859b8c8dc7966bf19b162cfaa5ca9e121b780972787cc57ea26fa8 perl-Tie-File-1.06-484.el9_8.noarch.rpm c3d55b9e4834fa8a5382beb358152eb16f0a9fee1462fa85b359301223b5e17a perl-base-2.27-484.el9_8.noarch.rpm c3f8d248ebdc34e5d31223fdbef9d7cf51f16d276356f4801fe8f1d92798efa5 perl-Test-1.31-484.el9_8.noarch.rpm c48ba7c5b24730d4689332edfa63fdce97acbfd5eb9fda5b3dbcdfc9acba1f98 perl-Benchmark-1.23-484.el9_8.noarch.rpm c65efab0c4eb12769a71be8801854e989ba6e34caf93b0439e0dcd36fef0d8a2 perl-ExtUtils-Constant-0.25-484.el9_8.noarch.rpm c98068e7b00ddc5b48e0bb0fe21ec48d9c5ef1709b17a97b3972b1e4ae34feb8 perl-Unicode-UCD-0.75-484.el9_8.noarch.rpm ce4dc3ee8e7fdb70330557ab600ec6d41c2f678561fbff783cb370095f070134 perl-diagnostics-1.37-484.el9_8.noarch.rpm cf8ff13ac92636be559dda8d354f730e8e340b3e7e76f379bb4e7c07645d4d70 perl-Dumpvalue-2.27-484.el9_8.noarch.rpm d3fe3b839da0965841f0ff00153ed5dfdf7a956bdf6424af8fb3e2c8fcedcd3c perl-Memoize-1.03-484.el9_8.noarch.rpm d540903ecf8e792f6222cc9eee020f4759ece5283e0e32ce7976f3aa65bc3989 perl-Getopt-Std-1.12-484.el9_8.noarch.rpm d7fd6e0e2ac7b2f182f30e9346b599d2e23b9ffe450770388dfd91067d8dea03 perl-utils-5.32.1-484.el9_8.noarch.rpm d91f8ff7be0001c6c17d6169cf0ceba34a3a438a148b2f192b76148830ee31e3 perl-ph-5.32.1-484.el9_8.x86_64.rpm dc6d7c611c6d6d84509b4b1fbcbccb874ce15965a4d4ae672a0c80d3236624a4 perl-FileCache-1.10-484.el9_8.noarch.rpm deba482267f42a85f4bf4b814855325fda8f4c40de58c28c6dc151b1b5a9cbb4 perl-File-stat-1.09-484.el9_8.noarch.rpm e250d5d74f5e44acb0d3e8fc7174f6edac98b8d2755b85443f0534fc180535a4 perl-overloading-0.02-484.el9_8.noarch.rpm e3346e105f05f18e15599cf1edf755a7e9e4031974826910bdf3050e614608e5 perl-less-0.03-484.el9_8.noarch.rpm e35e4016e37c3bc0860d7630708082cf7f50bac5fed16819b4be403da0190931 perl-debugger-1.56-484.el9_8.noarch.rpm e45f4344eaee1d6c5a1b734016d9976625362500ae0eea9aa1497dc655a82044 perl-File-Compare-1.100.600-484.el9_8.noarch.rpm e492dced42dacecf656038229e6cdd0a1370ba00923351fac73ca617fed2dec6 perl-encoding-warnings-0.13-484.el9_8.noarch.rpm e58e64f72477489db2fff2942082cf2fd675f32aba0edab70ae6fa6e9188c8a5 perl-File-Copy-2.34-484.el9_8.noarch.rpm e8a1a6f964938371d853de66caa6a300511a60c2c678df2ca98c83ed09d21c66 perl-if-0.60.800-484.el9_8.noarch.rpm ede7f98d890bd54d112f9229de908d8c1f243bc837d7c84859e6e9cc08d88b40 perl-I18N-Collate-1.02-484.el9_8.noarch.rpm f24b64b8a1c85b53190f81f56121dbabc603c94cd591732b66e6ffa59a97b082 perl-FileHandle-2.03-484.el9_8.noarch.rpm f48ff4e56e9527c1aca1e0a9369056f74dc88f5803c593a02527378f33e2977d perl-locale-1.09-484.el9_8.noarch.rpm f8b82202b99a33f003b36c9978f852ed85a857ddc985174f0c135e3dcb30645c perl-File-DosGlob-1.12-484.el9_8.x86_64.rpm fa7f624bbf216a4783c9de0d47e5c2aff2a9ab0a6d6cfb6f369d960c60624c3f perl-Errno-1.30-484.el9_8.x86_64.rpm faa790789e9e8af4c132107a77cfdcd0c3d784b9fd77c8fe7bf95f45b44d102c perl-autouse-1.11-484.el9_8.noarch.rpm ffde53be5d492916e97c32e3a585e0c78c44de5827e93a51039554c31d363421 ALSA-2026:67165 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456) * openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798) * openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072) * openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076) * openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457) * openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874) * openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073) * openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074) * openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075) Bug Fix(es) and Enhancement(s): * openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 9.8.z] (JIRA:AlmaLinux-232828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openssl-devel-3.5.8-1.el9_8.x86_64.rpm 1a36df2435edb0aa17844458fde8be870bcaba70bbcf8f1afbf5f8a275b5da0c openssl-perl-3.5.8-1.el9_8.x86_64.rpm 6e220a3e314240068db55a026331c27c345db59d82151a8995a8a56c6df65944 openssl-devel-3.5.8-1.el9_8.i686.rpm e84f10a5e3123132348420fa3708a9ce8e388bdacd78b30d9b253f2c82a321c1 ALSA-2026:67283 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-mod-devel-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.x86_64.rpm 15247b0f89727f72e578b62e2e4da128c5aab0bc70772496bc807a49b33aac07 nginx-mod-http-xslt-filter-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.x86_64.rpm 1d6a91ce9b4eec109a7f51545ab8bd9caabf460e05b6cfd0c0f4e71a279622cb nginx-mod-http-perl-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.x86_64.rpm 25e838f7bf3ae59e5428583ce288caeacf8d2a353382b23ed8fd8f10fadea9eb nginx-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.x86_64.rpm 308e14da5221d77a4013b73d5778211fcd6b4be7dac83bc942f380a0484cd15f nginx-all-modules-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.noarch.rpm 50f544362827ec37d0740cb3baf7408eb494ac130d6ac0c3edb4523c791bd5a3 nginx-mod-http-image-filter-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.x86_64.rpm 623684a0a1c76982c58874b727a7698799400271cd1140b5195442eaa2a35f60 nginx-core-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.x86_64.rpm 78e8c61d778fe045d939caa99d1a86a07470fb0de2309f0525952cec689923d1 nginx-mod-mail-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.x86_64.rpm 892711bcaeca6a6d8a479c8206ebcff5866e1e7beb417ebede26a5e2fdbd3121 nginx-mod-stream-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.x86_64.rpm 910442545257a9797778bf885a481f73f443f5f330bb41a75cc9c7387523ff06 nginx-filesystem-1.26.3-9.module_el9.8.0+309+b8a3c30d.4.noarch.rpm a2b94d3186abdb269a932e655061a884f0c125836ea9de3550bcbf339815a02f ALSA-2026:67285 Copyright 2026 AlmaLinux OS 0 1 Important

rust security update

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator. Security Fix(es): * libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server (CVE-2026-53587) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rust-toolset-1.92.0-2.el9_8.noarch.rpm 180513280d5b19d9563b41796d5d56d0f546d18148c0c3ad4ff6606d8617b56e rust-std-static-1.92.0-2.el9_8.x86_64.rpm 19c37008abb2c0a9bc387d5935ee4dcf49c83a6f09324f0dc16d4126e320e227 rust-analyzer-1.92.0-2.el9_8.x86_64.rpm 308279a3028a965a9c0a0874e256d6542b5abfd41abd614f17d515b130540480 rust-1.92.0-2.el9_8.x86_64.rpm 46a599eb792248591a02554de31548995918263073a0d04a15c3faacee165327 rust-debugger-common-1.92.0-2.el9_8.noarch.rpm 48f4c2cb3f87dd7b1a9dc946ff10acc0538a63a9f810ef0f7624783fe180988c rust-lldb-1.92.0-2.el9_8.noarch.rpm 54511f84f3ccb4461fd8d7b306ad96a9ba62ae04344cddd43ebebed046f2c85c rust-gdb-1.92.0-2.el9_8.noarch.rpm 5dbc3719e024877bade76b8dbdb3c6fb2e3798bd4b7ad7e0bdea8ddee3df81ad rust-doc-1.92.0-2.el9_8.x86_64.rpm 7a7e83e3e18b29b1ec5f7b274cf26ddbfce4d104dfb1333de2c385abf5b17a80 clippy-1.92.0-2.el9_8.x86_64.rpm 8e3def823d7e94dd1e4a5b9f2254e24012a2a3ad0c115b14b727b08c756db7c8 cargo-1.92.0-2.el9_8.x86_64.rpm 93cb7efc5e07bbde55db64e156301b58de5b77cdb867e6779fe3b6c6ae0f7aa2 rustfmt-1.92.0-2.el9_8.x86_64.rpm a94e3d4ae242e3689cbb29b2e8b11031ebf21046789de0790d045bf7c650c94b rust-src-1.92.0-2.el9_8.noarch.rpm aa8d3fec6a91c88b33f03cb5b41468b4351b64fdeb6639251148bd3f17276e8e rust-std-static-wasm32-unknown-unknown-1.92.0-2.el9_8.noarch.rpm b13954b02e3711ff971b9bd111a4bcb9e77080b6513d5936eaff8be2fde7de25 rust-std-static-1.92.0-2.el9_8.i686.rpm b61a48cde67ab973bcf104c510b6bcd51159a874d6c709f74daa1dac86ab7ed8 rust-std-static-wasm32-wasip1-1.92.0-2.el9_8.noarch.rpm bffe40c0d2cda0a4834451bbb174fbbd75db15a542a7aadaa2a7b0f3a2022a42 ALSA-2026:67308 Copyright 2026 AlmaLinux OS 0 1 Moderate

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nginx-all-modules-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.noarch.rpm 02b09e728f61c62cf1d9c7ad043dc0b9d65932c0ee5bf7784bd312c3b89677dc nginx-mod-http-xslt-filter-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.x86_64.rpm 0c9f3f0cadb6969fd2bad374fd1896ec15971fdd3ff7209dc0c042b169a764e3 nginx-mod-devel-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.x86_64.rpm 317685dbc7d705c2c528b336cfaea4fe275748b3e7a1f03fabe75cc17697a736 nginx-core-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.x86_64.rpm 4647eb7c77ed54dba1cd15668c91e62c4a3d23780287ad9c558e7df9ec2f7f51 nginx-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.x86_64.rpm 4abd39baf565bdf581c61da2750739b967ae3b142731e60300febd4bdbffe634 nginx-mod-http-image-filter-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.x86_64.rpm 9bd80a6837f436549644d9fe13c3fbed3669e7fcae248627d597f5bacc332ed3 nginx-mod-http-perl-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.x86_64.rpm b30ebb1c6facc5f025fe74a9c2bbb61d0135916d70fa8d01ffa9b7792c5ce4d0 nginx-mod-stream-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.x86_64.rpm b44e8c326ee642cbfb137c1385896e1b88039294447c1f904236df5e88b19e86 nginx-mod-mail-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.x86_64.rpm e7713dfaf2c0302aea05346a9093cb8041320bbf2d972f5625c557348e4e952a nginx-filesystem-1.24.0-7.module_el9.8.0+307+7a7a3a71.5.alma.1.noarch.rpm e9776f7214ce683774b346f415f444e38286a300b452debff13b0925e8a739aa ALSA-2026:67462 Copyright 2026 AlmaLinux OS 0 1 Important

rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460) * rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions (CVE-2026-70454) * rsync: rsync: Arbitrary file deletion via malicious file list (CVE-2026-53789) * rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths (CVE-2026-53790) * rsync: rsync: Memory corruption via crafted file entries (CVE-2026-70458) * rsync: rsync: Denial of Service via handshake stall (CVE-2026-70464) * rsync: rsync: Local Privilege Escalation via Symlink Following (CVE-2026-53803) * rsync: rsync: Unauthorized File Access via Symlink Module Root (CVE-2026-53784) * rsync: rsync: Authorization bypass via `auth users` directive parsing (CVE-2026-70463) * rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure (CVE-2026-70452) * rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791) * rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795) * rsync: rsync: Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456) * rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (CVE-2026-53793) * rsync: rsync: Denial of Service via Algorithmic Complexity (CVE-2026-70453) * rsync: rsync: Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457) * rsync: rsync: Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461) * rsync: rsync: Arbitrary File Read via Symlink Following (CVE-2026-53802) * rsync: rsync: Arbitrary file write via path traversal in --relative mode (CVE-2026-53785) * rsync: rsync: Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783) Bug Fix(es) and Enhancement(s): * Rebase rsync to version 3.2.7 in AlmaLinux9 (JIRA:AlmaLinux-248835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rsync-rrsync-3.2.7-1.el9_8.noarch.rpm 7d9a830ad81c396036b02e9fde77cacde85572516743db30575017ec1b4f4802 rsync-daemon-3.2.7-1.el9_8.noarch.rpm b5d900802bfdefae90bb876bbf3f550bd65797f89a787ceb8668bb274765fd7c ALSA-2026:67470 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (CVE-2026-72045) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * gfs2: bufdata leaks [almalinux-9.8.z] (JIRA:AlmaLinux-178223) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rtla-5.14.0-687.48.1.el9_8.x86_64.rpm 0ad6d5606a43384ebb917ebfa871062673c6f6daa8de375f424ecbe542851dc4 kernel-doc-5.14.0-687.48.1.el9_8.noarch.rpm 0c5255aa66e1571bfd57d31f99ac574859dbb59bd2dd06b247eb654e79a02e29 kernel-headers-5.14.0-687.48.1.el9_8.x86_64.rpm 23435923b5dd8d2f33da504539e6daaf1409beec23a6af53b50fa059870409c9 kernel-debug-devel-matched-5.14.0-687.48.1.el9_8.x86_64.rpm 28cdfc8e55d50d4be589daec6e66c94ee60fe42f81a2afdfef36a5cf82c6404a kernel-devel-5.14.0-687.48.1.el9_8.x86_64.rpm 45447c44eeb171650dabbedbc3732824e60d59978d63ad617d20ab574c355dfa python3-perf-5.14.0-687.48.1.el9_8.x86_64.rpm 8d7b8d970fe6c87628d0de5e919a8226b08532a74d0f2eb445f130ab27e23fac kernel-debug-devel-5.14.0-687.48.1.el9_8.x86_64.rpm 95063548e3539f9304b45a0b8bacbbc98fec4c553e5357cae0af875b37d07cfe rv-5.14.0-687.48.1.el9_8.x86_64.rpm 9940779923f17024d865e3347cec01339186cfdbf3785ad9bcd0b92cb01b8643 kernel-devel-matched-5.14.0-687.48.1.el9_8.x86_64.rpm c8b0ba44cbfa8c27a606ae04dcdf83d7dc6c2222f337d54522b16bf1f38bd9ac perf-5.14.0-687.48.1.el9_8.x86_64.rpm f9b7039e33c82728f7c0d5f5442aa3359acbf7415fd655fb506b3b818b12cf2e ALSA-2026:67491 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgis-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 024230f4a139facaa7270ce774378bb80831f176edecf808f4700cfae6db90b4 pgvector-0.6.2-2.module_el9.6.0+167+4e561146.x86_64.rpm 1141f322652c8d905035a08a39e707d5192236d5b4b442802732b66a0684e10f postgresql-test-rpm-macros-16.15-1.module_el9.8.0+311+c39b793b.noarch.rpm 1f8e0041a0fd1a55a894b645a43c1bef24abc455b3b25fe575e89120bfda9388 postgis-utils-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 2412a2cb2d1d015dd94f89a6102818732d93181becd6a630a537a92573482005 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 postgresql-docs-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 344d4d163c53504e9d5807099630e1f85fb4ce554df0b0ef433f8d04ca5ed57d postgresql-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 34b5c64cb8218bd879c5db20de9e1fe86608cd2c284de0faffc01e8fd0ccb639 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgresql-private-libs-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 4ba5ab89e6cfe35c2820914af153934cd7e03432d9d1451082b49f5bf3aa8f90 postgis-docs-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 4e95565ce7fb1532a63248653207ae3f64537f78f9b599c5bb119a661c062edf postgresql-contrib-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 50bf7ed56809c4a3de701be8740cf27972a836c94a5ce75e5ed806c42aeb854b postgresql-plperl-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 50bf98d1167287ec72168d1dabe37c7f2e6314d3a129e7153f35f7aa8c46cd45 postgresql-static-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 5c59254b794f7ad14935a7de9b526edd70d21eb4787cced6af10c5a6604522d9 postgis-upgrade-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 8637d8e40586d15e60d191a7f59f3743d7cfd14603e8851143e7df1db33e6ab1 postgresql-pltcl-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 9253bbf2d70116a1845cfc109c914381b78ef152beb4dcc798105412021d09ec postgresql-plpython3-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 95ecb2269937c169831de4a606758e803d9d2e70b1145a2f599b0d2c805ed0a2 postgresql-server-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 987a44a9b461d32f702e3a6b54bce3726f3f772d46a143e920985e9a8d952e48 postgresql-server-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm a8cee20e1d29b96506336c399ae0779bd77206332803b48ed03e29206909278b postgresql-test-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm b292efaeec4a32d94038d7a28892f9237c9d2c504764ac5b3ffefa4342791b7e postgresql-upgrade-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm c6542a019fd5e5350158bb7d172c52ba24a958fe531e05c8791345d50383354b pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.x86_64.rpm c660056970f41edeec199c6634387c8235fcf981c34cdf3f74d9d3b3fd36eb63 postgis-client-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm debbcc969c9601f47c100348a6df2f3e251ab55ef6eb8864238bc4da64a9ffdd postgresql-private-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm fd6d8094357be219d1d3ca1a89840dd01300aabc268dcdd951903d99cc8031dd postgresql-upgrade-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm fef39b9191da2394a5af58a44a503e0d7dff2464b6a950ce3182a78e0046b1f9 ALSA-2026:67524 Copyright 2026 AlmaLinux OS 0 1 Moderate

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.131 Runtime version: 8.0.31 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [almalinux-9.8.z] (JIRA:AlmaLinux-252247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-targeting-pack-8.0-8.0.31-1.el9_8.x86_64.rpm 05bcfd069d7528bb1b297ca043cbba9e1213561ef6a2fcfd484feba94850012a dotnet-sdk-8.0-8.0.131-1.el9_8.x86_64.rpm 0a44ff594541962059a8aedc20d80eb37eb70f2387ef36bef21c497ffa08148d dotnet-runtime-8.0-8.0.31-1.el9_8.x86_64.rpm 16722f723da45b512c796561a4ad2101927dfa6dc49b8fe60abad57dc45924b7 dotnet-runtime-dbg-8.0-8.0.31-1.el9_8.x86_64.rpm 2b90d9c2884724c25c6e4fb74728e0718a390824280cb43fb39e0063d8a6d0ff aspnetcore-targeting-pack-8.0-8.0.31-1.el9_8.x86_64.rpm 320b667d34706ed9cb7780655c63a0231a6993c408a45f44f0ac2b0c9b3199b3 dotnet-hostfxr-8.0-8.0.31-1.el9_8.x86_64.rpm 87bb7f9687cded5eb80774117b2cb668766d2200a287d8fd2ba13cc1ca7ac9c7 dotnet-sdk-dbg-8.0-8.0.131-1.el9_8.x86_64.rpm 975ceef60b2aa4ced727578713e6ad6beeff03d4d3099e6a33985c7842b8c626 aspnetcore-runtime-8.0-8.0.31-1.el9_8.x86_64.rpm d39554ef67a9d2c7dac601200f401a7b31fad4601842bdffa4d04a2fd0ad4588 dotnet-templates-8.0-8.0.131-1.el9_8.x86_64.rpm d7076a245f0128b241cf10e4d78194eef415fb9dad8cbd39631cfb0b636e50d6 aspnetcore-runtime-dbg-8.0-8.0.31-1.el9_8.x86_64.rpm da837b54257bed286b46f37db8b8aad7c7bf64674f5fb58e53997a06a4ee3012 dotnet-apphost-pack-8.0-8.0.31-1.el9_8.x86_64.rpm f6d23f589cdc592cc33a6709f48d6bbf17d8f554f5b43e2e39ebb3fff913e3cf ALSA-2026:67583 Copyright 2026 AlmaLinux OS 0 1 Low

rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fix(es): * rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd (CVE-2026-19654) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rsyslog-8.2510.0-2.el9_8.1.x86_64.rpm 06ac0264a3e73a3a1a82b0dbac8dcd1806914b1c1e025bf5fe294e99cf0e968b rsyslog-crypto-8.2510.0-2.el9_8.1.x86_64.rpm 1391c273c2d442362a8e3ad5bdb13a0a999c69048d0dc838842d0185db8130d6 rsyslog-logrotate-8.2510.0-2.el9_8.1.x86_64.rpm 184f8ce8e7781c2343ec663568997c8ff438a45d4e4821217e235eaa5e5bc878 rsyslog-kafka-8.2510.0-2.el9_8.1.x86_64.rpm 57e9e4008d92bade8d67ec13fc17f7e5745e7e76b8857ca36cdedaa544a9ae74 rsyslog-mmsnmptrapd-8.2510.0-2.el9_8.1.x86_64.rpm 600870decd8824d3e5bcbb37419a2978b39d372cb8cc108f3d102cb460fec674 rsyslog-udpspoof-8.2510.0-2.el9_8.1.x86_64.rpm 79eed2cae678af0557f43b36f7ba56ce6370377b2d1e4ea7f20571f6b2e3f0b3 rsyslog-pgsql-8.2510.0-2.el9_8.1.x86_64.rpm 7d24a6bd6bf06c80108759e84576beb2ad7765d358708b7ae1aba150f50e1402 rsyslog-omamqp1-8.2510.0-2.el9_8.1.x86_64.rpm 7dca64ed38931066d64298bcc7e0a29d274ed0c1b67f07724ef4ad321af12370 rsyslog-doc-8.2510.0-2.el9_8.1.noarch.rpm 7e1e6aa258add26ff5ceda1802063e7d7c8a36b97174ea51ed0a00f5af992fdd rsyslog-openssl-8.2510.0-2.el9_8.1.x86_64.rpm afa0689e174e8d6912ec75286f7b8646b588556dd2c98750590e5d065edcd986 rsyslog-mmfields-8.2510.0-2.el9_8.1.x86_64.rpm b278340a8a2c2d19bb566c85d1d51ad2ffc04b24147925e789ce7e9920512d58 rsyslog-mmkubernetes-8.2510.0-2.el9_8.1.x86_64.rpm bb7eece8baeb40395b9881c4155b818a66e4a62324153a0830ac6ab3195dee85 rsyslog-mmjsonparse-8.2510.0-2.el9_8.1.x86_64.rpm bc8b1f45312beb15310f39480070b5e24ecb29890e7ac12791055551a1c332bb rsyslog-gssapi-8.2510.0-2.el9_8.1.x86_64.rpm be558028e96a8fdd2513bf6283c1c7a4f94a0abf9b0316cb506f2fd3bac88aa8 rsyslog-mmnormalize-8.2510.0-2.el9_8.1.x86_64.rpm bffbca25a590fa1ab912549e7a69ae748f1c37535471de03aa9df316b78a5fc6 rsyslog-mysql-8.2510.0-2.el9_8.1.x86_64.rpm c6848a238c6f0f6c121ccfb5de5b3c2ca6e808845fae5b5de5b797524a777881 rsyslog-mmaudit-8.2510.0-2.el9_8.1.x86_64.rpm c7d76912b736cc94f5c0d72b0b7ed49caf7f422020f05577805f33b53334e57d rsyslog-snmp-8.2510.0-2.el9_8.1.x86_64.rpm d119cff1a3feb66805406e5d595f2ea782914b15dae469d998f28d4bda2796f2 rsyslog-gnutls-8.2510.0-2.el9_8.1.x86_64.rpm d59ef9dd4924a09d4a4b962cce21202a56e997d4c5ca99b3973035248f033262 rsyslog-relp-8.2510.0-2.el9_8.1.x86_64.rpm f80c24c7f83774f98fa8943a22c992e74383496ee139cd968653854155b061f0 rsyslog-elasticsearch-8.2510.0-2.el9_8.1.x86_64.rpm f9ea0ed739057349148706274f464ae29e4bacd3c1f2cafc3a990e84f1fd36be ALSA-2026:67585 Copyright 2026 AlmaLinux OS 0 1 Moderate

firewalld security update

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fix(es): * firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firewall-applet-1.3.4-20.el9_8.noarch.rpm 5cb3cc37cdc25aae8a41cec2b39ef3b7bcd160ac849b08a5008671a9e36be1e2 firewall-config-1.3.4-20.el9_8.noarch.rpm 91980f7225628e2cfa8c80686f24a59cdeae2ea391e7e6ef4a95ff8cd7390f3f ALSA-2026:67613 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.112 Runtime version: 10.0.12 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [almalinux-9.8.z] (JIRA:AlmaLinux-252319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-runtime-dbg-10.0-10.0.12-1.el9_8.x86_64.rpm 0a18e1276b2d707356a3dfe4a2e5e026ebc6bfcfb793b7941df627e4d8cb033a aspnetcore-runtime-dbg-10.0-10.0.12-1.el9_8.x86_64.rpm 15e7fd41761cf20bd96e8adafeb11fe71affac1e28f91d64ce236f00b90fa74f dotnet-sdk-dbg-10.0-10.0.112-1.el9_8.x86_64.rpm 275778d9f384d285f64a8cabd9dcd811f201373e3b6e33aaa19c155e6cfa0a52 dotnet-hostfxr-10.0-10.0.12-1.el9_8.x86_64.rpm 5513b5b1360f00013af042124f1b5725920fcae6a09fe38433882e99755d00c9 aspnetcore-runtime-10.0-10.0.12-1.el9_8.x86_64.rpm 6f7ff3676342d00ad20493f26d39d7517e25484c5d61cddca2faad6d48482678 dotnet-templates-10.0-10.0.112-1.el9_8.x86_64.rpm 8ca9502335dbbed4fff4546d9214fd7b9cd9e9d31f0cc6a2f6b7fef5275aea9c dotnet-runtime-10.0-10.0.12-1.el9_8.x86_64.rpm 9ce951d098294c6c00f79a34e824b822766a5a48de9c9f9427d6797d04556c88 aspnetcore-targeting-pack-10.0-10.0.12-1.el9_8.x86_64.rpm a12595fea72f83fc0da00f96bceb6cafab233b5bc6e8c7ca3904379fb99deed6 dotnet-sdk-10.0-10.0.112-1.el9_8.x86_64.rpm a3339cc5423c717fe63e6a087e6a241c96e32d6f81880f71cb8138e252405f81 dotnet-targeting-pack-10.0-10.0.12-1.el9_8.x86_64.rpm b10341ac4b3c6c513b1ee7b25438fe5807725ed87380f07d15e08cb575227370 dotnet-sdk-aot-10.0-10.0.112-1.el9_8.x86_64.rpm ca4b6004ec960345713bcf278c87f0beaded88e2a4db44da4a966ba644a00d59 dotnet-host-10.0.12-1.el9_8.x86_64.rpm f1f1b2b6ed58dfd4d1e9a189e922f35bc4b4f3570c09e7e5b00d2abd672e2889 dotnet-apphost-pack-10.0-10.0.12-1.el9_8.x86_64.rpm f3b9c61814778ad08de7d17f21c2405ae41ab1f852578d02c7294ebb529ad3fa ALSA-2026:67614 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.121 Runtime version: 9.0.20 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [almalinux-9.8.z] (JIRA:AlmaLinux-252278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-sdk-9.0-9.0.121-1.el9_8.x86_64.rpm 0f280593e33e9c367080b015eebafb611abd81fa4878b912d18b75fc4c07ccb2 aspnetcore-runtime-9.0-9.0.20-1.el9_8.x86_64.rpm 1e9c8491009ddbd745f7536008016b69aba1ab6889325371bdbe4bc756dacf6e dotnet-runtime-9.0-9.0.20-1.el9_8.x86_64.rpm 4743a2fbd6c8085e8f562ef1c5f9ac05652392e51676bf69a43b2810a048c285 dotnet-runtime-dbg-9.0-9.0.20-1.el9_8.x86_64.rpm 605ab18cf54de11abc5e0de24868d908df6800c1c386e78a564ea8f8a8690185 dotnet-targeting-pack-9.0-9.0.20-1.el9_8.x86_64.rpm 60dd95f226cb256d58ae7e0316d68b229424269bea863b40584092d7eaeabc73 netstandard-targeting-pack-2.1-9.0.121-1.el9_8.x86_64.rpm 686eeef87781cbd84faf664289f6eeeb552b5b342af3a36b160405be9f665d3b dotnet-apphost-pack-9.0-9.0.20-1.el9_8.x86_64.rpm 79774a391de9cafbf930d0860b1839ab24dd2ab345fa16896787b4ef3fc54eef aspnetcore-targeting-pack-9.0-9.0.20-1.el9_8.x86_64.rpm 90288fae02914d470a911f1552ab87b6263ef5ccd463914198133d2764005135 dotnet-sdk-aot-9.0-9.0.121-1.el9_8.x86_64.rpm b347d9bbbc3380ce4daee924d5deb7c5d5bb1dda8a7788d692ad46b3552f4027 dotnet-templates-9.0-9.0.121-1.el9_8.x86_64.rpm d9c63cbda91a5cace674b7427f6f1f5b4e3740ae975c700bffa62957f59f4c3b dotnet-hostfxr-9.0-9.0.20-1.el9_8.x86_64.rpm ddcfc207628e33b5773b20b0a71f07f6402fa761b38e4dc83a93111342ebea92 dotnet-sdk-dbg-9.0-9.0.121-1.el9_8.x86_64.rpm e96fa280ca5dbeead8058595a64c227f27b2c1cc60de784df7b080ecde05abde aspnetcore-runtime-dbg-9.0-9.0.20-1.el9_8.x86_64.rpm eb5e8fa5cd485bc439c6c269840bc2901fa6f87114564d030d7c83e1bb97c2f1 ALSA-2026:6766 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python-unversioned-command-3.9.25-3.el9_7.2.noarch.rpm 2cf74a7249e41fac31789c663ad5c35ecf474b413c7548205b08142ecc62cbb5 python3-devel-3.9.25-3.el9_7.2.i686.rpm 5af5798c2210a06115c9b239ac8439f11ff36b167dbfd3114be5b9655cf301c0 python3-devel-3.9.25-3.el9_7.2.x86_64.rpm be0c1cf575a3cca16b8d162a14b8209c327f76e198545440453d72cfc714fe0a python3-tkinter-3.9.25-3.el9_7.2.x86_64.rpm ce7329a0c7067ce766afe139cd3b6412e8d7c880d88dfa84b2882b551d0f17cc ALSA-2026:67831 Copyright 2026 AlmaLinux OS 0 1 Important

tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es): * tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata (CVE-2026-73066) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default tesseract-4.1.1-8.el9_8.x86_64.rpm c4f7f2d676402f183a8c480594aee445cb849344de2506453a19111195b23c2d tesseract-4.1.1-8.el9_8.i686.rpm d0c02e25018a5f52607bae917ea5aa5be82afbb221ce3aa6216a3dc3786968f0 ALSA-2026:67848 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476) * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats() (CVE-2026-16238) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow (CVE-2026-14676) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgresql-plpython3-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 012245838f3d860ba5f40f83a88d50bd8c0d90eb8dbf400834fd13567d87512e postgresql-test-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 02ad593bd3137959fc272602fcb24f7472d78a2dd9e0aa2a3094d5a45e7f7861 postgis-utils-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 077591f0af5ef2567852b12f99b96aad9824dcb3975a3c4b7bf8b31cfef0b9fe postgis-docs-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 0df02de20003dfaa1d0d8ae6fe7c0c68077ce2c698be4aac2629d26df13abb77 postgresql-private-libs-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 1a22a62003a6c8448e591bce4de383b687d13a297a29ca65595ed8d7df1e9d47 postgresql-contrib-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 2199f6d13d817ae1161f6d8aef814b825709fef14070ccea9341841924a8a6f5 postgis-upgrade-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 2388a805f13eb5a577b1501710d186b993724ee644f06980fda0b734e5d3dd33 postgresql-upgrade-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 2f4cf4fca3fe8ce018b361098e1df2408978782c28e1accdd0cd27fb96036673 postgis-client-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 32a96419992cf65f9ebb101fbbbafc57bfb1908664917607dd93dad01899d7ae pgvector-0.8.1-1.module_el9.8.0+234+5456f35d.x86_64.rpm 73073e39b560916558cf7a8f43740f64b0941058d81dc88eaa8172312aa3ee09 postgresql-docs-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 89db9baea7b0071499421ab18b06d4193f19cb476ef490f92ebf0796468be197 postgresql-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 8d6fe45c130dc8df375d1dd7bbc2999683719c78e56ef8cd44d7fc7d0ff369c6 postgresql-test-rpm-macros-18.6-1.module_el9.8.0+310+22372bcc.noarch.rpm 8eaf675017f8792c3580aef927e0dbee1bcf5fcec60c7539b7858bdd65d78062 postgresql-server-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 8f25e0adbcdaa240cf7b969dfaae3bf7d8eac52139b5a290a5a39b63d97873b4 postgresql-upgrade-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 9cad1f636d0143d8703571c053ffd66000438a3d11edf0ae609ad5f91c8e1f49 postgresql-pltcl-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm a3d954d43929db978e756917bdb986153ddd0d521cbadf2edbbc524b465de09a postgresql-server-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm aa994348551d56bad4b995d536fb71847103ceda6258227192b8e802b8ac8643 pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.x86_64.rpm ac5c05b5931f90b0f9c1905b375a1b91b30d967f960e149d92265259d6d9a484 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.x86_64.rpm c187a7e2e80a5628dd7c120a1ad9bd8241f2f34a57986c68a2e92ddf59d6ab13 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.x86_64.rpm d6732e77dcbe9d5cb8e802b5fe884dfcc1d7b2857df1edf3c98988bfcf832e03 postgresql-private-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm db79e12f1aac879c496e06a6c1cb480b1fe0a6c982504edad112f8b841c5b5e9 postgresql-plperl-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm eb669b0e4ce1a29e7a7fec9bbd9ec50bfdccc08740b3d0b0ce9e7c6492c0ad96 postgresql-static-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm f5b3f8604d61e4a5b1291e89e2a6f685f3a394e3920608e376462dd475a11df6 postgis-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm fbbcba344dac7121602e4a15b506758a2078ba2c78b99a84d6617b337ab2d050 ALSA-2026:67873 Copyright 2026 AlmaLinux OS 0 1 Important

corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (CVE-2026-81665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default corosynclib-3.1.10-1.el9_8.2.x86_64.rpm 21eb867ffa9c73887949c38ef3f73a3eb4d794c5abaa53db47a05f73d18a28cc corosynclib-3.1.10-1.el9_8.2.i686.rpm c8de53f3ba392e373e60daba7260709779741111bec6bc864d98769acb266c64 ALSA-2026:67910 Copyright 2026 AlmaLinux OS 0 1 Important

libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fix(es): * libevent: Libevent: Denial of Service via malformed RPC data (CVE-2026-63383) * libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption (CVE-2026-63387) * libevent: Libevent: Memory corruption due to use-after-free (CVE-2026-63381) * libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header` (CVE-2026-63384) * libevent ev[http:](http:) Multiple HTTP Parser Bugs Enable Request Smuggling (CVE-2026-63382) * libevent: Libevent: Arbitrary code execution via heap out-of-bounds write in AF_UNIX handling (CVE-2026-63388) * libevent: Libevent: HTTP header handling bugs create risk of access control bypass. (CVE-2026-63385) * libevent: Libevent: HTTP header smuggling allows authorization bypass or cache poisoning (CVE-2026-63379) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libevent-doc-2.1.13-1.el9_8.noarch.rpm 56b63bfc369e5e5d2c14e2056b0e942db4cea5e72e17fb9875b72dfb75749de6 libevent-devel-2.1.13-1.el9_8.x86_64.rpm 7a3933ee380540b1211bffc3b9e4d6fc7581ae1e31a8c060b2df91e8c1179c86 libevent-devel-2.1.13-1.el9_8.i686.rpm ce0adbfc1b5836c990de649ba287da83feb1fe2adffad88e14837e7e94b44a99 ALSA-2026:68234 Copyright 2026 AlmaLinux OS 0 1 Moderate

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709) * libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libsoup-2.72.0-16.el9_8.3.i686.rpm 14ba6c8b500b406354607171315bd1d069581ef6bb964678dab7c13e1badafde libsoup-2.72.0-16.el9_8.3.x86_64.rpm 2c971af87f71195e0a2fa8fda73121795ae77fbe35d754bfbd738be334d63b0a libsoup-devel-2.72.0-16.el9_8.3.i686.rpm b46aa508829645afc3e3d821981dd1ae24f02f0a657ef54d8a1de35c3996fd41 libsoup-devel-2.72.0-16.el9_8.3.x86_64.rpm dc04a76f8ab49f5ac5574d9812b551889ab8ab5d285b85f70047a08fe1208a4e ALSA-2026:68292 Copyright 2026 AlmaLinux OS 0 1 Moderate

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: DNS cache poisoning via UDP source port predictability (CVE-2026-50252) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-unbound-1.24.2-3.el9_8.6.x86_64.rpm 212fb1c07e76549dc21bbb7b5b4e6207a3af1701f72f969956092755204f4d90 unbound-1.24.2-3.el9_8.6.x86_64.rpm 2d1c8074d1bb1a6a7478e1abf2496669cd4445014564cfaa740eb4578403fb46 unbound-dracut-1.24.2-3.el9_8.6.x86_64.rpm 5686ab33d6e31d7f4bb8e34cd2f1df903588f198f31563d4c53a3ff5a356b0bd unbound-libs-1.24.2-3.el9_8.6.i686.rpm 7a1605d698262874a24be9d8f0bafe1a397e81e19b2fde76853d136c8672d29c unbound-libs-1.24.2-3.el9_8.6.x86_64.rpm 8a1699b2ff4b3efd560a905a935555461944c3f49dff2849ac0110e0139145a1 ALSA-2026:68570 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910) * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043) * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133) * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) * kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298) * kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003) * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243) Bug Fix(es) and Enhancement(s): * gfs2: filesystem withdrawal rework [almalinux-9.8.z] (JIRA:AlmaLinux-252540) * The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [almalinux-9.8.z] (JIRA:AlmaLinux-252544) * gfs2: Get rid of sd_async_glock_wait [almalinux-9.8.z] (JIRA:AlmaLinux-253986) * [AlmaLinux9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255217) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [almalinux-9.8.z] (JIRA:AlmaLinux-256733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-doc-5.14.0-687.49.1.el9_8.noarch.rpm 0d9dd872dadbcd5cf82a6512c7f06514f376cf8dc0bea0c94bce2bf99a03d677 perf-5.14.0-687.49.1.el9_8.x86_64.rpm 161c2afb19ab1090ac99c20a9f1e200f83607b9d57fea85ec9a11805e7b4b265 kernel-debug-devel-matched-5.14.0-687.49.1.el9_8.x86_64.rpm 24a6d7b5aa3bfa5cf008c9111445e6f731c1687c8fb8bd8c35e3d1189c02ea52 kernel-debug-devel-5.14.0-687.49.1.el9_8.x86_64.rpm 258ab3358b0b4860e9770d89d63f605e53cbed0f9487b9ce9b01a823e7d69ec8 kernel-devel-5.14.0-687.49.1.el9_8.x86_64.rpm 29e75d551d93f8b2bb5a94452e14debcae076ed74fe98ecb767d668f0a1d45a0 rv-5.14.0-687.49.1.el9_8.x86_64.rpm 588077701c88b7820ba8ae8938686db36a9705a371a62e62dd875bb05ada320a kernel-devel-matched-5.14.0-687.49.1.el9_8.x86_64.rpm 69cac08ba7e8f8e055bd296fed01ca0f902e60e24a33dfbc785f92bb76636e42 rtla-5.14.0-687.49.1.el9_8.x86_64.rpm 6b561a6cd2352adac730e7cf8dbc4da7fccbe36846f4ebfdb9228d9659f0a4d9 kernel-headers-5.14.0-687.49.1.el9_8.x86_64.rpm a954d31c1068befccfcc52694a91c8aff2dd76c6ed5bb7713b812cb187ab7fde python3-perf-5.14.0-687.49.1.el9_8.x86_64.rpm ab97fd15b6c46ab5f2d80f33c849a05488b82fdd30dbf8558abaafc11d5acfca ALSA-2026:68660 Copyright 2026 AlmaLinux OS 0 1 Moderate

tomcat security, bug fix, and enhancement update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) * tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication (CVE-2026-43512) * tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated (CVE-2026-41293) * tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication. (CVE-2026-42498) * tomcat-coyote: tomcat: Improper Authorization allows security bypass (CVE-2026-43515) * tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) * tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) * tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) Bug Fix(es) and Enhancement(s): * Tomcat fails to respond to client connections when using Java 8 [almalinux-9.8] (JIRA:AlmaLinux-257456) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default tomcat-docs-webapp-9.0.120-2.el9_8.noarch.rpm 6dfc559a43177a819c06487fa6024ce010776c6b5e89381af229eb5fc7aa5c67 tomcat-admin-webapps-9.0.120-2.el9_8.noarch.rpm 75578cde5feced53de7864e3f3a5ebbc277a2f27bce1aa5898a0b3f5af0b0daf tomcat-el-3.0-api-9.0.120-2.el9_8.noarch.rpm 9a379f7274681c05c662801d6ba3485760cd41eb494ffdfad7f2c63efcc2edd3 tomcat-jsp-2.3-api-9.0.120-2.el9_8.noarch.rpm bc687b69d033983fc9896992f2334962a6b3637f01d6920e9199c39b38abf192 tomcat-servlet-4.0-api-9.0.120-2.el9_8.noarch.rpm be94b701599d2a1c328fabc0a744a4947ba3af4d7affbf0c838b81dd1e299b68 tomcat-9.0.120-2.el9_8.noarch.rpm c0bca291238df35d1177e1069f1e00b400684ea0cef283d1cf2ed9634852fa93 tomcat-lib-9.0.120-2.el9_8.noarch.rpm d657d0abbb1d15d592b39a564ae6065edfe97aed367809d4685bc0c968cfba40 tomcat-webapps-9.0.120-2.el9_8.noarch.rpm e55f968b0ef13f637323c703d64ca51bd1d4a72f4b9b284dabe683300dbd0287 ALSA-2026:68786 Copyright 2026 AlmaLinux OS 0 1 Important

perl-Net-DNS security update

The perl-Net-DNS package contains a collection of Perl modules that act as a Domain Name System (DNS) resolver. It allows the programmer to perform DNS queries that are beyond the capabilities of the gethostbyname and gethostbyaddr routines. Security Fix(es): * perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records (CVE-2026-81928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-Net-DNS-1.29-6.el9_8.1.noarch.rpm 1fad069f9c93178d45147b2a3fd0e9348b0d69899674cf45546ec8cd0352bf52 ALSA-2026:69098 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154) * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173) * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161) * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176) * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984) * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804) * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713) * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783) * webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376) * chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718) * webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340) * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351) * webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596) * chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635) * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default webkit2gtk3-jsc-devel-2.54.0-1.el9_8.x86_64.rpm 4083a2e748606cd4d20ed9cd99fe52e1702749e49ef57de7a3875f85a7a54a16 webkit2gtk3-jsc-devel-2.54.0-1.el9_8.i686.rpm 6ff571862e77603fe948c54e23843b38bb469eed7ec3fc40dcabaa565bca8475 webkit2gtk3-devel-2.54.0-1.el9_8.x86_64.rpm 723a3d4235d0029be891a98f2aba9822337c3ba44856ec40c41e25469396b0ec webkit2gtk3-2.54.0-1.el9_8.x86_64.rpm 96b7dfa85ab65b830a95264b11a3911cf80e51a97fa8af18d1bf59f3ee9a679f webkit2gtk3-2.54.0-1.el9_8.i686.rpm 97c0fe75c29db9a08fa19f0e47bab10fa4cfb249e1b4d1e78e87a65106155c14 webkit2gtk3-jsc-2.54.0-1.el9_8.x86_64.rpm 9cbfeaa2b9bcdd0b1f9daee53b720279585f947cb1ecd3cd735bebff62aa33cc webkit2gtk3-jsc-2.54.0-1.el9_8.i686.rpm b7dfc7e95d64c6da8a1d9d5e790a82c3653a495f72fe5889230be8f377c3c3be webkit2gtk3-devel-2.54.0-1.el9_8.i686.rpm ff3919cc3a8424afbb3d5d7f68e4458267fed2b2237e88240d7effc2594b7971 ALSA-2026:69100 Copyright 2026 AlmaLinux OS 0 1 Important

gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow (CVE-2026-18297) * gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted Digest Authorization/WWW-Authenticate header (CVE-2026-85150) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gstreamer1-plugins-base-1.22.12-8.el9_8.2.x86_64.rpm 79a8842996de27c8aac88997744ab6cf0400f3e43b1ab8bf9a1bcc33b7a3898f gstreamer1-plugins-base-1.22.12-8.el9_8.2.i686.rpm 8c376c29ad743aa24d8d6326847cfd1b4432a68b7fd1df0b075ba83d79385900 ALSA-2026:69123 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default sudo-python-plugin-1.9.17p2-3.el9_8.1.x86_64.rpm d42493119216caa1aa61bb6f16d0826f9431bdb6031eb7d79adcfc9bc06c1aaf ALSA-2026:69126 Copyright 2026 AlmaLinux OS 0 1 Important

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: libcurl: Unauthorized connection reuse due to a logical error (CVE-2026-8458) * curl: Information disclosure due to uncleared proxy authentication state (CVE-2026-8927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libcurl-devel-7.76.1-40.el9_8.7.i686.rpm 628658ed9b480da367eae8f5f7014e636e133ebf0689445b692b8747ab6cb3b8 libcurl-devel-7.76.1-40.el9_8.7.x86_64.rpm 641c14bcb7cf79824104a8e1cb03cf2df337b30b2ab1a40baed961dbb3dfef94 ALSA-2026:69130 Copyright 2026 AlmaLinux OS 0 1 Important

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pam_ssh_agent_auth-0.10.4-8.11.el9_8.alma.1.x86_64.rpm 4f8051c88142ba8a9b5d57336bd48c6e5579348df6bd9d68a911db82f026a2f0 openssh-askpass-9.9p1-11.el9_8.alma.1.x86_64.rpm 5165d940cc316162dfa3cc25ad5ffd474fccd91e91c9e4584564321db8ee1eca ALSA-2026:6923 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647) * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654) * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784) * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.x86_64.rpm 0549ad427a9671da3f7f7f4a71d681029dbc9b055dcb5f2f8e9f6eed6ec758a8 nginx-mod-mail-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.x86_64.rpm 3fef7dad5ea1a4a2d167646bb7c4e0349aa040112ba294a3fe91da231064c1ba nginx-mod-http-image-filter-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.x86_64.rpm 7bf22a5444aff1f66838a95615bfa2e0d5369f7a339afcac64c88e630da52899 nginx-mod-stream-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.x86_64.rpm 7d5f17e243a921127a9c04bbba7d6538df7954ed17b15df5e63aa56013ed1e04 nginx-core-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.x86_64.rpm b70c85550ac0ac6b9e84a6cdc9e2d116016f439a30ef7d03740add7982674320 nginx-all-modules-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.noarch.rpm b799c8ef26d44cfd0262668c4eb7f4175b41eaa8627ceaeb3d6a091a41252c3b nginx-filesystem-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.noarch.rpm b8d466c7bada98dc15166388e2494cf943dacbd9983af9157f1b1745b862687c nginx-mod-devel-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.x86_64.rpm ce83fe90586a91479c1358b38da65f8727a739b9c66635d00db94a59be0f5f6b nginx-mod-http-xslt-filter-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.x86_64.rpm ebdd218c876d3a3c1b463019d9b109e218782db23c314945d46b60a770ced03b nginx-mod-http-perl-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.x86_64.rpm f0c2305de906903691c04273debf99cc3ddc676e9caad97eee6aebb1330d8a3c ALSA-2026:69293 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering (CVE-2026-42502) * github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178) * github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy (CVE-2026-55677) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default osbuild-composer-core-165.1-5.el9_8.alma.1.x86_64.rpm 41e406c5a75576755cff04d342988a6891bd7294c0c509811793ced27f4a7047 osbuild-composer-165.1-5.el9_8.alma.1.x86_64.rpm 81cace24746a80256425ae8ceae31addd0eaa422c5aa9aef1d168f527bf373af osbuild-composer-worker-165.1-5.el9_8.alma.1.x86_64.rpm b08bfbeb8101cdcb56cf28b8c81d9f7c1e1b666c44d2a5703f8527628a8964bb ALSA-2026:69462 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024) * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019) * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031) * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011) * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028) * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013) * firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012) * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014) * firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018) * firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021) * firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008) * firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007) * firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025) * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029) * firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firefox-140.16.0-1.el9_8.alma.1.x86_64.rpm 2a0faedc7748d06abf524401c7d4e77ef995b5136c8f817afa9414c80c92b500 firefox-x11-140.16.0-1.el9_8.alma.1.x86_64.rpm beb23797ddbd24deef9289113f7332e27976ed985d416dc6ce254f9d270d7e15 ALSA-2026:69540 Copyright 2026 AlmaLinux OS 0 1 Important

rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fix(es): * rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function (CVE-2026-78002) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rsyslog-logrotate-8.2510.0-2.el9_8.2.x86_64.rpm 12170ba2fcae326371a441958c2612947a30ca3b5a45fb0c8d51792ecdfc3eb8 rsyslog-8.2510.0-2.el9_8.2.x86_64.rpm 17d126f2bada35495d1b5b9a92bfdaf39116ebeb404947a084f366844009a7b2 rsyslog-mmsnmptrapd-8.2510.0-2.el9_8.2.x86_64.rpm 1ea17e2601ad0748ea82572b7dc2c7004f562e787c1308306c5e3ca48bffd659 rsyslog-kafka-8.2510.0-2.el9_8.2.x86_64.rpm 234b403e2a301819472c5565bb21b734266c66d50029976e774af8c9779cbf51 rsyslog-mmaudit-8.2510.0-2.el9_8.2.x86_64.rpm 29b89e9402f7e4144dff99319a5ae08c3ac053d3f9c58f0a0e8086a6c9d9640c rsyslog-pgsql-8.2510.0-2.el9_8.2.x86_64.rpm 3dbcc126837bb04d98785a62a05fc7aa9c5f57fd79e3bb6715f88be20c417dc7 rsyslog-snmp-8.2510.0-2.el9_8.2.x86_64.rpm 44a62ad7bdbfa9d51c9316b0b153192694d442a1907e39b80dccd47b4bced5c4 rsyslog-udpspoof-8.2510.0-2.el9_8.2.x86_64.rpm 457a80935235f51126747a0051a02468a3a474e0b4eb6b039d607e3568025453 rsyslog-gssapi-8.2510.0-2.el9_8.2.x86_64.rpm 76a54e329b143d382f99e8cf0d1640e8bcf1c9bd135ef5c16e5799f718eb7593 rsyslog-doc-8.2510.0-2.el9_8.2.noarch.rpm 77faefb38fc694fcc0ca3f08b6d0d89dbbd605626392bcfc402581884981285c rsyslog-elasticsearch-8.2510.0-2.el9_8.2.x86_64.rpm 8597960c499beb4a67789bf9b86314a1b12c2087071e87150d168312dde685b6 rsyslog-mmkubernetes-8.2510.0-2.el9_8.2.x86_64.rpm 8a74ed96c9695735a5ba4e1f66c8db77f2f96c820bf9820198d87dc36c7f27ee rsyslog-omamqp1-8.2510.0-2.el9_8.2.x86_64.rpm 95abe6622d93019dea49db76c7ef978ade8180c30346380d132170d397c30287 rsyslog-openssl-8.2510.0-2.el9_8.2.x86_64.rpm a983b0de051e695deb6993a6e17c373996f265f8015ced4acc24ac03551429b4 rsyslog-mysql-8.2510.0-2.el9_8.2.x86_64.rpm ae2dd9e2602b7989141619a015917778d2f24422df4ac41554afe861171d53f9 rsyslog-mmjsonparse-8.2510.0-2.el9_8.2.x86_64.rpm ae990d596ee7a12ac04798c31a5062af1e935e3116d7a3f8bf0ba3d9babeba31 rsyslog-relp-8.2510.0-2.el9_8.2.x86_64.rpm c123da9f324ebc9200ed65d12b801512e28a140262306adc6dd9126e73a64429 rsyslog-mmfields-8.2510.0-2.el9_8.2.x86_64.rpm e3a6c6d06e928107dbcd06041393724e783cece6da02ce37945fd721c537dff4 rsyslog-gnutls-8.2510.0-2.el9_8.2.x86_64.rpm e836c5a65a9affcec900b1433499aea6a76ddee6817116b2aad94b47e06ae6e6 rsyslog-crypto-8.2510.0-2.el9_8.2.x86_64.rpm f3a4b00a8809007365f804c8df40811f84bee0f0e4fa1736cad5d3caaf3d8330 rsyslog-mmnormalize-8.2510.0-2.el9_8.2.x86_64.rpm f690cce74ad46cb987573e337eb50dccefa86cbb64a2d4e3a3bf956c25ebb5d5 ALSA-2026:69607 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgresql-upgrade-13.23-6.el9_8.x86_64.rpm 16c2b3b963eab8162b45a20e4b349e368defc1847a439a80f5daa5274db89cd6 postgresql-contrib-13.23-6.el9_8.x86_64.rpm 26131bc6028db37bc8d2b2387aeb13637a1a5e01ee4d6177b97af46969e8724c postgresql-private-libs-13.23-6.el9_8.x86_64.rpm 35801f147d03495e9603b671411b21f40b6b2c463368668db26b54e78372ac40 postgresql-plperl-13.23-6.el9_8.x86_64.rpm 4a6fb601dcf59f593825c5991e34a7332036b45c6304fe909a5235c6ffb4153f postgresql-pltcl-13.23-6.el9_8.x86_64.rpm 5bef8daf221b217e5bef9806b76695aafa4f76111dbbaf46046f522575e1c365 postgresql-server-13.23-6.el9_8.x86_64.rpm 9d4303950f66b8dc88b44fa652d63d5c0acc614b8754789ef5a334a570321f39 postgresql-plpython3-13.23-6.el9_8.x86_64.rpm c0980565bb741d58b701498bbf5346d78efd6d9803f3f69cfbd83b2663147fdd postgresql-13.23-6.el9_8.x86_64.rpm f0ec54eccebbeffa74f1b6f44f171bb8b8b1b143540fb0783c8a2adf99917a5d ALSA-2026:69608 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files (CVE-2026-68515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openexr-3.1.1-3.el9_8.4.x86_64.rpm 29559c6467011b5cb224957424681e571dd7bfbaf121b78f06ca5eeb26170594 openexr-libs-3.1.1-3.el9_8.4.i686.rpm e1e21b61b12c7006cafd1a2c72bb48d7f3334c7c9521b7db48bdac930e9048e2 openexr-libs-3.1.1-3.el9_8.4.x86_64.rpm ed0b60cd431cb281f7c0d73160f96b29fa1044d9d9b3ae54055e9bb0e9c2dfa2 ALSA-2026:69914 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:15 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgresql-upgrade-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 0af31a91684f1a7c4f7d562c8cfbeb6d9b270f5983e8fd70377a0ec641e9a899 postgresql-server-devel-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 170a74405de406a81d692871a220d87f5a526904a1ea4d019effb137078dc3f1 postgresql-server-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 1a461bcdaaa7df03dbe7592129e755fd6c00e9333ada4a62ad711ff46d74ef80 pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.x86_64.rpm 1c17fe11db244a9e23cf757cfe3615a7256f34ef84e836c69f08b5d37efc9ea0 pgaudit-1.7.0-1.module_el9.3.0+52+21733919.x86_64.rpm 1e7dcca31912928f8f81927e2ee52575148e6f737824c95c15b2f94d0d426bde postgresql-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 2f13cbba1041399c64a8821e3ab4208f3666e50a9eab39ff95ac855f8be91345 postgresql-private-devel-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 418ea3ac5431036b4ba3141299bb43ca0c452e4dba53b3bbb4439dac19eb3378 postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.x86_64.rpm 444045e97d9babf7b4e33fb62d3d2c649646ff143597832c1d6548aa49dd24ba postgresql-plperl-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 45c789901f5cd4445bd053d188ba6015741c315f9877f0df9a2ed1b532f8654d postgresql-test-rpm-macros-15.19-1.module_el9.8.0+318+764e137c.noarch.rpm 4811baaf65686bca1a77984dcf7cf5ae0d97326f1e759012b50a8eaa53aaf392 postgresql-test-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 5838bd513515c1190b9f3bc7a3b90ad7a784a818de9f1c0d0ca99ec3ac417ed1 postgresql-private-libs-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 66a28f149b260da024baa42abc8f394e09ed7eb98e47af3d377bd457b6743851 postgresql-plpython3-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 8828f7d6035e44f49d85e3eb9dbc11951eac43f77a037b217613bdfd12c535fa postgresql-upgrade-devel-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 8d1aeefb46688ca22bffac1d5d5fa7e6c62b3c3c0928898aaa2dbd4de7d409b8 postgresql-contrib-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 90e52c9a65cf74137d6c6ccee5188749839a2cba01331ff12d3949ff58266ab7 postgresql-static-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm 9ccac807931cd8447b02b3fd6066a6a3a3fc53e4c5d6cdc39afae034a6adb3e4 postgresql-docs-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm b85006111dd7b3f9bb08c90644bec47cc79dce3f1efcb5d3a5ae44089de15ef5 postgresql-pltcl-15.19-1.module_el9.8.0+318+764e137c.x86_64.rpm e62930c5c82a1e22a4a672a203a76690737a95fad842e89194be954e38872872 ALSA-2026:69961 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) * podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * podman: Quadlet install --replace non-truncating write retains removed host-access directives (CVE-2026-19730) * podman: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) * podman: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default podman-5.8.2-7.el9_8.x86_64.rpm 3867203180755ba431003581247aeaf59e21527dac4dfb45d1729a4c37cad444 podman-plugins-5.8.2-7.el9_8.x86_64.rpm 46eb0fdc63f14386497eb4e6773de178af0c9f3e1c1887d2ef1dd4826cf21adf podman-remote-5.8.2-7.el9_8.x86_64.rpm 558674839eee2c6721c9d1adc1d076899f8872cdd1d09346f2c32a6de042ea4c podman-tests-5.8.2-7.el9_8.x86_64.rpm c1d6da9bf41ddca43ca71ab797c8f4b5327244b0a89ad28baa76c265f73012ee podman-docker-5.8.2-7.el9_8.noarch.rpm fd163f1ef56d10ba0e6833a4f1abf995c8ed30151e9041b68dd7a6cdf2338f63 ALSA-2026:7002 Copyright 2026 AlmaLinux OS 0 1 Important

nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647) * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654) * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784) * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nginx-filesystem-1.20.1-24.el9_7.2.alma.1.noarch.rpm 277879fa5db7744b71ccc6211c52813232a7f193f9a4170810dd06f48de4433c nginx-1.20.1-24.el9_7.2.alma.1.x86_64.rpm 38f6ae095d99efe17567251284d2f0556f5a2a6ee9e252bc043bc853fa37d74e nginx-mod-http-xslt-filter-1.20.1-24.el9_7.2.alma.1.x86_64.rpm 6cc334e23b09ebeb69df9984c919e84a2679a31d54dc16c00b67d24a2fbcb110 nginx-core-1.20.1-24.el9_7.2.alma.1.x86_64.rpm 7d62ba8e21ea85911c38d2f29bad815b3302879bce788a45737db630844e144b nginx-mod-http-image-filter-1.20.1-24.el9_7.2.alma.1.x86_64.rpm 93bca3ef4d56e8dfb1afa42e2e37856dfd06f9cb288674e307ade3e6c98ff8f5 nginx-mod-stream-1.20.1-24.el9_7.2.alma.1.x86_64.rpm 99b80122b573269b9eca307b347bf0b9f7699610a8e1ef0148c22adcfea154ed nginx-mod-http-perl-1.20.1-24.el9_7.2.alma.1.x86_64.rpm aa022034e58987f0d51c4efa765f98c429e323df584e468933dede3cd4de5315 nginx-all-modules-1.20.1-24.el9_7.2.alma.1.noarch.rpm ad5e29e77afa744fc5598b84076ae5e965f895cd4a29cabfb09c94e1bfa3a033 nginx-mod-mail-1.20.1-24.el9_7.2.alma.1.x86_64.rpm b656356a563b3f58b792fb8591288ec45aabdffa2251a3aafcf19b8d88187d3e ALSA-2026:70191 Copyright 2026 AlmaLinux OS 0 1 Important

runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default runc-1.4.2-3.el9_8.x86_64.rpm 707a46b77f5976de53f96ab2b46294af8db165cfd5c616346eb23c08d4d1ccc4 ALSA-2026:70391 Copyright 2026 AlmaLinux OS 0 1 Important

containernetworking-plugins security update

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default containernetworking-plugins-1.9.0-4.el9_8.x86_64.rpm b89db920c2402cf60686b414306ae36d88efcb4d07ed33a57116e6648157171b ALSA-2026:70459 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * [Intel 9.8 FEAT] ice: Driver Update [almalinux-9.8.z] (JIRA:AlmaLinux-213003) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-9.8.z] (JIRA:AlmaLinux-254108) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-devel-matched-5.14.0-687.50.1.el9_8.x86_64.rpm 32e04337af5edf61347a27d636ea3b02ef7f32fe111d895cc6c08d7d251a77be kernel-debug-devel-5.14.0-687.50.1.el9_8.x86_64.rpm 370c78d9da74183ebe73453c9f5d31132f8146ab3b69fd495669de83983e8a77 kernel-devel-5.14.0-687.50.1.el9_8.x86_64.rpm 3a4bc81bf59d6dcefad3cd1ad619d348630944c51c54d6034f885489b65164bb python3-perf-5.14.0-687.50.1.el9_8.x86_64.rpm 53a86252c1e078757f07f9b18d31684e5c5e433d5ca7730b1196487b4e3554f1 rtla-5.14.0-687.50.1.el9_8.x86_64.rpm 55b0c53c9f41dd4ecc4092bff3ede98b32038abf1bba98533f86d57d641a1920 kernel-doc-5.14.0-687.50.1.el9_8.noarch.rpm 98a5b977fe1f2e98fda095f02b339a4bf2903a46041e4bb71cc770704edf5561 perf-5.14.0-687.50.1.el9_8.x86_64.rpm bdce9c1d5c78f4928506d00beeeb02f8930720800aa607c7266958264e642665 rv-5.14.0-687.50.1.el9_8.x86_64.rpm ca5c746ba283290636e7c6d4b1eb5b00df8b84e847ab4d973698fd650953963e kernel-debug-devel-matched-5.14.0-687.50.1.el9_8.x86_64.rpm ecac21e995b1ffa7cf301fac22652c8365947c36079d34ecdb89c56ec6f08e33 kernel-headers-5.14.0-687.50.1.el9_8.x86_64.rpm f86d1f6b8c02b0643c8f8efd2ed8fdf295c16f88ebeb5600b15319df2c488136 ALSA-2026:70564 Copyright 2026 AlmaLinux OS 0 1 Critical

ipa security, bug fix, and enhancement update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read (CVE-2026-73198) * ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read (CVE-2026-73197) * FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships (CVE-2026-11861) * freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL (CVE-2026-18147) * freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes (CVE-2026-19550) * ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore (CVE-2026-13097) * ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI (CVE-2026-76578) * freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVE-2026-79678) Bug Fix(es) and Enhancement(s): * [Cursor Automated] Include latest fixes in python3-ipatests package [AlmaLinux9.8] (JIRA:AlmaLinux-170987) * WebUI Hardening [almalinux-9.8.z] (JIRA:AlmaLinux-238511) * ipa-otptoken-import hardening [almalinux-9.8.z] (JIRA:AlmaLinux-238519) * host-mod: handle the password attribute when set with --setattr userpassword= [almalinux-9.8.z] (JIRA:AlmaLinux-238523) * ipa env: support only simple * wildcard [almalinux-9.8.z] (JIRA:AlmaLinux-238527) * ipa-epn: drop_privileges method is mixing uid and gid [almalinux-9.8.z] (JIRA:AlmaLinux-238674) * ipa-migrate: require Replication Administrator privilege [almalinux-9.8.z] (JIRA:AlmaLinux-238677) * ipa-migrate tool is renaming host records & host info in automount information [almalinux-9.8.z] (JIRA:AlmaLinux-240767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default ipa-server-trust-ad-4.13.4-1.el9_8.x86_64.rpm 056397aed106ee61e232978cb3dfdaf5dacf8d168d4c58b6dd9ca7c94615c6b6 ipa-client-epn-4.13.4-1.el9_8.x86_64.rpm 0b17541eb4db55a91303eedf515e4bff406f7ccff2781614c284c0f385bb9eae ipa-server-common-4.13.4-1.el9_8.noarch.rpm 176910619bf6bc9d20a1e1804178207a122659c795374cb315661e8d0649299b ipa-client-samba-4.13.4-1.el9_8.x86_64.rpm 1cfd7d5728966797055eda12ca3a009d1724f699432daf50205e2c8d4f81ba89 ipa-server-4.13.4-1.el9_8.x86_64.rpm 1ebb1d213de4b2f960a382ed2b637599e2b397972736921ace7e860acadc46f1 ipa-selinux-4.13.4-1.el9_8.noarch.rpm 1fa3e8d81b72faa1f444d8479c9c02fe54062e9e5f430e0b15e083345a7a9d3a python3-ipalib-4.13.4-1.el9_8.noarch.rpm 220e3bcd406c5ecf0a5b57a1be697689598dea63f0591f59222720cfd28a0cdf ipa-selinux-luna-4.13.4-1.el9_8.noarch.rpm 390683cd768481143a2347673931fef899c31d2666b4435bb2d88c05b16f1a6a python3-ipaserver-4.13.4-1.el9_8.noarch.rpm 3c1b8ce255ccf6e9e9aa58e2d4004b353b78bd126de8f8df3b9670044648da55 ipa-selinux-nfast-4.13.4-1.el9_8.noarch.rpm 3e476049592688b3d4b2f653f3b02f0687f3cfb7b86dcc10b7f927f9454a445f ipa-server-dns-4.13.4-1.el9_8.noarch.rpm 6f7a1877cfa120907e38fd95a7c48fcab160c62b3c98cd05000715823a0d0eb8 ipa-server-encrypted-dns-4.13.4-1.el9_8.x86_64.rpm 94fca7b190a2a15c4cd12b66ec8f07408f95ba358e87bbb19f3d39d098c0d690 ipa-client-4.13.4-1.el9_8.x86_64.rpm b42896d01384286f0210ef85adc9be0be72b85f50c450b72a5900286c59af046 ipa-common-4.13.4-1.el9_8.noarch.rpm c9714dbdaaeffc5692e95fa070fc85ee2371c5437b0a32630e462486ec3658f7 python3-ipaclient-4.13.4-1.el9_8.noarch.rpm d107d5b70fd5d9e19de8659e5c30d434f8386be69f0ce43eee94d843c05e1e47 ipa-client-common-4.13.4-1.el9_8.noarch.rpm da3add48f06d2af1a8f2c662c0f60d48888a6c7e1b83aff7f164f3c31577fadf ipa-client-encrypted-dns-4.13.4-1.el9_8.x86_64.rpm ff56e15f0aed98008ac671162a7392cd0d377f8d19b64f851751624fd674e345 ALSA-2026:70640 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * buildah: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * buildah: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * buildah: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * buildah: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * buildah: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default buildah-tests-1.43.3-2.el9_8.x86_64.rpm 97d316686607699ef08d800c47289f163a82a66d3958aafd6d6d1a5f40de2fda buildah-1.43.3-2.el9_8.x86_64.rpm ee17fcef95f823cc7220ab72a52ccc78021d06c1a4b9bae32c0f5e8bfa0e7669 ALSA-2026:70641 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fix(es): * skopeo: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * skopeo: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * skopeo: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * skopeo: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default skopeo-1.22.2-8.el9_8.x86_64.rpm 5416749829136b84767130452ef629abdb13e24c2ceed6292db022bb206bc9c2 skopeo-tests-1.22.2-8.el9_8.x86_64.rpm 99dfb50a5e71139715533e893460bbe6d93a842d639e0e2591ffee19d46189f6 ALSA-2026:70642 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365) * firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874) * firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121) * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145) * firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119) * firefox: Use-after-free in the Audio/Video component (CVE-2026-84120) * firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124) * firefox: Use-after-free in the Audio/Video component (CVE-2026-84122) * firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143) * thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639) * thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641) * thunderbird: One byte overflow read in mail parser (CVE-2026-84640) * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024) * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019) * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031) * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011) * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028) * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013) * firefox: thunderbird: Use-after-free in the Disability Access APIs component (CVE-2026-92016) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92012) * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-92022) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-92014) * firefox: thunderbird: Sandbox escape in the DOM: Core & HTML component (CVE-2026-92018) * firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-92021) * firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component (CVE-2026-92005) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-92017) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92009) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-92020) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92008) * firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-92030) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92007) * firefox: thunderbird: Use-after-free in the DOM: Navigation component (CVE-2026-92025) * firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92029) * firefox: thunderbird: Use-after-free in the XML component (CVE-2026-92023) * thunderbird: Out-of-bounds read in IMAP response parser (CVE-2026-92240) * thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line (CVE-2026-92239) * thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers (CVE-2026-92238) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default thunderbird-140.16.0-1.el9_8.alma.1.x86_64.rpm 39ec3c3f5a63253c89cc1c7b804cb1d92631e7254c4b24645c398a0ff99b3684 ALSA-2026:71422 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fix(es): * perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder (CVE-2026-73194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.6.x86_64.rpm 731ab858f308112563a8f539fbb77dfa4ef26c22615f242e5f5113529b9a29f0 ALSA-2026:71487 Copyright 2026 AlmaLinux OS 0 1 Critical

unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default unbound-libs-1.24.2-3.el9_8.8.i686.rpm 25ff58e993fd889f9d961b54c0287300bb8e2e14f3a84e5b43eb52057cbc4abf unbound-dracut-1.24.2-3.el9_8.8.x86_64.rpm 2a697efce1afca65a1e0a6411cb2ebd0e2ac7caa090195ee9a12a40f8ac02104 python3-unbound-1.24.2-3.el9_8.8.x86_64.rpm 2ef383beec73f79b5b30263d36578f81a227fc729dc3cf7fd2d44a1fb703252a unbound-libs-1.24.2-3.el9_8.8.x86_64.rpm f46b34e195fd7adf5e1a382ee02747cd4d5401815a802944103419962689a65f unbound-1.24.2-3.el9_8.8.x86_64.rpm f5ba6b6cab0f733b53c17f2837c8f346cfc044f424208ac7ca54e8d471cf2880 ALSA-2026:71585 Copyright 2026 AlmaLinux OS 0 1 Important

libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138) * libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143) * libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140) * libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142) * libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144) * libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libxml2-devel-2.9.13-14.el9_8.5.i686.rpm 98dbebf420374723e51d4d14f70b33d81f96cded97f9241eb569533fdc281b95 libxml2-devel-2.9.13-14.el9_8.5.x86_64.rpm f3f26dd68e08d2e2b5d277c4163b56f93721282dbf4d75a407d39f16f90c55ab ALSA-2026:71700 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) Bug Fix(es) and Enhancement(s): * MADVISE i/o size in AlmaLinux 9 additionally limited by read_ahead_kb - Was addressed in AlmaLinux8 via AlmaLinux-22476 [almalinux-9.8.z] (JIRA:AlmaLinux-260938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-devel-matched-5.14.0-687.52.1.el9_8.x86_64.rpm 4ccdb64443cbf78cb008ca9ce425cc00604f7b4d96c6e988d1d8749e97a1f1de kernel-doc-5.14.0-687.52.1.el9_8.noarch.rpm 545f233eca06318144d84548f7bf10c5997484341778b3097f21088bb32ac75c python3-perf-5.14.0-687.52.1.el9_8.x86_64.rpm 5646b4e8d050b73ddd2c1a46cec28a55460c63b84334f84341a33cddac9e8f74 kernel-devel-5.14.0-687.52.1.el9_8.x86_64.rpm 5ae70306fa52de337ca817ffae925bf40e0d72832b9c6271c4ea02105632ca1d rv-5.14.0-687.52.1.el9_8.x86_64.rpm 659a499190296ca5b7600d5729c498f766bc2a5d62c4d58f6e9eac367d9d0e6e kernel-debug-devel-matched-5.14.0-687.52.1.el9_8.x86_64.rpm 79456bfebdfc7a0caf2dcba1687f9c08bc82ea4ba3bdc73fce2b1f6fdb50dcd8 rtla-5.14.0-687.52.1.el9_8.x86_64.rpm 91a4e991796df136b34da3ec4a4287e1a35ede295f171a277f5eb4790849b643 perf-5.14.0-687.52.1.el9_8.x86_64.rpm ab3c097b897a5474229c4750e8d384566b859cc57eee043cb3ae5c919157eef7 kernel-headers-5.14.0-687.52.1.el9_8.x86_64.rpm ec74c484fa71477f8304e14eae6c8433f19ce60038d8b714ff85656e9b55fe4e kernel-debug-devel-5.14.0-687.52.1.el9_8.x86_64.rpm ee5f55c6809418a8d72398d062fe5793fe8ef33f74383b762be9d6065dc8a7ef ALSA-2026:72286 Copyright 2026 AlmaLinux OS 0 1 Important

ruby security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) Bug Fix(es) and Enhancement(s): * ruby %check fails in Konflux: Rinda multicast tests need network device [almalinux-9.8.z] (JIRA:AlmaLinux-255606) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-minitest-5.14.2-168.el9_8.noarch.rpm 08d43e8f8152f3895a2d0326175cdd77224fd889dff3e9987ae5f43a9a144fb5 rubygems-3.2.33-168.el9_8.noarch.rpm 0ff649f67730053eee7110ebe835d2a90034bb1f5590715868d0289dfe2b9290 rubygem-io-console-0.5.7-168.el9_8.x86_64.rpm 17a38e0d57539bc5b060818e207e69fb72c012f63ed62def30d2aed4c82f6c34 rubygem-rexml-3.2.5-168.el9_8.noarch.rpm 1a330b70d8b0baecbd5be63621a6e6a13e21b5c73e419710100e9321b8b49ef3 ruby-3.0.7-168.el9_8.x86_64.rpm 2273a1b39d6c0ca7dc5a707d6f82ee7ee5767b18c7eb2d08d263c8228aa8b282 rubygem-test-unit-3.3.7-168.el9_8.noarch.rpm 2917449ebc2a761d87a8fe46ecf6d555b59453c04b64e6e2cf9f139ce75ae167 rubygem-bigdecimal-3.0.0-168.el9_8.x86_64.rpm 36eb73b5b62177f70908812255a881ef4cb22125dc5262c2cf909622691bd45f rubygem-psych-3.3.2-168.el9_8.x86_64.rpm 395ae514c90d925b85c95a97feaa5c2d0132bcaa608f25448d1b83371c540afd rubygem-rdoc-6.3.4.1-168.el9_8.noarch.rpm 4273b6c14de1b67b244d223ba42eafa3ee177a81de15c928f6d3a095175545c7 rubygem-rbs-1.4.0-168.el9_8.noarch.rpm 4ecad1a5dd57c3294ba370f9dfc06aa514dbb2d91f6d51eb01d0bcd44ec55006 rubygem-power_assert-1.2.1-168.el9_8.noarch.rpm 582f2c1af106dcbb105930a65fb7714110c8e15a63b7508dbae421ffc6751d43 ruby-devel-3.0.7-168.el9_8.i686.rpm 5fa8383319e862d27730a133814d3ae9bf02eaa8616a9de4964569af01d10e9a rubygem-bundler-2.2.33-168.el9_8.noarch.rpm 792a2d85c7f8eea97cd36608011ff8942d80cab006c3638e76e3214f51cea103 rubygem-typeprof-0.15.2-168.el9_8.noarch.rpm 944d2608a4461f5b6b0085a680c92a9d64525c829f052a45b00ae4dc3057e784 ruby-libs-3.0.7-168.el9_8.i686.rpm 9592d659a0f90eb0995d498bf9cad9a2ede44163b875bc45ccce837637fd1dd0 rubygem-json-2.5.1-168.el9_8.x86_64.rpm 9fee8c6ddda867279ace8c3352726f08b709c622a7b134337ebdb6532df6cf2d rubygems-devel-3.2.33-168.el9_8.noarch.rpm b385387e6244d2c3dabf6bf8404416cb21757002584916d1eadb7f6ac3d17595 ruby-devel-3.0.7-168.el9_8.x86_64.rpm b3b3539aef784540616678979c253420ca23459596efd0cb6ea4012850f77920 ruby-3.0.7-168.el9_8.i686.rpm ba659fcb32badd493794f38c4c211febf4aab984bc542feb4ca8518dca3de8db rubygem-rss-0.2.9-168.el9_8.noarch.rpm be44b6fd8e466317965061e826022cfa9f490dc917b1e49be0712f1543ba608b rubygem-irb-1.3.5-168.el9_8.noarch.rpm ca5de07dc4528f6bc1ab617a64028e93731d4f13a3242c364e2898c589590dea ruby-libs-3.0.7-168.el9_8.x86_64.rpm d067d496e73c6908333d17e5d370ce8380a60a9a0e1e9f90e53b4ef2b9844678 rubygem-rake-13.0.3-168.el9_8.noarch.rpm d495c7579ebbf5077e3d8a58f13f2bad6f0a86946a796d7bfcff9118e288d742 ruby-default-gems-3.0.7-168.el9_8.noarch.rpm fc662ece69054cb8c3fbd1d1acd869a79a5493360343a31a88ab882fc8cafd75 ALSA-2026:72424 Copyright 2026 AlmaLinux OS 0 1 Important

resteasy security update

RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fix(es): * resteasy-core: RESTeasy SourceProvider remote unauthenticated file read (CVE-2026-17615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pki-resteasy-servlet-initializer-3.0.26-20.el9_8.noarch.rpm 1432be7017629df283a50f1d6ad47144babed061ba76bb347b0f65c08220e553 pki-resteasy-core-3.0.26-20.el9_8.noarch.rpm 2aee3e8476f2051676c084f50306e164282500603c9d52a1ae72566f720d4fc7 pki-resteasy-jackson2-provider-3.0.26-20.el9_8.noarch.rpm 5ac9a4d32d702ae283a2e63ba68ff54b27167fcf00cc5e7062cf921840e64eec pki-resteasy-client-3.0.26-20.el9_8.noarch.rpm a5355bcc3cafcce09a4fa18a5bf70dc2033dbb240ad76e1694ca4dc241a38ded ALSA-2026:72484 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rubygem-pg-doc-1.6.3-1.module_el9.8.0+232+50f6dd36.noarch.rpm 012587b1454988d3ae9e2df6f066e9a9582859f741daa26cc97f6ce56f7cc40d rubygem-rdoc-7.0.4-35.module_el9.8.0+319+116e6235.noarch.rpm 0b7b80a085d4788dd182bd7b0a41ba808a7e68da1b98a50815297480fc3a74ce ruby-4.0.6-35.module_el9.8.0+319+116e6235.i686.rpm 25f9729157672d9f6f0abf72847565447489631d1e3fcec56735ea83a5a9729e rubygem-bigdecimal-4.0.1-35.module_el9.8.0+319+116e6235.i686.rpm 3985fddd6977ff539391d431ea190bb7296e332e49ae20e2bb157692a58ddb43 ruby-devel-4.0.6-35.module_el9.8.0+319+116e6235.i686.rpm 3a37776f061bc5026c23d013eb5ab55d7ca59dc907b8cab42b5ca3ca7e956c55 rubygem-rexml-3.4.4-35.module_el9.8.0+319+116e6235.noarch.rpm 4139ef6747a718d6c74dff56f9d771ee1da11113a2eb7d9fff17dfab578af35f rubygem-rake-13.3.1-35.module_el9.8.0+319+116e6235.noarch.rpm 5163ccf53eabb349692813b491438ce1aa9af76b22cf9e4c8df4030d520fe44d rubygem-minitest-6.0.0-35.module_el9.8.0+319+116e6235.noarch.rpm 534eaa95c1595939117f7f17b2402069b998078fb8f751feb7acfaa85995438f rubygem-rbs-3.10.0-35.module_el9.8.0+319+116e6235.x86_64.rpm 59338147a25268b5eec59f6d46e04c16fecade51b1c6acd817d1bea1ccd019dd rubygem-json-2.18.0-35.module_el9.8.0+319+116e6235.x86_64.rpm 5ae5954684875bb5b589947b67404fe506dd33a1dd495551b12aa081e9975008 rubygem-test-unit-3.7.5-35.module_el9.8.0+319+116e6235.noarch.rpm 61ad60d081c4e6e053eb56455300243f113a1bdb85507fae1f4f2d68d4842d53 rubygem-bigdecimal-4.0.1-35.module_el9.8.0+319+116e6235.x86_64.rpm 6336ac54202599f166e1910ad46e7abadc387ac300466e4ea04e73465e58dfa5 ruby-4.0.6-35.module_el9.8.0+319+116e6235.x86_64.rpm 6b68f7c37486183ad8376144db3b75b46d341d282fe23ac3223bd3acf26e0f86 rubygem-power_assert-3.0.1-35.module_el9.8.0+319+116e6235.noarch.rpm 6f2e6a613c89d2a4b206e289d5c7d2bb9b1a0c14c44d9fa481db3ddc0a7c8528 rubygem-irb-1.16.0-35.module_el9.8.0+319+116e6235.noarch.rpm 705b4e6423512b0ac2e4a6e930543374190306102fafa79d8628d152ee2418ad rubygem-io-console-0.8.2-35.module_el9.8.0+319+116e6235.i686.rpm 74d94f993db023f98a59744d1226d15b73efb8a9871a665964cda9d5107d0371 rubygem-pg-1.6.3-1.module_el9.8.0+232+50f6dd36.x86_64.rpm 7f9032a32d75361237af186ee34fe7c85a8f586e859c8c4e02d26320b47d49d9 rubygem-json-2.18.0-35.module_el9.8.0+319+116e6235.i686.rpm 848a7102031ff92c76340cafb1766377b1da051029de2a5ddd2c4faca265b7eb rubygem-psych-5.3.1-35.module_el9.8.0+319+116e6235.i686.rpm 873e2e5caa3aefa3e61cb3f5a6b2da6a68b0e02658e726e8e468f23d9fc5033d ruby-bundled-gems-4.0.6-35.module_el9.8.0+319+116e6235.i686.rpm 8a145c48f00066edb16d9ef00aeec0e351230620458c5f8cda30d4682763778e rubygems-4.0.16-35.module_el9.8.0+319+116e6235.noarch.rpm 8a879012504fb72c523dfe851707b328b676d350899934014f3f5d2bb6389a1f rubygem-racc-1.8.1-35.module_el9.8.0+319+116e6235.x86_64.rpm 8b053ced5cf8afd5af617c9a910038584da45d149336fc0ec5e3de7349918e1d ruby-bundled-gems-4.0.6-35.module_el9.8.0+319+116e6235.x86_64.rpm 8c158e26ddc97c3315cebe607c77be5358af381533ed8fc57e93fab5105180d2 rubygem-rss-0.3.2-35.module_el9.8.0+319+116e6235.noarch.rpm 95dc04487c969cff94bb1b018fe77ce1e34cfbcd6fe36b701b99e6e1f68e5d97 rubygem-mysql2-doc-0.5.7-1.module_el9.8.0+232+50f6dd36.noarch.rpm 97e11c128bce3071fdab6ecdaf0cc24053f436b72c10921807cbd89f4b2ff2d2 ruby-libs-4.0.6-35.module_el9.8.0+319+116e6235.i686.rpm 9c6dd3a19a01646fd52f69130b6345b5189c067e3fe8382faf28b546c8e3fb13 rubygem-rbs-3.10.0-35.module_el9.8.0+319+116e6235.i686.rpm 9e5e13fb8f19e4d753b8ceba8a473413c6ce0c0e332022f0743eab3d9dfdd1bf ruby-default-gems-4.0.6-35.module_el9.8.0+319+116e6235.noarch.rpm a7058bebf8fecee103995959e2eddffd85bca8f538f1d99daab5794c28db2100 rubygem-mysql2-0.5.7-1.module_el9.8.0+232+50f6dd36.x86_64.rpm aee9080e7e16dcdac40af6fc172e19d5448a0f46c5f752183651f4660fa4e9cb rubygem-psych-5.3.1-35.module_el9.8.0+319+116e6235.x86_64.rpm bd307633d89de4cbbb0ceffc541ef52553d38ca64b18479387fa12d9850d2079 rubygem-racc-1.8.1-35.module_el9.8.0+319+116e6235.i686.rpm cbddf51db95cb11dd1b10274ef702bc729dabf31b0f89af293e77a06e39958e2 ruby-doc-4.0.6-35.module_el9.8.0+319+116e6235.noarch.rpm d43284c824f179d9e085be9c3f8fb9c36bd19eb90a3b55580fdfb8c85c2ed280 rubygem-typeprof-0.31.1-35.module_el9.8.0+319+116e6235.noarch.rpm e4e795e6660dc7b8a33f2be76ca8dc3dc4ab77aa8ba8c908813b16d2af398f23 rubygem-io-console-0.8.2-35.module_el9.8.0+319+116e6235.x86_64.rpm ec4d10c2effd2b418c87540236839675076e1c24eb542c5b7f4b9e5c94ac8ce2 ruby-devel-4.0.6-35.module_el9.8.0+319+116e6235.x86_64.rpm ed25201d5ec6fc7f7945bb6c4158926c7be3af8d6bef5d0e1fa9f1b20c126ac6 rubygems-devel-4.0.16-35.module_el9.8.0+319+116e6235.noarch.rpm f3eab9f7a57584155a5e0ffd86ee65603dce4351be9ff7495ab6bcce5a7ceeb2 rubygem-bundler-4.0.16-35.module_el9.8.0+319+116e6235.noarch.rpm f46b794b69f8fc0a8908341ea5e12163d6a1e1ec0a838433fcd6ac12eb24cddf ruby-libs-4.0.6-35.module_el9.8.0+319+116e6235.x86_64.rpm fa03442cc8998233c854e98869560f90fc15333a48541fd58abd505c094d79ce ALSA-2026:72485 Copyright 2026 AlmaLinux OS 0 1 Important

ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default ruby-default-gems-3.3.12-9.module_el9.8.0+320+13e2b195.noarch.rpm 005da9e0f65109a223976e4f70788a9fa99484b306a9864eff62f8d5a4e39f24 rubygem-pg-1.5.4-2.module_el9.7.0+245+447713a2.x86_64.rpm 08e412278c4bc3ba8330aad4a3ea82ecb1b1ab64f127dee5b2bd9cb609b4808a rubygem-typeprof-0.21.9-9.module_el9.8.0+320+13e2b195.noarch.rpm 0af1d840ab0465cf6fe03a16c568f5947d98be365dea48c3f832e560093a89f0 rubygem-test-unit-3.6.1-9.module_el9.8.0+320+13e2b195.noarch.rpm 1320774383d2339c33c4e28a891ccdb2f4a7b36caee8ee197278155da1036de7 ruby-bundled-gems-3.3.12-9.module_el9.8.0+320+13e2b195.i686.rpm 1a0ce9ff590d6bcc8c7f03a083bc1bca4eb084839bbfeda5bb80601c057f52b0 rubygem-minitest-5.20.0-9.module_el9.8.0+320+13e2b195.noarch.rpm 1c60538493cc681509d29ee9ef281b5902673283b9e62fd78f74d045bf2b7488 rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm 21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0 ruby-3.3.12-9.module_el9.8.0+320+13e2b195.x86_64.rpm 25d75242a4525a1f30f64614b337be4e2229bd9418b91eebe5b4c64ec3de2907 ruby-libs-3.3.12-9.module_el9.8.0+320+13e2b195.i686.rpm 2d7a1c89dfca80bf0adaa6c6f871f497b30085d0fde0061fb27974d4937352fa rubygem-rexml-3.4.4-9.module_el9.8.0+320+13e2b195.noarch.rpm 3f3e351e32e014e27d7378fc55e3c939bb2c78f9eb3ff8244d2fca29bb1dde81 rubygem-power_assert-2.0.3-9.module_el9.8.0+320+13e2b195.noarch.rpm 3f92909a8c84cc94d51c78407f337ce78634a631be8035496b2506b460944c05 ruby-devel-3.3.12-9.module_el9.8.0+320+13e2b195.i686.rpm 3f9a1129b166fe57597a978783500ad6bfdb6cf732d05b3e083b4df99883ea64 rubygem-rss-0.3.1-9.module_el9.8.0+320+13e2b195.noarch.rpm 44feef6c3955517a560ceef605d3d17359a24e75611864c8b3b1dd147ed6049c ruby-3.3.12-9.module_el9.8.0+320+13e2b195.i686.rpm 5555d9a36244526178fa45a7586baaf5a162040c46e5639d338a25bc0d99bad0 ruby-libs-3.3.12-9.module_el9.8.0+320+13e2b195.x86_64.rpm 578a22bd9d4f9164cf783aff191831ecec3f33eded2d8f18aff1984b5ecde7d9 rubygem-bigdecimal-3.1.5-9.module_el9.8.0+320+13e2b195.x86_64.rpm 65b098af2bd38d5ddfd27489dcc1a1a40475c67bb2dd073d41ad2092ccd2632c rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.x86_64.rpm 6bc622c1c7cbd8cf9624faba7760337096a143b4c787be6cfeda71eb7abda16d rubygem-io-console-0.7.1-9.module_el9.8.0+320+13e2b195.x86_64.rpm 6d7a5a4c4859d0dc249bbe659831035650f0de3062e2a51d1d4ad55e024f4601 rubygems-devel-3.5.22-9.module_el9.8.0+320+13e2b195.noarch.rpm 7ccb8309f5fc4d4a0081bde9c7c24883827066a3c3b67ef343079d55715bede5 rubygem-racc-1.7.3-9.module_el9.8.0+320+13e2b195.x86_64.rpm 7df5448e605bdbbd04f41e784c2d7b8c44417506fd90d36a0523326042951328 rubygem-rdoc-6.6.3.1-9.module_el9.8.0+320+13e2b195.noarch.rpm 98a854e61f315d970107d4cf5104eaddaa1b0968253e5fe454f5ed5fec878052 rubygem-io-console-0.7.1-9.module_el9.8.0+320+13e2b195.i686.rpm 9bb0ea9f603a3bf7049c80ddf470c859ed48490f54a96892a21ef8a2ef88a3f9 rubygem-irb-1.13.1-9.module_el9.8.0+320+13e2b195.noarch.rpm ae6fe622dd798584ab57c52873944d5899d082aeed2cd1f159ce53c39d218f5f rubygem-rbs-3.4.0-9.module_el9.8.0+320+13e2b195.x86_64.rpm bb0d8645addde8666af078095da1ca41d57842ee9d6d5403e7976083781e14f2 rubygem-bigdecimal-3.1.5-9.module_el9.8.0+320+13e2b195.i686.rpm bf13219307eecd66af1f429d9d82b1f37640c669ce74948042bbad7ab0ac9112 rubygem-rbs-3.4.0-9.module_el9.8.0+320+13e2b195.i686.rpm c10a8f0889afc20c7a3260f85793ea9c1425941b102146c721e6e124c7d3b962 rubygem-pg-doc-1.5.4-2.module_el9.7.0+245+447713a2.noarch.rpm c96338e6d5222b04fcb018874d6c36073340306f6f05aad2761a5a9b3a5b180a rubygems-3.5.22-9.module_el9.8.0+320+13e2b195.noarch.rpm ce080b4de33dddb0ac8f303f3ac201839412377e92a199d0db18e6498c6e15e7 rubygem-json-2.7.2-9.module_el9.8.0+320+13e2b195.x86_64.rpm d1b3469315975b4bf8dc80c296814f5a92d44db45fe99dc76295379525f9169d rubygem-psych-5.1.2-9.module_el9.8.0+320+13e2b195.x86_64.rpm d1e48e7a4c6716ca155a333cfb4de4d2f43aa6c35f22f293f59e30282ad0a891 ruby-devel-3.3.12-9.module_el9.8.0+320+13e2b195.x86_64.rpm d32af8aaaa5aa6f3e249ef073787df0464cc98f160ad0f770de3f22c8669ac24 rubygem-psych-5.1.2-9.module_el9.8.0+320+13e2b195.i686.rpm e3c191bdbbf6d07a7f4fff859ea3d273b688c55dc443ad62eb068a2afc765d80 rubygem-json-2.7.2-9.module_el9.8.0+320+13e2b195.i686.rpm e578ccbf467638318f2d4315fc3ff7fd1d576fe8455e0a7bfb13d9834ea71134 ruby-bundled-gems-3.3.12-9.module_el9.8.0+320+13e2b195.x86_64.rpm e5a55e5ff97a525cfde7f94b91df0dbadcb705e17de5b21ba393b5c744b4c7c1 rubygem-racc-1.7.3-9.module_el9.8.0+320+13e2b195.i686.rpm e5e17a28063acd0411b458fca557d17e97a894b45b4f9189dcb2acddff1a7db4 rubygem-bundler-2.5.22-9.module_el9.8.0+320+13e2b195.noarch.rpm f0b72ff3d60bb8169fe5174af3353e8aa6cf364120c2533980202f486a880468 ruby-doc-3.3.12-9.module_el9.8.0+320+13e2b195.noarch.rpm f4a992fd9faa876f975ac08c33996d2999605d815f39d898ed3d1fed0b34eac3 rubygem-rake-13.1.0-9.module_el9.8.0+320+13e2b195.noarch.rpm fdf004d6a93755b7ea90838bcb89e737c2750fdc2495566a135891e266495082 ALSA-2026:7259 Copyright 2026 AlmaLinux OS 0 1 Important

git-lfs security update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default git-lfs-3.6.1-8.el9_7.x86_64.rpm 2cd3deac3a02704b40950dfa1a601cc2fe9682f400c6de0b8b2f3633a47fd89e ALSA-2026:72623 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875) * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-9.8.z] (JIRA:AlmaLinux-188656) * crypto: xxhash64 should not be fips approved [almalinux-9.8.z] (JIRA:AlmaLinux-256437) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rtla-5.14.0-687.53.1.el9_8.x86_64.rpm 225d1bef2863270512ccafa06879e13ef39211ad2a42e585ebeacdc30f037934 python3-perf-5.14.0-687.53.1.el9_8.x86_64.rpm 4cce4c9979482254700ef9b1dc8bc7126f8a043983836378fb1dbb3e82360a34 kernel-debug-devel-matched-5.14.0-687.53.1.el9_8.x86_64.rpm 720bb2e7a68fe6b4a27b5b868132020a9e025aa522f777784840990ec83b1ff6 kernel-doc-5.14.0-687.53.1.el9_8.noarch.rpm 83ea8ee0f1d7bc56d63f821e92d73016fc01144cdc77dc176dbf964210158a19 kernel-devel-matched-5.14.0-687.53.1.el9_8.x86_64.rpm 86aa92cc4a11ac9fed82cc355c421b8cd00080f9cfd8184bbe4b1c974cd7150a kernel-debug-devel-5.14.0-687.53.1.el9_8.x86_64.rpm 99ce99fa089d3b64c33d965d297f0dca083b2234164a55c8bc30b2fbdad01ffc rv-5.14.0-687.53.1.el9_8.x86_64.rpm b6330fa517faac8ac4d1e6c104b46a6ee8789e96b73cd6b6d02ba6c038c10d87 kernel-devel-5.14.0-687.53.1.el9_8.x86_64.rpm c4db78564f20f5f6d6ebb1965d3d66daa8fb7ffcfdf7a0d3bb74710b7e8bad28 perf-5.14.0-687.53.1.el9_8.x86_64.rpm c697cd6b939fd3ead7c799f66a99c5ff6173dd06b6e80e6293323b1034fe43d8 kernel-headers-5.14.0-687.53.1.el9_8.x86_64.rpm ede1fc60d2b752e65540fa51f38fe6b4bbb851689bada3134510e74a3e2a6a5b ALSA-2026:72663 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: Expat: Denial of Service via quadratic complexity in attribute processing (CVE-2026-66046) * expat: Expat: XML Injection via Malformed UTF-16 Input (CVE-2026-93990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default expat-devel-2.5.0-6.el9_8.5.i686.rpm 24ed7143703b956ba09fae2f9007f55214500ca2767647c352dba331860f25a0 expat-devel-2.5.0-6.el9_8.5.x86_64.rpm 84b59c2bd7b70176d91ad17474ad30257b1c26b16ebe82a8ec13515cf2fde4ef ALSA-2026:73426 Copyright 2026 AlmaLinux OS 0 1 Important

gdb security update

The GNU Debugger (GDB) allows you to debug programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing out their data. Security Fix(es): * gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gdb-doc-16.3-3.1.el9_8.noarch.rpm 0e8cc808dfa9a54de7cf167d2a080c9544f6b5f6da76f37d4c32d4b2f9ba41c0 gdb-minimal-16.3-3.1.el9_8.x86_64.rpm 317a24897ae6cf3824fb8ade032d49a6a02fb2a5d9d5918087b3661d34258db0 gdb-headless-16.3-3.1.el9_8.x86_64.rpm c364125c3703a7fa4658968cb9aeae0576abe7eaded0b153fcd0f4cced52e61b gdb-16.3-3.1.el9_8.x86_64.rpm d8bb8b16d462af52eac83eddde3cfab122aeefd18d9b3e83bfc58c38ea538129 gdb-gdbserver-16.3-3.1.el9_8.x86_64.rpm d8d7ebae2902a51c06ce89cc101c566b383a95e8a47033474fb807a789d34d9e ALSA-2026:7343 Copyright 2026 AlmaLinux OS 0 1 Important

nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647) * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654) * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784) * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.x86_64.rpm 0b8b106ba69140fb852ae61be1ed36476edf99cb7561a9ed14c99ed92f4e9d0b nginx-mod-http-image-filter-1.26.3-2.module_el9.7.0+223+9cd7031b.1.x86_64.rpm 21880dd5540cfd8a73f197d952fd32398578185afe3dbe9ebd4ccf9c6077fdcd nginx-mod-stream-1.26.3-2.module_el9.7.0+223+9cd7031b.1.x86_64.rpm 43f57a226dea643aba0e69600f18115aafd3e0adb2e264f4fe4bd22c2a449409 nginx-mod-http-perl-1.26.3-2.module_el9.7.0+223+9cd7031b.1.x86_64.rpm 77e4154032478afc436a2908f6bebdea97646111cd6ddca3ac354ad965e3551d nginx-all-modules-1.26.3-2.module_el9.7.0+223+9cd7031b.1.noarch.rpm 8625be1bb61ff199185d32d10533f2c6becc0bd595d4c9e5b89698cf231f92f3 nginx-mod-devel-1.26.3-2.module_el9.7.0+223+9cd7031b.1.x86_64.rpm 8de5a47f3985e5c42db3b090e6f8d36ebe14d56c01042af8692beb499a9b2988 nginx-mod-mail-1.26.3-2.module_el9.7.0+223+9cd7031b.1.x86_64.rpm 93c09885adee8f172b1615a2a2e223ced58e181df596034a0e56efe19922a0e3 nginx-core-1.26.3-2.module_el9.7.0+223+9cd7031b.1.x86_64.rpm 9eac5e7937588521586b0abb25bb5145533cdecb559cfb24a0a62baab595b986 nginx-mod-http-xslt-filter-1.26.3-2.module_el9.7.0+223+9cd7031b.1.x86_64.rpm a5746d42ac38ae6d75b91f0b6ec9b5032b09e6c2ef21f5006adc1f34f6d52158 nginx-filesystem-1.26.3-2.module_el9.7.0+223+9cd7031b.1.noarch.rpm f700a99a7d3c141ce36c826a6f190696bca3ca5f2cd132a61ef28dc660424e96 ALSA-2026:7350 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Nodejs denial of service (CVE-2026-21637) * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547) * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996) * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581) * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527) * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526) * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229) * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525) * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528) * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135) * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing (CVE-2026-21712) * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710) * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions (CVE-2026-21715) * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. (CVE-2026-21716) * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks (CVE-2026-21711) * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713) * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames (CVE-2026-21714) * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions (CVE-2026-21717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nodejs-docs-24.14.1-2.module_el9.7.0+222+ef1c61e1.noarch.rpm 290f01c220560280e8b6663ba1032bb090c4263df500da7c79062005df793c75 nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.x86_64.rpm 2e285b6e8ea088af7664c0af1f1a59f28fcc542b91b6772c9d00af6ea545707d nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.noarch.rpm 6688ca82e36c7f78fe80655131c4a7fad6d4c7b9c851130cb6202a27b946c979 nodejs-full-i18n-24.14.1-2.module_el9.7.0+222+ef1c61e1.x86_64.rpm 82386383dff29acaba45adb99b823b8265299ec67b4ed0aff93dd37afcdf1256 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+198+8bf605ba.noarch.rpm 97b592d61e7cdad2e8509964064ddbff27be4f5aa478b78c4438ac2fd0d42bb1 nodejs-libs-24.14.1-2.module_el9.7.0+222+ef1c61e1.x86_64.rpm ab86e7128049213f7f7670cccb12ade65b05a357d1b2ac1c76c7e65e094bca29 nodejs-devel-24.14.1-2.module_el9.7.0+222+ef1c61e1.x86_64.rpm b9801417ac798475ef783d05cc6f974b7e1b0c66dbb715799e9de3d1c5feae3b v8-13.6-devel-13.6.233.17-1.24.14.1.2.module_el9.7.0+222+ef1c61e1.x86_64.rpm ba69d6cb4633e04f73df830273165219dcdf954a4608ae093a0610140a0e293a npm-11.11.0-1.24.14.1.2.module_el9.7.0+222+ef1c61e1.noarch.rpm d17496ca3682a8e6122b905a795b96f1a7ffd63f051fb6b5be46e8191f0e03ae nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 ALSA-2026:73512 Copyright 2026 AlmaLinux OS 0 1 Moderate

gawk security update

The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs. Security Fix(es): * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468) * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553) * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gawk-all-langpacks-5.1.0-6.el9_8.1.x86_64.rpm c6bbea04452d636abc45ad7f1da1043ec9e66ee9023ab8295eb0178fb2ecb1f4 ALSA-2026:73766 Copyright 2026 AlmaLinux OS 0 1 Important

pki-core security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561) * pki-core: Dogtag PKI v2 REST ACL filter's reverse-lexicographic tie-break lets a CA Agent invoke the admin-only raw profile creation endpoint (CVE-2026-80110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default idm-pki-server-11.7.1-2.el9_8.noarch.rpm 0be7465bcb3362a3ee42f558a74c407c5e357a3cec76bf2d891b8f7b22b37fcc idm-pki-java-11.7.1-2.el9_8.noarch.rpm 45accff203deaf91b04d80b76a8b69fc0ed0167c3219777b49e3e560616c3e4f python3-idm-pki-11.7.1-2.el9_8.noarch.rpm 7cdb2b5d930010bbebf60d3b62fdedf7118fbb41a798b829b109192b8d60ae6a idm-pki-base-11.7.1-2.el9_8.noarch.rpm 7fe4d9e4ba29b64ee9004839fd331a3037c2fd71214a9750ccc0aa0a5f25cba1 idm-pki-acme-11.7.1-2.el9_8.noarch.rpm ca1650891a908a6b38eef68f208682acdea4e0f58fe3e2d83478ccd526576ccb idm-pki-ca-11.7.1-2.el9_8.noarch.rpm d223ac6542cafc7b4197cb73101e27b427d0751ac102916e3043983e65773dce idm-pki-kra-11.7.1-2.el9_8.noarch.rpm ef33e6f4d5d2acd1e082dea0c53b585a59884c3eba548e0c3f7c5a2127db4669 idm-pki-tools-11.7.1-2.el9_8.x86_64.rpm f3cf6842abfab225cfb11c98c5683157a4192e4d22da4899e11056515328eb8f ALSA-2026:73838 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:24 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation (CVE-2026-85152) * undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options (CVE-2026-84961) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) Bug Fix(es) and Enhancement(s): * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-9.8.z] (JIRA:AlmaLinux-249189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nodejs-full-i18n-24.21.0-1.module_el9.8.0+321+1555b6a2.x86_64.rpm 08126929e18f6c35e0b4f9462cd79469816a99e4bc2722b44f964a476984056c nodejs-nodemon-3.1.14-3.module_el9.8.0+292+f4eaf8b2.noarch.rpm 34593bae84e3eda22d3c85db93eb84f883d07844a6d2c91217637b2c000e7e3b npm-11.19.0-1.24.21.0.1.module_el9.8.0+321+1555b6a2.noarch.rpm 3b671ea4309e16dd67563449867fcd5bf6bc6480d23b0d4db1a1575fd4ccb715 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a v8-13.6-devel-13.6.233.17-1.24.21.0.1.module_el9.8.0+321+1555b6a2.x86_64.rpm 77efe31ea12209828bede0304cc32f8a335f3f66936d46ff2bf915c41e104421 nodejs-libs-24.21.0-1.module_el9.8.0+321+1555b6a2.x86_64.rpm 9a3e3428238c9daa1b974f5f0dcde83cce295db3d4e0c6f998ad7fd95d5cfdce nodejs-devel-24.21.0-1.module_el9.8.0+321+1555b6a2.x86_64.rpm 9d19ae2cdbcc29fe108af593235bc4672f9844fa6b94eeb83b65adcec93a562e nodejs-docs-24.21.0-1.module_el9.8.0+321+1555b6a2.noarch.rpm af3130313d30050827c59151b1aada7a5f51ada41e4ae3921be4e7f59930338a nodejs-24.21.0-1.module_el9.8.0+321+1555b6a2.x86_64.rpm be034c9a003bef9b185dc9877878e3c7680103e6370311b769588bbd2526bdd0 nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 ALSA-2026:7384 Copyright 2026 AlmaLinux OS 0 1 Critical

cockpit: Unauthenticated remote code execution due to SSH command-line argument injection

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default cockpit-storaged-344-2.el9_7.noarch.rpm 0c9b09373a2cf6803bc493ad471ec3a0d5e03cb01e571b4046e2daaf255195b2 cockpit-packagekit-344-2.el9_7.noarch.rpm 1ef1686e9430eb02e35f06d182d13aa3a421ee0a8388cd25f9a0e2d6d91e4bae ALSA-2026:73955 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay (CVE-2026-60001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openssh-askpass-9.9p1-12.el9_8.alma.1.x86_64.rpm 1d59f0de90f14dfd1a361e9f7783927273b5b65423dc392bef23345f8a5c934f pam_ssh_agent_auth-0.10.4-8.12.el9_8.alma.1.x86_64.rpm 3dc7d0fdd352c15af494fedc50c896c50fa62108bd08b12625bd88bc78677954 ALSA-2026:74370 Copyright 2026 AlmaLinux OS 0 1 Important

gvfs security update

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer. Security Fix(es): * gvfs: SFTP: heap-based buffer overflow in read_reply() (CVE-2026-84268) * gvfs: gvfs-admin socket ownership race permits local root (CVE-2026-88924) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gvfs-mtp-1.48.1-8.el9_8.1.x86_64.rpm 3206043dde27f932c8c19f18f2c80a93af54d0fa552c3163b8675a60935e4f1d gvfs-devel-1.48.1-8.el9_8.1.x86_64.rpm 3880d6932f256550fe5eb94023e51c926f1f3180685d5a186cc52af442f29685 gvfs-client-1.48.1-8.el9_8.1.i686.rpm 39c8b99667292574ac35c0cede62bb1af1dd80790e8b41982afbae8c8e45931c gvfs-goa-1.48.1-8.el9_8.1.x86_64.rpm 3b1cda4d64266d34a408ff7345b81aff04d637951a6b03431057e7300555b351 gvfs-1.48.1-8.el9_8.1.x86_64.rpm 722641bd316912889c259c04e788953e923b0e579950a58182a0d9e2824fd7ee gvfs-smb-1.48.1-8.el9_8.1.x86_64.rpm 7be1bbc95ec9e3d8e96c0c319703ac156b29872153f321019fe067a259e6b319 gvfs-client-1.48.1-8.el9_8.1.x86_64.rpm 9a469a5c7179df3fb558d3198fc58672938c258f245a703a5676eb056a9124e4 gvfs-fuse-1.48.1-8.el9_8.1.x86_64.rpm a2ab8810f722132a62790944b5601a2d7a34040aeac6a9459cc2b82eefea8a91 gvfs-devel-1.48.1-8.el9_8.1.i686.rpm b067b2f069c415c09ad10b463ef111b951e63c6337134f2fcf91a9f5648d7f6e gvfs-gphoto2-1.48.1-8.el9_8.1.x86_64.rpm bf482d17d833a12468a5984be2c8f18396e6f3024502ae85fddde480161b739b ALSA-2026:74424 Copyright 2026 AlmaLinux OS 0 1 Important

libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fix(es): * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622) * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow (CVE-2026-18917) Bug Fix(es) and Enhancement(s): * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to virtio-vga on target [almalinux-9.8.z] (JIRA:AlmaLinux-186018) * libvirt-guests does not work together with virtlockd on shutdown [almalinux-9.8.z] (JIRA:AlmaLinux-224986) * Expose guest-get-devices in libvirt-api [almalinux-9.8.z] (JIRA:AlmaLinux-243306) * allow hyperv pvpanic "device" to process Windows crash dump [almalinux-9.8.z] (JIRA:AlmaLinux-242549) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libvirt-daemon-driver-storage-rbd-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 0de90f074618c3de57f0d383f9b6465f031799d25cfd67943ee832f4cdbc23d5 libvirt-daemon-proxy-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 11e21939770511041b610ae58582f6266dd9896b706c9f25e5a8c0346e49c7b4 libvirt-daemon-common-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 1ab062386cb4fd09eab40adde6233ae8a68c85433ec29c47dc3235a75ed236bf libvirt-daemon-driver-storage-logical-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 1b1a95c979192197cbad60380ac987fc90f9728f664d70668b13c052a939a5b3 libvirt-daemon-log-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 2122d1f77bdc4dbdeedec798e09d507655224fcf2d5a15d596c1856b82ef0dd0 libvirt-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 25c097b3cb925736bbc54ee79bc3350872e53b462ee7b32e11aa59dc7184b852 libvirt-client-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 28c4f9a3f8991acd4f51e8889596fe1b37e14c43e19ad5db3e34a51c8b33a71b libvirt-client-qemu-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 44e9c64e57111bc0f1cfd5e25aff42de5dc4f7e1e5467fdf5b7612b5827ddd64 libvirt-daemon-lock-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 5a4367d1d3725da77076fca429702459ef019daa2b28fd78a5337e7b648a9e30 libvirt-daemon-plugin-lockd-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 641f67e2ff4044db19447ecffe6d20c0d1f6098dd27f23e9aa414b1e283cd016 libvirt-daemon-driver-storage-disk-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 679af2c39a4b02b599ef172ed2b143db5a91a5220dcabb8f5ff5fdfcc8adbca7 libvirt-daemon-driver-qemu-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 67e3b4a9125043141e8131947fbb383cef7fe03cab92101d3530623f73930038 libvirt-daemon-config-network-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 745bc1b415378bdd5679bc405ad9381d3b10789280ce7acf360296c9363377b0 libvirt-daemon-driver-network-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 78bcde9ca624c622b876175d31be6913db168dd8d3871331aefe72090a4e3828 libvirt-daemon-kvm-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 8e6e7fd464080a969f51856870f6264639d2d6499d6f30061e9c9c6001ba31c0 libvirt-nss-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 8f23cdab5eafc15e8eee10e1d5ba4cb73d64aa1256d3b62a990821cc9a55d1aa libvirt-daemon-driver-storage-mpath-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 9450847c4668d16beb0ec0d69a10124cccfdf235968a4580f45b5f8fa9af2c32 libvirt-daemon-driver-nodedev-11.10.0-12.7.el9_8.alma.1.x86_64.rpm 9949c30a3991145666aec2e4ecb575322cafbadb57165079a3facc01dc8428a8 libvirt-daemon-driver-secret-11.10.0-12.7.el9_8.alma.1.x86_64.rpm a887c1cb2bd0ce65f418c7334c76656d077853eb0e9f3665d963051f223fbcb2 libvirt-daemon-driver-nwfilter-11.10.0-12.7.el9_8.alma.1.x86_64.rpm ac82bd9d251c6ebf6e4d2d106074b04b3c861ae55ca5a05ab9f28c4b452492ff libvirt-daemon-driver-storage-11.10.0-12.7.el9_8.alma.1.x86_64.rpm b943f9e085a2df83eb7019701bcced6f80227add91da5d1bcf69b8a8096141ab libvirt-daemon-driver-storage-scsi-11.10.0-12.7.el9_8.alma.1.x86_64.rpm b9f08ea69dd631afa367e33250ab4fcaf9e48db48821694cd81594ee9b152a8a libvirt-ssh-proxy-11.10.0-12.7.el9_8.alma.1.x86_64.rpm c0a3f7abab0d3f751f6a51ab4d1d501e73e28043c09702c549a3cfc11270c9cc libvirt-daemon-driver-interface-11.10.0-12.7.el9_8.alma.1.x86_64.rpm c313e93b87e77fb438d1d3eca5ed7d083041d9a6fe812e5275a2f53dc5d0da85 libvirt-daemon-config-nwfilter-11.10.0-12.7.el9_8.alma.1.x86_64.rpm cd23b13273d69a3c66b9edb790b93bb8a19c205abe1b9954c115b76cff2001ed libvirt-daemon-driver-storage-iscsi-11.10.0-12.7.el9_8.alma.1.x86_64.rpm e0aef1f0f903fb77546c23e679f83777c9a767a6e3793d2eedbe88d5ab18859d libvirt-daemon-driver-storage-core-11.10.0-12.7.el9_8.alma.1.x86_64.rpm f291603c00f67b4363c38394f2009aef65750a199fe239c904c3554f089dda42 libvirt-libs-11.10.0-12.7.el9_8.alma.1.x86_64.rpm fa34e3c88cb39e207a71fa97c8a012486f5bbe3bfff5008809a67693a9681248 libvirt-daemon-11.10.0-12.7.el9_8.alma.1.x86_64.rpm fbefd36e965f4f7866d718aafa4350c37436faeea63bbc4f769b71a0c774c22a ALSA-2026:74438 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) Bug Fix(es) and Enhancement(s): * Backport of protocol attribute to IP addresses (IFA_PROTO) [almalinux-9.8.z] (JIRA:AlmaLinux-169936) * try_charge_memcg() refactor in kernel 5.14.0-687.36.1 causes premature memcg OOM with GiB of clean page cache present [almalinux-9.8.z] (JIRA:AlmaLinux-269060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rtla-5.14.0-687.54.1.el9_8.x86_64.rpm 3029611962cf12ba80d0c789d01219b91ce554eea11561c70a644d0ce00f51d8 kernel-debug-devel-5.14.0-687.54.1.el9_8.x86_64.rpm 5cf8f44cca42a3ee76d2c2a26f490dc604dd7add4d11b02cf1a296de44d624bb kernel-debug-devel-matched-5.14.0-687.54.1.el9_8.x86_64.rpm 85801e86de19f59881e3a21716a0b54ad88a038a4c17abbba88910e5b92e8ab8 kernel-doc-5.14.0-687.54.1.el9_8.noarch.rpm 93ba5d6f80b0eac857876df1d62ca2c3d73c7441ad73a04b418dc7cd83a83644 python3-perf-5.14.0-687.54.1.el9_8.x86_64.rpm a65dda59a2579529adc0171286b804b9e6459f352ea3190913a60ba55f0f9a07 kernel-headers-5.14.0-687.54.1.el9_8.x86_64.rpm b076e19c6756e3e204f2112812a3fe792ec0ae9bdf9406be3572c64daf98150a kernel-devel-5.14.0-687.54.1.el9_8.x86_64.rpm b8c2b5ceb85f4e8a733049101b7f006e16c53226408e4ac66bf33501f57b1f70 rv-5.14.0-687.54.1.el9_8.x86_64.rpm d61de5b9bc94973f29c1b091beb59973f8f9c21afeb1854356ad07c6437d7545 perf-5.14.0-687.54.1.el9_8.x86_64.rpm e37741fe6f89356d62760dae4f055221b12533f30d08c15e31a884a0be42ab54 kernel-devel-matched-5.14.0-687.54.1.el9_8.x86_64.rpm e87c175e1737e6630c0e4ba3f5ff575c3de3ebb875ba6c488a1b660d6cf36e80 ALSA-2026:74457 Copyright 2026 AlmaLinux OS 0 1 Moderate

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter (CVE-2026-39919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default ghostscript-tools-dvipdf-9.54.0-19.el9_8.1.x86_64.rpm 054de95cb65441a5bc7d149006bbb39e034b9e2d67befeb26fcd96683dcb9e62 ghostscript-doc-9.54.0-19.el9_8.1.noarch.rpm 20a79f095fc54e0eaaf0efc2a53ea22ebaaa22528519cff071f89e5c8a7d09ba libgs-9.54.0-19.el9_8.1.x86_64.rpm 308eb93a1f715f38d919563d3b53506925615227f5cdb29344e97a49b9bed2d0 ghostscript-9.54.0-19.el9_8.1.x86_64.rpm 67269f14afc10c766d9739d203807878f47f07ad0f12c07c47736eca789fb764 ghostscript-tools-printing-9.54.0-19.el9_8.1.x86_64.rpm 6884b4aa87ccb137ecc03e661bfeb52a7d231dcfcdbb4204c1bd44c6dbe74496 ghostscript-x11-9.54.0-19.el9_8.1.x86_64.rpm 8a81d362647a05f043558ce843f2185b369e9e7fd061bd3590185284da349999 libgs-9.54.0-19.el9_8.1.i686.rpm 971cbcb40f901b4e2a4d4d665e58e4a8f9b0cb89afcb0fc55de26423c7e15dad ghostscript-tools-fonts-9.54.0-19.el9_8.1.x86_64.rpm c69635a2bdeab7078d988ff543ef2bd0963f7a5606263689332ebb6186abcc19 ALSA-2026:75571 Copyright 2026 AlmaLinux OS 0 1 Important

sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization (CVE-2026-96512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default sudo-python-plugin-1.9.17p2-3.el9_8.3.x86_64.rpm 5627b06cb8b965a8666a50f11f21a7ba845b47efd7ed7615f0ba4008f6239c67 ALSA-2026:75575 Copyright 2026 AlmaLinux OS 0 1 Important

gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file (CVE-2026-90947) * gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions (CVE-2026-90948) * gimp: integer overflow when generating a thumbnail preview for a PSD file (CVE-2026-92248) * gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file (CVE-2026-97185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gimp-libs-3.0.4-4.el9_8.14.i686.rpm 37e255782b024e1b6f3a50bb5374e8800e2ac9c494218ae3037dff62118a9e34 gimp-libs-3.0.4-4.el9_8.14.x86_64.rpm 38ed091a2bcbe98ee7714a5b8ecdad7e1606e4c69690279b6a48dcea685cb178 gimp-3.0.4-4.el9_8.14.x86_64.rpm 4523c89459f56b5be49c1437facab1efe97b7f6672dd2d4eb0e26aa6c9d5cbaf ALSA-2026:75578 Copyright 2026 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736) * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667) * bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563) * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274) * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind9.18-dnssec-utils-9.18.29-14.el9_8.10.x86_64.rpm 47b941d02889dd0ef9a375a2b9561ca4b5e538718b950965c551d7cddcb4a9b9 bind9.18-utils-9.18.29-14.el9_8.10.x86_64.rpm 4d42be9d12fd8d7a1867ebbc43cf07c9e3e6a526768fa75b665e1576a96e47bc bind9.18-chroot-9.18.29-14.el9_8.10.x86_64.rpm 54751f40f5d37bc26099a06676ee54218932acfb68bf8cbcf083a3a65e6b6c23 bind9.18-9.18.29-14.el9_8.10.x86_64.rpm 593c9e0ec4aa54ee21ed7c842b71f57e3ab1e1bb2d87847dba623560a5cbbeec bind9.18-libs-9.18.29-14.el9_8.10.x86_64.rpm b4f82f61e7b5d7225f9d05977ab668b18da6b2fe45b7900d2e01554a7321db5e ALSA-2026:75673 Copyright 2026 AlmaLinux OS 0 1 Important

mariadb-connector-c security update

The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fix(es): * mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mariadb-connector-c-devel-3.2.6-2.el9_8.x86_64.rpm 48d505898e9afca01d463393c2a452796fed4bb5f6265e16877e591c08a9b69c mariadb-connector-c-3.2.6-2.el9_8.x86_64.rpm a7ede44008b8f76e2a17218f7df8f66895be626a44453a36343b81dcfac878ab mariadb-connector-c-3.2.6-2.el9_8.i686.rpm acfa413ac93cd8dc948dc36bbdc82d6a049fae6bb2a51deabed54346f3d29a9d mariadb-connector-c-devel-3.2.6-2.el9_8.i686.rpm de07dcceaae4628d517e39540e70bce7b174198ea390855e0d825f707a78b352 mariadb-connector-c-config-3.2.6-2.el9_8.noarch.rpm fc7dff578a251b7c72a4e8d200d18e840141bf13b7b499db9866e9d88a177fab ALSA-2026:75767 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667) * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274) * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind-chroot-9.16.23-40.el9_8.10.x86_64.rpm 1cc1c9a6769e57c0d7101dced58b5a7bcf80258de846dc8fe70ca01e038f0a84 bind-dnssec-utils-9.16.23-40.el9_8.10.x86_64.rpm 67bfe7b6f09f2d3aa042e17711f0edb4f40155364ed197bddfe5858855b0ef69 bind-9.16.23-40.el9_8.10.x86_64.rpm 6f2f11f40c7c9088a205f999c005de28dd0c94329ede2aa0d55895590c4642f1 bind-dnssec-doc-9.16.23-40.el9_8.10.noarch.rpm 7a524da214c9061dd809b96f1a2282e9f174658e37be3bca8180bd5f90a9bb11 bind-license-9.16.23-40.el9_8.10.noarch.rpm 8e606d2ca32583855edebf2c4959fda822e98fa4bdf8397313c697b895d1d00c bind-utils-9.16.23-40.el9_8.10.x86_64.rpm 95d30d0405a11880a11d75d384b77354a7992a18127f63c43bd225b5b8540505 python3-bind-9.16.23-40.el9_8.10.noarch.rpm d9c20ba5b3b5bad11d2374dab93550626af777c6dcdd803868365868b7e06fc4 bind-libs-9.16.23-40.el9_8.10.x86_64.rpm db0920d87d49bd317ab545bd0395c4a10088a35dfae1f8d88bdc8c6ef30175b6 ALSA-2026:75768 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default vim-enhanced-8.2.2637-26.el9_8.23.x86_64.rpm 5c2d5163c21d42e7eddb5c965761887373ceb3d857f29613147e7c656968dc59 vim-common-8.2.2637-26.el9_8.23.x86_64.rpm 6e3d9012ac89206a42bc415f640df18027efdcd68a866fc3040e78c8481cef5a vim-X11-8.2.2637-26.el9_8.23.x86_64.rpm 7e2eeb9fed3095de59063b5d45bea755f6f48b4f68551cfe3e1b25fdbd401e1d ALSA-2026:7671 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default firefox-140.9.1-1.el9_7.alma.1.x86_64.rpm 3897467ff56fe0fc886dfe90512c8cb361baffd9f8390ea7269ebc26e56a2f1f firefox-x11-140.9.1-1.el9_7.alma.1.x86_64.rpm 5b125030d7d7a76e913e172275e5a3e336304d06bbed99b8a9ab93bacd7fae84 ALSA-2026:76744 Copyright 2026 AlmaLinux OS 0 1 Important

opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests (CVE-2026-84445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default opentelemetry-collector-0.158.0-1.el9_8.x86_64.rpm 15cfad8b7234da0db92d684bd23c885ad353c2569dfabc4fdfb492f6cf2d7c8e ALSA-2026:76750 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function (CVE-2026-9496) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default nodejs-devel-22.23.2-2.module_el9.8.0+322+f4aa738c.x86_64.rpm 4efd59eed36389dc57286ebd3fa99a3bb536301c57bede8dc3b098095f714888 nodejs-nodemon-3.1.14-2.module_el9.8.0+302+959ebcd4.noarch.rpm 5190b3e52c15db838024cbc8fabaabca0e1df1b58db46abb8e280935c57129f6 nodejs-full-i18n-22.23.2-2.module_el9.8.0+322+f4aa738c.x86_64.rpm 5268a142c98d399de639256ce6674b06751dc1d1189d8bb65d9ce48b748f718b v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el9.8.0+322+f4aa738c.x86_64.rpm 606c771d26b348e7105dadb7ebdd22d72768157d418513706bfe5c0340fdc933 nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 nodejs-22.23.2-2.module_el9.8.0+322+f4aa738c.x86_64.rpm c3f753d5c056845c28afee0f6d211eab86576afd34e2079d396f5669e1c579f0 npm-10.9.8-1.22.23.2.2.module_el9.8.0+322+f4aa738c.x86_64.rpm d577f6975a9c5463a9620da4b9470bf96a4c33ebec115c706ac2f002c319f4b4 nodejs-docs-22.23.2-2.module_el9.8.0+322+f4aa738c.noarch.rpm dc0de39d827a00ab6bd0d5487e3d4c7971b5e3c74d6268d6e135d21f1f870add nodejs-libs-22.23.2-2.module_el9.8.0+322+f4aa738c.x86_64.rpm eba5a125080ab25e9b7917bb3624430a9cc04cd972fca8ec5ed8f940185daa59 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 ALSA-2026:76755 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954) * FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964) * FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956) * FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963) * FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959) * FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libwinpr-2.11.7-7.el9_8.8.x86_64.rpm 00cc6a633ab1cf0130d6fb34541d6946538a7cb10ad5a2ada3046a65f4531779 freerdp-2.11.7-7.el9_8.8.x86_64.rpm 545048af69dbec20f8568b4ef72113e8d17666e689f4c585d1e76216d78d10db libwinpr-2.11.7-7.el9_8.8.i686.rpm 75c7849d5e457d549bba5b75d8b526a9ba51914105e365dd77de0e280af1c153 freerdp-libs-2.11.7-7.el9_8.8.i686.rpm 7855ad39d9db1fee31fbe04ab6bfdd23082dc0a815708331c2648dac64e9c592 freerdp-libs-2.11.7-7.el9_8.8.x86_64.rpm b55b4f6397109f43a4c99e4db2d1e407f4adea22ca84d0dbae6c21ac104e26fa ALSA-2026:76760 Copyright 2026 AlmaLinux OS 0 1 Important

perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fix(es): * perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting (CVE-2026-88815) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-DBI-1.643-9.el9_8.7.x86_64.rpm ab0aaacb75b50dea7961d06333ab79f37ccbd570e5964e6e29cdcaf23221ae59 ALSA-2026:76761 Copyright 2026 AlmaLinux OS 0 1 Important

firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832) * firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784) * firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794) * firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777) * firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792) * firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776) * firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757) * firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786) * firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869) * firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791) * firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782) * firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772) * firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759) * firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778) * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758) * firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774) * firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785) * firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788) * firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771) * firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790) * firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100780) * firefox: thunderbird: Use-after-free in the Networking: Cache component (CVE-2026-100767) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-100756) * firefox: thunderbird: Uninitialized memory in the Audio/Video component (CVE-2026-100783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default firefox-140.17.0-1.el9_8.alma.1.x86_64.rpm 68ee3dd2126066b087c940aeb57920b49de90ef3fa2b6b23ed46239ec44789c5 firefox-x11-140.17.0-1.el9_8.alma.1.x86_64.rpm 829ed37fd2a7b09ac07b92a39a9246773aa58aeff414298e20b95f0d9afa2cba ALSA-2026:7679 Copyright 2026 AlmaLinux OS 0 1 Important

perl-XML-Parser security update

This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options may be provided when the XML::Parser object is created. These options are then passed on to the Expat object on each parse call. They can also be given as extra arguments to the parse methods, in which case they override options given at XML::Parser creation time. Security Fix(es): * perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files (CVE-2006-10003) * perl-xml-parser: XML::Parser for Perl: Heap corruption and denial of service from crafted XML input (CVE-2006-10002) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default perl-XML-Parser-2.46-9.1.el9_7.x86_64.rpm f8e9abf55ad49e9c443053eba8ff353b23c0dd40a3e5fcdbefbabf6e9dfc4926 ALSA-2026:77017 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.12-devel-3.12.15-1.el9_8.x86_64.rpm 2a1485dc1e6644582df07d0d1caf394a455c3c5ecfa0d96b2cf1e69754cc415c python3.12-3.12.15-1.el9_8.x86_64.rpm 56f39ade59025872317402bf5b1166ea46bc0135c4fca4b31ad2fe6c9c871acd python3.12-devel-3.12.15-1.el9_8.i686.rpm 646f474b83183e8b5f378baf8b1655949bc1278505b27a9088850536c1f02a52 python3.12-libs-3.12.15-1.el9_8.x86_64.rpm 656fd9155483e9765c100d3683920fc1a8114fa9066d7cf8974c70d3ef766c96 python3.12-libs-3.12.15-1.el9_8.i686.rpm 7a6011cbc6be6b42955ad77b48a43953458f3723ab7ba1a60a613db5687a59b1 python3.12-tkinter-3.12.15-1.el9_8.x86_64.rpm 910ed5e31f05bd506d2c2e3d547714134d5af8252cc565bfa1410aeb000d1a2f ALSA-2026:77021 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-tkinter-3.14.8-1.el9_8.x86_64.rpm 1a25d7139560a57b8dc7128b0f28b28ed0c13fb52ec03b07a46ffb78aaced9c6 python3.14-libs-3.14.8-1.el9_8.i686.rpm 5a25993d1c474d4ccabc39d8db3a264dfa971df3ada1f6ebb2044256ed2201cd python3.14-devel-3.14.8-1.el9_8.i686.rpm 6637952df7ed92e5fd774259b26bfebde5522d5bd8168c8e7b797a92fa51bf84 python3.14-devel-3.14.8-1.el9_8.x86_64.rpm 84304f55e991decf67ba4f9dac911ab7532dc24041b2c5c7e6241f2b6561361e python3.14-libs-3.14.8-1.el9_8.x86_64.rpm 9fb70bc2144e960d7596b509d903e971c13d6c46291f4b41522fd52cae977c46 python3.14-3.14.8-1.el9_8.x86_64.rpm a31c39c34eb70f1ecf7d16ea7ea5d561619c98c11d280c2ddcadc1b2a7151fc7 ALSA-2026:77396 Copyright 2026 AlmaLinux OS 0 1 Important

openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default openssl-perl-3.5.8-2.el9_8.x86_64.rpm 5ea65fdc4f3e0b35bc5ccdf48232c1e3be15af22f4ba8d4846e46b149eee0275 openssl-devel-3.5.8-2.el9_8.i686.rpm a15ad132468354c92bfa52c9a253b0c77f495f58a3108b2a722b8e2b3793fb77 openssl-devel-3.5.8-2.el9_8.x86_64.rpm d051cf96405c5866b5afe7add0635c7e853a75b1f649c1d2e661a774017f348e ALSA-2026:77689 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) Bug Fix(es) and Enhancement(s): * "iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on almalinux-9.7 [almalinux-9.8.z] (JIRA:AlmaLinux-169480) * [GNR-D] missing interfaces tspll_cfg (JIRA:AlmaLinux-183201) * AlmaLinux9.8z KVM guest panicked in vmmouse driver (JIRA:AlmaLinux-186577) * Add Epson RX8111 support to AlmaLinux9.9 [almalinux-9.8.z] (JIRA:AlmaLinux-212014) * RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [almalinux-9.8.z] (JIRA:AlmaLinux-256279) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-5.14.0-687.56.1.el9_8.x86_64.rpm 0631a898a4c144200a63a1b1d762941b6c15bf1e8ed8fd6ccf06e9a25cc03346 rv-5.14.0-687.56.1.el9_8.x86_64.rpm 45c92e11157a5d62ca6e5ef459b384f60e906651f2b27e2c1c99dc05d8f700a7 python3-perf-5.14.0-687.56.1.el9_8.x86_64.rpm 590c309416552385ac65af4affb8c947fe31a60ad74f2f903874b34c4d536613 kernel-headers-5.14.0-687.56.1.el9_8.x86_64.rpm 6d85df241c96c86f5554d2fc5d41d8b3d60d8698a5b6da0cc612f734df80cf58 kernel-doc-5.14.0-687.56.1.el9_8.noarch.rpm 7a91ac48476c2ac6c7aa7e421a976065838589636679a27e05d6e6d8e29a95bd perf-5.14.0-687.56.1.el9_8.x86_64.rpm 858e37e6e67d5524f5bef4025ebbe866192141554eca5ed91c81847d95da50ab rtla-5.14.0-687.56.1.el9_8.x86_64.rpm cb0967b4ec7d6869a27aa1748aca59fbee127a49499dee97c8376d4da8377aba kernel-devel-5.14.0-687.56.1.el9_8.x86_64.rpm cc85d1b56cdf0b228d0607492e40d623b982610804275e857d2dc46a28ed1f71 kernel-debug-devel-matched-5.14.0-687.56.1.el9_8.x86_64.rpm e879ac10c97a5b3683348a341c49c3b3f8e9e598fde815517526bc7714ed68f1 kernel-devel-matched-5.14.0-687.56.1.el9_8.x86_64.rpm f10372932311a084bce8cf330ffae004761f6098ec2c0927843367578620fe5f ALSA-2026:7896 Copyright 2026 AlmaLinux OS 0 1 Important

nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996) * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions (CVE-2026-27904) * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135) * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default nodejs-docs-20.20.2-1.module_el9.7.0+224+0af7cc6b.noarch.rpm 314f155c9da69d62425f24a2d2fac67bcaa649b9c23fc6cb01870e3ba1d9f489 nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm 572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648 nodejs-20.20.2-1.module_el9.7.0+226+88d36870.x86_64.rpm 7a2981df1ec20b281c2dbfbfe47dc7c5c00413f8c09e3c4ef27eb23c792244a1 nodejs-devel-20.20.2-1.module_el9.7.0+224+0af7cc6b.x86_64.rpm 912cff9d77723f2d0bd2b694d23d437aa967b63b00ab153897f226637f2a1683 nodejs-packaging-2021.06-6.module_el9.7.0+226+88d36870.noarch.rpm 9ffbd61248997549fd001f5063043eb12602b6f2d1536abbf1f7e32520b402e7 nodejs-packaging-bundler-2021.06-6.module_el9.7.0+226+88d36870.noarch.rpm c18bda74e3d85c8b2f96722b89e8b886d82685c1b71bf3d3c7a308d400dbd165 nodejs-full-i18n-20.20.2-1.module_el9.7.0+226+88d36870.x86_64.rpm d86dea013496928b974f0247602a78bf001f13732f2804f180ec6c602a62bc0a npm-10.8.2-1.20.20.2.1.module_el9.7.0+224+0af7cc6b.x86_64.rpm e50d810663cff5b3a1d767525214888d1e474eb848c4aee88d2988015d59a2ea ALSA-2026:7915 Copyright 2026 AlmaLinux OS 0 1 Important

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default bind9.18-chroot-9.18.29-5.el9_7.4.x86_64.rpm 4304c320b1f40fbc0ffa32ed9764a47c1d5add7e346960daa2f5afd01d853eff bind9.18-dnssec-utils-9.18.29-5.el9_7.4.x86_64.rpm bf7a9c1038a416e847f39625e07ec426161298486bfbf82118e090b0b1450a74 bind9.18-9.18.29-5.el9_7.4.x86_64.rpm cd55142ef3fceb2856b6e212739b5a2a7de3a93cc1e83d16aba48e5ce08e1717 bind9.18-libs-9.18.29-5.el9_7.4.x86_64.rpm da8c984b448ea15f284656f093d9420665cc3573146bbc7eb0b494f1574c1ccc bind9.18-utils-9.18.29-5.el9_7.4.x86_64.rpm ef415e1d0fa583813be97ef53374eb4da4adc65b04320b58f689c103a5f2455e ALSA-2026:79177 Copyright 2026 AlmaLinux OS 0 1 Important

mod_auth_openidc security update

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: mod_auth_openidc: Denial of Service via malformed state cookie parsing (CVE-2026-54789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default mod_auth_openidc-2.4.16.11-1.el9_8.1.x86_64.rpm 3311fe98a83d0456b4f03097c4c8d1177886d98f51d23a74e415b3bc93f049fd ALSA-2026:79281 Copyright 2026 AlmaLinux OS 0 1 Moderate

glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion (CVE-2026-6791) * glibc: glibc: Process abort due to invalid memory in wordexp (CVE-2026-6368) * glibc: Fix out-of-bounds array write in tdelete (CVE-2026-19542) * glibc: Non-progress DoS in SHIFT_JISX0213 -&gt (CVE-2026-77117) * glibc: Non-progress DoS in SHIFT_JISX0213 -&gt; UCS-4 conversion state (CVE-2026-80489) * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374) Bug Fix(es) and Enhancement(s): * glibc: Stop shipping glibc32-debuginfo package (in debug channels) [almalinux-9] (JIRA:AlmaLinux-219516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default glibc-devel-2.34-283.el9_8.x86_64.rpm 2859ecfe172fb8db2a8d71e8f50c4530ab39afc327e71ab4b6efc9e5278ca476 glibc-doc-2.34-283.el9_8.noarch.rpm 8689d2fcc2bf7cee48da5eeeeea4242181705a1151d81e82fa00b65bfa056da3 glibc-locale-source-2.34-283.el9_8.x86_64.rpm 8811e84429c81896428cb1f96723af8e0060401ddcdacf00687a525699230ef5 glibc-utils-2.34-283.el9_8.x86_64.rpm 9f20ab8f1c79dcc074383a68d544df66dfbf5112c30fbd1e3c77b071ef0c0aff glibc-devel-2.34-283.el9_8.i686.rpm c135d3b7ce2f10b2473ecfe5bc28f6fe94022c351f537216995eba623fce10e7 glibc-headers-2.34-283.el9_8.x86_64.rpm e6817674a68f97602dc34668e429c0ccb94ce56022231ecb6950a6b2f2b279ca ALSA-2026:80496 Copyright 2026 AlmaLinux OS 0 1 Important

flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fix(es): * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`) (CVE-2026-86320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default flatpak-builder-1.2.3-1.el9_8.1.x86_64.rpm c7a960bfe44bfc0852d67080d82d7f25ad77d89be67384a936da56b4fef1316c ALSA-2026:80497 Copyright 2026 AlmaLinux OS 0 1 Important

flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as root via extra-data extraction (CVE-2026-96275) * flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280) * flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer (CVE-2026-96808) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default flatpak-session-helper-1.12.9-4.el9_8.4.x86_64.rpm 10040f08e898d8c449aec6fe8dda17d8cf0e464338d4083c3e25497fb2ed5674 flatpak-libs-1.12.9-4.el9_8.4.x86_64.rpm 7167ee4e575a3c10fa4aa20432c85656ba7acee9e56f932f1365a8b249142aca flatpak-selinux-1.12.9-4.el9_8.4.noarch.rpm 9e712cfeb4f24f5cd4219a7bee38555aa6217a1b054683debde1d17c0a8f7a26 flatpak-libs-1.12.9-4.el9_8.4.i686.rpm c4aa274f13ed27b4286268023cc94468fb212e5fb20dafdaf1427b286e0da771 flatpak-1.12.9-4.el9_8.4.x86_64.rpm d7b236187a0884d6781ea3f403296d60aa3519c4420a5d1ece949944f0ba400a ALSA-2026:80504 Copyright 2026 AlmaLinux OS 0 1 Important

jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile (binary JSON), XML, CBOR (another kind of binary JSON), YAML. Security Fix(es): * com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing (CVE-2026-68497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pki-jackson-core-2.21.6-1.el9_8.noarch.rpm 0217997f30742dafab4cc9c9e5d9ccfd48fca7eeaff8ee46ea404317fd1accfe pki-jackson-databind-2.21.6-1.el9_8.noarch.rpm 12910c21a46832d57a8bc9013fac02135dabb3b68ce4f12c072eef052f7ee9f3 pki-jackson-module-jaxb-annotations-2.21.6-1.el9_8.noarch.rpm 798acc97fec7c4f2b45252292a3928650e36b77a2048d7e0bab35c639f9f0486 pki-jackson-jaxrs-json-provider-2.21.6-1.el9_8.noarch.rpm a27ab0aa9f686d0561d760b8ea6c9b1b098d622a37ecbec01b8a2047f6a3b3ce pki-jackson-jaxrs-providers-2.21.6-1.el9_8.noarch.rpm db3eb9026e2269776b40cb822cfe3e059f30a2ccce4df1d1cf0d2bf8889703a3 ALSA-2026:80507 Copyright 2026 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219) * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default emacs-27.2-18.el9_8.2.x86_64.rpm 074e89e41c32f5990af4250e145d015eaf0812f61640e50c571351ad4b17f435 emacs-lucid-27.2-18.el9_8.2.x86_64.rpm 0d4953a508a9f8ff01d57dcc24e0ac47b4ae646cd6dbc99d65bd73f30c6ec2f3 emacs-nox-27.2-18.el9_8.2.x86_64.rpm 95f62432a6d8b38f7101ac49b4b345da493781dc0db442a2dbfa4f1a9edbf1c9 emacs-common-27.2-18.el9_8.2.x86_64.rpm a352be37bdd069ce59fd87519631c0e066d959946ec49ccb30357bc89ab86846 emacs-filesystem-27.2-18.el9_8.2.noarch.rpm c28a239e67ed0f93f63a5c92b2d4a6fb24e1dc94019b64de79c676af81b04274 ALSA-2026:80511 Copyright 2026 AlmaLinux OS 0 1 Moderate

curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Cookie injection via malicious HTTP server using super cookies (CVE-2026-8924) * curl: curl: Information disclosure via incorrect Digest authentication header reuse (CVE-2026-11856) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libcurl-devel-7.76.1-40.el9_8.8.i686.rpm d805fd7c0f7de0b00f0ee3abcba229b412ea577d6cf911588110bbdb2bd54592 libcurl-devel-7.76.1-40.el9_8.8.x86_64.rpm e056b16928b48dde77b8f16181191606417e40f5b4e03b3bc4188aa0b304a063 ALSA-2026:80514 Copyright 2026 AlmaLinux OS 0 1 Moderate

compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072) * openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default compat-openssl11-1.1.1k-5.el9_8.6.i686.rpm 83c5540c5343fc35d6e2a6347732c998cad15d30eaa09c6a6766c90beb1916f1 compat-openssl11-1.1.1k-5.el9_8.6.x86_64.rpm d3e318e2c1c360671d4080a38fa58b8c6d2896be2b6d92706b6789f516d6c62e ALSA-2026:80663 Copyright 2026 AlmaLinux OS 0 1 Moderate

tftp security update

The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine. Security Fix(es): * tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default tftp-server-5.2-40.el9_8.1.x86_64.rpm 66c88137c1f12e9ebf9f5f87060a4f604b957c543b4b44ac4cc0a44a77d8d6cc tftp-5.2-40.el9_8.1.x86_64.rpm c585af2ce7e841b247a7d45ed7f9cb40989112aefe67b1dd3b51e4bba752111f ALSA-2026:80694 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832) * firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784) * firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794) * firefox: thunderbird: Privilege escalation in the Address Bar component (CVE-2026-100820) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100777) * firefox: thunderbird: Information disclosure in the Networking: JAR component (CVE-2026-100766) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100779) * firefox: thunderbird: Privilege escalation in the DOM: Service Workers component (CVE-2026-100807) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-100792) * firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component (CVE-2026-100797) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component (CVE-2026-100819) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100776) * firefox: thunderbird: Use-after-free in the Widget component (CVE-2026-100757) * firefox: Sandbox escape due to use-after-free in the Graphics component (CVE-2026-100786) * firefox: thunderbird: Information disclosure in the Networking component (CVE-2026-96869) * firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100770) * firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-100769) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100791) * firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-100818) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component (CVE-2026-100782) * firefox: firefox: Sandbox escape via use-after-free in DOM component (CVE-2026-100811) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100772) * firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component (CVE-2026-100759) * firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component (CVE-2026-100778) * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-100758) * firefox: thunderbird: Sandbox escape in the Graphics component (CVE-2026-100775) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-100781) * firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-100774) * firefox: thunderbird: Same-origin policy bypass in the WebExtensions component (CVE-2026-100803) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100789) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100785) * firefox: thunderbird: Site isolation issue in the Panning and Zooming component (CVE-2026-100821) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-100788) * firefox: thunderbird: Undefined behavior in the DOM: Streams component (CVE-2026-100771) * firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component (CVE-2026-100762) * firefox: thunderbird: Use-after-free in the XSLT component (CVE-2026-100790) * firefox: thunderbird: Use-after-free in the Storage: IndexedDB component (CVE-2026-100773) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-100780) * firefox: thunderbird: Use-after-free in the Networking: Cache component (CVE-2026-100767) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-100756) * firefox: thunderbird: Uninitialized memory in the Audio/Video component (CVE-2026-100783) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default thunderbird-140.17.0-1.el9_8.alma.1.x86_64.rpm e204c9bdea19d26765365431a531df0b94e44084da71006e6e7a574119e56a58 ALSA-2026:8075 Copyright 2026 AlmaLinux OS 0 1 Important

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default bind-dnssec-doc-9.16.23-34.el9_7.2.noarch.rpm 1b0dccf2f36b3e7e37897d3bda8ff53a99ae63f5909e9ca3de1a5e8a44f9328a python3-bind-9.16.23-34.el9_7.2.noarch.rpm 4311c398764c90d88216f3cca4cf1499b1c6cf8d37bb86a3355b4024186bef5f bind-dnssec-utils-9.16.23-34.el9_7.2.x86_64.rpm 45382ea24b51a5fe7e8deabd6f77f0ae35c113438ea0952f8f994ad2cb3c4b74 bind-license-9.16.23-34.el9_7.2.noarch.rpm 4e5041c5bb714e338831f746aa89bcdefb8dabb9dfa3e2caa2041e4ac6253b21 bind-9.16.23-34.el9_7.2.x86_64.rpm 580f7a5680687b84b89ad12f15c045bca74d40cfa38fddd0003ff50db45cff29 bind-chroot-9.16.23-34.el9_7.2.x86_64.rpm 6a56871e4a3d2ec5f88f9a454f2ddeb89766117263b67882dea9852e2a2b0bfa bind-utils-9.16.23-34.el9_7.2.x86_64.rpm abf678384fe52ce1171ad0f5d7d60587147f9d1ef05ef06ba4b19c103b6955b9 bind-libs-9.16.23-34.el9_7.2.x86_64.rpm d61d0ed60fb23b9d874dfb09bd834d9285036609bb9473f5d0d2683cda10cb07 ALSA-2026:80825 Copyright 2026 AlmaLinux OS 0 1 Important

dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters (CVE-2026-42391) * dovecot: Dovecot: Authentication bypass via incorrect OAuth2 token validation (CVE-2026-73208) * dovecot: Dovecot: Denial of service via crafted email headers (CVE-2026-27852) * dovecot: Dovecot: Denial of Service via truncated quoted argument in ManageSieve (CVE-2026-40019) * dovecot: Dovecot: Denial of Service and potential message duplication via connection limit exhaustion (CVE-2026-33263) * dovecot: Dovecot: Denial of Service in ManageSieve login process (CVE-2026-33605) * dovecot: Dovecot: Arbitrary Code Execution via Sieve editheader use-after-free (CVE-2026-42007) * dovecot: Dovecot: MySQL multi-byte escaping wrong (CVE-2026-40018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dovecot-pigeonhole-2.3.16-18.el9_8.8.x86_64.rpm 2c7e5d209008c6c3915531eea644221cf02fa10224bd1d6e22630a27696bd988 dovecot-pgsql-2.3.16-18.el9_8.8.x86_64.rpm 62ddf4c8e23b5847f6b5b2760aa55f0912223fdbffd19eeb63953c5637f4c1b6 dovecot-2.3.16-18.el9_8.8.x86_64.rpm 793304dd7c691d809485bed35aa87dcc7f842eceb02ec2b33d1ef958cbf84d00 dovecot-mysql-2.3.16-18.el9_8.8.x86_64.rpm 83581cbbef58aa78ef66a9bf74505cba8c2095a4fb40fa37eddc0fc92e9ba394 ALSA-2026:81517 Copyright 2026 AlmaLinux OS 0 1 Important

gd security update

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. Security Fix(es): * libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default gd-devel-2.3.2-3.el9_8.1.x86_64.rpm 291e40436d17cb4df516958fc2304c717609bb8a32a491b81c5268094eab1298 gd-devel-2.3.2-3.el9_8.1.i686.rpm 3bfc4f12ce074594538f514d01448a597b6476535ad586e7e6a99829031cb459 gd-2.3.2-3.el9_8.1.x86_64.rpm 7f5d58b859cfb2c6376c7ead6c04e9123d7420695a944d1e988cc79eb281df8d gd-2.3.2-3.el9_8.1.i686.rpm fba451ae2928d48ac690d719f1442d6b6e722a575b4df8efec9c2eeea793331f ALSA-2026:81532 Copyright 2026 AlmaLinux OS 0 1 Important

pcre2 security update

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fix(es): * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions (CVE-2026-86145) * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156) * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157) * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160) * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158) * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161) * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pcre2-utf32-10.40-7.el9_8.x86_64.rpm 0eb9f6a27e4ecf3ba31cc61b65261afcd8a9b828a4b72a71f131f683b988a830 pcre2-devel-10.40-7.el9_8.i686.rpm 194094827c3632adad665d876d5986b6662ffd4897bbb25ef69acbdc96ab198b pcre2-utf16-10.40-7.el9_8.i686.rpm 46e3c0f47be54956edd696d94fbba500964fb71409810eaa61b1ce09eeaba290 pcre2-devel-10.40-7.el9_8.x86_64.rpm 62d48b581ad359bf9e94fd17b68edad16a6537ec2e2bd322dc4c146965fcdd37 pcre2-utf16-10.40-7.el9_8.x86_64.rpm 659482cee5ea3011a42a9d6b62d763b8f21ec525a9ef3441a2da5a3af13dbbd4 pcre2-utf32-10.40-7.el9_8.i686.rpm f2ee2fcd244b9b3f838aa9058714a0ceff64019de8b51cf07fe765270b99d79b ALSA-2026:82013 Copyright 2026 AlmaLinux OS 0 1 Important

libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. Security Fix(es): * libreoffice: heap buffer overflow in PDF import stream handling (CVE-2026-63274) * libreoffice: stack buffer overflow in CFF to Type 1 font conversion (CVE-2026-63276) * libreoffice: stack buffer overflow in CFF font hint handling (CVE-2026-63275) * libreoffice: libreoffice: Arbitrary code execution via remote Java database driver (CVE-2026-63277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libreoffice-help-hi-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 0714e33b22901eed1a22cece0d43b6d03373c5a671439a309ec1afefbda08d03 autocorr-zh-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 08cfa6c71c4998ffeeecd02bed1d7b2ef83aabdd87e5fadecd9cb0eceb517c1f libreoffice-langpack-zh-Hans-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 09ea13aa9c09e28860763eb419e2fc9d7ae4a8c68272418bcb88e583c259cc5e libreoffice-help-sv-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 0b77f53383f0f07b36fd500836a516fd50988f2521ecdad023d04a6708f2e83b libreoffice-help-es-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 0c551a42c592f03b2f55d476351cce43aeaa460c52d32125e906e68d19df06bd libreoffice-calc-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 0c74bf452a20771e54b99f2fe172424d105a3c56d30f06b3b474d008db50877f libreoffice-data-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 0da89dc1589ebcd0af7a0b5a2ec9c34c7c3fb5200f161e49e55ad9ceade19762 libreoffice-langpack-nso-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 0dd794e5251d8f3e141e8bc1ee4282398848554ab3968031f16356f2a42dde2f libreofficekit-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 0e55be0401063101d040a815201f7f47f9cad5f8ba5da6969e719c79d2de9cc1 autocorr-af-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 117cee491d8368ee88a6c1af48f4c0050dc6bb1cf68b015bd0ad497dd5f0d436 libreoffice-langpack-ve-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 12cb37f3b0a895bce0ad27c1a39a5bc8a24943f119f724a910539b441692a646 libreoffice-langpack-pt-BR-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 13ed2dedbcc3c55e800741e62f24e6e11f1058734ae0a6f257334c507c3dc47f libreoffice-langpack-bg-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 1473ea410613928685e0bafb977ca9b00442c52db4b73c6b876912874871c6b9 autocorr-mn-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 158a3b14bdb81bbc6191916fc4cc6eb1355d53ff5adafa91e951edac7046e40a libreoffice-gdb-debug-support-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 165f662c2721dfd4aed0ade0f3774c6dd6338962d9fcdcd3e4f42a2c96117b96 libreoffice-langpack-ca-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 172cb93cbe663208fe1572e2f4b18479e48fd165c488d893b0ca4fea223c8d87 libreoffice-ogltrans-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 17326452ad81e3067ff24ee7421c11fd737e95a4a1cdc476da0f4556b7be1845 libreoffice-help-fi-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 182a19f34e468e8bd990c702af87dff54fc87a2ba7a083c724539ef2167b1ca8 libreoffice-langpack-ru-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 185f000898d42217ff4e369e9bb8cfbe53bbc832a528ed7f0b525f91946bc5fd libreoffice-langpack-st-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 1be0800ed9680ed116a185ddeec0c86c6f103cd3d9d047a1f91ae4350422b0f4 libreoffice-help-sl-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 1c36f517af259e7f4556bba605ea4643e32574cef7d2085f55c6ae6ddda1474f autocorr-hr-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 1ea18c812d9b202a076d27e0d0f9d3aff7e1bda85f519c90591b4598c39aa785 libreoffice-help-nn-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 20c46b96d993adecb3bf5e391956a20020c7e5787848def6e40342a99589e472 libreoffice-langpack-he-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 21aaf201fc2d1e526b8050ae44a9e30e0489009a7e286cc8157c275d4f3375d1 autocorr-fr-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 21f580666436d472ea36694222ca6cb0f695904a600ab31481e63ae2d0709abc autocorr-ga-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 237c5c1b3bfdc7263bd8a9801611919e4c5c8c2c5d0e30a75b0241a8e4c83f6b libreoffice-langpack-af-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 23f942e7adf99be5f18e8a49d848d626858682ac61babd9a3462999f9b3c4c31 libreoffice-help-ro-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 240282b322d0afc83b9e394a93196ea2e43d522c4ee77a979a52398554447f8f libreoffice-langpack-tr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 2573be5f1a9d6107f869273744ccc99c24bc6e3142a40138840578ef7b77324f libreoffice-help-gl-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 25b524e03d42102ea85e49807a0fdcb02e82b9d821674cfc6e769e90679173eb libreoffice-langpack-dz-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 264122248ab639dc4cff03c5c838c6605b60a7e53d4129f28b3e49677c0d5f9c libreoffice-langpack-eo-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 26c1008454d59bd0c1a65faff89492d5a04a9ff271e4dcbde040af37feb32ddb libreoffice-langpack-el-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 28bf31402d4b29a40a760d80a1a8c95ade3b7c5ff2f3dcd5eaaf0f2d22b532df libreoffice-langpack-eu-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 29c9fa9cb7b5767f1d907f11156351e916237be8358a19ec13ebcaa040e07a1f libreoffice-langpack-mr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 3214410a2fd96767d73bf3b2997f4ac59799c07819ad1a7774233619c45111df libreoffice-langpack-tn-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 340d13879a4132108bdd5d32a39f6af6b5a5ba298cbfeba6a264cc800c2bcb24 libreoffice-langpack-si-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 34b31279f551d0228ae479852ffd904a85310f12c114b798c073d897b4349923 libreoffice-graphicfilter-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 34fe1e3f2e262cec84ba6664754c44a0c61d17e2e16cb9005f8753792e4dc866 libreoffice-langpack-hr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 3601356f34d10065bc5c20d27af3a6f041251c8928f59c7c7f4f6caa121bab2f libreoffice-draw-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 370ca173d4dbae3db5fa943e20dc508ebd324d9aeac816c67913835c3efb76f4 libreoffice-langpack-fy-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 37e3eb470f4acbcb0e8f3989c6e3dbe13e0821c0bf14ca282e43470bc1fcecb2 libreoffice-langpack-sv-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 3838b7383fab0e1f2fc6a3471f404016506d77dac63d63d6e33c1aeb9e16a9cd autocorr-fa-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 39ebd8969af0d1a7a6c51d66722e969afb93d991e3ddd90c87a9f79ee8143174 libreoffice-langpack-it-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 3b20dc21bf592dee9db8a323ca0b5233a69700f8c918781353f91741c2bd6799 libreoffice-help-dz-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 3b417b62f0ce66943b79987d006795430166d99e413626893ce567e55bcd2049 autocorr-dsb-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 3dc185bbe20e769ab79a150f5b7bbb1700e610028faf839853904d6c56a9d82a libreoffice-langpack-zh-Hant-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 3dd4158ac9bcee71e14122cebcae773c1b16978d18c238a7cc6be8a63384956a libreoffice-langpack-cs-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 3ee069d315bc6845e590b0d3e0ddeaa9a52a173f9449b020f0ccb73ef0d5dec6 libreoffice-emailmerge-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 41485dd9eafde8bf00ce51ea4bbe3558d93aca705eb198c37269f83551a74863 autocorr-ja-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 41d471360df455a7d7dc575d001ae45cfe651b3b8875bbab24899bf001bb0f12 libreoffice-help-gu-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 42c207bb726a847996a71f5bfef37502f365ff87756f054192e3d11de94ea266 libreoffice-help-eo-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 43c708f3d1970842abf3ed03f94ae1274a9ca1d2c3bb731c9a731658b43e135e libreoffice-gtk3-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 492610d5d6c054b53676364b1efc7849af3cd70659f73a975504bf440bdc6e42 autocorr-it-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 4951c1c19b88e7269f2318f8ec224969f7aaa18045f90ce55a0d3ec70a8e47ed libreoffice-help-ru-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 49d46ffe0459e96e454ce3c361d7ba6f22516c7cfb578e4e5f69596e55dbec65 libreoffice-langpack-cy-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 4c676acb8ee8f8d40de6014efe86449f9720299b02a4d2a63bcf8b039ffd18d9 libreoffice-langpack-hu-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 4cd0b219533b11621477cca0e132c3ba3ed422c97b11fb9e3e574d855a5be06b libreoffice-langpack-uk-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 4d16f9c7d3c475ec31363a824b12a621ca5f1ca5aaf82056d52cef06ce727330 libreoffice-langpack-ro-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 4eacb41e3650c62ca829fe3fb310a54c8c3784a3f1a270c4bd43375db9db1563 libreoffice-langpack-pa-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 4feafa852d3c4821c947c6bd8bcc46bac91a72625056b94c5ea8a6c348802b4a libreoffice-help-zh-Hans-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 4feb7a0eaa3a99dcc82714b117eb292f6eb79c856a924d820657365d348e3551 libreoffice-langpack-pt-PT-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 52c44fda7ebdf76d2e15250b16c9d87df90d09d263052b9af0f993eed3667c53 libreoffice-opensymbol-fonts-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5557f914b17b52a5195f58277c6356b5a99f2785ce042b2a5771cf7889807442 libreoffice-langpack-gu-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 55968683c57a28ae307f9351c334f84de1eec2104b43d1b6ff79488dbe1ce792 libreoffice-help-lt-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 55980ec4ec5264ba352b37e6d0c985f98a88ed717d3ca148c7fd8144cd645f03 libreoffice-help-da-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 56a52213a9aca4a3544cd0097615ae87979b8b5b9fa2ca85a3452b103388e8f8 autocorr-sk-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 57761fe24cfe29e18099f67f4326aef44a5d43f26b2bccfa4a96e30b06459000 libreoffice-help-sk-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 59c769fc4f15e0001f7440c7769c7948036221d81f4bfd49cfa825e697a67c16 autocorr-nl-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5a0b1c46cc492808ccc5be034fae090a3a6fcbd1ee4ea67238579860a75d7474 libreoffice-help-bg-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 5acfbd949a55b12757713fa9b0195efab18ecfa971d6738427463174ad153ea0 libreoffice-ure-common-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5be6042219fc7ed0c38d82ef90e0f6c37ae5f2adfed9c5fc36ececf23969e7d8 autocorr-pt-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5c4e17c2fc0865d095f227ba19a6860f4bf74d8508b041d94a2ea0de07a61fef libreoffice-help-it-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 5c82974ca476cf7f490835b8c0528df33c494b7ddde4a62f2f570f9e518a61d4 libreoffice-langpack-xh-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 5cb00ccf21224aa462a8365e21487620b765db6efad054ed5bd11a33b2e59435 libreoffice-x11-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 5e11a508ecb73d21d5b1c3ee03e5cc3375657496a1257f451ba4fd085f764b6b autocorr-es-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 5fb1761cb89a1707543b65fb8060aad72fa73ae6d633dd6c0a2dd86bb222aade libreoffice-langpack-zu-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 61a759d03848f2e366ee93c22ff0a3276b13e9707b6fb17bc17a784e75d3a514 libreoffice-langpack-th-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 6368ce0ba3b2ebd449ea02416e3e8cfdfff071cc5872c8f155866c6ad43614af libreoffice-langpack-fa-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 64c32b9746952cb1b5c35d9d20628cd2f978ff0584ede0924f2581096f772e1e libreoffice-langpack-lv-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 6aaf50f0a07390e29291ab8eba280486bc7cd8cd3c47a3f0e38f535b4e0352a3 libreoffice-langpack-ta-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 6aecfa7ab85af0d599b90f1d98ea94a832c767b28318febc13fcd2b161a7bbf0 autocorr-sl-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 6c0bec41ddb9cf500e64874c10df9dbd99b8a6f1854cb5af5a20f10ebc182314 libreoffice-langpack-ja-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 6ca789367cf723497aedde69d48b13b0e6923fca89eb1e9ae7988a69aa97e14d autocorr-en-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 6da68a4ae105fbb10b9d1b85a8c06b0154a601a377b39fc7829447ffdb6df37e libreoffice-langpack-or-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 712b7c148238758263ec8b12926fb87e8416b3837383dbbb53502ce0ac9ee4f9 autocorr-tr-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 72c29ed1c8e28c94d74bf8dcddd67a7ec6d911889ef898bff23936987429a56f libreoffice-filters-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 7477507c95d5df458e00cbe8e4b506c286840398e5c02c398f02840ef07490ee autocorr-sr-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 777c52a58fda8f5295fb61a4e4085a1df7e71f7b68374945edf9a69eb4516de1 libreoffice-langpack-pl-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 78a60696dbaf3314b35f896456ade287e5db2a211a7dd7b0336f55807fc9bfcc autocorr-ko-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 799e27545961dea4890629314302e485d126110df9cda866283810ceb19d1484 libreoffice-langpack-lt-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 7ba39cc34d853d11874f8987db8f6956a757275ee30bbe60c1c3acba039c348c libreoffice-langpack-et-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 7c06905d3e882b8c6c28d1fe7738e1efaaaeeb9761e8d1c60b0f602d0d670848 libreoffice-langpack-nb-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 7c74a81f2b8b38a6233c1c309c3a6149b6465f986f1e5e9eeaf491c21b205bdc autocorr-de-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 7e7146f0cb70fca4ba6c167e013c214f721b28c484d5c2086384656921a3d6e5 libreoffice-langpack-id-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 7fb6fc914a62ff18b8b0beda6bed8f188edb00a45ae825f5efeba44c36d6d1d7 autocorr-bg-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 7fc1a0a96225e3bd6cac32c39c45916bb777af224966541a515d6d4a91012c71 autocorr-is-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 826f61f3360fdfe050d5e8598e7d8148961198330358adbdf196acfb5f6d31a9 autocorr-fi-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 8a0f1b945e8ce635fa82f7ae2620d0545eadac220cdc24edeec87f3424e011c4 libreoffice-help-ar-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 8b600bb7be6d35b4f996bed40fd0322c48ce84801101d1a41d57674c61663746 libreoffice-langpack-es-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 8d7b62ff79b5fa83fd188a5dd1ec645f58aa6a74567bcdc08c48aef602799181 libreoffice-langpack-br-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 8e75673d70357fe5345e7c449392987f502398dfc3c0a15533bf4d4348ecbc0a libreoffice-xsltfilter-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 8eb7c1090a4fa4b9ffb297721c93309fa0d2f2c893898f2c85d834616cc6628d libreoffice-ure-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 90d918a234935341b96982e5b907c75c92f27caf2cb1ec0ef4148f7c513589dc libreoffice-help-nl-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 9122de210697ff6f40acb112c3c6c7af6c846fbd173bb5e5faed7a3d3d8ae673 libreoffice-help-fr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 9621ec89a6c8c86f27d9408db3d18e7ee8775ad7904099ca259927a3db6b9c5f autocorr-vro-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 96d9fb90509740432d5125bcf98975fc875434ecd76ad4a8006680ef6d6d40c5 libreoffice-help-bn-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 96eb6c693a2142491ca79bcd1d153308dffc21fd1cef82505dbb3c2b59b33d61 libreoffice-langpack-sk-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 9758b830977b857c6d69435596d4dbe343dfca473a2e3269503261d8727d22cd autocorr-pl-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 975f5efd8dde89f80c5939b25a47376d51e4c73ce56aacb38973338f3ba05157 libreoffice-help-pt-PT-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 97e2bc74bc5ae0d15d5e7108a7db04821c923da80498e5f27cc60ba07bc076af autocorr-sv-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 99065b7a16b045ee132395b8e6784f1a95d7db097b61b951a6cfda43edd897f3 libreoffice-langpack-gl-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm 9a70bfb508d5947ddd580249d00465457c7f7ef1ad4e8b00a493c525583bcacd autocorr-lb-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 9ce12bf5d6c96804b01a7455a02faf4d094782c347e095bb8c895eb2096afafb autocorr-vi-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 9e6841582565c525804c37527c18bc08bd46da782cd97bcddedfa944c876013f autocorr-ca-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm 9f6b5959b05133bde9739edb6d0519251bb5e059c9ed3302c89215fd5ed6f8fb autocorr-hsb-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm a00f1e56c6e9210bf044ea7ea50cb2cc6bde152c9db860d4c2af91379de1d0f6 libreoffice-help-ko-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm a0c1f8c5ac4e9c48fd6c169fa54e6e1e6209110b301e927040d6999b24ef903e libreoffice-help-nb-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm a3366c15269e0a2bf70ba59291fad74ffe85b5aaf23191952dfa680c65c31d18 libreoffice-langpack-ml-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm a4d742f2f1cbb0ee6247aeeca1fc2e7cda8c512cf2e735c72a8ccb1a48e94c28 libreoffice-langpack-sr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm a5d2791834398954694bbd3d364564ef599eb809fb8f6db239e6fc94fbda8659 libreoffice-help-ja-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm a7e0839d60771834466a6b4574e409c87b2753fc637828566e4ba4e1f904e17e autocorr-hu-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm a8779258bf4175e8021c13da3e91ad7501f8f75cc1e3ebc68b60daa7b7f36158 libreoffice-langpack-nr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm a9fff05b7b8d06c05f4297b03bc6f1f72516d0c6adb27ec3208cd43068d15399 libreoffice-langpack-sl-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm ab535f5b289548770981cc56ac22373c49b67d07c85bfb11215e43e636a50f36 libreoffice-help-cs-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm acaaa3ba60e02309bdaf09461d8d52cf5414600b441c92c052d20a9cc19a5349 libreoffice-langpack-nl-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm ade495e1a440ac6463d097097b421102c1c4609d86c3c2253d8424a6da28cfc6 libreoffice-langpack-ga-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm ade86aeed10b99ce5ae5afc102fef43ae38e716e7dfecf576568759140344a35 libreoffice-help-et-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm b16c015075ef608983a4120db678ffb1e4bcb012c3ec53502cb57815f2b91aaf autocorr-lt-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm b34a0ccd2d86827b953a192fb24a8efdea4f310cee3f3a0189cd41f4c819e56a libreoffice-help-el-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm b4103896d21a60ff6e768ff8b4ee0e84c30be38e28293b198e0955fe31ff0f13 libreoffice-help-pl-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm b76bccc23f1d9f69ab9727b438c3a8f3606d129201ab1c1c300bb2cb1fc65b5e autocorr-ru-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm b86f0e5d883d6fed2b0fd0f99cae30e4cc0180a8efe6afed9a31c282546f6933 libreoffice-langpack-mai-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm b9851142c59fb29b45ded253fdba285c752c61a145f33192c593f25848488a81 libreoffice-langpack-fi-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm b9be079f7af50b10add4e2510ab774e66d6056bff425a4e13140440df653e9cd libreoffice-langpack-da-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm ba2ae353e1519f057c5f6320d46ef4969509fd54a6a5ca4cee1788f2a814174d libreoffice-langpack-ko-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm bbcb36524d0f100f82540a9993631ff030bc85e30314208589991a8f7e6469a9 libreoffice-help-en-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm bdca5b3016d5bb2f9b5f3730ee5f4e2f829e60b8ccf21a35373b6e7e89398100 libreoffice-langpack-ar-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm c08140d4289ccca939f958d58713c46a91ad0c4a32e1c68f71fc109fc9de1fb7 libreoffice-langpack-bn-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm c0a41087f367996bb84fc10c1de050a83c470a6aa582ca537f9e817fb2bde296 libreoffice-help-tr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm c2a964b28271588ab0c2a8db7d0e1998b3ed89c09b19c4a3bfb5519c58d38b32 libreoffice-pdfimport-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm c3d82d7a917ccccb097d990a3fc98e727d504626091d49dbf509c22c1e52beec libreoffice-help-ta-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm c5450f22c014e4d3abb8bd5883da0984a65659ab3a2cca7177cc7833b3d98bbd libreoffice-help-ca-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm c550fcc44c0fb16dad8d449f7a0c57607ea7f68e9c18064db5f45dd08513c02b libreoffice-pyuno-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm c92f84587fb5597f511dd19bdca889626f52a7e4c6ec16cbdda29c15f155f962 libreoffice-langpack-de-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm cd1a24cd73bdc9b8e849fdf10d1c61ec92080b95e2c1153b6ae991976a2be02c libreoffice-help-eu-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm d0a91282fdb45d6880afaff0c33733da08256aa125506c5bb084d321343cccb1 libreoffice-math-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm d0e53714ad71a5b3586dc119b0abf80989cc5428b830db5f7545868f2fe8e97a libreoffice-langpack-fr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm d2c9c988cb7e32a5b84631ff5f0a2ea785aaab1f7daca2d1fd979328147cbd87 autocorr-ro-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm d519b90200d6745eb5fff95e64e63957a699de04b489ac7b106aff397a41d3df libreoffice-core-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm d974e3a504f316009352f63a833b597c14c4b47f0379770d5548be9710067d90 libreoffice-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm dad06f943f875a184d9df2ebc2d1bd249698059e4fa9cfec4d6e51f5cd422105 libreoffice-writer-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm dafe168fcc7ebfcbcb45344e84fac2e6629ebc4bf12913e0fb28aa0e628bb42d libreoffice-help-zh-Hant-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm db64db9d4c2e63cd66326fda59339669a90715a4ffed1d8f19715934c722c4cc libreoffice-langpack-as-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm deb1f7fa9e05c129ad009c7e9e6b3861509238df3623aba7ab38c54b7218c1a6 libreoffice-help-pt-BR-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm deee5950085a6c94179d000dfb43b0ff6a6b2415ec74ebd27591667500b3068a libreoffice-help-he-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm e0fbb8c3026d7c679f21967fc32991d9c394b8a2fff9b00313c56aeb2c1d0582 libreoffice-help-uk-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm e26aa1de7e719f30ca57b191e9445e39046d814b61f95f0d029a2ccf1bd837d3 libreoffice-langpack-hi-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm e4d3c85a9586e2a4f061d64e59900b3e0028c47ab0b1ce99c2320f0db28e5e10 libreoffice-langpack-te-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm e54696c16390d47d8ef6b037732c16145d18af3d96aa5f0052fc510fe383b3bb autocorr-el-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm e68b1053e04305c85e995829b5d9a1a6e00cf993fef99d86f2cda34542ae2f78 libreoffice-langpack-kn-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm e7da93ff2a3519cfec0ccc9a2cfa398a61eca60688e8996222e73398a6a048c0 autocorr-cs-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm e97069e3f38a567a43feefe37ada045cd639ad32a8713a8058e2a661fb51482f libreoffice-langpack-kk-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm eb095afa8ce8648a7bb8fe363639899d064b3bcf6d94d4c92bd6362702a2b16d libreoffice-help-id-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm ec3ce395fce32104bfd803e4b44c9a66c91a0b8492fd2c17f0b58a33067bad92 libreoffice-help-hu-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm ec87f7e9dd91fcee3dd3f127e0c1bf68c82031ba06c5eed7d744e5e627dc2c5d libreoffice-impress-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm ee56751f3a07be97da3de9b3e464f6a5b732e605ddf72178d4aa975d9f76a865 libreoffice-langpack-nn-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm f2e493fc588f6fec986f65587804603ea9bdf60c449b33c2c0e22becc1c2b10f libreoffice-base-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm f2e88c0fc02cb5877fa0b1f5ffa1199bf4b84e6e17586cb3bd6d1129db841f62 libreoffice-help-hr-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm f412e933d62820390f8555c9ae1fe6c226c9a10c48e874c893b65ae808c7fffb libreoffice-langpack-en-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm fa4b51ddf01d99d8e5f11b44bacc36f2f95c91c51dbd727231da9eef7a2cac47 libreoffice-langpack-ss-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm fa4d6c8354136fa39a67716c49e717e0e52705e9a1b69035efed47f28c1bbd3d autocorr-da-7.1.8.1-15.el9_8.3.alma.1.noarch.rpm fa7070ff43bddb1d6f32e7106926b48be64e0f0117a3c4e2b2fbb585f16e176f libreoffice-help-de-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm fb389dd982b9838c608b5a801300d2f0efaff86377802f27c074527ffdd8730f libreoffice-langpack-ts-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm fc0dfb677f2590da1378c6edbaa6564efaf69fdc82a24e786e43defc40ca0498 libreoffice-help-lv-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm fc9f43f4550941bdcac3c91e12b545abce176baf21264ce659e96ba896dd1ec2 libreoffice-help-si-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm fcd429374643c9ac06d1de6a5b9c410cc87422281e91969bc544949e329b7b2e libreoffice-wiki-publisher-7.1.8.1-15.el9_8.3.alma.1.x86_64.rpm ffa6671d89613fb56c7c26c7d6cf956f6bd3c0495ac28a75f82bb50c232a635a ALSA-2026:82015 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xorg-x11-server-Xorg-1.20.11-34.el9_8.4.x86_64.rpm 0188d68a05ee56538f4f7124daed4fe6cb887b808ce09b95a49f913953445de6 xorg-x11-server-Xnest-1.20.11-34.el9_8.4.x86_64.rpm 20cfe67eaa4fda57e8ece57e44a509f9842adf9f7fdfd4abd54f7f18e2686159 xorg-x11-server-Xvfb-1.20.11-34.el9_8.4.x86_64.rpm 21dabeb9b0a364064f80f283baca13953dfdba40ee39da1c17cd53bcbafddbfc xorg-x11-server-Xdmx-1.20.11-34.el9_8.4.x86_64.rpm 4cb96448a55602ff197dd0fe68b9134d412fd08a998da287153f2f3369634cb8 xorg-x11-server-Xephyr-1.20.11-34.el9_8.4.x86_64.rpm 9b7c1bcf1fa25543bd0d0e63acd9d735bce62719d199f0ecb783e2d92a8d7b52 xorg-x11-server-common-1.20.11-34.el9_8.4.x86_64.rpm c584a0db06d25895600390df07c74200eefd62e67ec80aa1a33c58a9ac260d28 ALSA-2026:82040 Copyright 2026 AlmaLinux OS 0 1 Important

python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient (CVE-2026-103262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-tornado-6.5.10-1.el9_8.1.x86_64.rpm bffbd0359f5e458aa0fcccf999ce09015d8c3aefeba30537e06032cfc339bb82 ALSA-2026:82094 Copyright 2026 AlmaLinux OS 0 1 Important

librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default librabbitmq-0.11.0-7.el9_8.1.x86_64.rpm 49a586b1fa1a22d9edc2c2824dd8a96c328b7521804d175f90680fc700995d55 librabbitmq-0.11.0-7.el9_8.1.i686.rpm 95c98063fd98ac0011995411b98743b697394b79ee5d11cb16ce918a76aadc1d librabbitmq-tools-0.11.0-7.el9_8.1.x86_64.rpm ec488f77ffdcb7f00581a753b2bd3bcfbd00314552eca3d20875ae19c8531bb4 ALSA-2026:8259 Copyright 2026 AlmaLinux OS 0 1 Important

vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417) * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421) * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default vim-X11-8.2.2637-23.el9_7.2.x86_64.rpm 7e75e702f3fdcfa3e33766cd35cda530c27603ca825dc24439abb5c3ef8d8a1b vim-enhanced-8.2.2637-23.el9_7.2.x86_64.rpm d58734512cdec6be51b515e5d4afa1e1fd9a20b9f5b80208f9bdc9cda739f8cc vim-common-8.2.2637-23.el9_7.2.x86_64.rpm e8e9c799af3642acbe7c0f05e54a12240ad29b84c63ac1e6822662275d631b5e ALSA-2026:82882 Copyright 2026 AlmaLinux OS 0 1 Important

hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fix(es): * hplip: HP Linux Imaging and Printing Software - Use of DSA Key (CVE-2025-43023) * hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation (CVE-2026-91099) * hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation (CVE-2026-91098) * hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation (CVE-2026-91097) * hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service (CVE-2026-91103) * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91106) * hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service. (CVE-2026-91100) * hplip: HPLIP: Remote Code Execution and Privilege Escalation Vulnerabilities (CVE-2026-91101) * hplip: heap-based buffer overflow can lead to remote code execution (CVE-2026-91104) * hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities (CVE-2026-91105) * HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution (CVE-2026-91102) Bug Fix(es) and Enhancement(s): * [IMAGE-MODE] missing /var/lib/hp on image-mode (JIRA:AlmaLinux-257310) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libsane-hpaio-3.26.6-1.el9_8.3.i686.rpm 20f2dadb9f9ed82901ba57e73b741a211894e73e2336873b3c115b99d61fc0df libsane-hpaio-3.26.6-1.el9_8.3.x86_64.rpm 4b4cc3bd760c73b29779d6a2c6828627b7b9901c191acdca799a85177ca44876 hplip-libs-3.26.6-1.el9_8.3.i686.rpm 5e595c60ef412780bf2f87cd0fa0cb509957674d8db85f0dc3277e853c53e3f2 hplip-common-3.26.6-1.el9_8.3.x86_64.rpm 9fa01acf6351252900a09be572762319bd6c2f9bce3d545f69b5b75eae261b57 hplip-libs-3.26.6-1.el9_8.3.x86_64.rpm bff6c0bf49450d5ca91caf2790b9034363c42dcf7ca087a14372bceeb3f6e478 hplip-common-3.26.6-1.el9_8.3.i686.rpm c4192952f4a32e7f64bf054abfc94136921287adc3996a64414915a0493f2be3 hplip-3.26.6-1.el9_8.3.x86_64.rpm c7a123c4ae22eee6843da650d13c1974a717040282a288a33dff14e6a1cda301 ALSA-2026:83156 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect (CVE-2026-68404) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CVE-2026-81003) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-debug-devel-5.14.0-687.58.1.el9_8.x86_64.rpm 20a147f12623b6eddfab91f86fa4790ac46f545c4f61058ba9c99c008658518f rv-5.14.0-687.58.1.el9_8.x86_64.rpm 25d756d1a95004ba4ce0ad021dc071eb01b5ce268384fb708eacc87e3d416b79 python3-perf-5.14.0-687.58.1.el9_8.x86_64.rpm 4fe09dd7d4bea09b97b96021ec0ef4afcc38922d16c91e1fbc1afa6e6e376363 perf-5.14.0-687.58.1.el9_8.x86_64.rpm b47ce9308c18cca6c181a9f507840eec01548026530fe9b4e3144948970f7141 kernel-devel-matched-5.14.0-687.58.1.el9_8.x86_64.rpm c2ae984e7f3bf9dfb46ef6f079b9879e9ecd33ce0a4f54833b9b22fad549e144 kernel-headers-5.14.0-687.58.1.el9_8.x86_64.rpm c4ee3ec429e7e7907c5bcc45bf979bd97cb39cca0d48931e46790cb19bb37bbc rtla-5.14.0-687.58.1.el9_8.x86_64.rpm c93e9b8d476c0bdf52a6f2a27f0a50ff948d81e72f081cec6cdd0bd8c53d78ff kernel-debug-devel-matched-5.14.0-687.58.1.el9_8.x86_64.rpm e1e5e09d6aefba2b3ddf08772e31c4389f4a40fffb8a68b2131bd9ced1894782 kernel-doc-5.14.0-687.58.1.el9_8.noarch.rpm e5f41facb21d3e68dc8da7f37853c367751bf32c6a07785854bd3810808b918d kernel-devel-5.14.0-687.58.1.el9_8.x86_64.rpm ee7a38e5e199143128e78d78a7162e9ed8ca00728cbd993024bf75b725f22b99 ALSA-2026:83384 Copyright 2026 AlmaLinux OS 0 1 Important

libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559) * libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libsoup-devel-2.72.0-16.el9_8.8.i686.rpm 28053d52f74b837fd3d71c4c1c77c45a1a33ddb597210cf9832f7338694623f7 libsoup-devel-2.72.0-16.el9_8.8.x86_64.rpm 597bc08f9ffcf2e15e4850e75a936597c1b459dccb242fd5677a6e24f4b8d3ff libsoup-2.72.0-16.el9_8.8.i686.rpm cbd1e419240f0b3a7041ddf96ee8b59b6697fdbaa6919cce0970d1434e1f8af5 libsoup-2.72.0-16.el9_8.8.x86_64.rpm ce051ec3e616971fb17cddb82c4972eb7bd7c707697b2b9379933b62e8bedb54 ALSA-2026:83546 Copyright 2026 AlmaLinux OS 0 1 Important

wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886) * wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880) * wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919) * wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927) * wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default wireshark-cli-3.4.10-9.el9_8.5.x86_64.rpm 57d785728578623f606f8b1961e5cde13aaebe243873318d5eeb6962b5d834d0 wireshark-3.4.10-9.el9_8.5.x86_64.rpm 5bb540d23c5c697477819a40ac6d364957ea23f22cd1a775af4cd53a957b4720 wireshark-cli-3.4.10-9.el9_8.5.i686.rpm e45df6d3cc77c17e1873de3dd424d64cb2aa7a843e7e62a8ed3c16124aa84f6b ALSA-2026:83553 Copyright 2026 AlmaLinux OS 0 1 Important

ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default ghostscript-x11-9.54.0-19.el9_8.3.x86_64.rpm 0801fe8eb1d9c739c0579b0d5b896675ac3f2d0a4c8f79c67a3e15fb6e284947 libgs-9.54.0-19.el9_8.3.i686.rpm 3ed0484b99babf6051d2d53749158dd4076cb0e8f1419c52c2dfccf5483dcdac ghostscript-doc-9.54.0-19.el9_8.3.noarch.rpm 49b93255ffa1d112a31b03948eb523bb01e9029c5b8423a69db60ece111f8bce ghostscript-tools-printing-9.54.0-19.el9_8.3.x86_64.rpm 5ff8cb0da86ed0530c585ab3d204eca215812b0f68d8e5eec199f4c6153502df ghostscript-tools-dvipdf-9.54.0-19.el9_8.3.x86_64.rpm 802faa52e770cbbd1fda8bbbcd15e380c74f76decec88e4ca3e45f96fd9ae232 ghostscript-tools-fonts-9.54.0-19.el9_8.3.x86_64.rpm cabd754eb05c1e9e28b4e4d2f4eac8f48678e69f93db2a3bcbc463181364d0cf ghostscript-9.54.0-19.el9_8.3.x86_64.rpm cf032eba8aefe47f988c2932c2be6f79cc5fcec81779e4744c26603d667fcb0f libgs-9.54.0-19.el9_8.3.x86_64.rpm d36a2d4ca48720d29abc841cae6b5d64cc90fbd637b3993f20bbad2255fedff6 ALSA-2026:8457 Copyright 2026 AlmaLinux OS 0 1 Important

freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984) * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default freerdp-libs-2.11.7-1.el9_7.6.x86_64.rpm 156b12241537630cb61bdbeefb0b9fb78f29b746ae095b602a642a14df50ab26 libwinpr-2.11.7-1.el9_7.6.x86_64.rpm 27fd062d804a6e469ed2b13bd48f98fecb5a9d653106f9aaf7181ea939e30661 freerdp-libs-2.11.7-1.el9_7.6.i686.rpm 440ac1a2cde5718af7b1685def07877bd699c440bf5b34b13fb31b1198c285d5 libwinpr-2.11.7-1.el9_7.6.i686.rpm 546cea50ff0205314b34c448e042479e32771b4e6b79a44d3597e5a6b3314278 freerdp-2.11.7-1.el9_7.6.x86_64.rpm 65b3a316a700973c18d6505a4b81f4098884d72b46df8426c8a42411bb4b3f59 ALSA-2026:84574 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xorg-x11-server-Xephyr-1.20.11-34.el9_8.5.x86_64.rpm 132ce03a58bc11c7ab55f354d0deac24422fcc58c2f91bb9c7a318e60da60541 xorg-x11-server-Xorg-1.20.11-34.el9_8.5.x86_64.rpm 38177f9ebec26eb3026829f8c1e5a41227fb02e5e37860f2680a7b588d81241d xorg-x11-server-Xnest-1.20.11-34.el9_8.5.x86_64.rpm 637d68e74388495c96fd20949f1cd01df6e6219a7e678e700ebb8d1e59f6139a xorg-x11-server-Xvfb-1.20.11-34.el9_8.5.x86_64.rpm 7ecb58d546359645896ba565e5173887d9295f1f72a1a32dce572071e1c09930 xorg-x11-server-common-1.20.11-34.el9_8.5.x86_64.rpm c29fcf719e12f1725dbdb3780a09b001aeb9638a436e9ea6b3fbb0442d1b5cbd xorg-x11-server-Xdmx-1.20.11-34.el9_8.5.x86_64.rpm e3d056228192063bbba14355ad005d9d9d469fb09f1a90615ad5f4e82052647e ALSA-2026:84577 Copyright 2026 AlmaLinux OS 0 1 Important

python3.14-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.14-urllib3-2.6.3-2.el9_8.6.noarch.rpm 5e7fa2b5b4a3b35b0cbdb076ee4e7e2ce1b7af25421e2c3f6204f6b156a5ea02 ALSA-2026:84583 Copyright 2026 AlmaLinux OS 0 1 Critical

webkit2gtk3 security, bug fix, and enhancement update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read (CVE-2026-87596) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-87500) * chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE (CVE-2026-87654) * chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability (CVE-2026-87621) * chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE (CVE-2026-87512) * chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free (CVE-2026-87648) * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page (CVE-2026-87602) * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page (CVE-2026-87586) * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read (CVE-2026-87604) * chromium-browser: angle: chromium-browser: Improper input validation in ANGLE (CVE-2026-91738) * chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE (CVE-2026-91720) Bug Fix(es) and Enhancement(s): * webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 [almalinux-9.8.z] (JIRA:AlmaLinux-274394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default webkit2gtk3-jsc-2.54.1-1.el9_8.x86_64.rpm 0d78029f16f192f3adfdfa22011e197c361c63ba83b30c3a757c2cb08a583446 webkit2gtk3-jsc-devel-2.54.1-1.el9_8.x86_64.rpm 10dc67e795412a8f4f5ea9e893e8a630962419d37c3ea65ca3cb8469c0e7e794 webkit2gtk3-2.54.1-1.el9_8.i686.rpm 2bb27dc0218b2f8d663d0e196886d35cafc06d8c20542b09644bbb1f2af48924 webkit2gtk3-jsc-2.54.1-1.el9_8.i686.rpm 4c84cd11cf4b3237e007be017a6f0039fe9fc30a043d3b83878ae9e818714088 webkit2gtk3-jsc-devel-2.54.1-1.el9_8.i686.rpm 4d7bdbafa4ed5cee513b1be4ad671643d5c32d3bba03cfd1cd8d180d81a00510 webkit2gtk3-2.54.1-1.el9_8.x86_64.rpm 61aa55f7ec80fc716211f1868215b08ad18e90984a9284ca868d3e3a5b00eef4 webkit2gtk3-devel-2.54.1-1.el9_8.x86_64.rpm 9797e24141ce9fb30ec86973a9c8250f94047a42341d0fbdeff791b68c0945c3 webkit2gtk3-devel-2.54.1-1.el9_8.i686.rpm d7763bcf3da8ee1a5ddaad67208fe43ebd2d035ffc75e4adba151e1d071a7ad9 ALSA-2026:84588 Copyright 2026 AlmaLinux OS 0 1 Moderate

perl-URI security update

This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 (and updated by RFC 2732). Security Fix(es): * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization (CVE-2026-19953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default perl-URI-5.09-3.el9_8.1.noarch.rpm 3e683e7bec6f7865127d4c77631291350019f0e6c6d29b0b201fac445bddbe85 ALSA-2026:8459 Copyright 2026 AlmaLinux OS 0 1 Important

thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731) * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default thunderbird-140.9.1-1.el9_7.alma.1.x86_64.rpm d325dab9a4de92dc3054d5531d55b3c9e896b695dfaf7af955b0286afed54270 ALSA-2026:84595 Copyright 2026 AlmaLinux OS 0 1 Moderate

cockpit-files security update

A filesystem browser for Cockpit Security Fix(es): * cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste (CVE-2026-91202) * cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race (CVE-2026-91205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default cockpit-files-36.1-1.el9_8.noarch.rpm 771c5fdb9d2cae1039c07d0302d2d72f22915b85a4b25e83a8e7f156a4088952 ALSA-2026:8469 Copyright 2026 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es): * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171) * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203) * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116) * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default dotnet-runtime-8.0-8.0.26-1.el9_7.x86_64.rpm 28ba439ea13a99ba7a610a254f043d8bac374a7fda48f67665c7d08d4ef83d16 dotnet-sdk-8.0-8.0.126-1.el9_7.x86_64.rpm 2e7472376f3c9f4879882c19a354ecc9b289e347c9548a4b59aae1971b24fe81 dotnet-sdk-dbg-8.0-8.0.126-1.el9_7.x86_64.rpm 2e949025c7a03dd66c7b827ef8051c36c89155ee92a8e11cc477361932288693 dotnet-runtime-dbg-8.0-8.0.26-1.el9_7.x86_64.rpm 4fb6014551120968ee218a46bcae38583a215d01f654c5c714f898b75766e6fb aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_7.x86_64.rpm 78526d4734e6779e5b8773e9f1db797c920a6ab62e68a83b062a155ad5261351 aspnetcore-runtime-8.0-8.0.26-1.el9_7.x86_64.rpm 785790603384f466704883cb03e3d81aeb5ccbac3b185f27f8e56c24a8bf51f7 dotnet-apphost-pack-8.0-8.0.26-1.el9_7.x86_64.rpm b8c232d8cd1de6ed2a3ca810d46a32f59c2ea97014aa77f780b0d56df20aa798 dotnet-hostfxr-8.0-8.0.26-1.el9_7.x86_64.rpm ca7b334b6368f52790fcc76b949f313ef7512d1c4772428db7b9b6d34fe9aadd aspnetcore-targeting-pack-8.0-8.0.26-1.el9_7.x86_64.rpm da3437efbd030acae5adbb02e2e5eee6a0306b224cbc37f9dd006b0967094ec5 dotnet-targeting-pack-8.0-8.0.26-1.el9_7.x86_64.rpm f0c42c98ccfb758c8a5504c2fb9ed88190bc915a16c22365a92dc4b939f04359 dotnet-templates-8.0-8.0.126-1.el9_7.x86_64.rpm f25b78d01de7c8524f2cc609e38c94f30bdcb7ea8371c7c4fd419b4167e48f12 ALSA-2026:8510 Copyright 2026 AlmaLinux OS 0 1 Important

libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424) * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default bsdtar-3.5.3-9.el9_7.x86_64.rpm 39b087871d28670f6ebb45ec7b12eaea2d7418a99dc0b57085c0f39c35bbc723 libarchive-devel-3.5.3-9.el9_7.i686.rpm aaa833c6b9a123c3958c648d32712e700a07340cd72f287ecd5b7cc47932a2e5 libarchive-devel-3.5.3-9.el9_7.x86_64.rpm ed7b293d73e61d26378a813c07389dece0d9d3502d033b0cfe523a9d84824061 ALSA-2026:85193 Copyright 2026 AlmaLinux OS 0 1 Important

xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xorg-x11-server-Xwayland-24.1.9-4.el9_8.4.x86_64.rpm 69cc7c81173d8f479eb496bf3b7d4f1962febcd3df284220b2f8526ad90990c5 ALSA-2026:85231 Copyright 2026 AlmaLinux OS 0 1 Important

jackson-databind security update

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): * com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pki-jackson-databind-2.21.6-1.el9_8.1.noarch.rpm 3c8fb8ac4d2319df3d2dcebf6762b741ad8d5e872daea95635aedc281a3b5877 ALSA-2026:85234 Copyright 2026 AlmaLinux OS 0 1 Important

resteasy security update

RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fix(es): * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059) * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pki-resteasy-client-3.0.26-20.el9_8.1.noarch.rpm 12ba6b585b548ff34881a2362021ffd70e6449344ba8f9ef0fa4c221e737f245 pki-resteasy-core-3.0.26-20.el9_8.1.noarch.rpm 420ce9a2cd9a7e8e0a3214c8da95bf1f1ff11d0d42ea5866da14a7f82b2297cc pki-resteasy-jackson2-provider-3.0.26-20.el9_8.1.noarch.rpm 4377a151501801e2bd5032763346b037e657c3f863e624be06fa4f57f713cfda pki-resteasy-servlet-initializer-3.0.26-20.el9_8.1.noarch.rpm caec530dec585303d1fed45c8ec652d6e8d9fa1f7b73e998c1d0ae6eb562f919 ALSA-2026:85245 Copyright 2026 AlmaLinux OS 0 1 Important

emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default emacs-common-27.2-18.el9_8.3.x86_64.rpm 037eece1250d5badb0d94b1c1125e21967136f1ddbab5edcb41a7bce3f68893c emacs-lucid-27.2-18.el9_8.3.x86_64.rpm 3234adaa716cb5c27cf443bf68f88237107b2956036725d92d3d0efda3350b2a emacs-27.2-18.el9_8.3.x86_64.rpm 39c50672f3f1e340657bfb96cb5b11d04be4e205d28d310537bd7001d12aaff6 emacs-nox-27.2-18.el9_8.3.x86_64.rpm 6611fb1492511acae723bea0eea643f35c719432f0fd7d3d34f246ecf63b96da emacs-filesystem-27.2-18.el9_8.3.noarch.rpm 7b58432f929295216f420b00de612ce91fb5d0b748a9a8106f70ebeaaa85ccbb ALSA-2026:85277 Copyright 2026 AlmaLinux OS 0 1 Moderate

hostapd security update

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground and acts as the backend component controlling authentication. hostapd supports separate frontend programs and an example text-based frontend, hostapd_cli, is included with hostapd. Security Fix(es): * hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request (CVE-2026-58374) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default hostapd-2.11-3.el9_8.x86_64.rpm 85547af8610099574097054cc5ca61c61f013740ffe364d1155de93c0a88ad5a ALSA-2026:85791 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgis-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 024230f4a139facaa7270ce774378bb80831f176edecf808f4700cfae6db90b4 postgresql-test-rpm-macros-16.15-1.module_el9.8.0+311+c39b793b.noarch.rpm 1f8e0041a0fd1a55a894b645a43c1bef24abc455b3b25fe575e89120bfda9388 postgis-utils-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 2412a2cb2d1d015dd94f89a6102818732d93181becd6a630a537a92573482005 postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.x86_64.rpm 342da2164f0a3e2c2dffe52a64e59d545e1508f3e2ccd4c73699a228f249e3c1 postgresql-docs-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 344d4d163c53504e9d5807099630e1f85fb4ce554df0b0ef433f8d04ca5ed57d postgresql-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 34b5c64cb8218bd879c5db20de9e1fe86608cd2c284de0faffc01e8fd0ccb639 pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.x86_64.rpm 444b13be987bef254b1b10bd96c8d8f8da88547b24b2b5bb51663769436e0442 postgresql-private-libs-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 4ba5ab89e6cfe35c2820914af153934cd7e03432d9d1451082b49f5bf3aa8f90 postgis-docs-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 4e95565ce7fb1532a63248653207ae3f64537f78f9b599c5bb119a661c062edf postgresql-contrib-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 50bf7ed56809c4a3de701be8740cf27972a836c94a5ce75e5ed806c42aeb854b postgresql-plperl-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 50bf98d1167287ec72168d1dabe37c7f2e6314d3a129e7153f35f7aa8c46cd45 postgresql-static-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 5c59254b794f7ad14935a7de9b526edd70d21eb4787cced6af10c5a6604522d9 pgvector-0.8.7-1.module_el9.8.0+324+0cb93d9d.x86_64.rpm 73e424195c07a940ace920e1729c92b74bdd2f3776746fed070e821e5465b1f2 postgis-upgrade-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm 8637d8e40586d15e60d191a7f59f3743d7cfd14603e8851143e7df1db33e6ab1 postgresql-pltcl-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 9253bbf2d70116a1845cfc109c914381b78ef152beb4dcc798105412021d09ec postgresql-plpython3-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 95ecb2269937c169831de4a606758e803d9d2e70b1145a2f599b0d2c805ed0a2 postgresql-server-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm 987a44a9b461d32f702e3a6b54bce3726f3f772d46a143e920985e9a8d952e48 postgresql-server-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm a8cee20e1d29b96506336c399ae0779bd77206332803b48ed03e29206909278b postgresql-test-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm b292efaeec4a32d94038d7a28892f9237c9d2c504764ac5b3ffefa4342791b7e postgresql-upgrade-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm c6542a019fd5e5350158bb7d172c52ba24a958fe531e05c8791345d50383354b pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.x86_64.rpm c660056970f41edeec199c6634387c8235fcf981c34cdf3f74d9d3b3fd36eb63 postgis-client-3.5.3-6.module_el9.8.0+311+c39b793b.x86_64.rpm debbcc969c9601f47c100348a6df2f3e251ab55ef6eb8864238bc4da64a9ffdd postgresql-private-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm fd6d8094357be219d1d3ca1a89840dd01300aabc268dcdd951903d99cc8031dd postgresql-upgrade-devel-16.15-1.module_el9.8.0+311+c39b793b.x86_64.rpm fef39b9191da2394a5af58a44a503e0d7dff2464b6a950ce3182a78e0046b1f9 ALSA-2026:85814 Copyright 2026 AlmaLinux OS 0 1 Important

postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default postgresql-plpython3-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 012245838f3d860ba5f40f83a88d50bd8c0d90eb8dbf400834fd13567d87512e postgresql-test-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 02ad593bd3137959fc272602fcb24f7472d78a2dd9e0aa2a3094d5a45e7f7861 postgis-utils-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 077591f0af5ef2567852b12f99b96aad9824dcb3975a3c4b7bf8b31cfef0b9fe postgis-docs-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 0df02de20003dfaa1d0d8ae6fe7c0c68077ce2c698be4aac2629d26df13abb77 postgresql-private-libs-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 1a22a62003a6c8448e591bce4de383b687d13a297a29ca65595ed8d7df1e9d47 postgresql-contrib-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 2199f6d13d817ae1161f6d8aef814b825709fef14070ccea9341841924a8a6f5 postgis-upgrade-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 2388a805f13eb5a577b1501710d186b993724ee644f06980fda0b734e5d3dd33 postgresql-upgrade-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 2f4cf4fca3fe8ce018b361098e1df2408978782c28e1accdd0cd27fb96036673 postgis-client-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm 32a96419992cf65f9ebb101fbbbafc57bfb1908664917607dd93dad01899d7ae postgresql-docs-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 89db9baea7b0071499421ab18b06d4193f19cb476ef490f92ebf0796468be197 postgresql-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 8d6fe45c130dc8df375d1dd7bbc2999683719c78e56ef8cd44d7fc7d0ff369c6 postgresql-test-rpm-macros-18.6-1.module_el9.8.0+310+22372bcc.noarch.rpm 8eaf675017f8792c3580aef927e0dbee1bcf5fcec60c7539b7858bdd65d78062 postgresql-server-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 8f25e0adbcdaa240cf7b969dfaae3bf7d8eac52139b5a290a5a39b63d97873b4 postgresql-upgrade-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm 9cad1f636d0143d8703571c053ffd66000438a3d11edf0ae609ad5f91c8e1f49 postgresql-pltcl-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm a3d954d43929db978e756917bdb986153ddd0d521cbadf2edbbc524b465de09a postgresql-server-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm aa994348551d56bad4b995d536fb71847103ceda6258227192b8e802b8ac8643 pg_repack-1.5.3-1.module_el9.8.0+234+5456f35d.x86_64.rpm ac5c05b5931f90b0f9c1905b375a1b91b30d967f960e149d92265259d6d9a484 postgres-decoderbufs-3.3.1-1.Final.module_el9.8.0+234+5456f35d.x86_64.rpm c187a7e2e80a5628dd7c120a1ad9bd8241f2f34a57986c68a2e92ddf59d6ab13 pgaudit-18.0-1.module_el9.8.0+234+5456f35d.x86_64.rpm d6732e77dcbe9d5cb8e802b5fe884dfcc1d7b2857df1edf3c98988bfcf832e03 postgresql-private-devel-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm db79e12f1aac879c496e06a6c1cb480b1fe0a6c982504edad112f8b841c5b5e9 postgresql-plperl-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm eb669b0e4ce1a29e7a7fec9bbd9ec50bfdccc08740b3d0b0ce9e7c6492c0ad96 pgvector-0.8.7-1.module_el9.8.0+325+9e644128.x86_64.rpm ef1e1496d0cbd9757ba02762f39af2bbf4639d1c5487fb2260d9b599b54e930d postgresql-static-18.6-1.module_el9.8.0+310+22372bcc.x86_64.rpm f5b3f8604d61e4a5b1291e89e2a6f685f3a394e3920608e376462dd475a11df6 postgis-3.6.1-4.module_el9.8.0+310+22372bcc.x86_64.rpm fbbcba344dac7121602e4a15b506758a2078ba2c78b99a84d6617b337ab2d050 ALSA-2026:85929 Copyright 2026 AlmaLinux OS 0 1 Important

python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3.12-urllib3-1.26.19-3.el9_8.2.noarch.rpm 1c34311b13f3e8ae99a127f87e2fa61cc8292eeb7e6d8e5a818d008a4b493342 ALSA-2026:85958 Copyright 2026 AlmaLinux OS 0 1 Moderate

openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997) * openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (CVE-2026-59998) * openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.x86_64.rpm b3f96e618338976fd60a2bd7749f473aa2691fa43ef6ba9a112264ecda1262ac openssh-askpass-9.9p1-13.el9_8.alma.1.x86_64.rpm b4c5786be2374391e10add8c19aec84a8649e54c09f97623fe545940f23754ac ALSA-2026:86033 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: Linux kernel: Denial of Service due to incorrect GSO state handling in network fragment reassembly (CVE-2026-80590) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817) * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation () * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) * kernel: ipv4: validate checksum_start before completing checksum (CVE-2026-99999) Bug Fix(es) and Enhancement(s): * Batch: z-stream xfrm - almalinux-9.8.z (NST-Core-26W38) (JIRA:AlmaLinux-256697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default rv-5.14.0-687.59.1.el9_8.x86_64.rpm 14f06aaed7a2838a9173f0898c8e7d10e9ec1596e888049ea11225b839511290 kernel-doc-5.14.0-687.59.1.el9_8.noarch.rpm 1d3a875c070331325cba51ca7019246d0c657e0ef1dcdf54bd464124ca9d5180 kernel-debug-devel-5.14.0-687.59.1.el9_8.x86_64.rpm 23e2e2699c10ee6e13a6f420d7ecbfe4e254f974de4266fe13e6b7ef998926d2 kernel-devel-matched-5.14.0-687.59.1.el9_8.x86_64.rpm 27a5d55f12b0b0bc35370e475d96bfe1ea1ac69218f5b7c1f0cee5f51cd86b80 kernel-devel-5.14.0-687.59.1.el9_8.x86_64.rpm 2f059d775beb050b0703d923dd35ac2fb7344dcf99ac9ee38e188bed1d2721f3 kernel-headers-5.14.0-687.59.1.el9_8.x86_64.rpm 3cb2a8f2d95352fc5d46beb2828fba5b38268549c3a495925ab1d1eafacb6135 python3-perf-5.14.0-687.59.1.el9_8.x86_64.rpm 4b477ae2aceb94eb6d57c3dc9d62edbc7a028e7434cd1a75618cacba5abeb277 rtla-5.14.0-687.59.1.el9_8.x86_64.rpm a3f29212da65c6713a7c6af6c3f5884f9ad3c31c3c87276e85d14f08f034017a kernel-debug-devel-matched-5.14.0-687.59.1.el9_8.x86_64.rpm b01712a607d8063110eec3601c3f8f56a2417778a93605c3729e09ca7cfe9cdc perf-5.14.0-687.59.1.el9_8.x86_64.rpm c10b04ebf9b42f7b413f84d2561377a475a280178b7abf67616904460034e0ae ALSA-2026:86169 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.132 Runtime version: 8.0.32 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVE-2026-96222) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.132 and Runtime 8.0.32 [almalinux-9.8.z] (JIRA:AlmaLinux-277793) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-runtime-dbg-8.0-8.0.32-1.el9_8.x86_64.rpm 053de66e0f59ccafca9a9c82cedc876aa5ae1a3ddb25abad7e9a217b719db327 dotnet-runtime-8.0-8.0.32-1.el9_8.x86_64.rpm 24c681336f460164761cf1b2002ccb2a29439b2ac58e0889d4dcbc94bcdfa909 dotnet-sdk-8.0-8.0.132-1.el9_8.x86_64.rpm 350155d3794891dfe1770c0cc6e0fafc1c7055438fc1f053946463414df26262 dotnet-targeting-pack-8.0-8.0.32-1.el9_8.x86_64.rpm 36991a5c2055ad5945057c0889f422c05436b3836a64b77481b05e39eb36032d dotnet-templates-8.0-8.0.132-1.el9_8.x86_64.rpm 3fca427f54edf65869ee7fc12e05fa6cc9e8dd05edd9a20e845c30b048d537f0 aspnetcore-runtime-8.0-8.0.32-1.el9_8.x86_64.rpm 428b09805a0fe7584ee17f4d97bad1e9e2b84c78633541b9d5e2e11571f5e1eb dotnet-sdk-dbg-8.0-8.0.132-1.el9_8.x86_64.rpm 55f04829e20b43d3459c5dc7e87148b605a9e005eb6d6eda7bdd49bf1534f1de dotnet-hostfxr-8.0-8.0.32-1.el9_8.x86_64.rpm 5dc1e384bbac649bc808578bb2b1abbcdea8944f3cac26e08afb28fa6667d2e3 aspnetcore-targeting-pack-8.0-8.0.32-1.el9_8.x86_64.rpm 72a8b20f6b6dd664f1c6c9cdd2da324b9c5321912961c1530cf9072a230b522a aspnetcore-runtime-dbg-8.0-8.0.32-1.el9_8.x86_64.rpm 7bd626217f7bd3b68d0bf33858eca2bbcf8c0b7921dc5c3b6b2c9930ab0588f0 dotnet-apphost-pack-8.0-8.0.32-1.el9_8.x86_64.rpm b8707581c8ecf4ce9c8f0dd2fb808edd9f4724acf12f9c2370c7e2eccc3f4547 ALSA-2026:86171 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.122 Runtime version: 9.0.21 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.122 and Runtime 9.0.21 [almalinux-9.8.z] (JIRA:AlmaLinux-277800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-runtime-9.0-9.0.21-1.el9_8.x86_64.rpm 0a30fafba1494cdeec77b44958c61490d7cdc832e2af5a293c3bbdbccaa46055 dotnet-templates-9.0-9.0.122-1.el9_8.x86_64.rpm 0f27ba343ef7117be314030226059e428a33f0aa35f5a9e6b4bb9c383849b63d dotnet-sdk-9.0-9.0.122-1.el9_8.x86_64.rpm 146e8be717e7c46b76f450542e13996e9b3ceb9d1c6fb3ba939de7ec4e97c8d4 aspnetcore-targeting-pack-9.0-9.0.21-1.el9_8.x86_64.rpm 30efc57a3e71be31df3e4110b2849f9fd6f35c0d84b51e4cac0fb56c41a7c472 dotnet-hostfxr-9.0-9.0.21-1.el9_8.x86_64.rpm 34477cf55699bab70edaadd86d81f2f5df10cf846862a4db92f52b0c1dcb292b dotnet-apphost-pack-9.0-9.0.21-1.el9_8.x86_64.rpm 77beedbb4e5710afce2bd22039f0dde56fed13b5285beb884cb2086a89441f4e netstandard-targeting-pack-2.1-9.0.122-1.el9_8.x86_64.rpm 7f63553e7b09897190777dfa8043c6d6f5458f8f29f1cda25d2968d90d80bd62 dotnet-targeting-pack-9.0-9.0.21-1.el9_8.x86_64.rpm a4dce9dc757d424e582ec287dba92a3c0b44fb113d48f14b99b0bff0fc391d59 dotnet-sdk-aot-9.0-9.0.122-1.el9_8.x86_64.rpm ae6599bb6e0f50d20972898e096060df7197e2ea6cb6fd9df2ce14ad55250182 dotnet-sdk-dbg-9.0-9.0.122-1.el9_8.x86_64.rpm c918222d101515899a8594554484db3c7de1f5d1ea053a190f07a6257e28a013 aspnetcore-runtime-9.0-9.0.21-1.el9_8.x86_64.rpm d500d55d6aefd9b638b59bae6a1ceedef57c944a732186952e6cd5e6841d155a dotnet-runtime-dbg-9.0-9.0.21-1.el9_8.x86_64.rpm f939f2f613e4630a3243ce947a73527f0a6c7ad12bd534648dfc7b4f915b5916 aspnetcore-runtime-dbg-9.0-9.0.21-1.el9_8.x86_64.rpm fe4c70f2a2c81605a839e5adf6f3d76e44479b8e2fea0df8d73080417646a198 ALSA-2026:86193 Copyright 2026 AlmaLinux OS 0 1 Critical

.NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.113 Runtime version: 10.0.13 Security Fix(es): * dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-102870) * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) * dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96957) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.113 and Runtime 10.0.13 [almalinux-9.8.z] (JIRA:AlmaLinux-277808) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default dotnet-runtime-dbg-10.0-10.0.13-1.el9_8.x86_64.rpm 0d2f97fdb5ff54d5812d70e4566c4d0d1e4f802032c0eed594b2a2a944492514 dotnet-apphost-pack-10.0-10.0.13-1.el9_8.x86_64.rpm 36b8adaa078e2f391d3d1fec8e746653e6045f2c0944f5167ee8f64992b5a75b dotnet-sdk-dbg-10.0-10.0.113-1.el9_8.x86_64.rpm 400735bad84a82866f9c597520eb9096badb47c5c8b4b1ce4d971aa078e1c1a2 dotnet-runtime-10.0-10.0.13-1.el9_8.x86_64.rpm 4cb9561a8b65b394e1e9b07e6c75648795f607c1188bdbbf96381cf4553f6935 dotnet-sdk-aot-10.0-10.0.113-1.el9_8.x86_64.rpm 56a8b8fa960384da1ae7e16e6c0f333c95986f1c2de2b30673d50e47f3d21cb0 aspnetcore-runtime-dbg-10.0-10.0.13-1.el9_8.x86_64.rpm 642dd3d556bb1e2d0e9edfc41582cc767cfe662319116ad28dd441831e3a3d16 aspnetcore-runtime-10.0-10.0.13-1.el9_8.x86_64.rpm 6915316c2e0ec509cc232d84f8fa04f67373679d3f876eb1f84bc1b1d2582d9b aspnetcore-targeting-pack-10.0-10.0.13-1.el9_8.x86_64.rpm 793d7818ea3ab282c6dbb2c162f11f59d21927ae61dff714c6100b968b759a25 dotnet-hostfxr-10.0-10.0.13-1.el9_8.x86_64.rpm 82e621dfe9bd97a4fe66e02e57178c8466eade6565a502f70a42e81a9ec53b9a dotnet-targeting-pack-10.0-10.0.13-1.el9_8.x86_64.rpm 9d90c8427b62913b8f118c8c8d65ea0924f241997558c8b728d20c466cdee8b1 dotnet-sdk-10.0-10.0.113-1.el9_8.x86_64.rpm cb2e68fec91f0fcdb4682b056e9b93c7854ce83e19abdd3b27edef4dfc121a34 dotnet-host-10.0.13-1.el9_8.x86_64.rpm e07647e329e7ab67c7289c53ac5cd559d634941bdb8455449c924d062e91a1a9 dotnet-templates-10.0-10.0.113-1.el9_8.x86_64.rpm fc3f1ee7fcc277f33c41c2a45b55ff264a68a7c2cfad9ccbf130db283e59e98a ALSA-2026:86196 Copyright 2026 AlmaLinux OS 0 1 Important

golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.10+1 [almalinux-9.8.z] (JIRA:AlmaLinux-287192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default golang-race-1.26.10-1.el9_8.x86_64.rpm 129949cecba2babac5f50e182ff689ecb316e3988756c0a6103b1e002a804b2a golang-docs-1.26.10-1.el9_8.noarch.rpm 2052d08e651131149d53da41cc8a12baf5da4aef770762486d3305a875127cf2 go-toolset-1.26.10-1.el9_8.x86_64.rpm 20bff1f91b993a6f54c9d4786e61573ee9720845085e771eebe1c0fc08cc4fcc golang-bin-1.26.10-1.el9_8.x86_64.rpm 5c7c8439ae4ed9f449e92c8bb82cf7fe41f6c7c2e024ded89851864b9b04098d golang-1.26.10-1.el9_8.x86_64.rpm 6db095261e3ea0c3e7ba8bb610da95512c649df954f1d33a63e6833e9101136c golang-src-1.26.10-1.el9_8.noarch.rpm 80f6768e4deaf99aae5d2cf4c4c7c6c1ff14e79f61ecd2889638f07e07877269 golang-tests-1.26.10-1.el9_8.noarch.rpm c95cd98460e3df6867fd54b4f44c90a35087fc4b5568027586b22abb43c9b5b1 golang-misc-1.26.10-1.el9_8.noarch.rpm f96102b3b183f1b77561ed40706967006177c5c56689a7e9b3ed657ff0814c39 ALSA-2026:86706 Copyright 2026 AlmaLinux OS 0 1 Moderate

jackson-core security update

Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fix(es): * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking (CVE-2026-89407) * com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default pki-jackson-core-2.21.6-1.el9_8.2.noarch.rpm 95b663358dc13330eb353f5d167567fbdabb433155876e4d8d6e0776d7989c36 ALSA-2026:86921 Copyright 2026 AlmaLinux OS 0 1 Important

librsvg2 security update

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default librsvg2-devel-2.50.7-3.el9_8.1.i686.rpm 1e265291e4a7b13c3d0b8e309527f110ed8407985da1332e64a453cfc0ed0e36 librsvg2-2.50.7-3.el9_8.1.i686.rpm 4e1eca895e626f24b517d5f8dbd6dc8c3157f69d02d54fb4bcd2a4e65b01ddc8 librsvg2-tools-2.50.7-3.el9_8.1.x86_64.rpm 7d1cbf808b56e539ccc9ceb773871a12a125690f6ad4522cca87db9517ce5e80 librsvg2-2.50.7-3.el9_8.1.x86_64.rpm a4782fb78245bb38245dd590a9739c0a74b527e320437984260294cc84c51280 librsvg2-devel-2.50.7-3.el9_8.1.x86_64.rpm bdc70403e61baefed61f2e6c0dee7a1173d7632671e704b22c9d2b60ecfd7418 ALSA-2026:86970 Copyright 2026 AlmaLinux OS 0 1 Moderate

cockpit-machines security update

Cockpit component for managing libvirt virtual machines. Security Fix(es): * cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments (CVE-2026-92768) * cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list (CVE-2026-92747) * cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments (CVE-2026-92745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default cockpit-machines-348.1-1.el9_8.noarch.rpm e1b2a04fc6678778e67aecaf3383310a09c8859aa8532ef1ba59042ce682ef4d ALSA-2026:86981 Copyright 2026 AlmaLinux OS 0 1 Moderate

fetchmail security update

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client. Security Fix(es): * fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default fetchmail-6.4.24-1.el9_8.1.x86_64.rpm 7bd5caac603631bebddbd74baeaf772a4eb7f835f56afb2b7b1307e2d2759373 ALSA-2026:87072 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921 php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm 96cc987054e929ded9dfb18f35b9c6912a9df307b6e6ffee3c409f85bafa2181 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.x86_64.rpm a05a23d56973cbb28cd6df434887268ea519defa51e9176928b1f6859bdd33f8 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.x86_64.rpm a0c7dad446e919bbb42213de89f00d65f58b08c51e4e1ab382707c3324627f7a php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm d4536864003ca10535ac907cbcc199da8c73c8b16a66b52aaeb1431f587b1ea0 ALSA-2026:87079 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-xml-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 04ebdc46f4587edc8004eb4f32d43e35448d1b337e665adabe39b418f5084e54 php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.x86_64.rpm 1e95a29597aa5c8b102c97a7d8fe608712e1a7ac5f33086477259cdfd802117b php-mysqlnd-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 250e795864a2bba15741250b018e01c51aaef8cc369ff134b102840513a8a823 php-fpm-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 2ac7849d9a98ef01b43027ca813a518908f41a8c4b772f428f088cff4b25ba77 php-opcache-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 3cfb6fb84d7975b3a5e990e5eeb98d14d607e021c2893f436158459615b8ae87 php-intl-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 3dd6e3a7b64995f94f026454f762e7076bf8687e91efc4fc803ec748cf95e4cb apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm 43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033 php-cli-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 485301f6d3cc6fbd1bcc4bd1465363ed96ba5f17a991b3c52cae3403d711ba8e php-process-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 496c2fe31e5b031cd988fdb3315948fe5d594ded4a997056c199320e58b1df94 php-dbg-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 4a69533dbb4fcc50037a377e23589213072c063d46790c02339d60ad876db838 php-pecl-xdebug3-3.3.1-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 4c4a29cc6b850d8d4bb68f330b91295d8c57b028fc2d86d5f5839fd84320a619 php-mbstring-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 53acbb71790f40b24a5d20b6bf826596b9b3586d9b980a4d19db92893412bfdd php-dba-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 5adebf60470ee67b4b281895de0d77bb636a9ffd527f2f42ff4d16ab61245dc1 php-embedded-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 5db2bd179238cc9afaa7f1e43190fcd4c73994c928ee9305ff728e208683b41f php-pecl-apcu-devel-5.1.23-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm 8512b5dc68f79bf2f150a23fb1e6e9287d8c9b8a4b33641e542df7c172c4b128 php-ffi-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 863fd3374a8019bd38daca6fbf48b7b3744794cc39a027b70b22b213799090d5 php-pecl-rrd-2.0.3-4.module_el9.8.0+287+a9a5bb73.x86_64.rpm 868eeceba907f3af5f8af4492d6a59a3e674e6e68952e94ef8d88ff32e02edc1 php-bcmath-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 8bd8e38e97e1e0ab6545eb3102473c3549f7ce974fc5b150ca430e25152eec83 php-odbc-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 983c7494f7fdbc1623ed8703f5d0214824c3b0f1f1bdb63ffe60556df191edb6 php-snmp-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm 9fb77722800bcfa31499f111df8327a7825df6391b40a478cb081eae69517cdb php-gmp-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm a772cea2e8b87821399914ef12ba0ed01eda6887a80f4ed7fd00d240bb0ca31a php-pgsql-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm abc517c4a27aa74b53eda5debcd00146546445eb70523e9afb63b3c427c663b8 php-soap-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm afa31ff464baf84adb70a5cb6cb7eeac437ba639a5dcc69c1e55a18cf40c4575 php-common-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm b183184a4130488d5ecb34f0197efe212519439d4f2ed6bf15f0d09188ff5c36 php-devel-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm c0830a521d476e02986fd937a6bac521c31ab5128800d1cd95e41ca97616b4ab php-pecl-apcu-5.1.23-1.module_el9.8.0+287+a9a5bb73.x86_64.rpm c7b0c8e3f15734067690c85fa999f4527496af3a279df9283b6f8abb3a6f7252 php-enchant-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm caf6a6b947a4f0b56e395b60fec96908f834d845e974d2096f28dbd3bf28d5d5 php-ldap-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm cc36debcbba9c7fb4dadf969bd9ddb519e3d67da79a9188d0b77ba376c85c96d php-pecl-redis6-6.1.0-3.module_el9.8.0+257+89d727f2.x86_64.rpm cfbd00b1767223062f3a8b4d7a1e2991f248c1bca9195593ba4b2fa89514e1ed php-pdo-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm d6515ec374c504dacb08c6f712b4a325514570b797c2c2cd85fba60cdad69933 php-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm d8f713d34daa6639cade0d515c8ff29d69245112478f3a3ca12b8c6e14852fc0 php-gd-8.3.36-1.module_el9.8.0+330+fdc30075.x86_64.rpm ed483c5bb1f72a4265bc04e25e71897e1a78a07fb7dbae46f520424a506bb807 ALSA-2026:87082 Copyright 2026 AlmaLinux OS 0 1 Important

qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573) * qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default qt5-qtbase-odbc-5.15.9-11.el9_8.2.x86_64.rpm 07ac1236d392a7fb0b07612b62e633105d6222586b987ad5c90554229922061d qt5-qtbase-devel-5.15.9-11.el9_8.2.x86_64.rpm 1f8ec23230f06478028c3ddcd7e4cbedef88e28a32e18c8f69f2dba41ad27421 qt5-qtbase-5.15.9-11.el9_8.2.x86_64.rpm 26e349900c5fd0c6219b9f3b12b2a777a7f9c6d744de075fde440ae078e4766e qt5-qtbase-common-5.15.9-11.el9_8.2.noarch.rpm 31db94f10fc9e80bf124d72d86fe191c73118d34200e8d72a13fe92f5b57e9f6 qt5-qtbase-private-devel-5.15.9-11.el9_8.2.x86_64.rpm 3b49a3eafe9673148ef8f4c78bdb90025c1ef555b01a282faec0aac549af91c0 qt5-qtbase-mysql-5.15.9-11.el9_8.2.x86_64.rpm 571f118de6277ac03faed702c523e2474472695276cd53eb285b44ceaf3c017f qt5-qtbase-mysql-5.15.9-11.el9_8.2.i686.rpm 7021636284704931a2da3e5fbb0c9927bc99dec07b0975dd4c2b56bcff826526 qt5-qtbase-postgresql-5.15.9-11.el9_8.2.x86_64.rpm 776cfe56751df528ffeba4ea2f28d5a2e3343c81c2dab977535e74d79b4df26c qt5-qtbase-odbc-5.15.9-11.el9_8.2.i686.rpm 7db6e5974f0ee5bc5fc103b55288014b268bac1d4f6dee4fa5734d3f394135b2 qt5-qtbase-postgresql-5.15.9-11.el9_8.2.i686.rpm 840a3d6df27b61cb249708cb04ecdbfbd10de8e4b0dfb9706552907929224af8 qt5-qtbase-gui-5.15.9-11.el9_8.2.x86_64.rpm 918989ec710dee8347b58eb83216583aa6c31468a6f972f24d357ae7b1ae87d3 qt5-qtbase-gui-5.15.9-11.el9_8.2.i686.rpm a2d38165b72412633eabeb5eeea6c1906af3106a8a62619bf1a23b1bf973ef2e qt5-qtbase-devel-5.15.9-11.el9_8.2.i686.rpm cfc67619e16af91c7e50e523684a2d9f568ec820fdda89987284791de68471bd qt5-qtbase-private-devel-5.15.9-11.el9_8.2.i686.rpm de820034d339dec485401ef33984a654cf0a82dd51a51f3ddfa3c8ae55996054 qt5-qtbase-examples-5.15.9-11.el9_8.2.x86_64.rpm ed7aa387c31a4581e3a4633093e31738f7398410d84b5b15cdcd39d1508dde79 qt5-qtbase-examples-5.15.9-11.el9_8.2.i686.rpm f5404af3895ac0e967022eda2035eb3b721155caabcd3437cd594a9289c6861b qt5-qtbase-5.15.9-11.el9_8.2.i686.rpm f694cdf277a5f1d723e3912a3cadb4b8fa375bb54264be4adc0d18f7e2a9c3e7 ALSA-2026:87151 Copyright 2026 AlmaLinux OS 0 1 Important

php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-gmp-8.0.30-8.el9_8.1.x86_64.rpm 0444fc3ec25e3c0d67c9785d246551e07967f32f401c8acd749ac0dfebd6c8cc php-8.0.30-8.el9_8.1.x86_64.rpm 0e6eaedb98b3392974d5c0c5b1c3c1fc2c3855ca5ebc33fa5ae2c731cf27c891 php-bcmath-8.0.30-8.el9_8.1.x86_64.rpm 1cc7cfa784c2afc47f4f6d8224c85137f75c838cd6c31a6d4748c226615fdca0 php-cli-8.0.30-8.el9_8.1.x86_64.rpm 1e3096aba2bac297c40ef3bef2ae0eac3c29544f19ea7ab6f5a1d202c55c70d4 php-odbc-8.0.30-8.el9_8.1.x86_64.rpm 513467920006194e91fbed03c29c314e360c916c1dfdf152f8e2bfd3ae7f6c6f php-xml-8.0.30-8.el9_8.1.x86_64.rpm 66c2bc88e3b694a81d9ddc86f5b707f20b7d6528f9d1ab9189522c4b516a6dec php-enchant-8.0.30-8.el9_8.1.x86_64.rpm 67defd14672650103ae964633119eb9f0a1087d292621b88389efec3292c36f9 php-fpm-8.0.30-8.el9_8.1.x86_64.rpm 68f7e738fbdfde9ff167b11fb1c26f58af55bcda320b2c4eeecbd0981ef9cf1a php-snmp-8.0.30-8.el9_8.1.x86_64.rpm 771f605abcc406bca87df956203df90fc2f17f28e3c7479d1bcd64ba59f57686 php-devel-8.0.30-8.el9_8.1.x86_64.rpm 7e880ec69480d48108fd51d0f4b5e0cd72e8074405f5be9047baebada3ffb275 php-opcache-8.0.30-8.el9_8.1.x86_64.rpm 88a101f5e416f187d444e9624b7f0f3a4c465201c61b9822cc3d94c9c9823d2c php-mbstring-8.0.30-8.el9_8.1.x86_64.rpm 9a7cc4ba0cf8c20b2265823ee12cf448d7e47d4ca0ea74e5b2fb115202927f2c php-mysqlnd-8.0.30-8.el9_8.1.x86_64.rpm a1569c7c884d9b0a9237c78448cf15382458b0387d39ff383accec91523fd419 php-pdo-8.0.30-8.el9_8.1.x86_64.rpm a395bf9be18abbd6ee424fcf0e20dd7942d5b8e56b49234eccef1fcb50ec0a52 php-gd-8.0.30-8.el9_8.1.x86_64.rpm b19efb42690aa24fdd25ea8e51890f1175ffbdcb09df1738584b8963e0f47abe php-dbg-8.0.30-8.el9_8.1.x86_64.rpm b3a03c8e44c30784af97358f5c65ce8f55a64aac09817d9260e15e0c9e397e74 php-embedded-8.0.30-8.el9_8.1.x86_64.rpm c198c6bb1ebb4eaac767149a872e9f9b451389e276eaf6b2c5eab414010334aa php-dba-8.0.30-8.el9_8.1.x86_64.rpm d7f7834aa7b89186fbae312742dbc0a58597c5d4045c30039c328e014ced5729 php-common-8.0.30-8.el9_8.1.x86_64.rpm d91655aca79bc91e51f3e07fb340df7c7c0e6ff4b21e42e9e195f47e419d8c31 php-soap-8.0.30-8.el9_8.1.x86_64.rpm e0161cf310fb8aa8eed7bf6ac0881de4f8340594b80ac04ebab7f20db17da598 php-intl-8.0.30-8.el9_8.1.x86_64.rpm eb15468a3931a1140ecc5d4114a2eb4c84e3a80f1c34dae0eeb8302d383c13c7 php-pgsql-8.0.30-8.el9_8.1.x86_64.rpm f2ae91ac32b220df30d27c97b31796452b793d4113e122792b2f454aa27ca23f php-process-8.0.30-8.el9_8.1.x86_64.rpm fb99315956ef4206f2e3dfa1c4960ec267f309e78f21c6b2e69411848b11a7c2 php-ffi-8.0.30-8.el9_8.1.x86_64.rpm fcf0a113f9f7d60179b734589928bd8c48f390aefbf222bf79cdf53d9bf1c9d0 php-ldap-8.0.30-8.el9_8.1.x86_64.rpm ff6cd16ee72b02c46b05c4b4258b3238a1a58cbd830391967eb53545351c7f0c ALSA-2026:87805 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063) * kernel: calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147) * kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: ovl: check access to copy_file_range source with src mounter creds (CVE-2026-68448) * kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CVE-2026-80530) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) Bug Fix(es) and Enhancement(s): * RTLA segfaults on freed memory access on double SIGINT [almalinux-9.8.z] (JIRA:AlmaLinux-193029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-headers-5.14.0-687.60.1.el9_8.x86_64.rpm 2122ea0e3747bac980a296a6d4badfa32be4db905cd502c28ff6cbf85f53c653 rv-5.14.0-687.60.1.el9_8.x86_64.rpm 22c3b0fb6b49c746172c0b2cce8ea02162277d954cba266f453f334f934f7e74 kernel-doc-5.14.0-687.60.1.el9_8.noarch.rpm 328dc82578f69f49c07bf85b34a5fa0324c52fda662a6075b3d2806b1e642715 kernel-debug-devel-matched-5.14.0-687.60.1.el9_8.x86_64.rpm 3a621ef7014df0aac86d3d3c5085d0c778870b368e6645c1244607e93fcaadea rtla-5.14.0-687.60.1.el9_8.x86_64.rpm 5e60ed7f5a781c7c3cf9a3a04af668447bfdb8c74283bc35cc7b74e96df7fcbc kernel-debug-devel-5.14.0-687.60.1.el9_8.x86_64.rpm 860522e85445bd05e7464775ca858fa37f4403755d03613366e89d29927b5cfc kernel-devel-matched-5.14.0-687.60.1.el9_8.x86_64.rpm 8c95a1848cdf467181fea99598fbe9d2261a5c71a3af85f52688beefb0225dbd kernel-devel-5.14.0-687.60.1.el9_8.x86_64.rpm aa5e8a5cff06b7cfa0bf06d0f2141e87b2d80c3e5bc180806176623f24cef4e2 perf-5.14.0-687.60.1.el9_8.x86_64.rpm b419228038814bd0cecd76ddd2e8bb7987290a0baf8f675883cbbaad085a302b python3-perf-5.14.0-687.60.1.el9_8.x86_64.rpm f08d6476740871ccdf99cdd774f3ff3c1a7f67ed56b64ea903c4e1a7ec83ae9e ALSA-2026:88229 Copyright 2026 AlmaLinux OS 0 1 Important

httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi (CVE-2026-63718) * httpd: httpd: Denial of Service via integer overflow in mod_dav_fs (CVE-2026-93546) * httpd: httpd: Authentication state corruption via concurrent Digest authentication requests (CVE-2026-73637) * httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response (CVE-2026-63045) * httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) * httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference (CVE-2026-46729) * httpd: httpd: Authentication bypass via credential replay in mod_auth_digest (CVE-2026-73636) * httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc (CVE-2026-63686) * httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest (CVE-2026-48005) * httpd: httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) * httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite (CVE-2026-56153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default httpd-devel-2.4.62-13.el9_8.9.x86_64.rpm 0c96ef41f4cdf6ae9133ba35e459b65ee684640d9ce2728955e83e74c58e5946 mod_session-2.4.62-13.el9_8.9.x86_64.rpm 24737c1e7bda2a8da5ee3ff7def9c933bd005bd7884794b201efc5c64dec2220 mod_ldap-2.4.62-13.el9_8.9.x86_64.rpm 2aa0a27d3802fc3068858ad52f2a92d71fe232cdebf6fcc9f0d060f7e93f6a8e httpd-tools-2.4.62-13.el9_8.9.x86_64.rpm 2e42cd1e54f8c9f17be3913300d9701304e6aa61fc41cc5aba6ceb91365362ed mod_ssl-2.4.62-13.el9_8.9.x86_64.rpm 4c55680931d3bfaf4969e0ceb9f01fff2447a14d6ffd90535331f7890df97ede mod_proxy_html-2.4.62-13.el9_8.9.x86_64.rpm 552ca3d5784d42419706f7a30332717a6116f6b3195aac5128a6964997d5b4c5 httpd-filesystem-2.4.62-13.el9_8.9.noarch.rpm 6a2429a79aae70004496618facb3c0b1e5199f6b38dcfbe069d946036e1d7b49 httpd-2.4.62-13.el9_8.9.x86_64.rpm 76e173ce6f203af9a58e78f8cccfb1b42f52d63f3b320c40aed4fcbdab100966 mod_lua-2.4.62-13.el9_8.9.x86_64.rpm 95aa804faeb8638c6ecd6e4e0959d275cdc2883d11d7bce9e42737926b79e9b7 httpd-manual-2.4.62-13.el9_8.9.noarch.rpm d77bff969acdff5b9ca5b1f6c0d5d8e4cfb8b9e79d2cc72c68a4ad00477f9669 httpd-core-2.4.62-13.el9_8.9.x86_64.rpm dfba786cb41d06fa685b738a4dbcc08e81fe3ff5086fcf54fb936d0014dd2824 ALSA-2026:88247 Copyright 2026 AlmaLinux OS 0 1 Important

expat security update

Expat is a C library for parsing XML documents. Security Fix(es): * expat: expat: Denial of Service via integer overflow in expat_realloc (CVE-2026-102633) * expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer (CVE-2026-77214) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default expat-devel-2.5.0-6.el9_8.7.x86_64.rpm 1ddf50958517e1be7ce4ae3a0702c3ceefc9449953a231cfae3e5f4bbe247968 expat-devel-2.5.0-6.el9_8.7.i686.rpm 5f234e56ba315e9d909ec00947f689dfbbfaf247ecbc6a958932065bd75a51e8 ALSA-2026:88354 Copyright 2026 AlmaLinux OS 0 1 Critical

grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-pcp-5.1.1-17.el9_8.2.x86_64.rpm cb943df15d662e1ef2f54f8623f23ec3351005f994d4c290edbfc6058d25bdf7 ALSA-2026:8841 Copyright 2026 AlmaLinux OS 0 1 Important

go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default go-srpm-macros-3.6.0-14.el9_7.noarch.rpm 2e5ba21f9c0f50fe601b839339e1d20f3ae28a07c960d4f26280a8d906e41f22 go-rpm-macros-3.6.0-14.el9_7.x86_64.rpm 489df117bb62b241cd57f45d475b3e3176cdb125c1832b12f12c37cc98413d44 go-filesystem-3.6.0-14.el9_7.x86_64.rpm d21648bf3e088e9d8b89934d390f0d53a3b54267f54202678fa8997efd23d677 go-rpm-templates-3.6.0-14.el9_7.noarch.rpm f10c8cb303a924da9f14f077ac0cea7d926403d627791adda19250e5371dd888 ALSA-2026:8859 Copyright 2026 AlmaLinux OS 0 1 Important

giflib security update

giflib is a library for reading and writing gif images. Security Fix(es): * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default giflib-5.2.1-9.el9_7.1.x86_64.rpm 3f9cb284eb10a18fcf711d1fa617147c53b9e3c4f14a141dda8622f6fb586ab5 giflib-5.2.1-9.el9_7.1.i686.rpm bc4569a271f51cfc5dc2567d96d3bb36d10d18f3a0e7b0e82d2fa0ca4acd5630 ALSA-2026:8888 Copyright 2026 AlmaLinux OS 0 1 Important

openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing (CVE-2026-27622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default openexr-3.1.1-3.el9_7.1.x86_64.rpm 0a44578e1c92d23362481682ec2d33cae25d65de478ade72ce88ce40b269b299 openexr-libs-3.1.1-3.el9_7.1.i686.rpm 76264bb8a4a16adfd0c989d9039f7c42ea8696d0a61add7824e05f146774b8d8 openexr-libs-3.1.1-3.el9_7.1.x86_64.rpm 9e3eed7051b554e901b985cbaae0af0420b873f2e41f6f6befa212f1af644e79 ALSA-2026:8921 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-debug-devel-matched-5.14.0-611.49.1.el9_7.x86_64.rpm 1fbbf49df2f2a3459a2cfa34233288d5791ac1f217817408ec041183eef58483 kernel-devel-matched-5.14.0-611.49.1.el9_7.x86_64.rpm 2492b0708d12f38a52298441e002b50387a8b704714580a8383a0575afeb55ca python3-perf-5.14.0-611.49.1.el9_7.x86_64.rpm 39fdbda659621f782c7ac4e69e02ea1ff21aac3cc0cd2e6a3fd3384124903ac4 perf-5.14.0-611.49.1.el9_7.x86_64.rpm 65a33e7886c7ff0be99756d6353838934ad79c0fb6dcba735d8fbd8812a43e5c rtla-5.14.0-611.49.1.el9_7.x86_64.rpm 8e0144f22239e3d09cf98cd80a9e42f3edf9001c0e82fbecbbb544dfa70ea103 kernel-doc-5.14.0-611.49.1.el9_7.noarch.rpm c83f9e13787b632d6cfad0ac4141fe053370f434b21b166409645776594249a7 rv-5.14.0-611.49.1.el9_7.x86_64.rpm ccf367fa84894b8305e1dcfd42fee88bc8f9db0433c3b3cb4424d07c114fbc85 kernel-headers-5.14.0-611.49.1.el9_7.x86_64.rpm d7e0664dc57583cba78551c97be7e19bc4c771974ce431710f3cc68ad0ee654e kernel-devel-5.14.0-611.49.1.el9_7.x86_64.rpm daed389705e4c2e3199fa7b545728620f198a045195b6e9400388b6d4a7f2c00 kernel-debug-devel-5.14.0-611.49.1.el9_7.x86_64.rpm e9970858b3c092abc3284c6133e01f969435fd1bc0525ee9c44ec735fa300d20 ALSA-2026:89742 Copyright 2026 AlmaLinux OS 0 1 Important

python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: python: Arbitrary file deletion via race condition during temporary directory cleanup (CVE-2026-12345) * python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553) * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default python3-devel-3.9.25-7.el9_8.6.x86_64.rpm 58419a7a4b0fac167c3c37cd456bbd5997505daca038f58c5ded622c33588e07 python3-tkinter-3.9.25-7.el9_8.6.x86_64.rpm b8b8708ed86bed221ba2674c084643bb9b1d19734a07a9d87dd18d5808b00f53 python3-devel-3.9.25-7.el9_8.6.i686.rpm cafcb08941571179fba60bbc76634d09ab95fe18e47884f27ac090dbb891945c python-unversioned-command-3.9.25-7.el9_8.6.noarch.rpm d7660c7db906bc7fffe5753d719e5ceab6dd80c2c41c2054423a59fe65d37fd3 ALSA-2026:89744 Copyright 2026 AlmaLinux OS 0 1 Critical

grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Information disclosure vulnerability in Unified Alerting (CVE-2026-17183) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default grafana-selinux-10.2.6-23.el9_8.7.x86_64.rpm 07ed8d2ac889efc4bf91d167969508ff2e2667d7ddc1735ffcc350880bebc2c8 grafana-10.2.6-23.el9_8.7.x86_64.rpm 77607db0bcbd5a91d2034b80acd7265ae526e41091c19780d91f15551dd9ba62 ALSA-2026:89745 Copyright 2026 AlmaLinux OS 0 1 Moderate

bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind-dnssec-utils-9.16.23-40.el9_8.12.x86_64.rpm 0f1e088da9be6cedaab6750d4365426f487aedc49fc150a162005eb3108982eb bind-dnssec-doc-9.16.23-40.el9_8.12.noarch.rpm 1ec77a81e81e9554abf99c7567c35b7e089b70498c5316e7d53c69cd52a2b486 bind-chroot-9.16.23-40.el9_8.12.x86_64.rpm 5f79798ae66302f00741344625a036c678d51c01f1ac2eb9b553b8788c660c97 python3-bind-9.16.23-40.el9_8.12.noarch.rpm 6de8ca93f105a0fcc621d0d2acd4e1ab5ceacf73b6d0d7f23e383e5cc11a6e9c bind-utils-9.16.23-40.el9_8.12.x86_64.rpm 804329d3706e913aae706acda91dbdd1acd6dc5da9abf2126762183b14149cb1 bind-license-9.16.23-40.el9_8.12.noarch.rpm adff25d2af373ee9a778eaba779bd2711f04071d69e7f6da746953a6985a70b3 bind-9.16.23-40.el9_8.12.x86_64.rpm ce71cb710836e2748f96e00cb043b6a375c5b1773e3fa280993f2eb8c41baa63 bind-libs-9.16.23-40.el9_8.12.x86_64.rpm f84471154c15a06745e8d640d11ec9b3090d25649cf821eafe87008c6b729771 ALSA-2026:89746 Copyright 2026 AlmaLinux OS 0 1 Moderate

bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default bind9.18-9.18.29-14.el9_8.11.x86_64.rpm 5af5af408c68a811240ad57119c6ef1a86b2007d64125ed903326ddefbf5e422 bind9.18-chroot-9.18.29-14.el9_8.11.x86_64.rpm 5fdee720ceba97649a5566da1e082aaac7c08c9062f3056c2eca3e57334aa06f bind9.18-libs-9.18.29-14.el9_8.11.x86_64.rpm a6302dbf353e0a412e4ad89ebad0360193e8fff1cf0dda798f4366a4072e9e42 bind9.18-utils-9.18.29-14.el9_8.11.x86_64.rpm b3c9087d70c8aa07c9c22facbeb81dc631ece61f35249bf86cbad47d5a1f42b5 bind9.18-dnssec-utils-9.18.29-14.el9_8.11.x86_64.rpm e09fad3b5e548a2cfe406fc570dbf921e87bdc244fb685a8022fb94eec7bd119 ALSA-2026:89748 Copyright 2026 AlmaLinux OS 0 1 Important

libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453) * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206) * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default libreswan-4.15-11.el9_8.x86_64.rpm eceee4151791df0c86dc5bf1156335a8f8e023c34a8ac972c3c2049353cc92ef ALSA-2026:89749 Copyright 2026 AlmaLinux OS 0 1 Moderate

xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default xz-devel-5.2.5-8.el9_8.1.i686.rpm 3dfa42073791ec4dfd8e651e479a60fda1f9ff4f01f17357bbe360e5d945dad5 xz-devel-5.2.5-8.el9_8.1.x86_64.rpm aae9c97d10e0d0730909a9d26b263becce787452577b366f35f9da43f4f1911d xz-lzma-compat-5.2.5-8.el9_8.1.x86_64.rpm bb00700bfb853c12ef6e4cdd051c536151e96c7be8f722bb847adf0fb6fd87c5 ALSA-2026:89753 Copyright 2026 AlmaLinux OS 0 1 Moderate

freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506) * FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509) * FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505) * freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508) Bug Fix(es) and Enhancement(s): * Update freeipmi to 1.6.20 to fix two potential buffer overflows [almalinux-9.8.z] (JIRA:AlmaLinux-279523) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default freeipmi-ipmiseld-1.6.20-1.el9_8.x86_64.rpm 0914b792e9db6abdf3483f153ef342d01eaec97f8e15debfa0e0f2d78959a80e freeipmi-1.6.20-1.el9_8.i686.rpm 23ed1d5615654a34c0cdf04439767278a50f7c59656a63973c2d5e96572eec98 freeipmi-bmc-watchdog-1.6.20-1.el9_8.x86_64.rpm 7339a55a5ed10537a8613fa5d28821316f052a72c857b11a1c030061b5ad5bd6 freeipmi-1.6.20-1.el9_8.x86_64.rpm cc0f9decce9e2ec8c413bb0dcfd6b5a6dc70251e21c5739b08294e1b65e53873 freeipmi-ipmidetectd-1.6.20-1.el9_8.x86_64.rpm d752efb7fbb1e9986eab73b7c05af3ba04618877b7ed5f31da263300ea2a9637 ALSA-2026:90362 Copyright 2026 AlmaLinux OS 0 1 Important

podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default podman-5.8.2-8.el9_8.x86_64.rpm 1de508f8fdd252a61eda0d969fa8e432b001a763b9d28b933ef32c9196bb2836 podman-tests-5.8.2-8.el9_8.x86_64.rpm 64ac344e6c2aac47ec40ae5f531e2663844ecf7933e437b89030cf3f1f37e3bf podman-plugins-5.8.2-8.el9_8.x86_64.rpm 8d0379c14021df31b93cd1e72bcd4ac887533deaf5b52a5f5368147d81268c73 podman-remote-5.8.2-8.el9_8.x86_64.rpm 9797a44f0eea98e3f8abb1a452f387d5c056cd68d18ac1d51db9bdaf23331e9e podman-docker-5.8.2-8.el9_8.noarch.rpm bc4f09efc61f77cb445a98fbc3af42b74a7948fa155d0a5b118784d269058e15 ALSA-2026:90365 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Deal with race between UDP socket address change and rehash (CVE-2024-57974) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) * kernel: net/handshake: hand off the pinned file reference to accept_doit (CVE-2026-63979) * kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CVE-2026-72242) * kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) * kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CVE-2026-80824) * kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) * kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777) * kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262) * kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222) * kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320) Bug Fix(es) and Enhancement(s): * kernel panic at __crypto_xor+0x2 after a number of out-of-bounds read and use-after-free read (JIRA:AlmaLinux-257205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default kernel-devel-5.14.0-687.61.1.el9_8.x86_64.rpm 0d2b0af10134cede414b167cd13a1fab471eea9ccb37718c9c4853defa95c562 python3-perf-5.14.0-687.61.1.el9_8.x86_64.rpm 1e904ccb05be9fe6962a3801e6e72560c63bd2828c5f62011f07b91c9ce00cbd kernel-debug-devel-5.14.0-687.61.1.el9_8.x86_64.rpm 275972bb493a615a41d03ddba244b46c87826fa7a50b1ffcde023c258a4b76ec kernel-devel-matched-5.14.0-687.61.1.el9_8.x86_64.rpm 27b1c854427fef2cb2bd1063e100c04c9d5100b8b807300ebd92415978fe3154 kernel-headers-5.14.0-687.61.1.el9_8.x86_64.rpm 6199e5a58483d3bcdd1d91d16d0ce9ea9857e57f0da9f295af13ba21ef8613fc perf-5.14.0-687.61.1.el9_8.x86_64.rpm a3e8df141bc217aba913f1738c538a4d8ef14232c6343a11c43dd116913a7132 rtla-5.14.0-687.61.1.el9_8.x86_64.rpm b1363db7a540da34e4379fd7174dc70cb1d153313228db2d0dc6ec28d7080353 kernel-doc-5.14.0-687.61.1.el9_8.noarch.rpm ba5125771b0f2a3d3916c7e263ca579f0a14236f3aa9b11e48708e7f5483e961 kernel-debug-devel-matched-5.14.0-687.61.1.el9_8.x86_64.rpm cacca2a334420eddfbd76e7f6f767ec4b386015d0a5939b2d3e06712e13c0130 rv-5.14.0-687.61.1.el9_8.x86_64.rpm f1a96e449d1ef03377091613b75acdda6f6dc41d4521f1b975e31a0543f38c2a ALSA-2026:90424 Copyright 2026 AlmaLinux OS 0 1 Important

buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages (CVE-2026-56855) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default buildah-1.43.4-2.el9_8.x86_64.rpm 6f4579e8604c6e950a2dff3beee37dcf18609a8c1f4067e9fad4362587778d20 buildah-tests-1.43.4-2.el9_8.x86_64.rpm 842d182c83c074dcba876d190a7ce659c2bd077036d1fa51180cf7cfadcdc9c8 ALSA-2026:9044 Copyright 2026 AlmaLinux OS 0 1 Important

osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default osbuild-composer-149-5.el9_7.alma.3.x86_64.rpm 8225a315b90e53a1d079b866cee7b359491a834af6722f3d941c5aa1291888d1 osbuild-composer-core-149-5.el9_7.alma.3.x86_64.rpm a9b359db5fcf161b318baf3bc17b5a14a66af47480b23643b3dda7f6e92c7b72 osbuild-composer-worker-149-5.el9_7.alma.3.x86_64.rpm e2a89e4d6e65eb617229956407f9223444edf99fc7affa9c8199175099b3bae1 ALSA-2026:90462 Copyright 2026 AlmaLinux OS 0 1 Important

skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default skopeo-tests-1.22.2-9.el9_8.x86_64.rpm 3b9b80bb246d19d88043eee38ebfa812bbdbf767d81e7b97df85f30f5eec6174 skopeo-1.22.2-9.el9_8.x86_64.rpm 64408670b88834fcb1b65fadb2c9c7d6d02e8fcc158246e7e4332804c6e19636 ALSA-2026:90495 Copyright 2026 AlmaLinux OS 0 1 Important

brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default brotli-1.0.9-10.el9_8.1.x86_64.rpm 26e70f2aeab74586c5584e5c61f274d3c23fbc6e360f21254797a49a75624e6b python3-brotli-1.0.9-10.el9_8.1.x86_64.rpm 2e3ffb79550b668537363631f53d950505db2c5d62a5ff605750f5e88724f591 brotli-devel-1.0.9-10.el9_8.1.x86_64.rpm 4317c76d06bba6dd84c22e654b1b9d88e88626dac9b456e62a668a8f834eb145 brotli-1.0.9-10.el9_8.1.i686.rpm 8a206a1585b6d223006ab36730cac682d6310264e623d8cbf0f7115414d92042 brotli-devel-1.0.9-10.el9_8.1.i686.rpm e36844e355757e231f1c91f7e3a51c8702a2bb7c28295279cc4f08ccd9ee2375 ALSA-2026:9683 Copyright 2026 AlmaLinux OS 0 1 Important

java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance key generation (CVE-2026-34268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default java-1.8.0-openjdk-devel-1.8.0.492.b09-2.el9.alma.1.x86_64.rpm 53abc0408774efcd3e6d7cd30cd91538a2225e8ebd922e8de348ce2adb12e3bb java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.x86_64.rpm 58d838b6e4ea4fd2fcbfee3dcd136f55132ed0feaabf56aa5d936e55a04b55e9 java-1.8.0-openjdk-src-1.8.0.492.b09-2.el9.alma.1.x86_64.rpm 8f3e59b2077979c7372b75595535606ef7e48c5e23d2150887d9db8ced2c81c5 java-1.8.0-openjdk-demo-1.8.0.492.b09-2.el9.alma.1.x86_64.rpm 9c6c980b6bfbab2e753a917a4c32b19f7ab1c99a8909446574887309b9caef5c java-1.8.0-openjdk-javadoc-zip-1.8.0.492.b09-2.el9.alma.1.noarch.rpm dc79cdf7d90f68390010e0242c192dc05a92419e6943c16be514d56de4c5e322 java-1.8.0-openjdk-javadoc-1.8.0.492.b09-2.el9.alma.1.noarch.rpm f097a508a6d3cac0894d895d61163ea40cc422518b3b44b9859c670a0cc3640b java-1.8.0-openjdk-headless-1.8.0.492.b09-2.el9.alma.1.x86_64.rpm f9c69ce58f2f7f0648f99e6444c70a5cf833c24bf72858c1bf7ac7b3745560d1 ALSA-2026:9686 Copyright 2026 AlmaLinux OS 0 1 Important

java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance TLS connection handling (CVE-2026-34282) * JDK: Enhance key generation (CVE-2026-34268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default java-17-openjdk-headless-17.0.19.0.10-2.el9.alma.1.x86_64.rpm 3f89ad63a6d1ce2f60947860580a2cc83b3e70a65993ed27a8e1aef78c1eea54 java-17-openjdk-javadoc-17.0.19.0.10-2.el9.alma.1.x86_64.rpm 41504b8f9353a45bd3301cf8f2057fa5a929e7d2f56056818012c32591ce26a5 java-17-openjdk-src-17.0.19.0.10-2.el9.alma.1.x86_64.rpm 4666704d749f2fa3cbe3d488e2d1a130072571d91033cd74bd51e428b8a0c055 java-17-openjdk-17.0.19.0.10-2.el9.alma.1.x86_64.rpm 5ec6ff06e13df52086856bd1ffa72bf988de6e08a813594d8644ed139b67b304 java-17-openjdk-devel-17.0.19.0.10-2.el9.alma.1.x86_64.rpm bb14b8921930a6cde01ed04cc7616872595f31e94ad208eda5e6464ebb80a708 java-17-openjdk-javadoc-zip-17.0.19.0.10-2.el9.alma.1.x86_64.rpm d73bc6174da714d30e28ad862d110a0866cf314c3cc2d2ea3d0d41b926df0b5c java-17-openjdk-jmods-17.0.19.0.10-2.el9.alma.1.x86_64.rpm ded18c5dddf975c97b80ba2f5003d3513624fea6adde6adf80e10ae1b6f2ad92 java-17-openjdk-demo-17.0.19.0.10-2.el9.alma.1.x86_64.rpm e2f008217bd05936d9329570cc4f64af896fbe65adb2d1f575090436ed48bb8f java-17-openjdk-static-libs-17.0.19.0.10-2.el9.alma.1.x86_64.rpm fd2133ea4d8378bd97f5a399e32c1fb2938deb2092724945c83759a2f7f3ee70 ALSA-2026:9689 Copyright 2026 AlmaLinux OS 0 1 Important

java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance TLS connection handling (CVE-2026-34282) * JDK: Enhance key generation (CVE-2026-34268) Bug Fix(es): * When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default java-21-openjdk-src-21.0.11.0.10-2.el9.alma.1.x86_64.rpm 00f18e9769e5265721510e3e22cd114c9466d15f87e81ad275569864d298ed7a java-21-openjdk-static-libs-21.0.11.0.10-2.el9.alma.1.x86_64.rpm 18c5146487e061cddb56659e55dc19dbad535dc5cc2089cff4cd023ebe3272b9 java-21-openjdk-jmods-21.0.11.0.10-2.el9.alma.1.x86_64.rpm 218cbdc5a30cee1b8d71668af93589ed107c4a7619775dd51afe9ba253cdbafe java-21-openjdk-headless-21.0.11.0.10-2.el9.alma.1.x86_64.rpm 3efbaa11eded834e352bf14450418ce05e4d839065a6a3a330747b3105062547 java-21-openjdk-demo-21.0.11.0.10-2.el9.alma.1.x86_64.rpm 5355a6b082891e532dc6e787b107ed57a46f3067dcfa65b8e528582ab1e4e3f4 java-21-openjdk-21.0.11.0.10-2.el9.alma.1.x86_64.rpm 84ad802f98026f347d7a726d762fee88bf466a5badbea4f7d1976cd423bd3d0b java-21-openjdk-devel-21.0.11.0.10-2.el9.alma.1.x86_64.rpm adc102c70233038c88db5f53518523acf059048d1ffbf03ac0f735562c25d907 java-21-openjdk-javadoc-zip-21.0.11.0.10-2.el9.alma.1.x86_64.rpm c16edd57559b9a2a78d232347877529df659feca5152841cb03b3fb2515018bf java-21-openjdk-javadoc-21.0.11.0.10-2.el9.alma.1.x86_64.rpm dcfb6e9f30c8713379483c874d8925a021e46f4d38ac52c37195884dc4ad88e8 ALSA-2026:9692 Copyright 2026 AlmaLinux OS 0 1 Important

webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43213) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43214) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43457) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43511) * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-46299) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20608) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20635) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20636) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20644) * webkitgtk: A remote attacker may be able to cause a denial-of-service (CVE-2026-20652) * webkitgtk: A website may be able to track users through Safari web extensions (CVE-2026-20676) * webkitgtk: Processing maliciously crafted web content may bypass Same Origin Policy (CVE-2026-20643) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20664) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-20665) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2026-20691) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28857) * webkitgtk: A malicious website may be able to process restricted web content outside the sandbox (CVE-2026-28859) * webkitgtk: Visiting a maliciously crafted website may lead to a cross-site scripting attack (CVE-2026-28871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default webkit2gtk3-devel-2.52.3-0.el9_7.1.i686.rpm 1d82252991b31327eb0a4d9fd3b9ada1baea1c9ba1b12435b6ebd98898163259 webkit2gtk3-jsc-devel-2.52.3-0.el9_7.1.x86_64.rpm 2e78b45fa82367bfccb940f6e9206aba9088bd1533638979b540c92e989d4c1f webkit2gtk3-jsc-2.52.3-0.el9_7.1.i686.rpm 6ed4de7d13c49ccb773bd5e279862b95a6fed121eb2241b17fd76472c4907556 webkit2gtk3-devel-2.52.3-0.el9_7.1.x86_64.rpm 7e92cad12c8ddd1d834dad2d8abb6b41ecb963f310b2fa49b2c8825173e3991a webkit2gtk3-jsc-devel-2.52.3-0.el9_7.1.i686.rpm c5605330268710045c0a4ad4334c3ac33362047f5ee2f30017426d1a31b9e680 webkit2gtk3-2.52.3-0.el9_7.1.i686.rpm ca6bc7bb285e79597c11938e5710a6a4c3e5f74886b527d157abd1dc11b01a07 webkit2gtk3-2.52.3-0.el9_7.1.x86_64.rpm d315ac5775e8e4785ebd023b910a7aa278fd1bba74161b0922d2e7b9e2c47481 webkit2gtk3-jsc-2.52.3-0.el9_7.1.x86_64.rpm f8b0386e50ca8d80b713ab47f71ea55490dedbe8347ee540a491500138169fa1 ALSA-2026:9693 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improved Arena allocations (CVE-2026-22008) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance TLS connection handling (CVE-2026-34282) * JDK: Enhance key generation (CVE-2026-34268) This release also updates a number of third-party libraries included in the JDK. The libraries themselves are affected by the following CVEs, but this is not a statement that the JDK itself is affected: * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) Bug Fix(es): * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169939, AlmaLinux-169937) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default java-25-openjdk-javadoc-zip-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 1e0790dd901fc09e9abd47f494af4e968843e9d9f7e35bbb1040685a4110e45b java-25-openjdk-devel-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 460bdc6b78c30e7dda5c707bb88c7dd02aa8963d4ecb1d4c217b3537eb9f5642 java-25-openjdk-javadoc-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 5fa11f98e27aaa28482705e9909d613bb347d836fdbdd2d6ae564564cf94e074 java-25-openjdk-static-libs-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 7078303dcf424915c0096cf41c72d16ced51dc75e98e7b1bc73f29a7aa56d57c java-25-openjdk-25.0.3.0.9-1.el9.alma.1.x86_64.rpm 849a928b8c0ab9f169e683378454ce6c415fa56acf3b1786697797a20fe3db5f java-25-openjdk-src-25.0.3.0.9-1.el9.alma.1.x86_64.rpm bf2c502b90787e098f8ee62a2d12d695ff105f5ea0ecef11db8a8cdaa0a753d9 java-25-openjdk-demo-25.0.3.0.9-1.el9.alma.1.x86_64.rpm c08c5198638527be7f6ad998f6f003bbbb198d45cb034a98f5422eae54f690a2 java-25-openjdk-headless-25.0.3.0.9-1.el9.alma.1.x86_64.rpm c3d345384e1099398a717bb5916504c59b87e4c4f73eebac9f9284f45a9c9992 java-25-openjdk-jmods-25.0.3.0.9-1.el9.alma.1.x86_64.rpm c5c451027c9d26eb8bdd3ad9915dce83b82bd8a2d1faab894be43c338af1dd83 java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.x86_64.rpm e6dba6acc2fa10a816ac97ab79cd965d9644a7211d354e9ae33090e64e8c4af3 ALSA-2026:A002 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-perf-5.14.0-611.49.2.el9_7.x86_64.rpm 16beacdb13937ba59fbe3583ff6348954ba6ee90a2db652eb0d8a8cc60b688c1 rv-5.14.0-611.49.2.el9_7.x86_64.rpm 1e5e748da5df83b0ac6b66458451c8889d70211e0eb5a90afb4b7334b8feeaa7 kernel-devel-matched-5.14.0-611.49.2.el9_7.x86_64.rpm 207036f8e99c02f456269dd5e67bcf0c8f154554b894d1a04f377ccfa71aa719 kernel-debug-devel-5.14.0-611.49.2.el9_7.x86_64.rpm 3306fde4c6732556ed68c5bca785095aadedf5c4e1fa71c7efabbb00ff21e457 perf-5.14.0-611.49.2.el9_7.x86_64.rpm 49f3337005278ae588957f48066fd0baa8e8c1c7a2d9cd53aa533b4b66d27779 kernel-devel-5.14.0-611.49.2.el9_7.x86_64.rpm 8c0c66f6625fbc14a28b86ca06a9a9ca3e310bdd07ece5a340aadca728145179 kernel-headers-5.14.0-611.49.2.el9_7.x86_64.rpm a88c62c4c043f8915f855042abcf850e5e91258d764605c623f48cfb90891627 kernel-doc-5.14.0-611.49.2.el9_7.noarch.rpm c459d496f39361e45ef828c9e9d77a285a7e104b37109fcdf35a4c3a543e864e kernel-debug-devel-matched-5.14.0-611.49.2.el9_7.x86_64.rpm e4bf0868cdbe0f09953e9aa759d8aa06ba81b61121a787a150cf3b412d40d960 rtla-5.14.0-611.49.2.el9_7.x86_64.rpm fd74cd18f016bcdddcc8a21f7d58d20ce43c9a116dfe95f8aa9258396794c0fd ALSA-2026:A005 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default kernel-debug-devel-5.14.0-611.54.3.el9_7.x86_64.rpm 160134e318de20a5131f4d4cf511e2778e18b67802bc7ed75df65118c0dacd74 kernel-debug-devel-matched-5.14.0-611.54.3.el9_7.x86_64.rpm 25f6923e02b3389f307e562bdb225a756af6367330e9b22dd1102ba908e5470d rv-5.14.0-611.54.3.el9_7.x86_64.rpm 317c08eb608c9a0540a518043ca4cc1157c564e1d9952e99b4208a42b4369741 kernel-devel-matched-5.14.0-611.54.3.el9_7.x86_64.rpm 3dead127a358b42638a979d993f344988723d9a4212d61ab460916f99860cd1f kernel-devel-5.14.0-611.54.3.el9_7.x86_64.rpm 70a9c73193f23be4a68fc033d0d5f426beb57991a0091815e1cfc5578ccd10cb perf-5.14.0-611.54.3.el9_7.x86_64.rpm 8149db44e219fae497ad40c22470cbb8c50d87a517741204a90318ccea9cefa9 kernel-headers-5.14.0-611.54.3.el9_7.x86_64.rpm 8221c2ce2e1e4c6e38600d3784cd8d29e129332880b21804da16871988c8310c rtla-5.14.0-611.54.3.el9_7.x86_64.rpm 8b63dfa1553f8e0f0b0e7811986c308d4fc4d21d1979784ec216985a90edfcab kernel-doc-5.14.0-611.54.3.el9_7.noarch.rpm c857e448eeed243d5021cfe724fc78eda51a21323968e1a5cd6b8cbf5c5b567e python3-perf-5.14.0-611.54.3.el9_7.x86_64.rpm ff9ee1685da98300d861e479bcbdecb73f68d40418627b7c3757d79c0c35a55e ALSA-2026:A009 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300) * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_7_default python3-perf-5.14.0-611.54.6.el9_7.x86_64.rpm 22a91d575a3327cbce43c815dd729427547cf0125ce6cbb33bb5d5c9d0edfe0a kernel-debug-devel-5.14.0-611.54.6.el9_7.x86_64.rpm 3f299cd6510234129dc67dfd1ae7289bc2e2d93f54783f0ad05d8b07cac32203 rv-5.14.0-611.54.6.el9_7.x86_64.rpm 7815279e673de689104bfbc153c86cfee402e3c5d3998167099c2ed591e2a60b rtla-5.14.0-611.54.6.el9_7.x86_64.rpm 7d8d1a5cc55171ca8cc820d8510c999f005fbd7d99d152998ad647401ed4fc1a kernel-debug-devel-matched-5.14.0-611.54.6.el9_7.x86_64.rpm 95cd44e6c35c0438d952ba501d73056d41dc3a993e450c6ba19807cbe992e26a perf-5.14.0-611.54.6.el9_7.x86_64.rpm 96bca1c42e38bb0277af87a835932a80375ac3207571ff29d42dd6e899c2f747 kernel-headers-5.14.0-611.54.6.el9_7.x86_64.rpm 974ea14a6b702e75d177872a392420dbbca3dfc63987462db1122d6572da0d7f kernel-devel-matched-5.14.0-611.54.6.el9_7.x86_64.rpm b422eb69cc82f9a70a8b3d38a6a3bd69f99f1a957a683c8bc05340a34cdf93b7 kernel-doc-5.14.0-611.54.6.el9_7.noarch.rpm d12fc93c820c8045347f2e74050b9a57b33e69f1d8eebdb53f3a74072c2ede09 kernel-devel-5.14.0-611.54.6.el9_7.x86_64.rpm d88ffcfb671b479dc447cd1f29091551659afdcb1aa87edd8186f8a5ab57f805 ALSA-2026:A014 Copyright 2026 AlmaLinux OS 0 1 Important

php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-appstream-rpms__9_8_default php-pdo-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 04b2ed03674d2435a049dce37cc6691b24dc2ae0644be33bc34bd33111e1ee35 php-pgsql-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 1ce9db4e4a791a0b90f65297d68ce03e9a95e6170350e459ef0c5f0368255f71 php-dba-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 1e77db2670140872d3ee0b772e33c23b9b695fa6c045e2b9256df6caf03cfd7f php-mysqlnd-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 1ebe8a8603500e5e21268663f93e09cd70f4c69d87674c8a54405120c2196cf5 php-process-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 4d2c5588ca910405e0782f73b223cf54fc5e3f3da6dc3700720527d815406491 php-snmp-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 5a33e9201d0db75e38f04b9a9ec30e22dea97d8ee4374e8fe743eb11877ed1f1 php-opcache-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 5c76fe477e0d42c481d625820501c30fb3eeb939a4ebc1cc73afad57ccc69ea0 php-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 6e863fe37075c2b2d4034105f8c9ceb644fd0a7e6591dff3415dd1aecd2ef2e9 php-gmp-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 79fd8cb1073fe6b6d492d0838f3fc20c30999cca9128e51455342126cfb88c77 php-odbc-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 80678245c58d5fdd5de3e1b1320330c567d339c78ebd1ad425981493064c17a1 php-enchant-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 827ba52fabcb90f56a6cec3def3c79f7cfdad883318913fcd40e26d00f8cab20 php-ldap-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 8c968fff47a4f98a9b423c3668823e582018d5fd93465c23d29a496a9d25bb62 php-mbstring-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 942726129ef34dfc4a36e76980157f6a05a6fa42c379496c8cc738fc207eaa70 php-xml-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 9930d197d48decb132220d36d034840a0b1c979a58352621a9d764148cd216cd php-cli-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm 9fc57cbb4a0ee57ce3a5ba00340159b3b95b2c601d2c0fd68976a3bda941bec9 php-devel-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm a45db680ad5c0cc1f1fd91a4153fd1196849d42bc0760a6187de33b8e00d39eb php-gd-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm aba014362c32d331f7b67992bbe30a49aa856e436408814c3f170be8d0c984b8 php-ffi-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm bc77f6c2efc23dddd4e4c5ed31b40084114b01159e361d35808d73b93bba63c0 php-dbg-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm c283b76a3cc626aeee30c31fd88694f1d9ab6821f54bb8b402b78da7e22da7c3 php-fpm-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm c48e5cdb255557f57960546d07dfb7ed792909564c04a8e0cb058e3cfec9cc4a php-intl-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm ce67f39f9da4a45abeca3405e86f46f045e9d3f2510d31fd77d9a4aff1184c43 php-bcmath-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm dd46dbcbe0bd756f2e856a7a4414d00cfacf6b80b7b34374281cc00e87c6d655 php-embedded-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm ee7f78a7e2872d8b559dac183d6bfbf8ec42ba81e060cf0734791b90401bf74b php-common-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm f85b51dd05aea78faca31d1697b41173d5dbfd0920899eced12a203befa5da1a php-soap-8.1.32-1.module_el9.8.0+326+528679fc.alma.1.x86_64.rpm fcef67129f09fc7edaf723c2e534fab59ae0b2b292935a9d96c9041fe6c2475b